earnme.club/safe2.php?link=hfnp6
200 OK 438 B URL HTTP/1.1 earnme.club/safe2.php?link=hfnp6
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 0d8d770a4d984978b7fb2ece386b55ce
cb1e9dd5ff9afd0686a5271a5e029228b3171815
82aeba59f3184a55ffff301433e62df750ca8af684ebaa3d778671f2202cfed0
Analyzer Verdict Alert fortinet Malware
GET /safe2.php?link=hfnp6 HTTP/1.1
Host: earnme.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Connection: Keep-Alive
Set-Cookie: tp2=hfnp6; expires=Fri, 07-Oct-2022 15:47:23 GMT; Max-Age=180
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Content-Length: 438
Content-Encoding: gzip
Date: Fri, 07 Oct 2022 15:44:23 GMT
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 282f6e1328452c1cb41f6a6272fff757
20b9ff1b5f4f81b645769bd4b4cf7bf7dfc16262
6a8070ebe51259cb11db68cca2c81f3c7408fad481d8c14cc1c38912442c63f4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A8070EBE51259CB11DB68CCA2C81F3C7408FAD481D8C14CC1C38912442C63F4"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7859
Expires: Fri, 07 Oct 2022 17:55:23 GMT
Date: Fri, 07 Oct 2022 15:44:24 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=259200
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 05 Oct 2022 15:47:18 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: WRRT9oyXh3_AJ9jl4IWDf9_OeECM-ypExhl9rYS50tj2gurzXcN2bQ==
Age: 172626
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 94a09d62ab3057cda67a091c8d7478f5
b1c9d223a951d0bc9f17c9f3b84501266a552b58
582364f9f6014520c269f1f794e7c34027bd2697b53e5d02fad43e74a735e471
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "582364F9F6014520C269F1F794E7C34027BD2697B53E5D02FAD43E74A735E471"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2198
Expires: Fri, 07 Oct 2022 16:21:02 GMT
Date: Fri, 07 Oct 2022 15:44:24 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Vjxl2clG9D/fLjMRYtj/cwCvn1FMBrZB55IyQCBfNEaHfge9hx5y3O67PA7FZstodDdAQcxJ1Bg=
x-amz-request-id: 0832DS4FF2SMDEBM
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 07 Oct 2022 14:59:13 GMT
age: 2711
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 15:44:24 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 38c8ed81c69d2af0003394c9fb9274c5
a71c6fb6d685275f8a8c7d9d87860df08a450038
fdff30d374603ecd62c6d244a1175731787725dba48777122802055969be28f4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
earnme.club/favicon.ico
404 Not Found 708 B IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 2382378378c002d88b9a507c712c3349
2e894db3808b554abadc8b144338ad9e2ea937ba
37a4e56c497e170de6e152bc479624eb8d7ccb35bad5a190f2fdb17ac699cffa
GET /favicon.ico HTTP/1.1
Host: earnme.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: tp2=hfnp6
HTTP/1.1 404 Not Found
Connection: Keep-Alive
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Content-Type: text/html
Content-Length: 708
Date: Fri, 07 Oct 2022 15:44:24 GMT
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Expires, Backoff, ETag, Last-Modified, Pragma, Cache-Control, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Fri, 07 Oct 2022 15:29:41 GMT
Expires: Fri, 07 Oct 2022 16:19:44 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: lhfMY0w_zu1VMubBTY4TsEZKig5asZkXY-D8YQjd9LidnmZ5kLH2gw==
Age: 883
www.google.com/url?sa=t&source=web&rct=j&url=https://earnme.club/airtel-starts-5g-trial/&ved=2ahUKEwinyYX0v5X2AhW2yYsBHcAmD-I4MhAWegQIAhAB&usg=AOvVaw3JkRShbmYkG6v89YfrCWzW
200 OK 480 B URL HTTP/2 www.google.com/url?sa=t&source=web&rct=j&url=https://earnme.club/airtel-starts-5g-trial/&ved=2ahUKEwinyYX0v5X2AhW2yYsBHcAmD-I4MhAWegQIAhAB&usg=AOvVaw3JkRShbmYkG6v89YfrCWzW
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (822)
Hash 13992dfda1eea175b1f1304238c219a0
f017581f65b305aa3aae2c8aa3b94d8cb54d17ac
9ee367151d02966b5eae196f0753b0c3c987e7a374dd08ada617ca9bb7045f48
GET /url?sa=t&source=web&rct=j&url=https://earnme.club/airtel-starts-5g-trial/&ved=2ahUKEwinyYX0v5X2AhW2yYsBHcAmD-I4MhAWegQIAhAB&usg=AOvVaw3JkRShbmYkG6v89YfrCWzW HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: NID=511=mFaVQ2laxz7LyOQPRMNzZ8pfqtskvHoyf0TGBmbY6s5Ub1CeFQvkj_KT2o_8zl8ZHXEbPRRR9GJm6m0MGzqDm2ReTzPtXEV8G2VgueTBYhbH5hld7hYlVF_VTRE8Ty8cROmpXCvwVcV_GYdGf7gIo1WoEG66Lmz3vbEwW5XyrUM; __Secure-ENID=5.SE=WgoywoGOUEmJadxoIB0r2lkzXHeKVqth1xGOa4ffzT7dUHt-ZXjx-iHV7oK7BCuj96T6WcNdOxtcPrvT6hvt4NQxsLWhAuRLpweU30AweJoV-BgqMIIyysdeq33RUY6ph26qQ9jBKSd0XSV6yoBSxOS9PmgWEsI53hUDjv_5qeI; CONSENT=PENDING+883
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:24 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=31536000
content-encoding: br
server: gws
content-length: 480
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 87465c15992fe10c24c62a185f8c171d
fa938b624d06d1e2927c8eda6a44b2a32d930f59
239ef7fe5df8c396d96a928c20d66c842a5ec3e9ff71a3cd7c0068906fc3e537
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash d6c404502c7987174a84d8f0a3efab23
fc3a3f6d63acab3f659fb3536b65fd8564ec8628
94b5693df873bd923ffbf31f576fff01d2628e5796af4c6b91306a743e27d19b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4361
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:24 GMT
Last-Modified: Fri, 07 Oct 2022 14:31:43 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
earnme.club/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
200 OK 11 kB URL HTTP/2 earnme.club/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (43771)
Hash d45207ee05c1f0c57dfa075e61405ccd
a8d35143a2d828a739ea0fdde75f97d33621e7ec
a9a4adbbcee31ec277f1bdd573eef97dc4341f29f2db3b5685a02dfe4d2fe9bb
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.2 HTTP/1.1
Host: earnme.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/airtel-starts-5g-trial/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 14 Oct 2022 15:44:24 GMT
content-type: text/css
last-modified: Wed, 13 Jul 2022 02:57:39 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 10946
date: Fri, 07 Oct 2022 15:44:24 GMT
X-Firefox-Spdy: h2
earnme.club/wp-content/themes/mh-magazine-lite/style.css?ver=2.9.2
200 OK 8.8 kB URL HTTP/2 earnme.club/wp-content/themes/mh-magazine-lite/style.css?ver=2.9.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (739)
Hash b4588be584fdfc6f3c8997ce49940a0f
f1b50682d29aa349889fea0469a12ed31deb25cb
c609f96251492512f62d975430d7d977a812b78031dad2797d12dbdf34d562db
GET /wp-content/themes/mh-magazine-lite/style.css?ver=2.9.2 HTTP/1.1
Host: earnme.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/airtel-starts-5g-trial/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 14 Oct 2022 15:44:24 GMT
content-type: text/css
last-modified: Sun, 26 Jun 2022 02:57:58 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 8842
date: Fri, 07 Oct 2022 15:44:24 GMT
X-Firefox-Spdy: h2
earnme.club/wp-content/themes/mh-magazine-lite/includes/font-awesome.min.css
200 OK 6.7 kB URL HTTP/2 earnme.club/wp-content/themes/mh-magazine-lite/includes/font-awesome.min.css
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (30837)
Hash 97c6ce9b4936f66aa388ad33c39aba2d
3f14a7e78fbb4935cf35c20779dc2035531849a9
1eea453c424793fc56ef14093c10b373e3ca8388a70e847394e8084048c5ce38
GET /wp-content/themes/mh-magazine-lite/includes/font-awesome.min.css HTTP/1.1
Host: earnme.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/airtel-starts-5g-trial/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 14 Oct 2022 15:44:24 GMT
content-type: text/css
last-modified: Sun, 26 Jun 2022 02:57:58 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6658
date: Fri, 07 Oct 2022 15:44:24 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 18e0e019cd697bb16806d8f00408a319
60ceb13c31595e6cf9bb6800657e4593a1fbd670
7cb0778c80be637b67a5d198ca180a76bbfa4c32e502a0fa472a4c6946ffb56e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
earnme.club/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 32 kB URL HTTP/2 earnme.club/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (65447)
Hash d5d325859c1520b3a1ba9a796909ee51
58674b6ceb71ac5a96867a2f205856c247d22e98
9fd5cba9b948a3870d7e13f33affd39e44226ae94a4e2917320aa35ed65bd91e
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: earnme.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/airtel-starts-5g-trial/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 14 Oct 2022 15:44:24 GMT
content-type: application/javascript
last-modified: Wed, 10 Mar 2021 15:07:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 31593
date: Fri, 07 Oct 2022 15:44:24 GMT
X-Firefox-Spdy: h2
earnme.club/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 5.3 kB URL HTTP/2 earnme.club/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (11126)
Hash bb5413bc3872b98aa2a4e2aeb13c840c
746c6a7814a6369204462ed5c4c69cdfd2e2343d
5c7cec5bb8b8b40b38fe863b9419b13ec531d57170900dc74a59c7f232ccef91
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: earnme.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/airtel-starts-5g-trial/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 14 Oct 2022 15:44:24 GMT
content-type: application/javascript
last-modified: Wed, 18 Nov 2020 09:06:06 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5300
date: Fri, 07 Oct 2022 15:44:24 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5eee2baed68ec922370bd283860860fd
7d1e7dfdb9577dcd11587bb162e17c56eaf8e4c4
7931afabb9286276c385564aa73ed67927d31e12ab35eb92da84048a7896f27d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
earnme.club/wp-content/themes/mh-magazine-lite/js/scripts.js?ver=2.9.2
200 OK 13 kB URL HTTP/2 earnme.club/wp-content/themes/mh-magazine-lite/js/scripts.js?ver=2.9.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (21960)
Hash 98574c14319f5ff56c6780de37593f2a
fd83667f007543824efddb81cbd2454db625ac80
ce0aad6c07f9909cae105e11c0a3c430a91065fd832eb1ad54526dbb80d41767
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/mh-magazine-lite/js/scripts.js?ver=2.9.2 HTTP/1.1
Host: earnme.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/airtel-starts-5g-trial/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 14 Oct 2022 15:44:24 GMT
