r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cdbad2434b7d127a4fc769807a9dc3e7
fa98cd9fc2309ab4423f33f683d17bdb17d76713
560cbbb751ab2884024da3b93fba6bc45c6434797dba72a98c05e7fc2bb94bc1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1"
Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4588
Expires: Sun, 27 Nov 2022 20:54:37 GMT
Date: Sun, 27 Nov 2022 19:38:09 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 64b2a23eab6e5ae8c010ec7242be930c
0673e4385ba01a5a245711bab96cafc34f765793
64751d193f7af72431e9689581faffcae1a30ff50ea425697b2b80ff61c87909
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5053
Cache-Control: max-age=145037
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:38:09 GMT
Etag: "63833c71-1d7"
Expires: Tue, 29 Nov 2022 11:55:26 GMT
Last-Modified: Sun, 27 Nov 2022 10:31:13 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 71f9c681a82440fd55e76c780a20e55d
3147768cfbcdd06e0c6e69684292e68e99917a80
5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7326
Expires: Sun, 27 Nov 2022 21:40:15 GMT
Date: Sun, 27 Nov 2022 19:38:09 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 27 Nov 2022 19:19:24 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1125
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: kSiu10GyviD+3HY04khPxiy6FYJTFBD0OSV/+QyuMnjkp7AIxJ07gMnnWcZleuhH4SqK0GHm+cs=
x-amz-request-id: K15470M3GFBREM7Q
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 27 Nov 2022 18:44:44 GMT
age: 3205
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 19:38:09 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 27 Nov 2022 19:08:54 GMT
cache-control: public,max-age=3600
age: 1755
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash a6fee11dfe1b88cd768a0ca3e2bd0c89
59cec9a44a4a92467678afe65f347f68641a2174
50870c499aae4d5dfd6df25a36cd04b6d185b66ef0590e46933984bf52e2483f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6549
Cache-Control: max-age=141472
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:38:09 GMT
Etag: "638328ac-1d7"
Expires: Tue, 29 Nov 2022 10:56:01 GMT
Last-Modified: Sun, 27 Nov 2022 09:06:52 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471
code.jquery.com/ui/1.11.4/themes/smoothness/jquery-ui.css
200 OK 8.1 kB URL HTTP/1.1 code.jquery.com/ui/1.11.4/themes/smoothness/jquery-ui.css
IP
File type ASCII text, with very long lines (2363)
Hash 6c82a49e7983d483c0d8a2693d66a17b
6d6deea9c1f9d0b1ded69cc2b82b07d4e8e60952
763ce5616013ac40d27502cb40d92589c5ce9e2a8034692666734ece10671326
GET /ui/1.11.4/themes/smoothness/jquery-ui.css HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 19:38:10 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 8056
Content-Type: text/css
Last-Modified: Wed, 16 Feb 2022 10:50:40 GMT
Accept-Ranges: bytes
Server: nginx
ETag: W/"620cd700-898c"
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
X-HW: 1669577890.dop204.sk1.t,1669577890.cds262.sk1.c
code.jquery.com/ui/1.11.4/jquery-ui.js
200 OK 114 kB URL HTTP/1.1 code.jquery.com/ui/1.11.4/jquery-ui.js
IP
File type ASCII text, with very long lines (547)
Size 114 kB (114093 bytes)
Hash 0e45b665669abd2d0dd45fed0e5f0199
d4167d336e4cd359a99daaf01006f59a5e8bc062
cec192e20cf22c995517ee84d3b5a4715f4ad3affb902436b3ee32456e309978
GET /ui/1.11.4/jquery-ui.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 19:38:10 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 114093
Content-Type: application/javascript; charset=utf-8
Last-Modified: Wed, 16 Feb 2022 10:50:40 GMT
Accept-Ranges: bytes
Server: nginx
ETag: W/"620cd700-72e44"
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
X-HW: 1669577890.dop014.sk1.t,1669577890.cds247.sk1.c
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0ee1d1a60ec1770ec3e880a25c257f5d
015b05feff63bdcf8fae4d1a8c0c83c923a2ca67
b6845619444a37f322c044933a44cf3fd283a18a54d03bad4f76a2ed8c2cbaf6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:38:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.nsfwyoutube.com/watch?v=U9KAVuA6_pU
200 OK 12 kB URL HTTP/1.1 www.nsfwyoutube.com/watch?v=U9KAVuA6_pU
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (485)
Hash c64f09c8ba1653d2b358d932e84ef709
e08bfd8b1a374f839d1f97a0f049e70f31f08376
bc9ee9978d3f6152567df5513112020eefd5747aa93fffe3ff35130bd903ed13
GET /watch?v=U9KAVuA6_pU HTTP/1.1
Host: www.nsfwyoutube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 19:38:09 GMT
Server: Apache
Cache-Control: no-cache, private
Set-Cookie: XSRF-TOKEN=eyJpdiI6ImFkT001eWZhXC9DY0VSb0J2Wkd5Q1pBPT0iLCJ2YWx1ZSI6IlRoVHBZQlpxaXVSU2hVWU14N3dzWDVLMkl1ZTdUeWRzZWpGaytOZ3V1U2lUb0gwTHBCZHNWTEduQ2lsRFNlTVgiLCJtYWMiOiI5ZjJjMWQ4NGNkYmRhMmI3NWViNWRiM2UxMDIzOWE0ODllMzk4YTc5OTkyOWRjZWFjZmM4ZTRiZTFlNDgxOWY1In0%3D; expires=Sun, 27-Nov-2022 21:38:09 GMT; Max-Age=7200; path=/
laravel_session=eyJpdiI6IjFGTUFSNVUzRElMOTRSSm9XK1FvTVE9PSIsInZhbHVlIjoibTZtRCs4TlwvXC9kV0lpMDlUTVhNTW83OW5Db2xTYXdcLzFMZnlmWG1OMjNOMzNoNGFud0h2TWVVU1VyWFFxblZVMCIsIm1hYyI6ImNkMTU2OGEzZmExMzZhYzA3ODVhNjY0NDEzMzczN2NlZGMwMDNkOWQwYTgxNmZlNWM0ZTdjYjM5ZGMxZTA1N2MifQ%3D%3D; expires=Sun, 27-Nov-2022 21:38:09 GMT; Max-Age=7200; path=/; httponly
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
www.googletagmanager.com/gtag/js?id=G-FX717H82MN
200 OK 77 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-FX717H82MN
IP
File type ASCII text, with very long lines (21484)
Hash f46dc2ea4733fcaf24a63a3b4aaed30c
f9c70667ebe32b6d9cc219fb646d4bfeb9668312
66848ae45990c0ba43de9514236d204dd897cf6edd504b8ad53bf8143ec87ef0
GET /gtag/js?id=G-FX717H82MN HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 27 Nov 2022 19:38:10 GMT
expires: Sun, 27 Nov 2022 19:38:10 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76635
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lkpmprksau.com/lv/esnk/1929074/code.js
200 OK 44 kB URL HTTP/1.1 lkpmprksau.com/lv/esnk/1929074/code.js
IP
File type ASCII text, with very long lines (65530)
Hash 9e81c6ed4a9dc862f542c2b9326fa081
a89584979deb48191f1a61e2ec984fdaf2d2120e
6f13b494aebf9ff40a1ce37062d6e07f72927123458ac58f174efd1b3f9715a2
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /lv/esnk/1929074/code.js HTTP/1.1
Host: lkpmprksau.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 19:38:10 GMT
Content-Type: application/javascript
Last-Modified: Tue, 15 Nov 2022 12:20:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63738419-1aaa0"
Timing-Allow-Origin: *
Accept-CH: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
Content-Encoding: gzip
vfyxjsclor.com/lv/esnk/1929073/code.js
200 OK 44 kB URL HTTP/1.1 vfyxjsclor.com/lv/esnk/1929073/code.js
IP
File type ASCII text, with very long lines (65530)
Hash 665cce44074b29fd53bf894ba7582e07
f927be88a7195c7146cb2e127411d59b6330746c
b735aceda2b7f7c35a3156b49f4353ed93cc4fd756a5b739489116a1d6564e18
Analyzer Verdict Alert quad9 Sinkholed
GET /lv/esnk/1929073/code.js HTTP/1.1
Host: vfyxjsclor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 19:38:10 GMT
Content-Type: application/javascript
Last-Modified: Tue, 15 Nov 2022 12:20:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63738419-1aaa0"
Timing-Allow-Origin: *
Accept-CH: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0ee1d1a60ec1770ec3e880a25c257f5d
015b05feff63bdcf8fae4d1a8c0c83c923a2ca67
b6845619444a37f322c044933a44cf3fd283a18a54d03bad4f76a2ed8c2cbaf6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:38:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.nsfwyoutube.com/css/portfolio-item.css
200 OK 1.3 kB URL HTTP/1.1 www.nsfwyoutube.com/css/portfolio-item.css
IP
Hash 52e5f25ba702ef11a174d24e5b3bbc30
db66e9f79e18c13463dba8ec687d6e3257328ee8
4c46a20a9c190d650f80aaab75a9760609324bb54e6f64af1a03327b5200159e
GET /css/portfolio-item.css HTTP/1.1
Host: www.nsfwyoutube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/watch?v=U9KAVuA6_pU
Cookie: XSRF-TOKEN=eyJpdiI6ImFkT001eWZhXC9DY0VSb0J2Wkd5Q1pBPT0iLCJ2YWx1ZSI6IlRoVHBZQlpxaXVSU2hVWU14N3dzWDVLMkl1ZTdUeWRzZWpGaytOZ3V1U2lUb0gwTHBCZHNWTEduQ2lsRFNlTVgiLCJtYWMiOiI5ZjJjMWQ4NGNkYmRhMmI3NWViNWRiM2UxMDIzOWE0ODllMzk4YTc5OTkyOWRjZWFjZmM4ZTRiZTFlNDgxOWY1In0%3D; laravel_session=eyJpdiI6IjFGTUFSNVUzRElMOTRSSm9XK1FvTVE9PSIsInZhbHVlIjoibTZtRCs4TlwvXC9kV0lpMDlUTVhNTW83OW5Db2xTYXdcLzFMZnlmWG1OMjNOMzNoNGFud0h2TWVVU1VyWFFxblZVMCIsIm1hYyI6ImNkMTU2OGEzZmExMzZhYzA3ODVhNjY0NDEzMzczN2NlZGMwMDNkOWQwYTgxNmZlNWM0ZTdjYjM5ZGMxZTA1N2MifQ%3D%3D
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 19:38:10 GMT
Server: Apache
Last-Modified: Fri, 18 Nov 2022 15:06:51 GMT
Accept-Ranges: bytes
Content-Length: 1270
Vary: User-Agent
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
www.nsfwyoutube.com/js/bootstrap.min.js
200 OK 36 kB URL HTTP/1.1 www.nsfwyoutube.com/js/bootstrap.min.js
IP
File type ASCII text, with very long lines (32405), with CRLF line terminators
Hash 834ca905c3251172e3c538cc0e043d77
313da686ebbe387064f2d1899c64ea562b81eb40
9a61a325508cd509f23cd31043b878957281f0a3603d8e7d40758c4a7c489d5a
GET /js/bootstrap.min.js HTTP/1.1
Host: www.nsfwyoutube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/watch?v=U9KAVuA6_pU
Cookie: XSRF-TOKEN=eyJpdiI6ImFkT001eWZhXC9DY0VSb0J2Wkd5Q1pBPT0iLCJ2YWx1ZSI6IlRoVHBZQlpxaXVSU2hVWU14N3dzWDVLMkl1ZTdUeWRzZWpGaytOZ3V1U2lUb0gwTHBCZHNWTEduQ2lsRFNlTVgiLCJtYWMiOiI5ZjJjMWQ4NGNkYmRhMmI3NWViNWRiM2UxMDIzOWE0ODllMzk4YTc5OTkyOWRjZWFjZmM4ZTRiZTFlNDgxOWY1In0%3D; laravel_session=eyJpdiI6IjFGTUFSNVUzRElMOTRSSm9XK1FvTVE9PSIsInZhbHVlIjoibTZtRCs4TlwvXC9kV0lpMDlUTVhNTW83OW5Db2xTYXdcLzFMZnlmWG1OMjNOMzNoNGFud0h2TWVVU1VyWFFxblZVMCIsIm1hYyI6ImNkMTU2OGEzZmExMzZhYzA3ODVhNjY0NDEzMzczN2NlZGMwMDNkOWQwYTgxNmZlNWM0ZTdjYjM5ZGMxZTA1N2MifQ%3D%3D
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 19:38:10 GMT
Server: Apache
Last-Modified: Sun, 29 Nov 2020 19:11:06 GMT
Accept-Ranges: bytes
Content-Length: 35458
Vary: User-Agent
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
www.nsfwyoutube.com/css/maincss.css
200 OK 16 kB URL HTTP/1.1 www.nsfwyoutube.com/css/maincss.css
IP
File type ASCII text, with CRLF line terminators
Hash 6a8b932c6b2018328063be22b0697622
bd573db4bf63e55bea9718a9c9569cdd756e8af2
957465aca61ddda88dec23429a896466d2cd6a59acdaba4526b7a9ee53be08da
GET /css/maincss.css HTTP/1.1
Host: www.nsfwyoutube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/watch?v=U9KAVuA6_pU
Cookie: XSRF-TOKEN=eyJpdiI6ImFkT001eWZhXC9DY0VSb0J2Wkd5Q1pBPT0iLCJ2YWx1ZSI6IlRoVHBZQlpxaXVSU2hVWU14N3dzWDVLMkl1ZTdUeWRzZWpGaytOZ3V1U2lUb0gwTHBCZHNWTEduQ2lsRFNlTVgiLCJtYWMiOiI5ZjJjMWQ4NGNkYmRhMmI3NWViNWRiM2UxMDIzOWE0ODllMzk4YTc5OTkyOWRjZWFjZmM4ZTRiZTFlNDgxOWY1In0%3D; laravel_session=eyJpdiI6IjFGTUFSNVUzRElMOTRSSm9XK1FvTVE9PSIsInZhbHVlIjoibTZtRCs4TlwvXC9kV0lpMDlUTVhNTW83OW5Db2xTYXdcLzFMZnlmWG1OMjNOMzNoNGFud0h2TWVVU1VyWFFxblZVMCIsIm1hYyI6ImNkMTU2OGEzZmExMzZhYzA3ODVhNjY0NDEzMzczN2NlZGMwMDNkOWQwYTgxNmZlNWM0ZTdjYjM5ZGMxZTA1N2MifQ%3D%3D
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 19:38:10 GMT
Server: Apache
Last-Modified: Sat, 05 Dec 2020 14:50:32 GMT
Accept-Ranges: bytes
Content-Length: 15799
Vary: User-Agent
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
www.nsfwyoutube.com/css/bootstrap.min.css
200 OK 117 kB URL HTTP/1.1 www.nsfwyoutube.com/css/bootstrap.min.css
IP
File type ASCII text, with very long lines (65367), with CRLF line terminators
Size 117 kB (117154 bytes)
Hash c3d736f4400b9451e591ff09606d7af0
d2333a926ae25bbd3056814f13fec0843468e49e
c8451f97c65f01678d0137afa161c420303896e68dd27460b385712e1cc82db1
GET /css/bootstrap.min.css HTTP/1.1
Host: www.nsfwyoutube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/watch?v=U9KAVuA6_pU
Cookie: XSRF-TOKEN=eyJpdiI6ImFkT001eWZhXC9DY0VSb0J2Wkd5Q1pBPT0iLCJ2YWx1ZSI6IlRoVHBZQlpxaXVSU2hVWU14N3dzWDVLMkl1ZTdUeWRzZWpGaytOZ3V1U2lUb0gwTHBCZHNWTEduQ2lsRFNlTVgiLCJtYWMiOiI5ZjJjMWQ4NGNkYmRhMmI3NWViNWRiM2UxMDIzOWE0ODllMzk4YTc5OTkyOWRjZWFjZmM4ZTRiZTFlNDgxOWY1In0%3D; laravel_session=eyJpdiI6IjFGTUFSNVUzRElMOTRSSm9XK1FvTVE9PSIsInZhbHVlIjoibTZtRCs4TlwvXC9kV0lpMDlUTVhNTW83OW5Db2xTYXdcLzFMZnlmWG1OMjNOMzNoNGFud0h2TWVVU1VyWFFxblZVMCIsIm1hYyI6ImNkMTU2OGEzZmExMzZhYzA3ODVhNjY0NDEzMzczN2NlZGMwMDNkOWQwYTgxNmZlNWM0ZTdjYjM5ZGMxZTA1N2MifQ%3D%3D
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 19:38:10 GMT
Server: Apache
Last-Modified: Sun, 29 Nov 2020 19:10:58 GMT
Accept-Ranges: bytes
Content-Length: 117154
Vary: User-Agent
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
www.nsfwyoutube.com/js/jquery-2.1.4.min.js
200 OK 84 kB URL HTTP/1.1 www.nsfwyoutube.com/js/jquery-2.1.4.min.js
IP
File type ASCII text, with very long lines (32025), with CRLF line terminators
Hash b0dc11d0a434aafe88908c7f33d71095
1327f754ff87d26bced46568543207e9df190aaa
de4b3c3d1dc2506b6693f0f98884e1dc074cda9d66cab39b7b48a115fdfc4c0f
GET /js/jquery-2.1.4.min.js HTTP/1.1
Host: www.nsfwyoutube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/watch?v=U9KAVuA6_pU
Cookie: XSRF-TOKEN=eyJpdiI6ImFkT001eWZhXC9DY0VSb0J2Wkd5Q1pBPT0iLCJ2YWx1ZSI6IlRoVHBZQlpxaXVSU2hVWU14N3dzWDVLMkl1ZTdUeWRzZWpGaytOZ3V1U2lUb0gwTHBCZHNWTEduQ2lsRFNlTVgiLCJtYWMiOiI5ZjJjMWQ4NGNkYmRhMmI3NWViNWRiM2UxMDIzOWE0ODllMzk4YTc5OTkyOWRjZWFjZmM4ZTRiZTFlNDgxOWY1In0%3D; laravel_session=eyJpdiI6IjFGTUFSNVUzRElMOTRSSm9XK1FvTVE9PSIsInZhbHVlIjoibTZtRCs4TlwvXC9kV0lpMDlUTVhNTW83OW5Db2xTYXdcLzFMZnlmWG1OMjNOMzNoNGFud0h2TWVVU1VyWFFxblZVMCIsIm1hYyI6ImNkMTU2OGEzZmExMzZhYzA3ODVhNjY0NDEzMzczN2NlZGMwMDNkOWQwYTgxNmZlNWM0ZTdjYjM5ZGMxZTA1N2MifQ%3D%3D
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 19:38:10 GMT
Server: Apache
Last-Modified: Sun, 29 Nov 2020 19:11:02 GMT
Accept-Ranges: bytes
Content-Length: 84349
Vary: User-Agent
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
sopalk.com/c/blivrte68sn6j3qbg8i5a.json
200 OK 1.3 kB URL HTTP/2 sopalk.com/c/blivrte68sn6j3qbg8i5a.json
IP
File type JSON data\012- , ASCII text, with very long lines (1324), with no line terminators
Hash 70e2adce7958beb8f4516e4e2112bc39
06e19acadf2a0fdd3c81ce926e77ea9a3a88769b
66ed8dd355293a1029189b0231784d98d962acce1c22386380809259bbaa8551
GET /c/blivrte68sn6j3qbg8i5a.json HTTP/1.1
Host: sopalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.nsfwyoutube.com/
Origin: http://www.nsfwyoutube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1324
last-modified: Fri, 25 Nov 2022 11:17:56 GMT
x-amz-version-id: jD7miRRjsdmb1j.EQIVmEfAVZwC46YGv
accept-ranges: bytes
server: AmazonS3
date: Sun, 27 Nov 2022 11:34:09 GMT
etag: "70e2adce7958beb8f4516e4e2112bc39"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RRULewHVBM8fpAFJdRVG25-X1ORPQpAE5ainruS8xLlNvZNvlH9L-A==
age: 29043
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
sopalk.com/c/bvjjlfbzuvkv0ywl6o0p5.json
200 OK 1.4 kB URL HTTP/2 sopalk.com/c/bvjjlfbzuvkv0ywl6o0p5.json
IP
File type JSON data\012- , ASCII text, with very long lines (1368), with no line terminators
Hash b0b6d1a8df14438b3308219ee53c350c
cbde4d56754757eb649974ccabb21aa03280186c
8cb908d92e0664937c5d6d79e3f3bab683edd893aef98c983ebbe3baf7225332
GET /c/bvjjlfbzuvkv0ywl6o0p5.json HTTP/1.1
Host: sopalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.nsfwyoutube.com/
Origin: http://www.nsfwyoutube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1368
last-modified: Fri, 25 Nov 2022 11:18:00 GMT
x-amz-version-id: NmRlZ1f1jekoBI6mvj0PHMk2v5E5c9WP
accept-ranges: bytes
server: AmazonS3
date: Sun, 27 Nov 2022 05:06:13 GMT
etag: "b0b6d1a8df14438b3308219ee53c350c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AeeT2X5jH2D1kbAMCqpugF0Gnw562uF82_BrveRM78Qie_Aw4ICSwg==
age: 52319
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
www.nsfwyoutube.com/images/_youtube.gif
200 OK 1.5 kB URL HTTP/1.1 www.nsfwyoutube.com/images/_youtube.gif
IP
File type GIF image data, version 89a, 278 x 38\012- data
Hash a5dc3ad4ad094a2cc5a1afb57365102f
60a816bca1b43e4b9e396ddaf908809c636b6b9c
206a915830286238f80b468e8983cc3dded7d8cdb4f722a066111a4bc43e87bc
GET /images/_youtube.gif HTTP/1.1
Host: www.nsfwyoutube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/watch?v=U9KAVuA6_pU
Cookie: XSRF-TOKEN=eyJpdiI6ImFkT001eWZhXC9DY0VSb0J2Wkd5Q1pBPT0iLCJ2YWx1ZSI6IlRoVHBZQlpxaXVSU2hVWU14N3dzWDVLMkl1ZTdUeWRzZWpGaytOZ3V1U2lUb0gwTHBCZHNWTEduQ2lsRFNlTVgiLCJtYWMiOiI5ZjJjMWQ4NGNkYmRhMmI3NWViNWRiM2UxMDIzOWE0ODllMzk4YTc5OTkyOWRjZWFjZmM4ZTRiZTFlNDgxOWY1In0%3D; laravel_session=eyJpdiI6IjFGTUFSNVUzRElMOTRSSm9XK1FvTVE9PSIsInZhbHVlIjoibTZtRCs4TlwvXC9kV0lpMDlUTVhNTW83OW5Db2xTYXdcLzFMZnlmWG1OMjNOMzNoNGFud0h2TWVVU1VyWFFxblZVMCIsIm1hYyI6ImNkMTU2OGEzZmExMzZhYzA3ODVhNjY0NDEzMzczN2NlZGMwMDNkOWQwYTgxNmZlNWM0ZTdjYjM5ZGMxZTA1N2MifQ%3D%3D
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 19:38:10 GMT
Server: Apache
Last-Modified: Sun, 29 Nov 2020 19:11:08 GMT
Accept-Ranges: bytes
Content-Length: 1541
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/gif
www.nsfwyoutube.com/images/_nsfwyoutube.gif
200 OK 1.6 kB URL HTTP/1.1 www.nsfwyoutube.com/images/_nsfwyoutube.gif
IP
File type GIF image data, version 89a, 278 x 38\012- data
Hash 3d6ed86d90d0432d53ba64799557c150
4610bfdb09433bd7ad4f74d1cf4efbfef742cf3d
e9cce4ec2aacdf789cf3b7e45d1ad299cff2f18a10af401cb0078522fabf3f70
GET /images/_nsfwyoutube.gif HTTP/1.1
Host: www.nsfwyoutube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/watch?v=U9KAVuA6_pU
Cookie: XSRF-TOKEN=eyJpdiI6ImFkT001eWZhXC9DY0VSb0J2Wkd5Q1pBPT0iLCJ2YWx1ZSI6IlRoVHBZQlpxaXVSU2hVWU14N3dzWDVLMkl1ZTdUeWRzZWpGaytOZ3V1U2lUb0gwTHBCZHNWTEduQ2lsRFNlTVgiLCJtYWMiOiI5ZjJjMWQ4NGNkYmRhMmI3NWViNWRiM2UxMDIzOWE0ODllMzk4YTc5OTkyOWRjZWFjZmM4ZTRiZTFlNDgxOWY1In0%3D; laravel_session=eyJpdiI6IjFGTUFSNVUzRElMOTRSSm9XK1FvTVE9PSIsInZhbHVlIjoibTZtRCs4TlwvXC9kV0lpMDlUTVhNTW83OW5Db2xTYXdcLzFMZnlmWG1OMjNOMzNoNGFud0h2TWVVU1VyWFFxblZVMCIsIm1hYyI6ImNkMTU2OGEzZmExMzZhYzA3ODVhNjY0NDEzMzczN2NlZGMwMDNkOWQwYTgxNmZlNWM0ZTdjYjM5ZGMxZTA1N2MifQ%3D%3D
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 19:38:10 GMT
Server: Apache
Last-Modified: Sun, 29 Nov 2020 19:11:08 GMT
Accept-Ranges: bytes
Content-Length: 1585
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/gif
sopalk.com/t.js?i=blivrte68sn6j3qbg8i5a&cb=0831351669577890531
200 OK 33 kB URL HTTP/2 sopalk.com/t.js?i=blivrte68sn6j3qbg8i5a&cb=0831351669577890531
IP
Hash dfe23f64f96698651a75295ba154f375
2cd1c2fe7bc32990dc913a25095c82170e322af3
895790010e07491b6170e73d256ebdb7382a124d1c3d940a2254e44a207797ea
GET /t.js?i=blivrte68sn6j3qbg8i5a&cb=0831351669577890531 HTTP/1.1
Host: sopalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 11 Nov 2022 10:14:17 GMT
x-amz-version-id: _w3ae0RYCGBlDTPjQPIQB8LKoj64xOVc
server: AmazonS3
content-encoding: gzip
date: Sun, 27 Nov 2022 16:28:28 GMT
etag: W/"57c945f3c1feba973398debac47b1341"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lELGVE6HgWYzZ75h-uXizR5m-w27D8_lZ0qXk1_iMGL1dj7rAOsVSA==
age: 11386
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
i.ytimg.com/vi/U9KAVuA6_pU/hqdefault.jpg
200 OK 20 kB URL HTTP/1.1 i.ytimg.com/vi/U9KAVuA6_pU/hqdefault.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3\012- data
Hash 623e323f82b57a421778cd0e32f9b5ac
2554b278e833f5ebf8fbbdc1e74ce5b4ca2f84ae
80a4032364b318958add718a7694655c9466243a180ce43de3b904ac22b5c647
GET /vi/U9KAVuA6_pU/hqdefault.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
Timing-Allow-Origin: *
Content-Length: 20138
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sun, 27 Nov 2022 19:38:11 GMT
Expires: Sun, 27 Nov 2022 21:38:11 GMT
Cache-Control: public, max-age=7200
ETag: "1456002245"
Content-Type: image/jpeg
Age: 0
cdn.bncloudfl.com/bn/3ba/597/e3c/3ba597e3c9a0b7db96cca2f992a2c447bee8c220.gif
200 OK 13 kB URL HTTP/2 cdn.bncloudfl.com/bn/3ba/597/e3c/3ba597e3c9a0b7db96cca2f992a2c447bee8c220.gif
IP
File type GIF image data, version 89a, 300 x 100\012- data
Hash d53e26ad181d72b32f0cb5a31add46fb
1761a4cbec8cfcfa6d2f613a1b2d2c6329f1328d
88092a71c5d1b72a29c4790c5111c6783ac7548e316d332e8530e0194444504c
GET /bn/3ba/597/e3c/3ba597e3c9a0b7db96cca2f992a2c447bee8c220.gif HTTP/1.1
Host: cdn.bncloudfl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:11 GMT
content-type: image/gif
content-length: 12999
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
cache-control: max-age=432000
cf-bgj: imgq:100,h2pri
cf-polished: origSize=13660, status=webp_bigger
etag: f15c3998431758d68fdec94dc78a18a8
expires: Sun, 27 Nov 2022 20:57:24 GMT
last-modified: Mon, 01 Aug 2022 08:24:06 GMT
x-openstack-request-id: tx180a131e00fc45849b3ff-0062e78e8d
x-proxy-cache: HIT
x-timestamp: 1659342245.90988
x-trans-id: tx180a131e00fc45849b3ff-0062e78e8d
cf-cache-status: HIT
age: 168047
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 770d529bcc8db511-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.bncloudfl.com/bn/42b/135/b4d/42b135b4dac0f247c51e423db1cb39201a977703.gif
200 OK 12 kB URL HTTP/2 cdn.bncloudfl.com/bn/42b/135/b4d/42b135b4dac0f247c51e423db1cb39201a977703.gif
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 029d051d35dac48e95ba55fd6fd77d40
2b14dcd5ac933ee4aa23bbf22a3e3a3fcd8094a1
ec811ecfbd9b8c4d00bfb1fff1527d6852aa5909bd34eb4cbb6265bbcfb29ea4
GET /bn/42b/135/b4d/42b135b4dac0f247c51e423db1cb39201a977703.gif HTTP/1.1
Host: cdn.bncloudfl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:11 GMT
content-type: image/webp
content-length: 11772
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
cache-control: max-age=432000
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=gif, origSize=20750
content-disposition: inline; filename="42b135b4dac0f247c51e423db1cb39201a977703.webp"
etag: 89524b37d5c83328d1e0e78063c947cc
expires: Mon, 28 Nov 2022 15:33:52 GMT
last-modified: Mon, 01 Aug 2022 10:13:46 GMT
vary: Accept
x-openstack-request-id: tx77736519b4f749bea4f07-0062e7aa6a
x-proxy-cache: HIT
x-timestamp: 1659348825.19763
x-trans-id: tx77736519b4f749bea4f07-0062e7aa6a
cf-cache-status: HIT
age: 101059
accept-ranges: bytes
access-control-allow-origin: *
server: cloudflare
cf-ray: 770d529bbc74b511-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
i.imgur.com/TxzC70f.png
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /TxzC70f.png HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Retry-After: 0
Location: https://i.imgur.com/TxzC70f.png
Accept-Ranges: bytes
Date: Sun, 27 Nov 2022 19:38:11 GMT
X-Served-By: cache-bma1670-BMA
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1669577891.175215,VS0,VE0
Strict-Transport-Security: max-age=300
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0
www.nsfwyoutube.com/images/banners/oprah-everyone-gets.jpg
200 OK 15 kB URL HTTP/1.1 www.nsfwyoutube.com/images/banners/oprah-everyone-gets.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x250, components 3\012- data
Hash 84b2a134575d9c91961c2095d0d60342
29d29eb57494f542eb3afc3adc39e8953ca9b2ab
6e15c64ddbb01ed50ebf643496980f90905c51a470bec35a9842fba0ed39d4e7
GET /images/banners/oprah-everyone-gets.jpg HTTP/1.1
Host: www.nsfwyoutube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/watch?v=U9KAVuA6_pU
Cookie: XSRF-TOKEN=eyJpdiI6ImFkT001eWZhXC9DY0VSb0J2Wkd5Q1pBPT0iLCJ2YWx1ZSI6IlRoVHBZQlpxaXVSU2hVWU14N3dzWDVLMkl1ZTdUeWRzZWpGaytOZ3V1U2lUb0gwTHBCZHNWTEduQ2lsRFNlTVgiLCJtYWMiOiI5ZjJjMWQ4NGNkYmRhMmI3NWViNWRiM2UxMDIzOWE0ODllMzk4YTc5OTkyOWRjZWFjZmM4ZTRiZTFlNDgxOWY1In0%3D; laravel_session=eyJpdiI6IjFGTUFSNVUzRElMOTRSSm9XK1FvTVE9PSIsInZhbHVlIjoibTZtRCs4TlwvXC9kV0lpMDlUTVhNTW83OW5Db2xTYXdcLzFMZnlmWG1OMjNOMzNoNGFud0h2TWVVU1VyWFFxblZVMCIsIm1hYyI6ImNkMTU2OGEzZmExMzZhYzA3ODVhNjY0NDEzMzczN2NlZGMwMDNkOWQwYTgxNmZlNWM0ZTdjYjM5ZGMxZTA1N2MifQ%3D%3D
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 19:38:10 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 05:06:51 GMT
Accept-Ranges: bytes
Content-Length: 14979
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
ocsp.digicert.com/
200 OK 278 B IP
Hash 901481e32ff27dceb9cdcabc6cf7f05f
7ffe3e5a16798c784ab206802043907621dedacd
294eba065c23878e97de124873ceed2921f5aa6522230b6a9dcdbaa37084bd66
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5856
Cache-Control: max-age=103328
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:38:11 GMT
Etag: "63829663-116"
Expires: Tue, 29 Nov 2022 00:20:19 GMT
Last-Modified: Sat, 26 Nov 2022 22:42:43 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 278
lkpmprksau.com/chicken.gif?z=1929074&pb=ef6da00f67d8c83a73268ba8be5675081669585091&psp=jWS6gdOh_TYTuWyvxPriCuUCJ0qpgARHyTnZH9jtlYzlM9O_IrFKJkpykmbG98rkANi1hxYoWAWLpZDvaWbll_izrBzF0LoKbqlkEesPu6TKxv5KUwYHtbQkaOpE8rDtJWJcwHmdmRyuw6mopbC2NDbzpi-oFjKsLbJITLEXH2sO6Xscgyi8PYsN7punwx_LOF-USGhxEKyO6zlPyOmloMqq4QCjRrnFQuhf8vKDROvLZz8pebuZpgx-cJg__w7g6yqjyX9JUe-uGRWhGPBpmWOT3HtMH2HhgYGGg0jg88dqEOtiE7K78glWr1YszELkh-J1yQvDwk1dX5TjNAOSaQinMdvXYaIdJX52rIedkEH1DUyDAn3U9WXSfuJIChwwhVXflNUE0MbDYCVzrKX89au-DwFyEh4nsJhp08eZjwghPlVCNgKWa7Qef5YFJFCU3rKXXSWnkuRXG_IG5pBTxcu644KMRReYhj3cWb6ZvJAiNMvbQv1B3cwdfl3RIas_yqcfRFgvz8jThIauF52jbiZBqw2AujD4CkjQwGES_1S1YeC3g-KJwoF3R_51Xj_CB1mYWvnVDS8vaC9ZuDPc7Zep793T6JMIk2nwN5ocbuxYqwHSD8tfEM9vu_WBN-3vIVQWNm9gBPphOXrM1FSlzrE8bu6zMI_BlIs3sFbIbntKTJRjyyMKObmQVj9uKZV84JJ1RxXytBh4xA==&abvar=0&os=0
200 OK 43 B URL HTTP/2 lkpmprksau.com/chicken.gif?z=1929074&pb=ef6da00f67d8c83a73268ba8be5675081669585091&psp=jWS6gdOh_TYTuWyvxPriCuUCJ0qpgARHyTnZH9jtlYzlM9O_IrFKJkpykmbG98rkANi1hxYoWAWLpZDvaWbll_izrBzF0LoKbqlkEesPu6TKxv5KUwYHtbQkaOpE8rDtJWJcwHmdmRyuw6mopbC2NDbzpi-oFjKsLbJITLEXH2sO6Xscgyi8PYsN7punwx_LOF-USGhxEKyO6zlPyOmloMqq4QCjRrnFQuhf8vKDROvLZz8pebuZpgx-cJg__w7g6yqjyX9JUe-uGRWhGPBpmWOT3HtMH2HhgYGGg0jg88dqEOtiE7K78glWr1YszELkh-J1yQvDwk1dX5TjNAOSaQinMdvXYaIdJX52rIedkEH1DUyDAn3U9WXSfuJIChwwhVXflNUE0MbDYCVzrKX89au-DwFyEh4nsJhp08eZjwghPlVCNgKWa7Qef5YFJFCU3rKXXSWnkuRXG_IG5pBTxcu644KMRReYhj3cWb6ZvJAiNMvbQv1B3cwdfl3RIas_yqcfRFgvz8jThIauF52jbiZBqw2AujD4CkjQwGES_1S1YeC3g-KJwoF3R_51Xj_CB1mYWvnVDS8vaC9ZuDPc7Zep793T6JMIk2nwN5ocbuxYqwHSD8tfEM9vu_WBN-3vIVQWNm9gBPphOXrM1FSlzrE8bu6zMI_BlIs3sFbIbntKTJRjyyMKObmQVj9uKZV84JJ1RxXytBh4xA==&abvar=0&os=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
Analyzer Verdict Alert quad9 Sinkholed
GET /chicken.gif?z=1929074&pb=ef6da00f67d8c83a73268ba8be5675081669585091&psp=jWS6gdOh_TYTuWyvxPriCuUCJ0qpgARHyTnZH9jtlYzlM9O_IrFKJkpykmbG98rkANi1hxYoWAWLpZDvaWbll_izrBzF0LoKbqlkEesPu6TKxv5KUwYHtbQkaOpE8rDtJWJcwHmdmRyuw6mopbC2NDbzpi-oFjKsLbJITLEXH2sO6Xscgyi8PYsN7punwx_LOF-USGhxEKyO6zlPyOmloMqq4QCjRrnFQuhf8vKDROvLZz8pebuZpgx-cJg__w7g6yqjyX9JUe-uGRWhGPBpmWOT3HtMH2HhgYGGg0jg88dqEOtiE7K78glWr1YszELkh-J1yQvDwk1dX5TjNAOSaQinMdvXYaIdJX52rIedkEH1DUyDAn3U9WXSfuJIChwwhVXflNUE0MbDYCVzrKX89au-DwFyEh4nsJhp08eZjwghPlVCNgKWa7Qef5YFJFCU3rKXXSWnkuRXG_IG5pBTxcu644KMRReYhj3cWb6ZvJAiNMvbQv1B3cwdfl3RIas_yqcfRFgvz8jThIauF52jbiZBqw2AujD4CkjQwGES_1S1YeC3g-KJwoF3R_51Xj_CB1mYWvnVDS8vaC9ZuDPc7Zep793T6JMIk2nwN5ocbuxYqwHSD8tfEM9vu_WBN-3vIVQWNm9gBPphOXrM1FSlzrE8bu6zMI_BlIs3sFbIbntKTJRjyyMKObmQVj9uKZV84JJ1RxXytBh4xA==&abvar=0&os=0 HTTP/1.1
Host: lkpmprksau.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=2211271438c78d2ac6d8474d9a8bcc9010d1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 19:38:11 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: OACICAP=ACEzegAAAAAAAAAB; Path=/; Expires=Tue, 27 Dec 2022 19:38:11 GMT; Secure; SameSite=None
OACIBLOCK=ACEzegAAAABjg7Ow; Path=/; Expires=Tue, 27 Dec 2022 19:38:11 GMT; Secure; SameSite=None
ppucnt=0; Path=/; Expires=Mon, 28 Nov 2022 19:38:11 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
vfyxjsclor.com/chicken.gif?z=1929073&pb=ef6da00f67d8c83a73268ba8be5675081669585091&psp=0kXQNn4xl1twf_gKtzVcEFErIAJAsSe3vLvAFIGdSaDUkhWQ1Re3f5Fki4OhsR4L0ou229DKKA3MHI4yoxr93JeCUVV5yj8-TJ9wg89SFOe0FUImz19Vi4ci2fdlD_K3oZw13r9U0pG7I0iVUtoNinF0YT8CJD1sE7IYBD0RYU23sr4J_xvlHqYJec3k1iev5WqisnqylE68GNcyuy67Sei7ugYpbOz83QF1PsfWL0EaRkzQKhh-pGtHZfVpHIAhehZA7kgzyHagUE7nlX6qLvOD_v6kISEpS-KveYg_a32LC1OKGxv-5byb3ZuwZtAkwkxBUgL_SGZ9Hq2zb737gN7Uv9YPNcBVVBcC_13iOABNgyHLGbf11ZIDxFFcYkn9de0KAodajG6pEXqoTh2-9RuhF81oT8VjAySGYmJqMdbzvYoBmvKj1PldL0Dljlu9Eo_zPVXglRLh3ITqZ1eZZSzp_ntUFAeuOjoix7yRRh3J34CJ_DGRVWJ-6VhNRxHZ5Xa-rDYTHKfWZqnFVn35RIfj3fCqUdOkuwJyGHQFk7e8r8lQWKRrOtqkSAvp9xt6wdVPdFGuX6NOecgL74nclQArHXqd9rmxXGZ1eZsBsp8vQDr_-pX_k5E8uM1ZPdyp0tSMju2OIMVTeqSLo4vcEVCPk1lz_tiA5h6xtPcYnLFrfkLMQEPxAg1qcJAOgd0ua8oAUqfNPifpiQ==&abvar=0&os=0
200 OK 43 B URL HTTP/2 vfyxjsclor.com/chicken.gif?z=1929073&pb=ef6da00f67d8c83a73268ba8be5675081669585091&psp=0kXQNn4xl1twf_gKtzVcEFErIAJAsSe3vLvAFIGdSaDUkhWQ1Re3f5Fki4OhsR4L0ou229DKKA3MHI4yoxr93JeCUVV5yj8-TJ9wg89SFOe0FUImz19Vi4ci2fdlD_K3oZw13r9U0pG7I0iVUtoNinF0YT8CJD1sE7IYBD0RYU23sr4J_xvlHqYJec3k1iev5WqisnqylE68GNcyuy67Sei7ugYpbOz83QF1PsfWL0EaRkzQKhh-pGtHZfVpHIAhehZA7kgzyHagUE7nlX6qLvOD_v6kISEpS-KveYg_a32LC1OKGxv-5byb3ZuwZtAkwkxBUgL_SGZ9Hq2zb737gN7Uv9YPNcBVVBcC_13iOABNgyHLGbf11ZIDxFFcYkn9de0KAodajG6pEXqoTh2-9RuhF81oT8VjAySGYmJqMdbzvYoBmvKj1PldL0Dljlu9Eo_zPVXglRLh3ITqZ1eZZSzp_ntUFAeuOjoix7yRRh3J34CJ_DGRVWJ-6VhNRxHZ5Xa-rDYTHKfWZqnFVn35RIfj3fCqUdOkuwJyGHQFk7e8r8lQWKRrOtqkSAvp9xt6wdVPdFGuX6NOecgL74nclQArHXqd9rmxXGZ1eZsBsp8vQDr_-pX_k5E8uM1ZPdyp0tSMju2OIMVTeqSLo4vcEVCPk1lz_tiA5h6xtPcYnLFrfkLMQEPxAg1qcJAOgd0ua8oAUqfNPifpiQ==&abvar=0&os=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
Analyzer Verdict Alert quad9 Sinkholed
GET /chicken.gif?z=1929073&pb=ef6da00f67d8c83a73268ba8be5675081669585091&psp=0kXQNn4xl1twf_gKtzVcEFErIAJAsSe3vLvAFIGdSaDUkhWQ1Re3f5Fki4OhsR4L0ou229DKKA3MHI4yoxr93JeCUVV5yj8-TJ9wg89SFOe0FUImz19Vi4ci2fdlD_K3oZw13r9U0pG7I0iVUtoNinF0YT8CJD1sE7IYBD0RYU23sr4J_xvlHqYJec3k1iev5WqisnqylE68GNcyuy67Sei7ugYpbOz83QF1PsfWL0EaRkzQKhh-pGtHZfVpHIAhehZA7kgzyHagUE7nlX6qLvOD_v6kISEpS-KveYg_a32LC1OKGxv-5byb3ZuwZtAkwkxBUgL_SGZ9Hq2zb737gN7Uv9YPNcBVVBcC_13iOABNgyHLGbf11ZIDxFFcYkn9de0KAodajG6pEXqoTh2-9RuhF81oT8VjAySGYmJqMdbzvYoBmvKj1PldL0Dljlu9Eo_zPVXglRLh3ITqZ1eZZSzp_ntUFAeuOjoix7yRRh3J34CJ_DGRVWJ-6VhNRxHZ5Xa-rDYTHKfWZqnFVn35RIfj3fCqUdOkuwJyGHQFk7e8r8lQWKRrOtqkSAvp9xt6wdVPdFGuX6NOecgL74nclQArHXqd9rmxXGZ1eZsBsp8vQDr_-pX_k5E8uM1ZPdyp0tSMju2OIMVTeqSLo4vcEVCPk1lz_tiA5h6xtPcYnLFrfkLMQEPxAg1qcJAOgd0ua8oAUqfNPifpiQ==&abvar=0&os=0 HTTP/1.1
