firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 19 Sep 2022 05:12:38 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: JH58mEzVaunwOLu3eweDAh73yxsYQocxaZpcQwYZAF4OUC0KWjDyIw==
Age: 1531
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 861cfa99de956423d917ed0ddbea4b9c
ad65dbc394b48b04a45c205f56af296c8d008db4
5c706b2718b1698995f4feb91223779aef4bf6dc967c31f9ef9a93873197d5f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5C706B2718B1698995F4FEB91223779AEF4BF6DC967C31F9EF9A93873197D5F9"
Last-Modified: Sun, 18 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5021
Expires: Mon, 19 Sep 2022 07:01:50 GMT
Date: Mon, 19 Sep 2022 05:38:09 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 19 Sep 2022 04:35:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: YSCFMTk31YOSCSl8AGYHVfdffppDJTuVw5-fF2BJMfkCGtRcroEw-g==
age: 3776
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 19 Sep 2022 05:38:09 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 30525b9b2c9cde98a394d5eea8fd57f9
0591ca143fb6b40fcea7d935aca60367ef26900c
7817b936153c37db05f36828a7852d9d7894552ae76c114fd67cc161c74e0a9b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7817B936153C37DB05F36828A7852D9D7894552AE76C114FD67CC161C74E0A9B"
Last-Modified: Fri, 16 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21564
Expires: Mon, 19 Sep 2022 11:37:33 GMT
Date: Mon, 19 Sep 2022 05:38:09 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Mon, 19 Sep 2022 05:03:22 GMT
Cache-Control: max-age=3600
Expires: Mon, 19 Sep 2022 06:00:05 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: yczOCAHTpWCZLlMG15qIVqojITFRJvWXtOK-XDSOl814AY7jPQdTOg==
Age: 2087
goodmarijuanaseeds.nl/rpi/ttaeu
301 Moved Permanently 243 B URL HTTP/2 goodmarijuanaseeds.nl/rpi/ttaeu
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash deccf4714ec605fec9b4e6d79ac18922
8cb52d85ab157dc3dcf2331869cb3e930627ec87
95f8bb6d36dfbfe6ce689318118bf6fb6a222ce6fc75857293f6b268d937764b
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /rpi/ttaeu HTTP/1.1
Host: goodmarijuanaseeds.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
location: https://ilgm.com?aff=1932/rpi/ttaeu
content-length: 243
content-type: text/html; charset=iso-8859-1
date: Mon, 19 Sep 2022 05:38:09 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 5fd1174f35b25298fc44a6de1af3f3d6
d45a47995ec34c7df480b3efafb13f55d9df7eb8
f60573eff255ef3d7603ca813f410c30588931b4018ffa0e07fa0bb2653c47af
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4242
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 19 Sep 2022 05:38:10 GMT
Last-Modified: Mon, 19 Sep 2022 04:27:28 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 279 B IP
Hash d9f210f62eeec4fa885a7dc708ef831b
b509abd868044ff046bcb9172e51277b43def033
62de32e97e201b9734f349309b2bc0e82aa60ab58b0bcc3a5808e9375c960fe4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 19 Sep 2022 05:38:10 GMT
Server: ECS (amb/6B8E)
Content-Length: 279
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 313mHE8EDDFAdlxPA6nVjg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: laMTJbN7WiT+tzelPpnsghc/rug=
ocsp.digicert.com/
200 OK 279 B IP
Hash d9f210f62eeec4fa885a7dc708ef831b
b509abd868044ff046bcb9172e51277b43def033
62de32e97e201b9734f349309b2bc0e82aa60ab58b0bcc3a5808e9375c960fe4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 19 Sep 2022 05:38:11 GMT
Last-Modified: Mon, 19 Sep 2022 05:38:10 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 279
ilgm.com/static/version1662975437/frontend/onilab/sds/en_US/fonts/Montserrat/MontserratRegular.woff2
200 OK 20 kB URL HTTP/2 ilgm.com/static/version1662975437/frontend/onilab/sds/en_US/fonts/Montserrat/MontserratRegular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 19844, version 1.0\012- data
Hash 8037e9fc6d8fca40a9eb783c7510b12e
decd8fb49532471ce8e13b6ef2e4923790e08e59
2b26a74f3c0e529bc8fccfa6b1db8e083e738992266359fde1a5bd0aaa81cbc3
GET /static/version1662975437/frontend/onilab/sds/en_US/fonts/Montserrat/MontserratRegular.woff2 HTTP/1.1
Host: ilgm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ilgm.com/?aff=1932/rpi/ttaeu
Cookie: PHPSESSID=9dvaqb99bb26e02nelhbo2om56; X-Magento-Vary=c58cc7336841735bf5ef13185766282824a9d073
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 19 Sep 2022 05:38:11 GMT
content-type: application/octet-stream
content-length: 19844
last-modified: Mon, 12 Sep 2022 09:37:30 GMT
etag: "631efdda-4d84"
expires: Sat, 16 Sep 2023 18:30:01 GMT
cache-control: public, max-age=31536000
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 212890
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cDgyDYYwZ8rnocBVHdwG%2FAz1mXlWXz6cltvID7Jd8Zgwp1k1pZ9DfuYetS3IyqgyhpdH1DK2%2FQN0hoUYNBwqSlq8fqvhtSLWWsV%2F9zzqQdBtMBDKHoGgzLm9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cff9449a07be35-CPH