content-type: application/javascript
last-modified: Sun, 26 Jun 2022 02:57:58 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 12569
date: Fri, 07 Oct 2022 15:44:24 GMT
X-Firefox-Spdy: h2
earnme.club/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
200 OK 5.9 kB URL HTTP/2 earnme.club/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (15660)
Hash 53a47ac2d765d78a296044d5d7688fe6
d1a7088c6bf8dd8b36a59622df280a3992ece696
0a4ce5e80f7a886bcbe69732189e4650b5882bdbff0a718e636d63ea97a15db7
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.2 HTTP/1.1
Host: earnme.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/airtel-starts-5g-trial/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 14 Oct 2022 15:44:25 GMT
content-type: application/javascript
last-modified: Tue, 12 Apr 2022 05:56:23 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5918
date: Fri, 07 Oct 2022 15:44:25 GMT
X-Firefox-Spdy: h2
earnme.club/wp-content/uploads/2021/06/2021-05-18T054108Z_1610409916_RC25IN9OIY6K_RTRMADP_3_BHARTI-AIRTEL-RESULTS_1623743874322_1623743886417-1-678x381.jpg
200 OK 23 kB URL HTTP/2 earnme.club/wp-content/uploads/2021/06/2021-05-18T054108Z_1610409916_RC25IN9OIY6K_RTRMADP_3_BHARTI-AIRTEL-RESULTS_1623743874322_1623743886417-1-678x381.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 678x381, components 3\012- data
Hash 86bfddb4fe05287444d70eb2372d8975
90be2632efb798796aaf973f72b99b0abd530067
91c0496d78756cc0a3712666cfc5e8dc6d5dc857a4a252a3d360077d2d1e1960
GET /wp-content/uploads/2021/06/2021-05-18T054108Z_1610409916_RC25IN9OIY6K_RTRMADP_3_BHARTI-AIRTEL-RESULTS_1623743874322_1623743886417-1-678x381.jpg HTTP/1.1
Host: earnme.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/airtel-starts-5g-trial/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 14 Oct 2022 15:44:25 GMT
content-type: image/jpeg
last-modified: Sun, 26 Jun 2022 03:03:20 GMT
accept-ranges: bytes
content-length: 22906
date: Fri, 07 Oct 2022 15:44:25 GMT
X-Firefox-Spdy: h2
earnme.club/wp-content/uploads/2021/06/4f3a20f2_7289_4a1e_c995_e7b942aae685__1_.0-1-80x60.jpg
200 OK 1.9 kB URL HTTP/2 earnme.club/wp-content/uploads/2021/06/4f3a20f2_7289_4a1e_c995_e7b942aae685__1_.0-1-80x60.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 80x60, components 3\012- data
Hash b389721d7a0f2f5bdfd1f16fb354d894
cafc5e22a365a495a965675116317e837e6e70fd
aa5cbfe64f000e25ecf6228204943380bb31c5f7b443710c2ec55a549733825e
GET /wp-content/uploads/2021/06/4f3a20f2_7289_4a1e_c995_e7b942aae685__1_.0-1-80x60.jpg HTTP/1.1
Host: earnme.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/airtel-starts-5g-trial/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 14 Oct 2022 15:44:25 GMT
content-type: image/jpeg
last-modified: Sun, 26 Jun 2022 03:03:20 GMT
accept-ranges: bytes
content-length: 1878
date: Fri, 07 Oct 2022 15:44:25 GMT
X-Firefox-Spdy: h2
earnme.club/wp-includes/js/comment-reply.min.js?ver=6.0.2
200 OK 2.5 kB URL HTTP/2 earnme.club/wp-includes/js/comment-reply.min.js?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (2968)
Hash 62c47f79a793143ddcefb6fee4285729
b04324c3ec6e13ea2c153c0660ad5c47c1ac0809
59337dadfa20a8d8881fe6b3f5ad89636754c3aa61c0e428d749ebae4b3abb55
GET /wp-includes/js/comment-reply.min.js?ver=6.0.2 HTTP/1.1
Host: earnme.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/airtel-starts-5g-trial/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 14 Oct 2022 15:44:25 GMT
content-type: application/javascript
last-modified: Fri, 08 Apr 2022 20:07:18 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2525
date: Fri, 07 Oct 2022 15:44:25 GMT
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-LY1N2M6E7Y
200 OK 75 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-LY1N2M6E7Y
IP
File type ASCII text, with very long lines (18991)
Hash 710aaa5637d4ddff79223a024c2f337b
500dcfe30c36e3b73967782327fc6eb2208eaefe
1ebe7b88f60fe73ee6672eab5720526572a21f5991aa46613da55a04d72464e4
GET /gtag/js?id=G-LY1N2M6E7Y HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 07 Oct 2022 15:44:25 GMT
expires: Fri, 07 Oct 2022 15:44:25 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 74764
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 1d13c38762edee3ea0af663f3e4553be
894a45402ded63c20b5062b2aae8b3894be80996
781d3684b9efe9d34182e7a740c759749a80c085576681bd5077d342e4448ae0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5eee2baed68ec922370bd283860860fd
7d1e7dfdb9577dcd11587bb162e17c56eaf8e4c4
7931afabb9286276c385564aa73ed67927d31e12ab35eb92da84048a7896f27d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: EKLyfXYIWqlZeMApR/q/Tg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: tl8gAq/ygCa/zcPJDIzeqX5xxfA=
a.teads.tv/analytics/tag.js
200 OK 3.4 kB URL HTTP/2 a.teads.tv/analytics/tag.js
IP
File type ASCII text, with very long lines (4822)
Hash 17c0d6e20839220eda6b6705a5927ecd
7be150d4a843663f701b277490a61e7129ff96ff
7e0bd8b7407f2c07df78a42a431c8e9ec8b1737631c8793e6aeb19d502acca91
GET /analytics/tag.js HTTP/1.1
Host: a.teads.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: OcMovej99gPZ4phntcYbvwqKiH30Q6TNKFkEmNkRQfua36kK8447PqvZscNrOCB05xmNS8jfFeA=
x-amz-request-id: DJZJZ0MDY5N4XZTD
last-modified: Thu, 29 Sep 2022 14:53:50 GMT
etag: "17c0d6e20839220eda6b6705a5927ecd"
x-amz-server-side-encryption: AES256
x-amz-version-id: e3HRkV45dlKSU2VLXzuV.1qsEv2pzDxO
accept-ranges: bytes
content-type: text/javascript;charset=utf-8
content-length: 3375
cache-control: private, max-age=3600
date: Fri, 07 Oct 2022 15:44:25 GMT
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c0e37b1aee2a466afe7359c9466efbeb
523fdce6313a96b1a463cd6dcb2123d42f5fd9a2
7417af1e6f592a1001ac9f4f7f4c6458e607b842772c5f5e07145ad01dbb209b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7417AF1E6F592A1001AC9F4F7F4C6458E607B842772C5F5E07145AD01DBB209B"
Last-Modified: Thu, 06 Oct 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16569
Expires: Fri, 07 Oct 2022 20:20:34 GMT
Date: Fri, 07 Oct 2022 15:44:25 GMT
Connection: keep-alive
cat.hbwrapper.com/
200 OK 15 B IP
ASN #14061 DIGITALOCEAN-ASN
File type JSON data\012- , ASCII text, with no line terminators
Hash 0f0479874bf6f4a7281099b15df27c27
55a490e280d48996e564d00492437eb17faadd28
a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288
POST / HTTP/1.1
Host: cat.hbwrapper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 149
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 15:44:25 GMT
Server: Apache
Access-Control-Allow-Origin: https://earnme.club
Access-Control-Allow-Credentials: true
Content-Length: 15
Connection: close
Content-Type: text/html; charset=UTF-8
htlbid.com/v3/earnme.club/adsstarbid.css
200 OK 0 B URL HTTP/2 htlbid.com/v3/earnme.club/adsstarbid.css
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/earnme.club/adsstarbid.css HTTP/1.1
Host: htlbid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
content-length: 0
last-modified: Mon, 13 Jun 2022 06:46:43 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 07 Oct 2022 15:44:26 GMT
cache-control: max-age=600
etag: "d41d8cd98f00b204e9800998ecf8427e"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VG--WefypxCNkzImUKIUGTo05nYA8e8QO0cvqU_qMbdaWXHNX4Lkqw==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash aea480478c3be7392d09e8a92826542f
b660fb42c8122efb07b3d1de1a8907ad1f6e1a60
ee691969e4d61ba3145fe90b28c5051367c223f31c0e0ee001d8481035090760
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash de13f970f8aba26b5635ed31a9f7c667
2ce848652b67e0c2f9d8f5b299a80764cf83bf31
e3c3ee004ba0175fe4363bc1011e26f66fce0f848c83949a5d430e7d61ab781a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.adapex.io/hb/aaw.emc.js
200 OK 228 kB URL HTTP/2 cdn.adapex.io/hb/aaw.emc.js
IP
File type ASCII text, with very long lines (65254)
Size 228 kB (227582 bytes)
Hash 7d5c25eac38916e24e70f1bb21b199a4
53d8482309625d30d1f6ea0f79191c7c717040c8
3bb1ffbbf54f0a48f0501b617486393fc82c941e621457228b4d6cb590999dc1
GET /hb/aaw.emc.js HTTP/1.1
Host: cdn.adapex.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:25 GMT
content-type: application/javascript
last-modified: Tue, 04 Oct 2022 06:19:54 GMT
vary: Accept-Encoding
etag: W/"633bd08a-7effe"
expires: Fri, 07 Oct 2022 06:20:47 GMT
cache-control: public, max-age=86400
access-control-allow-origin: *
cf-cache-status: HIT
age: 65877
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nd6dbOy6B%2FFWmfRgYujpHo3rr3rda63pI4ykf5PM31DCcCgKma%2FENMxAAk9Oz402nhImdRnuq2sTrPiCq%2BwDSl2Kh%2Bf6qigeWTmT%2FoKRwrqqWeaPui5LUNxUE4N4nbG2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7567c20c491e1c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://earnme.club
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 06 Oct 2022 05:42:51 GMT
expires: Fri, 06 Oct 2023 05:42:51 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
age: 122494
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
flashnetic.com/c/ao0y4krv21gsuol1v4o82.json
200 OK 1.6 kB URL HTTP/2 flashnetic.com/c/ao0y4krv21gsuol1v4o82.json
IP
File type JSON data\012- , ASCII text, with very long lines (1584), with no line terminators
Hash d08ab2e6e30a2fe0fdd62ab6d2286332
cf948644335d39edcf103f53565296875e528c62
638fae437ad08dd30810de850dfcc60bd51a79a76940b40ec0d44488811c9a74
GET /c/ao0y4krv21gsuol1v4o82.json HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Origin: https://earnme.club
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1584
last-modified: Wed, 05 Oct 2022 11:54:26 GMT
x-amz-version-id: uZbR8zEfxi2ioTloqRvdsCfHBpK7dIDa
accept-ranges: bytes
server: AmazonS3
date: Fri, 07 Oct 2022 12:13:33 GMT
etag: "d08ab2e6e30a2fe0fdd62ab6d2286332"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kpspEfLMacDjxPB6OnRjri3-Xvuk0CmJk88rq6_b0Fl2dOAbNByUyQ==
age: 12652
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
flashnetic.com/c/uv85s8wiydoa62b7a5wma.json
200 OK 1.6 kB URL HTTP/2 flashnetic.com/c/uv85s8wiydoa62b7a5wma.json
IP