Host: vfyxjsclor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=22112714386643a21478804113aefa188fb0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 19:38:11 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: OACICAP=ACE11AAAAAAAAAAB; Path=/; Expires=Tue, 27 Dec 2022 19:38:11 GMT; Secure; SameSite=None
OACIBLOCK=ACE11AAAAABjg7Ow; Path=/; Expires=Tue, 27 Dec 2022 19:38:11 GMT; Secure; SameSite=None
ppucnt=0; Path=/; Expires=Mon, 28 Nov 2022 19:38:11 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
sopalk.com/r/p.html?f=jetkqhcwq&e=1673062821466
200 OK 2.4 kB URL HTTP/2 sopalk.com/r/p.html?f=jetkqhcwq&e=1673062821466
IP
Hash 8277238e94b41181c532d4358eacde75
9da302f347ef8dbbebc7381c900c41789fa32caa
0dc6cda61ec20acb6effd7c090d9b0b59fc246a0edbc161d5254e014dd00241e
GET /r/p.html?f=jetkqhcwq&e=1673062821466 HTTP/1.1
Host: sopalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Tue, 25 Oct 2022 13:58:03 GMT
x-amz-version-id: 6P847P_3pwRq3kg1dbhEI8vZo9rD1MSu
server: AmazonS3
content-encoding: gzip
date: Sun, 27 Nov 2022 16:28:28 GMT
etag: W/"1d799671c4d6a9304651b1b9d6a783fb"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: h5sOuls2y3HNbihVI3GzrsufuC6r3OTiltYlFimhTlAhcTNkrgO96g==
age: 11387
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
sopalk.com/r/p.html?f=fabkl&e=1072720928229
200 OK 2.9 kB URL HTTP/2 sopalk.com/r/p.html?f=fabkl&e=1072720928229
IP
Hash dc4dcbc8d4d53d784da0e59fcd81327c
e39c823e47343423ddb0e9d07c570141eeae12c1
9d06fa2a88c807dc1f611cdf45f00f97726da2d217a6a0099cbefa06b728c0f7
GET /r/p.html?f=fabkl&e=1072720928229 HTTP/1.1
Host: sopalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Tue, 25 Oct 2022 13:58:03 GMT
x-amz-version-id: 6P847P_3pwRq3kg1dbhEI8vZo9rD1MSu
server: AmazonS3
content-encoding: gzip
date: Sun, 27 Nov 2022 16:28:28 GMT
etag: W/"1d799671c4d6a9304651b1b9d6a783fb"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NTVIRKOYhExwft77LVsC0Z5usrmFzXkv7rX3Ztg2QmQiEGdnE51QNA==
age: 11387
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4742
Expires: Sun, 27 Nov 2022 20:57:13 GMT
Date: Sun, 27 Nov 2022 19:38:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4742
Expires: Sun, 27 Nov 2022 20:57:13 GMT
Date: Sun, 27 Nov 2022 19:38:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4742
Expires: Sun, 27 Nov 2022 20:57:13 GMT
Date: Sun, 27 Nov 2022 19:38:11 GMT
Connection: keep-alive
i.imgur.com/TxzC70f.png
200 OK 2.2 kB IP
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 0dc5130cce991970c3d4b6ae1a73f6fb
967ae25f38f89064fdabd918a91b74adaa59e72c
12617a86d84e318f81b68310fb64c66b79059877e1b550d2e7a43472e0c417f2
GET /TxzC70f.png HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.nsfwyoutube.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 07 Apr 2015 05:01:29 GMT
etag: "0dc5130cce991970c3d4b6ae1a73f6fb"
content-type: image/png
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Sun, 27 Nov 2022 19:38:11 GMT
age: 22848402
x-served-by: cache-iad-kcgs7200095-IAD, cache-bma1649-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 9262
x-timer: S1669577891.453456,VS0,VE0
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 2173
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4742
Expires: Sun, 27 Nov 2022 20:57:13 GMT
Date: Sun, 27 Nov 2022 19:38:11 GMT
Connection: keep-alive
sopalk.com/r/p.html?f=lqpsgvdyc&e=1673062821466
200 OK 11 kB URL HTTP/2 sopalk.com/r/p.html?f=lqpsgvdyc&e=1673062821466
IP
Hash d4f5ea6ffcdebf9a9e50ee6462248b86
be544521fc6287073723bf3cc31ec8fd25fec7eb
8105644e121dd6a77d46a16b148a062bd393452bd7074dc8c9059131f50dcf22
GET /r/p.html?f=lqpsgvdyc&e=1673062821466 HTTP/1.1
Host: sopalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Tue, 25 Oct 2022 13:58:03 GMT
x-amz-version-id: 6P847P_3pwRq3kg1dbhEI8vZo9rD1MSu
server: AmazonS3
content-encoding: gzip
date: Sun, 27 Nov 2022 16:28:28 GMT
etag: W/"1d799671c4d6a9304651b1b9d6a783fb"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Oa1JKACvl6ncRE-wiVqMNNXW50M5V0P_iqVyBEZWEOuOwcpzAsXX3Q==
age: 11387
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
sopalk.com/r/p.html?f=cvyefrar&e=1072720928229
200 OK 11 kB URL HTTP/2 sopalk.com/r/p.html?f=cvyefrar&e=1072720928229
IP
Hash 4a60d1e72bbe3dc99e01c5fb0674d457
394d3a0cdcaeff09a51737bc5c356bc3474f80b6
b1fd3e5026072e5ac8ac59b3d87dbf47dbf66bb89115d63aef8482978d77a3a8
GET /r/p.html?f=cvyefrar&e=1072720928229 HTTP/1.1
Host: sopalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Tue, 25 Oct 2022 13:58:03 GMT
x-amz-version-id: 6P847P_3pwRq3kg1dbhEI8vZo9rD1MSu
server: AmazonS3
content-encoding: gzip
date: Sun, 27 Nov 2022 16:28:28 GMT
etag: W/"1d799671c4d6a9304651b1b9d6a783fb"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: OnSir5aK4P_lTkiBUOMUA8n3XFwdU2PKY1FeWmxULt3dfVgLc1wgWQ==
age: 11387
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
sopalk.com/r/p.html?f=iluwxef&e=1673062821466
200 OK 11 kB URL HTTP/2 sopalk.com/r/p.html?f=iluwxef&e=1673062821466
IP
Hash f1424bb79ec77fd62c00ae179c8d6603
8953d41cd1707ff80941501b45a325724f31ffab
737ea04b06ef265ba888c8240eb7240a00917a52945173ab6e90e81bc2c19bb4
GET /r/p.html?f=iluwxef&e=1673062821466 HTTP/1.1
Host: sopalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Tue, 25 Oct 2022 13:58:03 GMT
x-amz-version-id: 6P847P_3pwRq3kg1dbhEI8vZo9rD1MSu
server: AmazonS3
content-encoding: gzip
date: Sun, 27 Nov 2022 16:28:28 GMT
etag: W/"1d799671c4d6a9304651b1b9d6a783fb"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uglC3hxAOa4JAqmJnaH8AadD0HBkH8m24Yi29CQMNJRXXCP0ahi3wQ==
age: 11387
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
sopalk.com/r/p.html?f=ucubpyyuh&e=1673062821466
200 OK 15 kB URL HTTP/2 sopalk.com/r/p.html?f=ucubpyyuh&e=1673062821466
IP
Hash 5ec52cb1bdb13b21393b94bb8c40ccbe
0a4af2335c2b96626c2d07f0f0129512d24f0fa5
94d1fe044c31d7744bb28cfb2f67e68249b26dd1e22cac3e325ef018a513fb03
GET /r/p.html?f=ucubpyyuh&e=1673062821466 HTTP/1.1
Host: sopalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Tue, 25 Oct 2022 13:58:03 GMT
x-amz-version-id: 6P847P_3pwRq3kg1dbhEI8vZo9rD1MSu
server: AmazonS3
content-encoding: gzip
date: Sun, 27 Nov 2022 16:28:28 GMT
etag: W/"1d799671c4d6a9304651b1b9d6a783fb"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: W3qbu7ekape9wVI-jcbE8-83xmjvExf7bhg08R9MDPyLWvQWjMVfPA==
age: 11387
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
sopalk.com/r/p.html?f=xxwjm&e=1673062821466
200 OK 6.7 kB URL HTTP/2 sopalk.com/r/p.html?f=xxwjm&e=1673062821466
IP
Hash e8b2cef7cc66d1b5d3c090ba271e08e7
cf2104a9f6be3c0516b3bb6d584498750686a934
75e8b1f73bcff3af0d8133c2681ff1da552faffd779cf9f9afb91536032ac79d
GET /r/p.html?f=xxwjm&e=1673062821466 HTTP/1.1
Host: sopalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Tue, 25 Oct 2022 13:58:03 GMT
x-amz-version-id: 6P847P_3pwRq3kg1dbhEI8vZo9rD1MSu
server: AmazonS3
content-encoding: gzip
date: Sun, 27 Nov 2022 16:28:28 GMT
etag: W/"1d799671c4d6a9304651b1b9d6a783fb"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fn8K4LcYyYuZYcvLZq2mbNCUjOuNeYv7smzreZUYpxquVHZDmUcHqg==
age: 11387
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
sopalk.com/r/p.html?f=iozwmr&e=1673062821466
200 OK 12 kB URL HTTP/2 sopalk.com/r/p.html?f=iozwmr&e=1673062821466
IP
Hash bae2231fbf74cf4988ff98f4c9e93211
91600732284c7213fd9fa0647b1ce4dca824035a
7ca327bfb2fd1fb99af6a581206bffb35ecb8fa8ee9d2d9b5557b96b7eb6a368
GET /r/p.html?f=iozwmr&e=1673062821466 HTTP/1.1
Host: sopalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Tue, 25 Oct 2022 13:58:03 GMT
x-amz-version-id: 6P847P_3pwRq3kg1dbhEI8vZo9rD1MSu
server: AmazonS3
content-encoding: gzip
date: Sun, 27 Nov 2022 16:28:28 GMT
etag: W/"1d799671c4d6a9304651b1b9d6a783fb"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CmoJn870g_l0WFLPBnLRzE_bR4X_4gAy-l13XkCMv68HSG9_Qhfr7Q==
age: 11387
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-FX717H82MN>m=2oeb90&_p=70794522&cid=324377553.1669577891&ul=en-us&sr=1280x1024&_s=1&sid=1669577890&sct=1&seg=0&dl=http%3A%2F%2Fwww.nsfwyoutube.com%2Fwatch%3Fv%3DU9KAVuA6_pU&dt=NSFW%20YouTube%20%3A%3A%20Watch%20YouTube%20Videos%20Without%20Logging%20In&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-FX717H82MN>m=2oeb90&_p=70794522&cid=324377553.1669577891&ul=en-us&sr=1280x1024&_s=1&sid=1669577890&sct=1&seg=0&dl=http%3A%2F%2Fwww.nsfwyoutube.com%2Fwatch%3Fv%3DU9KAVuA6_pU&dt=NSFW%20YouTube%20%3A%3A%20Watch%20YouTube%20Videos%20Without%20Logging%20In&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-FX717H82MN>m=2oeb90&_p=70794522&cid=324377553.1669577891&ul=en-us&sr=1280x1024&_s=1&sid=1669577890&sct=1&seg=0&dl=http%3A%2F%2Fwww.nsfwyoutube.com%2Fwatch%3Fv%3DU9KAVuA6_pU&dt=NSFW%20YouTube%20%3A%3A%20Watch%20YouTube%20Videos%20Without%20Logging%20In&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.nsfwyoutube.com
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: http://www.nsfwyoutube.com
date: Sun, 27 Nov 2022 19:38:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
offersbid.com/vIISaqXyFoKlc4MXm73AERaVflTa-JEnnEZrceIE6mU/?cid=null&sid=null
200 OK 68 B URL HTTP/1.1 offersbid.com/vIISaqXyFoKlc4MXm73AERaVflTa-JEnnEZrceIE6mU/?cid=null&sid=null
IP
File type JSON data\012- , ASCII text
Hash b71f38276444ba8f5d58cfc8b49521be
f1a6214edd279f4b7a458582e198bd6ab15ab2d8
2f608306058385d977efcde9010b48c505dea20d9bd76f046c4acd5f3d3ae251
GET /vIISaqXyFoKlc4MXm73AERaVflTa-JEnnEZrceIE6mU/?cid=null&sid=null HTTP/1.1
Host: offersbid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.nsfwyoutube.com
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 19:38:11 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Set-Cookie: session=Mppqvpdnd6b1wkisLHwcIQ4xANx-tGp3
Server: nginx
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 279 B IP
Hash d01bd0ddd7d7876dc069864de60798e7
63067b604118239d3bd4346127c278d2e8431b7d
7aaf35dbc356c515acc43566e5d89004fad2c4740fb0a323c230631e8db48a65
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1609
Cache-Control: max-age=92953
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:38:11 GMT
Etag: "63827e73-117"
Expires: Mon, 28 Nov 2022 21:27:24 GMT
Last-Modified: Sat, 26 Nov 2022 21:00:35 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 280 B IP
Hash fc776f23c673fc08ff8e261e846b629c
4742986a4b0d42b1ef77b483930242a57183a1dc
c3b4efa57b7ca697da7adaadefd9292742f2c589b1cb9763a8bb0d7d82fe8f38
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5318
Cache-Control: max-age=125106
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:38:11 GMT
Etag: "6382ed8f-118"
Expires: Tue, 29 Nov 2022 06:23:17 GMT
Last-Modified: Sun, 27 Nov 2022 04:54:39 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 313 B IP
Hash fccdc9d595df75bfa103ba6c111345e1
55f48f6d8e5ed539b8feaa9fbeceb23edf23561b
15b3fb717cf37be0bf3a9da7e5fdf720b1124d2ea13c2afa01e9edc37c5c5b2e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4045
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:38:11 GMT
Last-Modified: Sun, 27 Nov 2022 18:30:46 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 313
jsc.adskeeper.com/n/s/nsfwyoutube.com.1359821.js
200 OK 921 B URL HTTP/2 jsc.adskeeper.com/n/s/nsfwyoutube.com.1359821.js
IP
File type ASCII text, with very long lines (2362)
Hash 1a6696b1bf21fbd82901c44c8b792f9f
e4fab075b1dda1908afce480c1c1ffa3487162c6
d7ae8bdc4c7e9a9feaa061a293239950c131cb6ec895a9eb7774ea6f2c6ceb76
GET /n/s/nsfwyoutube.com.1359821.js HTTP/1.1
Host: jsc.adskeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:11 GMT
content-type: text/javascript
content-length: 921
x-amz-id-2: EfUqPB+XucLfrz0NcQICWKjIaqfdrWi9PZaryTS5f9Ccj2/4yghIIC5rkUigUMdTFThvP5HEVMM=
x-amz-request-id: X8YTE54ZFPJPZ80X
last-modified: Wed, 23 Nov 2022 12:00:40 GMT
etag: "1a6696b1bf21fbd82901c44c8b792f9f"
content-encoding: gzip
x-amz-version-id: IHlBP4hXpz34uosF_gdRWYwd1Du7I9IP
cf-cache-status: HIT
age: 1226
expires: Sun, 27 Nov 2022 23:38:11 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770d529ecc320b39-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
prebid.smilewanted.com/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 320
Origin: http://www.nsfwyoutube.com
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:11 GMT
cache-control: no-cache, private
access-control-allow-origin: http://www.nsfwyoutube.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d529ebe0a15fc-ARN
X-Firefox-Spdy: h2
sopalk.com/r/p.html?f=gdmbqwio&e=1072720928229
200 OK 2.3 kB URL HTTP/2 sopalk.com/r/p.html?f=gdmbqwio&e=1072720928229
IP
File type HTML document, ASCII text, with CRLF line terminators
Hash a61a069d6a33fb4b48d26dde229f7c1e
0e581c5b9392d34705c28e47f70da6b138f03136
3071ff1f936dcb4f6dee77859bd0d96fd681d17378f4b621e4947de749959f00
GET /r/p.html?f=gdmbqwio&e=1072720928229 HTTP/1.1
Host: sopalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Tue, 25 Oct 2022 13:58:03 GMT
x-amz-version-id: 6P847P_3pwRq3kg1dbhEI8vZo9rD1MSu
server: AmazonS3
content-encoding: gzip
date: Sun, 27 Nov 2022 16:28:28 GMT
etag: W/"1d799671c4d6a9304651b1b9d6a783fb"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AmbThLHFJrCzoYLA5oQ5SXdvqIsES8KIf0bqnmnEAosnBb_Xv9uPSw==
age: 11387
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
jsc.adskeeper.com/n/s/nsfwyoutube.com.1359821.es6.js
200 OK 80 kB URL HTTP/2 jsc.adskeeper.com/n/s/nsfwyoutube.com.1359821.es6.js
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (33570)
Hash 7e1d7ac009c81d0219fd6f3c6c9959ad
b29effda10307f299d952bc4b3e0a7d59097e3cd
7ce7cbdbe68920e2f67530c822a6cd480695db522b03b89044ff3d7cec05d508
GET /n/s/nsfwyoutube.com.1359821.es6.js HTTP/1.1
Host: jsc.adskeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:11 GMT
content-type: text/javascript
content-length: 80199
x-amz-id-2: Gsy7Sw40cbAHdyk3H0p/mmox2DiQdWSzDR9mVtaJ7TxjP1Q4/buhjFOy8qkRhCKw4KNzsbw0HPjUihQJL2D8CQ==
x-amz-request-id: VVP37X8NA2KS1BFJ
last-modified: Wed, 23 Nov 2022 12:00:40 GMT
etag: "7e1d7ac009c81d0219fd6f3c6c9959ad"
content-encoding: gzip
x-amz-version-id: F2HbmsGYDg4VFX905q5WCj8Z5WxvkAok
cf-cache-status: HIT
age: 1224
expires: Sun, 27 Nov 2022 23:38:11 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770d529f1cba0b39-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
sopalk.com/r/p.html?f=jcquvuvn&e=1072720928229
200 OK 2.3 kB URL HTTP/2 sopalk.com/r/p.html?f=jcquvuvn&e=1072720928229
IP
File type HTML document, ASCII text, with CRLF line terminators
Hash a61a069d6a33fb4b48d26dde229f7c1e
0e581c5b9392d34705c28e47f70da6b138f03136
3071ff1f936dcb4f6dee77859bd0d96fd681d17378f4b621e4947de749959f00
GET /r/p.html?f=jcquvuvn&e=1072720928229 HTTP/1.1
Host: sopalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Tue, 25 Oct 2022 13:58:03 GMT
x-amz-version-id: 6P847P_3pwRq3kg1dbhEI8vZo9rD1MSu
server: AmazonS3
content-encoding: gzip
date: Sun, 27 Nov 2022 16:28:28 GMT
etag: W/"1d799671c4d6a9304651b1b9d6a783fb"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: O_TswoVHlmD-1z7KHuyFidac0DdZlISAgqKTMRjcTWBUrZeRFvVl9w==
age: 11387
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash f39102a6340bb2fd8c961680d4058687
ddb18aa541e869773f4b396894bcaa17a302c1b7
e7b8f4a2903c81045b0795ce1aea1298807b394ea85548f7f97e635e9cf65a2b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6389
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:38:11 GMT
Last-Modified: Sun, 27 Nov 2022 17:51:42 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash a86795b5e3a4bec49f3693adbef3bde3
1d86b26b581771fde6c7760799f24e8e66475381
064772fbbaaa05139e1b48bdf81476fe5864d01f9c0edcf62e6d709bcc87a43d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1347
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:38:11 GMT
Last-Modified: Sun, 27 Nov 2022 19:15:44 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash f39102a6340bb2fd8c961680d4058687
ddb18aa541e869773f4b396894bcaa17a302c1b7
e7b8f4a2903c81045b0795ce1aea1298807b394ea85548f7f97e635e9cf65a2b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6389
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:38:11 GMT
Last-Modified: Sun, 27 Nov 2022 17:51:42 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 7127b052bcd2493ea46db679d07d801f
b4a3261a0ff4628eca20978f9928c1f7e56febb4
5d9a465dd5f722deeb8a64add101303b9e1b56675b5e9335e08e33d815a47e06
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4843
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:38:11 GMT
Last-Modified: Sun, 27 Nov 2022 18:17:28 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash c72040959cf2b0b82aefeaf1afcee56b
fbf4d2e07958ad60ddb5accc54e7435a90f37ce5
7e1b6f7ccbee8addf982c0207e6166f74bbe7a010b37ea530b3bef035195cf93
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5863
Cache-Control: max-age=108749
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:38:11 GMT
Etag: "6382ab89-1d7"
Expires: Tue, 29 Nov 2022 01:50:40 GMT
Last-Modified: Sun, 27 Nov 2022 00:12:57 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
sopalk.com/r/p.html?f=apwohuid&e=1072720928229
200 OK 3.5 kB URL HTTP/2 sopalk.com/r/p.html?f=apwohuid&e=1072720928229
IP
Hash 4bef1daf45c8d697f0a3c092965534e5
1e7b6d090ae5c83d3c7116698a2e4c8ee7d611b3
dc0dfd2100c14271564288a5e556114102ed536d40af256725324523bfceeade
GET /r/p.html?f=apwohuid&e=1072720928229 HTTP/1.1
Host: sopalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Tue, 25 Oct 2022 13:58:03 GMT
x-amz-version-id: 6P847P_3pwRq3kg1dbhEI8vZo9rD1MSu
server: AmazonS3
content-encoding: gzip
date: Sun, 27 Nov 2022 16:28:28 GMT
etag: W/"1d799671c4d6a9304651b1b9d6a783fb"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cNPnNrO07o9AEtEVv1wILhItgEYTzZLqqLJ7quAHNClpFSQAMAof-Q==
age: 11387
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 581
Origin: http://www.nsfwyoutube.com
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sun, 27 Nov 2022 19:38:09 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: http://www.nsfwyoutube.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 0955fb76d74d6331a0d481395fc81535
91c9bc6ed56924012424c98791bb2a04b9545772
da640258c351540a056feffba942c7ee814d6dce3d28e40aa421554da1c50357
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5766
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:38:11 GMT
Etag: "6383883d-139"
Last-Modified: Sun, 27 Nov 2022 18:02:05 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 313
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,ca074505-1d1f-45a2-82c7-66057e934486,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2Fwatch%3Fv%3DU9KAVuA6_pU&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577890812&tk_flint=pbjs_lite_v7.19.0&x_source.tid=a2d5b218-acf2-4bb3-be03-f877c1a76c8b&l_pb_bid_id=8df8897a2493398&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.34349152564697405
200 OK 407 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,ca074505-1d1f-45a2-82c7-66057e934486,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2Fwatch%3Fv%3DU9KAVuA6_pU&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577890812&tk_flint=pbjs_lite_v7.19.0&x_source.tid=a2d5b218-acf2-4bb3-be03-f877c1a76c8b&l_pb_bid_id=8df8897a2493398&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.34349152564697405
IP
File type JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Hash 396fb93fa2cf5e2e6b032ea5f84e208f
a3a8a32305e8d0ef32c63f7405d0c6f5b79d0c3d
36525919e39be9510a99768137f2589b123c64c5a051f51310c1f7309cc2a858
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,ca074505-1d1f-45a2-82c7-66057e934486,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2Fwatch%3Fv%3DU9KAVuA6_pU&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577890812&tk_flint=pbjs_lite_v7.19.0&x_source.tid=a2d5b218-acf2-4bb3-be03-f877c1a76c8b&l_pb_bid_id=8df8897a2493398&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.34349152564697405 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://www.nsfwyoutube.com
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.21.4
date: Sun, 27 Nov 2022 19:38:11 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: http://www.nsfwyoutube.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LAZRKI4D-7-F1SU; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:11 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qqztLuq15wBOu9DtVM30fCgsc7/zDE2e/h0yiN4OblLOf4/TxlHJkA6Ij5wYjJQab8x+FptCLf6Skd2+VzOS4u9; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:11 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 407
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 1ebdbbb7ea00f0bb1bfc793a538e1f87
89d19bb4eca77f475d21ceb1b8224dae5ef4f556
1f6a0fb5842c3491e07f5e00b7408c6818f351949bb7f40b2b5888324a2afd35
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 729
Origin: http://www.nsfwyoutube.com
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:11 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://www.nsfwyoutube.com
AN-X-Request-Uuid: 5041e44a-e61a-49f3-8820-d982888b7405
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ocsp.digicert.com/
200 OK 471 B IP
Hash 7127b052bcd2493ea46db679d07d801f
b4a3261a0ff4628eca20978f9928c1f7e56febb4
5d9a465dd5f722deeb8a64add101303b9e1b56675b5e9335e08e33d815a47e06
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 818
Cache-Control: max-age=120265
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:38:11 GMT
Etag: "6382ec3a-1d7"
Expires: Tue, 29 Nov 2022 05:02:36 GMT
Last-Modified: Sun, 27 Nov 2022 04:48:58 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 280 B IP
Hash fc776f23c673fc08ff8e261e846b629c
4742986a4b0d42b1ef77b483930242a57183a1dc
c3b4efa57b7ca697da7adaadefd9292742f2c589b1cb9763a8bb0d7d82fe8f38
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5318
Cache-Control: max-age=125106
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:38:11 GMT
Etag: "6382ed8f-118"
Expires: Tue, 29 Nov 2022 06:23:17 GMT
Last-Modified: Sun, 27 Nov 2022 04:54:39 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 280
sopalk.com/r/p.html?f=rfejekwmn&e=1072720928229
200 OK 2.8 kB URL HTTP/2 sopalk.com/r/p.html?f=rfejekwmn&e=1072720928229
IP
Hash c76487b85a10f787cb85c203a3c0dfc5
61cc277a8e5ed751f3f133593e06487a3cd3c8e6
4a1d46173083afa2ae052c4fca8492ea00172129c7478346969be0fde45aac03
GET /r/p.html?f=rfejekwmn&e=1072720928229 HTTP/1.1
Host: sopalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Tue, 25 Oct 2022 13:58:03 GMT
x-amz-version-id: 6P847P_3pwRq3kg1dbhEI8vZo9rD1MSu
server: AmazonS3
content-encoding: gzip
date: Sun, 27 Nov 2022 16:28:28 GMT
etag: W/"1d799671c4d6a9304651b1b9d6a783fb"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wjamE4LxCBQg1qSASilYJlBA6Gb1wZ6_N-nnL4qzFxbVSCXWvSVNAA==
age: 11387
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
c2shb.pubgw.yahoo.com/bidRequest
200 OK 0 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-openrtb-version
Referer: http://www.nsfwyoutube.com/
Origin: http://www.nsfwyoutube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:11 GMT
content-length: 0
server: ATS/9.1.10.25
access-control-allow-origin: http://www.nsfwyoutube.com
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-headers: X-Requested-With,Content-Type,X-Openrtb-Version
access-control-allow-credentials: true
access-control-max-age: 600
age: 0
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 140 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 30cf7e9e0efaa702705526927182418d
e1fda0020141131bbdbeac9e4b52ac91801fedeb
53f083d510afb2382f419d1204aff238a1a56723b430b2f8a1c36bc38e767bf3
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 731
Origin: http://www.nsfwyoutube.com
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:11 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 140
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://www.nsfwyoutube.com
AN-X-Request-Uuid: 94f02620-ee28-4a89-8e05-ffe439259678
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ocsp.digicert.com/
200 OK 313 B IP
Hash 0955fb76d74d6331a0d481395fc81535
91c9bc6ed56924012424c98791bb2a04b9545772
da640258c351540a056feffba942c7ee814d6dce3d28e40aa421554da1c50357
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6245
Cache-Control: max-age=165631
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:38:11 GMT
Etag: "6383883d-139"
Expires: Tue, 29 Nov 2022 17:38:42 GMT
Last-Modified: Sun, 27 Nov 2022 15:54:37 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 313
c2shb.pubgw.yahoo.com/bidRequest
200 OK 0 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-openrtb-version
Referer: http://www.nsfwyoutube.com/
Origin: http://www.nsfwyoutube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:11 GMT
content-length: 0
server: ATS/9.1.10.25
access-control-allow-origin: http://www.nsfwyoutube.com
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-headers: X-Requested-With,Content-Type,X-Openrtb-Version
access-control-allow-credentials: true
access-control-max-age: 600
age: 0
X-Firefox-Spdy: h2
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0d73662210a35fb8cf6b501ef7b81e58
8bf93ac9dce1367f3baebbdd5f67420a026e0f0a
c03395805700416e500a19f52327479304f764eff7f506a122d363c84e3bec5b
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 1017
Origin: http://www.nsfwyoutube.com
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:11 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: http://www.nsfwyoutube.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0a9ad90d17a6604031b23d7c3f2d9fe2
33f749470b26b5f1f1b58d42e887254590e65e54
19458ff06134947cf9f37537ca917b7028cc04baf20582423bf58fb3936c7a7c
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 1017
Origin: http://www.nsfwyoutube.com
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:11 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: http://www.nsfwyoutube.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
lkpmprksau.com/get/1929074?zoneid=1929074&jp=_clxk2qa6o9s7zin48r8o18&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=109417456605779
200 OK 4.0 kB URL HTTP/2 lkpmprksau.com/get/1929074?zoneid=1929074&jp=_clxk2qa6o9s7zin48r8o18&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=109417456605779
IP
Hash badafe6891b444521c0e9794ff3d2118
4693ea27f5bb108dc1cd6ad0baff79263dcb99e9
844e7a2364a2f7771c801d5394a6b93330dc7730c2f7e228cd0b087ca87658b7
Analyzer Verdict Alert quad9 Sinkholed
GET /get/1929074?zoneid=1929074&jp=_clxk2qa6o9s7zin48r8o18&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=109417456605779 HTTP/1.1
Host: lkpmprksau.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 19:38:11 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=2211271438c78d2ac6d8474d9a8bcc9010d1; Path=/; Expires=Mon, 27 Nov 2023 19:38:11 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0b989e80ddfee2ec1eef9e9fa74f4b43
c69d8c8e6e36d84e83f00af097ae20f605dc1af4
3faf87636a3c10cde2cf9196d112f4d385509e3354d789a5f83cb72ee3ed8db2
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=87815
Date: Sun, 27 Nov 2022 19:38:11 GMT
Etag: "63825731-1d7"
Expires: Mon, 28 Nov 2022 20:01:46 GMT
Last-Modified: Sat, 26 Nov 2022 18:13:05 GMT
Server: ECS (bsa/EB14)
X-Cache: Miss from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: XqdqO-66zFYLq9mjkFwTvA0Q9-wh27JfzzJfNVOYhfAckugmJdF7eA==
Age: 6521
prg.smartadserver.com/prebid/v1
200 OK 539 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1129), with no line terminators
Hash f3ef4673dc0c9f47532a75695fee9ccd
6b73e67a440e9ee77e37938aeabcf79e8867fd8d
0ebf0f3e15d07bf7e02628a1ad2be3b73ce17b66c80e6a84b06aa8ad3f182f43
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 414
Origin: http://www.nsfwyoutube.com
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Sun, 27 Nov 2022 19:38:11 GMT
access-control-allow-credentials: true
access-control-allow-origin: http://www.nsfwyoutube.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12999%3b%24o%3d11100; expires=Mon, 27 Nov 2023 19:38:11 GMT; domain=.smartadserver.com; path=/
vs=559577=5209658; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 27 Nov 2023 19:38:11 GMT; domain=.smartadserver.com; path=/
pid=4064127943991147244; expires=Mon, 27 Nov 2023 19:38:11 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638051746918851763&o=1; expires=Mon, 28 Nov 2022 19:38:11 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Mon, 28 Nov 2022 19:38:11 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
ocsp.digicert.com/
200 OK 279 B IP
Hash fbb37c500f4b5850599823092db02f98
59c9da72efa5df60c82140bae1c3411c68c9607f
375c7dfb78be43f0d6884bd6e1fb067aed433447d54e7ef7bf432d46eec22900
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6435
Cache-Control: max-age=111508
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:38:11 GMT
Etag: "6382b414-117"
Expires: Tue, 29 Nov 2022 02:36:39 GMT
Last-Modified: Sun, 27 Nov 2022 00:49:24 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 279
l.sharethis.com/pview?event=pview&hostname=www.nsfwyoutube.com&location=%2Fwatch&product=sticky-share-buttons&url=http%3A%2F%2Fwww.nsfwyoutube.com%2Fwatch%3Fv%3DU9KAVuA6_pU&source=sharethis.js&fcmp=false&fcmpv2=false&has_segmentio=false&title=NSFW%20YouTube%20%3A%3A%20Watch%20YouTube%20Videos%20Without%20Logging%20In&cms=unknown&publisher=5d68a51b5fea9f001288d96a&sop=true&version=st_sop.js&lang=en&description=NSFWYouTube%20%3A%3A%20Watch%20YouTube%20videos%20without%20signing%20in%2Fup%20for%20YouTube%20account.%20Bypass%20registration%20trick!