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ilgm.com/media/wysiwyg/menu/ILGM_Megamenu_Beginner-Seeds_2022_V01.png
200 OK 8.6 kB URL HTTP/2 ilgm.com/media/wysiwyg/menu/ILGM_Megamenu_Beginner-Seeds_2022_V01.png
IP
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Hash f3037009cfa0b94d3552b7a0057c0e2f
51c59f17bf7f2edce8affeb5883fe13ebc81893d
266a5610ea532ac73e9aeabda246b4bda6bfd14946e6b5bd610cfde066edbb9f
GET /media/wysiwyg/menu/ILGM_Megamenu_Beginner-Seeds_2022_V01.png HTTP/1.1
Host: ilgm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ilgm.com/?aff=1932/rpi/ttaeu
Cookie: PHPSESSID=9dvaqb99bb26e02nelhbo2om56; X-Magento-Vary=c58cc7336841735bf5ef13185766282824a9d073
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 19 Sep 2022 05:38:11 GMT
content-type: image/png
content-length: 8637
cache-control: public, max-age=31536000
cf-bgj: imgq:100,h2pri
cf-polished: origSize=11881, status=webp_bigger
etag: "62badbde-2e69"
expires: Thu, 17 Aug 2023 07:57:24 GMT
last-modified: Tue, 28 Jun 2022 10:45:50 GMT
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 2842847
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Hq6%2BvIVGj%2F4D3nE8ivszYPpG1JPYOtKCvIss6WsDa41YqLhG1HZz9rdjexYbys9yEK5V9NymItZR570GFul9wSpdCm1cR2YXhmR8y3b9zMmf7iTiTnLTNNpG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cff9449a0fbe35-CPH
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ilgm.com/static/version1662975437/frontend/onilab/sds/en_US/fonts/icons/icons.ttf?jifog9
200 OK 10 kB URL HTTP/2 ilgm.com/static/version1662975437/frontend/onilab/sds/en_US/fonts/icons/icons.ttf?jifog9
IP
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icons \012- data
Hash aaf6a8a293abaaaf3df0a1c3ab67cbe2
062bd7d717cd6b927c68910cd929122047d6c35a
e7baf5d539592fc8020508449d0fa78227ef9279f6c56cc8d9daf2f6aaaf626d
GET /static/version1662975437/frontend/onilab/sds/en_US/fonts/icons/icons.ttf?jifog9 HTTP/1.1
Host: ilgm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ilgm.com/?aff=1932/rpi/ttaeu
Cookie: PHPSESSID=9dvaqb99bb26e02nelhbo2om56; X-Magento-Vary=c58cc7336841735bf5ef13185766282824a9d073
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 19 Sep 2022 05:38:11 GMT
content-type: application/octet-stream
content-length: 10264
last-modified: Mon, 12 Sep 2022 09:37:30 GMT
etag: "631efdda-2818"
expires: Fri, 15 Sep 2023 04:56:21 GMT
cache-control: public, max-age=31536000
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 348110
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dtDNYELnd%2BQ8pFf8Mc8FS7iLg32tGc7BGE4A%2BrhdXChMB7%2BpcWsi3%2BQGNruaUnXna8uX5v%2B2Su78vF9lMzmuYlrcI15JbNLmqpj%2FHEhySbT7IqgJFUFmWrMf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cff9449a09be35-CPH
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ilgm.com/static/version1662975437/_cache/merged/a7c606193989afc454ad278fd2b2d5bb.css
200 OK 10 kB URL HTTP/2 ilgm.com/static/version1662975437/_cache/merged/a7c606193989afc454ad278fd2b2d5bb.css
IP
File type ASCII text, with very long lines (25896), with no line terminators
Hash f92345d788e4b7e106adcf12eeb275d5
75c9844c9ff5b4901e1f7b907473c725197df734
b7ddb0909e75442538a66b1f583b66ac12999d92448d9a3eb60aa80640088393
GET /static/version1662975437/_cache/merged/a7c606193989afc454ad278fd2b2d5bb.css HTTP/1.1
Host: ilgm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ilgm.com/?aff=1932/rpi/ttaeu
Cookie: PHPSESSID=9dvaqb99bb26e02nelhbo2om56; X-Magento-Vary=c58cc7336841735bf5ef13185766282824a9d073
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 19 Sep 2022 05:38:11 GMT
content-type: text/css
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=25929
etag: W/"631efdf7-6549"
expires: Tue, 12 Sep 2023 11:43:14 GMT
last-modified: Mon, 12 Sep 2022 09:37:59 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 582897
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xA2DvGoV6QFN54dTJGYHogyAAM0Ab1jhst1ZzANdRvdOpBpLSKLCAvqycfeviwfCOC2EwKLfflb3%2BTHi8AsvQwCc7y7zim2Bdcg23DX5S%2BPabN3QKvjri6xE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74cff9449a06be35-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5e0d4379f6517fd75a29a3d94d9199eb
0d383b811ebe839400f04333d16a5c9d4d78f802
e64c0c03925bdfaa2520d90339c90d1f8d98c432441adb771dfe1e818220f06f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E64C0C03925BDFAA2520D90339C90D1F8D98C432441ADB771DFE1E818220F06F"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7738
Expires: Mon, 19 Sep 2022 07:47:09 GMT
Date: Mon, 19 Sep 2022 05:38:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5e0d4379f6517fd75a29a3d94d9199eb
0d383b811ebe839400f04333d16a5c9d4d78f802
e64c0c03925bdfaa2520d90339c90d1f8d98c432441adb771dfe1e818220f06f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E64C0C03925BDFAA2520D90339C90D1F8D98C432441ADB771DFE1E818220F06F"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7738
Expires: Mon, 19 Sep 2022 07:47:09 GMT