File type JSON data\012- , ASCII text, with very long lines (1588), with no line terminators
Hash 03aff7733037a126b48f39972696c32d
36ec514eac7312965cc9f3a8dfcd3fec5554d645
f6756f243b4ec685ae635dca47f8c510ed0f5b15d09ee4333a990b7565de95fb
GET /c/uv85s8wiydoa62b7a5wma.json HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Origin: https://earnme.club
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1588
last-modified: Wed, 05 Oct 2022 11:56:22 GMT
x-amz-version-id: sWNsbsoHcsMMKRa1JoBHS1vNNgN95QG2
accept-ranges: bytes
server: AmazonS3
date: Fri, 07 Oct 2022 12:13:33 GMT
etag: "03aff7733037a126b48f39972696c32d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QaPIbUJ2IZwATkAXT1xJLS0wG34H1gf-uSx5Vazxkv2XT6vFSjAMlA==
age: 12652
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash aea480478c3be7392d09e8a92826542f
b660fb42c8122efb07b3d1de1a8907ad1f6e1a60
ee691969e4d61ba3145fe90b28c5051367c223f31c0e0ee001d8481035090760
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
flashnetic.com/c/tvdi2ru09cf0ymc0mwei9.json
200 OK 1.6 kB URL HTTP/2 flashnetic.com/c/tvdi2ru09cf0ymc0mwei9.json
IP
File type JSON data\012- , ASCII text, with very long lines (1588), with no line terminators
Hash 2960d65a4b73d7b40980f9a1d91a6ab0
4e81dec8d06dea2fbd201aa9ab08efb09f7a0725
40229c528d4c359fa696035f962d658d3538b3544ef8454b42632fc80820b0f2
GET /c/tvdi2ru09cf0ymc0mwei9.json HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Origin: https://earnme.club
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1588
last-modified: Wed, 05 Oct 2022 11:56:21 GMT
x-amz-version-id: 1JKBEEnBHtNMnaysapoNyhhpmgEdg1UN
accept-ranges: bytes
server: AmazonS3
date: Fri, 07 Oct 2022 12:13:33 GMT
etag: "2960d65a4b73d7b40980f9a1d91a6ab0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: k9TWzPpB5ZxzVVKsP-VEeNC0hT1ZsKOfm2ufUEVkRqsP7V_GjSM72g==
age: 12652
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
earnme.club/wp-content/uploads/2021/06/small_Nord-N200-5G-16-1-80x60.jpg
200 OK 1.8 kB URL HTTP/2 earnme.club/wp-content/uploads/2021/06/small_Nord-N200-5G-16-1-80x60.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 80x60, components 3\012- data
Hash 2027ff72566ed477009e3c910aafa4f9
9e5f2c523d904f62e20decec4a459ad2c1d85449
a185b20f7ea518470b2ad99039c9c065cc0121aef5bab812031a5d3d414dd885
GET /wp-content/uploads/2021/06/small_Nord-N200-5G-16-1-80x60.jpg HTTP/1.1
Host: earnme.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/airtel-starts-5g-trial/
Cookie: _uc_referrer=https://www.google.com/; _pbjs_userid_consent_data=3524755945110770
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 14 Oct 2022 15:44:25 GMT
content-type: image/jpeg
last-modified: Sun, 26 Jun 2022 03:03:21 GMT
accept-ranges: bytes
content-length: 1827
date: Fri, 07 Oct 2022 15:44:25 GMT
X-Firefox-Spdy: h2
earnme.club/favicon.ico
404 Not Found 708 B IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 2382378378c002d88b9a507c712c3349
2e894db3808b554abadc8b144338ad9e2ea937ba
37a4e56c497e170de6e152bc479624eb8d7ccb35bad5a190f2fdb17ac699cffa
GET /favicon.ico HTTP/1.1
Host: earnme.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/airtel-starts-5g-trial/
Cookie: _uc_referrer=https://www.google.com/; _pbjs_userid_consent_data=3524755945110770
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 708
date: Fri, 07 Oct 2022 15:44:25 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 05cdf02bcbbeed0122679c1118a350ce
b5311d6866b69206bec8f67a19cfeeefed233ef1
4b7235ec2ca2295957e75e79fdc718fbacc13bfd5674d1aeb7cbe5bed9fe9ead
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 05cdf02bcbbeed0122679c1118a350ce
b5311d6866b69206bec8f67a19cfeeefed233ef1
4b7235ec2ca2295957e75e79fdc718fbacc13bfd5674d1aeb7cbe5bed9fe9ead
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 23be53f0796c8e41706dcd00284560fc
9608740dde2b8801081f68b9aa0afe9ae048e3fb
08efc4c1977aef68123a25c191e9af752bf3ffc9d9c3a1790ae3ec350a239206
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 05cdf02bcbbeed0122679c1118a350ce
b5311d6866b69206bec8f67a19cfeeefed233ef1
4b7235ec2ca2295957e75e79fdc718fbacc13bfd5674d1aeb7cbe5bed9fe9ead
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 05cdf02bcbbeed0122679c1118a350ce
b5311d6866b69206bec8f67a19cfeeefed233ef1
4b7235ec2ca2295957e75e79fdc718fbacc13bfd5674d1aeb7cbe5bed9fe9ead
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
securepubads.g.doubleclick.net/tag/js/gpt.js
200 OK 28 kB URL HTTP/2 securepubads.g.doubleclick.net/tag/js/gpt.js
IP
File type ASCII text, with very long lines (45115)
Hash 3373bb2ac88731e44eec0dbf4435f625
65fa07a64ed1fbb0d719e532ced89e404aaa4415
71063a9e55fdf3d5e08c50b05c75bc10b15acf07f5ac6e916f930fe31681d914
GET /tag/js/gpt.js HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 27707
date: Fri, 07 Oct 2022 15:44:25 GMT
expires: Fri, 07 Oct 2022 15:44:25 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1356 / 650 of 1000 / last-modified: 1665140982"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fearnme.club&pubid=1ad7261b-91ea-4b6f-b9e9-b83522205b75
200 OK 1.0 kB URL HTTP/2 c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fearnme.club&pubid=1ad7261b-91ea-4b6f-b9e9-b83522205b75
IP
File type JSON data\012- , ASCII text, with very long lines (1041), with no line terminators
Hash f0a9c4332bf6e2dd0b676f6e47d85303
f8baf460856578ce458e092475f11af9d2878075
70c50e4d27c9119c508a5a1653bdc3b91d5eaed33370ee128f1bec220f66567c
GET /cdn/prod/config?src=600&u=https%3A%2F%2Fearnme.club&pubid=1ad7261b-91ea-4b6f-b9e9-b83522205b75 HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json;charset=UTF-8
content-length: 1041
access-control-allow-origin: https://earnme.club
access-control-allow-credentials: true
cache-control: max-age=21550, s-maxage=21600
date: Fri, 07 Oct 2022 15:44:25 GMT
server: Server
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ove_uGmp9kA8og-FnDO6Ox7fonjBRf1nRJDFOGoeYzUhwtTFKakveg==
X-Firefox-Spdy: h2
at.teads.tv/fpc?analytics_tag_id=PUB_17018&tfpvi=&gdpr_status=22&gdpr_reason=220&gdpr_consent=&ccpa_consent=&shared_ids=&sv=a89a58d&
200 OK 0 B URL HTTP/1.1 at.teads.tv/fpc?analytics_tag_id=PUB_17018&tfpvi=&gdpr_status=22&gdpr_reason=220&gdpr_consent=&ccpa_consent=&shared_ids=&sv=a89a58d&
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fpc?analytics_tag_id=PUB_17018&tfpvi=&gdpr_status=22&gdpr_reason=220&gdpr_consent=&ccpa_consent=&shared_ids=&sv=a89a58d& HTTP/1.1
Host: at.teads.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/plain; charset=UTF-8
Content-Length: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://earnme.club
Expires: Fri, 07 Oct 2022 15:44:25 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 07 Oct 2022 15:44:25 GMT
Connection: keep-alive
earnme.club/airtel-starts-5g-trial/
200 OK 20 kB URL HTTP/2 earnme.club/airtel-starts-5g-trial/
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Hash 552286b6ad28b09ac458c8614969e3c4
b2c5b1ed2e1618477d9623674f1e5613b2608cc5
e015bffcd116a7f77cffb4b0e323c46167bca88503193898308d701f5088eff3
Analyzer Verdict Alert fortinet Malware
GET /airtel-starts-5g-trial/ HTTP/1.1
Host: earnme.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
x-pingback: https://earnme.club/xmlrpc.php
link: <https://earnme.club/wp-json/>; rel="https://api.w.org/", <https://earnme.club/wp-json/wp/v2/posts/247>; rel="alternate"; type="application/json", <https://earnme.club/?p=247>; rel=shortlink
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 07 Oct 2022 15:44:24 GMT
alt-svc: quic=":443"; ma=2592000; v="43,46", h3-Q043=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-25=":443"; ma=2592000, h3-27=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 05cdf02bcbbeed0122679c1118a350ce
b5311d6866b69206bec8f67a19cfeeefed233ef1
4b7235ec2ca2295957e75e79fdc718fbacc13bfd5674d1aeb7cbe5bed9fe9ead
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
status.geotrust.com/
200 OK 471 B IP
Hash 1faceebf0bda1deff736a63f0f78bfa9
fec3dbbec7d6e4835c06f8273ab50b40e7fb6986
8a57c98bcfc83268f93fb7caf5616dcd884e1ad87accdafd912fdcefbf88a01d
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2958
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:25 GMT
Last-Modified: Fri, 07 Oct 2022 14:55:07 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 313 B IP
Hash 9c93facf4ec72c4006862ec94824e1c8
59add745843c4f3288a5eb3d88db06eb599b80b9
3997ae6d9d6226f8e3c55cba9c8e4e3f33c7b40360efe1ba98805394b72f92d8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1646
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:25 GMT
Last-Modified: Fri, 07 Oct 2022 15:16:59 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 313
status.geotrust.com/
200 OK 471 B IP
Hash 133709963ecb46702aa4ff523494867f
f0a0ffcc4dd6a4dc19cde98d52a27a25f9865212
e9eefb6c21ebef11643b540df7d1b68d7414a1e0b381d9f6b34139cab9e5fb82
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5652
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:25 GMT
Last-Modified: Fri, 07 Oct 2022 14:10:13 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d40b050fa5791afa851cba9696410f8f
9703d820cb41cec8f531a141c0f0dfc7495877e9
cce0245d3b58c9a171a2144d2c6ab6c8245b651d1b7cbffe8c45a105176e1ea1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CCE0245D3B58C9A171A2144D2C6AB6C8245B651D1B7CBFFE8C45A105176E1EA1"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9195
Expires: Fri, 07 Oct 2022 18:17:40 GMT
Date: Fri, 07 Oct 2022 15:44:25 GMT
Connection: keep-alive
