www.n5rthy.com/2HKZ36GB/3JL8MPP/?__rpt=0&__po=1544&__ptid=f336ae90ffc64d7fb6b35f7c8e739de9&__rpa=1&__rc=1&sub1=KSI%20VS%20KAZE%20TEMPERRR%20FULL%20FIGHT&sub2=boxing&sub3=&sub4=&sub5=&source_id=54g10p&__pcd=9
302 Found 153 B URL HTTP/1.1 www.n5rthy.com/2HKZ36GB/3JL8MPP/?__rpt=0&__po=1544&__ptid=f336ae90ffc64d7fb6b35f7c8e739de9&__rpa=1&__rc=1&sub1=KSI%20VS%20KAZE%20TEMPERRR%20FULL%20FIGHT&sub2=boxing&sub3=&sub4=&sub5=&source_id=54g10p&__pcd=9
IP
File type HTML document, ASCII text
Hash fee800358b554584dfd49b65b4ec3aec
f66dd7990108778d6e31a4ebbe17d11d89e243c9
1bfe57df86a0c167f223d65696f6682006cccd94aeb8b038ed59c231992cbe20
GET /2HKZ36GB/3JL8MPP/?__rpt=0&__po=1544&__ptid=f336ae90ffc64d7fb6b35f7c8e739de9&__rpa=1&__rc=1&sub1=KSI%20VS%20KAZE%20TEMPERRR%20FULL%20FIGHT&sub2=boxing&sub3=&sub4=&sub5=&source_id=54g10p&__pcd=9 HTTP/1.1
Host: www.n5rthy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 14 Jan 2023 20:16:08 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 153
Location: https://turnhub.net/?affid=864kjuyuio54&page=m-2-grizzlyX&clickid=a0156f2f3adc46879f5a8705f4879926&pubid=3018262776617
Set-Cookie: uniqueClick_3JL8MPP=52813808-60ee-4633-96a1-87aaa7186c23:1673727368; Path=/; Expires=Tue, 14 Feb 2023 20:16:08 GMT; SameSite=None
transaction_id=a0156f2f3adc46879f5a8705f4879926; Path=/; Expires=Fri, 14 Apr 2023 20:16:08 GMT; SameSite=None
Vary: Origin
X-Eflow-Request-Id: 4edb48fc-30e7-4547-bf67-10b1b4b73151
Via: 1.1 google
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a8b4f1afb0e830b797238d34ab9254aa
e011acef3d05c959a65205d53b651ecd18a889fe
f7ceff5b4fda083c7449b7298c232224cf48a632dcb87233b646790de207d49c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F7CEFF5B4FDA083C7449B7298C232224CF48A632DCB87233B646790DE207D49C"
Last-Modified: Thu, 12 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9324
Expires: Sat, 14 Jan 2023 22:51:32 GMT
Date: Sat, 14 Jan 2023 20:16:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0643dc6b6fed33b3537160b6bb77bcbf
aa43bd1fbb30d2219f3285c1ee4991ffb33562c5
f137438e30e0d69cba77ca2eb736687873e4a9c06cf88d23c6d55ea930fde09f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F137438E30E0D69CBA77CA2EB736687873E4A9C06CF88D23C6D55EA930FDE09F"
Last-Modified: Sat, 14 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9552
Expires: Sat, 14 Jan 2023 22:55:20 GMT
Date: Sat, 14 Jan 2023 20:16:08 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 14 Jan 2023 19:48:55 GMT
content-type: application/json
age: 1633
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f7bd85a261739c122eefb74ffddaec99
e2e059b0740592e8591d432249aafe5fcb8af23c
71bdd130b8d143f228542f678e91c98ab4e5844fb9f47b036e15372660be25fd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "71BDD130B8D143F228542F678E91C98AB4E5844FB9F47B036E15372660BE25FD"
Last-Modified: Sat, 14 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4050
Expires: Sat, 14 Jan 2023 21:23:38 GMT
Date: Sat, 14 Jan 2023 20:16:08 GMT
Connection: keep-alive
turnhub.net/?affid=864kjuyuio54&page=m-2-grizzlyX&clickid=a0156f2f3adc46879f5a8705f4879926&pubid=3018262776617
302 Found 0 B URL HTTP/2 turnhub.net/?affid=864kjuyuio54&page=m-2-grizzlyX&clickid=a0156f2f3adc46879f5a8705f4879926&pubid=3018262776617
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?affid=864kjuyuio54&page=m-2-grizzlyX&clickid=a0156f2f3adc46879f5a8705f4879926&pubid=3018262776617 HTTP/1.1
Host: turnhub.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Sat, 14 Jan 2023 20:16:08 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
location: https://entertainzer.com/registration?theme=m-2-grizzlyX&v_id=27336f43-1098-5f13-7d85-a7b966c847e6&capo=dHVybmh1Yi5uZXQ=&entityId=2&capoUrl=turnhub.net&page=m-2-grizzlyX&clickid=a0156f2f3adc46879f5a8705f4879926&pubid=3018262776617&a_aid=864kjuyuio54
set-cookie: data=eyJzaXRlIjoiZW50ZXJ0YWluemVyLmNvbSIsInJlcXVlc3RlZFRoZW1lIjoibS0yLWdyaXp6bHlYIiwicm91dGVkVGhlbWUiOiJtLTItZ3JpenpseVgiLCJ2aXNpdG9ySWQiOiIyNzMzNmY0My0xMDk4LTVmMTMtN2Q4NS1hN2I5NjZjODQ3ZTYifQ==; Max-Age=3600; Expires=Sat, 14 Jan 2023 20:16:12 GMT;
vary: Accept-Encoding
server: cloudflare
cf-ray: 78990c36ed32b4f3-OSL
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: lvDJVQaB7Qyj1JHrXMTbdRggFlaw73MTOw5Xx3qSLehEmxVVQg2EuU5owiJTUb+wKR1uHWnbpiK0gSA73oKjjg==
x-amz-request-id: 09TK78Q36884HTP0
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 14 Jan 2023 19:55:04 GMT
age: 1264
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 20:16:08 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
entertainzer.com/img/logos/entertainment/min/entertainzer.png
200 OK 1.3 kB URL HTTP/2 entertainzer.com/img/logos/entertainment/min/entertainzer.png
IP
File type PNG image data, 250 x 60, 8-bit colormap, non-interlaced\012- data
Hash e6219598a2c2991debd2027b3ce0230a
cdc8fcf27a700b79af816e783f4a1fddc40d9b91
937cb83e99191feb41e67d7273db2f3a406f249e2b23509978a3969afc7d3f93
GET /img/logos/entertainment/min/entertainzer.png HTTP/1.1
Host: entertainzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/registration?theme=m-2-grizzlyX&v_id=27336f43-1098-5f13-7d85-a7b966c847e6&capo=dHVybmh1Yi5uZXQ=&entityId=2&capoUrl=turnhub.net&page=m-2-grizzlyX&clickid=a0156f2f3adc46879f5a8705f4879926&pubid=3018262776617&a_aid=864kjuyuio54
Cookie: CakeCookie[a_aid]=ODY0a2p1eXVpbzU0; CakeCookie[capo]=ZEhWeWJtaDFZaTV1WlhRPQ%3D%3D; CakeCookie[capoUrl]=dHVybmh1Yi5uZXQ%3D; CakeCookie[clickid]=YTAxNTZmMmYzYWRjNDY4NzlmNWE4NzA1ZjQ4Nzk5MjY%3D; CakeCookie[entityId]=Mg%3D%3D; CakeCookie[lang]=eng; CakeCookie[pubid]=MzAxODI2Mjc3NjYxNw%3D%3D; CakeCookie[v_id]=MjczMzZmNDMtMTA5OC01ZjEzLTdkODUtYTdiOTY2Yzg0N2U2; CakeCookie[registrationaff_864kjuyuio54_3018262776617_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:09 GMT
content-type: image/png
content-length: 1333
last-modified: Thu, 12 Jan 2023 20:59:58 GMT
etag: "63c074ce-535"
x-frame-options: SAMEORIGIN
x-fruit: banana
cf-cache-status: HIT
age: 2894
expires: Sun, 15 Jan 2023 00:16:09 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 78990c38d9aa1c12-OSL
X-Firefox-Spdy: h2
entertainzer.com/img/flags/min/en.png
200 OK 481 B URL HTTP/2 entertainzer.com/img/flags/min/en.png
IP
File type PNG image data, 16 x 11, 8-bit colormap, non-interlaced\012- data
Hash 2b936acc8c146a32951e38be063165d3
c379684310743ece93501b7fcdf396359f577cdb
1b959a0f3a63cc646af532327035df4c4ebc6b91ac86fc5384fe60283e26132a
GET /img/flags/min/en.png HTTP/1.1
Host: entertainzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/registration?theme=m-2-grizzlyX&v_id=27336f43-1098-5f13-7d85-a7b966c847e6&capo=dHVybmh1Yi5uZXQ=&entityId=2&capoUrl=turnhub.net&page=m-2-grizzlyX&clickid=a0156f2f3adc46879f5a8705f4879926&pubid=3018262776617&a_aid=864kjuyuio54
Cookie: CakeCookie[a_aid]=ODY0a2p1eXVpbzU0; CakeCookie[capo]=ZEhWeWJtaDFZaTV1WlhRPQ%3D%3D; CakeCookie[capoUrl]=dHVybmh1Yi5uZXQ%3D; CakeCookie[clickid]=YTAxNTZmMmYzYWRjNDY4NzlmNWE4NzA1ZjQ4Nzk5MjY%3D; CakeCookie[entityId]=Mg%3D%3D; CakeCookie[lang]=eng; CakeCookie[pubid]=MzAxODI2Mjc3NjYxNw%3D%3D; CakeCookie[v_id]=MjczMzZmNDMtMTA5OC01ZjEzLTdkODUtYTdiOTY2Yzg0N2U2; CakeCookie[registrationaff_864kjuyuio54_3018262776617_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:09 GMT
content-type: image/png
content-length: 481
last-modified: Thu, 12 Jan 2023 20:59:59 GMT
etag: "63c074cf-1e1"
x-frame-options: SAMEORIGIN
x-fruit: banana
cf-cache-status: HIT
age: 2894
expires: Sun, 15 Jan 2023 00:16:09 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 78990c38d9af1c12-OSL
X-Firefox-Spdy: h2
entertainzer.com/img/flags/min/da.png
200 OK 298 B URL HTTP/2 entertainzer.com/img/flags/min/da.png
IP
File type PNG image data, 16 x 11, 8-bit colormap, non-interlaced\012- data
Hash c34a7583b5e01b331ee79386d8cebf95
fd0d1f826a6619d278fe962292b63ae91bf61170
5c80542e1988370b38fae869c8adc6edbb449b91e87d0544b4c5074e191d6916
GET /img/flags/min/da.png HTTP/1.1
Host: entertainzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/registration?theme=m-2-grizzlyX&v_id=27336f43-1098-5f13-7d85-a7b966c847e6&capo=dHVybmh1Yi5uZXQ=&entityId=2&capoUrl=turnhub.net&page=m-2-grizzlyX&clickid=a0156f2f3adc46879f5a8705f4879926&pubid=3018262776617&a_aid=864kjuyuio54
Cookie: CakeCookie[a_aid]=ODY0a2p1eXVpbzU0; CakeCookie[capo]=ZEhWeWJtaDFZaTV1WlhRPQ%3D%3D; CakeCookie[capoUrl]=dHVybmh1Yi5uZXQ%3D; CakeCookie[clickid]=YTAxNTZmMmYzYWRjNDY4NzlmNWE4NzA1ZjQ4Nzk5MjY%3D; CakeCookie[entityId]=Mg%3D%3D; CakeCookie[lang]=eng; CakeCookie[pubid]=MzAxODI2Mjc3NjYxNw%3D%3D; CakeCookie[v_id]=MjczMzZmNDMtMTA5OC01ZjEzLTdkODUtYTdiOTY2Yzg0N2U2; CakeCookie[registrationaff_864kjuyuio54_3018262776617_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:09 GMT
content-type: image/png
content-length: 298
last-modified: Thu, 12 Jan 2023 20:59:59 GMT
etag: "63c074cf-12a"
x-frame-options: SAMEORIGIN
x-fruit: banana
cf-cache-status: HIT
age: 2894
expires: Sun, 15 Jan 2023 00:16:09 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 78990c38d9b11c12-OSL
X-Firefox-Spdy: h2
entertainzer.com/img/flags/min/ar.png
200 OK 318 B URL HTTP/2 entertainzer.com/img/flags/min/ar.png
IP