Date: Mon, 19 Sep 2022 05:38:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5e0d4379f6517fd75a29a3d94d9199eb
0d383b811ebe839400f04333d16a5c9d4d78f802
e64c0c03925bdfaa2520d90339c90d1f8d98c432441adb771dfe1e818220f06f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E64C0C03925BDFAA2520D90339C90D1F8D98C432441ADB771DFE1E818220F06F"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7738
Expires: Mon, 19 Sep 2022 07:47:09 GMT
Date: Mon, 19 Sep 2022 05:38:11 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F438ffa79-f423-4d90-8f37-4026c4546d1b.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F438ffa79-f423-4d90-8f37-4026c4546d1b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 04257e82bf07e6a862ce2d4bbdfc068f
7a462e8d05cd56531957436470a1814d982e282b
bbc0f0dd6244934098a0e8bfa34b8e07e8a424e309030c2f07d9e441b6f481ee
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F438ffa79-f423-4d90-8f37-4026c4546d1b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13049
x-amzn-requestid: 710bed7d-62c4-4b48-b16c-c94f1a15c1ad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YpLIkHlZoAMF2Ag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6326bf03-375d74b4344cb7db4036e2b2;Sampled=0
x-amzn-remapped-date: Sun, 18 Sep 2022 06:47:31 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: AD7jWfvJngdXmqOJlo6HiLCUEZG_mgVFVaos0hwSPYpLVsGFBik37Q==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Sep 2022 11:10:34 GMT
age: 66457
etag: "7a462e8d05cd56531957436470a1814d982e282b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba617391-badf-49a7-8b58-f6b0e934e0f2.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba617391-badf-49a7-8b58-f6b0e934e0f2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 77b03ce2b3a9013719879589aec6f9d3
91391b256ed587b935247499c1450dd08a0df081
ae5752fc136df7a15d4d75fc4589b33177286ad52219125fbfc255d39039f68c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba617391-badf-49a7-8b58-f6b0e934e0f2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7646
x-amzn-requestid: 2e786bb2-21ed-4df7-82ba-a62ec39b5d82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yj92PEi5oAMFQsg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6324a9c1-1ace3c2027cbb6b95cb575de;Sampled=0
x-amzn-remapped-date: Fri, 16 Sep 2022 16:52:17 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: lyMXGa6Hzrqc-9nHgx5ULcKCkO9703QvL2ky1aii9U4WIHUHU1yzfg==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Sep 2022 21:53:29 GMT
age: 27882
etag: "91391b256ed587b935247499c1450dd08a0df081"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff700a356-a9e1-4d17-b82b-cc825cbb09af.jpeg
200 OK 31 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff700a356-a9e1-4d17-b82b-cc825cbb09af.jpeg
IP
Hash 4d5a9bf91b8b70c7f76d931eb6a8aa35
3a2ca7a3a82a16a45a74e35e3e67a6ee156da852
a9873e378283d81b56882efaabb25c9f3afb3243fa9dd0358325bb5382141c96
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff700a356-a9e1-4d17-b82b-cc825cbb09af.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3375
x-amzn-requestid: 4827cdf6-5641-44cd-a076-d8b29bb34ffb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YrOSyFO0IAMF-Og=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632790de-45acc6fe6064eb3f23e4ea77;Sampled=0
x-amzn-remapped-date: Sun, 18 Sep 2022 21:42:54 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: cScYxWAyH0k8XDOCgN_1sTVufxBo0K5Dbp6_rYiIx3MBWZf_uUkyPQ==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Sep 2022 21:50:11 GMT
age: 28080
etag: "df40b195d24c1b58123c40f8b01294035c9076a5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 45f95aa258ab932ac2f8a33ff7944ffe
8f52b66e897dab7cb160d481886805ea216f407f
de4fd2aaa566b601e82c38806ec8ea84110b1d63f15efe48186f5bcf70847488
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 19 Sep 2022 05:38:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-K5K6MH
200 OK 73 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-K5K6MH
IP
File type ASCII text, with very long lines (26389)
Hash df7c50f959683935fdaa1cf59f8ae117
6954d0e435b69a4add5a0d7e5cb7e9c0f2d0426f
8cf36b5bfe41954fa505655a2a69f5990f287910e4c64ef6248c0b4f2aea2596
GET /gtm.js?id=GTM-K5K6MH HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ilgm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 19 Sep 2022 05:38:11 GMT
expires: Mon, 19 Sep 2022 05:38:11 GMT
cache-control: private, max-age=900
last-modified: Mon, 19 Sep 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 73244
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 45f95aa258ab932ac2f8a33ff7944ffe
8f52b66e897dab7cb160d481886805ea216f407f
de4fd2aaa566b601e82c38806ec8ea84110b1d63f15efe48186f5bcf70847488
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 19 Sep 2022 05:38:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ilgm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Mon, 19 Sep 2022 04:41:12 GMT