204 No Content 0 B URL HTTP/1.1 l.sharethis.com/pview?event=pview&hostname=www.nsfwyoutube.com&location=%2Fwatch&product=sticky-share-buttons&url=http%3A%2F%2Fwww.nsfwyoutube.com%2Fwatch%3Fv%3DU9KAVuA6_pU&source=sharethis.js&fcmp=false&fcmpv2=false&has_segmentio=false&title=NSFW%20YouTube%20%3A%3A%20Watch%20YouTube%20Videos%20Without%20Logging%20In&cms=unknown&publisher=5d68a51b5fea9f001288d96a&sop=true&version=st_sop.js&lang=en&description=NSFWYouTube%20%3A%3A%20Watch%20YouTube%20videos%20without%20signing%20in%2Fup%20for%20YouTube%20account.%20Bypass%20registration%20trick!
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pview?event=pview&hostname=www.nsfwyoutube.com&location=%2Fwatch&product=sticky-share-buttons&url=http%3A%2F%2Fwww.nsfwyoutube.com%2Fwatch%3Fv%3DU9KAVuA6_pU&source=sharethis.js&fcmp=false&fcmpv2=false&has_segmentio=false&title=NSFW%20YouTube%20%3A%3A%20Watch%20YouTube%20Videos%20Without%20Logging%20In&cms=unknown&publisher=5d68a51b5fea9f001288d96a&sop=true&version=st_sop.js&lang=en&description=NSFWYouTube%20%3A%3A%20Watch%20YouTube%20videos%20without%20signing%20in%2Fup%20for%20YouTube%20account.%20Bypass%20registration%20trick! HTTP/1.1
Host: l.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.nsfwyoutube.com
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: *
Access-Control-Allow-Origin: http://www.nsfwyoutube.com
Access-Control-Expose-Headers: stid
Access-Control-Max-Age: 1728000
Cache-Control: no-cache, no-store, must-revalidate
Date: Sun, 27 Nov 2022 19:38:11 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains;
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash fbb37c500f4b5850599823092db02f98
59c9da72efa5df60c82140bae1c3411c68c9607f
375c7dfb78be43f0d6884bd6e1fb067aed433447d54e7ef7bf432d46eec22900
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5398
Cache-Control: max-age=110470
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:38:12 GMT
Etag: "6382b414-117"
Expires: Tue, 29 Nov 2022 02:19:22 GMT
Last-Modified: Sun, 27 Nov 2022 00:49:24 GMT
Server: ECS (amb/6B90)
X-Cache: HIT
Content-Length: 279
redcarpat.com/a/300x600.png
200 OK 74 kB URL HTTP/2 redcarpat.com/a/300x600.png
IP
File type PNG image data, 300 x 600, 8-bit colormap, non-interlaced\012- data
Hash e498c9a0db35a3e8ea9a6ed133e8f0e5
f69947bf12e4c12c8e3b139d0b827e9d717303b7
5979b379a5272ba768c9d39eec0b594d8eb5c7403934cb1c0d973dd57b42fc61
GET /a/300x600.png HTTP/1.1
Host: redcarpat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 73846
last-modified: Fri, 11 Feb 2022 16:12:34 GMT
x-amz-version-id: jRTQDm1KthQEUPFq1whNG..MNpr180wh
accept-ranges: bytes
server: AmazonS3
date: Sun, 27 Nov 2022 16:32:53 GMT
etag: "e498c9a0db35a3e8ea9a6ed133e8f0e5"
x-cache: Hit from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 5QDapiAWud1L7ccTApj7MzCScxl2sXa7ScPRSxMgL0xIDMyqxcZ1dA==
age: 11310
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
redcarpat.com/a/300x250.png
200 OK 10 kB URL HTTP/2 redcarpat.com/a/300x250.png
IP
File type PNG image data, 300 x 250, 8-bit colormap, non-interlaced\012- data
Hash 3bf1905d88ab4fd345b3dcea31d90ce3
1a3401f8a9527d504dde655a506ddf99d06fc471
69abb1b8af004cb630bbfd95a8986e30d78dd7256ce28afb7c03c455ab046d83
GET /a/300x250.png HTTP/1.1
Host: redcarpat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 10433
last-modified: Fri, 11 Feb 2022 16:12:33 GMT
x-amz-version-id: mgFQzrV8Di.90CBDODKoOYDWRvNqdQfe
accept-ranges: bytes
server: AmazonS3
date: Sun, 27 Nov 2022 16:30:26 GMT
etag: "3bf1905d88ab4fd345b3dcea31d90ce3"
x-cache: Hit from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: uq25kfkqkqHnbZg3795jv6_5fdBxJHTPW6IUAku-kjOUdlZPiln-jQ==
age: 11305
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
datasphere-sbsvc.sharethis.com/?n=8&debug
200 OK 255 B URL HTTP/2 datasphere-sbsvc.sharethis.com/?n=8&debug
IP
File type JSON data\012- , ASCII text
Hash e4d01712197ba9b8e68fc0e7fe4858f7
46f5cf45c4325dbb0437c1c9acdc36fe852566fb
4aaa7294eaf2512f6d800d0432bcdac02378bb195b9917d658c501653dcf2048
GET /?n=8&debug HTTP/1.1
Host: datasphere-sbsvc.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.nsfwyoutube.com
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
content-length: 255
date: Sun, 27 Nov 2022 19:38:12 GMT
cache-control: public, max-age=60
access-control-allow-origin: *
apigw-requestid: cRppsiygoAMESlA=
x-cache: Miss from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pWScpB4bnS4Q3x2D7089EsBtD9Os1vYieeJ9DtRPJGw4yZt7U26I0A==
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0e957fbc3790d0468a8975b0a4b9232a
812d97c5c2fb1cd163fc31a745b8593e44a88dbb
5fbfc88834f03091b8aceba478f5d5a75e4863d7eb84030d495cd97d2797f750
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 697
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:12 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://sopalk.com
AN-X-Request-Uuid: 42f24437-9a65-4bfb-b4e8-ef233cc9631c
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
shb.richaudience.com/hb/
200 OK 20 B IP
ASN #24940 Hetzner Online GmbH
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
POST /hb/ HTTP/1.1
Host: shb.richaudience.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 705
Origin: http://www.nsfwyoutube.com
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.14.2
date: Sun, 27 Nov 2022 19:38:11 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: http://www.nsfwyoutube.com
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: gzip
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,4d423356-c3e7-487d-b944-2614cf888229,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891588&tk_flint=pbjs_lite_v7.19.0&x_source.tid=0be42024-b8bc-4742-ab03-817ae5f2340c&l_pb_bid_id=106fd7d60674c07&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.7562802403604895
200 OK 388 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,4d423356-c3e7-487d-b944-2614cf888229,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891588&tk_flint=pbjs_lite_v7.19.0&x_source.tid=0be42024-b8bc-4742-ab03-817ae5f2340c&l_pb_bid_id=106fd7d60674c07&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.7562802403604895
IP
File type JSON data\012- , ASCII text, with very long lines (388), with no line terminators
Hash 2b467f0d922ac1ae53e1f21744eaf523
b1971e210999e671628f7fb1b7328969da36c9f2
232ee9dbb47eecd19ec84f9f251ff9d7b66206965c21efc5703642d2ef4567d4
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,4d423356-c3e7-487d-b944-2614cf888229,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891588&tk_flint=pbjs_lite_v7.19.0&x_source.tid=0be42024-b8bc-4742-ab03-817ae5f2340c&l_pb_bid_id=106fd7d60674c07&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.7562802403604895 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Sun, 27 Nov 2022 19:38:12 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LAZRKIZV-1P-J3II; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:12 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qoHLtWoHvzdHe9DtVM30fCgsc7/zDE2e/hErN0ScCPjmf4/TxlHJkA6Ij5wYjJQab8x+FptCLf6Skd2+VzOS4u9; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:12 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 388
X-Firefox-Spdy: h2
c2shb.pubgw.yahoo.com/bidRequest
200 OK 0 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-openrtb-version
Referer: https://sopalk.com/
Origin: https://sopalk.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:12 GMT
content-length: 0
server: ATS/9.1.10.25
access-control-allow-origin: https://sopalk.com
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-headers: X-Requested-With,Content-Type,X-Openrtb-Version
access-control-allow-credentials: true
access-control-max-age: 600
age: 0
X-Firefox-Spdy: h2
prebid.smilewanted.com/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 300
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:12 GMT
cache-control: no-cache, private
access-control-allow-origin: https://sopalk.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52a69d4915fc-ARN
X-Firefox-Spdy: h2
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d8d3621bcb5f9f6dc40679cf2757feaf
056286e345dceaec915d958a77d044b55ad6d84d
6ea460fd2a4ddd8d507c4dd4a7ce759fef45f2f502f70dd17801f76cbdf49d0c
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 998
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:12 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://sopalk.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 4f9ad5b6021e04052ff0f3c1124e6a12
71bb9b81092063e0daeff501e8c330e4ea606182
0f4de8048004e7bb6db76cef64ae6aa5f765ae5b9293eb725ea95345d3bab7f1
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 654
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:12 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://sopalk.com
AN-X-Request-Uuid: b07d1164-4342-4560-8dbf-45feefe61692
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891598&tk_flint=pbjs_lite_v7.19.0&x_source.tid=0b023929-3b69-4886-b70f-70fbc47c9598&l_pb_bid_id=46ab8805193cc8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.2774706422031056
200 OK 388 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891598&tk_flint=pbjs_lite_v7.19.0&x_source.tid=0b023929-3b69-4886-b70f-70fbc47c9598&l_pb_bid_id=46ab8805193cc8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.2774706422031056
IP
File type JSON data\012- , ASCII text, with very long lines (388), with no line terminators
Hash 26fc9f4d6f9e3fae608dab61b020aa9d
5eeee584ae998f27edec2533eef684736717487b
820df4d2fbd37746705a55d9de0d10966e88d6b603ca3b0c1567c1032529c006
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891598&tk_flint=pbjs_lite_v7.19.0&x_source.tid=0b023929-3b69-4886-b70f-70fbc47c9598&l_pb_bid_id=46ab8805193cc8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.2774706422031056 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Sun, 27 Nov 2022 19:38:12 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LAZRKJ1N-1Y-DR8A; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:12 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qqYSzyELgAQf+9DtVM30fCgsc7/zDE2e/hErN0ScCPjmf4/TxlHJkA6Ij5wYjJQab8x+FptCLf6Skd2+VzOS4u9; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:12 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 388
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=10831503636&lsavail=0
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=10831503636&lsavail=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.19.0&cb=10831503636&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 485
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:12 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://sopalk.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=62081392655&lsavail=0
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=62081392655&lsavail=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.19.0&cb=62081392655&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 485
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:12 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://sopalk.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
sopalk.com/r/p.html?f=oyquajn&e=1673062821466
200 OK 2.7 kB URL HTTP/2 sopalk.com/r/p.html?f=oyquajn&e=1673062821466
IP
Hash f1f2b536db024acb50804da6051f8a0e
8292fb1b36f66a45f281f5ecb0406ce719130463
091f0902724ae521e34d1d1df6f33067804e849a226b5e0763b380ce4f4dce7f
GET /r/p.html?f=oyquajn&e=1673062821466 HTTP/1.1
Host: sopalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Tue, 25 Oct 2022 13:58:03 GMT
x-amz-version-id: 6P847P_3pwRq3kg1dbhEI8vZo9rD1MSu
server: AmazonS3
content-encoding: gzip
date: Sun, 27 Nov 2022 16:28:28 GMT
etag: W/"1d799671c4d6a9304651b1b9d6a783fb"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BQvs76CEFgcre0Lg20MtgQ2qtBHl5EBOxcKuj44AZFVEWJOQ9P11bg==
age: 11387
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
sopalk.com/r/p.html?f=lxvmphjej&e=1673062821466
200 OK 2.4 kB URL HTTP/2 sopalk.com/r/p.html?f=lxvmphjej&e=1673062821466
IP
Hash 9f92cd8366ddcc16492d02b508e9dda7
51ed70e899d229ff8deaadb9be0dab84f0cae4a3
852c53609659fa9c3bbf07e889d214ba16c178508eb0a53688c901f5ecbe2938
GET /r/p.html?f=lxvmphjej&e=1673062821466 HTTP/1.1
Host: sopalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Tue, 25 Oct 2022 13:58:03 GMT
x-amz-version-id: 6P847P_3pwRq3kg1dbhEI8vZo9rD1MSu
server: AmazonS3
content-encoding: gzip
date: Sun, 27 Nov 2022 16:28:28 GMT
etag: W/"1d799671c4d6a9304651b1b9d6a783fb"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oofk3ZXK4fTmZy6mdVj-slTkLCwZsYs28-v7_27Y5XJKOp72xtXdCA==
age: 11387
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash cd1d1c99b402c4d0a3d267a224ea9326
4598c29c37f3525a894e87d3fbc312af4e8cae6c
4cb150b457352ecd1a432f06c0f0d8c3343da37d8212e68a963082de81d8a37e
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 653
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:13 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://sopalk.com
AN-X-Request-Uuid: 7dfe899e-15eb-4738-ae26-99de3d418fd5
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prebid.smilewanted.com/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 301
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
cache-control: no-cache, private
access-control-allow-origin: https://sopalk.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52a72de215fc-ARN
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,a552940b-cd2d-4b6d-9075-e8db8a0f99c2,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891611&tk_flint=pbjs_lite_v7.19.0&x_source.tid=6308c389-7895-49fa-8fad-cd5615545cd4&l_pb_bid_id=8f679b311016528&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.3402714059230586
200 OK 388 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,a552940b-cd2d-4b6d-9075-e8db8a0f99c2,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891611&tk_flint=pbjs_lite_v7.19.0&x_source.tid=6308c389-7895-49fa-8fad-cd5615545cd4&l_pb_bid_id=8f679b311016528&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.3402714059230586
IP
File type JSON data\012- , ASCII text, with very long lines (388), with no line terminators
Hash 61f607a313488a75ca5ccd1b354ed027
881f3b3dab47b6dfbd5b64a7355f044f42c15b54
a01e1edb7b9193b9809e62e3271420751eb8edfacca40d6bd561b97bb590454c
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,a552940b-cd2d-4b6d-9075-e8db8a0f99c2,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891611&tk_flint=pbjs_lite_v7.19.0&x_source.tid=6308c389-7895-49fa-8fad-cd5615545cd4&l_pb_bid_id=8f679b311016528&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.3402714059230586 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LAZRKJ3B-18-H2JG; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qryutCILqlLQe9DtVM30fCgsc7/zDE2e/jO573NBZd5Qv4/TxlHJkA6Ij5wYjJQab8x+FptCLf6Skd2+VzOS4u9; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 388
X-Firefox-Spdy: h2
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 16cc6645946d2dca7f242df6b71b2234
4ac644f59ff7e2a31ea4a65d95208b5ede6eec88
8fd094d5f3b24915705fca6278aa64d3e0c55fa5ed5506a6d3e27606585ec432
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 998
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://sopalk.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=94488133880&lsavail=0
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=94488133880&lsavail=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.19.0&cb=94488133880&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 530
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:12 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://sopalk.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 64e2404caa8a71ce266bc5a194c74b56
59bb60bb6b31386b282e1f8b23185d32909bf6b6
0ba2e53493725346e9aab5fc17b03b3971c883fde9d1f95c29f364c913606958
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 998
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://sopalk.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
sopalk.com/r/p.html?f=izwxzcrpg&e=1673062821466
200 OK 2.5 kB URL HTTP/2 sopalk.com/r/p.html?f=izwxzcrpg&e=1673062821466
IP
Hash 5b04091b08dad185a8d69e8932f1ab04
9740ffe84508d20e201faeeb4f2d776734a50492
8f0afe9bb46ec49d926cbea78fc20e72b9cf25084ce4a317ebf533f86e3ea92c
GET /r/p.html?f=izwxzcrpg&e=1673062821466 HTTP/1.1
Host: sopalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Tue, 25 Oct 2022 13:58:03 GMT
x-amz-version-id: 6P847P_3pwRq3kg1dbhEI8vZo9rD1MSu
server: AmazonS3
content-encoding: gzip
date: Sun, 27 Nov 2022 16:28:28 GMT
etag: W/"1d799671c4d6a9304651b1b9d6a783fb"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fREQB3-CVeWZjXtyzJ3Uh6--ROG07Tq8sIiEM_U-09uXUG0nB2fA2Q==
age: 11387
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
prebid.smilewanted.com/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 301
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
cache-control: no-cache, private
access-control-allow-origin: https://sopalk.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52a74dfc15fc-ARN
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 585 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1136), with no line terminators
Hash 2d4a157981ef125175f54ac990bdb644
c425696e6c90b288752df3ca89581c721099602a
cac7af833e564b8fe24fdd3a7285cc90b35d2ecffaa3de52c4a558075225bda2
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 360
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Sun, 27 Nov 2022 19:38:12 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12999%3b%24o%3d11100; expires=Mon, 27 Nov 2023 19:38:12 GMT; domain=.smartadserver.com; path=/
vs=559577=5209658; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 27 Nov 2023 19:38:12 GMT; domain=.smartadserver.com; path=/
pid=529668647373028033; expires=Mon, 27 Nov 2023 19:38:12 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638051746930007516&o=1; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
prebid.smilewanted.com/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 300
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
cache-control: no-cache, private
access-control-allow-origin: https://sopalk.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52a76e1e15fc-ARN
X-Firefox-Spdy: h2
platform-cdn.sharethis.com/img/print.svg
200 OK 384 B URL HTTP/2 platform-cdn.sharethis.com/img/print.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash f13e866e7f19263a292ab3997e01fb17
49d5da1fe39a06f97b6a6cfcf2c03d61235e5a7d
30e817756a474c7f893057d069f7ed56e1fd4617d70fcf40ac5d58fae5890ede
GET /img/print.svg HTTP/1.1
Host: platform-cdn.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 384
last-modified: Thu, 10 Oct 2019 01:20:13 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sat, 05 Nov 2022 05:28:49 GMT
cache-control: public, max-age=2592000
etag: "f13e866e7f19263a292ab3997e01fb17"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zJfb1FzRU6F2V1T58PsWiqL5VJFzncysBdb0Tdi0rB-Fx5sGriD_pg==
age: 1951766
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
platform-cdn.sharethis.com/img/facebook.svg
200 OK 301 B URL HTTP/2 platform-cdn.sharethis.com/img/facebook.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash c6e9be45643e197ce1db1d7e24a99adc
d7338e398bb0f7a9082d24f121140d2cf9e88859
768d97ec0916217ae82c70aeda3a61b9b0dab344edc4a3240a4f7cd94af00307
GET /img/facebook.svg HTTP/1.1
Host: platform-cdn.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 301
last-modified: Thu, 10 Oct 2019 01:20:12 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Thu, 03 Nov 2022 15:33:17 GMT
cache-control: public, max-age=2592000
etag: "c6e9be45643e197ce1db1d7e24a99adc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jvAACDe80bEGgovTuuDEojezSb7DnYaONpmnLGEjLy4kEQ48pryAXQ==
age: 2088296
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
platform-cdn.sharethis.com/img/whatsapp.svg
200 OK 832 B URL HTTP/2 platform-cdn.sharethis.com/img/whatsapp.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (676)
Hash afe7fc60ed757db39a88d2950fce69c9
e120b53e856848419275723e24a539359cf41b4a
847eb36b4dc4b05f94052dcd98077319e74d882334a106bb9ca451ba211c9c2c
GET /img/whatsapp.svg HTTP/1.1
Host: platform-cdn.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 832
date: Thu, 10 Nov 2022 06:34:01 GMT
last-modified: Thu, 10 Oct 2019 01:20:13 GMT
etag: "afe7fc60ed757db39a88d2950fce69c9"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=2592000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jy3yCudAoyQsiNel0jWr_or-w7QQrRb6z4k9ghgrZzI0-MZPvaB9iw==
age: 1515853
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
platform-cdn.sharethis.com/img/pinterest.svg
200 OK 771 B URL HTTP/2 platform-cdn.sharethis.com/img/pinterest.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (615)
Hash 2b10a062e719c64b686e2e8fcdc216dc
38bd37fa3975f4d5b849763359481d8b31bb80ba
efc737b4f58cfe73a9bd0e57d7570365701381da31e628b269e7217a0ce3359d
GET /img/pinterest.svg HTTP/1.1
Host: platform-cdn.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 771
date: Sat, 29 Oct 2022 01:10:18 GMT
last-modified: Thu, 10 Oct 2019 01:20:13 GMT
etag: "2b10a062e719c64b686e2e8fcdc216dc"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=2592000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SMm5L2NGjcETXbWvL2V103zJ7zkJPD3bW-zT_nD15WA-dkyCZIzvSA==
age: 2572076
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
platform-cdn.sharethis.com/img/blogger.svg
200 OK 760 B URL HTTP/2 platform-cdn.sharethis.com/img/blogger.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (604)
Hash 7418e0977d7144a1bdf6ba36f291b093
b8ab96eaf0e028e40bf78534e4d8af674a63577c
2b68a13f6d142fc5e69efc0ca98c093d894325ee0d2064463ca0da80a6da2c4b
GET /img/blogger.svg HTTP/1.1
Host: platform-cdn.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 760
date: Tue, 01 Nov 2022 08:52:23 GMT
last-modified: Thu, 10 Oct 2019 01:20:12 GMT
etag: "7418e0977d7144a1bdf6ba36f291b093"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=2592000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2U57QSpUgzDrX-5TyPROezxZ_pZPTxScHG_H1j1GUDHZNHFezvVlPA==
age: 2285151
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
platform-cdn.sharethis.com/img/twitter.svg
200 OK 731 B URL HTTP/2 platform-cdn.sharethis.com/img/twitter.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (575)
Hash 0af2fb38987598376c99e21af17ade45
bfbdfd0b1a2dcef714e347928bd11b8410dc7ca2
7c93346d4f681a0be90d1dfc19346382a4700f1810f41caa54415688dee1777f
GET /img/twitter.svg HTTP/1.1
Host: platform-cdn.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 731
last-modified: Thu, 10 Oct 2019 01:20:13 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sat, 29 Oct 2022 07:08:03 GMT
cache-control: public, max-age=2592000
etag: "0af2fb38987598376c99e21af17ade45"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RUNsZkKbY6V2RO7hW0cGU-Nb7ZNPvMBB--nKSJlK3xfqfYtvEImXfA==
age: 2550611
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 504 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1013), with no line terminators
Hash e0242cbb3b37ad4337ae94be0870f82c
bfe712e63def345c76b44cfcfedbc5fbe85516c7
cc75886b2d9fdf2afc1c589fff4ec16c38be3fd917bdfb2f11354d5a16dc3c18
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 397
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Sun, 27 Nov 2022 19:38:12 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12999%3b%24o%3d11100; expires=Mon, 27 Nov 2023 19:38:12 GMT; domain=.smartadserver.com; path=/
vs=559577=5209658; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 27 Nov 2023 19:38:12 GMT; domain=.smartadserver.com; path=/
pid=3396001607359707800; expires=Mon, 27 Nov 2023 19:38:12 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638051746929968842&o=1; expires=Mon, 28 Nov 2022 19:38:12 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Mon, 28 Nov 2022 19:38:12 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 96a320bed41105121c89b44bdc895c26
4aa8803db6c9c3ab31c90500316c7f26e1d146ef
ae452f0f6e17ce9fd3e5391d6c06010b48ae46a021c59b18b4465eacc44d3d9a
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 654
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:13 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://sopalk.com
AN-X-Request-Uuid: 75980d6c-4f35-4eaa-87d1-651cb85e4bf4
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
platform-cdn.sharethis.com/img/diaspora.svg
200 OK 1.5 kB URL HTTP/2 platform-cdn.sharethis.com/img/diaspora.svg
IP
Hash a38614addb4a8aaa773ec44228786bb2
a16043ca69435a9db9041c34e971b2a9a8afa0f5
bf92a2a238beba24bc81aa5d0bfd3c3e8d1fff06ec1c871a72c368106e0f00e8
GET /img/diaspora.svg HTTP/1.1
Host: platform-cdn.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Sat, 05 Nov 2022 16:03:01 GMT
last-modified: Thu, 10 Oct 2019 01:20:12 GMT
etag: W/"d2745ce9cdc229a9c7d3858be54386a0"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=2592000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RfK3bHUhrlX3DEVcnPZRsFhBGw-pBsHS-dfcwt5cq7PWXD8R9wAgxg==
age: 1913712
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=83376004557&lsavail=0
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=83376004557&lsavail=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.19.0&cb=83376004557&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 530
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:12 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://sopalk.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 15e8c070789e78a6b7f86ab8dcee23c3
8c9545e447d085dd9bb40479009b4491e8ee8ea6
84c88c476d7eb26a8e5272b040dcb81fb2ccec4cbaa6059758dd012499abc710
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 998
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://sopalk.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
prebid.smilewanted.com/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 299
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
cache-control: no-cache, private
access-control-allow-origin: https://sopalk.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52a7ee8c15fc-ARN
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 425 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (763), with no line terminators
Hash 65ac3cc0cafc6f0b5a2f56d81d57d4e1
40d0e2d30fb86ea1c4d716b222ff9c156a5a967e
8759e5184d24d38b86d78b9bfb2e5bd9c14c7239a48305182b798cdef5c8b1a9
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 360
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Sun, 27 Nov 2022 19:38:13 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12999%3b%24o%3d11100; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
vs=559577=5209658; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
pid=9183211520343194182; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638051746930966519&o=1; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=20421009632&lsavail=0
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=20421009632&lsavail=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.19.0&cb=20421009632&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 530
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:12 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://sopalk.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 140 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 280d6fb313b15094d337f7d174653f62
420ee1cd3ebf393264187f5e9812cb5ddc6c37a0
147c58ffb59310c3f5e1f25ece46fb2b68505123e0b7fceff03b5d2aff0f9236
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 697
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:13 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 140
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://sopalk.com
AN-X-Request-Uuid: a6c10193-d787-48ed-bf44-672a9cd57677
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,b1d9dfc0-8665-43b0-9584-9b12035cd708,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891625&tk_flint=pbjs_lite_v7.19.0&x_source.tid=ffaaa155-7fe4-47b9-bb2c-7eb7a304fe16&l_pb_bid_id=1272c87d9168b4a8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.9063115332519819
200 OK 388 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,b1d9dfc0-8665-43b0-9584-9b12035cd708,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891625&tk_flint=pbjs_lite_v7.19.0&x_source.tid=ffaaa155-7fe4-47b9-bb2c-7eb7a304fe16&l_pb_bid_id=1272c87d9168b4a8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.9063115332519819
IP
File type JSON data\012- , ASCII text, with very long lines (388), with no line terminators
Hash 03cac36f3ff258cdd30235a35f8b1b5c
5788a51f9bab6adc77ff392b63d44c8b5c0bb042
c437ea9f554e987194e428970672d1d7c3d797b6f6441e076e97885b493b8a4c
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,b1d9dfc0-8665-43b0-9584-9b12035cd708,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891625&tk_flint=pbjs_lite_v7.19.0&x_source.tid=ffaaa155-7fe4-47b9-bb2c-7eb7a304fe16&l_pb_bid_id=1272c87d9168b4a8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.9063115332519819 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LAZRKJ6U-11-DP7; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qpsjZDsCr09sO9DtVM30fCgsc7/zDE2e/jO573NBZd5Qv4/TxlHJkA6Ij5wYjJQab8x+FptCLf6Skd2+VzOS4u9; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 388
X-Firefox-Spdy: h2
platform-cdn.sharethis.com/img/buffer.svg
200 OK 725 B URL HTTP/2 platform-cdn.sharethis.com/img/buffer.svg
IP
Hash 8af381cc92e3a2880cc5246132290e7f
b263ccefa14f755c9c0b1b817eb2526721080f87
2be80ffd4bf1be4e11215c84a6fe796edaf1621b3d9d2409030d5e2a829841eb
GET /img/buffer.svg HTTP/1.1
Host: platform-cdn.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Thu, 10 Oct 2019 01:20:12 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Thu, 03 Nov 2022 05:21:34 GMT
cache-control: public, max-age=2592000
etag: W/"a68737565c4f154dc7056dd7dd2a861c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: m411qDmlz-nQTh9Dv8i4b6-c5wmjtD4yRQfBRb715JdxuAj3fsW_eA==
age: 2125000
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 520 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (877), with no line terminators
Hash ab85383cd4e2378ea0b4b77162a20e5b
e16861ce7d8d9123474eb55b8fd4c03178ccd6ca
2158bcce40164f6152f5414867990926d3177410da99980c2b8707b758e0b367
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 359
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Sun, 27 Nov 2022 19:38:12 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12999%3b%24o%3d11100; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
vs=559577=5209658; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
pid=3052829210693646883; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638051746931229243&o=1; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
prebid.smilewanted.com/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 299
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
cache-control: no-cache, private
access-control-allow-origin: https://sopalk.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52a82eca15fc-ARN
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=24702471186&lsavail=0
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=24702471186&lsavail=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.19.0&cb=24702471186&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 485
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:12 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://sopalk.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 140 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 6b42c511a49445aac8bc0dbbc15467e4
61a8a08f51637a335946fe644f6c26fdd21df92b
b75e317bfa3ec948531ec2b216240695e78bb4c215e6ad5f9e9583416a50b967
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 700
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:13 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 140
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://sopalk.com
AN-X-Request-Uuid: 35975444-6903-4779-92a7-a27ff94217ca
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,cb6ee3d7-a9b2-469c-ab82-3da5d25b3019,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891631&tk_flint=pbjs_lite_v7.19.0&x_source.tid=68b97220-092a-4143-909b-8f40445c42fb&l_pb_bid_id=106b422462a9e7b8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.9945902141971393
200 OK 388 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,cb6ee3d7-a9b2-469c-ab82-3da5d25b3019,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891631&tk_flint=pbjs_lite_v7.19.0&x_source.tid=68b97220-092a-4143-909b-8f40445c42fb&l_pb_bid_id=106b422462a9e7b8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.9945902141971393
IP
File type JSON data\012- , ASCII text, with very long lines (388), with no line terminators
Hash d2997579fcc038ac3be7c8f855edb738
e74085aa1261a001ea98cbee7c80dd1253436cff
078ab8ff68834991aed4b3bf57b2979598986e8b69bb499bc351e2c621c4b426
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,cb6ee3d7-a9b2-469c-ab82-3da5d25b3019,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891631&tk_flint=pbjs_lite_v7.19.0&x_source.tid=68b97220-092a-4143-909b-8f40445c42fb&l_pb_bid_id=106b422462a9e7b8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.9945902141971393 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LAZRKJ82-P-AO8L; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qoWDI9bH6MOU+9DtVM30fCgsc7/zDE2e/jO573NBZd5Qv4/TxlHJkA6Ij5wYjJQab8x+FptCLf6Skd2+VzOS4u9; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 388
X-Firefox-Spdy: h2
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash b7d035e0c7a3a5fe66fb07dd0e7c1fb9
07c0d10e369d8f8129429e21accd377c17237cbe
ab5a290fb020ca5fd8dd1f641169c76e16a2c5cbb8b418f103075059d567124a
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 997
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://sopalk.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
prebid.smilewanted.com/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 299
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
cache-control: no-cache, private
access-control-allow-origin: https://sopalk.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52a86efc15fc-ARN
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=24007746569&lsavail=0
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=24007746569&lsavail=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.19.0&cb=24007746569&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 485
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://sopalk.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891661&tk_flint=pbjs_lite_v7.19.0&x_source.tid=a65a305f-caf8-4acb-821c-f5c35a49f057&l_pb_bid_id=88170cb0bc215d8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.9402669561055151
200 OK 388 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891661&tk_flint=pbjs_lite_v7.19.0&x_source.tid=a65a305f-caf8-4acb-821c-f5c35a49f057&l_pb_bid_id=88170cb0bc215d8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.9402669561055151
IP
File type JSON data\012- , ASCII text, with very long lines (388), with no line terminators
Hash 0cd5d0edf941da81c74f3ff8172e7440
934c95f9182cc2317ada00c810f7595e42a2ff75
cbfacde6b64a2051c6c1eb44fde5f3b6d94e38e561877af60baea57168252aec
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891661&tk_flint=pbjs_lite_v7.19.0&x_source.tid=a65a305f-caf8-4acb-821c-f5c35a49f057&l_pb_bid_id=88170cb0bc215d8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.9402669561055151 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LAZRKJ94-1S-2DHX; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qpymDhSUTuGze9DtVM30fCgsc7/zDE2e/jO573NBZd5Qv4/TxlHJkA6Ij5wYjJQab8x+FptCLf6Skd2+VzOS4u9; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 388
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 599 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1009), with no line terminators
Hash ae5779f04b9c5b73d4f339c50654a58a
c9e2e6b7ac2e261034cf151b0a953025b482c427
ccf19c84985c82e8bb843ff2b4b444d9df2f121da9f2037b7caeb2a5147ac6aa
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 396
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Sun, 27 Nov 2022 19:38:12 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12999%3b%24o%3d11100; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
vs=559577=5209658; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
pid=6628310040603572859; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638051746931886734&o=1; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 3c1defc10ede31a81aaf210685089470
f241095263307d393bff33f8a8991feff84eecec
72a0907bc8456a038248291076f432f19906f8281092ae5c34f4ae5660e4407d
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 998
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://sopalk.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
prebid.smilewanted.com/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 301
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
cache-control: no-cache, private