File type PNG image data, 16 x 11, 8-bit colormap, non-interlaced\012- data
Hash b11bcada2c51b6e5e299245db87bec18
56dc40f41854e76cbdf12683721763b674fbef14
59fae4a2c45ab3f79b6e012c3bc435bad3d83de43cd8b5cb9ec792bbdc71e034
GET /img/flags/min/ar.png HTTP/1.1
Host: entertainzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/registration?theme=m-2-grizzlyX&v_id=27336f43-1098-5f13-7d85-a7b966c847e6&capo=dHVybmh1Yi5uZXQ=&entityId=2&capoUrl=turnhub.net&page=m-2-grizzlyX&clickid=a0156f2f3adc46879f5a8705f4879926&pubid=3018262776617&a_aid=864kjuyuio54
Cookie: CakeCookie[a_aid]=ODY0a2p1eXVpbzU0; CakeCookie[capo]=ZEhWeWJtaDFZaTV1WlhRPQ%3D%3D; CakeCookie[capoUrl]=dHVybmh1Yi5uZXQ%3D; CakeCookie[clickid]=YTAxNTZmMmYzYWRjNDY4NzlmNWE4NzA1ZjQ4Nzk5MjY%3D; CakeCookie[entityId]=Mg%3D%3D; CakeCookie[lang]=eng; CakeCookie[pubid]=MzAxODI2Mjc3NjYxNw%3D%3D; CakeCookie[v_id]=MjczMzZmNDMtMTA5OC01ZjEzLTdkODUtYTdiOTY2Yzg0N2U2; CakeCookie[registrationaff_864kjuyuio54_3018262776617_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:09 GMT
content-type: image/png
content-length: 318
last-modified: Thu, 12 Jan 2023 20:59:59 GMT
etag: "63c074cf-13e"
x-frame-options: SAMEORIGIN
x-fruit: banana
cf-cache-status: HIT
age: 2894
expires: Sun, 15 Jan 2023 00:16:09 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 78990c38d9b01c12-OSL
X-Firefox-Spdy: h2
entertainzer.com/img/flags/min/de.png
200 OK 464 B URL HTTP/2 entertainzer.com/img/flags/min/de.png
IP
File type PNG image data, 16 x 11, 8-bit colormap, non-interlaced\012- data
Hash 3babff7961e39e8cd594b9678f7ce728
ea40638d6af4722c8b0e4314e95d64ae059a3ae0
7319b0ebaea7239bf208e9bbf05c5756659be88767ad0424eca017aacf7940eb
GET /img/flags/min/de.png HTTP/1.1
Host: entertainzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/registration?theme=m-2-grizzlyX&v_id=27336f43-1098-5f13-7d85-a7b966c847e6&capo=dHVybmh1Yi5uZXQ=&entityId=2&capoUrl=turnhub.net&page=m-2-grizzlyX&clickid=a0156f2f3adc46879f5a8705f4879926&pubid=3018262776617&a_aid=864kjuyuio54
Cookie: CakeCookie[a_aid]=ODY0a2p1eXVpbzU0; CakeCookie[capo]=ZEhWeWJtaDFZaTV1WlhRPQ%3D%3D; CakeCookie[capoUrl]=dHVybmh1Yi5uZXQ%3D; CakeCookie[clickid]=YTAxNTZmMmYzYWRjNDY4NzlmNWE4NzA1ZjQ4Nzk5MjY%3D; CakeCookie[entityId]=Mg%3D%3D; CakeCookie[lang]=eng; CakeCookie[pubid]=MzAxODI2Mjc3NjYxNw%3D%3D; CakeCookie[v_id]=MjczMzZmNDMtMTA5OC01ZjEzLTdkODUtYTdiOTY2Yzg0N2U2; CakeCookie[registrationaff_864kjuyuio54_3018262776617_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:09 GMT
content-type: image/png
content-length: 464
last-modified: Thu, 12 Jan 2023 20:59:59 GMT
etag: "63c074cf-1d0"
x-frame-options: SAMEORIGIN
x-fruit: banana
cf-cache-status: HIT
age: 2894
expires: Sun, 15 Jan 2023 00:16:09 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 78990c38d9b31c12-OSL
X-Firefox-Spdy: h2
entertainzer.com/img/flags/min/it.png
200 OK 316 B URL HTTP/2 entertainzer.com/img/flags/min/it.png
IP
File type PNG image data, 16 x 11, 8-bit colormap, non-interlaced\012- data
Hash acab890d6d5eb20e38f22aba425c3d34
ec0be0f24e663759356e817bd73a7e7569663bb6
f6f0eb8b370c334ab172fa69fb55ec7b72c6bd3d137c0bbd750d0fc788f433b0
GET /img/flags/min/it.png HTTP/1.1
Host: entertainzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/registration?theme=m-2-grizzlyX&v_id=27336f43-1098-5f13-7d85-a7b966c847e6&capo=dHVybmh1Yi5uZXQ=&entityId=2&capoUrl=turnhub.net&page=m-2-grizzlyX&clickid=a0156f2f3adc46879f5a8705f4879926&pubid=3018262776617&a_aid=864kjuyuio54
Cookie: CakeCookie[a_aid]=ODY0a2p1eXVpbzU0; CakeCookie[capo]=ZEhWeWJtaDFZaTV1WlhRPQ%3D%3D; CakeCookie[capoUrl]=dHVybmh1Yi5uZXQ%3D; CakeCookie[clickid]=YTAxNTZmMmYzYWRjNDY4NzlmNWE4NzA1ZjQ4Nzk5MjY%3D; CakeCookie[entityId]=Mg%3D%3D; CakeCookie[lang]=eng; CakeCookie[pubid]=MzAxODI2Mjc3NjYxNw%3D%3D; CakeCookie[v_id]=MjczMzZmNDMtMTA5OC01ZjEzLTdkODUtYTdiOTY2Yzg0N2U2; CakeCookie[registrationaff_864kjuyuio54_3018262776617_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:09 GMT
content-type: image/png
content-length: 316
last-modified: Thu, 12 Jan 2023 20:59:59 GMT
etag: "63c074cf-13c"
x-frame-options: SAMEORIGIN
x-fruit: banana
cf-cache-status: HIT
age: 2894
expires: Sun, 15 Jan 2023 00:16:09 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 78990c38e9c01c12-OSL
X-Firefox-Spdy: h2
entertainzer.com/img/flags/min/no.png
200 OK 334 B URL HTTP/2 entertainzer.com/img/flags/min/no.png
IP
File type PNG image data, 16 x 11, 8-bit colormap, non-interlaced\012- data
Hash c48ab8c65139f9647fee8710c4b3b66c
df412e417270d78833a1efacdc61529abb7ad03c
79ca4cda3faf0379f6fb2df3f82b896393291eede7c9c7e09b5199572de06d5c
GET /img/flags/min/no.png HTTP/1.1
Host: entertainzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/registration?theme=m-2-grizzlyX&v_id=27336f43-1098-5f13-7d85-a7b966c847e6&capo=dHVybmh1Yi5uZXQ=&entityId=2&capoUrl=turnhub.net&page=m-2-grizzlyX&clickid=a0156f2f3adc46879f5a8705f4879926&pubid=3018262776617&a_aid=864kjuyuio54
Cookie: CakeCookie[a_aid]=ODY0a2p1eXVpbzU0; CakeCookie[capo]=ZEhWeWJtaDFZaTV1WlhRPQ%3D%3D; CakeCookie[capoUrl]=dHVybmh1Yi5uZXQ%3D; CakeCookie[clickid]=YTAxNTZmMmYzYWRjNDY4NzlmNWE4NzA1ZjQ4Nzk5MjY%3D; CakeCookie[entityId]=Mg%3D%3D; CakeCookie[lang]=eng; CakeCookie[pubid]=MzAxODI2Mjc3NjYxNw%3D%3D; CakeCookie[v_id]=MjczMzZmNDMtMTA5OC01ZjEzLTdkODUtYTdiOTY2Yzg0N2U2; CakeCookie[registrationaff_864kjuyuio54_3018262776617_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:09 GMT
content-type: image/png
content-length: 334
last-modified: Thu, 12 Jan 2023 20:59:59 GMT
etag: "63c074cf-14e"
x-frame-options: SAMEORIGIN
x-fruit: banana
cf-cache-status: HIT
age: 2894
expires: Sun, 15 Jan 2023 00:16:09 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 78990c38e9c41c12-OSL
X-Firefox-Spdy: h2
entertainzer.com/img/flags/min/fr.png
200 OK 369 B URL HTTP/2 entertainzer.com/img/flags/min/fr.png
IP
File type PNG image data, 16 x 11, 8-bit colormap, non-interlaced\012- data
Hash 83d2595ea3031de73b98f2c57ad88949
32bd0c5b029e8b75bef13eeb532917d9a56f61c9
0ec28fba482645dc252afe2be19282beebab6162300c9291c16a31138694cca0
GET /img/flags/min/fr.png HTTP/1.1
Host: entertainzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/registration?theme=m-2-grizzlyX&v_id=27336f43-1098-5f13-7d85-a7b966c847e6&capo=dHVybmh1Yi5uZXQ=&entityId=2&capoUrl=turnhub.net&page=m-2-grizzlyX&clickid=a0156f2f3adc46879f5a8705f4879926&pubid=3018262776617&a_aid=864kjuyuio54
Cookie: CakeCookie[a_aid]=ODY0a2p1eXVpbzU0; CakeCookie[capo]=ZEhWeWJtaDFZaTV1WlhRPQ%3D%3D; CakeCookie[capoUrl]=dHVybmh1Yi5uZXQ%3D; CakeCookie[clickid]=YTAxNTZmMmYzYWRjNDY4NzlmNWE4NzA1ZjQ4Nzk5MjY%3D; CakeCookie[entityId]=Mg%3D%3D; CakeCookie[lang]=eng; CakeCookie[pubid]=MzAxODI2Mjc3NjYxNw%3D%3D; CakeCookie[v_id]=MjczMzZmNDMtMTA5OC01ZjEzLTdkODUtYTdiOTY2Yzg0N2U2; CakeCookie[registrationaff_864kjuyuio54_3018262776617_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:09 GMT
content-type: image/png
content-length: 369
last-modified: Thu, 12 Jan 2023 20:59:59 GMT
etag: "63c074cf-171"
x-frame-options: SAMEORIGIN
x-fruit: banana
cf-cache-status: HIT
age: 2894
expires: Sun, 15 Jan 2023 00:16:09 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 78990c38e9be1c12-OSL
X-Firefox-Spdy: h2
entertainzer.com/img/flags/min/nl.png
200 OK 328 B URL HTTP/2 entertainzer.com/img/flags/min/nl.png
IP
File type PNG image data, 16 x 11, 8-bit colormap, non-interlaced\012- data
Hash c055c14b8f44b006b32261e71be3324f
34ccf4e9f9d0f18b86fabafe477d5cc76d6ca725
ad2583d30cae6dfdba4e48dedbdb623305fb0e5a310cf84deedb75cb8e7214a2
GET /img/flags/min/nl.png HTTP/1.1
Host: entertainzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/registration?theme=m-2-grizzlyX&v_id=27336f43-1098-5f13-7d85-a7b966c847e6&capo=dHVybmh1Yi5uZXQ=&entityId=2&capoUrl=turnhub.net&page=m-2-grizzlyX&clickid=a0156f2f3adc46879f5a8705f4879926&pubid=3018262776617&a_aid=864kjuyuio54
Cookie: CakeCookie[a_aid]=ODY0a2p1eXVpbzU0; CakeCookie[capo]=ZEhWeWJtaDFZaTV1WlhRPQ%3D%3D; CakeCookie[capoUrl]=dHVybmh1Yi5uZXQ%3D; CakeCookie[clickid]=YTAxNTZmMmYzYWRjNDY4NzlmNWE4NzA1ZjQ4Nzk5MjY%3D; CakeCookie[entityId]=Mg%3D%3D; CakeCookie[lang]=eng; CakeCookie[pubid]=MzAxODI2Mjc3NjYxNw%3D%3D; CakeCookie[v_id]=MjczMzZmNDMtMTA5OC01ZjEzLTdkODUtYTdiOTY2Yzg0N2U2; CakeCookie[registrationaff_864kjuyuio54_3018262776617_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:09 GMT
content-type: image/png
content-length: 328
last-modified: Thu, 12 Jan 2023 20:59:59 GMT
etag: "63c074cf-148"
x-frame-options: SAMEORIGIN
x-fruit: banana
cf-cache-status: HIT
age: 2894
expires: Sun, 15 Jan 2023 00:16:09 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 78990c38e9c21c12-OSL
X-Firefox-Spdy: h2
entertainzer.com/img/flags/min/es.png
200 OK 365 B URL HTTP/2 entertainzer.com/img/flags/min/es.png
IP
File type PNG image data, 16 x 11, 8-bit colormap, non-interlaced\012- data
Hash 9790f666586897cf09b4e2ff5e11f674
bbeedd0fd9332b6534a259e71a6b871b7dea16e0
52f9f4b06302262227ccfcbd5bc1f1a8be31b554167a48e8b90bb8b569743bfc
GET /img/flags/min/es.png HTTP/1.1