expires: Mon, 19 Sep 2022 06:41:12 GMT
cache-control: public, max-age=7200
age: 3420
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash dc3ea2e9abe84b13e1b01945b30ebb5f
6efee55e6610e126745c8cebbfe29840265dcd40
fecf8d8ec726fc9b5e0d727679a499fbc83cef2923885aded2f8c0e3c36ef0ac
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 19 Sep 2022 05:38:12 GMT
Last-Modified: Mon, 19 Sep 2022 04:01:08 GMT
Server: ECS (bsa/EB1A)
X-Cache: Miss from cloudfront
Via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: dW2NQHJcaWsLn_5x7jq9s9vyeZTzMhbPuo_4ODYOa9uRWn9uq76ryw==
Age: 5824
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 7f77315e79acd78d80a03481da464be1
6cac6cc2f1f135c7da848145ebc7fc86adf2f3eb
68576135dfcccb5ac34449bb96524ef4dc0e4124bdad9b092bac4fc318409164
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 19 Sep 2022 05:38:12 GMT
Last-Modified: Mon, 19 Sep 2022 04:04:19 GMT
Server: ECS (bsa/EB11)
X-Cache: Miss from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 3Pib8WRI9Yl-_fBaTZikNuHYTEEodbluZyZkZbaU_U5m8240BryMRA==
Age: 5633
logs.convertexperiments.com/log
200 OK 2 B URL HTTP/2 logs.convertexperiments.com/log
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /log HTTP/1.1
Host: logs.convertexperiments.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 755
Origin: https://ilgm.com
Connection: keep-alive
Referer: https://ilgm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 19 Sep 2022 05:38:12 GMT
content-type: application/json; charset=utf-8
content-length: 2
server: nginx/1.20.0
access-control-allow-origin: https://ilgm.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
1003601.metrics.convertexperiments.com/log-rep/
200 OK 2 B URL HTTP/2 1003601.metrics.convertexperiments.com/log-rep/
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /log-rep/ HTTP/1.1
Host: 1003601.metrics.convertexperiments.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 300
Origin: https://ilgm.com
Connection: keep-alive
Referer: https://ilgm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 19 Sep 2022 05:38:12 GMT
content-type: application/json; charset=utf-8
content-length: 2
server: nginx/1.20.0
access-control-allow-origin: https://ilgm.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
cdn-3.convertexperiments.com/uf/10005965/10006656/1660652210ILGM-4.png
200 OK 35 kB URL HTTP/2 cdn-3.convertexperiments.com/uf/10005965/10006656/1660652210ILGM-4.png
IP
File type PNG image data, 264 x 145, 8-bit/color RGBA, non-interlaced\012- data
Hash 01f58ed7612178f1dad8077a93550e6c
faef495fc2f59182a7f5e53e8a8cdaefd579cd81
11e7ef683a88b238d781863323674368b290f9f563dc036b41ce6295525dcbfd
GET /uf/10005965/10006656/1660652210ILGM-4.png HTTP/1.1
Host: cdn-3.convertexperiments.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ilgm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 8GrE4vWULSTvhwu+am/V63C+sUNaQ9xB9QaFaqaOnmohftE2w3HN2ObyO/av2zIyJYpjjuZNPwU=
x-amz-request-id: 7VYRD0126SW99YWF
last-modified: Tue, 16 Aug 2022 12:16:51 GMT
etag: "a15d980dd51c2226ba46344381d22787-1"
accept-ranges: bytes
content-type: image/png
content-length: 34779
date: Mon, 19 Sep 2022 05:38:12 GMT
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
cdn-3.convertexperiments.com/uf/10005965/10006656/1660652176ILGM-2.png
200 OK 35 kB URL HTTP/2 cdn-3.convertexperiments.com/uf/10005965/10006656/1660652176ILGM-2.png
IP
File type PNG image data, 264 x 145, 8-bit/color RGBA, non-interlaced\012- data
Hash b266bd5885012ac25ce1b81dddc8c991
f18ca600c42cb74897929cf74fe5dac44e7f79b4
79cfbe145128b5e46af6441ab980a6f9974b78fb89835dac7d68313c3ebab718
GET /uf/10005965/10006656/1660652176ILGM-2.png HTTP/1.1
Host: cdn-3.convertexperiments.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ilgm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 7zkRB799sAgxYOublR8ikhOHvFFmvfN65IJNM+ZBX4DzSW1E18p7nRfW0UYhLtl4fd5Gbpcjx4U=
x-amz-request-id: 7VYPJW0EQT1XGGC6
last-modified: Tue, 16 Aug 2022 12:16:17 GMT
etag: "a4bce9f13f319fae9ffcce4a21fa5e34-1"
accept-ranges: bytes
content-type: image/png
content-length: 34791
date: Mon, 19 Sep 2022 05:38:12 GMT
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
cdn-3.convertexperiments.com/uf/1002628/10006656/1660719068ILGM-POPUP-CLOSE.png
200 OK 586 B URL HTTP/2 cdn-3.convertexperiments.com/uf/1002628/10006656/1660719068ILGM-POPUP-CLOSE.png
IP
File type PNG image data, 15 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash f4d7eae42f29129d254177cc050f1f3e
bfbd972ae382d721f3a25b4013a55e930e47649b
5dccd10142c87030aa1cb9063cf8472baf9cc656f9f95b1b2952435a936d62bb
GET /uf/1002628/10006656/1660719068ILGM-POPUP-CLOSE.png HTTP/1.1
Host: cdn-3.convertexperiments.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ilgm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: gW3EfLAuvdAo15CKXmtUIFC1DuWl7Y+cHgHfHKY8fAaXMI0yxwDOYfNumFiWrzW/wQKJPhnoS6k=