access-control-allow-origin: https://sopalk.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52a8bf3c15fc-ARN
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 144 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 29d54202dbd23be683bdbf0a01f5cb25
14f38d8494f4d99fd41094b89c8c28b81f935755
3336aa8b37732db53176d24ef5abe48011810d173d7673633d11c90475737a02
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 652
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:13 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 144
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://sopalk.com
AN-X-Request-Uuid: 7801823f-a46e-4fc1-b9a2-ef349dc7a262
Set-Cookie: icu=ChgIprl7EAoYASABKAEwpfmOnAY4AUABSAEQpfmOnAYYAA..; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 25-Feb-2023 19:38:13 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=4679083502776463283; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 25-Feb-2023 19:38:13 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=6037103014&lsavail=0
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=6037103014&lsavail=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.19.0&cb=6037103014&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 485
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:12 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://sopalk.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891666&tk_flint=pbjs_lite_v7.19.0&x_source.tid=081a76dd-4088-4353-91bf-274718860ee9&l_pb_bid_id=8341968c446b158&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.8131792956210058
200 OK 388 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891666&tk_flint=pbjs_lite_v7.19.0&x_source.tid=081a76dd-4088-4353-91bf-274718860ee9&l_pb_bid_id=8341968c446b158&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.8131792956210058
IP
File type JSON data\012- , ASCII text, with very long lines (388), with no line terminators
Hash 30b93e072c0ecae6fc5f5df647b9228a
896032ca83679b132e3d1833c525fc30746270cb
fd25b0e4ac626673942b8d25ef814a796831e00b870aed3af76f11cdfdd6c7e1
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891666&tk_flint=pbjs_lite_v7.19.0&x_source.tid=081a76dd-4088-4353-91bf-274718860ee9&l_pb_bid_id=8341968c446b158&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.8131792956210058 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LAZRKJA4-27-4UMW; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qrXuF/TwhnH3+9DtVM30fCgsc7/zDE2e/jO573NBZd5Qv4/TxlHJkA6Ij5wYjJQab8x+FptCLf6Skd2+VzOS4u9; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 388
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 520 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1075), with no line terminators
Hash 52c7ef02aadbadbd992dca5d7e1c8b25
8ab7c223ee98bf0e9aabe7a9a843477a1e56165a
d784a4c0e539f03e4f348a5c3a2ad151d9ab0e041e203168c0d372d48f5545ff
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 359
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Sun, 27 Nov 2022 19:38:12 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12999%3b%24o%3d11100; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
vs=559577=5209658; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
pid=8763761556767161017; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638051746932376300&o=1; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
prg.smartadserver.com/prebid/v1
200 OK 518 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (929), with no line terminators
Hash bfd4c04693cda3e0eaa18192ac8b3b0c
593a416a3c524b4e96ddafda96dd534a203c16ba
abf0418002e96331089e9acf2f613257a2b5a223a915f0082b6b3542a98f1c17
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 360
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Sun, 27 Nov 2022 19:38:13 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12999%3b%24o%3d11100; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
vs=559577=5209658; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
pid=1636899460956338794; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638051746932119630&o=1; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 8cca9ae57c101d1dbcb92f9012b4601b
b918a8e1bee1b3f00ce4faece8d6762192f9395e
9568e0adcc0a62ed2e5851957b72fd140c88814723e61616c72d52da08a70da5
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 998
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://sopalk.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
prebid.smilewanted.com/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 299
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
cache-control: no-cache, private
access-control-allow-origin: https://sopalk.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52a8ef5c15fc-ARN
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c27f9a2e9140a8e50508a18f9416b68c
d7f9728336f8520b0c9dee70c2c17cca3210bd25
417bd4a4e4baa3066d74408f242c43eb653b7d5cb748e59ee661b6e0d4c641f8
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 695
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:13 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://sopalk.com
AN-X-Request-Uuid: f045d17a-c423-42c8-9d7e-77d5bedd08b4
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 2a8b948a84cef9b81084b16fd9db7b2e
b288776dee28e244becd7686f65faef1650b2cc8
15d7cb0d31926791355f68b200f94eaccc976c3ec0c18bfc612a94510cb3b803
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 997
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://sopalk.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,1048b978-bec4-485e-bc62-597950795028,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891675&tk_flint=pbjs_lite_v7.19.0&x_source.tid=7f2de43d-9c48-4d04-bbaa-35cd5b43d0d4&l_pb_bid_id=10148920fa0fe4f8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.35344521454790834
200 OK 388 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,1048b978-bec4-485e-bc62-597950795028,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891675&tk_flint=pbjs_lite_v7.19.0&x_source.tid=7f2de43d-9c48-4d04-bbaa-35cd5b43d0d4&l_pb_bid_id=10148920fa0fe4f8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.35344521454790834
IP
File type JSON data\012- , ASCII text, with very long lines (388), with no line terminators
Hash 309ab938b2c69b15eee1d3b553d52f89
903d6c54b4fa8e81c923a436b70f1397c3a145af
37375787332c7dc8cc68cf7d73c2414c5fc81d6dec61499ee094c25cf54d5bbb
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,1048b978-bec4-485e-bc62-597950795028,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891675&tk_flint=pbjs_lite_v7.19.0&x_source.tid=7f2de43d-9c48-4d04-bbaa-35cd5b43d0d4&l_pb_bid_id=10148920fa0fe4f8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.35344521454790834 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LAZRKJBC-1-FCQT; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qqXnrtvkHEVzu9DtVM30fCgsc7/zDE2e/jO573NBZd5Qv4/TxlHJkA6Ij5wYjJQab8x+FptCLf6Skd2+VzOS4u9; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 388
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=9762904744&lsavail=0
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=9762904744&lsavail=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.19.0&cb=9762904744&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 530
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:12 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://sopalk.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 585 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1006), with no line terminators
Hash 267cc95320cdd324b34f590103d29972
33d8b144a26b6c1c296c9b44f503163a2723b720
a737d842b7450385140bf119775d7cd52c8c54bae439ffbe9a80c955bd095ef0
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 359
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Sun, 27 Nov 2022 19:38:13 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12999%3b%24o%3d11100; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
vs=559577=5209658; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
pid=5244464598510516915; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638051746932843305&o=1; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
prebid.smilewanted.com/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 299
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
cache-control: no-cache, private
access-control-allow-origin: https://sopalk.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52a93f9415fc-ARN
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 137 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a5ff26f6ba59bb34fd3d58cbc168693f
f3faa32972f064eddf4e25ee173a2cf0b56ebb1b
baa3333d35b9c0ba1f39b22c3ae92427e747a857e7f0dd74381eeea2ac5ea236
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 651
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:13 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 137
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://sopalk.com
AN-X-Request-Uuid: e7e14e3c-d210-4526-b9fa-3bd1b8af252e
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891669&tk_flint=pbjs_lite_v7.19.0&x_source.tid=44f4c1cd-bb5c-4f36-bfc6-b53ccb235655&l_pb_bid_id=6aced860d93d438&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6939531237347698
200 OK 388 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891669&tk_flint=pbjs_lite_v7.19.0&x_source.tid=44f4c1cd-bb5c-4f36-bfc6-b53ccb235655&l_pb_bid_id=6aced860d93d438&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6939531237347698
IP
File type JSON data\012- , ASCII text, with very long lines (388), with no line terminators
Hash 13949dcd3adbb48db1615e6b01558cf5
5b2a1e326174cb8840f7ddb2e22ccdca92c328c5
74ac456da6c5f6ac3d24b138a7c0cd78c26ffe9854a0a265efbb67bde0cd58ac
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891669&tk_flint=pbjs_lite_v7.19.0&x_source.tid=44f4c1cd-bb5c-4f36-bfc6-b53ccb235655&l_pb_bid_id=6aced860d93d438&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6939531237347698 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LAZRKJCA-1P-31RG; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qqrt7g8TwReXu9DtVM30fCgsc7/zDE2e/jO573NBZd5Qv4/TxlHJkA6Ij5wYjJQab8x+FptCLf6Skd2+VzOS4u9; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 388
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=1011444906&lsavail=0
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=1011444906&lsavail=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.19.0&cb=1011444906&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 485
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:12 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://sopalk.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 4afd3679f6f0084da6c02a661d1845e4
839308d0bfbc8f7d535eba985f0ecc7517ee9a21
f5fb9d1eb7c31ef71bcfb2f579bb8cbdec8c997992a273be0e7e1ecd6e79f654
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 999
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://sopalk.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 512 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (827), with no line terminators
Hash 8d6d25ed74ab9e4549f61e59047607e7
aa430051df8599d1ad13ebc2bec1741e0c7b2052
bbee8fa5d22b44f91b7748f9ef804c693efa4b2c504d9b19ae192ced9d1a99fe
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 396
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Sun, 27 Nov 2022 19:38:13 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12999%3b%24o%3d11100; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
vs=559577=5209658; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
pid=1099306002313165467; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638051746933318503&o=1; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=12678858448&lsavail=0
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=12678858448&lsavail=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.19.0&cb=12678858448&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 485
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://sopalk.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
prebid.smilewanted.com/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 301
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
cache-control: no-cache, private
access-control-allow-origin: https://sopalk.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52a97fdb15fc-ARN
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0b936d6157f0cf4fc47bc91fa11aceaa
4f62563d91da49864ccafcdf8fe9fa64fd85e814
44fe66f30cf5d803982942aefab0dedf3b48fdd714ed68240ba07ec633ec7ef3
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 649
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:13 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://sopalk.com
AN-X-Request-Uuid: 4a97b5a2-9a55-43ec-a77e-40f78f462224
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,8b84572b-62f1-4154-befc-6d41bd1574db,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891680&tk_flint=pbjs_lite_v7.19.0&x_source.tid=7ce8f728-3c19-439e-b389-ddd715a465bf&l_pb_bid_id=8eaf65a431a6d1&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.7764587780223964
200 OK 388 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,8b84572b-62f1-4154-befc-6d41bd1574db,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891680&tk_flint=pbjs_lite_v7.19.0&x_source.tid=7ce8f728-3c19-439e-b389-ddd715a465bf&l_pb_bid_id=8eaf65a431a6d1&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.7764587780223964
IP
File type JSON data\012- , ASCII text, with very long lines (388), with no line terminators
Hash 4b1ed1484125da7199a4a4594399d8f1
cb1af4fa271dd4e813214acc9928e1b44967fc39
705dce0c0c44ac98ed0262460bea9f4fc05a939ee5bda77ebf401b841b380c30
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,8b84572b-62f1-4154-befc-6d41bd1574db,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891680&tk_flint=pbjs_lite_v7.19.0&x_source.tid=7ce8f728-3c19-439e-b389-ddd715a465bf&l_pb_bid_id=8eaf65a431a6d1&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.7764587780223964 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LAZRKJDD-2-I3JD; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qrXF8yITP1Htu9DtVM30fCgsc7/zDE2e/jO573NBZd5Qv4/TxlHJkA6Ij5wYjJQab8x+FptCLf6Skd2+VzOS4u9; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 388
X-Firefox-Spdy: h2
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9fefdca89054450dbe10cc089bd01f3e
9e8c07a9bee8f612bd0d7b60a1d085fd3c2c0fad
ddbae327b2307a72bc4c3446fde767bee326d2519c934951d1b1512d7392d167
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 997
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://sopalk.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 524 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1023), with no line terminators
Hash 32ea700789379843915f07d962fe9533
907e5a36515d6985e63cd219b0c67eb241d708b9
3765af735a9f2d795df3d0168213f94b7734aa9a19c56678f9ed0331605b0d61
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 360
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Sun, 27 Nov 2022 19:38:13 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12999%3b%24o%3d11100; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
vs=559577=5209658; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
pid=147352979628145177; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638051746933625524&o=1; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
ib.adnxs.com/ut/v3/prebid
200 OK 137 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 958a0702b5031cc05e3f20488e7b4ace
ce27bb027ee47fa3bd9fff973e8a908f43c821c2
db381bd16e76fd6fc645ef5428d2f9d0ffe0c462ba06cec08be4c7568a55cd12
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 652
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:13 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 137
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://sopalk.com
AN-X-Request-Uuid: d8c5f6d9-929e-46a6-a4e8-71fb6ebd941c
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prebid.smilewanted.com/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 300
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
cache-control: no-cache, private
access-control-allow-origin: https://sopalk.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52a9a80c15fc-ARN
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=13252920277&lsavail=0
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=13252920277&lsavail=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.19.0&cb=13252920277&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 485
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://sopalk.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,89511d19-412e-4f6d-ba0a-aa6211870cf5,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891700&tk_flint=pbjs_lite_v7.19.0&x_source.tid=87d55037-80ec-484e-8708-0f96c9d69ff3&l_pb_bid_id=10f3a67d27a02788&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.7804902180729445
200 OK 388 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,89511d19-412e-4f6d-ba0a-aa6211870cf5,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891700&tk_flint=pbjs_lite_v7.19.0&x_source.tid=87d55037-80ec-484e-8708-0f96c9d69ff3&l_pb_bid_id=10f3a67d27a02788&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.7804902180729445
IP
File type JSON data\012- , ASCII text, with very long lines (388), with no line terminators
Hash 00388e5ffc6d39204164de0416d405c0
7b244dec89459fd7b21f4c1c06249fe7f64a10cd
3c1ec68ce6e9c5ff295a36ad35a4d5170f0706a93881cba700d1bc238ed23f80
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,89511d19-412e-4f6d-ba0a-aa6211870cf5,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891700&tk_flint=pbjs_lite_v7.19.0&x_source.tid=87d55037-80ec-484e-8708-0f96c9d69ff3&l_pb_bid_id=10f3a67d27a02788&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.7804902180729445 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LAZRKJEK-R-E3SB; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qrvndL0Y85a9O9DtVM30fCgsc7/zDE2e/jO573NBZd5Qv4/TxlHJkA6Ij5wYjJQab8x+FptCLf6Skd2+VzOS4u9; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 388
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5e0d486f14f55ee78838da4d17893629
7ba4a438c2ff6473386404382e8f6fadfb8aebae
58f24166f5198494077e42c5ad1542220e6d68cdda453c9d83146f554b5a0fd6
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 699
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:13 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://sopalk.com
AN-X-Request-Uuid: 3e6e3c06-78c3-4226-80d8-32dfba392d01
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prg.smartadserver.com/prebid/v1
200 OK 533 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1011), with no line terminators
Hash dddc4cf53132e299a6a416b401a0a3be
91bc54b344f022fa9f6dae32e076d379cf0685b9
8db9879dea35887948653add5c68d5eb46dbea7548d8f34a326d1e25e00d862d
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 395
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Sun, 27 Nov 2022 19:38:12 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12999%3b%24o%3d11100; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
vs=559577=5209658; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
pid=3895312815607822939; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638051746931156184&o=1; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
prebid.smilewanted.com/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 299
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
cache-control: no-cache, private
access-control-allow-origin: https://sopalk.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52a9d83215fc-ARN
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 489 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (958), with no line terminators
Hash 52110f9976ead5ada13f094e4eac200a
b8eb76aca5ea0436c8f2a85e7b05c123a19f6b2f
567ad948fad95e2b669215bb744477c48c48f2b9991783ade94729f1e0f540ec
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 396
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Sun, 27 Nov 2022 19:38:13 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12999%3b%24o%3d11100; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
vs=559577=5209658; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
pid=1382436482757999131; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638051746934062155&o=1; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash afd73f88d8335034c96a0c8f4ebd740f
1d20bc4a7935a0ffc3da72fe54b1ea16c13bab73
682b1ee5094d706338fadda17673cd4d5820a240ab89ed136faed3c865eccb79
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 997
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://sopalk.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f7658aeaac965f642a06dafb11d9d08a
43242e9db8f184ad715dc00f8a7334eaab3791cb
3feeb677c80e383961f41fe6be885387f2a12ed68e2ecac40703703c8d801629
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 652
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:13 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://sopalk.com
AN-X-Request-Uuid: dbe01f48-08b3-43aa-b0f8-47cded9b9611
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891710&tk_flint=pbjs_lite_v7.19.0&x_source.tid=324e7610-a26e-4518-90ca-fec2958bafd7&l_pb_bid_id=68c277582d7b6c&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.34426116911005256
200 OK 388 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891710&tk_flint=pbjs_lite_v7.19.0&x_source.tid=324e7610-a26e-4518-90ca-fec2958bafd7&l_pb_bid_id=68c277582d7b6c&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.34426116911005256
IP
File type JSON data\012- , ASCII text, with very long lines (388), with no line terminators
Hash 88fd6f228884c389bd257bd9eeae1620
41fceb44d9e39ce7841f0714934478477478271e
00bc98a338ced370600d86cd05760ea8cb11f50b87e76047fe89d7d9999b56fc
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891710&tk_flint=pbjs_lite_v7.19.0&x_source.tid=324e7610-a26e-4518-90ca-fec2958bafd7&l_pb_bid_id=68c277582d7b6c&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.34426116911005256 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LAZRKJFZ-C-9L8K; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qpC6+3c2Xh2bu9DtVM30fCgsc7/zDE2e/jO573NBZd5Qv4/TxlHJkA6Ij5wYjJQab8x+FptCLf6Skd2+VzOS4u9; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 388
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=4236124728&lsavail=0
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=4236124728&lsavail=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.19.0&cb=4236124728&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 530
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:12 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://sopalk.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a889f8573f5caaa601ef151bc72b24b0
dfe8fec8b6042728432647cf659b6d877755e27e
4c87f8cfa8cf752326804f70e957263eb626ea842a04938a26a40a8798b42922
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 998
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://sopalk.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
prebid.smilewanted.com/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 299
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
cache-control: no-cache, private
access-control-allow-origin: https://sopalk.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52aa388215fc-ARN
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f95cd0d3ccc461a9adab1fda0d1c986c
f0d0f73a3e5c3007acb746a2b73d6cffc377c616
78b967dd3f5a2d06f3049fcc1f72b45caeabf87722d5e879357d159a9feb7b0d
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 652
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:13 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://sopalk.com
AN-X-Request-Uuid: c1c83a47-94f4-4356-ab27-dadab9f78874
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 562
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 27 Nov 2022 19:38:11 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://sopalk.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891715&tk_flint=pbjs_lite_v7.19.0&x_source.tid=a6963cc8-c106-4732-8b8e-00c725c527f3&l_pb_bid_id=12fdb585f46db47&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.37579662732515395
200 OK 388 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891715&tk_flint=pbjs_lite_v7.19.0&x_source.tid=a6963cc8-c106-4732-8b8e-00c725c527f3&l_pb_bid_id=12fdb585f46db47&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.37579662732515395
IP
File type JSON data\012- , ASCII text, with very long lines (388), with no line terminators
Hash ae12f68746f12d5d22b5dca951d7171b
09ca16fed0553c591eebaaec72ded714eaffc223
ce7eb3a90b59c7f19b7799ce3b2a2e91e075a48f000e706f25f1b256214ccde2
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891715&tk_flint=pbjs_lite_v7.19.0&x_source.tid=a6963cc8-c106-4732-8b8e-00c725c527f3&l_pb_bid_id=12fdb585f46db47&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.37579662732515395 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LAZRKJHH-1M-BIFG; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qo8NvfBvtEwRu9DtVM30fCgsc7/zDE2e/jO573NBZd5Qv4/TxlHJkA6Ij5wYjJQab8x+FptCLf6Skd2+VzOS4u9; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 388
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=19631419102&lsavail=0
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=19631419102&lsavail=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.19.0&cb=19631419102&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 485
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:12 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://sopalk.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 524 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1137), with no line terminators
Hash 5143503dd87ebcac8a8424debea04246
444b852b6dc51f122dd8f05e5f4cdba68d1d33d9
964b2c602817754c07fb33f97214b02a48065441913ca83831359ae60852497f
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 359
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Sun, 27 Nov 2022 19:38:12 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12999%3b%24o%3d11100; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
vs=559577=5209658; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
pid=1222465117238901359; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638051746934801804&o=1; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 74fa5f094ba5e6d0b9ce89cb479b7464
82640fe0dd061cca3cd3134429214314cdf359f8
3162473398b6af080b700993a85c0b29c39ed4ba61ba11244b8b0ed5bd07d169
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 998
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://sopalk.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 433 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (862), with no line terminators
Hash b8c9bbd77d5c660d3a30dd16200d6816
ba4561f30e08651f068d66054e2d9078fd3833be
388c7f1d21b7dba6a6040484b08448f417bab2a1778244ddaacc811158d8cf53
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 360
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Sun, 27 Nov 2022 19:38:12 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12999%3b%24o%3d11100; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
vs=559577=5209658; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
pid=4168746823266384481; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638051746934962806&o=1; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 562
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 27 Nov 2022 19:38:11 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://sopalk.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
prebid.smilewanted.com/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 300
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
cache-control: no-cache, private
access-control-allow-origin: https://sopalk.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52aa98ce15fc-ARN
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=83355693726&lsavail=0
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=83355693726&lsavail=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.19.0&cb=83355693726&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 485
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://sopalk.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a572d35507a0583845af0552af0c0903
637566ce5b8ac8249e352548900b2a3e7830696d
1d2f3fcf53bc2b88d2e462a625e3e4d3f09be9fcb4bca037d7eddd697deb69c9
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 650
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:13 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://sopalk.com
AN-X-Request-Uuid: e55b3aae-2971-40c4-a23a-c392c1e1419b
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891725&tk_flint=pbjs_lite_v7.19.0&x_source.tid=d737e94c-6714-48e8-9515-dfa30393627c&l_pb_bid_id=2dd5bb6e5e8b43&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.2767031241384661
200 OK 388 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891725&tk_flint=pbjs_lite_v7.19.0&x_source.tid=d737e94c-6714-48e8-9515-dfa30393627c&l_pb_bid_id=2dd5bb6e5e8b43&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.2767031241384661
IP
File type JSON data\012- , ASCII text, with very long lines (388), with no line terminators
Hash 189863154d05c589fee7b4f8e2b4081a
0bf73c3580718168452f0cd7928159489e41a89e
6aefa769ef81ba0b5eab96c81f5042b4558b5f729c53d3e78fafbded2a72f29c
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891725&tk_flint=pbjs_lite_v7.19.0&x_source.tid=d737e94c-6714-48e8-9515-dfa30393627c&l_pb_bid_id=2dd5bb6e5e8b43&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.2767031241384661 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LAZRKJIL-L-AQQ1; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qoBtFgmlTpv1e9DtVM30fCgsc7/zDE2e/jO573NBZd5Qv4/TxlHJkA6Ij5wYjJQab8x+FptCLf6Skd2+VzOS4u9; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 388
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 580 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1015), with no line terminators
Hash 65f67dd537c75ec0cbe797db8c7dde8d
1ee520f1cbdb5d652134faf213f246b991cde759
530a6c7f221c01a984c9fe25e4887328da3c04b09e37a8f84e1c4ca723141fd1
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 359
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Sun, 27 Nov 2022 19:38:13 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12999%3b%24o%3d11100; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
vs=559577=5209658; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
pid=8113319730797132399; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638051746935392226&o=1; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 3a5e8ef1562a1525b5c758eb27864f0a
7d24e62e9bd5997afa2d20c7d7c6cfa6e3d1244c
9d9a82488fbcd17dbf1b29abf36cb1812e7f84af50357bb0869c0006185c85b4
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 997
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://sopalk.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
prebid.smilewanted.com/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 300
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
cache-control: no-cache, private
access-control-allow-origin: https://sopalk.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52aad8fe15fc-ARN
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 607
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 27 Nov 2022 19:38:11 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://sopalk.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=43198938940&lsavail=0
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=43198938940&lsavail=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.19.0&cb=43198938940&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 530
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:12 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://sopalk.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash db67ed1a5cee688ecf05a3f814169930
9c79c9cda39b711e78814be3312aab51063f655d
a5c9f5b90a462b433d476ae2fd65502f2ea9ba62ad785264c77be526a8dfbc6c
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 653
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:13 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://sopalk.com
AN-X-Request-Uuid: bd12a670-c81b-4e1a-8078-848b5020a7e8
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f7154c14113a2705eac77b22da575bff
c50ea05b9702a0f15c623f641e4fabe5ffb94d67
1301c3751954332ca6f043a691cb0b4a035215fc7684ce47a6e1172f135b7ab8
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 997
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://sopalk.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,b6c5523a-0e8f-488a-beca-0eebde099156,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891731&tk_flint=pbjs_lite_v7.19.0&x_source.tid=5e472c3c-7513-4096-89a4-b4dc8fe1fc5e&l_pb_bid_id=14293413f1d3cb18&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.3013424693169775
200 OK 388 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,b6c5523a-0e8f-488a-beca-0eebde099156,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891731&tk_flint=pbjs_lite_v7.19.0&x_source.tid=5e472c3c-7513-4096-89a4-b4dc8fe1fc5e&l_pb_bid_id=14293413f1d3cb18&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.3013424693169775
IP
File type JSON data\012- , ASCII text, with very long lines (388), with no line terminators
Hash 660bc4da5cbf006ce730e1dd99b906ee
91025e785718fb5dc83ecde1495d950e233190d1
113a48c598e81e3979406e6cec78109de358c3033b320ebe7a1902232edd71a2
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,b6c5523a-0e8f-488a-beca-0eebde099156,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891731&tk_flint=pbjs_lite_v7.19.0&x_source.tid=5e472c3c-7513-4096-89a4-b4dc8fe1fc5e&l_pb_bid_id=14293413f1d3cb18&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.3013424693169775 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LAZRKJJV-E-K19Z; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|SDziDG3X/EjCaw/6dBOG5e9DtVM30fCgsc7/zDE2e/jO573NBZd5Qv4/TxlHJkA6Ij5wYjJQab8x+FptCLf6Skd2+VzOS4u9; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 388
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 562
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 27 Nov 2022 19:38:11 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://sopalk.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=54145632602&lsavail=0
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=54145632602&lsavail=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.19.0&cb=54145632602&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 485
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://sopalk.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 00fc8117293d8ee90362ba8c8e9677c4
048864e92e88a09aebeb77578834e098b105e7aa
b92f5064f032d1e79b72948f9faeeb8999cd3a8d622354599922f5bdb4f6792d
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 651
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:13 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://sopalk.com
AN-X-Request-Uuid: 1ef08fe0-a95f-46ab-aafe-a18a4fc1c879
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prebid.smilewanted.com/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 301
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
cache-control: no-cache, private
access-control-allow-origin: https://sopalk.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52ab193215fc-ARN
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 510 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1150), with no line terminators
Hash c7f33d2923870e1986a633e4075d2183
39c6d3bcd24368858ba6b725763665876a584b6b
362cba561bffc9399447c104afdc5543c2589abac8aeaf15219a37dc50cd8df8
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 361
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Sun, 27 Nov 2022 19:38:12 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12999%3b%24o%3d11100; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
vs=559577=5209658; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
pid=6432814360629132015; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638051746936027766&o=1; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891736&tk_flint=pbjs_lite_v7.19.0&x_source.tid=f4b18e3f-1437-44e1-ac41-f3a45ab86e3f&l_pb_bid_id=6e6e1fc259ae058&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.3213879464735384
200 OK 388 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891736&tk_flint=pbjs_lite_v7.19.0&x_source.tid=f4b18e3f-1437-44e1-ac41-f3a45ab86e3f&l_pb_bid_id=6e6e1fc259ae058&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.3213879464735384
IP
File type JSON data\012- , ASCII text, with very long lines (388), with no line terminators
Hash d48c356e5047340189b1bc3bd458643c