Host: entertainzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/registration?theme=m-2-grizzlyX&v_id=27336f43-1098-5f13-7d85-a7b966c847e6&capo=dHVybmh1Yi5uZXQ=&entityId=2&capoUrl=turnhub.net&page=m-2-grizzlyX&clickid=a0156f2f3adc46879f5a8705f4879926&pubid=3018262776617&a_aid=864kjuyuio54
Cookie: CakeCookie[a_aid]=ODY0a2p1eXVpbzU0; CakeCookie[capo]=ZEhWeWJtaDFZaTV1WlhRPQ%3D%3D; CakeCookie[capoUrl]=dHVybmh1Yi5uZXQ%3D; CakeCookie[clickid]=YTAxNTZmMmYzYWRjNDY4NzlmNWE4NzA1ZjQ4Nzk5MjY%3D; CakeCookie[entityId]=Mg%3D%3D; CakeCookie[lang]=eng; CakeCookie[pubid]=MzAxODI2Mjc3NjYxNw%3D%3D; CakeCookie[v_id]=MjczMzZmNDMtMTA5OC01ZjEzLTdkODUtYTdiOTY2Yzg0N2U2; CakeCookie[registrationaff_864kjuyuio54_3018262776617_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:09 GMT
content-type: image/png
content-length: 365
last-modified: Thu, 12 Jan 2023 20:59:59 GMT
etag: "63c074cf-16d"
x-frame-options: SAMEORIGIN
x-fruit: banana
cf-cache-status: HIT
age: 2894
expires: Sun, 15 Jan 2023 00:16:09 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 78990c38e9bd1c12-OSL
X-Firefox-Spdy: h2
entertainzer.com/img/flags/min/ja.png
200 OK 266 B URL HTTP/2 entertainzer.com/img/flags/min/ja.png
IP
File type PNG image data, 16 x 11, 8-bit colormap, non-interlaced\012- data
Hash f8d5d965c5ac8014d2e0293d67f893a4
476ddbaaa32dc435e1c1aa04104c88c9771c5fbe
f8876ab39504d02b6fb905eef77c4ad8d181a563105609bed0b57fc279352ef0
GET /img/flags/min/ja.png HTTP/1.1
Host: entertainzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/registration?theme=m-2-grizzlyX&v_id=27336f43-1098-5f13-7d85-a7b966c847e6&capo=dHVybmh1Yi5uZXQ=&entityId=2&capoUrl=turnhub.net&page=m-2-grizzlyX&clickid=a0156f2f3adc46879f5a8705f4879926&pubid=3018262776617&a_aid=864kjuyuio54
Cookie: CakeCookie[a_aid]=ODY0a2p1eXVpbzU0; CakeCookie[capo]=ZEhWeWJtaDFZaTV1WlhRPQ%3D%3D; CakeCookie[capoUrl]=dHVybmh1Yi5uZXQ%3D; CakeCookie[clickid]=YTAxNTZmMmYzYWRjNDY4NzlmNWE4NzA1ZjQ4Nzk5MjY%3D; CakeCookie[entityId]=Mg%3D%3D; CakeCookie[lang]=eng; CakeCookie[pubid]=MzAxODI2Mjc3NjYxNw%3D%3D; CakeCookie[v_id]=MjczMzZmNDMtMTA5OC01ZjEzLTdkODUtYTdiOTY2Yzg0N2U2; CakeCookie[registrationaff_864kjuyuio54_3018262776617_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:09 GMT
content-type: image/png
content-length: 266
last-modified: Thu, 12 Jan 2023 20:59:59 GMT
etag: "63c074cf-10a"
x-frame-options: SAMEORIGIN
x-fruit: banana
cf-cache-status: HIT
age: 2894
expires: Sun, 15 Jan 2023 00:16:09 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 78990c38e9c11c12-OSL
X-Firefox-Spdy: h2
entertainzer.com/img/flags/min/pl.png
200 OK 256 B URL HTTP/2 entertainzer.com/img/flags/min/pl.png
IP
File type PNG image data, 16 x 11, 8-bit colormap, non-interlaced\012- data
Hash 0bf391411c6f06bef68cc4c369b9eba0
7773847a6c110241864cdb7760fc80c76011978b
51f29fd11cad81a8cbe246c0ee8d4f97fd8a04859fbf6a4517b7cce931e8ba34
GET /img/flags/min/pl.png HTTP/1.1
Host: entertainzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/registration?theme=m-2-grizzlyX&v_id=27336f43-1098-5f13-7d85-a7b966c847e6&capo=dHVybmh1Yi5uZXQ=&entityId=2&capoUrl=turnhub.net&page=m-2-grizzlyX&clickid=a0156f2f3adc46879f5a8705f4879926&pubid=3018262776617&a_aid=864kjuyuio54
Cookie: CakeCookie[a_aid]=ODY0a2p1eXVpbzU0; CakeCookie[capo]=ZEhWeWJtaDFZaTV1WlhRPQ%3D%3D; CakeCookie[capoUrl]=dHVybmh1Yi5uZXQ%3D; CakeCookie[clickid]=YTAxNTZmMmYzYWRjNDY4NzlmNWE4NzA1ZjQ4Nzk5MjY%3D; CakeCookie[entityId]=Mg%3D%3D; CakeCookie[lang]=eng; CakeCookie[pubid]=MzAxODI2Mjc3NjYxNw%3D%3D; CakeCookie[v_id]=MjczMzZmNDMtMTA5OC01ZjEzLTdkODUtYTdiOTY2Yzg0N2U2; CakeCookie[registrationaff_864kjuyuio54_3018262776617_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:09 GMT
content-type: image/png
content-length: 256
last-modified: Thu, 12 Jan 2023 20:59:59 GMT
etag: "63c074cf-100"
x-frame-options: SAMEORIGIN
x-fruit: banana
cf-cache-status: HIT
age: 2894
expires: Sun, 15 Jan 2023 00:16:09 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 78990c38f9d01c12-OSL
X-Firefox-Spdy: h2
entertainzer.com/img/flags/min/pt.png
200 OK 427 B URL HTTP/2 entertainzer.com/img/flags/min/pt.png
IP
File type PNG image data, 16 x 11, 8-bit colormap, non-interlaced\012- data
Hash 86b64a6009b9fda3f62281760c1dd4f0
c536dff21701618654328b21773e69a7508c4c85
28d682eed12d0786c32613e2c4c54c144975c7160f2584380d1839d9dc04f824
GET /img/flags/min/pt.png HTTP/1.1
Host: entertainzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/registration?theme=m-2-grizzlyX&v_id=27336f43-1098-5f13-7d85-a7b966c847e6&capo=dHVybmh1Yi5uZXQ=&entityId=2&capoUrl=turnhub.net&page=m-2-grizzlyX&clickid=a0156f2f3adc46879f5a8705f4879926&pubid=3018262776617&a_aid=864kjuyuio54
Cookie: CakeCookie[a_aid]=ODY0a2p1eXVpbzU0; CakeCookie[capo]=ZEhWeWJtaDFZaTV1WlhRPQ%3D%3D; CakeCookie[capoUrl]=dHVybmh1Yi5uZXQ%3D; CakeCookie[clickid]=YTAxNTZmMmYzYWRjNDY4NzlmNWE4NzA1ZjQ4Nzk5MjY%3D; CakeCookie[entityId]=Mg%3D%3D; CakeCookie[lang]=eng; CakeCookie[pubid]=MzAxODI2Mjc3NjYxNw%3D%3D; CakeCookie[v_id]=MjczMzZmNDMtMTA5OC01ZjEzLTdkODUtYTdiOTY2Yzg0N2U2; CakeCookie[registrationaff_864kjuyuio54_3018262776617_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:09 GMT
content-type: image/png
content-length: 427
last-modified: Thu, 12 Jan 2023 20:59:59 GMT
etag: "63c074cf-1ab"
x-frame-options: SAMEORIGIN
x-fruit: banana
cf-cache-status: HIT
age: 2894
expires: Sun, 15 Jan 2023 00:16:09 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 78990c38f9d11c12-OSL
X-Firefox-Spdy: h2
entertainzer.com/img/flags/min/sv.png
200 OK 342 B URL HTTP/2 entertainzer.com/img/flags/min/sv.png
IP
File type PNG image data, 16 x 11, 8-bit colormap, non-interlaced\012- data
Hash 0f13dc11fccbdd9a587353905c836b16
dbf9faf4f7d227c11a5ba77fd3ae09af52763b8c
ebd9138caa9f44e33b54636bdf819ae6ece1f72a1405e58f37724273f187adc4
GET /img/flags/min/sv.png HTTP/1.1
Host: entertainzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/registration?theme=m-2-grizzlyX&v_id=27336f43-1098-5f13-7d85-a7b966c847e6&capo=dHVybmh1Yi5uZXQ=&entityId=2&capoUrl=turnhub.net&page=m-2-grizzlyX&clickid=a0156f2f3adc46879f5a8705f4879926&pubid=3018262776617&a_aid=864kjuyuio54
Cookie: CakeCookie[a_aid]=ODY0a2p1eXVpbzU0; CakeCookie[capo]=ZEhWeWJtaDFZaTV1WlhRPQ%3D%3D; CakeCookie[capoUrl]=dHVybmh1Yi5uZXQ%3D; CakeCookie[clickid]=YTAxNTZmMmYzYWRjNDY4NzlmNWE4NzA1ZjQ4Nzk5MjY%3D; CakeCookie[entityId]=Mg%3D%3D; CakeCookie[lang]=eng; CakeCookie[pubid]=MzAxODI2Mjc3NjYxNw%3D%3D; CakeCookie[v_id]=MjczMzZmNDMtMTA5OC01ZjEzLTdkODUtYTdiOTY2Yzg0N2U2; CakeCookie[registrationaff_864kjuyuio54_3018262776617_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:09 GMT
content-type: image/png
content-length: 342
last-modified: Thu, 12 Jan 2023 20:59:59 GMT
etag: "63c074cf-156"
x-frame-options: SAMEORIGIN
x-fruit: banana
cf-cache-status: HIT
age: 2894
expires: Sun, 15 Jan 2023 00:16:09 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 78990c38f9d41c12-OSL
X-Firefox-Spdy: h2
entertainzer.com/img/flags/min/zh.png
200 OK 290 B URL HTTP/2 entertainzer.com/img/flags/min/zh.png
IP
File type PNG image data, 16 x 11, 8-bit colormap, non-interlaced\012- data
Hash 329cca45f3a4c46ec249638ca4f8d6e0
98b23617ef88d3a4cd632839fe4180b0ee05a697
9c70b1a563b14ee447b6fc9c00532a73a1e09c500660ce8063d6b3fbce48ae47
GET /img/flags/min/zh.png HTTP/1.1
Host: entertainzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/registration?theme=m-2-grizzlyX&v_id=27336f43-1098-5f13-7d85-a7b966c847e6&capo=dHVybmh1Yi5uZXQ=&entityId=2&capoUrl=turnhub.net&page=m-2-grizzlyX&clickid=a0156f2f3adc46879f5a8705f4879926&pubid=3018262776617&a_aid=864kjuyuio54
Cookie: CakeCookie[a_aid]=ODY0a2p1eXVpbzU0; CakeCookie[capo]=ZEhWeWJtaDFZaTV1WlhRPQ%3D%3D; CakeCookie[capoUrl]=dHVybmh1Yi5uZXQ%3D; CakeCookie[clickid]=YTAxNTZmMmYzYWRjNDY4NzlmNWE4NzA1ZjQ4Nzk5MjY%3D; CakeCookie[entityId]=Mg%3D%3D; CakeCookie[lang]=eng; CakeCookie[pubid]=MzAxODI2Mjc3NjYxNw%3D%3D; CakeCookie[v_id]=MjczMzZmNDMtMTA5OC01ZjEzLTdkODUtYTdiOTY2Yzg0N2U2; CakeCookie[registrationaff_864kjuyuio54_3018262776617_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:09 GMT
content-type: image/png
content-length: 290
last-modified: Thu, 12 Jan 2023 20:59:59 GMT
etag: "63c074cf-122"
x-frame-options: SAMEORIGIN
x-fruit: banana
cf-cache-status: HIT
age: 2894
expires: Sun, 15 Jan 2023 00:16:09 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 78990c3929f31c12-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 83579ff88cab4d4d05d4741599104d9c
fe74c219f8655a4ca36fe397884e55ab63d1288a
a492a770e88739fac8094f7b73f87474cee4ad2ccbf9f1963b935474544ef3f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 14 Jan 2023 20:16:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 83579ff88cab4d4d05d4741599104d9c
fe74c219f8655a4ca36fe397884e55ab63d1288a
a492a770e88739fac8094f7b73f87474cee4ad2ccbf9f1963b935474544ef3f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 14 Jan 2023 20:16:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 83579ff88cab4d4d05d4741599104d9c
fe74c219f8655a4ca36fe397884e55ab63d1288a
a492a770e88739fac8094f7b73f87474cee4ad2ccbf9f1963b935474544ef3f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 14 Jan 2023 20:16:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 83579ff88cab4d4d05d4741599104d9c