htlb.casalemedia.com/openrtb/pbjs?s=775312&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%2225537680056e23b%22%2C%22site%22%3A%7B%22ref%22%3A%22https%3A%2F%2Fwww.google.com%2F%22%2C%22page%22%3A%22https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F%22%2C%22domain%22%3A%22earnme.club%22%2C%22publisher%22%3A%7B%22domain%22%3A%22earnme.club%22%7D%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22mfu%22%3A0%2C%22bu%22%3A1%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A1%2C%22ren%22%3Afalse%2C%22version%22%3A%227.15.0%22%2C%22userIds%22%3A%5B%5D%2C%22url%22%3A%22https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F%22%2C%22tmax%22%3A3000%2C%22syncsPerBidder%22%3A5%2C%22fpd%22%3Atrue%2C%22pbadslot%22%3A%22%2F22181265%2Femc_300v_2%22%2C%22adunitcode%22%3A%222faf4135-4880-48d9-9db1-af7d23d3aa1e%22%2C%22divId%22%3A%222faf4135-4880-48d9-9db1-af7d23d3aa1e%22%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%2226e112bf881e4a4%22%2C%22banner%22%3A%7B%22topframe%22%3A1%2C%22format%22%3A%5B%7B%22w%22%3A300%2C%22h%22%3A250%2C%22ext%22%3A%7B%22siteID%22%3A%22775312%22%2C%22sid%22%3A%22300x250%22%2C%22fl%22%3A%22p%22%7D%7D%2C%7B%22w%22%3A336%2C%22h%22%3A280%2C%22ext%22%3A%7B%22siteID%22%3A%22775312%22%2C%22sid%22%3A%22336x280%22%2C%22fl%22%3A%22p%22%7D%7D%5D%2C%22pos%22%3A3%7D%2C%22ext%22%3A%7B%22dfp_ad_unit_code%22%3A%22%2F22181265%2Femc_300v_2%22%2C%22gpid%22%3A%22%2F22181265%2Femc_300v_2%22%7D%2C%22bidfloor%22%3A0.01%2C%22bidfloorcur%22%3A%22USD%22%7D%5D%2C%22at%22%3A1%2C%22source%22%3A%7B%22ext%22%3A%7B%22schain%22%3A%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22adapex.io%22%2C%22sid%22%3A%22s1602%22%2C%22hp%22%3A1%7D%5D%7D%7D%7D%2C%22user%22%3A%7B%22eids%22%3A%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%227f1032e4-8d41-4e93-8115-b37a1083bc61%22%7D%5D%7D%5D%7D%2C%22regs%22%3A%7B%22ext%22%3A%7B%22us_privacy%22%3A%221---%22%7D%7D%7D
200 OK 37 B URL HTTP/2 htlb.casalemedia.com/openrtb/pbjs?s=775312&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%2225537680056e23b%22%2C%22site%22%3A%7B%22ref%22%3A%22https%3A%2F%2Fwww.google.com%2F%22%2C%22page%22%3A%22https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F%22%2C%22domain%22%3A%22earnme.club%22%2C%22publisher%22%3A%7B%22domain%22%3A%22earnme.club%22%7D%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22mfu%22%3A0%2C%22bu%22%3A1%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A1%2C%22ren%22%3Afalse%2C%22version%22%3A%227.15.0%22%2C%22userIds%22%3A%5B%5D%2C%22url%22%3A%22https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F%22%2C%22tmax%22%3A3000%2C%22syncsPerBidder%22%3A5%2C%22fpd%22%3Atrue%2C%22pbadslot%22%3A%22%2F22181265%2Femc_300v_2%22%2C%22adunitcode%22%3A%222faf4135-4880-48d9-9db1-af7d23d3aa1e%22%2C%22divId%22%3A%222faf4135-4880-48d9-9db1-af7d23d3aa1e%22%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%2226e112bf881e4a4%22%2C%22banner%22%3A%7B%22topframe%22%3A1%2C%22format%22%3A%5B%7B%22w%22%3A300%2C%22h%22%3A250%2C%22ext%22%3A%7B%22siteID%22%3A%22775312%22%2C%22sid%22%3A%22300x250%22%2C%22fl%22%3A%22p%22%7D%7D%2C%7B%22w%22%3A336%2C%22h%22%3A280%2C%22ext%22%3A%7B%22siteID%22%3A%22775312%22%2C%22sid%22%3A%22336x280%22%2C%22fl%22%3A%22p%22%7D%7D%5D%2C%22pos%22%3A3%7D%2C%22ext%22%3A%7B%22dfp_ad_unit_code%22%3A%22%2F22181265%2Femc_300v_2%22%2C%22gpid%22%3A%22%2F22181265%2Femc_300v_2%22%7D%2C%22bidfloor%22%3A0.01%2C%22bidfloorcur%22%3A%22USD%22%7D%5D%2C%22at%22%3A1%2C%22source%22%3A%7B%22ext%22%3A%7B%22schain%22%3A%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22adapex.io%22%2C%22sid%22%3A%22s1602%22%2C%22hp%22%3A1%7D%5D%7D%7D%7D%2C%22user%22%3A%7B%22eids%22%3A%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%227f1032e4-8d41-4e93-8115-b37a1083bc61%22%7D%5D%7D%5D%7D%2C%22regs%22%3A%7B%22ext%22%3A%7B%22us_privacy%22%3A%221---%22%7D%7D%7D
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 14d72a2324b9b264d972d081e34f710d
09adc008843d332bec6f62645bda6c77307b277e
9bfa2a303ef57ee2bcbf3784fb7df4046a1638d016bc5679d253e094e7fd1892
GET /openrtb/pbjs?s=775312&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%2225537680056e23b%22%2C%22site%22%3A%7B%22ref%22%3A%22https%3A%2F%2Fwww.google.com%2F%22%2C%22page%22%3A%22https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F%22%2C%22domain%22%3A%22earnme.club%22%2C%22publisher%22%3A%7B%22domain%22%3A%22earnme.club%22%7D%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22mfu%22%3A0%2C%22bu%22%3A1%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A1%2C%22ren%22%3Afalse%2C%22version%22%3A%227.15.0%22%2C%22userIds%22%3A%5B%5D%2C%22url%22%3A%22https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F%22%2C%22tmax%22%3A3000%2C%22syncsPerBidder%22%3A5%2C%22fpd%22%3Atrue%2C%22pbadslot%22%3A%22%2F22181265%2Femc_300v_2%22%2C%22adunitcode%22%3A%222faf4135-4880-48d9-9db1-af7d23d3aa1e%22%2C%22divId%22%3A%222faf4135-4880-48d9-9db1-af7d23d3aa1e%22%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%2226e112bf881e4a4%22%2C%22banner%22%3A%7B%22topframe%22%3A1%2C%22format%22%3A%5B%7B%22w%22%3A300%2C%22h%22%3A250%2C%22ext%22%3A%7B%22siteID%22%3A%22775312%22%2C%22sid%22%3A%22300x250%22%2C%22fl%22%3A%22p%22%7D%7D%2C%7B%22w%22%3A336%2C%22h%22%3A280%2C%22ext%22%3A%7B%22siteID%22%3A%22775312%22%2C%22sid%22%3A%22336x280%22%2C%22fl%22%3A%22p%22%7D%7D%5D%2C%22pos%22%3A3%7D%2C%22ext%22%3A%7B%22dfp_ad_unit_code%22%3A%22%2F22181265%2Femc_300v_2%22%2C%22gpid%22%3A%22%2F22181265%2Femc_300v_2%22%7D%2C%22bidfloor%22%3A0.01%2C%22bidfloorcur%22%3A%22USD%22%7D%5D%2C%22at%22%3A1%2C%22source%22%3A%7B%22ext%22%3A%7B%22schain%22%3A%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22adapex.io%22%2C%22sid%22%3A%22s1602%22%2C%22hp%22%3A1%7D%5D%7D%7D%7D%2C%22user%22%3A%7B%22eids%22%3A%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%227f1032e4-8d41-4e93-8115-b37a1083bc61%22%7D%5D%7D%5D%7D%2C%22regs%22%3A%7B%22ext%22%3A%7B%22us_privacy%22%3A%221---%22%7D%7D%7D HTTP/1.1
Host: htlb.casalemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:25 GMT
content-type: application/json
content-length: 37
cf-ray: 7567c211be80fabc-OSL
access-control-allow-origin: https://earnme.club
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
access-control-allow-credentials: true
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AI%2FL%2B2lI5isJS9SsQLReTRgvyoObjLtxnxw2v%2FgXEBfQp11q9vWBFI41dsryK%2FZo%2FodyJMf1PmC%2FDA5r3SJtyE30m0GxSVz%2FfkejRfUa88XztQ%2By4BAMjQ%2BP9I%2B7CkBsfZZDfPhR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
digikulture-d.openx.net/w/1.0/arj?ju=https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F&ch=UTF-8&res=1280x1024x24&ifr=false&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=6dd107a4-12cb-44ee-8516-42f8944d3cce&nocache=1665157465756&us_privacy=1---&pubcid=7f1032e4-8d41-4e93-8115-b37a1083bc61&schain=1.0%2C1!adapex.io%2Cs1602%2C1%2C%2C%2C&aus=300x250%2C336x280&divids=2faf4135-4880-48d9-9db1-af7d23d3aa1e&aucs=%252F22181265%252Femc_300v_2&auid=556580798&aumfs=10
200 OK 79 B URL HTTP/2 digikulture-d.openx.net/w/1.0/arj?ju=https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F&ch=UTF-8&res=1280x1024x24&ifr=false&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=6dd107a4-12cb-44ee-8516-42f8944d3cce&nocache=1665157465756&us_privacy=1---&pubcid=7f1032e4-8d41-4e93-8115-b37a1083bc61&schain=1.0%2C1!adapex.io%2Cs1602%2C1%2C%2C%2C&aus=300x250%2C336x280&divids=2faf4135-4880-48d9-9db1-af7d23d3aa1e&aucs=%252F22181265%252Femc_300v_2&auid=556580798&aumfs=10
IP
File type JSON data\012- , ASCII text
Hash 0700f66a99197efe491656fa6e5111d4
20f5d36346407994e54273d2de54102a3a7b7486
3f275e589b057c0fc4eb529fe44d68a4a85ee46c2abdaab90560e8cd69ce7653
GET /w/1.0/arj?ju=https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F&ch=UTF-8&res=1280x1024x24&ifr=false&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=6dd107a4-12cb-44ee-8516-42f8944d3cce&nocache=1665157465756&us_privacy=1---&pubcid=7f1032e4-8d41-4e93-8115-b37a1083bc61&schain=1.0%2C1!adapex.io%2Cs1602%2C1%2C%2C%2C&aus=300x250%2C336x280&divids=2faf4135-4880-48d9-9db1-af7d23d3aa1e&aucs=%252F22181265%252Femc_300v_2&auid=556580798&aumfs=10 HTTP/1.1
Host: digikulture-d.openx.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept, Accept-Encoding
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Fri, 07 Oct 2022 15:44:25 GMT
content-type: application/json
content-length: 79
content-encoding: gzip
cache-control: private, max-age=0, no-cache
access-control-allow-origin: https://earnme.club
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
prebid.a-mo.net/a/c
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 939
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://earnme.club
cache-control: max-age=0, private, must-revalidate
date: Fri, 07 Oct 2022 15:44:25 GMT
server: envoy
vary: origin, Accept-Encoding
x-nbr: 8
x-envoy-upstream-service-time: 1
X-Firefox-Spdy: h2
onetag-sys.com/prebid-request
200 OK 41 B URL HTTP/2 onetag-sys.com/prebid-request
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 1c15203d1319c02fe2a06d78bc45eccf
40386992654bdda331c8f6eb21ac79de396119ee
cc81a9c5e7147dba347b0ffd34f64e9a7c40f25782569fec5c3fc68b4017badb
POST /prebid-request HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1365
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://earnme.club
access-control-allow-headers: content-type, origin, referer, user-agent
access-control-allow-credentials: true
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
cache-control: no-transform, no-cache
content-type: application/json
content-encoding: gzip
content-length: 41
strict-transport-security: max-age=15552000
X-Firefox-Spdy: h2
player.avplayer.com/script/2/v/avcplayer.js
200 OK 61 kB URL HTTP/2 player.avplayer.com/script/2/v/avcplayer.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 9dff0335699f04080269947f40c366ae
8447df4f8b168d9c506630f96ef95002c2c6eb28
157b5912ad26a879f38d0dafb1fce2def6df3168a08f991d6203463375fa32fc
GET /script/2/v/avcplayer.js HTTP/1.1
Host: player.avplayer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 03 Mar 2022 17:18:44 GMT
etag: "9dff0335699f04080269947f40c366ae"
x-guploader-uploadid: ADPycdtu-4lkKnewYrLZAQ6C3FYocqKyAEpTHAcTl1fhfCPCh7vxR-IJqbD_5jBst3P2Kl4LF2YOsUpbgaREFcUSdQ
server: UploadServer
x-goog-generation: 1646327924579580
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 61326
content-type: application/javascript
content-encoding: gzip
content-language: en
x-goog-hash: crc32c=DITkQg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 61326