d22c5757834855c95d9988688be5b15f5a32e1b6
0f308d5b00124f7b6c5924fa7e0ef88272cb4ba8d29d0c3bae99856dc2183f0a
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891736&tk_flint=pbjs_lite_v7.19.0&x_source.tid=f4b18e3f-1437-44e1-ac41-f3a45ab86e3f&l_pb_bid_id=6e6e1fc259ae058&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.3213879464735384 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LAZRKJKQ-1J-DOX6; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qrOMZnj+DFvae9DtVM30fCgsc7/zDE2e/jO573NBZd5Qv4/TxlHJkA6Ij5wYjJQab8x+FptCLf6Skd2+VzOS4u9; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 388
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 545 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1124), with no line terminators
Hash 07fcb5eeb3a8899e7f5e4ffb90f4f7b5
1079df22a48a7f331c2f56c7028b5578dff10546
360b84b8553c129e400a77f1ba158a9edb3b444db11ebeebd7518a8a80b0ad86
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 360
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Sun, 27 Nov 2022 19:38:12 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12999%3b%24o%3d11100; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
vs=559577=5209658; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
pid=8816914281021094507; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638051746936194078&o=1; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
prebid.smilewanted.com/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 300
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
cache-control: no-cache, private
access-control-allow-origin: https://sopalk.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52ab495215fc-ARN
X-Firefox-Spdy: h2
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 6560bd4983a8f522b1e0c81ac74bcdd1
bd161acf69ba2e0efbe4c108a1761b0eb599c64a
0f7841cf8294e71725ca08a12d50df9103076895a3ddcf9875dbc4c2e6f7f0a0
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 998
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://sopalk.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891740&tk_flint=pbjs_lite_v7.19.0&x_source.tid=53036f36-ce85-4403-9d95-6a1b069371e5&l_pb_bid_id=203b5bb3592aee8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.7549782990940382
200 OK 388 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891740&tk_flint=pbjs_lite_v7.19.0&x_source.tid=53036f36-ce85-4403-9d95-6a1b069371e5&l_pb_bid_id=203b5bb3592aee8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.7549782990940382
IP
File type JSON data\012- , ASCII text, with very long lines (388), with no line terminators
Hash a02afb4c85a00c0e0d0109fafbdc3ad7
80112d5f6f3c59392292369f74138ae04a70b58e
fc58df7f44e3aac403582f47b2a093214c38f3f8639e4063ac0a3a062b831977
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891740&tk_flint=pbjs_lite_v7.19.0&x_source.tid=53036f36-ce85-4403-9d95-6a1b069371e5&l_pb_bid_id=203b5bb3592aee8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.7549782990940382 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LAZRKJLT-T-LO2M; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qrOQQhDm/L/7e9DtVM30fCgsc7/zDE2e/jO573NBZd5Qv4/TxlHJkA6Ij5wYjJQab8x+FptCLf6Skd2+VzOS4u9; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 388
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 607
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 27 Nov 2022 19:38:11 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://sopalk.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 140 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 96ab8a10befef54f1599f5278e4f1896
4e88aeb50d6c12f1e5d8d02e6407f2e1727aba08
04bbacddb0a3852d906f739d79327184c3f8777b3af4ea2f67896e4be67a14c0
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 696
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:13 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 140
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://sopalk.com
AN-X-Request-Uuid: c026b430-b39e-4180-9e95-0bdc683eedb1
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f5fa4e540e8d825646c01178b57f106a
efb56b2433a2bcf4fce6b0b516066358ab38cd2a
d62eb7a37511410b9d85cd013b9d842daaac25e41a71eb7fb8b7e4b6b97b2d58
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 998
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://sopalk.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=17630997401&lsavail=0
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=17630997401&lsavail=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.19.0&cb=17630997401&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 530
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://sopalk.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 470 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (900), with no line terminators
Hash b92d6dbc4d7d00927bb774fa5eea9dff
f59c24066e0be03acf0497c6ceac5648234cad7a
cc6e8558eec3ce959123ced786114b29eb4e37d44521ab46cd4c3418554475f6
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 360
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Sun, 27 Nov 2022 19:38:12 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12999%3b%24o%3d11100; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
vs=559577=5209658; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
pid=26499600715397773; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638051746936704358&o=1; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
prebid.smilewanted.com/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 301
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
cache-control: no-cache, private
access-control-allow-origin: https://sopalk.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52aba99b15fc-ARN
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891749&tk_flint=pbjs_lite_v7.19.0&x_source.tid=10a7a379-55aa-4afe-a3ec-061645382efa&l_pb_bid_id=20383ca64de7868&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6504704762289725
200 OK 388 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891749&tk_flint=pbjs_lite_v7.19.0&x_source.tid=10a7a379-55aa-4afe-a3ec-061645382efa&l_pb_bid_id=20383ca64de7868&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6504704762289725
IP
File type JSON data\012- , ASCII text, with very long lines (388), with no line terminators
Hash 1c158a05892f007b8de5d280cd0f80fe
c94304cc98389a5b6bb75468810e50389d254e31
6a2a75a8bbe3d112d9b336e363cdbb9f0db9c3aadef556eefcd5f9b6f1d4a1cb
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891749&tk_flint=pbjs_lite_v7.19.0&x_source.tid=10a7a379-55aa-4afe-a3ec-061645382efa&l_pb_bid_id=20383ca64de7868&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6504704762289725 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LAZRKJON-1L-3L1B; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qqpqSRk13ndmu9DtVM30fCgsc7/zDE2e/jO573NBZd5Qv4/TxlHJkA6Ij5wYjJQab8x+FptCLf6Skd2+VzOS4u9; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 388
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 611b63ce4abffc55245d40381f6962fe
ba33a591c4bba8e75f0df36ebc48041d408035ad
45debe56c2d7a49834324b065d23ba97e3ab9fe0374b69b67cef7fdac0031140
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 652
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:13 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://sopalk.com
AN-X-Request-Uuid: 5fa29bbd-e2c1-48d1-8e5d-652d79ac7b7b
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 562
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 27 Nov 2022 19:38:11 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://sopalk.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=51154690699&lsavail=0
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=51154690699&lsavail=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.19.0&cb=51154690699&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 485
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://sopalk.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 495 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1064), with no line terminators
Hash 103c6ddcd4e635c5224c02bbf20d9c0b
a5cb1e9bf13628f06955af367187d3d798547ca5
94bfc8c29b94a78ec5f49d0872a54f82f26ed926e64067257f8897687bd514e8
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 359
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Sun, 27 Nov 2022 19:38:13 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12999%3b%24o%3d11100; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
vs=559577=5209658; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
pid=2828309352913615549; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638051746937565822&o=1; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 6ad3934c4ee28d9d02dd0c6ff5684da2
32bbd754b8491d288313773bcebc3e3cf3ac2f8b
bcbeec26962f05ceac1d65fdee3a3f4f7defb0fedcb52fe7e82135ea77ca2101
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 999
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://sopalk.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 607
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 27 Nov 2022 19:38:11 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://sopalk.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 137 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 1cb2d76d6ba8f9b60340b82f4408b93b
a0833f436d87a38180ff7ec1e1abef4ffa5648d2
b0832c2c4df5762372e6cbdc516a42f3279ee0a7e52dfad8733a10f1774fd0ee
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 652
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:13 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 137
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://sopalk.com
AN-X-Request-Uuid: 80a3a1d4-2b75-427a-9f4f-8db0ab456e3a
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,3347a92a-c25e-4331-b072-8ef29cb829d0,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891745&tk_flint=pbjs_lite_v7.19.0&x_source.tid=d3f645e5-6d92-42ee-9a65-163369d5151d&l_pb_bid_id=12b533c38b434268&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6660731852557151
200 OK 388 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,3347a92a-c25e-4331-b072-8ef29cb829d0,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891745&tk_flint=pbjs_lite_v7.19.0&x_source.tid=d3f645e5-6d92-42ee-9a65-163369d5151d&l_pb_bid_id=12b533c38b434268&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6660731852557151
IP
File type JSON data\012- , ASCII text, with very long lines (388), with no line terminators
Hash 19214d60e3acbf1ff3889150b388c0ee
441a32e0226c40ad36a4244b4f0f61a8aa92c618
361eecf3fee4359958630da0a6e6cfd3c58f14bccdf7908d9ff7cc993d6714f3
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,3347a92a-c25e-4331-b072-8ef29cb829d0,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891745&tk_flint=pbjs_lite_v7.19.0&x_source.tid=d3f645e5-6d92-42ee-9a65-163369d5151d&l_pb_bid_id=12b533c38b434268&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6660731852557151 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LAZRKJQ2-E-61MR; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qrB2rxZS+++0e9DtVM30fCgsc7/zDE2e/jO573NBZd5Qv4/TxlHJkA6Ij5wYjJQab8x+FptCLf6Skd2+VzOS4u9; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 388
X-Firefox-Spdy: h2
prebid.smilewanted.com/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 301
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
cache-control: no-cache, private
access-control-allow-origin: https://sopalk.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52ac5a0415fc-ARN
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=33477153054&lsavail=0
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=33477153054&lsavail=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.19.0&cb=33477153054&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 530
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://sopalk.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 31db9e448ac53264d88f28f27cf83550
917d18e6e9f3139c6fc0a30cc2efd913d5476720
d9e5364e7d87a10ecf13a38e66ce60f56753eaa3963e3c9a98d1cde49c777732
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 997
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://sopalk.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 562
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 27 Nov 2022 19:38:11 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://sopalk.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
prebid.smilewanted.com/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 300
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
cache-control: no-cache, private
access-control-allow-origin: https://sopalk.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52ac7a1f15fc-ARN
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 137 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 6e7e7391ccce56d70e2dffe8ed657c4b
567b562d63b2082db40a304195b327ff2585a334
226b64fe0ea149db8e2adffc390fed9ca8907f9a8f79403017b6a2264c64cee7
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 650
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:13 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 137
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://sopalk.com
AN-X-Request-Uuid: 3bfea2dc-f0c8-44ff-bfb1-2b3adf9cff52
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=61255069065&lsavail=0
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=61255069065&lsavail=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.19.0&cb=61255069065&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 485
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://sopalk.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 430 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (680), with no line terminators
Hash eea2758ca6df9269a3c725d7dd71d542
9ca071d282b3f8c8a47ede1c57dd404a2365cf36
86478c3bb4677f850ec7615c34db697ae7722f3fd19d117e529a5dfc468e3bdd
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 359
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Sun, 27 Nov 2022 19:38:13 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12999%3b%24o%3d11100; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
vs=559577=5209658; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
pid=3550910327423285954; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638051746938250241&o=1; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891763&tk_flint=pbjs_lite_v7.19.0&x_source.tid=74b407a7-0c48-4d46-825c-928f353753c0&l_pb_bid_id=85b2dbff11ce57&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.39160169010080437
200 OK 388 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891763&tk_flint=pbjs_lite_v7.19.0&x_source.tid=74b407a7-0c48-4d46-825c-928f353753c0&l_pb_bid_id=85b2dbff11ce57&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.39160169010080437
IP
File type JSON data\012- , ASCII text, with very long lines (388), with no line terminators
Hash 5db7dbb0177fc6fb2054901b87e38950
ae25219e9249a6eff198cad403a8a9fa4b26cff7
93f1e94be6d383284b0b5c80edbcff8f1761f06b258ec6e69e0d4ee1d3a6fe96
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891763&tk_flint=pbjs_lite_v7.19.0&x_source.tid=74b407a7-0c48-4d46-825c-928f353753c0&l_pb_bid_id=85b2dbff11ce57&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.39160169010080437 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LAZRKJR7-V-A3OF; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qplcDbhm4A6au9DtVM30fCgsc7/zDE2e/jO573NBZd5Qv4/TxlHJkA6Ij5wYjJQab8x+FptCLf6Skd2+VzOS4u9; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 388
X-Firefox-Spdy: h2
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 192241100edab51e1235a754abfeb1ed
64239a844880ad82e64e7e82b85f3f46ebf96b94
a2825eddf4dcd86be3021f8b3a4e9485a7ba2917188e6444f738dfde42645060
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 999
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://sopalk.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 512 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (920), with no line terminators
Hash 4b238accb320b9f5959d6302255ae57f
45f5fbac595a6ebdbf0adcc5eff867dca4c1d177
839cb08965031dd12a5b3af7e347d6e7ae73e41e406e0361685fa66e19c3492e
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 396
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Sun, 27 Nov 2022 19:38:13 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12999%3b%24o%3d11100; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
vs=559577=5209658; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
pid=8675729201238948552; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638051746938567929&o=1; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 562
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 27 Nov 2022 19:38:11 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://sopalk.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
prebid.smilewanted.com/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 300
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
cache-control: no-cache, private
access-control-allow-origin: https://sopalk.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52acca4b15fc-ARN
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 140 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash af47a32e181f8dd9d670af566a3d9839
3bd21127914d7f218e113c38fca2e60731aa57e1
cae833c8a5981d7798f9433e36182aabd576c5b918e6b86042c0c5b80503d170
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 698
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:13 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 140
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://sopalk.com
AN-X-Request-Uuid: 16b245f9-993d-4328-a70e-eb619180f8b3
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=59525429016&lsavail=0
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=59525429016&lsavail=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.19.0&cb=59525429016&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 530
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:12 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://sopalk.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,2fedee39-eae9-48b3-8786-2cd5c7cdcd8c,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891767&tk_flint=pbjs_lite_v7.19.0&x_source.tid=a0eb9d40-c184-4de2-8856-a0ad8da60db5&l_pb_bid_id=6aec599ec576c8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.20657303550939554
200 OK 388 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,2fedee39-eae9-48b3-8786-2cd5c7cdcd8c,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891767&tk_flint=pbjs_lite_v7.19.0&x_source.tid=a0eb9d40-c184-4de2-8856-a0ad8da60db5&l_pb_bid_id=6aec599ec576c8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.20657303550939554
IP
File type JSON data\012- , ASCII text, with very long lines (388), with no line terminators
Hash 8128e5bdedaf1a82d0648f1947260066
e656796bff59bd4a9c65192c25b15d9093dd12de
7ced901c6b5f5dc580c9cc525f59232ed9dc391bac9c0b3734c97ea62b147adb
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,2fedee39-eae9-48b3-8786-2cd5c7cdcd8c,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891767&tk_flint=pbjs_lite_v7.19.0&x_source.tid=a0eb9d40-c184-4de2-8856-a0ad8da60db5&l_pb_bid_id=6aec599ec576c8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.20657303550939554 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LAZRKJSN-3-5Q47; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qopO3BMyrhaR+9DtVM30fCgsc7/zDE2e/jO573NBZd5Qv4/TxlHJkA6Ij5wYjJQab8x+FptCLf6Skd2+VzOS4u9; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 388
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 471 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (993), with no line terminators
Hash de8878b94afea734eacaaf74119ffd3f
3f2c2d30e0c9056dd1a4656767f03c4e9a43b259
3e1225c86c910ef560f303042a04e529210186bb4c6e250725fd56c522fb03d0
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 361
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Sun, 27 Nov 2022 19:38:13 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12999%3b%24o%3d11100; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
vs=559577=5209658; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
pid=5746220600927763126; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638051746938994010&o=1; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 607
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 27 Nov 2022 19:38:11 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://sopalk.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891773&tk_flint=pbjs_lite_v7.19.0&x_source.tid=f405f6ba-92f3-4af6-9d0b-fcaf22fbb3da&l_pb_bid_id=2fce1f416921b38&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.3826608803564314
200 OK 388 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891773&tk_flint=pbjs_lite_v7.19.0&x_source.tid=f405f6ba-92f3-4af6-9d0b-fcaf22fbb3da&l_pb_bid_id=2fce1f416921b38&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.3826608803564314
IP
File type JSON data\012- , ASCII text, with very long lines (388), with no line terminators
Hash 8ed61e68799c777fad2a1633f1cb0dc7
e534cc56ca228c832ed0e62ff04c3a7411f32e7e
ebffb9417bef8cf3767d9810469ec107966988b7a9274c1e312e7604b94aee99
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891773&tk_flint=pbjs_lite_v7.19.0&x_source.tid=f405f6ba-92f3-4af6-9d0b-fcaf22fbb3da&l_pb_bid_id=2fce1f416921b38&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.3826608803564314 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LAZRKJT3-1U-K5Z8; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qrVz1Iqagm4/e9DtVM30fCgsc7/zDE2e/jO573NBZd5Qv4/TxlHJkA6Ij5wYjJQab8x+FptCLf6Skd2+VzOS4u9; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:13 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 388
X-Firefox-Spdy: h2
prebid.smilewanted.com/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 301
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
cache-control: no-cache, private
access-control-allow-origin: https://sopalk.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52ad0a7d15fc-ARN
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 18299b4e15d3bd2710303be53fdc0941
19fffc8ccdafd33dc466e7808ce969c5c05b64e6
2f6afd438a20f74496550a4e602a3a57aa9f14e05459638fb4dbbba399b49334
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 699
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:13 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://sopalk.com
AN-X-Request-Uuid: 78cac2a3-47c4-4ebb-8e4f-814a7af2917c
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=99865834581&lsavail=0
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=99865834581&lsavail=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.19.0&cb=99865834581&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 530
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://sopalk.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 02e1f4e5b90b680ac15ea8cda7e97a41
32f49402a4afc824faa17af4260f9e5f4319e22c
dd4af8eb99aaf655b6097cf6299c3061d589c111972b6f10bfe5d79e56660729
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 998
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://sopalk.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 6f2bdbfd54b0acf735a2a78853bc4e1a
d3a9358302d3eed7f97003144f74361136ee59d1
5f9e2577a0f7f83a83ab240a11cab9d1d3bc78d7dcaf83baaeee345b2ae77fd0
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 998
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:13 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://sopalk.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 562
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 27 Nov 2022 19:38:11 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://sopalk.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0ffdf2a00295f624f59074f833d63d1a
446436a5a48fc70bde55df79c7f4351fefcd5a26
fc75eecbd0cc9a698a22c349dc7ef3111e0834e0ed5cdb8f84b4fd9db7f172dd
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 652
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:13 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://sopalk.com
AN-X-Request-Uuid: f2e39b12-23b8-422d-8e42-a8ff797a3df7
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prebid.smilewanted.com/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 300
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:14 GMT
cache-control: no-cache, private
access-control-allow-origin: https://sopalk.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52ad4aa815fc-ARN
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891778&tk_flint=pbjs_lite_v7.19.0&x_source.tid=e7e8c53c-2c51-4c5a-8097-86216bcec469&l_pb_bid_id=84674fb9c37abd8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.537408902838803
200 OK 388 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891778&tk_flint=pbjs_lite_v7.19.0&x_source.tid=e7e8c53c-2c51-4c5a-8097-86216bcec469&l_pb_bid_id=84674fb9c37abd8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.537408902838803
IP
File type JSON data\012- , ASCII text, with very long lines (388), with no line terminators
Hash b32b9453f66449f1390dbd754bcc1cb9
91e5924b0362233f75deff4a60a723e072b2f662
4482df4cf0c47c5b15dd9f1d5614d15eb5369e9578e586134077bc9a8409cb60
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891778&tk_flint=pbjs_lite_v7.19.0&x_source.tid=e7e8c53c-2c51-4c5a-8097-86216bcec469&l_pb_bid_id=84674fb9c37abd8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.537408902838803 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Sun, 27 Nov 2022 19:38:14 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LAZRKJUC-P-DN4G; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:14 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qpdB5gCF5gsY+9DtVM30fCgsc7/zDE2e/jbWiM5LG22bv4/TxlHJkA6Ij5wYjJQab8x+FptCLf6Skd2+VzOS4u9; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:14 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 388
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=86606365896&lsavail=0
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=86606365896&lsavail=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.19.0&cb=86606365896&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 485
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://sopalk.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 416 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (837), with no line terminators
Hash 7bd91e71d9142c33b27d3a38d7d22e76
0848ddb91e1d1112bfaf5f64149d4d97e3341fd8
702bfd02132f5f7840151a57d01608859b13421c0ed60b673119eee32c9b6f93
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 397
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Sun, 27 Nov 2022 19:38:13 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12999%3b%24o%3d11100; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
vs=559577=5209658; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
pid=6716412726221257380; expires=Mon, 27 Nov 2023 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638051746939476334&o=1; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Mon, 28 Nov 2022 19:38:13 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 63b9af40697cdb14d32928c7b1880eb7
b00d5d8e02ee14de2b537ae403b0bc0b51336817
22e7b70eb45a98f64834ce96f0bcadf2448196af833b5669c5bb73860f2db372
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 998
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:14 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://sopalk.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
prebid.smilewanted.com/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 301
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:14 GMT
cache-control: no-cache, private
access-control-allow-origin: https://sopalk.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52ad8ae115fc-ARN
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=55107176142&lsavail=0
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=55107176142&lsavail=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.19.0&cb=55107176142&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 530
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://sopalk.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,e4e2d6de-53fc-4f2c-b645-5c8332e5ef36,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891784&tk_flint=pbjs_lite_v7.19.0&x_source.tid=2f1fad25-60db-460e-b038-60ece4a29abf&l_pb_bid_id=63ef2d95f68c8e8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.3292885732124893
200 OK 388 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,e4e2d6de-53fc-4f2c-b645-5c8332e5ef36,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891784&tk_flint=pbjs_lite_v7.19.0&x_source.tid=2f1fad25-60db-460e-b038-60ece4a29abf&l_pb_bid_id=63ef2d95f68c8e8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.3292885732124893
IP
File type JSON data\012- , ASCII text, with very long lines (388), with no line terminators
Hash 3f57bf791aa0559d3db6fff2714cc3bf
1994d129aba5af3f7ae15e57118e84f78fb3d9e4
bbe7db2d08d6875d4709875f4fe504b313c9c0efa0cd37605f02e7f8d7befb9c
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,e4e2d6de-53fc-4f2c-b645-5c8332e5ef36,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891784&tk_flint=pbjs_lite_v7.19.0&x_source.tid=2f1fad25-60db-460e-b038-60ece4a29abf&l_pb_bid_id=63ef2d95f68c8e8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.3292885732124893 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Sun, 27 Nov 2022 19:38:14 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LAZRKJVS-13-3BFN; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:14 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|SDziDG3X/Ehw/AhDO8Iagu9DtVM30fCgsc7/zDE2e/jbWiM5LG22bv4/TxlHJkA6Ij5wYjJQab8x+FptCLf6Skd2+VzOS4u9; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:14 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 388
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 607
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 27 Nov 2022 19:38:11 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://sopalk.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash cbdd1b9554f2f968bac95b02a70229b1
e829d1bf6f298b5fabd622a0277d2db53a2ff0e3
56c11fc5be752eabd855b513d72cb99b9521d7c9ecaa1f5269c9fa8148e5032d
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 998
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:14 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://sopalk.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 140 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 368bc8c7d6476b86f43a8f00b8e3ac7e
490361ad80a678b5f8f982c333680d5023bbbbea
1a167a216e63e4edd211269b595c06b8ecb8fed0a3c735dee4f9eadc254429a4
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 700
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:14 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 140
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://sopalk.com
AN-X-Request-Uuid: b4712419-53f1-4efd-997a-d1fae167b1fd
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prebid.smilewanted.com/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 301
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:14 GMT
cache-control: no-cache, private
access-control-allow-origin: https://sopalk.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52addb2315fc-ARN
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 599 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1147), with no line terminators
Hash b0f32b876d85ec4bbd5b8dd6a1f123cf
345a9928d7f9a14b92707ee5e532d4466c5a801d
3fbd9116be0455f4eb0c1cd9a88c43d60f4136593b0fcf7c2e1bcc88e89772c5
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 397
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Sun, 27 Nov 2022 19:38:13 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12999%3b%24o%3d11100; expires=Mon, 27 Nov 2023 19:38:14 GMT; domain=.smartadserver.com; path=/
vs=559577=5209658; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 27 Nov 2023 19:38:14 GMT; domain=.smartadserver.com; path=/
pid=8568390379304696538; expires=Mon, 27 Nov 2023 19:38:14 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638051746940075448&o=1; expires=Mon, 28 Nov 2022 19:38:14 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Mon, 28 Nov 2022 19:38:14 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 562
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 27 Nov 2022 19:38:12 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://sopalk.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 594 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1212), with no line terminators
Hash dfa1f45d5d491532ea49d4ee45664bb6
175e2c3877341700e495097335da08341e5ec243
d7c5ad660fa0d7484e0cd7b7e8ec15b1eb83625f0aa00ef94e39d2b5a24723be
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 359
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Sun, 27 Nov 2022 19:38:14 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12999%3b%24o%3d11100; expires=Mon, 27 Nov 2023 19:38:14 GMT; domain=.smartadserver.com; path=/
vs=559577=5209658; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 27 Nov 2023 19:38:14 GMT; domain=.smartadserver.com; path=/
pid=4362450372301994650; expires=Mon, 27 Nov 2023 19:38:14 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638051746940577233&o=1; expires=Mon, 28 Nov 2022 19:38:14 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Mon, 28 Nov 2022 19:38:14 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891795&tk_flint=pbjs_lite_v7.19.0&x_source.tid=b1ff86c3-ffa5-4a5d-b971-8f76548eac26&l_pb_bid_id=4f07f2c8bd00b08&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.8344205677965222
200 OK 388 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891795&tk_flint=pbjs_lite_v7.19.0&x_source.tid=b1ff86c3-ffa5-4a5d-b971-8f76548eac26&l_pb_bid_id=4f07f2c8bd00b08&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.8344205677965222
IP
File type JSON data\012- , ASCII text, with very long lines (388), with no line terminators
Hash 24b03b1d93d3ff7536e0869c6382db0d
4b4948a05a9dff790dec2a97ab2072e4b989bc9b
544f1381cb06ad0e4d4552d184da6a8df320180551c3a4779234f47337eccef5
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891795&tk_flint=pbjs_lite_v7.19.0&x_source.tid=b1ff86c3-ffa5-4a5d-b971-8f76548eac26&l_pb_bid_id=4f07f2c8bd00b08&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.8344205677965222 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Sun, 27 Nov 2022 19:38:14 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LAZRKJXC-G-57QF; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:14 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qpkcGOwZHJXG+9DtVM30fCgsc7/zDE2e/jbWiM5LG22bv4/TxlHJkA6Ij5wYjJQab8x+FptCLf6Skd2+VzOS4u9; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:14 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 388
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash e23f0b5d2559d213e9574db16adbedc3
950c4c12e480c482d5cf12884c9783017f67f01c
d1ba2e26598357e7943356cd7204c345c55626aaed12c698128354928e773baa
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 653
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:14 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://sopalk.com
AN-X-Request-Uuid: 0569d053-293a-4bf4-8665-1a661c7d80b1
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prg.smartadserver.com/prebid/v1
200 OK 575 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1098), with no line terminators
Hash 74fe76f56f162fba52c4e2157ebab615
e260673a1a64d17ccb47a214c48ea5945760925a
8c00ca33ae954e8b1f21ca4fa1bc3d24fbc6ca35cff44f816c72adf78810d514
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 359
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Sun, 27 Nov 2022 19:38:13 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12999%3b%24o%3d11100; expires=Mon, 27 Nov 2023 19:38:14 GMT; domain=.smartadserver.com; path=/
vs=559577=5209658; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 27 Nov 2023 19:38:14 GMT; domain=.smartadserver.com; path=/
pid=4975867930913061495; expires=Mon, 27 Nov 2023 19:38:14 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638051746940065155&o=1; expires=Mon, 28 Nov 2022 19:38:14 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Mon, 28 Nov 2022 19:38:14 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=61468956700&lsavail=0
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=61468956700&lsavail=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.19.0&cb=61468956700&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 485
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://sopalk.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a0c071d36dc8eea96338def36e55d396
6d0097c6e1ae128cae629b952a1ef13a6257f5d4
c01a03c9fa8b52dce27afe97106a9b9057acc7dcd205eeef7f760c48a400fad2
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 998