fe74c219f8655a4ca36fe397884e55ab63d1288a
a492a770e88739fac8094f7b73f87474cee4ad2ccbf9f1963b935474544ef3f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 14 Jan 2023 20:16:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 83579ff88cab4d4d05d4741599104d9c
fe74c219f8655a4ca36fe397884e55ab63d1288a
a492a770e88739fac8094f7b73f87474cee4ad2ccbf9f1963b935474544ef3f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 14 Jan 2023 20:16:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
200 OK 5.6 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
IP
File type ASCII text, with very long lines (30837)
Hash 109d1ed85cd01f9cdab73a4cac5bf80d
d6c6498ad46de2d8e2008a8ff68e364ae7f16b32
8b3a74fe462f5b3c0635995fd721a60eb640e237680b0b532b96711f2823e8bc
GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:09 GMT
content-type: text/css; charset=utf-8
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 690189
expires: Thu, 04 Jan 2024 20:16:09 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Upvuzq0Qdc7Zhk6yQrKwxqPq2j%2BiuxA1EjnNPLquRNN9bhHPIDZjI%2FCqdtD6bJ9T3G92UAd7Oe4JusKX0r46NQSfyqpaQqor8LlaO7NwcFwLqi8BwI088yBgC4OV0tyeZuiIV6vn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 78990c399b57b517-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 83579ff88cab4d4d05d4741599104d9c
fe74c219f8655a4ca36fe397884e55ab63d1288a
a492a770e88739fac8094f7b73f87474cee4ad2ccbf9f1963b935474544ef3f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 14 Jan 2023 20:16:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
use.fontawesome.com/releases/v5.0.13/css/all.css
200 OK 9.5 kB URL HTTP/2 use.fontawesome.com/releases/v5.0.13/css/all.css
IP
File type ASCII text, with very long lines (40884)
Hash afe32d72c4b58ff37e5f822b02f07b6b
7733826667b63ebad40e7ac93b40565f749de70f
249293861d8f8e7be405eaa8f7f3bf6f9e216e83940976712e2d49dca9c5bf23
GET /releases/v5.0.13/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://entertainzer.com
Connection: keep-alive
Referer: https://entertainzer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:09 GMT
content-type: text/css
x-amz-id-2: sSHGJ3sQX8em3pCawu1wOP0tVHMJOCCzleBeGooOeKTJzqxyDu7nUHGd/9VqeWyYrBWbGB63j5U=
x-amz-request-id: 875PAW2D43BAAQP0
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:27:31 GMT
etag: W/"d61bfe9b56c13ecff5313ee3abb45e8b"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 1488303
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q29bVTnUNBfJTF01Z696WlrOOIUTAN0WBv1%2BZ3z22KJXcRoAGZe%2BP%2FX7HU%2FQ0jGr8325W3s7DbxiECL9gdJ2N%2B2R8MKyQqHNiLVNOQwZV3bGbFLT1Ewe2tdrMTndbEKciOkt1LUN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78990c39aaf9892a-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Libre+Baskerville:400,400i&display=swap
200 OK 12 kB URL HTTP/2 fonts.googleapis.com/css?family=Libre+Baskerville:400,400i&display=swap
IP
Hash f0e7dcf375ac893aed3c47d6156eb67a
e211ee3563fed10561455f42f61f8ff9d66ef715
a6981fc66baf0aef5d453066a68e02d10e665505a51362c94067614d881378c2
GET /css?family=Libre+Baskerville:400,400i&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 14 Jan 2023 20:16:09 GMT
date: Sat, 14 Jan 2023 20:16:09 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
entertainzer.com/theme/Master/SubscriptionPages/img/bg/grizzly-background.jpg
200 OK 404 kB URL HTTP/2 entertainzer.com/theme/Master/SubscriptionPages/img/bg/grizzly-background.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=3, software=Adobe Photoshop 22.0 (Macintosh), datetime=2021:02:11 10:06:17], progressive, precision 8, 1024x768, components 3\012- data
Size 404 kB (403660 bytes)
Hash e514ede0dbdfad48b03bb707928e06d1
ab2230c8dd429f523e33ce068b284cb2a47b72fa
60ee051d77d13712a09ed1a13417a67e6260ca51119132048dc7a5601d6a9292
GET /theme/Master/SubscriptionPages/img/bg/grizzly-background.jpg HTTP/1.1
Host: entertainzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/theme/Master/SubscriptionPages/css/subscriptions/theme/grizzly-basic.1e7cbf07.css
Cookie: CakeCookie[a_aid]=ODY0a2p1eXVpbzU0; CakeCookie[capo]=ZEhWeWJtaDFZaTV1WlhRPQ%3D%3D; CakeCookie[capoUrl]=dHVybmh1Yi5uZXQ%3D; CakeCookie[clickid]=YTAxNTZmMmYzYWRjNDY4NzlmNWE4NzA1ZjQ4Nzk5MjY%3D; CakeCookie[entityId]=Mg%3D%3D; CakeCookie[lang]=eng; CakeCookie[pubid]=MzAxODI2Mjc3NjYxNw%3D%3D; CakeCookie[v_id]=MjczMzZmNDMtMTA5OC01ZjEzLTdkODUtYTdiOTY2Yzg0N2U2; CakeCookie[registrationaff_864kjuyuio54_3018262776617_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:09 GMT
content-type: image/jpeg
content-length: 403660
cf-bgj: h2pri
etag: "63c074cd-628cc"
last-modified: Thu, 12 Jan 2023 20:59:57 GMT
x-fruit: banana
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 2390
expires: Sun, 15 Jan 2023 00:16:09 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 78990c3a5af21c12-OSL
X-Firefox-Spdy: h2
entertainzer.com/theme/Master/SubscriptionPages/img/assets/grizzly-icon-gamepad.png
200 OK 16 kB URL HTTP/2 entertainzer.com/theme/Master/SubscriptionPages/img/assets/grizzly-icon-gamepad.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 0835a9d8f33c5738d14f691d686178d5
890020b3c276df4af14ff7413c3fc7933ebe45e1
98e619a1eba6b96ae469dccb0126f6fb1e08cfbc4ce233d9d51974680d2c5be1
GET /theme/Master/SubscriptionPages/img/assets/grizzly-icon-gamepad.png HTTP/1.1
Host: entertainzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/theme/Master/SubscriptionPages/css/subscriptions/theme/grizzly-basic.1e7cbf07.css
Cookie: CakeCookie[a_aid]=ODY0a2p1eXVpbzU0; CakeCookie[capo]=ZEhWeWJtaDFZaTV1WlhRPQ%3D%3D; CakeCookie[capoUrl]=dHVybmh1Yi5uZXQ%3D; CakeCookie[clickid]=YTAxNTZmMmYzYWRjNDY4NzlmNWE4NzA1ZjQ4Nzk5MjY%3D; CakeCookie[entityId]=Mg%3D%3D; CakeCookie[lang]=eng; CakeCookie[pubid]=MzAxODI2Mjc3NjYxNw%3D%3D; CakeCookie[v_id]=MjczMzZmNDMtMTA5OC01ZjEzLTdkODUtYTdiOTY2Yzg0N2U2; CakeCookie[registrationaff_864kjuyuio54_3018262776617_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:09 GMT
content-type: image/png
content-length: 15583
last-modified: Thu, 12 Jan 2023 20:59:57 GMT
etag: "63c074cd-3cdf"
x-frame-options: SAMEORIGIN
x-fruit: banana
cf-cache-status: HIT
age: 2390
expires: Sun, 15 Jan 2023 00:16:09 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 78990c3a5afb1c12-OSL
X-Firefox-Spdy: h2
entertainzer.com/theme/Master/SubscriptionPages/img/assets/grizzly-icon-gym.png
200 OK 9.1 kB URL HTTP/2 entertainzer.com/theme/Master/SubscriptionPages/img/assets/grizzly-icon-gym.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 13f9e87b02cc3e90a44ccaf11a9bc2e1
e499e9086d3c75440790f05cb90c45b249d8f20f
4aa8bdc7ad60f3e02283b73db27283f6391c52a80c490ef6feafd3eb9fae70fb
GET /theme/Master/SubscriptionPages/img/assets/grizzly-icon-gym.png HTTP/1.1
Host: entertainzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/theme/Master/SubscriptionPages/css/subscriptions/theme/grizzly-basic.1e7cbf07.css
Cookie: CakeCookie[a_aid]=ODY0a2p1eXVpbzU0; CakeCookie[capo]=ZEhWeWJtaDFZaTV1WlhRPQ%3D%3D; CakeCookie[capoUrl]=dHVybmh1Yi5uZXQ%3D; CakeCookie[clickid]=YTAxNTZmMmYzYWRjNDY4NzlmNWE4NzA1ZjQ4Nzk5MjY%3D; CakeCookie[entityId]=Mg%3D%3D; CakeCookie[lang]=eng; CakeCookie[pubid]=MzAxODI2Mjc3NjYxNw%3D%3D; CakeCookie[v_id]=MjczMzZmNDMtMTA5OC01ZjEzLTdkODUtYTdiOTY2Yzg0N2U2; CakeCookie[registrationaff_864kjuyuio54_3018262776617_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:09 GMT
content-type: image/png
content-length: 9134
last-modified: Thu, 12 Jan 2023 20:59:57 GMT
etag: "63c074cd-23ae"
x-frame-options: SAMEORIGIN
x-fruit: banana
cf-cache-status: HIT
age: 2390
expires: Sun, 15 Jan 2023 00:16:09 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 78990c3a5afc1c12-OSL
X-Firefox-Spdy: h2
entertainzer.com/theme/Master/SubscriptionPages/img/assets/grizzly-icon-sports.png
200 OK 25 kB URL HTTP/2 entertainzer.com/theme/Master/SubscriptionPages/img/assets/grizzly-icon-sports.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash a20f1c48d512bb8c3e92ad170efcb257
d0c15db25be78479b43aa6d509f1754cd2652f98
448801bd16c78d0474023d36204e6b1179b5373c37741c4930235f29761ec245
GET /theme/Master/SubscriptionPages/img/assets/grizzly-icon-sports.png HTTP/1.1
Host: entertainzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/theme/Master/SubscriptionPages/css/subscriptions/theme/grizzly-basic.1e7cbf07.css
Cookie: CakeCookie[a_aid]=ODY0a2p1eXVpbzU0; CakeCookie[capo]=ZEhWeWJtaDFZaTV1WlhRPQ%3D%3D; CakeCookie[capoUrl]=dHVybmh1Yi5uZXQ%3D; CakeCookie[clickid]=YTAxNTZmMmYzYWRjNDY4NzlmNWE4NzA1ZjQ4Nzk5MjY%3D; CakeCookie[entityId]=Mg%3D%3D; CakeCookie[lang]=eng; CakeCookie[pubid]=MzAxODI2Mjc3NjYxNw%3D%3D; CakeCookie[v_id]=MjczMzZmNDMtMTA5OC01ZjEzLTdkODUtYTdiOTY2Yzg0N2U2; CakeCookie[registrationaff_864kjuyuio54_3018262776617_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:09 GMT
content-type: image/png
content-length: 25253
last-modified: Thu, 12 Jan 2023 20:59:57 GMT
etag: "63c074cd-62a5"
x-frame-options: SAMEORIGIN
x-fruit: banana
cf-cache-status: HIT
age: 2390
expires: Sun, 15 Jan 2023 00:16:09 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 78990c3a5afd1c12-OSL
X-Firefox-Spdy: h2
entertainzer.com/theme/Master/SubscriptionPages/img/assets/grizzly-icon-book.png