cache-control: public, max-age=300
expires: Fri, 07 Oct 2022 15:49:25 GMT
date: Fri, 07 Oct 2022 15:44:25 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 012df5662d5fc545791e9eefadda1478
465c28963112bbe569b42b57738dd972885fb934
00daf1fa3c68aabad86daf116a69958da6654c858cca5e4bea0967cd458f9621
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3518
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:25 GMT
Last-Modified: Fri, 07 Oct 2022 14:45:47 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 012df5662d5fc545791e9eefadda1478
465c28963112bbe569b42b57738dd972885fb934
00daf1fa3c68aabad86daf116a69958da6654c858cca5e4bea0967cd458f9621
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3518
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:25 GMT
Last-Modified: Fri, 07 Oct 2022 14:45:47 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
status.geotrust.com/
200 OK 471 B IP
Hash 1faceebf0bda1deff736a63f0f78bfa9
fec3dbbec7d6e4835c06f8273ab50b40e7fb6986
8a57c98bcfc83268f93fb7caf5616dcd884e1ad87accdafd912fdcefbf88a01d
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2963
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:26 GMT
Last-Modified: Fri, 07 Oct 2022 14:55:04 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
c2shb.pubgw.yahoo.com/bidRequest
200 OK 0 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-openrtb-version
Referer: https://earnme.club/
Origin: https://earnme.club
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:26 GMT
content-length: 0
server: ATS/9.1.10.25
access-control-allow-origin: https://earnme.club
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-headers: X-Requested-With,Content-Type,X-Openrtb-Version
access-control-allow-credentials: true
access-control-max-age: 600
age: 0
X-Firefox-Spdy: h2
c2shb.pubgw.yahoo.com/bidRequest
200 OK 0 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-openrtb-version
Referer: https://earnme.club/
Origin: https://earnme.club
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:26 GMT
content-length: 0
server: ATS/9.1.10.25
access-control-allow-origin: https://earnme.club
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-headers: X-Requested-With,Content-Type,X-Openrtb-Version
access-control-allow-credentials: true
access-control-max-age: 600
age: 0
X-Firefox-Spdy: h2
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 6644c19967401c08904b6b333a18fca6
44afea010ae7935ee74f088ee3d5b35a3d695622
9153be80f176b59d8f4b0c5877e23f606ddf1fe4d764dc7724c558879a74a210
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 1226
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:26 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://earnme.club
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 08db64699c0491296f50ae9995189e32
07a56553298ce3d6e6fbb071052c0427966b3412
62eeee32960c38a75d510cecd9940c8c761a2f83e3e236ced256303f93be48f3
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 1227
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:26 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://earnme.club
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 146 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 6d30a566588d6b02563bb0d13895998c
0206122b4ae68224a88c3f92eec007c1ab2a0a19
ac0c45ac78fd1f8d1a7ae4a618828030d0830bf634188767cdde4093d970d1cb
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 727
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:26 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 146
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://earnme.club
AN-X-Request-Uuid: f7234b29-2c9a-4e84-827f-1327718fdfdb
Set-Cookie: icu=ChgI3uM8EAoYASABKAEw2pKBmgY4AUABSAEQ2pKBmgYYAA..; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 05-Jan-2023 15:44:26 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=8295616117045794381; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 05-Jan-2023 15:44:26 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ocsp.sectigo.com/
200 OK 472 B IP
Hash fb47e07a4eebcf53bf539e33c53ad5fd
a70a8019b57e29f9abc388047062065e31a7bafe
15963bddadf560a751bfa3670a6afed815dbe1084778ac1ab56da16304afc589
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 15:44:26 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 04 Oct 2022 19:45:29 GMT
Expires: Tue, 11 Oct 2022 19:45:28 GMT
Etag: "a70a8019b57e29f9abc388047062065e31a7bafe"
Cache-Control: max-age=359461,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7567c211efd2b50b-OSL
aax-dtb-cf.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F&pr=https%3A%2F%2Fwww.google.com%2F&pid=CJCyONjdj0x8g&cb=0&ws=1280x939&v=22.10.32118&t=2000&slots=%5B%7B%22sd%22%3A%222faf4135-4880-48d9-9db1-af7d23d3aa1e%22%2C%22s%22%3A%5B%22300x250%22%2C%22336x280%22%5D%2C%22sn%22%3A%22%2F22181265%2Femc_300v_2%22%7D%5D&schain=1.0%2C1!adapex.io%2Cs1602%2C1%2C%2C%2C&pubid=1ad7261b-91ea-4b6f-b9e9-b83522205b75&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
200 OK 188 B URL HTTP/2 aax-dtb-cf.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F&pr=https%3A%2F%2Fwww.google.com%2F&pid=CJCyONjdj0x8g&cb=0&ws=1280x939&v=22.10.32118&t=2000&slots=%5B%7B%22sd%22%3A%222faf4135-4880-48d9-9db1-af7d23d3aa1e%22%2C%22s%22%3A%5B%22300x250%22%2C%22336x280%22%5D%2C%22sn%22%3A%22%2F22181265%2Femc_300v_2%22%7D%5D&schain=1.0%2C1!adapex.io%2Cs1602%2C1%2C%2C%2C&pubid=1ad7261b-91ea-4b6f-b9e9-b83522205b75&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
IP
File type ASCII text, with no line terminators
Hash f38e2e93465c4b713343e4f8c5c62f1c
627adae1da883900d9d640a94827ffa0b5e43248
562072be29b637e58e36ffc7037d6ac245b24b692f1363cd3896c2fcf81d3c1d
GET /e/dtb/bid?src=600&u=https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F&pr=https%3A%2F%2Fwww.google.com%2F&pid=CJCyONjdj0x8g&cb=0&ws=1280x939&v=22.10.32118&t=2000&slots=%5B%7B%22sd%22%3A%222faf4135-4880-48d9-9db1-af7d23d3aa1e%22%2C%22s%22%3A%5B%22300x250%22%2C%22336x280%22%5D%2C%22sn%22%3A%22%2F22181265%2Femc_300v_2%22%7D%5D&schain=1.0%2C1!adapex.io%2Cs1602%2C1%2C%2C%2C&pubid=1ad7261b-91ea-4b6f-b9e9-b83522205b75&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1
Host: aax-dtb-cf.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
content-length: 188
server: Server
date: Fri, 07 Oct 2022 15:44:26 GMT
x-amz-rid: KG2T56A7AM3G06YE38JC
access-control-allow-origin: https://earnme.club
access-control-allow-credentials: true
timing-allow-origin: *
strict-transport-security: max-age=47474747; includeSubDomains; preload
vary: Accept-Encoding,User-Agent
x-cache: Miss from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4-UfQwDjoQ2bonUvu14Jga8uexesu3rZ2ekTVSGVdHjtTCV3lKLUpg==
X-Firefox-Spdy: h2
prebid.adnxs.com/pbs/v1/openrtb2/auction
200 OK 5.8 kB URL HTTP/1.1 prebid.adnxs.com/pbs/v1/openrtb2/auction
IP
File type JSON data\012- HTML document, ASCII text, with very long lines (8118)
Hash c3d5465314064ffcf07f6bf5ea483a14
37592719dfd9bb785e23266ff25b42f9265252d4
e00434934314a0a110b26b6a6439ddd8b7179659d5ca39d90d8c2d4e683bcb1f
POST /pbs/v1/openrtb2/auction HTTP/1.1
Host: prebid.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1816
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:26 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://earnme.club
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Pragma: no-cache
Vary: Accept-Encoding, Origin
X-Prebid: pbs-go/0.227.2
Content-Encoding: gzip
player.avplayer.com/script/2/2.55/libs/hls.min.js
200 OK 72 kB URL HTTP/2 player.avplayer.com/script/2/2.55/libs/hls.min.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 7888b98658e8cef4a98786556ccdab66
d52a58a8e2463dba71947783a8485dcd023100d1
ea7bca216f10e44bd3b4febb9f5a6e6e2f72059b55441e2823ceb3a2be03e161
GET /script/2/2.55/libs/hls.min.js HTTP/1.1
Host: player.avplayer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 10 Jan 2021 14:52:52 GMT
etag: "7888b98658e8cef4a98786556ccdab66"
x-guploader-uploadid: ADPycdvb01YBBQDWpLAX_FuV-7DSoxLYAzI5YTOUillnczoaCnX1-6OEkBGHdpMa0ucqpIwdSEU02m8DzzX8XijUDkQ
x-goog-generation: 1610290372874389
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 71831
content-type: application/javascript
content-encoding: gzip
content-language: en
x-goog-hash: crc32c=vMWMIg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 71831
server: UploadServer
cache-control: public, max-age=300
expires: Fri, 07 Oct 2022 15:49:26 GMT
date: Fri, 07 Oct 2022 15:44:26 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.playstream.media/logo.png
200 OK 1.3 kB URL HTTP/2 cdn.playstream.media/logo.png
IP
File type PNG image data, 32 x 26, 8-bit/color RGBA, non-interlaced\012- data
Hash b0fb81e9e278d867bb73f8a6cde236f2
ca10201696f69919ff9541bb549de2d0b065eb8e
875a318ebf906866ab16eb2e848924b12c38f7d33ae1c6e72244aba92faa9b7b
GET /logo.png HTTP/1.1
Host: cdn.playstream.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:26 GMT
content-length: 1265
content-type: image/png
last-modified: Tue, 19 Jan 2021 07:48:16 GMT
accept-ranges: bytes
server: nginx/1.17.10
etag: "60068ec0-4f1"
cache-control: max-age=315360000
access-control-allow-origin: *
x-hw: 1665157466.cds219.sk1.hn,1665157466.cds233.sk1.c
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash bca92f383af2d5d4e8b51cc93c18ddd3
52c8028617577ddacc03741af2d98b0032d8ed61
5293690a525e66a5e5cc246e7a947e4d97b0f610bb5f4a9a605862d5ac1a9b53
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 15:44:26 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 04 Oct 2022 13:56:49 GMT
Expires: Tue, 11 Oct 2022 13:56:48 GMT
Etag: "52c8028617577ddacc03741af2d98b0032d8ed61"
Cache-Control: max-age=338541,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7567c21379d1b50b-OSL
track1.aniview.com/track?pid=62176a72a06fe80ba569d18f&cid=6278fd47e6b0901a49776895&cb=1665157465900&r=earnme.club&stagid=62790805abc41c4450002684&stplid=6278f4f0a7dd573d85421cad&d35=&d65=&e=playerLoaded
200 OK 0 B URL HTTP/2 track1.aniview.com/track?pid=62176a72a06fe80ba569d18f&cid=6278fd47e6b0901a49776895&cb=1665157465900&r=earnme.club&stagid=62790805abc41c4450002684&stplid=6278f4f0a7dd573d85421cad&d35=&d65=&e=playerLoaded