x-amz-request-id: 7VYM4GDFXMB2RPVE
last-modified: Wed, 17 Aug 2022 06:51:10 GMT
etag: "fc13bfc97a7f5388463be6477a283199-1"
accept-ranges: bytes
content-type: image/png
content-length: 586
date: Mon, 19 Sep 2022 05:38:12 GMT
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
cdn-3.convertexperiments.com/uf/10005965/10006656/1660652144ILGM-1.png
200 OK 38 kB URL HTTP/2 cdn-3.convertexperiments.com/uf/10005965/10006656/1660652144ILGM-1.png
IP
File type PNG image data, 264 x 145, 8-bit/color RGBA, non-interlaced\012- data
Hash 1d748ee952ecf078e97fd75a671ee57c
7710fb4bee9866a6927054535ce7031d10b29bca
115aeabdea46826d6b8dac5766cc2bf6d6c2d570031cd9565c78ba72fb9422b6
GET /uf/10005965/10006656/1660652144ILGM-1.png HTTP/1.1
Host: cdn-3.convertexperiments.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ilgm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: NgKbeBVrJ7AoyLc8xB9q/6zA393nv35eVDJamNm8OluizB6uOumOD5f00RD/D/ZSY2l96L42T/E=
x-amz-request-id: 7VYS91Y5W0RXB8VV
last-modified: Tue, 16 Aug 2022 12:15:46 GMT
etag: "006afda2a56f4a8abd1c37bda9b64b91-1"
accept-ranges: bytes
content-type: image/png
content-length: 37687
date: Mon, 19 Sep 2022 05:38:12 GMT
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
cdn-3.convertexperiments.com/uf/10005965/10006656/1660652193ILGM-3.png
200 OK 35 kB URL HTTP/2 cdn-3.convertexperiments.com/uf/10005965/10006656/1660652193ILGM-3.png
IP
File type PNG image data, 264 x 145, 8-bit/color RGBA, non-interlaced\012- data
Hash e65cfd8b3101f24a92fb0025bada0bd1
77e93a617b4727f4a9e19fe4fab7f7da94a3fee7
0bf00bbb1ea97f5d70d618b2783570566b48f287137a47c5693c2567e2ac0305
GET /uf/10005965/10006656/1660652193ILGM-3.png HTTP/1.1
Host: cdn-3.convertexperiments.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ilgm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: uHrnsBCVv6Z54w7zh/AOqojkOcvWFhd/5qb/3rLuCDJB2D8q+mr5RVZ9ZqG4bjaF5Gb7zVEyQEI=
x-amz-request-id: 7VYYWP2QHKWE9M68
last-modified: Tue, 16 Aug 2022 12:16:34 GMT
etag: "8c11d29ba0849f5e57b3bf35207ae814-1"
accept-ranges: bytes
content-type: image/png
content-length: 34863
date: Mon, 19 Sep 2022 05:38:12 GMT
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
vars.hotjar.com/box-69edcc3187336f9b0a3fbb4c73be9fe6.html
200 OK 1.0 kB URL HTTP/2 vars.hotjar.com/box-69edcc3187336f9b0a3fbb4c73be9fe6.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2431), with no line terminators
Hash f6a9ca04b0687ea3c0d98e8430c8c77b
35503b2deb23091a9a9c6c68d4020dbdf879588e
8e4328ecb6b395499567369e3c227231dbdaf361f43ce315934d7a2a3abbed41
GET /box-69edcc3187336f9b0a3fbb4c73be9fe6.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ilgm.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1044
date: Wed, 07 Sep 2022 09:17:07 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "f6a9ca04b0687ea3c0d98e8430c8c77b"
last-modified: Wed, 07 Sep 2022 09:16:57 GMT
strict-transport-security: max-age=604800; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: J5Lo6MAJWsh-a-YhVMJz0FjynKhuotjxD4k0sY0DnDMQtb1Coyi2Nw==
age: 1023665
X-Firefox-Spdy: h2
api.getdrip.com/client/events/visit?drip_account_id=3196820&referrer=&url=https%3A%2F%2Filgm.com%2F%3Faff%3D1932%2Frpi%2Fttaeu&domain=ilgm.com&time_zone=UTC&enable_third_party_cookies=f&callback=Drip_642984682
200 OK 84 B URL HTTP/2 api.getdrip.com/client/events/visit?drip_account_id=3196820&referrer=&url=https%3A%2F%2Filgm.com%2F%3Faff%3D1932%2Frpi%2Fttaeu&domain=ilgm.com&time_zone=UTC&enable_third_party_cookies=f&callback=Drip_642984682
IP
File type ASCII text, with no line terminators
Hash deabcb184504c63e7a7aeca2cf92e523
afd22861675bd8e7f99f3d4c43aaaa1eeca22cd7
38e31ad236a22b4b191c0cfcd562c0f00b5f088d75a151c6b221b6bf29abcbd3
GET /client/events/visit?drip_account_id=3196820&referrer=&url=https%3A%2F%2Filgm.com%2F%3Faff%3D1932%2Frpi%2Fttaeu&domain=ilgm.com&time_zone=UTC&enable_third_party_cookies=f&callback=Drip_642984682 HTTP/1.1
Host: api.getdrip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ilgm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 84
date: Mon, 19 Sep 2022 05:38:12 GMT
x-amzn-requestid: aeb3c60a-48da-4e65-93c9-bfe7335755b2
referrer-policy: strict-origin-when-cross-origin
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
x-runtime: 0.027375
strict-transport-security: max-age=31536000; includeSubDomains
x-amzn-remapped-content-length: 84
x-frame-options: SAMEORIGIN
x-amzn-remapped-connection: keep-alive
x-download-options: noopen
x-request-id: 4f22f795-938b-4037-95ee-ad6600e3f7bb
x-amz-apigw-id: YsT6xG8cIAMF-UQ=
cache-control: max-age=0, private, must-revalidate
x-amzn-remapped-server: nginx
x-content-type-options: nosniff
etag: W/"38e31ad236a22b4b191c0cfcd562c0f0"
x-amzn-remapped-date: Mon, 19 Sep 2022 05:38:12 GMT
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yzGPiVRQuOlm_XM0OX15S1N97RvKETVGBapEl3U-Nz8GbZcfSfNKLQ==