200 OK 6.4 kB URL HTTP/2 entertainzer.com/theme/Master/SubscriptionPages/img/assets/grizzly-icon-book.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash beaba51a19f609cef46f0312802c3080
c9afbaa0ecc114892eba313bd4e72fe6f0cf58d9
3eaadcdc6636317c487fd1556cecb723847bfd43b581adafe43caf67241eae93
GET /theme/Master/SubscriptionPages/img/assets/grizzly-icon-book.png HTTP/1.1
Host: entertainzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/theme/Master/SubscriptionPages/css/subscriptions/theme/grizzly-basic.1e7cbf07.css
Cookie: CakeCookie[a_aid]=ODY0a2p1eXVpbzU0; CakeCookie[capo]=ZEhWeWJtaDFZaTV1WlhRPQ%3D%3D; CakeCookie[capoUrl]=dHVybmh1Yi5uZXQ%3D; CakeCookie[clickid]=YTAxNTZmMmYzYWRjNDY4NzlmNWE4NzA1ZjQ4Nzk5MjY%3D; CakeCookie[entityId]=Mg%3D%3D; CakeCookie[lang]=eng; CakeCookie[pubid]=MzAxODI2Mjc3NjYxNw%3D%3D; CakeCookie[v_id]=MjczMzZmNDMtMTA5OC01ZjEzLTdkODUtYTdiOTY2Yzg0N2U2; CakeCookie[registrationaff_864kjuyuio54_3018262776617_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:09 GMT
content-type: image/png
content-length: 6417
last-modified: Thu, 12 Jan 2023 20:59:57 GMT
etag: "63c074cd-1911"
x-frame-options: SAMEORIGIN
x-fruit: banana
cf-cache-status: HIT
age: 2390
expires: Sun, 15 Jan 2023 00:16:09 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 78990c3a5aff1c12-OSL
X-Firefox-Spdy: h2
entertainzer.com/theme/Master/SubscriptionPages/img/assets/grizzly-icon-video-camera.png
200 OK 12 kB URL HTTP/2 entertainzer.com/theme/Master/SubscriptionPages/img/assets/grizzly-icon-video-camera.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 7f56e51d73d3143c35a33715c0ef8cb7
c126962f5e76920b63b5ca48554085e6092bf5ee
f5d93398a861dd75fdfefbc842262d18b502700ae1cf4f98feee8fa69e255d86
GET /theme/Master/SubscriptionPages/img/assets/grizzly-icon-video-camera.png HTTP/1.1
Host: entertainzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/theme/Master/SubscriptionPages/css/subscriptions/theme/grizzly-basic.1e7cbf07.css
Cookie: CakeCookie[a_aid]=ODY0a2p1eXVpbzU0; CakeCookie[capo]=ZEhWeWJtaDFZaTV1WlhRPQ%3D%3D; CakeCookie[capoUrl]=dHVybmh1Yi5uZXQ%3D; CakeCookie[clickid]=YTAxNTZmMmYzYWRjNDY4NzlmNWE4NzA1ZjQ4Nzk5MjY%3D; CakeCookie[entityId]=Mg%3D%3D; CakeCookie[lang]=eng; CakeCookie[pubid]=MzAxODI2Mjc3NjYxNw%3D%3D; CakeCookie[v_id]=MjczMzZmNDMtMTA5OC01ZjEzLTdkODUtYTdiOTY2Yzg0N2U2; CakeCookie[registrationaff_864kjuyuio54_3018262776617_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:09 GMT
content-type: image/png
content-length: 12437
last-modified: Thu, 12 Jan 2023 20:59:57 GMT
etag: "63c074cd-3095"
x-frame-options: SAMEORIGIN
x-fruit: banana
cf-cache-status: HIT
age: 2390
expires: Sun, 15 Jan 2023 00:16:09 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 78990c3a5af41c12-OSL
X-Firefox-Spdy: h2
entertainzer.com/theme/Master/SubscriptionPages/img/assets/grizzly-icon-multiscreen.png
200 OK 7.5 kB URL HTTP/2 entertainzer.com/theme/Master/SubscriptionPages/img/assets/grizzly-icon-multiscreen.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash a30a8c4add86ea42d0eec9660a2d1c04
166f532da76342da0ad7a8db6aef38fad78a0b50
1ade0baa348e6919ef436e1085232055e53d9812684f501f6537ef4630b1cd12
GET /theme/Master/SubscriptionPages/img/assets/grizzly-icon-multiscreen.png HTTP/1.1
Host: entertainzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/theme/Master/SubscriptionPages/css/subscriptions/theme/grizzly-basic.1e7cbf07.css
Cookie: CakeCookie[a_aid]=ODY0a2p1eXVpbzU0; CakeCookie[capo]=ZEhWeWJtaDFZaTV1WlhRPQ%3D%3D; CakeCookie[capoUrl]=dHVybmh1Yi5uZXQ%3D; CakeCookie[clickid]=YTAxNTZmMmYzYWRjNDY4NzlmNWE4NzA1ZjQ4Nzk5MjY%3D; CakeCookie[entityId]=Mg%3D%3D; CakeCookie[lang]=eng; CakeCookie[pubid]=MzAxODI2Mjc3NjYxNw%3D%3D; CakeCookie[v_id]=MjczMzZmNDMtMTA5OC01ZjEzLTdkODUtYTdiOTY2Yzg0N2U2; CakeCookie[registrationaff_864kjuyuio54_3018262776617_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:09 GMT
content-type: image/png
content-length: 7543
last-modified: Thu, 12 Jan 2023 20:59:57 GMT
etag: "63c074cd-1d77"
x-frame-options: SAMEORIGIN
x-fruit: banana
cf-cache-status: HIT
age: 2390
expires: Sun, 15 Jan 2023 00:16:09 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 78990c3a6b071c12-OSL
X-Firefox-Spdy: h2
entertainzer.com/theme/Master/SubscriptionPages/img/assets/grizzly-icon-close.png
200 OK 7.8 kB URL HTTP/2 entertainzer.com/theme/Master/SubscriptionPages/img/assets/grizzly-icon-close.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 7d011bbe41685f7060d6c3227fcf0fe4
7d7717ef1aae9591e1364c4a70e8e07877f2488c
b1449f84f6e84dbb4bfe84b57d0a61bad18bdeabf0803dd8a475bca255d63a0c
GET /theme/Master/SubscriptionPages/img/assets/grizzly-icon-close.png HTTP/1.1
Host: entertainzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/theme/Master/SubscriptionPages/css/subscriptions/theme/grizzly-basic.1e7cbf07.css
Cookie: CakeCookie[a_aid]=ODY0a2p1eXVpbzU0; CakeCookie[capo]=ZEhWeWJtaDFZaTV1WlhRPQ%3D%3D; CakeCookie[capoUrl]=dHVybmh1Yi5uZXQ%3D; CakeCookie[clickid]=YTAxNTZmMmYzYWRjNDY4NzlmNWE4NzA1ZjQ4Nzk5MjY%3D; CakeCookie[entityId]=Mg%3D%3D; CakeCookie[lang]=eng; CakeCookie[pubid]=MzAxODI2Mjc3NjYxNw%3D%3D; CakeCookie[v_id]=MjczMzZmNDMtMTA5OC01ZjEzLTdkODUtYTdiOTY2Yzg0N2U2; CakeCookie[registrationaff_864kjuyuio54_3018262776617_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:09 GMT
content-type: image/png
content-length: 7825
last-modified: Thu, 12 Jan 2023 20:59:57 GMT
etag: "63c074cd-1e91"
x-frame-options: SAMEORIGIN
x-fruit: banana
cf-cache-status: HIT
age: 2390
expires: Sun, 15 Jan 2023 00:16:09 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 78990c3a5b001c12-OSL
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Raleway:400,400i&display=swap
200 OK 58 kB URL HTTP/2 fonts.googleapis.com/css?family=Raleway:400,400i&display=swap
IP
Hash a956c8d4b9453b37b62a2be9c7dcd13e
aa19e34057257b1e2c8f72688c924d40842fdc48
b6b1095e1752e9559a273cafdc1b9b385dab9e35fbe243dd38bd5ac2e2051f6f
GET /css?family=Raleway:400,400i&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 14 Jan 2023 20:16:09 GMT
date: Sat, 14 Jan 2023 20:16:09 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.0.13/webfonts/fa-solid-900.woff2
200 OK 50 kB URL HTTP/2 use.fontawesome.com/releases/v5.0.13/webfonts/fa-solid-900.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 50372, version 1.0\012- data
Hash 8a8c0474283e0d9ef41743e5e486bf05
1ba4dd60af529d1a72d0e57467c3bc0bbb728a4d
cbbca7d9888b4a9eab7d479756d2924f9b067fd38dab376797029df741f96ee4
GET /releases/v5.0.13/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://entertainzer.com
Connection: keep-alive
Referer: https://use.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:09 GMT
content-type: font/woff2
content-length: 50372
x-amz-id-2: AQm+FOpN5H6AJhR+NJEnkBuGuQgGyOmCjI4zo+POTWVoIcCih4pubrUXL7NviOnMBwZErWqnOCQ=
x-amz-request-id: HKRFGJFFME98TCZE
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:27:47 GMT
etag: "8a8c0474283e0d9ef41743e5e486bf05"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 1348964
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BeU%2F5qlcbTbYr8BtY7R72jdZtAHoXcUi4giini6LV3E9vdICJfk3udE03GHMjDo5AMpfRaNlGQS5Kr1Ck4dNMhpJ3SHv6i3hb%2Bb126jPm%2B%2FE8oPxFt7bD%2BxflwD42HHLmxrdPvTV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78990c3a9caa892a-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.0.13/webfonts/fa-regular-400.woff2
200 OK 12 kB URL HTTP/2 use.fontawesome.com/releases/v5.0.13/webfonts/fa-regular-400.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 12188, version 1.0\012- data
Hash 33f727ccde4b05c0ed143c5cd78cda0c
0654fee7e908814ecc3baf36bfc556520f491c17
1b4c97a2809cdb53153139544e1f5db34e4917c8f01d2dd94cb9519e24e1ab3c
GET /releases/v5.0.13/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://entertainzer.com
Connection: keep-alive
Referer: https://use.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:09 GMT
content-type: font/woff2
content-length: 12188
x-amz-id-2: 2cOdwIHt+flYUqYGarnYLPGYGWDY/vw4DewmCYQeiNW75LZm3/DL0DqsW/1SY+glMpOkXgK/0/xoPq6avvCcxA==
x-amz-request-id: 1AAE96GWCM35XTNJ
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:27:47 GMT
etag: "33f727ccde4b05c0ed143c5cd78cda0c"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 343670
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gdnxOwDe8K%2FtgTrufrvXY1s8J3J6FSwo%2B5h6kiATLyntqikpGlU%2FZQ4OKisLcNQM%2FZI6v%2B%2Bb8wSM6Dr6%2B1g1JsrPeFKHq2Obf7Rcy8lC%2ByXq2pY6BttEJlRfzwM4MxlofyVroH3P"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78990c3a9cad892a-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Expires, Last-Modified, Alert, Content-Type, Content-Length, ETag, Pragma, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 14 Jan 2023 19:33:45 GMT
age: 2544
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
entertainzer.com/theme/Master/SubscriptionPages/css/subscriptions/theme/basic-main.95eefa89.css
200 OK 5.9 kB URL HTTP/2 entertainzer.com/theme/Master/SubscriptionPages/css/subscriptions/theme/basic-main.95eefa89.css
IP
Hash 53c88342d33ba3f5bb0c315c329417f2
188ca30a5a3b35d049a9243f0671da71b411f273