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track?pid=62176a72a06fe80ba569d18f&cid=6278fd47e6b0901a49776895&cb=1665157465900&r=earnme.club&stagid=62790805abc41c4450002684&stplid=6278f4f0a7dd573d85421cad&d35=&d65=&e=playerLoaded HTTP/1.1
Host: track1.aniview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:26 GMT
content-length: 0
cache-control: max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
grid.bidswitch.net/hbjson
200 OK 49 B URL HTTP/2 grid.bidswitch.net/hbjson
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 196a30ef983b9358c3e26344c941f3e3
a858307acb699853c4c14ffb3a2bcf294a85b5a6
3d9efc746a441d3fa1463f48a730f1d8ca1f8961bbabba1948cf7a42c92c0a6a
POST /hbjson HTTP/1.1
Host: grid.bidswitch.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 816
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:26 GMT
content-type: application/json
content-length: 49
access-control-allow-credentials: true
access-control-allow-origin: https://earnme.club
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 31e440ccd993c4ee793f50511c2ac7c4
4380327d50b7001d158aee05a57c6078e57c94e4
65d8a97f6df1e110333a01d1f6dcb4982db7bb4b1c5f3f1498fafa716e250c0f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "65D8A97F6DF1E110333A01D1F6DCB4982DB7BB4B1C5F3F1498FAFA716E250C0F"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7846
Expires: Fri, 07 Oct 2022 17:55:12 GMT
Date: Fri, 07 Oct 2022 15:44:26 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 312 B IP
Hash f74c27d0f1b4a4dd7f8ee2b10a846acc
dd592ca806cc6e656607926e0d8fbaee04ae635f
e1f081ff60943f0b6eca6017670de2ef36767e50cf8d8376678bb37e2d53346b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2503
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:26 GMT
Last-Modified: Fri, 07 Oct 2022 15:02:43 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 312
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 31e440ccd993c4ee793f50511c2ac7c4
4380327d50b7001d158aee05a57c6078e57c94e4
65d8a97f6df1e110333a01d1f6dcb4982db7bb4b1c5f3f1498fafa716e250c0f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "65D8A97F6DF1E110333A01D1F6DCB4982DB7BB4B1C5F3F1498FAFA716E250C0F"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7846
Expires: Fri, 07 Oct 2022 17:55:12 GMT
Date: Fri, 07 Oct 2022 15:44:26 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 31e440ccd993c4ee793f50511c2ac7c4
4380327d50b7001d158aee05a57c6078e57c94e4
65d8a97f6df1e110333a01d1f6dcb4982db7bb4b1c5f3f1498fafa716e250c0f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "65D8A97F6DF1E110333A01D1F6DCB4982DB7BB4B1C5F3F1498FAFA716E250C0F"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7846
Expires: Fri, 07 Oct 2022 17:55:12 GMT
Date: Fri, 07 Oct 2022 15:44:26 GMT
Connection: keep-alive
flashnetic.com/r/p.html?f=mnexemq&e=1978760078767
200 OK 9.6 kB URL HTTP/2 flashnetic.com/r/p.html?f=mnexemq&e=1978760078767
IP
Hash 8fea454dc2536ef55878b6ef73a10c84
c6e3b2510ad3bfb26bfcd011b5ff1113cb627a46
1d06fc85bf799f3196d79644471e2528588b4637857be2bc61c3cf2a31ab7f97
GET /r/p.html?f=mnexemq&e=1978760078767 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: u5rdhxj1lf_wSCp7nw9z5pW6dtBV9pdpJ6cxwzs9qJi3fwH9hemhew==
age: 12998
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ca4df15-4ecd-467c-a658-2352fca9a8ff.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ca4df15-4ecd-467c-a658-2352fca9a8ff.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 16339989f5c6c229a3dcc0ed1e52032f
a1ea26d6e4eb4a72cc8c87100b40035dab69d285
16703f888ee6f974bb89e1c4c16a75186b31b64130abcd1a3bcd3741159d912c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ca4df15-4ecd-467c-a658-2352fca9a8ff.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13437
x-amzn-requestid: ec801fbc-c339-46ce-ac5f-18d064e5ef21
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zmhi_HdeoAMFyOQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f4946-02b52b770e6e76cf52b26e47;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:31:50 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: Iesqk_XbGiZE-n3mTa1_1WtlXiyEqz-4qfyt3_609O1eujdLcFu3zA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 ece5d4a731ece5ff46c564ab2b946ede.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 21:47:25 GMT
age: 64621
etag: "a1ea26d6e4eb4a72cc8c87100b40035dab69d285"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4cfb29b1-34eb-4ec3-8390-1145a644534c.jpeg
200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4cfb29b1-34eb-4ec3-8390-1145a644534c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 06283ec49d3981b60b28731fd8a9940d
10c0d991f7ad234557792c175fdbf81e3356416a
0d8d932cd46fa377ce3dfe5fe1287ab1cd0daad0ef52a42baad2462d10e5a80f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4cfb29b1-34eb-4ec3-8390-1145a644534c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6052
x-amzn-requestid: 6c8abd32-7499-4636-bf8a-3baaa88bf1ff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zmhi-HWOoAMFalA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f4946-464364630dd2dbfa0d69f6f5;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:31:50 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: 4EEoZVMtDaWUiCVvGW_0w4BSa1f1KDudnzPEoSIVF_ckE9MdhiflOw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 bd6f70221217681265382902c6157c76.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 21:45:54 GMT
age: 64712
etag: "10c0d991f7ad234557792c175fdbf81e3356416a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=jsngbosj&e=1978760078767
200 OK 11 kB URL HTTP/2 flashnetic.com/r/p.html?f=jsngbosj&e=1978760078767
IP
Hash ad19ea9f2a066a01233d67edb970fa4b
ca7849cdc9ea9561bcc0e32335c021021d84c4de
7cd01f5152f1988d2774c81e66062563698c2406a46af1ec78e93dd061077b71
GET /r/p.html?f=jsngbosj&e=1978760078767 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zejaBDLmmLWqeQfaiq-6UKT-V43I-q-Ux8O48MbxYqjPgKWQYy_c7g==
age: 12998
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7758caee-c969-46dd-96d0-b4402437781d.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7758caee-c969-46dd-96d0-b4402437781d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4572451a09430ca7a9203f14ddc035ba
46e17c44fba23988d7a9d9832c411ba2810136c3
fa54e73c4b32d8e109504ebcd46e4316de8143f44b7eae20a44ba63d14a6f24b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7758caee-c969-46dd-96d0-b4402437781d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8445
x-amzn-requestid: 7d295b3b-29d6-4b2e-8314-c9055d1def80
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zmju5FxwoAMFeQw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f4cc5-3f58c18b1159ad512c60422b;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:46:45 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: DC1ECXhkAhfdrU8ZyMhhDdwydsq4PQfzzGOPd-REjCkCsDbXQLnLiA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 34c44cb7892e57a3b6c51812bcf68ee4.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 22:08:57 GMT
etag: "46e17c44fba23988d7a9d9832c411ba2810136c3"
content-type: image/jpeg
age: 63329
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0b7bc4b-b79a-4bab-9bec-87695d757b08.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0b7bc4b-b79a-4bab-9bec-87695d757b08.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 53b7ffdc3799e0ac7a225145242579ef
c47f0525fe5354ee13fe63c0ec31f0f826a58005
4bb518afc9b3e7bfb976d343e46b306155834adbe71fa35b0d6f509959f78aca
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0b7bc4b-b79a-4bab-9bec-87695d757b08.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10987
x-amzn-requestid: c2ab1012-1afd-4d74-8114-97977b43da24
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZgCHwGdGoAMFvyg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633cb097-3237927a0c1e081d22c902f7;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 22:15:51 GMT
x-amz-cf-pop: SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: JYDg0-KelCPr__4bKtpARLrwiE1CHGICcFI6I9_TFCMcmESbykNhXQ==
via: 1.1 3dde68f1f52282c9e1ee336d97233b0a.cloudfront.net (CloudFront), 1.1 27f6faf9790b5a2877fb528fa31f7922.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 22:08:50 GMT
age: 63336
etag: "c47f0525fe5354ee13fe63c0ec31f0f826a58005"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.28.0&cb=94558794960
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.28.0&cb=94558794960
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.28.0&cb=94558794960 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 486
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:26 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://earnme.club
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.15.0&cb=78936735947&lsavail=1
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.15.0&cb=78936735947&lsavail=1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=7.15.0&cb=78936735947&lsavail=1 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 732
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:26 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://earnme.club
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash bba80f38fa67734d6edf4fbc51e46cda
a11c1b4cebf5d7c486f7cd640ea72eab2326b0f2
d1fef1e84b2e2a8973103d9adcf67dc46310de68f01ea6844695a0d220fd0a23
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3063
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:26 GMT
Last-Modified: Fri, 07 Oct 2022 14:53:23 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash ca96e27a22dedbe4a70bcefbc15646f5
aedff73cf8f10da82f2c103e452da08d913b27c9
7de88479e2088db432ff58792722eadf825c851e5a07de77bd9d9c2304d464bb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6115
Cache-Control: max-age=126626
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:26 GMT
Etag: "633f7d19-1d7"
Expires: Sun, 09 Oct 2022 02:54:52 GMT
Last-Modified: Fri, 07 Oct 2022 01:12:57 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 0c3dff426066188063acd21cf535bfca