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:14 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://sopalk.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
prebid.smilewanted.com/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 300
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:14 GMT
cache-control: no-cache, private
access-control-allow-origin: https://sopalk.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52ae3b7315fc-ARN
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891790&tk_flint=pbjs_lite_v7.19.0&x_source.tid=8e75d567-46eb-4fe1-910b-c971ea29d0f9&l_pb_bid_id=484bfc387b97ab8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.13022366513459604
200 OK 388 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891790&tk_flint=pbjs_lite_v7.19.0&x_source.tid=8e75d567-46eb-4fe1-910b-c971ea29d0f9&l_pb_bid_id=484bfc387b97ab8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.13022366513459604
IP
File type JSON data\012- , ASCII text, with very long lines (388), with no line terminators
Hash 599cd9dc7cdc07ef34dbdfa0a1116b27
1fcb3b9a589684311f4afe80547c8951ec2af64a
2776aa31f755a554543f745fe2619bbfd95967dc8e918b2e44edb74cddde8a16
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=10&p_pos=atf&rp_schain=1.0,1!adpone.com,39f5f0f19dda90ef9acc,1,,,&rf=nsfwyoutube.com&tg_i.page=http%3A%2F%2Fwww.nsfwyoutube.com%2F&tg_i.domain=nsfwyoutube.com&tg_i.pbadslot=adpn-adtag-1669577891790&tk_flint=pbjs_lite_v7.19.0&x_source.tid=8e75d567-46eb-4fe1-910b-c971ea29d0f9&l_pb_bid_id=484bfc387b97ab8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.13022366513459604 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.4
date: Sun, 27 Nov 2022 19:38:14 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LAZRKJYN-1S-2ZMA; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:14 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qofGKyESNjtre9DtVM30fCgsc7/zDE2e/jbWiM5LG22bv4/TxlHJkA6Ij5wYjJQab8x+FptCLf6Skd2+VzOS4u9; Domain=.rubiconproject.com; Path=/; Expires=Mon, 27-Nov-2023 19:38:14 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 388
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 607
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 27 Nov 2022 19:38:12 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://sopalk.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 140 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 065af63ffc8cde482adbbda6604f046b
0ae15906434beab552dfc674c2de95801df6da17
eb160cde7a833276479d8ccb98c774f72efe18247c199f66efd678f3f0703940
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 699
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:14 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 140
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://sopalk.com
AN-X-Request-Uuid: 0ce715b9-2395-4981-a09a-f2b3dfe90e8f
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 31db991b0e3712937c125ab64e0fe8df
80d60d03dac50f0112a1e0248aced9659cac2f66
93d869d86833ef2664b07592b8b7d87490071684146e5efc50d2cc117f6e89f8
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 998
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:14 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://sopalk.com
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=37235079502&lsavail=0
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.0&cb=37235079502&lsavail=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.19.0&cb=37235079502&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 530
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:13 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://sopalk.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
prebid.smilewanted.com/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 300
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:14 GMT
cache-control: no-cache, private
access-control-allow-origin: https://sopalk.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52ae7ba215fc-ARN
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 596 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1106), with no line terminators
Hash a16c7ce7980717e93c2ff7f5a35d16cc
15125aa90d10cb252527995d1af9144247223e4d
eb11d88ebb1b9793e1cf4fc488a363cce42afafb7d7812f697089bb9833935aa
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 359
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Sun, 27 Nov 2022 19:38:14 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12999%3b%24o%3d11100; expires=Mon, 27 Nov 2023 19:38:14 GMT; domain=.smartadserver.com; path=/
vs=559577=5209658; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 27 Nov 2023 19:38:14 GMT; domain=.smartadserver.com; path=/
pid=6653403163692153355; expires=Mon, 27 Nov 2023 19:38:14 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638051746941661689&o=1; expires=Mon, 28 Nov 2022 19:38:14 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Mon, 28 Nov 2022 19:38:14 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
prg.smartadserver.com/prebid/v1
200 OK 454 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (870), with no line terminators
Hash ae27808391a0593177a32b00abcda1d1
399494c9dfa611abe6f220e651b7260d11e7aa93
00d8273093982f09642b7d0d7d0634d9a3407d4be88a1458c6d24e099e679331
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 360
Origin: https://sopalk.com
Connection: keep-alive
Referer: https://sopalk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Sun, 27 Nov 2022 19:38:13 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://sopalk.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12999%3b%24o%3d11100; expires=Mon, 27 Nov 2023 19:38:14 GMT; domain=.smartadserver.com; path=/
vs=559577=5209658; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 27 Nov 2023 19:38:14 GMT; domain=.smartadserver.com; path=/
pid=706048463000091225; expires=Mon, 27 Nov 2023 19:38:14 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638051746941506635&o=1; expires=Mon, 28 Nov 2022 19:38:14 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Mon, 28 Nov 2022 19:38:14 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
acdn.adnxs.com/dmp/async_usersync.html
200 OK 17 kB URL HTTP/1.1 acdn.adnxs.com/dmp/async_usersync.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (52990)
Hash 9c6b5ce6b3452e98573e6409c34dd73c
de607fadef62e36945a409a838eb8fc36d819b42
cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
GET /dmp/async_usersync.html HTTP/1.1
Host: acdn.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Fri, 25 Mar 2022 16:06:02 GMT
ETag: "623de86a-cf34"
Server: nginx/1.18.0 (Ubuntu)
Access-Control-Allow-Origin: *
Content-Type: text/html
Content-Encoding: gzip
Content-Length: 17053
Cache-Control: max-age=86402
Expires: Mon, 28 Nov 2022 19:38:17 GMT
Date: Sun, 27 Nov 2022 19:38:15 GMT
Connection: keep-alive
Vary: Accept-Encoding
eus.rubiconproject.com/usync.html
200 OK 233 B URL HTTP/1.1 eus.rubiconproject.com/usync.html
IP
ASN #1299 Telia Company AB
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 6220919f0a2b24a12a281ea8b891ecf6
759111c360edc6df73ed10aaaa212cb22c47ce0d
030c6e199782fb1908f6f89d3cd41950fd3ae0830c5020ba9ed617111bacd180
GET /usync.html HTTP/1.1
Host: eus.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache/2.2.15 (CentOS)
Last-Modified: Wed, 02 Nov 2022 02:30:44 GMT
ETag: "403b9-119-5ec73a0a33d00"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 233
Content-Type: text/html; charset=UTF-8
Date: Sun, 27 Nov 2022 19:38:15 GMT
Connection: keep-alive
Vary: Accept-Encoding
ib.adnxs.com/async_usersync?cbfn=queuePixels
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/async_usersync?cbfn=queuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /async_usersync?cbfn=queuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acdn.adnxs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:15 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: https://ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
AN-X-Request-Uuid: 1d9da4df-721b-4dcf-bba2-9099fed98efe
Set-Cookie: uuid2=3031036363855253541; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 25-Feb-2023 19:38:15 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
eus.rubiconproject.com/usync.js
200 OK 10 kB URL HTTP/1.1 eus.rubiconproject.com/usync.js
IP
ASN #1299 Telia Company AB
File type ASCII text, with very long lines (18728)
Hash 33ace7721ece274729a5849f646ef30a
35ec336f9fc48c453e68f5325611855b1dbfd0fd
ac87aa513ac9adc4cabcfe478b90ff88937274434ac3b9d80a0986d486bb791e
GET /usync.js HTTP/1.1
Host: eus.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://eus.rubiconproject.com/usync.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Apache/2.2.15 (CentOS)
X-Powered-By: PHP/5.3.3
p3p: CP="NOI CURa ADMa DEVa TAIa OUR # BUS IND UNI COM NAV INT"
Last-Modified: Sun, 27 Nov 2022 06:28:52 GMT
Content-Encoding: gzip
Content-Length: 10067
Content-Type: text/html; charset=UTF-8
Cache-Control: max-age=39053
Expires: Mon, 28 Nov 2022 06:29:08 GMT
Date: Sun, 27 Nov 2022 19:38:15 GMT
Connection: keep-alive
Vary: Accept-Encoding
c1.adform.net/serving/cookie/match?party=10&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D22%26partneruserid%3DYOUR_USER_ID&gdpr=0&gdpr_consent=
302 Found 0 B URL HTTP/2 c1.adform.net/serving/cookie/match?party=10&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D22%26partneruserid%3DYOUR_USER_ID&gdpr=0&gdpr_consent=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /serving/cookie/match?party=10&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D22%26partneruserid%3DYOUR_USER_ID&gdpr=0&gdpr_consent= HTTP/1.1
Host: c1.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sun, 27 Nov 2022 19:38:15 GMT
content-length: 0
location: https://c1.adform.net/serving/cookie/match?CC=1&party=10&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D22%26partneruserid%3DYOUR_USER_ID&gdpr=0&gdpr_consent=
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
set-cookie: C=1; expires=Tue, 27 Dec 2022 19:38:15 GMT; domain=adform.net; path=/
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
gu.dyntrk.com/adx/sma/us.php?dynk=sma4rt4bt4fg&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D69%26partneruserid%3DPARTNER_USER_ID%26gdpr%3D$GDPR%26gdpr_consent%3D$GDPR_CONSENT&gdpr=0&gdpr_consent=
302 Found 0 B URL HTTP/1.1 gu.dyntrk.com/adx/sma/us.php?dynk=sma4rt4bt4fg&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D69%26partneruserid%3DPARTNER_USER_ID%26gdpr%3D$GDPR%26gdpr_consent%3D$GDPR_CONSENT&gdpr=0&gdpr_consent=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adx/sma/us.php?dynk=sma4rt4bt4fg&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D69%26partneruserid%3DPARTNER_USER_ID%26gdpr%3D$GDPR%26gdpr_consent%3D$GDPR_CONSENT&gdpr=0&gdpr_consent= HTTP/1.1
Host: gu.dyntrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
server: nginx
date: Sun, 27 Nov 2022 19:38:15 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
keep-alive: timeout=10
p3p: CP="NOI DEV OUR BUS UNI"
cache-control: no-cache
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-headers: Origin
set-cookie: dyn_u=05030002_6383bca74096b; expires=Mon, 27-Nov-2023 19:38:15 GMT; Max-Age=31536000; path=/; domain=.dyntrk.com; secure; SameSite=None
location: https://gu.dyntrk.com/adx/sma/us.php?dynk=sma4rt4bt4fg&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D69%26partneruserid%3DPARTNER_USER_ID%26gdpr%3D$GDPR%26gdpr_consent%3D$GDPR_CONSENT&gdpr=0&gdpr_consent=&prevuid=05030002_6383bca74096b&knw=
secure.adnxs.com/getuid?https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D86%26partneruserid%3D$UID&gdpr=0&gdpr_consent=
307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/getuid?https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D86%26partneruserid%3D$UID&gdpr=0&gdpr_consent=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D86%26partneruserid%3D$UID&gdpr=0&gdpr_consent= HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:15 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Frtb-csync.smartadserver.com%252Fredir%252F%253Fissi%253D1%2526partnerid%253D86%2526partneruserid%253D%24UID%26gdpr%3D0%26gdpr_consent%3D
AN-X-Request-Uuid: 2c8afb24-c032-4a71-8a7a-79fa3b45810c
Set-Cookie: uuid2=5158370947356079716; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 25-Feb-2023 19:38:15 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 958.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ib.adnxs.com/async_usersync?cbfn=queuePixels
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/async_usersync?cbfn=queuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /async_usersync?cbfn=queuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acdn.adnxs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:15 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: https://ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
AN-X-Request-Uuid: 2b120ada-a052-4722-ba0c-1bfd39e5d8d6
Set-Cookie: uuid2=402974904124916016; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 25-Feb-2023 19:38:15 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
200 OK 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://acdn.adnxs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:15 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: e0e726c6-4f3b-4e2e-837e-a1c8ae86d4b0
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
rtb-csync.smartadserver.com/redir/?issi=1&partnerid=76&partneruserid=GOOGLE_HOSTED_SI&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmartrtb_dbm%26google_cm%26google_sc%26google_hm%3DSMART_USER_ID_B64&gdpr=0&gdpr_consent=
302 Found 0 B URL HTTP/1.1 rtb-csync.smartadserver.com/redir/?issi=1&partnerid=76&partneruserid=GOOGLE_HOSTED_SI&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmartrtb_dbm%26google_cm%26google_sc%26google_hm%3DSMART_USER_ID_B64&gdpr=0&gdpr_consent=
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redir/?issi=1&partnerid=76&partneruserid=GOOGLE_HOSTED_SI&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmartrtb_dbm%26google_cm%26google_sc%26google_hm%3DSMART_USER_ID_B64&gdpr=0&gdpr_consent= HTTP/1.1
Host: rtb-csync.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
content-length: 0
date: Sun, 27 Nov 2022 19:38:14 GMT
cache-control: no-cache,no-store
location: https://cm.g.doubleclick.net/pixel?google_nid=smartrtb_dbm&google_cm&google_sc&google_hm=NTk2OTQ0MzEyMDg4NjM2NDgxNg==&gdpr=0&gdpr_consent=
pragma: no-cache
set-cookie: pid=5969443120886364816; expires=Wed, 27 Dec 2023 19:38:15 GMT; domain=smartadserver.com; path=/
TestIfCookieP=ok; expires=Wed, 27 Dec 2023 19:38:15 GMT; domain=smartadserver.com; path=/
csync=76:GOOGLE_HOSTED_SI; expires=Mon, 27 Nov 2023 19:38:15 GMT; domain=smartadserver.com; path=/
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
gu.dyntrk.com/adx/sma/us.php?dynk=sma4rt4bt4fg&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D69%26partneruserid%3DPARTNER_USER_ID%26gdpr%3D$GDPR%26gdpr_consent%3D$GDPR_CONSENT&gdpr=0&gdpr_consent=&prevuid=05030002_6383bca74096b&knw=
302 Found 0 B URL HTTP/1.1 gu.dyntrk.com/adx/sma/us.php?dynk=sma4rt4bt4fg&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D69%26partneruserid%3DPARTNER_USER_ID%26gdpr%3D$GDPR%26gdpr_consent%3D$GDPR_CONSENT&gdpr=0&gdpr_consent=&prevuid=05030002_6383bca74096b&knw=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adx/sma/us.php?dynk=sma4rt4bt4fg&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D69%26partneruserid%3DPARTNER_USER_ID%26gdpr%3D$GDPR%26gdpr_consent%3D$GDPR_CONSENT&gdpr=0&gdpr_consent=&prevuid=05030002_6383bca74096b&knw= HTTP/1.1
Host: gu.dyntrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.nsfwyoutube.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
server: nginx
date: Sun, 27 Nov 2022 19:38:15 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
keep-alive: timeout=10
p3p: CP="NOI DEV OUR BUS UNI"
cache-control: no-cache
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-headers: Origin
set-cookie: dyn_u=05030002_6383bca74d666; expires=Mon, 27-Nov-2023 19:38:15 GMT; Max-Age=31536000; path=/; domain=.dyntrk.com; secure; SameSite=None
location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=69&partneruserid=05030002_6383bca74d666&gdpr=0&gdpr_consent=
secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Frtb-csync.smartadserver.com%252Fredir%252F%253Fissi%253D1%2526partnerid%253D86%2526partneruserid%253D%24UID%26gdpr%3D0%26gdpr_consent%3D
302 Found 0 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Frtb-csync.smartadserver.com%252Fredir%252F%253Fissi%253D1%2526partnerid%253D86%2526partneruserid%253D%24UID%26gdpr%3D0%26gdpr_consent%3D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Frtb-csync.smartadserver.com%252Fredir%252F%253Fissi%253D1%2526partnerid%253D86%2526partneruserid%253D%24UID%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.nsfwyoutube.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:15 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=86&partneruserid=0&gdpr=0&gdpr_consent=
AN-X-Request-Uuid: da8e4bbb-cde6-4646-b11f-eddc08adc63c
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 958.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
200 OK 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://acdn.adnxs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:15 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 75eebd8d-32db-4bef-85bc-cab8525bde65
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ocsp.digicert.com/
200 OK 471 B IP
Hash 97791161b9334e67ae00f70912701279
300e5113141725c4433e0d15a35d655742803b16
2f72afce90066f5d3f81fcca76e9d405aee38dcfcc64c7cce0e9c3af26754356
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4377
Cache-Control: max-age=132115
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:38:15 GMT
Etag: "63830ca1-1d7"
Expires: Tue, 29 Nov 2022 08:20:10 GMT
Last-Modified: Sun, 27 Nov 2022 07:07:13 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471
rtb-csync.smartadserver.com/redir/?issi=1&partnerid=69&partneruserid=05030002_6383bca74d666&gdpr=0&gdpr_consent=
200 OK 43 B URL HTTP/1.1 rtb-csync.smartadserver.com/redir/?issi=1&partnerid=69&partneruserid=05030002_6383bca74d666&gdpr=0&gdpr_consent=
IP
ASN #201081 SmartAdServer SAS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 221d8352905f2c38b3cb2bd191d630b0
d804b495cb9b84b9007a25b5d85f9ae674004cde
89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
GET /redir/?issi=1&partnerid=69&partneruserid=05030002_6383bca74d666&gdpr=0&gdpr_consent= HTTP/1.1
Host: rtb-csync.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.nsfwyoutube.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: image/gif
date: Sun, 27 Nov 2022 19:38:14 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: pid=385488549456427643; expires=Wed, 27 Dec 2023 19:38:15 GMT; domain=smartadserver.com; path=/
TestIfCookieP=ok; expires=Wed, 27 Dec 2023 19:38:15 GMT; domain=smartadserver.com; path=/
csync=69:05030002_6383bca74d666; expires=Mon, 27 Nov 2023 19:38:15 GMT; domain=smartadserver.com; path=/
transfer-encoding: chunked
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
ad.turn.com/r/cs?pid=33&redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D32%26partneruserid%3D%23USER_ID%23%26gdpr%3D%23GDPR_APPLICABLE%23%26gdpr_consent%3D%23GDPR_CONSENT%23&gdpr=0&gdpr_consent=
302 Found 0 B URL HTTP/2 ad.turn.com/r/cs?pid=33&redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D32%26partneruserid%3D%23USER_ID%23%26gdpr%3D%23GDPR_APPLICABLE%23%26gdpr_consent%3D%23GDPR_CONSENT%23&gdpr=0&gdpr_consent=
IP
ASN #56396 Amobee EMEA Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /r/cs?pid=33&redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D32%26partneruserid%3D%23USER_ID%23%26gdpr%3D%23GDPR_APPLICABLE%23%26gdpr_consent%3D%23GDPR_CONSENT%23&gdpr=0&gdpr_consent= HTTP/1.1
Host: ad.turn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="/w3c/p3p.xml", CP="NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV"
cache-control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
pragma: no-cache
set-cookie: uid=7364260626826094560; Domain=.turn.com; Expires=Fri, 26-May-2023 19:38:15 GMT; Path=/; Secure; SameSite=None
location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=32&partneruserid=7364260626826094560&gdpr=0&gdpr_consent=
content-length: 0
date: Sun, 27 Nov 2022 19:38:14 GMT
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 17690515799efbbff1ecd019cc906243
318701567e7c9b4f9289a23b0704407ea1241db1
f04ff2eb97bf353802c098339ddd49aad88ef6186587536dcbd7348a51d5f30b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=117319
Date: Sun, 27 Nov 2022 19:38:15 GMT
Etag: "6382d44a-1d7"
Expires: Tue, 29 Nov 2022 04:13:34 GMT
Last-Modified: Sun, 27 Nov 2022 03:06:50 GMT
Server: ECS (bsa/EB23)
X-Cache: Miss from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: tbd7R0NNgLCXmkvSlQSWX9WCdAd6gKkINE0tQrCFMxOtZwH-W9ta0Q==
Age: 4004
rtb-csync.smartadserver.com/redir/?issi=1&partnerid=86&partneruserid=0&gdpr=0&gdpr_consent=
200 OK 43 B URL HTTP/1.1 rtb-csync.smartadserver.com/redir/?issi=1&partnerid=86&partneruserid=0&gdpr=0&gdpr_consent=
IP
ASN #201081 SmartAdServer SAS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 221d8352905f2c38b3cb2bd191d630b0
d804b495cb9b84b9007a25b5d85f9ae674004cde
89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
GET /redir/?issi=1&partnerid=86&partneruserid=0&gdpr=0&gdpr_consent= HTTP/1.1
Host: rtb-csync.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.nsfwyoutube.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: image/gif
date: Sun, 27 Nov 2022 19:38:15 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: pid=8438752907508366052; expires=Wed, 27 Dec 2023 19:38:15 GMT; domain=smartadserver.com; path=/
TestIfCookieP=ok; expires=Wed, 27 Dec 2023 19:38:15 GMT; domain=smartadserver.com; path=/
csync=86:0; expires=Mon, 27 Nov 2023 19:38:15 GMT; domain=smartadserver.com; path=/
transfer-encoding: chunked
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
ocsp.sectigo.com/
200 OK 471 B IP
Hash ca2206b6f7cbdb64d7f538591385ed32
597c7ea3483bd3a6e65716106fde158e03d55970
43c26ba30720e9537cc189beefe7dc98f9c847fc4007372bbd45a7083127d207
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 19:38:15 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 01:42:56 GMT
Expires: Sun, 04 Dec 2022 01:42:55 GMT
Etag: "597c7ea3483bd3a6e65716106fde158e03d55970"
Cache-Control: max-age=539679,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 770d52b62edb0b59-OSL
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 770555aa8a0a52c611bafb289ca8a650
62504cadc49747f328e3c31ad3aa7a740043072c
6317c8530220392b1339be640b8c1181c468ff8e3f3d1d5692b39cb32404216f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:38:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash cd6258d3885c1643d36b5f9331c56b99
8a4962b55abefdf4b009a366ff43e9c2279f7e19
7f37b1985800d1dfc01103aad9c1c2f3242c7ba0bbe0429d0bccbd0fac5c1c34
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6563
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:38:15 GMT
Last-Modified: Sun, 27 Nov 2022 17:48:53 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
ads.stickyadstv.com/user-matching?id=3602&gdpr=0&gdpr_consent=
302 Moved Temporarily 0 B URL HTTP/1.1 ads.stickyadstv.com/user-matching?id=3602&gdpr=0&gdpr_consent=
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /user-matching?id=3602&gdpr=0&gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://csync.smilewanted.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Content-Length: 0
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
x-sticky-vk: 1669577895485025-596
Location: https://csync.smilewanted.com/set_partner_userid_get/freewheel/c4a93510e33d7c76f888e17197fac1f?gdpr_consent=&gdpr=0
Expires: Sun, 27 Nov 2022 19:38:15 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 27 Nov 2022 19:38:15 GMT
Connection: keep-alive
Set-Cookie: UID=c4a93510e33d7c76f888e17197fac1f; Domain=ads.stickyadstv.com; Expires=Tue, 27-Dec-2022 19:38:15 GMT; Path=/
rtb-csync.smartadserver.com/redir/?issi=1&partnerid=32&partneruserid=7364260626826094560&gdpr=0&gdpr_consent=
200 OK 43 B URL HTTP/1.1 rtb-csync.smartadserver.com/redir/?issi=1&partnerid=32&partneruserid=7364260626826094560&gdpr=0&gdpr_consent=
IP
ASN #201081 SmartAdServer SAS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 221d8352905f2c38b3cb2bd191d630b0
d804b495cb9b84b9007a25b5d85f9ae674004cde
89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
GET /redir/?issi=1&partnerid=32&partneruserid=7364260626826094560&gdpr=0&gdpr_consent= HTTP/1.1
Host: rtb-csync.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.nsfwyoutube.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: image/gif
date: Sun, 27 Nov 2022 19:38:14 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: pid=8304446870685792829; expires=Wed, 27 Dec 2023 19:38:15 GMT; domain=smartadserver.com; path=/
TestIfCookieP=ok; expires=Wed, 27 Dec 2023 19:38:15 GMT; domain=smartadserver.com; path=/
csync=32:7364260626826094560; expires=Mon, 27 Nov 2023 19:38:15 GMT; domain=smartadserver.com; path=/
transfer-encoding: chunked
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
id.rlcdn.com/711890.gif?credir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D136%26partneruserid%3D&gdpr=0&gdpr_consent=
400 Bad Request 21 B URL HTTP/2 id.rlcdn.com/711890.gif?credir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D136%26partneruserid%3D&gdpr=0&gdpr_consent=
IP
Hash b1e64b8d18e9efe2bd53b80009ab24b8
436c8b2a211e9ec7657dbba4b10627c2c2cf4d96
69b8d9afba79df6af482f598e69f8ba7edfdaf5a3091027d06ccc41eb99b3ac1
GET /711890.gif?credir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D136%26partneruserid%3D&gdpr=0&gdpr_consent= HTTP/1.1
Host: id.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 400 Bad Request
content-type: text/plain; charset=utf-8
x-content-type-options: nosniff
date: Sun, 27 Nov 2022 19:38:15 GMT
content-length: 21
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
csync.smilewanted.com/
200 OK 2.3 kB IP
Hash d1964f2e069440270a962fb961ee250a
41dedca0119a7829b1e279504bb69a3b9ee80729
581a3465b61f3c8490aa70529c7f7a2a515c8649cdf8b8c25d16001af6fa50b2
GET / HTTP/1.1
Host: csync.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:15 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52b5089b15fc-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 18dcc325f9227153cc2f0c9944c9ca7b
fca8d782970f422ce46c6ddd21eb09b00c7a1d5a
7c8b480e38e0371f6fee3f38fde7b3688e7f1e3fcee24efe7417283c76b39f22
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6218
Cache-Control: max-age=116312
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:38:15 GMT
Etag: "6382c7b5-1d7"
Expires: Tue, 29 Nov 2022 03:56:47 GMT
Last-Modified: Sun, 27 Nov 2022 02:13:09 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471
rubiconcm.digitaleast.mobi/usersync/rubicon.gif
302 Found 130 B URL HTTP/2 rubiconcm.digitaleast.mobi/usersync/rubicon.gif
IP
File type HTML document, ASCII text
Hash 8319592a7fb039293bdadb0a66614ac7
fd40aeb7db6c547fc9e1633ab8fc8a418a70e3e0
5f43d975d3a312e496e8124ca26794917f9ab80ee0cde1122e62adaba0d74278
GET /usersync/rubicon.gif HTTP/1.1
Host: rubiconcm.digitaleast.mobi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://eus.rubiconproject.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=utf-8
location: https://pixel.rubiconproject.com/tap.php?v=600424&nid=5498&put=697f9a10-c32e-499c-8a0e-8fc375625ed4
set-cookie: de_tp_cookie=697f9a10-c32e-499c-8a0e-8fc375625ed4; Path=/; Domain=digitaleast.mobi; Max-Age=63072000
date: Sun, 27 Nov 2022 19:38:15 GMT
content-length: 130
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_nid=smartrtb_dbm&google_cm=&google_sc=&google_hm=NTk2OTQ0MzEyMDg4NjM2NDgxNg==&gdpr=0&gdpr_consent=&google_tc=
302 Found 319 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=smartrtb_dbm&google_cm=&google_sc=&google_hm=NTk2OTQ0MzEyMDg4NjM2NDgxNg==&gdpr=0&gdpr_consent=&google_tc=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash e7baf04631b7be8069bda13b461c3afa
48a439dffd946f6b2d2269b3c2cc364fed72101f
a016219fbfd881ac7c0954e8460c30906143722e3c371763ad8aa8cbf0b50198
GET /pixel?google_nid=smartrtb_dbm&google_cm=&google_sc=&google_hm=NTk2OTQ0MzEyMDg4NjM2NDgxNg==&gdpr=0&gdpr_consent=&google_tc= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.nsfwyoutube.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: https://rtb-csync.smartadserver.com/redir/?partnerid=76&partneruserid=&gdpr=0&gdpr_consent=&google_error=3
date: Sun, 27 Nov 2022 19:38:15 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 319
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.smilewanted.com/js/decode_consent/decode_consent.js
200 OK 12 kB URL HTTP/2 static.smilewanted.com/js/decode_consent/decode_consent.js
IP
Hash 69eb57fbba0968522be87dda30ee9853
4bd563066751bec6ae93c890f227b5c41604d8f5
15d14fc973ecc88ad95cb6cf9aebd1ec2bc92373587ba8df50ec64d03f7e790b
GET /js/decode_consent/decode_consent.js HTTP/1.1
Host: static.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://csync.smilewanted.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:15 GMT
content-type: application/javascript
last-modified: Thu, 15 Apr 2021 17:11:55 GMT
etag: W/"607873db-c1ce"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains
referrer-policy: strict-origin
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 185679
vary: Accept-Encoding
server: cloudflare
cf-ray: 770d52b558d615fc-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash cca1f2d9aff20735cb4efbaf92b60508
1c4f8674282fe817b614b8137550379bef086af3
9a1f827ab5bc3236c3b28f855c3941fad3a0ecd1232f880e1245264db6089d64
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=126654
Date: Sun, 27 Nov 2022 19:38:15 GMT
Etag: "6382eefc-1d7"
Expires: Tue, 29 Nov 2022 06:49:09 GMT
Last-Modified: Sun, 27 Nov 2022 05:00:44 GMT
Server: ECS (nyb/1D34)
X-Cache: Miss from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: p_k8Uk9r3jWrWzs62huBziL4ELj8XamdsiTnPlgNYsnJcQbrAHpFTQ==
Age: 6506
a.audrte.com/get?p=M501991648&r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D141%26partneruserid%3D$UID&gdpr=0&gdpr_consent=
302 0 B URL HTTP/1.1 a.audrte.com/get?p=M501991648&r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D141%26partneruserid%3D$UID&gdpr=0&gdpr_consent=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /get?p=M501991648&r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D141%26partneruserid%3D$UID&gdpr=0&gdpr_consent= HTTP/1.1
Host: a.audrte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Origin: *
Date: Sun, 27 Nov 2022 19:38:15 GMT
Location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=141&partneruserid=g0dDr-ojbO7RmW9wWtqH-UULA&gdpr=0&gdpr_consent=&redirurl=https%3A%2F%2Fa.audrte.com%2Fmatch%3Fuid%3DSMART_USER_ID%26p%3DM501991648
Server: nginx/1.18.0
Set-Cookie: arcki2=g0dDr-ojbO7RmW9wWtqH-UULA!20220908!1669577895535!ip#91.90.42.154; Max-Age=1296000; Expires=Mon, 12-Dec-2022 19:38:15 GMT; Domain=audrte.com; Path=/; Secure; HttpOnly; SameSite=none; Secure
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Content-Length: 0
Connection: keep-alive
creativecdn.com/cm-notify?pi=smilewanted
302 Found 0 B URL HTTP/2 creativecdn.com/cm-notify?pi=smilewanted
IP
ASN #204995 Rtb House S.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm-notify?pi=smilewanted HTTP/1.1
Host: creativecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://csync.smilewanted.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 27 Nov 2022 19:38:15 GMT
expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
set-cookie: u=90sd0nb0LYL8nVc7GL0Y;Path=/;Domain=.creativecdn.com;Expires=Mon, 27-Nov-2023 19:38:15 GMT;Max-Age=31536000;Secure;SameSite=None
ts=1669577895;Path=/;Domain=.creativecdn.com;Expires=Mon, 27-Nov-2023 19:38:15 GMT;Max-Age=31536000;Secure;SameSite=None
location: https://creativecdn.com/cm-notify?pi=smilewanted&tc=1
content-length: 0
X-Firefox-Spdy: h2
ads.stickyadstv.com/user-matching?id=3602&gdpr=0&gdpr_consent=
302 Moved Temporarily 0 B URL HTTP/1.1 ads.stickyadstv.com/user-matching?id=3602&gdpr=0&gdpr_consent=
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /user-matching?id=3602&gdpr=0&gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://csync.smilewanted.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Content-Length: 0
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
x-sticky-vk: 1669577895506091-510
Location: https://csync.smilewanted.com/set_partner_userid_get/freewheel/41aa354b334ab1e7288689bf2b1c2e?gdpr_consent=&gdpr=0
Expires: Sun, 27 Nov 2022 19:38:15 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 27 Nov 2022 19:38:15 GMT
Connection: keep-alive
Set-Cookie: UID=41aa354b334ab1e7288689bf2b1c2e; Domain=ads.stickyadstv.com; Expires=Tue, 27-Dec-2022 19:38:15 GMT; Path=/
ib.adnxs.com/getuid?https://pixel.rubiconproject.com/tap.php?v=564534&nid=5466&put=$UID
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/getuid?https://pixel.rubiconproject.com/tap.php?v=564534&nid=5466&put=$UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https://pixel.rubiconproject.com/tap.php?v=564534&nid=5466&put=$UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://eus.rubiconproject.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:15 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D564534%26nid%3D5466%26put%3D%24UID
AN-X-Request-Uuid: b5e32076-33d6-4104-b5e7-4e765e69bffd
Set-Cookie: uuid2=6771137985714169099; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 25-Feb-2023 19:38:15 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
cm.g.doubleclick.net/pixel?google_nid=rubicon&google_cm=&google_sc=&google_tc=
200 OK 170 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=rubicon&google_cm=&google_sc=&google_tc=
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash e7673c60af825466f83d46da72ca1635
fc0fcbee0835709ba2d28798a612bfd687903fb5
0b8a20373c6dd04e091902226d922b3688143a8938afb9d283d889de7b55ceb5
GET /pixel?google_nid=rubicon&google_cm=&google_sc=&google_tc= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://eus.rubiconproject.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
date: Sun, 27 Nov 2022 19:38:15 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
server: HTTP server (unknown)
content-length: 170
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ib.adnxs.com/prebid/setuid?bidder=smilewanted&gdpr=0&gdpr_consent=&f=i&uid=150212fe8b1650998c90fee864cd1de4
200 OK 43 B URL HTTP/1.1 ib.adnxs.com/prebid/setuid?bidder=smilewanted&gdpr=0&gdpr_consent=&f=i&uid=150212fe8b1650998c90fee864cd1de4
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /prebid/setuid?bidder=smilewanted&gdpr=0&gdpr_consent=&f=i&uid=150212fe8b1650998c90fee864cd1de4 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://csync.smilewanted.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:15 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
AN-X-Request-Uuid: f3b81a15-3575-45ca-9522-ece0d50cd12a
Set-Cookie: anj=dTM7k!M4.FE:2jUF']wIg2E?kj*gx.!]tbP6j2F-.aE@%O4WYq=BX!+cw]pR2d+(ji-4#XifFBriRG/!jabRY6U6_zjS6lDhg?HY(j'5?)fy*e*Hb19; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 25-Feb-2023 19:38:15 GMT; Domain=.adnxs.com; Secure; HttpOnly
uids=eyJ0ZW1wVUlEcyI6eyJzbWlsZXdhbnRlZCI6eyJ1aWQiOiIxNTAyMTJmZThiMTY1MDk5OGM5MGZlZTg2NGNkMWRlNCIsImV4cGlyZXMiOiIyMDIzLTAyLTI1VDE5OjM4OjE1WiJ9fSwiYmlydGhkYXkiOiIyMDIyLTExLTI3VDE5OjM4OjE1WiJ9; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 25-Feb-2023 19:38:15 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
match.sharethrough.com/universal/v1?supply_id=GmfSCHMu&gdpr=0&gdpr_consent=
204 No Content 0 B URL HTTP/2 match.sharethrough.com/universal/v1?supply_id=GmfSCHMu&gdpr=0&gdpr_consent=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /universal/v1?supply_id=GmfSCHMu&gdpr=0&gdpr_consent= HTTP/1.1
Host: match.sharethrough.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://csync.smilewanted.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:15 GMT
X-Firefox-Spdy: h2
sync.richaudience.com/dcf3528a0b8aa83634892d50e91c306e/?ord=6833340516
200 OK 106 B URL HTTP/2 sync.richaudience.com/dcf3528a0b8aa83634892d50e91c306e/?ord=6833340516
IP
ASN #24940 Hetzner Online GmbH
Hash f2fdb24febcbd675ea13f538d1e84783
14561da6661f4a12cfefe17f3ab152252b8f9607
b4a69f18958a202a1513569a8d3fb4a16e7a55eb558b7da571f3cbcd4b580399
GET /dcf3528a0b8aa83634892d50e91c306e/?ord=6833340516 HTTP/1.1
Host: sync.richaudience.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.2
date: Sun, 27 Nov 2022 19:38:15 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
content-encoding: gzip
X-Firefox-Spdy: h2
creativecdn.com/cm-notify?pi=smilewanted&tc=1
200 OK 42 B URL HTTP/2 creativecdn.com/cm-notify?pi=smilewanted&tc=1
IP
ASN #204995 Rtb House S.A.