ece5045850bee890190431598c504f0abb02886e3a426897f66159de5d4654e5
GET /theme/Master/SubscriptionPages/css/subscriptions/theme/basic-main.95eefa89.css HTTP/1.1
Host: entertainzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/registration?theme=m-2-grizzlyX&v_id=27336f43-1098-5f13-7d85-a7b966c847e6&capo=dHVybmh1Yi5uZXQ=&entityId=2&capoUrl=turnhub.net&page=m-2-grizzlyX&clickid=a0156f2f3adc46879f5a8705f4879926&pubid=3018262776617&a_aid=864kjuyuio54
Cookie: CakeCookie[a_aid]=ODY0a2p1eXVpbzU0; CakeCookie[capo]=ZEhWeWJtaDFZaTV1WlhRPQ%3D%3D; CakeCookie[capoUrl]=dHVybmh1Yi5uZXQ%3D; CakeCookie[clickid]=YTAxNTZmMmYzYWRjNDY4NzlmNWE4NzA1ZjQ4Nzk5MjY%3D; CakeCookie[entityId]=Mg%3D%3D; CakeCookie[lang]=eng; CakeCookie[pubid]=MzAxODI2Mjc3NjYxNw%3D%3D; CakeCookie[v_id]=MjczMzZmNDMtMTA5OC01ZjEzLTdkODUtYTdiOTY2Yzg0N2U2; CakeCookie[registrationaff_864kjuyuio54_3018262776617_fire_stats]=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:09 GMT
content-type: text/css
last-modified: Thu, 12 Jan 2023 20:59:57 GMT
vary: Accept-Encoding
etag: W/"63c074cd-5d15"
x-frame-options: SAMEORIGIN
content-encoding: gzip
x-fruit: banana
cf-cache-status: HIT
age: 3444
expires: Sun, 15 Jan 2023 00:16:09 GMT
cache-control: public, max-age=14400
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 78990c38c99a1c12-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6fc52c452b4176dabdd1a319c5e3fa51
e00b78bd1c6b5d71f2987fd9cdc8975804b668ae
224beac380dd44474b39343d4138c0e5d8a547523eb06a1c6d6c4a893d511e63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 14 Jan 2023 20:16:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e804586be26c88b95d554afe0ef24d5c
6f99b1fe2330c4661608f17819a4490a92ca296c
38894b7977e8f8e790a71eedf8144799a77ccceb49771e7458392ad7916293db
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 14 Jan 2023 20:16:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash df489559868985b8815baa1cfaaff191
cb804ae84a7d8c2b6580c97caa484cfb515c1435
ecfca9383aa4ff0bc88dc975918610d1406ac9198e68d26a731a589b073b3ead
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 14 Jan 2023 20:16:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/anton/v23/1Ptgg87LROyAm3Kz-C8.woff2
200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/anton/v23/1Ptgg87LROyAm3Kz-C8.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 17020, version 1.0\012- data
Hash aca09278214a7e267c0498cdd36ce416
ab7def30380e8f14e6064a9fd3c7dca6769ad85d
feb9617bd3fcda1a52cbf8539985fddac2aaab0e6df8dbdac21ec3e9a179a4be
GET /s/anton/v23/1Ptgg87LROyAm3Kz-C8.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://entertainzer.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17020
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Jan 2023 23:31:30 GMT
expires: Wed, 10 Jan 2024 23:31:30 GMT
cache-control: public, max-age=31536000
age: 333879
last-modified: Tue, 19 Apr 2022 18:51:08 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
200 OK 7.9 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data
Hash 9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://entertainzer.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 13 Jan 2023 13:33:11 GMT
expires: Sat, 13 Jan 2024 13:33:11 GMT
cache-control: public, max-age=31536000
age: 110578
last-modified: Wed, 27 Apr 2022 17:03:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
200 OK 7.8 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7816, version 1.0\012- data
Hash 25b0e113ca7cce3770d542736db26368
cb726212d5d525021752a1d8470a0fb593e0c49e
9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://entertainzer.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 13 Jan 2023 13:33:13 GMT
expires: Sat, 13 Jan 2024 13:33:13 GMT
cache-control: public, max-age=31536000
age: 110576
last-modified: Wed, 27 Apr 2022 16:11:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.amplitude.com/libs/amplitude-5.8.0-min.gz.js
200 OK 18 kB URL HTTP/2 cdn.amplitude.com/libs/amplitude-5.8.0-min.gz.js
IP
File type ASCII text, with very long lines (58159)
Hash 208999c2bfaa80353f3f37c256fd3a3d
b980b8388a475167ed9c0bf908275e5ed6b9df0e
f01fc32845b584dea4dffebe4aaa74979b46798398de2cc98a4263d1bfbf5cf5
GET /libs/amplitude-5.8.0-min.gz.js HTTP/1.1
Host: cdn.amplitude.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://entertainzer.com
Connection: keep-alive
Referer: https://entertainzer.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 18497
date: Tue, 29 Nov 2022 07:57:21 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
last-modified: Fri, 06 Dec 2019 21:57:52 GMT
etag: "208999c2bfaa80353f3f37c256fd3a3d"
cache-control: max-age=31536000
content-encoding: gzip
x-amz-version-id: JayGW0K7hcKEk8hUb5nZ1QRH3tobN7O9
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qFZ1ha5OXWjYHjcucrweR91kAGmXZl8nihhX0T8FlTU4oxvHMtjoOA==
age: 4018729
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash df489559868985b8815baa1cfaaff191
cb804ae84a7d8c2b6580c97caa484cfb515c1435
ecfca9383aa4ff0bc88dc975918610d1406ac9198e68d26a731a589b073b3ead
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 14 Jan 2023 20:16:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Oswald:200,300,400
200 OK 78 kB URL HTTP/2 fonts.googleapis.com/css?family=Oswald:200,300,400
IP
Hash 6c33ce06711f58f7a20cadcda805f1e7
e97f1451482ca9b1ec1e179bf32bfd4836887748
f9c2c032b53fd9a9cc7ca82ac9c0a9bde465ea29eb6af0a8ed1891d6a00fdd7d
GET /css?family=Oswald:200,300,400 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 14 Jan 2023 20:16:09 GMT
date: Sat, 14 Jan 2023 20:16:09 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
script.hotjar.com/modules.0a5831f9446624640839.js
200 OK 69 kB URL HTTP/2 script.hotjar.com/modules.0a5831f9446624640839.js
IP
File type Unicode text, UTF-8 text, with very long lines (47958)
Hash c190d47cd0259bc45c4cf36c6c1a261a
a4d82aab61799b506dcaa84753e481eea33547ad
8593a0bee7b36326e5243a3eb4f70618a602a1d3646e732567ce05f7cda2c7cb
GET /modules.0a5831f9446624640839.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 68992
date: Thu, 12 Jan 2023 12:30:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "c190d47cd0259bc45c4cf36c6c1a261a"
last-modified: Thu, 12 Jan 2023 12:29:16 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: bwKME6NfKjBdakAnAYtxDf_oZj9J0OTDMNO1Nr0KV4VMiz9GkHQ0Gg==
age: 200763
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash c01ec61f7ca77158f474b3ab519c12fa
fc82ae0fcd73a83a980b75709a08e65239894e4a
f533e0fac9b92e79d4fbd6e70b42a83067de95f0a13cc737d7e5fa459baa4c54
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4908
Cache-Control: max-age=137546
Content-Type: application/ocsp-response
Date: Sat, 14 Jan 2023 20:16:09 GMT
Etag: "63c270a7-1d7"
Expires: Mon, 16 Jan 2023 10:28:35 GMT
Last-Modified: Sat, 14 Jan 2023 09:06:47 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
vars.hotjar.com/box-5e66f98b4ee957db209dc6f63e3d59dd.html
200 OK 1.0 kB URL HTTP/2 vars.hotjar.com/box-5e66f98b4ee957db209dc6f63e3d59dd.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2368), with no line terminators
Hash e0652b84b7b3b650769c759fc520c3f8
0b55d6e28613350c7f41b88f19e726e6751ad03b
94b4c240f83065223dcacdd3f8b69cb229d0616edc3e2041eef3e270d859fc3d
GET /box-5e66f98b4ee957db209dc6f63e3d59dd.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1035
date: Sat, 03 Dec 2022 04:42:02 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "e0652b84b7b3b650769c759fc520c3f8"
last-modified: Thu, 01 Dec 2022 13:36:28 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: IkhgLqM2ncwI6b9zQ4-eJx9lBJea8OnT-f1lMJ1xl6U9x8d-yQcLFg==
age: 3684847
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash eaea9102919bb8ec99989bf2ecf5ff40
fbe7dedacffe5d58d30dbfb3ecf60ea6d07cdc75
af72b07fa73a56e207246d9452e3f21ba73eae3e7a7845487a572c7d35133efa
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=158288
Date: Sat, 14 Jan 2023 20:16:09 GMT
Etag: "63c2c955-1d7"
Expires: Mon, 16 Jan 2023 16:14:17 GMT
Last-Modified: Sat, 14 Jan 2023 15:25:09 GMT
Server: ECS (nyb/1D20)
X-Cache: Miss from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: stdCh9musdzzR3Kq3F4ypHBi069SLNEO25xr8JzlWCNnVOVw5XGn9g==
Age: 2948
fonts.googleapis.com/css?family=Poppins:100,200,300,400,500,600,700,800,900&display=swap
200 OK 628 B URL HTTP/2 fonts.googleapis.com/css?family=Poppins:100,200,300,400,500,600,700,800,900&display=swap
IP
Hash af4cf15551dfaed0b315efb2303ee20c
446ebb3dc74144c8b409cec9bfbd9795c99e9568
6e6053adc6b2dc628a9715048e6bfb76375c6a4e69806654a5f7133e61a54261
GET /css?family=Poppins:100,200,300,400,500,600,700,800,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 14 Jan 2023 20:16:09 GMT