0669992f383420beb0ff92109ae7e40c7bf4e132
4467b54009e04c802d8f213250552f69283a818de7a08214dd6a68ccebe7d946
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1870
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:26 GMT
Last-Modified: Fri, 07 Oct 2022 15:13:16 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ib.adnxs.com/ut/v3/prebid
200 OK 144 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash fa7da205a99d3957e030b33a5b5943d5
09882e9f454c6eefef9d9a007c7f114125840b34
24f878356bf2503d90ebeb4fff6444349bc893670b43e3ccbb557829ac580ff5
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 689
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:26 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 144
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://earnme.club
AN-X-Request-Uuid: 466ffd28-a084-474b-8e98-9c274ea75248
Set-Cookie: icu=ChkIv46FARAKGAEgASgBMNqSgZoGOAFAAUgBENqSgZoGGAA.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 05-Jan-2023 15:44:26 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=2155590155141008257; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 05-Jan-2023 15:44:26 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.28.0&cb=7217952347
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.28.0&cb=7217952347
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.28.0&cb=7217952347 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 494
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:25 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://earnme.club
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 140 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 354aeccb860aea1d221c4e791e5ddbf2
61135ce37c78e23d7e05e99cc3716be7af9d0718
65c60b4b696e68933f98ced9a1d25715e58f127fd4cce9771ee7c14e6e2b79a1
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 695
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:26 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 140
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://earnme.club
AN-X-Request-Uuid: d4214702-3de8-46fa-aa39-426fe45e9182
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
track1.avplayer.com/ctrack?pt=2&cmid=&cwid=&cvid=&pid=62176a72a06fe80ba569d18f&r=earnme.club&sn=&cd1=&cd2=&cd3=&app=&wi=640&he=361&test=&vi=39&e=cpll&cb=1665157466205
200 OK 0 B URL HTTP/2 track1.avplayer.com/ctrack?pt=2&cmid=&cwid=&cvid=&pid=62176a72a06fe80ba569d18f&r=earnme.club&sn=&cd1=&cd2=&cd3=&app=&wi=640&he=361&test=&vi=39&e=cpll&cb=1665157466205
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ctrack?pt=2&cmid=&cwid=&cvid=&pid=62176a72a06fe80ba569d18f&r=earnme.club&sn=&cd1=&cd2=&cd3=&app=&wi=640&he=361&test=&vi=39&e=cpll&cb=1665157466205 HTTP/1.1
Host: track1.avplayer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:26 GMT
content-length: 0
cache-control: max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
prebid-eu.creativecdn.com/bidder/prebid/bids
204 No Content 0 B URL HTTP/2 prebid-eu.creativecdn.com/bidder/prebid/bids
IP
ASN #204995 Rtb House S.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bidder/prebid/bids HTTP/1.1
Host: prebid-eu.creativecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 534
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 07 Oct 2022 15:44:26 GMT
access-control-allow-origin: https://earnme.club
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-max-age: 3600
vary: Origin
X-Firefox-Spdy: h2
prebid-eu.creativecdn.com/bidder/prebid/bids
204 No Content 0 B URL HTTP/2 prebid-eu.creativecdn.com/bidder/prebid/bids
IP
ASN #204995 Rtb House S.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bidder/prebid/bids HTTP/1.1
Host: prebid-eu.creativecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 530
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Fri, 07 Oct 2022 15:44:26 GMT
access-control-allow-origin: https://earnme.club
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-max-age: 3600
vary: Origin
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 610
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Oct 2022 15:44:26 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://earnme.club
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-LY1N2M6E7Y>m=2oea50&_p=834729894&cid=651034771.1665157466&ul=en-us&sr=1280x1024&_s=1&sid=1665157465&sct=1&seg=0&dl=https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F&dr=https%3A%2F%2Fwww.google.com%2F&dt=Airtel%20Starts%205G%20Trial%20%E2%80%93%20Tech%20One&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-LY1N2M6E7Y>m=2oea50&_p=834729894&cid=651034771.1665157466&ul=en-us&sr=1280x1024&_s=1&sid=1665157465&sct=1&seg=0&dl=https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F&dr=https%3A%2F%2Fwww.google.com%2F&dt=Airtel%20Starts%205G%20Trial%20%E2%80%93%20Tech%20One&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-LY1N2M6E7Y>m=2oea50&_p=834729894&cid=651034771.1665157466&ul=en-us&sr=1280x1024&_s=1&sid=1665157465&sct=1&seg=0&dl=https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F&dr=https%3A%2F%2Fwww.google.com%2F&dt=Airtel%20Starts%205G%20Trial%20%E2%80%93%20Tech%20One&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://earnme.club
date: Fri, 07 Oct 2022 15:44:26 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 610
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Oct 2022 15:44:26 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://earnme.club
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash 16686ceabf98449a0b0feedb0aad47e0
523cb77001ef131b194ceba76a08c889039dd983
b2b4e1f3c83f5e63bae3bf327bcb277db7cf567b6b78403ad86c218da5b5785d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3526
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:26 GMT
Last-Modified: Fri, 07 Oct 2022 14:45:40 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 312
ocsp.digicert.com/
200 OK 312 B IP
Hash 16686ceabf98449a0b0feedb0aad47e0
523cb77001ef131b194ceba76a08c889039dd983
b2b4e1f3c83f5e63bae3bf327bcb277db7cf567b6b78403ad86c218da5b5785d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5760
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:26 GMT
Last-Modified: Fri, 07 Oct 2022 14:08:27 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 312
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F&tg_i.page=https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F&tg_i.domain=earnme.club&tg_i.pbadslot=%2F21671350435%2C22687820958%2F300x250-earnme.club&tk_flint=pbjs_lite_v6.28.0&x_source.tid=3f370e92-ce0e-4f80-b0a2-8b9943be78b6&l_pb_bid_id=860ff52f04437a&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.2200461297066616
200 OK 440 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F&tg_i.page=https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F&tg_i.domain=earnme.club&tg_i.pbadslot=%2F21671350435%2C22687820958%2F300x250-earnme.club&tk_flint=pbjs_lite_v6.28.0&x_source.tid=3f370e92-ce0e-4f80-b0a2-8b9943be78b6&l_pb_bid_id=860ff52f04437a&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.2200461297066616
IP
File type JSON data\012- , ASCII text, with very long lines (440), with no line terminators
Hash 95b2d68d5c7afe95c00449ff9673f135
e79828a5f71e1c1f740f5babd721679a63e6683c
7dcf7ab26934a2026fc15730001ed4bee419b2df0c802188b8cbfa6f884dfa77
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F&tg_i.page=https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F&tg_i.domain=earnme.club&tg_i.pbadslot=%2F21671350435%2C22687820958%2F300x250-earnme.club&tk_flint=pbjs_lite_v6.28.0&x_source.tid=3f370e92-ce0e-4f80-b0a2-8b9943be78b6&l_pb_bid_id=860ff52f04437a&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.2200461297066616 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Fri, 07 Oct 2022 15:44:26 GMT
Content-Type: application/json
Content-Length: 440
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://earnme.club
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8YNRG9K-15-LAA2; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:26 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|SDziDG3X/EjIQqf5SEnVNu9DtVM30fCg9e/wzbfbfdw1SSLyLRcRe3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:26 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
prg.smartadserver.com/prebid/v1
200 OK 522 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (969), with no line terminators
Hash 5dab0dd4c8af0ca739354c83e219e4e8
550bc92e8aa4e95dfc355ae76a18e9631e868d7f
ddcf1fc8c0fbb1ca22b24e2b0e771a4bc9b347b6a466d12d282ac1b5c7c56f72
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 397
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Fri, 07 Oct 2022 15:44:26 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://earnme.club
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Sat, 07 Oct 2023 15:44:26 GMT; domain=.smartadserver.com; path=/
vs=525642=5135984; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sat, 07 Oct 2023 15:44:26 GMT; domain=.smartadserver.com; path=/
pid=8311828746922684525; expires=Sat, 07 Oct 2023 15:44:26 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638007542667401654&o=1; expires=Sat, 08 Oct 2022 15:44:26 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Sat, 08 Oct 2022 15:44:26 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
prg.smartadserver.com/prebid/v1
200 OK 557 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (991), with no line terminators
Hash 1c53bdd5e527d76aa27ba4e9729dc69c
87fada8a9b33009b1ae0763eb463aedc7cfeb454
0f11833b9dac2147feb69c8eae1a9540dfe33405cb8cdf91108f23fd58a93131
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 399
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Fri, 07 Oct 2022 15:44:26 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://earnme.club
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Sat, 07 Oct 2023 15:44:26 GMT; domain=.smartadserver.com; path=/
vs=527999=5135984; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sat, 07 Oct 2023 15:44:26 GMT; domain=.smartadserver.com; path=/