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /cm-notify?pi=smilewanted&tc=1 HTTP/1.1
Host: creativecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://csync.smilewanted.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:15 GMT
content-type: image/gif
content-length: 42
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 770555aa8a0a52c611bafb289ca8a650
62504cadc49747f328e3c31ad3aa7a740043072c
6317c8530220392b1339be640b8c1181c468ff8e3f3d1d5692b39cb32404216f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:38:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash cca1f2d9aff20735cb4efbaf92b60508
1c4f8674282fe817b614b8137550379bef086af3
9a1f827ab5bc3236c3b28f855c3941fad3a0ecd1232f880e1245264db6089d64
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=126654
Date: Sun, 27 Nov 2022 19:38:15 GMT
Etag: "6382eefc-1d7"
Expires: Tue, 29 Nov 2022 06:49:09 GMT
Last-Modified: Sun, 27 Nov 2022 05:00:44 GMT
Server: ECS (bsa/EB21)
X-Cache: Miss from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fhfj8lvEcRIbPmKYBBbbWQlhzlfooXDVQdIOg4hnSIulCwa-D4Pz0g==
Age: 6506
csync.smilewanted.com/getuid?source=prebid-server&gdpr=0&gdpr_consent=&us_privacy=&redirect=https%3A%2F%2Fib.adnxs.com%2Fprebid%2Fsetuid%3Fbidder%3Dsmilewanted%26gdpr%3D0%26gdpr_consent%3D%26f%3Di%26uid%3D%24UID
302 Found 0 B URL HTTP/2 csync.smilewanted.com/getuid?source=prebid-server&gdpr=0&gdpr_consent=&us_privacy=&redirect=https%3A%2F%2Fib.adnxs.com%2Fprebid%2Fsetuid%3Fbidder%3Dsmilewanted%26gdpr%3D0%26gdpr_consent%3D%26f%3Di%26uid%3D%24UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?source=prebid-server&gdpr=0&gdpr_consent=&us_privacy=&redirect=https%3A%2F%2Fib.adnxs.com%2Fprebid%2Fsetuid%3Fbidder%3Dsmilewanted%26gdpr%3D0%26gdpr_consent%3D%26f%3Di%26uid%3D%24UID HTTP/1.1
Host: csync.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://csync.smilewanted.com/
Cookie: sw_user_params_infos=8sdRREvsw7LjLys0YvGw82TUjYkpDKQ2GaQqQ6a76X45aADFsbAzC1wDZIy8elHxpU9h7J0g%2BdCcooZrEuaUTgETzxb2ORoHNPFOLNmDEN6Mia0dNse%2BBrdIA0FOk2u6eVCnenzxahgQJmwms6h30Q%3D%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
date: Sun, 27 Nov 2022 19:38:15 GMT
content-type: text/html; charset=UTF-8
location: https://ib.adnxs.com/prebid/setuid?bidder=smilewanted&gdpr=0&gdpr_consent=&f=i&uid=150212fe8b1650998c90fee864cd1de4
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52b75a9115fc-ARN
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash cd6258d3885c1643d36b5f9331c56b99
8a4962b55abefdf4b009a366ff43e9c2279f7e19
7f37b1985800d1dfc01103aad9c1c2f3242c7ba0bbe0429d0bccbd0fac5c1c34
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6563
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:38:15 GMT
Last-Modified: Sun, 27 Nov 2022 17:48:53 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
rtb-csync.smartadserver.com/redir/?partnerid=76&partneruserid=&gdpr=0&gdpr_consent=&google_error=3
200 OK 43 B URL HTTP/1.1 rtb-csync.smartadserver.com/redir/?partnerid=76&partneruserid=&gdpr=0&gdpr_consent=&google_error=3
IP
ASN #201081 SmartAdServer SAS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 221d8352905f2c38b3cb2bd191d630b0
d804b495cb9b84b9007a25b5d85f9ae674004cde
89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
GET /redir/?partnerid=76&partneruserid=&gdpr=0&gdpr_consent=&google_error=3 HTTP/1.1
Host: rtb-csync.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.nsfwyoutube.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: image/gif
date: Sun, 27 Nov 2022 19:38:15 GMT
transfer-encoding: chunked
creativecdn.com/cm-notify?pi=smilewanted&tc=1
200 OK 42 B URL HTTP/2 creativecdn.com/cm-notify?pi=smilewanted&tc=1
IP
ASN #204995 Rtb House S.A.
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /cm-notify?pi=smilewanted&tc=1 HTTP/1.1
Host: creativecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://csync.smilewanted.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:15 GMT
content-type: image/gif
content-length: 42
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash ffe54a2b71117b13d79e1a710b3a120e
7e4359ee89a04697a4fe59fdf3a9defeabbb910c
82ae464700634b0eb862666019478e72618fedbee5f71c0118bde5cb0fdd7ef6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 844
Cache-Control: max-age=153426
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:38:15 GMT
Etag: "63836dad-117"
Expires: Tue, 29 Nov 2022 14:15:21 GMT
Last-Modified: Sun, 27 Nov 2022 14:01:17 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 279
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash ac6897bdbce99831c8ad6576235a3761
7981b6650e0f8620cc8ac5aa22e433d8fad73a68
e3891cc16202a6f3da8858c7acdc5b5050c213c52b43c1ec000fe9f3bebd2b64
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 19:38:15 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Thu, 01 Dec 2022 18:09:59 GMT
ETag: "7981b6650e0f8620cc8ac5aa22e433d8fad73a68"
Last-Modified: Sun, 27 Nov 2022 18:10:00 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1802
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 770d52b80f23b50c-OSL
token.rubiconproject.com/token?pid=2249&pt=n
302 Found 0 B URL HTTP/1.1 token.rubiconproject.com/token?pid=2249&pt=n
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /token?pid=2249&pt=n HTTP/1.1
Host: token.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://eus.rubiconproject.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 302 Found
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: d5c7d31e505103f093db6d1ed70deaa2
Location: https://cm.g.doubleclick.net/pixel?google_nid=rubicon&google_hm=
content-length: 0
token.rubiconproject.com/token?pid=25470
204 No Content 0 B URL HTTP/1.1 token.rubiconproject.com/token?pid=25470
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /token?pid=25470 HTTP/1.1
Host: token.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://eus.rubiconproject.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 204 No Content
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: 49049ff336235ad60cb44abcb1cec1d6
pixel.rubiconproject.com/tap.php?v=600424&nid=5498&put=697f9a10-c32e-499c-8a0e-8fc375625ed4
204 No Content 0 B URL HTTP/1.1 pixel.rubiconproject.com/tap.php?v=600424&nid=5498&put=697f9a10-c32e-499c-8a0e-8fc375625ed4
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tap.php?v=600424&nid=5498&put=697f9a10-c32e-499c-8a0e-8fc375625ed4 HTTP/1.1
Host: pixel.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://eus.rubiconproject.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: 49049ff336235ad60cb44abcb1cec1d6
Content-Type: image/gif
ocsp.sectigo.com/
200 OK 471 B IP
Hash ca2206b6f7cbdb64d7f538591385ed32
597c7ea3483bd3a6e65716106fde158e03d55970
43c26ba30720e9537cc189beefe7dc98f9c847fc4007372bbd45a7083127d207
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 19:38:15 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 01:42:56 GMT
Expires: Sun, 04 Dec 2022 01:42:55 GMT
Etag: "597c7ea3483bd3a6e65716106fde158e03d55970"
Cache-Control: max-age=539679,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 770d52b7aa1a0b59-OSL
rtb-csync.smartadserver.com/redir/?issi=1&partnerid=141&partneruserid=g0dDr-ojbO7RmW9wWtqH-UULA&gdpr=0&gdpr_consent=&redirurl=https%3A%2F%2Fa.audrte.com%2Fmatch%3Fuid%3DSMART_USER_ID%26p%3DM501991648
302 Found 0 B URL HTTP/1.1 rtb-csync.smartadserver.com/redir/?issi=1&partnerid=141&partneruserid=g0dDr-ojbO7RmW9wWtqH-UULA&gdpr=0&gdpr_consent=&redirurl=https%3A%2F%2Fa.audrte.com%2Fmatch%3Fuid%3DSMART_USER_ID%26p%3DM501991648
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redir/?issi=1&partnerid=141&partneruserid=g0dDr-ojbO7RmW9wWtqH-UULA&gdpr=0&gdpr_consent=&redirurl=https%3A%2F%2Fa.audrte.com%2Fmatch%3Fuid%3DSMART_USER_ID%26p%3DM501991648 HTTP/1.1
Host: rtb-csync.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.nsfwyoutube.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
content-length: 0
date: Sun, 27 Nov 2022 19:38:15 GMT
cache-control: no-cache,no-store
location: https://a.audrte.com/match?uid=8819271092785166934&p=M501991648&gdpr=0&gdpr_consent=
pragma: no-cache
set-cookie: pid=8819271092785166934; expires=Wed, 27 Dec 2023 19:38:15 GMT; domain=smartadserver.com; path=/
TestIfCookieP=ok; expires=Wed, 27 Dec 2023 19:38:15 GMT; domain=smartadserver.com; path=/
csync=141:g0dDr-ojbO7RmW9wWtqH-UULA; expires=Mon, 27 Nov 2023 19:38:15 GMT; domain=smartadserver.com; path=/
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D564534%26nid%3D5466%26put%3D%24UID
302 Found 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D564534%26nid%3D5466%26put%3D%24UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D564534%26nid%3D5466%26put%3D%24UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://eus.rubiconproject.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:15 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://pixel.rubiconproject.com/tap.php?v=564534&nid=5466&put=0
AN-X-Request-Uuid: 1d512961-7862-4890-8b2f-aa545444f669
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
match.adsrvr.org/track/cmf/rubicon
200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/rubicon
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/rubicon HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://eus.rubiconproject.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:15 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
ib.adnxs.com/prebid/setuid?bidder=smilewanted&gdpr=0&gdpr_consent=&f=i&uid=150212fe8b1650998c90fee864cd1de4
200 OK 43 B URL HTTP/1.1 ib.adnxs.com/prebid/setuid?bidder=smilewanted&gdpr=0&gdpr_consent=&f=i&uid=150212fe8b1650998c90fee864cd1de4
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /prebid/setuid?bidder=smilewanted&gdpr=0&gdpr_consent=&f=i&uid=150212fe8b1650998c90fee864cd1de4 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://csync.smilewanted.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:15 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
AN-X-Request-Uuid: 5ca02682-c740-4956-9279-ccbf11ff9018
Set-Cookie: anj=dTM7k!M4.FE:2jUF']wIg2E?kj*gx.!]tbP6j2F-.aE@%O4WYq=BX!+cw]pR2d+(ji-4#XifFBriRG/!jabRY6U6_zjS6lDhg?HY(j'5?)fy*e*Hb19; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 25-Feb-2023 19:38:15 GMT; Domain=.adnxs.com; Secure; HttpOnly
uids=eyJ0ZW1wVUlEcyI6eyJzbWlsZXdhbnRlZCI6eyJ1aWQiOiIxNTAyMTJmZThiMTY1MDk5OGM5MGZlZTg2NGNkMWRlNCIsImV4cGlyZXMiOiIyMDIzLTAyLTI1VDE5OjM4OjE1WiJ9fSwiYmlydGhkYXkiOiIyMDIyLTExLTI3VDE5OjM4OjE1WiJ9; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 25-Feb-2023 19:38:15 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ocsp.digicert.com/
200 OK 279 B IP
Hash ffe54a2b71117b13d79e1a710b3a120e
7e4359ee89a04697a4fe59fdf3a9defeabbb910c
82ae464700634b0eb862666019478e72618fedbee5f71c0118bde5cb0fdd7ef6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6171
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:38:15 GMT
Last-Modified: Sun, 27 Nov 2022 17:55:25 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 279
ads.pubmatic.com/AdServer/js/user_sync.html?p=158810&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fpubmatic%2F
200 OK 5.5 kB URL HTTP/2 ads.pubmatic.com/AdServer/js/user_sync.html?p=158810&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fpubmatic%2F
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (15844), with no line terminators
Hash 7725e8e949141c8ded449d86975d4c04
8cd8c314a2002cc26f821d331ab9512f52a551a2
a0c49aacf6f552bce544eb8516404f696918253cd934a6404ebeafd71f8780ae
GET /AdServer/js/user_sync.html?p=158810&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fpubmatic%2F HTTP/1.1
Host: ads.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://csync.smilewanted.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: Apache
last-modified: Tue, 01 Feb 2022 06:38:00 GMT
etag: "1300708-3de4-5d6ef246ef4cf"
accept-ranges: bytes
content-encoding: gzip
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC", CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
content-length: 5549
content-type: text/html; charset=UTF-8
cache-control: max-age=56266
expires: Mon, 28 Nov 2022 11:16:01 GMT
date: Sun, 27 Nov 2022 19:38:15 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
ads.pubmatic.com/AdServer/js/user_sync.html?p=158810&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fpubmatic%2F
200 OK 5.5 kB URL HTTP/2 ads.pubmatic.com/AdServer/js/user_sync.html?p=158810&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fpubmatic%2F
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (15844), with no line terminators
Hash 7725e8e949141c8ded449d86975d4c04
8cd8c314a2002cc26f821d331ab9512f52a551a2
a0c49aacf6f552bce544eb8516404f696918253cd934a6404ebeafd71f8780ae
GET /AdServer/js/user_sync.html?p=158810&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fpubmatic%2F HTTP/1.1
Host: ads.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://csync.smilewanted.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: Apache
last-modified: Tue, 01 Feb 2022 06:38:00 GMT
etag: "1300708-3de4-5d6ef246ef4cf"
accept-ranges: bytes
content-encoding: gzip
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC", CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
content-length: 5549
content-type: text/html; charset=UTF-8
cache-control: max-age=56266
expires: Mon, 28 Nov 2022 11:16:01 GMT
date: Sun, 27 Nov 2022 19:38:15 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
pixel.rubiconproject.com/exchange/sync.php?p=pbs-smilewanted&gdpr=0&gdpr_consent=
204 No Content 0 B URL HTTP/1.1 pixel.rubiconproject.com/exchange/sync.php?p=pbs-smilewanted&gdpr=0&gdpr_consent=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /exchange/sync.php?p=pbs-smilewanted&gdpr=0&gdpr_consent= HTTP/1.1
Host: pixel.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://csync.smilewanted.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: 49049ff336235ad60cb44abcb1cec1d6
Content-Type: image/gif
csync.smilewanted.com/getuid?source=prebid-server&gdpr=0&gdpr_consent=&us_privacy=&redirect=https%3A%2F%2Fib.adnxs.com%2Fprebid%2Fsetuid%3Fbidder%3Dsmilewanted%26gdpr%3D0%26gdpr_consent%3D%26f%3Di%26uid%3D%24UID
302 Found 0 B URL HTTP/2 csync.smilewanted.com/getuid?source=prebid-server&gdpr=0&gdpr_consent=&us_privacy=&redirect=https%3A%2F%2Fib.adnxs.com%2Fprebid%2Fsetuid%3Fbidder%3Dsmilewanted%26gdpr%3D0%26gdpr_consent%3D%26f%3Di%26uid%3D%24UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?source=prebid-server&gdpr=0&gdpr_consent=&us_privacy=&redirect=https%3A%2F%2Fib.adnxs.com%2Fprebid%2Fsetuid%3Fbidder%3Dsmilewanted%26gdpr%3D0%26gdpr_consent%3D%26f%3Di%26uid%3D%24UID HTTP/1.1
Host: csync.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://csync.smilewanted.com/
Cookie: sw_user_params_infos=8sdRREvsw7LjLys0YvGw82TUjYkpDKQ2GaQqQ6a76X45aADFsbAzC1wDZIy8elHxpU9h7J0g%2BdCcooZrEuaUTgETzxb2ORoHNPFOLNmDEN6Mia0dNse%2BBrdIA0FOk2u6eVCnenzxahgQJmwms6h30Q%3D%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
date: Sun, 27 Nov 2022 19:38:15 GMT
content-type: text/html; charset=UTF-8
location: https://ib.adnxs.com/prebid/setuid?bidder=smilewanted&gdpr=0&gdpr_consent=&f=i&uid=150212fe8b1650998c90fee864cd1de4
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52b6ea3215fc-ARN
X-Firefox-Spdy: h2
pixel.rubiconproject.com/tap.php?v=564534&nid=5466&put=0
204 No Content 0 B URL HTTP/1.1 pixel.rubiconproject.com/tap.php?v=564534&nid=5466&put=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tap.php?v=564534&nid=5466&put=0 HTTP/1.1
Host: pixel.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://eus.rubiconproject.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: 49049ff336235ad60cb44abcb1cec1d6
Content-Type: image/gif
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 333f31fe7701d031a5008fda226a330c
aa047540be1eb5f0a60c42fddc7d6dfe23c8874d
1f7aecefe56f99b60aa11caa10d57cd68e4ee86bbfa184137ac46d1831b864ce
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=122164
Date: Sun, 27 Nov 2022 19:38:15 GMT
Etag: "6382e3ae-1d7"
Expires: Tue, 29 Nov 2022 05:34:19 GMT
Last-Modified: Sun, 27 Nov 2022 04:12:30 GMT
Server: ECS (nyb/1D17)
X-Cache: Miss from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: GGZIQtDJKIuI8ig_4wL6pHLmj3CtbG6zGSvZeZJY2wGZu61TXuicRg==
Age: 4909
pixel.rubiconproject.com/exchange/sync.php?p=pbs-smilewanted&gdpr=0&gdpr_consent=
204 No Content 0 B URL HTTP/1.1 pixel.rubiconproject.com/exchange/sync.php?p=pbs-smilewanted&gdpr=0&gdpr_consent=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /exchange/sync.php?p=pbs-smilewanted&gdpr=0&gdpr_consent= HTTP/1.1
Host: pixel.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://csync.smilewanted.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: 49049ff336235ad60cb44abcb1cec1d6
Content-Type: image/gif
ocsp.digicert.com/
200 OK 280 B IP
Hash 97511f071f1050b5505b058ea675c0e3
ed23e4bf15978786678c1edae08ae1f27e746cba
0c9222dd654e5f66e1b1e2b5e9c7257dda06c51adaa5be7445e950b1f3232123
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5804
Cache-Control: max-age=121986
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:38:15 GMT
Etag: "6382df7d-118"
Expires: Tue, 29 Nov 2022 05:31:21 GMT
Last-Modified: Sun, 27 Nov 2022 03:54:37 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 280
csync.smilewanted.com/drop_cookie_sw.php
200 OK 521 B URL HTTP/2 csync.smilewanted.com/drop_cookie_sw.php
IP
Hash d42bb0cc9b6d8ac19f4d5c46f1147342
684941892b1234f0a80cfdc43aea35e333b076c4
70089e1bb561f473b703a805ce74b8724b865799b0ef1c4d2f60ad7b7b2bac4d
GET /drop_cookie_sw.php HTTP/1.1
Host: csync.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://csync.smilewanted.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:15 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: sw_user_params_infos=8sdRREvsw7LjLys0YvGw84sbk4KbIWulgmdWiLHRQF%2BJI23KVH%2Fh7aLcC71o7wqmQQMD89hslCdqD9621HY8qAETzxb2ORoHNPFOLNmDEN6Mia0dNse%2BBrdIA0FOk2u6eN7Vy0muv5NqjR94BKY0GA%3D%3D; expires=Tue, 28-Nov-2023 01:27:27 GMT; Max-Age=31556952; path=/; domain=smilewanted.com; secure; HttpOnly; SameSite=None
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52b5e93a15fc-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
a.audrte.com/match?uid=8819271092785166934&p=M501991648&gdpr=0&gdpr_consent=
302 0 B URL HTTP/1.1 a.audrte.com/match?uid=8819271092785166934&p=M501991648&gdpr=0&gdpr_consent=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?uid=8819271092785166934&p=M501991648&gdpr=0&gdpr_consent= HTTP/1.1
Host: a.audrte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.nsfwyoutube.com/
Connection: keep-alive
Cookie: arcki2=g0dDr-ojbO7RmW9wWtqH-UULA!20220908!1669577895535!ip#91.90.42.154
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Origin: *
Date: Sun, 27 Nov 2022 19:38:15 GMT
Location: https://a.audrte.com:443/p
Server: nginx/1.18.0
Set-Cookie: arcki2_smart=8819271092785166934!20220908!1669577895855; Max-Age=1296000; Expires=Mon, 12-Dec-2022 19:38:15 GMT; Domain=audrte.com; Path=/; Secure; HttpOnly; SameSite=none; Secure
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Content-Length: 0
Connection: keep-alive
sync-eu.connectad.io/syncer/1?gdpr_consent=&cb=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fconnectad%2F
204 No Content 0 B URL HTTP/2 sync-eu.connectad.io/syncer/1?gdpr_consent=&cb=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fconnectad%2F
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /syncer/1?gdpr_consent=&cb=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fconnectad%2F HTTP/1.1
Host: sync-eu.connectad.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.connectad.io/
Cookie: cadsync
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 19:38:15 GMT
set-cookie: id=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.connectad.io; secure; SameSite=None
uid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.connectad.io; secure; SameSite=None
cache-control: no-cache, private
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52b93b940b65-OSL
X-Firefox-Spdy: h2
cdn.connectad.io/connectmyusers.php?gdpr_consent=&cb=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fconnectad%2F
200 OK 929 B URL HTTP/2 cdn.connectad.io/connectmyusers.php?gdpr_consent=&cb=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fconnectad%2F
IP
Hash 08c2691d41128fa23040d00239451bc1
d45e2e16908b176b19c025a70baa87334827c0b8
3fd74f0e2ac71d827c05527a66a4c0f65d75288fa7c66ff9d7781dc008b765fc
GET /connectmyusers.php?gdpr_consent=&cb=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fconnectad%2F HTTP/1.1
Host: cdn.connectad.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://csync.smilewanted.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:15 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52b8aa910b65-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
sync.smartadserver.com/getuid?gdpr_consent=&nwid=2491&url=https://csync.smilewanted.com/set_partner_userid_get/smart/[sas_uid]&cklb=1
200 OK 0 B URL HTTP/1.1 sync.smartadserver.com/getuid?gdpr_consent=&nwid=2491&url=https://csync.smilewanted.com/set_partner_userid_get/smart/[sas_uid]&cklb=1
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?gdpr_consent=&nwid=2491&url=https://csync.smilewanted.com/set_partner_userid_get/smart/[sas_uid]&cklb=1 HTTP/1.1
Host: sync.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://csync.smilewanted.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-length: 0
date: Sun, 27 Nov 2022 19:38:15 GMT
sync.smartadserver.com/getuid?gdpr_consent=&nwid=2491&url=https://csync.smilewanted.com/set_partner_userid_get/smart/[sas_uid]
302 Found 0 B URL HTTP/1.1 sync.smartadserver.com/getuid?gdpr_consent=&nwid=2491&url=https://csync.smilewanted.com/set_partner_userid_get/smart/[sas_uid]
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?gdpr_consent=&nwid=2491&url=https://csync.smilewanted.com/set_partner_userid_get/smart/[sas_uid] HTTP/1.1
Host: sync.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://csync.smilewanted.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
content-length: 0
date: Sun, 27 Nov 2022 19:38:15 GMT
cache-control: no-cache,no-store
location: https://sync.smartadserver.com:443/getuid?gdpr_consent=&nwid=2491&url=https://csync.smilewanted.com/set_partner_userid_get/smart/[sas_uid]&cklb=1
pragma: no-cache
set-cookie: TestIfCookie=ok; expires=Mon, 01 Jan 0001 00:00:00 GMT; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 27 Nov 2023 19:38:15 GMT; domain=.smartadserver.com; path=/
pbw=%24b%3d12100%3b%24o%3d11100; expires=Mon, 27 Nov 2023 19:38:15 GMT; domain=.smartadserver.com; path=/
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
sync.richaudience.com/dcf3528a0b8aa83634892d50e91c306e/?ord=8215362679
200 OK 351 B URL HTTP/2 sync.richaudience.com/dcf3528a0b8aa83634892d50e91c306e/?ord=8215362679
IP
ASN #24940 Hetzner Online GmbH
Hash 1b3695ac143b6337f8e3c3f9e7ff28c3
2b9b42f7a118d829da9acebda947951b2be62bef
6f5a42059be92d1dc844bce683237e88869a4c4545621bb8f8cdff52d167c72e
GET /dcf3528a0b8aa83634892d50e91c306e/?ord=8215362679 HTTP/1.1
Host: sync.richaudience.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.14.2
date: Sun, 27 Nov 2022 19:38:15 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 85811b85660f9f939572dbb02365816e
69ef6cb29e40e30c2082c48c5cd7257e2abe6dd5
33f659b95b43a9b469c04dbea7aa2f52fe9bfefad49d1ee08d06b35c1e4926df
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=107098
Date: Sun, 27 Nov 2022 19:38:15 GMT
Etag: "6382b13a-1d7"
Expires: Tue, 29 Nov 2022 01:23:13 GMT
Last-Modified: Sun, 27 Nov 2022 00:37:14 GMT
Server: ECS (nyb/1D1E)
X-Cache: Miss from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: MwFhNdv0nFs2FG7AphiEktXHgEPRKTZLZ8IiSOjL-ZyXqhqplSo5NA==
Age: 2759
ocsp.digicert.com/
200 OK 471 B IP
Hash efcf392f1072119318357b01bd77f81b
3ea91881e886432891f4a7fce7adbfbc9b44b313
7395c328f9c0ab9a0699818885ece40ff960d727d32f518c613a9e530d98e609
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5631
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:38:15 GMT
Last-Modified: Sun, 27 Nov 2022 18:04:24 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash efcf392f1072119318357b01bd77f81b
3ea91881e886432891f4a7fce7adbfbc9b44b313
7395c328f9c0ab9a0699818885ece40ff960d727d32f518c613a9e530d98e609
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5631
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:38:15 GMT
Last-Modified: Sun, 27 Nov 2022 18:04:24 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471
sync.srv.stackadapt.com/sync?nid=14
302 Found 121 B URL HTTP/1.1 sync.srv.stackadapt.com/sync?nid=14
IP
File type HTML document, ASCII text
Hash bd0bd461f05971f7f19dfcb32dbd360e
9462127923a4ecf4ab12a1ec2883c25c6634d7d6
1f85e4b492699d34a5ed8453797f538329bad29eaa1dd1f5849ff0587316d6fb
GET /sync?nid=14 HTTP/1.1
Host: sync.srv.stackadapt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://eus.rubiconproject.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Date: Sun, 27 Nov 2022 19:38:15 GMT
Location: https://pixel.rubiconproject.com/tap.php?v=731524&nid=3858&put=xQpjZmEbQa1CXbm_OWvyOFtaKpo
Set-Cookie: sa-user-id=s%3A0-c50a6366-611b-41ad-425d-b9bf396bf238.cazz90kxtCATts1Rxk5kUVPGDMe8%2FUGsSZiyPn4H0rs; Max-Age=31536000; Secure; SameSite=None
sa-user-id-v2=s%3AxQpjZmEbQa1CXbm_OWvyOFtaKpo.OrkRX0D12614EOcf51x0%2F1VJwBPtVCF4jcVS3RnOu94; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None
Content-Length: 121
Connection: keep-alive
ice.360yield.com/server_match?r=https://csync.smilewanted.com/set_partner_userid_get/improve/{PUB_USER_ID}&partner_id=1010
302 Found 0 B URL HTTP/2 ice.360yield.com/server_match?r=https://csync.smilewanted.com/set_partner_userid_get/improve/{PUB_USER_ID}&partner_id=1010
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /server_match?r=https://csync.smilewanted.com/set_partner_userid_get/improve/{PUB_USER_ID}&partner_id=1010 HTTP/1.1
Host: ice.360yield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://csync.smilewanted.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 27 Nov 2022 19:38:15 GMT
content-type: text/plain
content-length: 0
location: https://ice.360yield.com/ul_cb/server_match?r=https://csync.smilewanted.com/set_partner_userid_get/improve/%7BPUB_USER_ID%7D&partner_id=1010
set-cookie: tuuid=918705e0-de79-4061-95b7-d2aaeb8f5d34; Expires=Sat, 25 Feb 2023 19:38:15 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure
tuuid_lu=1669577895; Expires=Sat, 25 Feb 2023 19:38:15 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
X-Firefox-Spdy: h2
image6.pubmatic.com/AdServer/UCookieSetPug?oid=2&cb=PubMatic._uidCB
200 OK 60 B URL HTTP/2 image6.pubmatic.com/AdServer/UCookieSetPug?oid=2&cb=PubMatic._uidCB
IP
File type ASCII text, with no line terminators
Hash 908e01a31ffad871203535cf05e7dbed
dc081110f5fce2f562fc27120711ed5c9ae84347
0f2ede095ffdfcead8bd419b4b75ad1b1cff2044f66f1c985e4e46d9a1a1b4a0
GET /AdServer/UCookieSetPug?oid=2&cb=PubMatic._uidCB HTTP/1.1
Host: image6.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.pubmatic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
cache-control: private
content-type: text/html; charset=UTF-8
expires: Sat, 25 Feb 2023 11:20:46 GMT
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
date: Sun, 27 Nov 2022 19:38:15 GMT
content-length: 60
X-Firefox-Spdy: h2
sync.smartadserver.com/getuid?gdpr_consent=&nwid=2491&url=https://csync.smilewanted.com/set_partner_userid_get/smart/[sas_uid]&cklb=1
200 OK 0 B URL HTTP/1.1 sync.smartadserver.com/getuid?gdpr_consent=&nwid=2491&url=https://csync.smilewanted.com/set_partner_userid_get/smart/[sas_uid]&cklb=1
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?gdpr_consent=&nwid=2491&url=https://csync.smilewanted.com/set_partner_userid_get/smart/[sas_uid]&cklb=1 HTTP/1.1
Host: sync.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://csync.smilewanted.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-length: 0
date: Sun, 27 Nov 2022 19:38:15 GMT
ice.360yield.com/server_match?r=https://csync.smilewanted.com/set_partner_userid_get/improve/{PUB_USER_ID}&partner_id=1010
302 Found 0 B URL HTTP/2 ice.360yield.com/server_match?r=https://csync.smilewanted.com/set_partner_userid_get/improve/{PUB_USER_ID}&partner_id=1010
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /server_match?r=https://csync.smilewanted.com/set_partner_userid_get/improve/{PUB_USER_ID}&partner_id=1010 HTTP/1.1
Host: ice.360yield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://csync.smilewanted.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Sun, 27 Nov 2022 19:38:15 GMT
content-type: text/plain
content-length: 0
location: https://ice.360yield.com/ul_cb/server_match?r=https://csync.smilewanted.com/set_partner_userid_get/improve/%7BPUB_USER_ID%7D&partner_id=1010
set-cookie: tuuid=a4315d4b-7dc8-4bbc-8fe6-a2da1a2194e5; Expires=Sat, 25 Feb 2023 19:38:15 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure
tuuid_lu=1669577895; Expires=Sat, 25 Feb 2023 19:38:15 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
X-Firefox-Spdy: h2
ice.360yield.com/ul_cb/server_match?r=https://csync.smilewanted.com/set_partner_userid_get/improve/%7BPUB_USER_ID%7D&partner_id=1010
200 OK 43 B URL HTTP/2 ice.360yield.com/ul_cb/server_match?r=https://csync.smilewanted.com/set_partner_userid_get/improve/%7BPUB_USER_ID%7D&partner_id=1010
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/server_match?r=https://csync.smilewanted.com/set_partner_userid_get/improve/%7BPUB_USER_ID%7D&partner_id=1010 HTTP/1.1
Host: ice.360yield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://csync.smilewanted.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:15 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
X-Firefox-Spdy: h2
ssum-sec.casalemedia.com/usermatchredir?s=193216&cb=https://csync.smilewanted.com/set_partner_userid_get/indexexchange/
302 Found 0 B URL HTTP/2 ssum-sec.casalemedia.com/usermatchredir?s=193216&cb=https://csync.smilewanted.com/set_partner_userid_get/indexexchange/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatchredir?s=193216&cb=https://csync.smilewanted.com/set_partner_userid_get/indexexchange/ HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://csync.smilewanted.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 27 Nov 2022 19:38:16 GMT
content-length: 0
location: /usermatchredir?cb=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Findexexchange%2F&s=193216&C=1
cf-ray: 770d52b9bf06b4eb-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
pragma: no-cache
set-cookie: CMID=Y4O8p1UT2SCDiYFvCFPeTgAA; Path=/; Domain=casalemedia.com; Expires=Mon, 27 Nov 2023 19:38:15 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=1858; Path=/; Domain=casalemedia.com; Expires=Sat, 25 Feb 2023 19:38:15 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=1858; Path=/; Domain=casalemedia.com; Expires=Sat, 25 Feb 2023 19:38:15 GMT; Max-Age=7776000; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gZBfcAEoes55ulwG5XZuibnaQ0ymcciS0Mjw2nooW1Q7cQXwDGhy7lCtuqtpnl5OlNG6qg9jfHs1YSlUUFqHGoFWYaT4DHC1zpW%2BCcs1C3kPjf5cNrC%2F3uKAkpPo9LLIralLyIyN0yMkBw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ice.360yield.com/ul_cb/server_match?r=https://csync.smilewanted.com/set_partner_userid_get/improve/%7BPUB_USER_ID%7D&partner_id=1010