date: Sat, 14 Jan 2023 20:16:09 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-MGKXPW4W8X>m=2oe1a1&_p=1228329516&cid=1291404573.1673727370&ul=en-us&sr=1280x1024&_s=1&sid=1673727369&sct=1&seg=0&dl=https%3A%2F%2Fentertainzer.com%2Fregistration%3Ftheme%3Dm-2-grizzlyX%26v_id%3D27336f43-1098-5f13-7d85-a7b966c847e6%26capo%3DdHVybmh1Yi5uZXQ%3D%26entityId%3D2%26capoUrl%3Dturnhub.net%26page%3Dm-2-grizzlyX%26clickid%3Da0156f2f3adc46879f5a8705f4879926%26pubid%3D3018262776617%26a_aid%3D864kjuyuio54&dt=Sign%20Up%20Now&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-MGKXPW4W8X>m=2oe1a1&_p=1228329516&cid=1291404573.1673727370&ul=en-us&sr=1280x1024&_s=1&sid=1673727369&sct=1&seg=0&dl=https%3A%2F%2Fentertainzer.com%2Fregistration%3Ftheme%3Dm-2-grizzlyX%26v_id%3D27336f43-1098-5f13-7d85-a7b966c847e6%26capo%3DdHVybmh1Yi5uZXQ%3D%26entityId%3D2%26capoUrl%3Dturnhub.net%26page%3Dm-2-grizzlyX%26clickid%3Da0156f2f3adc46879f5a8705f4879926%26pubid%3D3018262776617%26a_aid%3D864kjuyuio54&dt=Sign%20Up%20Now&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-MGKXPW4W8X>m=2oe1a1&_p=1228329516&cid=1291404573.1673727370&ul=en-us&sr=1280x1024&_s=1&sid=1673727369&sct=1&seg=0&dl=https%3A%2F%2Fentertainzer.com%2Fregistration%3Ftheme%3Dm-2-grizzlyX%26v_id%3D27336f43-1098-5f13-7d85-a7b966c847e6%26capo%3DdHVybmh1Yi5uZXQ%3D%26entityId%3D2%26capoUrl%3Dturnhub.net%26page%3Dm-2-grizzlyX%26clickid%3Da0156f2f3adc46879f5a8705f4879926%26pubid%3D3018262776617%26a_aid%3D864kjuyuio54&dt=Sign%20Up%20Now&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://entertainzer.com
Connection: keep-alive
Referer: https://entertainzer.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://entertainzer.com
date: Sat, 14 Jan 2023 20:16:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7647
Expires: Sat, 14 Jan 2023 22:23:38 GMT
Date: Sat, 14 Jan 2023 20:16:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7647
Expires: Sat, 14 Jan 2023 22:23:38 GMT
Date: Sat, 14 Jan 2023 20:16:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7647
Expires: Sat, 14 Jan 2023 22:23:38 GMT
Date: Sat, 14 Jan 2023 20:16:11 GMT
Connection: keep-alive
in.hotjar.com/api/v2/client/sites/916387/visit-data?sv=7
200 OK 9.6 kB URL HTTP/2 in.hotjar.com/api/v2/client/sites/916387/visit-data?sv=7
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 732f1c42cb703f14a2acbc3a8d410ae1
429e1dbbcd9d65bf68cd88f29bbd9584cd8a6849
6180a46384b276256e581876cb60a6ae3fd0aec95b21f4ee01b2c6e65d6319e6
POST /api/v2/client/sites/916387/visit-data?sv=7 HTTP/1.1
Host: in.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 147
Origin: https://entertainzer.com
Connection: keep-alive
Referer: https://entertainzer.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:10 GMT
content-type: application/json
vary: Accept-Encoding
cache-control: no-cache, no-store
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b55aad-884c-40db-a779-021d0c2305b4.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b55aad-884c-40db-a779-021d0c2305b4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b1378f107c1996ade14a8fe7fd728072
f52d98d9a0d1d343a539689ea14acf99e148cf8c
4be994757ec7ec42929590169de199e927889261334e258903a0929a1055047d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b55aad-884c-40db-a779-021d0c2305b4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9154
x-amzn-requestid: fbb1140d-7ec2-4f86-8761-5d04601af70e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: enAkCEN2IAMFuMQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bf7ae6-4baebf1104f9cf2a0ee8a538;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 03:13:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: jlRcVyQppaQaPPMKaqadtaEHfdOYXXXbnfrr44l_2E2qaOoh_O0Mog==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 04:21:52 GMT
age: 57259
etag: "f52d98d9a0d1d343a539689ea14acf99e148cf8c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F917985a1-aa8d-4c0a-860c-0b16c203387e.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F917985a1-aa8d-4c0a-860c-0b16c203387e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d24ea1f095f492934a1f1c63f5d8590c
dade37148c9b9a941f93a8535d8ddc5de3952623
2d8e3f90eb347eb3479a6c5d20a1c2ca6a0560f335a6c6800948db2640e4c878
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F917985a1-aa8d-4c0a-860c-0b16c203387e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8181
x-amzn-requestid: 7ada8fbd-58e6-4433-a532-b4a4ef93ac9c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: es0paH-OIAMFg5A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c1ce3c-582529522dbb67ee728484f8;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 21:33:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: AHjOmYxva5avyA3gt9DvYLas_B2ACimer5QRQOi919HDtSjnKq22lw==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 21:36:45 GMT
age: 81566
etag: "dade37148c9b9a941f93a8535d8ddc5de3952623"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4885191c-7ccc-4801-bef2-6d6bbb61cdb1.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4885191c-7ccc-4801-bef2-6d6bbb61cdb1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d9c918c3f0569cbf09fdcd8998e2fc00
ad06e348d49e8ae0550d922b50bc2a1d4905457a
8f96e49cf0dbbad59d260d0f991d79eb72ea25dcc0caa5ba4480056bd918d07d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4885191c-7ccc-4801-bef2-6d6bbb61cdb1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5371
x-amzn-requestid: fcbafc8b-5b89-49e6-8ebd-157cb3b24a55
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: es0qnERXoAMFsZQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c1ce43-3eb3b4d84dbf415a3dec1308;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 21:33:55 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: AbaES_6874zaabJY_z0_FOZfJx86Zsv-osNxWqzef8DDNyelo0HRtQ==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 21:49:01 GMT
age: 80830
etag: "ad06e348d49e8ae0550d922b50bc2a1d4905457a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b0d4bc-9eea-491e-9fed-be68e71088e5.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b0d4bc-9eea-491e-9fed-be68e71088e5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 64ba27a2f0a3bc61bd325f1fb317b755
c65c58476b66cbb6269ba1d8412d270a0a003ae3
5f7f03752f8a7c8c08d92512ae93b193ea37f59354503c3129d33fd2910f87e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b0d4bc-9eea-491e-9fed-be68e71088e5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9135
x-amzn-requestid: 2c5e9de0-9244-43ac-b7c4-712cbcf7038c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: enAnoG6roAMFzgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bf7afd-7fb640b30bab63bc1979a173;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 03:14:05 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: RnAGo4OuBl5UjyOlUOJqu2nlFLHTOe0ETxokWtbI4frbpkNVnIBSew==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 01:41:40 GMT
age: 66871
etag: "c65c58476b66cbb6269ba1d8412d270a0a003ae3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0a5cc8b-8d62-447a-a39c-733e1afdd415.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0a5cc8b-8d62-447a-a39c-733e1afdd415.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2363dbe7bb6a459853d8d19cab50e70b
ded76de1dd453e40dbf6eaa8607cf19fac7f71a4
f96da6354cec52143768014c36ba2b298224a58b0bf38bd2aa5f3bfce69d8670
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0a5cc8b-8d62-447a-a39c-733e1afdd415.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7447
x-amzn-requestid: dd3543b7-4e6b-4605-acea-a21d39af02ca
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: es0qSFjAIAMF7HQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c1ce41-56e2ccc63669032d70cba0ba;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 21:33:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: AYaeawnEmwHkyx3h-yliVx-ARcRB3W5kbtFH5tARnL3YMD6e4WYAQw==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 21:49:01 GMT
age: 80830
etag: "ded76de1dd453e40dbf6eaa8607cf19fac7f71a4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Abel
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Abel
IP
GET /css?family=Abel HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 14 Jan 2023 20:16:09 GMT
date: Sat, 14 Jan 2023 20:16:09 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans
IP
GET /css?family=Open+Sans HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 14 Jan 2023 20:16:09 GMT
date: Sat, 14 Jan 2023 20:16:09 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
entertainzer.com/registration?theme=m-2-grizzlyX&v_id=27336f43-1098-5f13-7d85-a7b966c847e6&capo=dHVybmh1Yi5uZXQ=&entityId=2&capoUrl=turnhub.net&page=m-2-grizzlyX&clickid=a0156f2f3adc46879f5a8705f4879926&pubid=3018262776617&a_aid=864kjuyuio54
200 OK 0 B URL HTTP/2 entertainzer.com/registration?theme=m-2-grizzlyX&v_id=27336f43-1098-5f13-7d85-a7b966c847e6&capo=dHVybmh1Yi5uZXQ=&entityId=2&capoUrl=turnhub.net&page=m-2-grizzlyX&clickid=a0156f2f3adc46879f5a8705f4879926&pubid=3018262776617&a_aid=864kjuyuio54
IP
GET /registration?theme=m-2-grizzlyX&v_id=27336f43-1098-5f13-7d85-a7b966c847e6&capo=dHVybmh1Yi5uZXQ=&entityId=2&capoUrl=turnhub.net&page=m-2-grizzlyX&clickid=a0156f2f3adc46879f5a8705f4879926&pubid=3018262776617&a_aid=864kjuyuio54 HTTP/1.1
Host: entertainzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:08 GMT
content-type: text/html
cf-ray: 78990c37b8951c12-OSL
age: 160941
cache-control: public, max-age=604800
expires: Sat, 21 Jan 2023 20:16:08 GMT
last-modified: Thu, 12 Jan 2023 23:33:47 GMT