X-Firefox-Spdy: h2
script.hotjar.com/modules.d00377d3a043900eb4ef.js
200 OK 66 kB URL HTTP/2 script.hotjar.com/modules.d00377d3a043900eb4ef.js
IP
File type Unicode text, UTF-8 text, with very long lines (48714)
Hash 74e062f975f5935c93ae5aff80efbd87
ae469032d7d943122a1e4ec7ce6dc73d185d9a76
1c4c3d71f8112224bad72285ac70e083b30a4573ac413fb3b05a0749d144ceaf
GET /modules.d00377d3a043900eb4ef.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ilgm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 65532
date: Wed, 14 Sep 2022 13:09:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "74e062f975f5935c93ae5aff80efbd87"
last-modified: Wed, 14 Sep 2022 13:08:33 GMT
strict-transport-security: max-age=604800; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: GFcf2tgHY2nj5ljOfu7XFXhU1i5wRpgw5y0i_6t_dGVe5gBe_PWESQ==
age: 404945
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-DEPCSFR3BW>m=2oe9e0&_p=1639233118&cid=96200139.1663565873&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663565873&sct=1&seg=0&dl=https%3A%2F%2Filgm.com%2F%3Faff%3D1932%2Frpi%2Fttaeu&dt=Buy%20Feminized%20%26%20Autoflower%20Marijuana%20Seeds%20Online%20%3E%3E%20ILGM&en=page_view&_fv=1&_ss=1&ep.page_type=other&ep.clean_page=%2F&ep.login_state=Logged%20out&upn.shop_lifetime_value=0&up.existing_customer=No
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-DEPCSFR3BW>m=2oe9e0&_p=1639233118&cid=96200139.1663565873&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663565873&sct=1&seg=0&dl=https%3A%2F%2Filgm.com%2F%3Faff%3D1932%2Frpi%2Fttaeu&dt=Buy%20Feminized%20%26%20Autoflower%20Marijuana%20Seeds%20Online%20%3E%3E%20ILGM&en=page_view&_fv=1&_ss=1&ep.page_type=other&ep.clean_page=%2F&ep.login_state=Logged%20out&upn.shop_lifetime_value=0&up.existing_customer=No
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-DEPCSFR3BW>m=2oe9e0&_p=1639233118&cid=96200139.1663565873&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663565873&sct=1&seg=0&dl=https%3A%2F%2Filgm.com%2F%3Faff%3D1932%2Frpi%2Fttaeu&dt=Buy%20Feminized%20%26%20Autoflower%20Marijuana%20Seeds%20Online%20%3E%3E%20ILGM&en=page_view&_fv=1&_ss=1&ep.page_type=other&ep.clean_page=%2F&ep.login_state=Logged%20out&upn.shop_lifetime_value=0&up.existing_customer=No HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ilgm.com
Connection: keep-alive
Referer: https://ilgm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://ilgm.com
date: Mon, 19 Sep 2022 05:38:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
api.getdrip.com/client/track?url=https%3A%2F%2Filgm.com%2F%3Faff%3D1932%2Frpi%2Fttaeu&visitor_uuid=b2dabc6d5d5a450ea02e9305145a528c&_action=Started%20a%20new%20session&source=drip&drip_account_id=3196820&callback=Drip_207299231
200 OK 101 B URL HTTP/2 api.getdrip.com/client/track?url=https%3A%2F%2Filgm.com%2F%3Faff%3D1932%2Frpi%2Fttaeu&visitor_uuid=b2dabc6d5d5a450ea02e9305145a528c&_action=Started%20a%20new%20session&source=drip&drip_account_id=3196820&callback=Drip_207299231
IP
File type ASCII text, with no line terminators
Hash 109191ed21f0d82b4a3af65c0e4c4572
4303587f237c77e31441c02a08db6e6c844f45ff
f6a981c75617199f68d4bf564d874d2db28811e60feb3b5f37fb32ca3748f9d5
GET /client/track?url=https%3A%2F%2Filgm.com%2F%3Faff%3D1932%2Frpi%2Fttaeu&visitor_uuid=b2dabc6d5d5a450ea02e9305145a528c&_action=Started%20a%20new%20session&source=drip&drip_account_id=3196820&callback=Drip_207299231 HTTP/1.1
Host: api.getdrip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ilgm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 101
date: Mon, 19 Sep 2022 05:38:13 GMT
x-amzn-requestid: 54c422c1-1afa-44c8-8aae-61b24bbd3103
referrer-policy: strict-origin-when-cross-origin
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
x-runtime: 0.027269
strict-transport-security: max-age=31536000; includeSubDomains
x-amzn-remapped-content-length: 101
x-frame-options: SAMEORIGIN
x-amzn-remapped-connection: keep-alive
x-download-options: noopen
x-request-id: b5680465-43e7-42a7-a8fe-4f6080943e1d
x-amz-apigw-id: YsT61G6EIAMF9yA=
cache-control: max-age=0, private, must-revalidate
x-amzn-remapped-server: nginx
x-content-type-options: nosniff
etag: W/"f6a981c75617199f68d4bf564d874d2d"
x-amzn-remapped-date: Mon, 19 Sep 2022 05:38:13 GMT
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sKUHEjLU7TeEPxfnI2qPg55ptWFB1PKe0MQmPtLxC2-IFuRkHoTvDw==
X-Firefox-Spdy: h2
api.getdrip.com/client/track?url=https%3A%2F%2Filgm.com%2F%3Faff%3D1932%2Frpi%2Fttaeu&visitor_uuid=b2dabc6d5d5a450ea02e9305145a528c&_action=Visited%20a%20page&source=drip&drip_account_id=3196820&callback=Drip_7034504
200 OK 99 B URL HTTP/2 api.getdrip.com/client/track?url=https%3A%2F%2Filgm.com%2F%3Faff%3D1932%2Frpi%2Fttaeu&visitor_uuid=b2dabc6d5d5a450ea02e9305145a528c&_action=Visited%20a%20page&source=drip&drip_account_id=3196820&callback=Drip_7034504
IP