200 OK 43 B URL HTTP/2 ice.360yield.com/ul_cb/server_match?r=https://csync.smilewanted.com/set_partner_userid_get/improve/%7BPUB_USER_ID%7D&partner_id=1010
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/server_match?r=https://csync.smilewanted.com/set_partner_userid_get/improve/%7BPUB_USER_ID%7D&partner_id=1010 HTTP/1.1
Host: ice.360yield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://csync.smilewanted.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:16 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 97511f071f1050b5505b058ea675c0e3
ed23e4bf15978786678c1edae08ae1f27e746cba
0c9222dd654e5f66e1b1e2b5e9c7257dda06c51adaa5be7445e950b1f3232123
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5484
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 19:38:16 GMT
Last-Modified: Sun, 27 Nov 2022 18:06:52 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 280
ssum-sec.casalemedia.com/usermatchredir?s=193216&cb=https://csync.smilewanted.com/set_partner_userid_get/indexexchange/
302 Found 0 B URL HTTP/2 ssum-sec.casalemedia.com/usermatchredir?s=193216&cb=https://csync.smilewanted.com/set_partner_userid_get/indexexchange/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatchredir?s=193216&cb=https://csync.smilewanted.com/set_partner_userid_get/indexexchange/ HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://csync.smilewanted.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Sun, 27 Nov 2022 19:38:16 GMT
content-length: 0
location: /usermatchredir?cb=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Findexexchange%2F&s=193216&C=1
cf-ray: 770d52ba1ff8b4eb-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
pragma: no-cache
set-cookie: CMID=Y4O8qAK6pwOZSWApcJPnzwAA; Path=/; Domain=casalemedia.com; Expires=Mon, 27 Nov 2023 19:38:16 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=1867; Path=/; Domain=casalemedia.com; Expires=Sat, 25 Feb 2023 19:38:16 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=1867; Path=/; Domain=casalemedia.com; Expires=Sat, 25 Feb 2023 19:38:16 GMT; Max-Age=7776000; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1sPceAa27K8eHyQFzjjWI%2Bxtg0s3UH2vHLT7bNv6qr8BcyGHTkCjW3OGrGxuZSMjShDLX0NEWWKCK1bcqhvCfM%2FxrJPfRZfW0NR9eHZIVtkgPz98Weo2jcFp4F82iEptXtt46l0Si%2BaEuQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ssum-sec.casalemedia.com/usermatchredir?cb=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Findexexchange%2F&s=193216&C=1
302 Found 0 B URL HTTP/2 ssum-sec.casalemedia.com/usermatchredir?cb=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Findexexchange%2F&s=193216&C=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatchredir?cb=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Findexexchange%2F&s=193216&C=1 HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://csync.smilewanted.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Sun, 27 Nov 2022 19:38:16 GMT
content-length: 0
location: https://csync.smilewanted.com/set_partner_userid_get/indexexchange/0
cf-ray: 770d52ba1ff9b4eb-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kIOEHtExgReGXACGvRjxTuNWSJ10m7ELqWPR%2Fa60nohKP0TT%2BmxKCSthQraH1ll3xJVQ4lqik7e88wkch2Zq565ZTrrjavT6saY%2FTMAPUnvN10xuoV9Kz01fvc%2BZ71zDCcmiAua%2BO3cMIQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 47b86b2e6427a58d155679fa9a888874
4688d78ed12666f77e7dce12033d4c6ff3e551a0
7cd7f63881ab96d59adf2626c92b0aa5cadda48a70a612620df9c55efc992eaa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7CD7F63881AB96D59ADF2626C92B0AA5CADDA48A70A612620DF9C55EFC992EAA"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10530
Expires: Sun, 27 Nov 2022 22:33:46 GMT
Date: Sun, 27 Nov 2022 19:38:16 GMT
Connection: keep-alive
pixel.rubiconproject.com/tap.php?v=731524&nid=3858&put=xQpjZmEbQa1CXbm_OWvyOFtaKpo
204 No Content 0 B URL HTTP/1.1 pixel.rubiconproject.com/tap.php?v=731524&nid=3858&put=xQpjZmEbQa1CXbm_OWvyOFtaKpo
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tap.php?v=731524&nid=3858&put=xQpjZmEbQa1CXbm_OWvyOFtaKpo HTTP/1.1
Host: pixel.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://eus.rubiconproject.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: 49049ff336235ad60cb44abcb1cec1d6
Content-Type: image/gif
ib.adnxs.com/async_usersync?cbfn=queuePixels
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/async_usersync?cbfn=queuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /async_usersync?cbfn=queuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acdn.adnxs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:16 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: https://ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
AN-X-Request-Uuid: 51147fb8-8c81-4aab-b37f-7a9b00b09b8e
Set-Cookie: uuid2=2615817334405000300; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 25-Feb-2023 19:38:16 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
a.audrte.com/p
200 68 B IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /p HTTP/1.1
Host: a.audrte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.nsfwyoutube.com/
Connection: keep-alive
Cookie: arcki2=g0dDr-ojbO7RmW9wWtqH-UULA!20220908!1669577895535!ip#91.90.42.154; arcki2_smart=8819271092785166934!20220908!1669577895855
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Origin: *
Content-Type: image/png
Date: Sun, 27 Nov 2022 19:38:16 GMT
Server: nginx/1.18.0
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Content-Length: 68
Connection: keep-alive
ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
200 OK 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://acdn.adnxs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:16 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: b6e6335e-c6e1-45db-81be-7410bb4e241c
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ib.adnxs.com/async_usersync?cbfn=queuePixels
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/async_usersync?cbfn=queuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /async_usersync?cbfn=queuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acdn.adnxs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:16 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: https://ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
AN-X-Request-Uuid: abbcf68b-efc2-44f4-b553-447633325118
Set-Cookie: uuid2=1595614421351535111; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 25-Feb-2023 19:38:16 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
csync.smilewanted.com/set_partner_userid_get/indexexchange/0
200 OK 978 B URL HTTP/2 csync.smilewanted.com/set_partner_userid_get/indexexchange/0
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (1720), with no line terminators
Hash 1e98dd2bc865299652e4f652c10b03d5
fd8969440e231cd9cd42b6810aa7fb328a4104af
926fcd7c16f9c12f6faa0c9690b631ff8111079997cdbfcb77f36a9a650616d8
GET /set_partner_userid_get/indexexchange/0 HTTP/1.1
Host: csync.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://csync.smilewanted.com/
Connection: keep-alive
Cookie: sw_user_params_infos=%2FeuF2Hv2M8QVouj5VTCZ7Mft4TaJ3XAmm%2F6LK4FN0QtN10gLDal5D%2BSvsWIdW4BoAbRXJZanUGs1mCzwszyJo2Ri6SHMnXKQeSacA5P7F7EVVyet5zRvAIQDacETZWjV6ByqLcnj7yJzp1TN%2FA3qdSXsJwA9DT3KHwwu4RW7mmklojQmqsIryz7NCFIsy2qxFkwEpcBos2Hwr3uA1LdWp1MDY9hT8bHIpFVs8sqa15vhyIk%2B%2FDSS0qlMJDdi%2FoYJ
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:16 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: sw_user_params_infos=%2FeuF2Hv2M8QVouj5VTCZ7Mft4TaJ3XAmm%2F6LK4FN0QtN10gLDal5D%2BSvsWIdW4BoAbRXJZanUGs1mCzwszyJo2Ri6SHMnXKQeSacA5P7F7EVVyet5zRvAIQDacETZWjV6ByqLcnj7yJzp1TN%2FA3qdSXsJwA9DT3KHwwu4RW7mmklojQmqsIryz7NCFIsy2qxFkwEpcBos2Hwr3uA1LdWp1MDY9hT8bHIpFVs8sqa15vhyIk%2B%2FDSS0qlMJDdi%2FoYJ; expires=Tue, 28-Nov-2023 01:27:28 GMT; Max-Age=31556952; path=/; domain=smilewanted.com; secure; HttpOnly; SameSite=None
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52bb0de515fc-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
200 OK 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://acdn.adnxs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 19:38:16 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 716af946-230c-4d0c-8e4b-76386b1af42d
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
simage4.pubmatic.com/AdServer/SPug?o=1&p=158810&sc=1&pr=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fpubmatic%2F&u=B73A771B-618F-4329-9895-477D25079E36&rs=3&gdpr=0&gdpr_consent=&us_privacy=
200 OK 1.3 kB URL HTTP/2 simage4.pubmatic.com/AdServer/SPug?o=1&p=158810&sc=1&pr=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fpubmatic%2F&u=B73A771B-618F-4329-9895-477D25079E36&rs=3&gdpr=0&gdpr_consent=&us_privacy=
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (1720)
Hash 4928338a441311a92c75a65de61af7ba
aa3ec9d37151d3239303e5c7c1c80dcb30f2c27f
044a8d8117a13cd6e6738dd59dd4eeeacdc2d24e1db0b3abd4fadaba41311bf5
GET /AdServer/SPug?o=1&p=158810&sc=1&pr=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fpubmatic%2F&u=B73A771B-618F-4329-9895-477D25079E36&rs=3&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1
Host: simage4.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.pubmatic.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 19:38:15 GMT
content-type: text/html; charset=utf-8
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
cache-control: no-store, no-cache, private
content-encoding: gzip
X-Firefox-Spdy: h2
rcp.c.appier.net/rbcm
302 Found 131 B IP
File type HTML document, ASCII text
Hash d8cfe856fbe3b9059aa0f3b86c1efee6
accc17bb785ceacd564fa974cff381140f58f8ef
2d47eb2215f3e37660e78cdc3ac4d7b89c557320db6073879eac5f20a53058e3
GET /rbcm HTTP/1.1
Host: rcp.c.appier.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://eus.rubiconproject.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sun, 27 Nov 2022 19:38:16 GMT
content-type: text/html; charset=utf-8
content-length: 131
cache-control: no-store
location: https://pixel.rubiconproject.com/tap.php?v=70596&nid=3632&put=4uE_rge6DFmIVYJLqLyDYw&expires=365
p3p: CP="CUR ADM DEV TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: _auid=4uE_rge6DFmIVYJLqLyDYw; Path=/; Domain=c.appier.net; Expires=Mon, 27 Nov 2023 19:38:16 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None
X-Firefox-Spdy: h2
csync.smilewanted.com/set_partner_userid_get/pubmatic/B73A771B-618F-4329-9895-477D25079E36
200 OK 25 B URL HTTP/2 csync.smilewanted.com/set_partner_userid_get/pubmatic/B73A771B-618F-4329-9895-477D25079E36
IP
Hash 363f411ba212d4d1ccf7856f856145e9
08331057577f273187dd15e7c6f57937835e0aff
c50b40612adfdbf2e228758746fc7927cf440cb9bb5a8280c00d7946632a1943
GET /set_partner_userid_get/pubmatic/B73A771B-618F-4329-9895-477D25079E36 HTTP/1.1
Host: csync.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://simage4.pubmatic.com/
Cookie: sw_user_params_infos=%2FeuF2Hv2M8QVouj5VTCZ7Mft4TaJ3XAmm%2F6LK4FN0QtN10gLDal5D%2BSvsWIdW4BoAbRXJZanUGs1mCzwszyJo2Ri6SHMnXKQeSacA5P7F7EVVyet5zRvAIQDacETZWjV6ByqLcnj7yJzp1TN%2FA3qdSXsJwA9DT3KHwwu4RW7mmklojQmqsIryz7NCFIsy2qxFkwEpcBos2Hwr3uA1LdWp1MDY9hT8bHIpFVs8sqa15vhyIk%2B%2FDSS0qlMJDdi%2FoYJ
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:16 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: sw_user_params_infos=h3%2B%2FZxO0BcBIKdVWfbBAPwKvJ89xHY67gEsZG%2BC11U99Il9AWl%2FMogNKzC6hBxw4IvcRXA7Sj1SMwJL%2FgI9zpwfriZzeItIVwoEwj33LDq1zwtbSVFl5uIbbK2PqQTEn41NXSUZSr0Jchw14zdfluT7yfEWep1B%2Bv7L4u%2BHK6Qy0aAy1Wt5fAkFI03qLHougLeGUqXbztSqBOBC8ZgFyEJVAl2pLoYygVAjRVa8g8YzbSknT%2Fzqacy7bAatkGlgG1cPTZ6G6RpIquq3XG%2BI7bQpoT%2BUHcFXXsZbARy40Azzlf2j22TgWdViSlrXCZWzl; expires=Tue, 28-Nov-2023 01:27:28 GMT; Max-Age=31556952; path=/; domain=smilewanted.com; secure; HttpOnly; SameSite=None
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52bbee8315fc-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
csync.smilewanted.com/drop_cookie_sw.php
200 OK 0 B URL HTTP/2 csync.smilewanted.com/drop_cookie_sw.php
IP
GET /drop_cookie_sw.php HTTP/1.1
Host: csync.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://csync.smilewanted.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:15 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: sw_user_params_infos=8sdRREvsw7LjLys0YvGw82TUjYkpDKQ2GaQqQ6a76X45aADFsbAzC1wDZIy8elHxpU9h7J0g%2BdCcooZrEuaUTgETzxb2ORoHNPFOLNmDEN6Mia0dNse%2BBrdIA0FOk2u6eVCnenzxahgQJmwms6h30Q%3D%3D; expires=Tue, 28-Nov-2023 01:27:27 GMT; Max-Age=31556952; path=/; domain=smilewanted.com; secure; HttpOnly; SameSite=None
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52b6398a15fc-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
sopalk.com/r/p.html?f=qcjvlevpa&e=1673062821466
200 OK 0 B URL HTTP/2 sopalk.com/r/p.html?f=qcjvlevpa&e=1673062821466
IP
GET /r/p.html?f=qcjvlevpa&e=1673062821466 HTTP/1.1
Host: sopalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Tue, 25 Oct 2022 13:58:03 GMT
x-amz-version-id: 6P847P_3pwRq3kg1dbhEI8vZo9rD1MSu
server: AmazonS3
content-encoding: gzip
date: Sun, 27 Nov 2022 16:28:28 GMT
etag: W/"1d799671c4d6a9304651b1b9d6a783fb"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Yn6a-s0WNJw0hdnMPwn6ObbtDZq095uBOPM-XhEu9AH8p5F3vTl8KQ==
age: 11387
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
shb.richaudience.com/hb/
200 OK 0 B IP
ASN #24940 Hetzner Online GmbH
POST /hb/ HTTP/1.1
Host: shb.richaudience.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 703
Origin: http://www.nsfwyoutube.com
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.14.2
date: Sun, 27 Nov 2022 19:38:11 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: http://www.nsfwyoutube.com
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: gzip
X-Firefox-Spdy: h2
sopalk.com/r/p.html?f=dcixa&e=1072720928229
200 OK 0 B URL HTTP/2 sopalk.com/r/p.html?f=dcixa&e=1072720928229
IP
GET /r/p.html?f=dcixa&e=1072720928229 HTTP/1.1
Host: sopalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Tue, 25 Oct 2022 13:58:03 GMT
x-amz-version-id: 6P847P_3pwRq3kg1dbhEI8vZo9rD1MSu
server: AmazonS3
content-encoding: gzip
date: Sun, 27 Nov 2022 16:28:28 GMT
etag: W/"1d799671c4d6a9304651b1b9d6a783fb"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QJCgSRoFmo1kerT67waKNoPAC2HJ_KNScaFj-cV4l1QISguupxXWeQ==
age: 11387
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
csync.smilewanted.com/
200 OK 0 B IP
GET / HTTP/1.1
Host: csync.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:15 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52b4583a15fc-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
csync.smilewanted.com/set_partner_userid_get/freewheel/c4a93510e33d7c76f888e17197fac1f?gdpr_consent=&gdpr=0
200 OK 0 B URL HTTP/2 csync.smilewanted.com/set_partner_userid_get/freewheel/c4a93510e33d7c76f888e17197fac1f?gdpr_consent=&gdpr=0
IP
GET /set_partner_userid_get/freewheel/c4a93510e33d7c76f888e17197fac1f?gdpr_consent=&gdpr=0 HTTP/1.1
Host: csync.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://csync.smilewanted.com/
Connection: keep-alive
Cookie: sw_user_params_infos=8sdRREvsw7LjLys0YvGw82TUjYkpDKQ2GaQqQ6a76X45aADFsbAzC1wDZIy8elHxpU9h7J0g%2BdCcooZrEuaUTgETzxb2ORoHNPFOLNmDEN6Mia0dNse%2BBrdIA0FOk2u6eVCnenzxahgQJmwms6h30Q%3D%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:15 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: sw_user_params_infos=9YvZNIiGwiZi9K%2FtFCBh%2BqsjDafPWvAXRQkZpGiNkbaPM7cFLHgTE3uJjHzRjYzFxviio2IvmcoZeotO8IWitgHyTG3I1ZOZARchw9GTMlmPUYSoNQUNa7B%2F49l4U9k8kQhBtRhJaCbjipfSUvboiwsMUH8GnQ5lcE272%2FTVZICS8JQI29dxy%2BylW3nQFZW%2FdWvg33R3gE%2FheO0eFp8AqA%3D%3D; expires=Tue, 28-Nov-2023 01:27:27 GMT; Max-Age=31556952; path=/; domain=smilewanted.com; secure; HttpOnly; SameSite=None
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52b70a5a15fc-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
sopalk.com/r/p.html?f=ynhtaat&e=1072720928229
200 OK 0 B URL HTTP/2 sopalk.com/r/p.html?f=ynhtaat&e=1072720928229
IP
GET /r/p.html?f=ynhtaat&e=1072720928229 HTTP/1.1
Host: sopalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Tue, 25 Oct 2022 13:58:03 GMT
x-amz-version-id: 6P847P_3pwRq3kg1dbhEI8vZo9rD1MSu
server: AmazonS3
content-encoding: gzip
date: Sun, 27 Nov 2022 16:28:28 GMT
etag: W/"1d799671c4d6a9304651b1b9d6a783fb"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3Uncomsf_FCEJtAEFXJVoL92K9UaL3WIpcR9dQH--lN5omyEMSBIIQ==
age: 11387
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
buttons-config.sharethis.com/js/5d68a51b5fea9f001288d96a.js
200 OK 0 B URL HTTP/2 buttons-config.sharethis.com/js/5d68a51b5fea9f001288d96a.js
IP
GET /js/5d68a51b5fea9f001288d96a.js HTTP/1.1
Host: buttons-config.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
last-modified: Sat, 01 Oct 2022 07:15:46 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Sun, 27 Nov 2022 19:38:11 GMT
cache-control: public, max-age=60
etag: W/"e71778e02609cb327c4b76e53947fc5d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: E3rxBlFi004QkqepWF24nONVB0gC4w2s8aEDVov-lVcBMUsVE0qjag==
age: 16
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
jaavnacsdw.com/aas/r45d/vki/1934554/tghr.js
200 OK 0 B URL HTTP/2 jaavnacsdw.com/aas/r45d/vki/1934554/tghr.js
IP
GET /aas/r45d/vki/1934554/tghr.js HTTP/1.1
Host: jaavnacsdw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 19:38:11 GMT
content-type: application/javascript
last-modified: Tue, 15 Nov 2022 12:20:41 GMT
vary: Accept-Encoding
etag: W/"63738419-10f52"
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.datanet.services/js/wp_https.js
200 OK 0 B URL HTTP/2 cdn.datanet.services/js/wp_https.js
IP
GET /js/wp_https.js HTTP/1.1
Host: cdn.datanet.services
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:10 GMT
content-type: application/javascript
last-modified: Tue, 30 Aug 2022 13:20:10 GMT
etag: W/"e73453da1869127227086de5e4820371"
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mlYDH5tES8E7zW1lMHbgXY8YPotiH5ciWlykxTr1mKPlDgoEYuEMhQ==
age: 4373
cache-control: max-age=14400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3fPUcKvG6Mxk3ZUkh3YgzqMNeLo99bzg9T%2FSit1P8CBVLJWanIwrnJue70Ba65ma%2FuYuVlfdS2vaXmUEkKexLEMyvIPUuPFb9fzbQ5tPg8s3OD4QW6I36iBvoYe0XKfVLmq9nB3dbg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 770d529a88edb4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
simage4.pubmatic.com/AdServer/SPug?o=1&p=158810&sc=1&pr=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fpubmatic%2F&u=B73A771B-618F-4329-9895-477D25079E36&rs=3&gdpr=0&gdpr_consent=&us_privacy=
200 OK 0 B URL HTTP/2 simage4.pubmatic.com/AdServer/SPug?o=1&p=158810&sc=1&pr=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fpubmatic%2F&u=B73A771B-618F-4329-9895-477D25079E36&rs=3&gdpr=0&gdpr_consent=&us_privacy=
IP
GET /AdServer/SPug?o=1&p=158810&sc=1&pr=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fpubmatic%2F&u=B73A771B-618F-4329-9895-477D25079E36&rs=3&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1
Host: simage4.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.pubmatic.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 19:38:14 GMT
content-type: text/html; charset=utf-8
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
cache-control: no-store, no-cache, private
content-encoding: gzip
X-Firefox-Spdy: h2
sopalk.com/r/p.html?f=qvxqdkwr&e=1673062821466
200 OK 0 B URL HTTP/2 sopalk.com/r/p.html?f=qvxqdkwr&e=1673062821466
IP
GET /r/p.html?f=qvxqdkwr&e=1673062821466 HTTP/1.1
Host: sopalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Tue, 25 Oct 2022 13:58:03 GMT
x-amz-version-id: 6P847P_3pwRq3kg1dbhEI8vZo9rD1MSu
server: AmazonS3
content-encoding: gzip
date: Sun, 27 Nov 2022 16:28:28 GMT
etag: W/"1d799671c4d6a9304651b1b9d6a783fb"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: S1ebdLnVp9ayJZNGSiqYQIEIzsdjmTEFVE7zz8oOU6o54tZDw4kT-Q==
age: 11387
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
sopalk.com/r/p.html?f=drgqobw&e=1072720928229
200 OK 0 B URL HTTP/2 sopalk.com/r/p.html?f=drgqobw&e=1072720928229
IP
GET /r/p.html?f=drgqobw&e=1072720928229 HTTP/1.1
Host: sopalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Tue, 25 Oct 2022 13:58:03 GMT
x-amz-version-id: 6P847P_3pwRq3kg1dbhEI8vZo9rD1MSu
server: AmazonS3
content-encoding: gzip
date: Sun, 27 Nov 2022 16:28:28 GMT
etag: W/"1d799671c4d6a9304651b1b9d6a783fb"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dRFN-1EIBkQm10g_PQQiX34iXHJzRLbS7mRiMNgB_qpiJvakOW0Gxg==
age: 11387
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
dis.criteo.com/dis/usersync.aspx?r=30&p=273&cp=smartortb&cu=1&url=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D79%26partneruserid%3D%40%40CRITEO_USERID%40%40&gdpr=0&gdpr_consent=
200 OK 0 B URL HTTP/2 dis.criteo.com/dis/usersync.aspx?r=30&p=273&cp=smartortb&cu=1&url=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D79%26partneruserid%3D%40%40CRITEO_USERID%40%40&gdpr=0&gdpr_consent=
IP
GET /dis/usersync.aspx?r=30&p=273&cp=smartortb&cu=1&url=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D79%26partneruserid%3D%40%40CRITEO_USERID%40%40&gdpr=0&gdpr_consent= HTTP/1.1
Host: dis.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:15 GMT
content-type: image/gif
server: Kestrel
cache-control: no-cache
pragma: no-cache
expires: Sun, 27 Nov 2022 00:00:00 GMT
x-errorlevel: 0
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
cross-origin-resource-policy: cross-origin
server-processing-duration-in-ticks: 779051
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
csync.smilewanted.com/set_partner_userid_get/pubmatic/B73A771B-618F-4329-9895-477D25079E36
200 OK 0 B URL HTTP/2 csync.smilewanted.com/set_partner_userid_get/pubmatic/B73A771B-618F-4329-9895-477D25079E36
IP
GET /set_partner_userid_get/pubmatic/B73A771B-618F-4329-9895-477D25079E36 HTTP/1.1
Host: csync.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://simage4.pubmatic.com/
Cookie: sw_user_params_infos=%2FeuF2Hv2M8QVouj5VTCZ7Mft4TaJ3XAmm%2F6LK4FN0QtN10gLDal5D%2BSvsWIdW4BoAbRXJZanUGs1mCzwszyJo2Ri6SHMnXKQeSacA5P7F7EVVyet5zRvAIQDacETZWjV6ByqLcnj7yJzp1TN%2FA3qdSXsJwA9DT3KHwwu4RW7mmklojQmqsIryz7NCFIsy2qxFkwEpcBos2Hwr3uA1LdWp1MDY9hT8bHIpFVs8sqa15vhyIk%2B%2FDSS0qlMJDdi%2FoYJ
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:16 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: sw_user_params_infos=h3%2B%2FZxO0BcBIKdVWfbBAPwKvJ89xHY67gEsZG%2BC11U99Il9AWl%2FMogNKzC6hBxw4IvcRXA7Sj1SMwJL%2FgI9zpwfriZzeItIVwoEwj33LDq1zwtbSVFl5uIbbK2PqQTEn41NXSUZSr0Jchw14zdfluT7yfEWep1B%2Bv7L4u%2BHK6Qy0aAy1Wt5fAkFI03qLHougLeGUqXbztSqBOBC8ZgFyEJVAl2pLoYygVAjRVa8g8YzbSknT%2Fzqacy7bAatkGlgG1cPTZ6G6RpIquq3XG%2BI7bQpoT%2BUHcFXXsZbARy40Azzlf2j22TgWdViSlrXCZWzl; expires=Tue, 28-Nov-2023 01:27:28 GMT; Max-Age=31556952; path=/; domain=smilewanted.com; secure; HttpOnly; SameSite=None
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52bc7f0a15fc-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
sopalk.com/r/p.html?f=axmvpv&e=1673062821466
200 OK 0 B URL HTTP/2 sopalk.com/r/p.html?f=axmvpv&e=1673062821466
IP
GET /r/p.html?f=axmvpv&e=1673062821466 HTTP/1.1
Host: sopalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Tue, 25 Oct 2022 13:58:03 GMT
x-amz-version-id: 6P847P_3pwRq3kg1dbhEI8vZo9rD1MSu
server: AmazonS3
content-encoding: gzip
date: Sun, 27 Nov 2022 16:28:28 GMT
etag: W/"1d799671c4d6a9304651b1b9d6a783fb"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: A3MOGolocIuPch8r-5XVYVhO_YI7TxAlNdbWfLZwePfpfX4a0zlF5w==
age: 11387
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
sopalk.com/r/p.html?f=bewytet&e=1072720928229
200 OK 0 B URL HTTP/2 sopalk.com/r/p.html?f=bewytet&e=1072720928229
IP
GET /r/p.html?f=bewytet&e=1072720928229 HTTP/1.1
Host: sopalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Tue, 25 Oct 2022 13:58:03 GMT
x-amz-version-id: 6P847P_3pwRq3kg1dbhEI8vZo9rD1MSu
server: AmazonS3
content-encoding: gzip
date: Sun, 27 Nov 2022 16:28:28 GMT
etag: W/"1d799671c4d6a9304651b1b9d6a783fb"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xsji9sXJLiP0xCSWNhhivtPD3API17MJIfUsBz3HBsDHNtXq7Ztv0A==
age: 11387
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
sopalk.com/r/p.html?f=hjygri&e=1673062821466
200 OK 0 B URL HTTP/2 sopalk.com/r/p.html?f=hjygri&e=1673062821466
IP
GET /r/p.html?f=hjygri&e=1673062821466 HTTP/1.1
Host: sopalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Tue, 25 Oct 2022 13:58:03 GMT
x-amz-version-id: 6P847P_3pwRq3kg1dbhEI8vZo9rD1MSu
server: AmazonS3
content-encoding: gzip
date: Sun, 27 Nov 2022 16:28:28 GMT
etag: W/"1d799671c4d6a9304651b1b9d6a783fb"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3TPBjaZaWffodSchDnlLt-LGt0EAaF1gZBMsw2eWsWELwPWOqw1Bpw==
age: 11387
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
csync.smilewanted.com/set_partner_userid_get/indexexchange/0
200 OK 0 B URL HTTP/2 csync.smilewanted.com/set_partner_userid_get/indexexchange/0
IP
GET /set_partner_userid_get/indexexchange/0 HTTP/1.1
Host: csync.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://csync.smilewanted.com/
Connection: keep-alive
Cookie: sw_user_params_infos=K%2FaDpPo4rMmTsABHkL2iBR1JW3I7MlAOvle36p3COy7FfyF4Tp3xw%2B9YCsY9oWBk537mMd9wxivlDhi5cuBpS3wyn4SbPODhOi6OJ3BXDzVLSgFYLVnDM4DN8dxADyK5dihjZjS9eaKJtwLy9Blxsy5jhoMmYxspjka3K%2Fib8GzimqeyvL9dWSo4oQsI9PW4N0A%2F7O9%2Bib3B9508id1RNg%3D%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:16 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: sw_user_params_infos=%2FeuF2Hv2M8QVouj5VTCZ7Mft4TaJ3XAmm%2F6LK4FN0QtN10gLDal5D%2BSvsWIdW4BoAbRXJZanUGs1mCzwszyJo2Ri6SHMnXKQeSacA5P7F7EVVyet5zRvAIQDacETZWjV6ByqLcnj7yJzp1TN%2FA3qdSXsJwA9DT3KHwwu4RW7mmklojQmqsIryz7NCFIsy2qxFkwEpcBos2Hwr3uA1LdWp1MDY9hT8bHIpFVs8sqa15vhyIk%2B%2FDSS0qlMJDdi%2FoYJ; expires=Tue, 28-Nov-2023 01:27:28 GMT; Max-Age=31556952; path=/; domain=smilewanted.com; secure; HttpOnly; SameSite=None
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52baad9915fc-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
hb.adpone.com/prebid7.19.0.js
200 OK 0 B URL HTTP/2 hb.adpone.com/prebid7.19.0.js
IP
GET /prebid7.19.0.js HTTP/1.1
Host: hb.adpone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:11 GMT
content-type: application/javascript
x-amz-id-2: z8zPPgpChpmPHjrETbNpCXccjPHhgx/GJFcxrGv5xpYywnazjILxUOl1MmK1mgPPDqHEJdhQRpw=
x-amz-request-id: AZB8RQQA6SHSSEK2
last-modified: Tue, 25 Oct 2022 11:05:38 GMT
etag: W/"c5676242a8c3f69dca478f87ab473b3a"
x-amz-version-id: mrzpmMNa6L0T_nTXd2e.MsW_mFVsXsAR
cache-control: max-age=14400
cf-cache-status: HIT
age: 4321
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DSWUvIumgncUj4ozbrPvUU20mi5rQ0MYLsrSVE5zZR4ZC4z8dqo56IHkPj9ERwEzpFLyxiSAGTtEekMTtaOuSeJ6t98oYRkg2ptQ6ftQIh79rpbcySdvF%2Fz6s7WMUdM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 770d529cb9c2fac8-OSL
content-encoding: br
X-Firefox-Spdy: h2
sopalk.com/r/p.html?f=ldmvfuo&e=1072720928229
200 OK 0 B URL HTTP/2 sopalk.com/r/p.html?f=ldmvfuo&e=1072720928229
IP
GET /r/p.html?f=ldmvfuo&e=1072720928229 HTTP/1.1
Host: sopalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Tue, 25 Oct 2022 13:58:03 GMT
x-amz-version-id: 6P847P_3pwRq3kg1dbhEI8vZo9rD1MSu
server: AmazonS3
content-encoding: gzip
date: Sun, 27 Nov 2022 16:28:28 GMT
etag: W/"1d799671c4d6a9304651b1b9d6a783fb"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CmeFnhFZftj-7PoeJWBARBX3g2r-ypK_0TXdizlqxmbv9OgC2zbEYA==
age: 11387
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
sopalk.com/r/p.html?f=nztsbqoau&e=1072720928229
200 OK 0 B URL HTTP/2 sopalk.com/r/p.html?f=nztsbqoau&e=1072720928229
IP
GET /r/p.html?f=nztsbqoau&e=1072720928229 HTTP/1.1
Host: sopalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Tue, 25 Oct 2022 13:58:03 GMT
x-amz-version-id: 6P847P_3pwRq3kg1dbhEI8vZo9rD1MSu
server: AmazonS3
content-encoding: gzip
date: Sun, 27 Nov 2022 16:28:28 GMT
etag: W/"1d799671c4d6a9304651b1b9d6a783fb"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0EE7B2VWLKbcUwv7E1tLkkiSdSjQsPqvWvDLVXDVmnvou2mXzUPW-w==
age: 11387
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
sopalk.com/t.js?i=bvjjlfbzuvkv0ywl6o0p5&cb=9032541669577890532
200 OK 0 B URL HTTP/2 sopalk.com/t.js?i=bvjjlfbzuvkv0ywl6o0p5&cb=9032541669577890532
IP
GET /t.js?i=bvjjlfbzuvkv0ywl6o0p5&cb=9032541669577890532 HTTP/1.1
Host: sopalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 11 Nov 2022 10:14:17 GMT
x-amz-version-id: _w3ae0RYCGBlDTPjQPIQB8LKoj64xOVc
server: AmazonS3
content-encoding: gzip
date: Sun, 27 Nov 2022 16:28:28 GMT
etag: W/"57c945f3c1feba973398debac47b1341"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GdWdLafM8gmHqTfOvrUoN-o63iU-c3s_ilwZk_zigtx0GvmRj8YXQw==
age: 11386
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
cdn.connectad.io/connectmyusers.php?gdpr_consent=&cb=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fconnectad%2F
200 OK 0 B URL HTTP/2 cdn.connectad.io/connectmyusers.php?gdpr_consent=&cb=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fconnectad%2F
IP
GET /connectmyusers.php?gdpr_consent=&cb=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fconnectad%2F HTTP/1.1
Host: cdn.connectad.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://csync.smilewanted.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 19:38:15 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770d52b8fb2a0b65-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
sopalk.com/r/p.html?f=awtmvbs&e=1673062821466
200 OK 0 B URL HTTP/2 sopalk.com/r/p.html?f=awtmvbs&e=1673062821466
IP
GET /r/p.html?f=awtmvbs&e=1673062821466 HTTP/1.1
Host: sopalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Tue, 25 Oct 2022 13:58:03 GMT
x-amz-version-id: 6P847P_3pwRq3kg1dbhEI8vZo9rD1MSu
server: AmazonS3
content-encoding: gzip
date: Sun, 27 Nov 2022 16:28:28 GMT
etag: W/"1d799671c4d6a9304651b1b9d6a783fb"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4J0fCZqfEtnvkGkVAItE8lbiUnS0mEgWjt_l406i6tQSByZbu3fT_Q==
age: 11387
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
sopalk.com/r/p.html?f=zsgqiwzi&e=1072720928229
200 OK 0 B URL HTTP/2 sopalk.com/r/p.html?f=zsgqiwzi&e=1072720928229
IP
GET /r/p.html?f=zsgqiwzi&e=1072720928229 HTTP/1.1
Host: sopalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nsfwyoutube.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Tue, 25 Oct 2022 13:58:03 GMT
x-amz-version-id: 6P847P_3pwRq3kg1dbhEI8vZo9rD1MSu
server: AmazonS3
content-encoding: gzip
date: Sun, 27 Nov 2022 16:28:28 GMT
etag: W/"1d799671c4d6a9304651b1b9d6a783fb"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: aMdxInWtP9Y57e5SF2Ryz3eJrQmOarr0J9d9Gjf7IgPtG7rdvxb-ag==
age: 11387
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
208.78.226.162
157.90.3.144
104.21.42.103
23.38.200.201
62.122.171.6
37.157.6.233
185.64.190.78
178.250.2.151
172.105.203.31
151.101.84.193