strict-transport-security: max-age=0; includeSubDomains
vary: Accept-Encoding
cf-cache-status: HIT
cache-tag: 1666,entertainzer.com,/registration,NO,m-2-grizzlyX,eng,,turnhub.net
set-cookie: CakeCookie[a_aid]=ODY0a2p1eXVpbzU0; Path=/; Secure; Max-Age=9999999
CakeCookie[capo]=ZEhWeWJtaDFZaTV1WlhRPQ%3D%3D; Path=/; Secure; Max-Age=9999999
CakeCookie[capoUrl]=dHVybmh1Yi5uZXQ%3D; Path=/; Secure; Max-Age=9999999
CakeCookie[clickid]=YTAxNTZmMmYzYWRjNDY4NzlmNWE4NzA1ZjQ4Nzk5MjY%3D; Path=/; Secure; Max-Age=9999999
CakeCookie[entityId]=Mg%3D%3D; Path=/; Secure; Max-Age=9999999
CakeCookie[lang]=eng; Path=/; Secure; Max-Age=9999999
CakeCookie[pubid]=MzAxODI2Mjc3NjYxNw%3D%3D; Path=/; Secure; Max-Age=9999999
CakeCookie[v_id]=MjczMzZmNDMtMTA5OC01ZjEzLTdkODUtYTdiOTY2Yzg0N2U2; Path=/; Secure; Max-Age=9999999
CakeCookie[registrationaff_864kjuyuio54_3018262776617_fire_stats]=true; Path=/; Secure; Max-Age=3600
x-cache-url: https://entertainzer.com/registration?lang=eng&theme=m-2-grizzlyX&cacheHash=MTY2NixlbnRlcnRhaW56ZXIuY29tLC9yZWdpc3RyYXRpb24sTk8sbS0yLWdyaXp6bHlYLGVuZywsdHVybmh1Yi5uZXQ=
x-frame-options: SAMEORIGIN
x-fruit: banana
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
entertainzer.com/theme/Master/SubscriptionPages/js/subscriptions/validation/min/regValidation.min.27c23153.js
200 OK 0 B URL HTTP/2 entertainzer.com/theme/Master/SubscriptionPages/js/subscriptions/validation/min/regValidation.min.27c23153.js
IP
Analyzer Verdict Alert fortinet Phishing
GET /theme/Master/SubscriptionPages/js/subscriptions/validation/min/regValidation.min.27c23153.js HTTP/1.1
Host: entertainzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/registration?theme=m-2-grizzlyX&v_id=27336f43-1098-5f13-7d85-a7b966c847e6&capo=dHVybmh1Yi5uZXQ=&entityId=2&capoUrl=turnhub.net&page=m-2-grizzlyX&clickid=a0156f2f3adc46879f5a8705f4879926&pubid=3018262776617&a_aid=864kjuyuio54
Cookie: CakeCookie[a_aid]=ODY0a2p1eXVpbzU0; CakeCookie[capo]=ZEhWeWJtaDFZaTV1WlhRPQ%3D%3D; CakeCookie[capoUrl]=dHVybmh1Yi5uZXQ%3D; CakeCookie[clickid]=YTAxNTZmMmYzYWRjNDY4NzlmNWE4NzA1ZjQ4Nzk5MjY%3D; CakeCookie[entityId]=Mg%3D%3D; CakeCookie[lang]=eng; CakeCookie[pubid]=MzAxODI2Mjc3NjYxNw%3D%3D; CakeCookie[v_id]=MjczMzZmNDMtMTA5OC01ZjEzLTdkODUtYTdiOTY2Yzg0N2U2; CakeCookie[registrationaff_864kjuyuio54_3018262776617_fire_stats]=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:09 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 12 Jan 2023 20:59:57 GMT
etag: W/"63c074cd-13fb"
x-frame-options: SAMEORIGIN
x-fruit: banana
cf-cache-status: HIT
age: 2894
expires: Sun, 15 Jan 2023 00:16:09 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 78990c3929fc1c12-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Montserrat
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Montserrat
IP
GET /css?family=Montserrat HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 14 Jan 2023 20:16:09 GMT
date: Sat, 14 Jan 2023 20:16:09 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
entertainzer.com/theme/Master/SubscriptionPages/css/subscriptions/theme/grizzly-basic.1e7cbf07.css
200 OK 0 B URL HTTP/2 entertainzer.com/theme/Master/SubscriptionPages/css/subscriptions/theme/grizzly-basic.1e7cbf07.css
IP
GET /theme/Master/SubscriptionPages/css/subscriptions/theme/grizzly-basic.1e7cbf07.css HTTP/1.1
Host: entertainzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/registration?theme=m-2-grizzlyX&v_id=27336f43-1098-5f13-7d85-a7b966c847e6&capo=dHVybmh1Yi5uZXQ=&entityId=2&capoUrl=turnhub.net&page=m-2-grizzlyX&clickid=a0156f2f3adc46879f5a8705f4879926&pubid=3018262776617&a_aid=864kjuyuio54
Cookie: CakeCookie[a_aid]=ODY0a2p1eXVpbzU0; CakeCookie[capo]=ZEhWeWJtaDFZaTV1WlhRPQ%3D%3D; CakeCookie[capoUrl]=dHVybmh1Yi5uZXQ%3D; CakeCookie[clickid]=YTAxNTZmMmYzYWRjNDY4NzlmNWE4NzA1ZjQ4Nzk5MjY%3D; CakeCookie[entityId]=Mg%3D%3D; CakeCookie[lang]=eng; CakeCookie[pubid]=MzAxODI2Mjc3NjYxNw%3D%3D; CakeCookie[v_id]=MjczMzZmNDMtMTA5OC01ZjEzLTdkODUtYTdiOTY2Yzg0N2U2; CakeCookie[registrationaff_864kjuyuio54_3018262776617_fire_stats]=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:09 GMT
content-type: text/css
last-modified: Thu, 12 Jan 2023 20:59:57 GMT
vary: Accept-Encoding
etag: W/"63c074cd-550f"
x-frame-options: SAMEORIGIN
content-encoding: gzip
x-fruit: banana
cf-cache-status: HIT
age: 2390
expires: Sun, 15 Jan 2023 00:16:09 GMT
cache-control: public, max-age=14400
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 78990c38c99b1c12-OSL
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
200 OK 0 B URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
IP
GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://entertainzer.com
Connection: keep-alive
Referer: https://entertainzer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:09 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"450fc463b8b1a349df717056fbb3e078"
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 08/20/2022 02:36:43
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 601
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 077760acbd183a927852103cd8828058
cdn-cache: HIT
cf-cache-status: HIT
age: 6845135
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 78990c3928b8b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
entertainzer.com/theme/Master/SubscriptionPages/js/subscriptions/min/scripts.min.1ca912b8.js
200 OK 0 B URL HTTP/2 entertainzer.com/theme/Master/SubscriptionPages/js/subscriptions/min/scripts.min.1ca912b8.js
IP
Analyzer Verdict Alert fortinet Phishing
GET /theme/Master/SubscriptionPages/js/subscriptions/min/scripts.min.1ca912b8.js HTTP/1.1
Host: entertainzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/registration?theme=m-2-grizzlyX&v_id=27336f43-1098-5f13-7d85-a7b966c847e6&capo=dHVybmh1Yi5uZXQ=&entityId=2&capoUrl=turnhub.net&page=m-2-grizzlyX&clickid=a0156f2f3adc46879f5a8705f4879926&pubid=3018262776617&a_aid=864kjuyuio54
Cookie: CakeCookie[a_aid]=ODY0a2p1eXVpbzU0; CakeCookie[capo]=ZEhWeWJtaDFZaTV1WlhRPQ%3D%3D; CakeCookie[capoUrl]=dHVybmh1Yi5uZXQ%3D; CakeCookie[clickid]=YTAxNTZmMmYzYWRjNDY4NzlmNWE4NzA1ZjQ4Nzk5MjY%3D; CakeCookie[entityId]=Mg%3D%3D; CakeCookie[lang]=eng; CakeCookie[pubid]=MzAxODI2Mjc3NjYxNw%3D%3D; CakeCookie[v_id]=MjczMzZmNDMtMTA5OC01ZjEzLTdkODUtYTdiOTY2Yzg0N2U2; CakeCookie[registrationaff_864kjuyuio54_3018262776617_fire_stats]=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 14 Jan 2023 20:16:09 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 12 Jan 2023 20:59:57 GMT
etag: W/"63c074cd-6b8ea"
x-frame-options: SAMEORIGIN
x-fruit: banana
cf-cache-status: HIT
age: 2894
expires: Sun, 15 Jan 2023 00:16:09 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 78990c3929f91c12-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Anton
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Anton
IP
GET /css?family=Anton HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 14 Jan 2023 20:16:09 GMT
date: Sat, 14 Jan 2023 20:16:09 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-916387.js?sv=7
200 OK 0 B URL HTTP/2 static.hotjar.com/c/hotjar-916387.js?sv=7
IP
GET /c/hotjar-916387.js?sv=7 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Sat, 14 Jan 2023 20:16:03 GMT
access-control-allow-origin: *
cache-control: max-age=60
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: W/42c0b462c212dbd704d129686cf7d754
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mkp0gGZDL4eP2En8xlxuJNRMi9uKQa1YkzqT1caGWDYNx6KJ1ZyOsQ==
age: 6
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Candal
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Candal
IP
Analyzer Verdict Alert fortinet Malware
GET /css?family=Candal HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 14 Jan 2023 20:16:09 GMT
date: Sat, 14 Jan 2023 20:16:09 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Lato
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Lato
IP
GET /css?family=Lato HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 14 Jan 2023 20:16:09 GMT
date: Sat, 14 Jan 2023 20:16:09 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Noto+Sans
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Noto+Sans
IP
GET /css?family=Noto+Sans HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 14 Jan 2023 20:16:09 GMT
date: Sat, 14 Jan 2023 20:16:09 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:100,200,300,400,500,600,700,800,900
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:100,200,300,400,500,600,700,800,900
IP
GET /css?family=Roboto:100,200,300,400,500,600,700,800,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 14 Jan 2023 20:16:09 GMT
date: Sat, 14 Jan 2023 20:16:09 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Yanone+Kaffeesatz
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Yanone+Kaffeesatz
IP
GET /css?family=Yanone+Kaffeesatz HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://entertainzer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 14 Jan 2023 20:16:09 GMT
date: Sat, 14 Jan 2023 20:16:09 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
34.96.122.41
93.184.220.29
104.17.25.14
23.36.76.226
54.171.106.172