File type ASCII text, with no line terminators
Hash 32549bf6edaee7b2f50f2cd12af4d984
5d6100e84fcb20c4671abecda3f114bbf526cfad
5de756fd6330c9004c2c88df11abd305267309f05feeb9f7e785955d3981cae1
GET /client/track?url=https%3A%2F%2Filgm.com%2F%3Faff%3D1932%2Frpi%2Fttaeu&visitor_uuid=b2dabc6d5d5a450ea02e9305145a528c&_action=Visited%20a%20page&source=drip&drip_account_id=3196820&callback=Drip_7034504 HTTP/1.1
Host: api.getdrip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ilgm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 99
date: Mon, 19 Sep 2022 05:38:13 GMT
x-amzn-requestid: 25112030-2ef9-4c44-a8c7-2d7f97d092b6
referrer-policy: strict-origin-when-cross-origin
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
x-runtime: 0.031503
strict-transport-security: max-age=31536000; includeSubDomains
x-amzn-remapped-content-length: 99
x-frame-options: SAMEORIGIN
x-amzn-remapped-connection: keep-alive
x-download-options: noopen
x-request-id: aa0c3415-5b8a-4532-a43d-118aaf000a52
x-amz-apigw-id: YsT61FaIIAMFgdQ=
cache-control: max-age=0, private, must-revalidate
x-amzn-remapped-server: nginx
x-content-type-options: nosniff
etag: W/"5de756fd6330c9004c2c88df11abd305"
x-amzn-remapped-date: Mon, 19 Sep 2022 05:38:13 GMT
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Sf5FeAedIB9MZHFILzfjvbI197KwknoQXy9KXEFwXxfLMP6JT2nyPQ==
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-79667.js?sv=7
200 OK 3.0 kB URL HTTP/2 static.hotjar.com/c/hotjar-79667.js?sv=7
IP
File type ASCII text, with very long lines (5057)
Hash 97735e67876b043d2b758a0dbd4f1fdf
15bb40551ff32619c6b87da0fcb4c5526c06a0b1
2749dd4145886ecddf8e301fea64be9cb6731a46a21dae2d05d3d360fa8d6924
GET /c/hotjar-79667.js?sv=7 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ilgm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Mon, 19 Sep 2022 05:38:12 GMT
access-control-allow-origin: *
cache-control: max-age=60
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=604800; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
etag: W/08fd0ea9e17e05587f01ca3a2f9e0b05
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0jN6IJK31AuNUfk4mIbcUgW9W7cwc7Ou8xPHR9u3KZuoYyl85z48kw==
X-Firefox-Spdy: h2
ilgm.com/?aff=1932/rpi/ttaeu
200 OK 0 B URL HTTP/2 ilgm.com/?aff=1932/rpi/ttaeu
IP
GET /?aff=1932/rpi/ttaeu HTTP/1.1
Host: ilgm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Mon, 19 Sep 2022 05:38:11 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: PHPSESSID=9dvaqb99bb26e02nelhbo2om56; expires=Mon, 19-Sep-2022 06:38:10 GMT; Max-Age=3600; path=/; domain=ilgm.com; secure; HttpOnly; SameSite=Lax
X-Magento-Vary=c58cc7336841735bf5ef13185766282824a9d073; expires=Mon, 19-Sep-2022 06:38:10 GMT; Max-Age=3600; path=/; secure; HttpOnly; SameSite=Lax
pragma: no-cache
cache-control: max-age=0, must-revalidate, no-cache, no-store
expires: Sat, 18 Sep 2021 14:30:50 GMT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RSeF%2Fo1zCeIG33JTFEJAAf1ZLrwmfBZdellE%2BkXYnwUcPSm%2BM9FCqY2r2XVaFG2drlFfYrnNSFEVpHq119FnVfaMDF381uFfkP3ppe1cP72DccjzVM0nC%2Bkk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74cff93e89efbe35-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ilgm.com/static/version1662975437/frontend/onilab/sds/en_US/Anowave_Ec/css/ec.css
200 OK 0 B URL HTTP/2 ilgm.com/static/version1662975437/frontend/onilab/sds/en_US/Anowave_Ec/css/ec.css
IP
GET /static/version1662975437/frontend/onilab/sds/en_US/Anowave_Ec/css/ec.css HTTP/1.1
Host: ilgm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ilgm.com/?aff=1932/rpi/ttaeu
Cookie: PHPSESSID=9dvaqb99bb26e02nelhbo2om56; X-Magento-Vary=c58cc7336841735bf5ef13185766282824a9d073
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 19 Sep 2022 05:38:11 GMT
content-type: text/css
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=2316
etag: W/"631efdd6-90c"
expires: Tue, 12 Sep 2023 11:43:14 GMT
last-modified: Mon, 12 Sep 2022 09:37:26 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 582897
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cKBmbKVMlPyyO9mQXUWmEjj%2FRfZe4oQ8h2J%2FKTQfOKnK1qlmpyG%2BvHFUNK6SwAVe51jJX29l5COyHoU4aLnhnJ8TiadPcumreRaJPUREQX5EQWwMdIZv%2FjtW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74cff9449a02be35-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.affiliatly.com/v3/affiliatly.js?affiliatly_code=AF-1021567
200 OK 0 B URL HTTP/2 static.affiliatly.com/v3/affiliatly.js?affiliatly_code=AF-1021567
IP
GET /v3/affiliatly.js?affiliatly_code=AF-1021567 HTTP/1.1
Host: static.affiliatly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ilgm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 19 Sep 2022 05:38:11 GMT
content-type: application/x-javascript
last-modified: Mon, 19 Sep 2022 02:55:19 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 3589
vary: Accept-Encoding
server: cloudflare
cf-ray: 74cff94528d6991a-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
cdn-3.convertexperiments.com/js/10031096-1003601.js
200 OK 0 B URL HTTP/2 cdn-3.convertexperiments.com/js/10031096-1003601.js
IP
GET /js/10031096-1003601.js HTTP/1.1
Host: cdn-3.convertexperiments.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ilgm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
x-privacy-policy: You can find our privacy policy at https://www.convert.com/privacy-notice/
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=269
date: Mon, 19 Sep 2022 05:38:12 GMT
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
in.hotjar.com/api/v2/client/sites/79667/visit-data?sv=7
200 OK 0 B URL HTTP/2 in.hotjar.com/api/v2/client/sites/79667/visit-data?sv=7
IP
POST /api/v2/client/sites/79667/visit-data?sv=7 HTTP/1.1
Host: in.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 149
Origin: https://ilgm.com
Connection: keep-alive
Referer: https://ilgm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 19 Sep 2022 05:38:13 GMT
content-type: application/json
vary: Accept-Encoding
cache-control: no-cache, no-store
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: br
X-Firefox-Spdy: h2
ilgm.com/static/version1662975437/_cache/merged/e87535358e87650735b94ac2c2060b06.css
200 OK 0 B URL HTTP/2 ilgm.com/static/version1662975437/_cache/merged/e87535358e87650735b94ac2c2060b06.css
IP
GET /static/version1662975437/_cache/merged/e87535358e87650735b94ac2c2060b06.css HTTP/1.1
Host: ilgm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ilgm.com/?aff=1932/rpi/ttaeu
Cookie: PHPSESSID=9dvaqb99bb26e02nelhbo2om56; X-Magento-Vary=c58cc7336841735bf5ef13185766282824a9d073
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 19 Sep 2022 05:38:11 GMT
content-type: text/css
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=119424
etag: W/"631efdf5-1d280"
expires: Tue, 12 Sep 2023 13:29:18 GMT
last-modified: Mon, 12 Sep 2022 09:37:57 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 576532
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q5ESiltHaILMXc1%2B%2BicxTdTLZBGjeTp7FcL6ltQESJXbbZG84tEElVCEbw74l%2BmHwywlvfadFGcDDc58LHFnf8Aqo242e54bR01xZOb0IgiHCigS0iQzBjdt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74cff9449a00be35-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a91bc33-86f4-4bda-af70-da083ceb7c72.jpeg
200 OK 0 B URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a91bc33-86f4-4bda-af70-da083ceb7c72.jpeg
IP
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a91bc33-86f4-4bda-af70-da083ceb7c72.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10894
x-amzn-requestid: f7aad96e-af80-4db7-8bc1-d1e09a9b37e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YeJQGHhOIAMFYuw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6322559a-538534e91448af217c59ab3d;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 22:28:42 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: P7aZQzmAvqn2rcHJUQjHo0Dcg8dsrqseey5mNOabfq1b857M4SUMDQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 01:08:23 GMT
age: 16188
etag: "ebd83f29edd95217dfa4f4c7a94eddf34dd58b14"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ilgm.com/static/version1662975437/frontend/onilab/sds/en_US/images/header/logo_desktop.svg
200 OK 0 B URL HTTP/2 ilgm.com/static/version1662975437/frontend/onilab/sds/en_US/images/header/logo_desktop.svg
IP
GET /static/version1662975437/frontend/onilab/sds/en_US/images/header/logo_desktop.svg HTTP/1.1
Host: ilgm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ilgm.com/?aff=1932/rpi/ttaeu
Cookie: PHPSESSID=9dvaqb99bb26e02nelhbo2om56; X-Magento-Vary=c58cc7336841735bf5ef13185766282824a9d073
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 19 Sep 2022 05:38:11 GMT
content-type: image/svg+xml
last-modified: Mon, 12 Sep 2022 09:37:30 GMT
vary: Accept-Encoding
etag: W/"631efdda-6b5f"
expires: Tue, 12 Sep 2023 11:43:15 GMT
cache-control: public, max-age=31536000
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 582896
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ykAFPedDevZd%2BQKpfowenwb1saov2GqzTwY9wySFqkZ0ibh5p%2BlLFDe79iqnexsMCIqcxIfQpdfgFrYsZO2IiQCxInjNABFmzWExO0VGyjjQoSEDf9CdII8Q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74cff9449a0ebe35-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
tag.getdrip.com/3196820.js
200 OK 0 B URL HTTP/2 tag.getdrip.com/3196820.js
IP
GET /3196820.js HTTP/1.1
Host: tag.getdrip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ilgm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 13 Jul 2022 09:55:10 GMT
server: AmazonS3
content-encoding: gzip
date: Mon, 19 Sep 2022 05:38:13 GMT
etag: W/"d28568db9a8f5800cd0ade62ca0a37f1"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 49mhfIFrQRrymfn_F8wbItg2u8cUUkqWtwirXKFcw9ZXHmtgY4v93w==
X-Firefox-Spdy: h2
192.254.234.35
23.14.5.113
34.255.240.59
3.74.95.251
23.36.76.226
93.184.220.29
0.0.0.0