pid=8751278071093719198; expires=Sat, 07 Oct 2023 15:44:26 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638007542667230951&o=1; expires=Sat, 08 Oct 2022 15:44:26 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Sat, 08 Oct 2022 15:44:26 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F&tg_i.page=https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F&tg_i.domain=earnme.club&tg_i.pbadslot=%2F21671350435%2C22687820958%2F300x250-earnme.club_._3&tk_flint=pbjs_lite_v6.28.0&x_source.tid=a988389f-a435-4ad9-b657-a2936189a238&l_pb_bid_id=8a295393b1d99b&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.3230029229576049
200 OK 444 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F&tg_i.page=https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F&tg_i.domain=earnme.club&tg_i.pbadslot=%2F21671350435%2C22687820958%2F300x250-earnme.club_._3&tk_flint=pbjs_lite_v6.28.0&x_source.tid=a988389f-a435-4ad9-b657-a2936189a238&l_pb_bid_id=8a295393b1d99b&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.3230029229576049
IP
File type JSON data\012- , ASCII text, with very long lines (444), with no line terminators
Hash 3c24d823bfafbd59f4899bfe5dda3649
775591829c812c3442e1799ac3f33638632c7efc
01860527334139879e46c2b1629fed17cdf3eb59cf32bac2865eb7f2d1824c4e
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F&tg_i.page=https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F&tg_i.domain=earnme.club&tg_i.pbadslot=%2F21671350435%2C22687820958%2F300x250-earnme.club_._3&tk_flint=pbjs_lite_v6.28.0&x_source.tid=a988389f-a435-4ad9-b657-a2936189a238&l_pb_bid_id=8a295393b1d99b&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.3230029229576049 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Fri, 07 Oct 2022 15:44:26 GMT
Content-Type: application/json
Content-Length: 444
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://earnme.club
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8YNRGBT-1O-BLNU; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:26 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qpr3c7H5KTFH+9DtVM30fCg9e/wzbfbfdw1SSLyLRcRe3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:26 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 70d931a444876be5c230b51638058ed3
ec72739202727066b6a52c8cdc632fcc89818739
55a7822826ec944cc364956257e5ccfa80b7467bb3a45d85d9ba669f05b5ba2f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 07 Oct 2022 15:44:27 GMT
Last-Modified: Fri, 07 Oct 2022 14:24:12 GMT
Server: ECS (nyb/1D2A)
X-Cache: Miss from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: tHn5LHBtzKJyNaBcrG-EBRC1MFg8M-1UvnA3a5LlNnVfTl3y6vkdYA==
Age: 4815
ams-pageview-public.s3.amazonaws.com/1x1-pixel.png?id=a56697b2617c
200 OK 68 B URL HTTP/1.1 ams-pageview-public.s3.amazonaws.com/1x1-pixel.png?id=a56697b2617c
IP
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /1x1-pixel.png?id=a56697b2617c HTTP/1.1
Host: ams-pageview-public.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 4DEISRn5ZPCOD2RdfCkZ3CPYicLN03ShQak2dIzhTVoqbg2UICX6ZRAN4JO8r9w3NM+V0pmPZBE=
x-amz-request-id: VD4KWNM35SNTFYGS
Date: Fri, 07 Oct 2022 15:44:28 GMT
Last-Modified: Mon, 26 Oct 2020 16:52:19 GMT
ETag: "91e42db1c66c0b276abf6234dc50b2eb"
Cache-Control: no-store
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 68
flashnetic.com/r/p.html?f=rvdxjzls&e=1732785387396
200 OK 2.8 kB URL HTTP/2 flashnetic.com/r/p.html?f=rvdxjzls&e=1732785387396
IP
Hash 40e11b898145720540c8aadd83e7dff8
b26982df5716a345d56e4d5b1441ad52a4dbf45d
7aaf4aca0760d943638601c163c46b787030435151ed0e41d471dd843f1270db
GET /r/p.html?f=rvdxjzls&e=1732785387396 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zfNvWan6drvvZTpRE8Gng8uvRldfeHzNBYlgAYWCCnQxrEWT2ebQiw==
age: 12998
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=apowufomp&e=1732785387396
200 OK 2.8 kB URL HTTP/2 flashnetic.com/r/p.html?f=apowufomp&e=1732785387396
IP
Hash 9e118fdc0607d611366e3e301501446b
9fd6d42dc60171930fc3bcf93d40ca000e438885
db6f03d6e9276a52e140a777fa9ccbb9c3788f66a6eb377e8c344039e975b2ac
GET /r/p.html?f=apowufomp&e=1732785387396 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fQHVCog6iaKxudcN_ZnuEbkCaNZJ0lMSpusfmKck6bRs5YU05pfmyw==
age: 12998
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=earnme.club
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=earnme.club
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=earnme.club HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 07 Oct 2022 15:44:27 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=earnme.club
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=earnme.club
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=earnme.club HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 07 Oct 2022 15:44:27 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=pfkslhvnmr&e=1732785387396
200 OK 2.8 kB URL HTTP/2 flashnetic.com/r/p.html?f=pfkslhvnmr&e=1732785387396
IP
Hash 40e11b898145720540c8aadd83e7dff8
b26982df5716a345d56e4d5b1441ad52a4dbf45d
7aaf4aca0760d943638601c163c46b787030435151ed0e41d471dd843f1270db
GET /r/p.html?f=pfkslhvnmr&e=1732785387396 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: EwpUEBvfONiCKVzFMhmwoa2Opj3IcWoCg97BavZwOylTO3zpWwueSw==
age: 12998
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=2022100301&st=env
200 OK 11 kB URL HTTP/2 pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=2022100301&st=env
IP
File type JSON data\012- , ASCII text, with very long lines (14587), with no line terminators
Hash cf32aac4f756e02af7876f9f30ba6105
2d7f9603ddf48492a85bb46e07ede55793ce4e7e
9820772c54e746837eae19bba0320997491159f424c93a15342ea37e1c929ca0
GET /getconfig/sodar?sv=200&tid=gpt&tv=2022100301&st=env HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 07 Oct 2022 15:44:27 GMT
server: cafe
cache-control: private
content-length: 11080
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ce36c23c3f1753dc192ed99a52bc5e0a.safeframe.googlesyndication.com/safeframe/1-0-38/html/container.html
200 OK 3.1 kB URL HTTP/2 ce36c23c3f1753dc192ed99a52bc5e0a.safeframe.googlesyndication.com/safeframe/1-0-38/html/container.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5835)
Hash 3fa5e95a358d660ddb3c45769ae1357f
5f6164fbaf8cfbccfd061b00ae48dedfc16bbcd9
d32f4b680031c0e11222eb17385aa9d3b11d2903b05bff34c3d4eb6292631137
GET /safeframe/1-0-38/html/container.html HTTP/1.1
Host: ce36c23c3f1753dc192ed99a52bc5e0a.safeframe.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 3108
date: Fri, 07 Oct 2022 15:44:27 GMT
expires: Sat, 07 Oct 2023 15:44:27 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Tue, 02 Mar 2021 20:17:03 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=sgcurxuaid&e=1732785387396
200 OK 2.3 kB URL HTTP/2 flashnetic.com/r/p.html?f=sgcurxuaid&e=1732785387396
IP
File type HTML document, ASCII text
Hash e7c6bf250f1f3988bb044a8ff21d6685
db36cddfb4a06c55f8391d502a75431a1399c25e
6534777851c35b7947ba280e06893c4ee1f885f46952dc985b6a0a74de7e3c7c
GET /r/p.html?f=sgcurxuaid&e=1732785387396 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SfrNF9Z-xOlF_Rm8cvBLulchzJaMYTeSTpVT8dnxk8N9VYQOeAnqGQ==
age: 12998
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_n-mediagrid_n-index_n-sharethrough_n-LoopMe_n-onetag_rbd_n-vmg_n-MediaNet_cnv&dcc=t
200 OK 64 B URL HTTP/1.1 aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_n-mediagrid_n-index_n-sharethrough_n-LoopMe_n-onetag_rbd_n-vmg_n-MediaNet_cnv&dcc=t
IP
File type HTML document, ASCII text
Hash be99f9f8ced5e5eb1f9721d861712f89
4291ee98f7ce20471796ec89961abb1acb2af1d8
f17fe415b91a13ea86b93344389e18c996384323ca3c2f4267b18c96b8314a12
GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_n-mediagrid_n-index_n-sharethrough_n-LoopMe_n-onetag_rbd_n-vmg_n-MediaNet_cnv&dcc=t HTTP/1.1
Host: aax-eu.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Server
Date: Fri, 07 Oct 2022 15:44:27 GMT
Content-Type: text/html;charset=ISO-8859-1
Content-Length: 64
Connection: keep-alive
x-amz-rid: Y88N3ENCNF6XKH5SQ6BZ
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
flashnetic.com/r/p.html?f=oniziqd&e=1732785387396
200 OK 2.6 kB URL HTTP/2 flashnetic.com/r/p.html?f=oniziqd&e=1732785387396
IP
Hash 3478459a9c2ebc2c2abaf367f025bd2d
fa2a44deed649db094d6fc97a2be3bd5c31fd720
5ab954c2a1905811666c4c63f4be530ec98446800873d10628b9d254ea5f16c7
GET /r/p.html?f=oniziqd&e=1732785387396 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HGbedW6t8LZer25uMWei1_WEKd7GGYZoFcoNcn2QYuCBrxsRVqer7A==
age: 12998
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=ophwuskss&e=1978760078767
200 OK 2.4 kB URL HTTP/2 flashnetic.com/r/p.html?f=ophwuskss&e=1978760078767
IP
File type HTML document, ASCII text
Hash c032b086de5754a15803bd0f716fd44b
b24dfe55e314140eb580436c0cb5c3c0ed8dff95
a82ea9ac94a6fa7884a48971ee1bbf84133eb3273777cb533692ef69dc0348e9
GET /r/p.html?f=ophwuskss&e=1978760078767 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ARbPDxNZxq-S379lSMk23jC1U4a8ouXN_52xxjI-Lys5eUhszUf41w==
age: 12998
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=wiliqqtod&e=1978760078767
200 OK 2.4 kB URL HTTP/2 flashnetic.com/r/p.html?f=wiliqqtod&e=1978760078767
IP
File type HTML document, ASCII text
Hash c032b086de5754a15803bd0f716fd44b
b24dfe55e314140eb580436c0cb5c3c0ed8dff95
a82ea9ac94a6fa7884a48971ee1bbf84133eb3273777cb533692ef69dc0348e9
GET /r/p.html?f=wiliqqtod&e=1978760078767 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1Ei1ZbLF-QnuAty51ZHOZLHFuxuCvCG4oqyYCh2cXnQjGGQFPUMa2w==
age: 12998
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7a8d56b8fb764f042c7906ff7b4c883b
d32e9f75abd2746eb6628ceb7d48d8f84478058d
da9b33a251b164c5e18a975d183ca0c96025b123d5934510f591d179998b9431
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA9B33A251B164C5E18A975D183CA0C96025B123D5934510F591D179998B9431"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9773
Expires: Fri, 07 Oct 2022 18:27:21 GMT
Date: Fri, 07 Oct 2022 15:44:28 GMT
Connection: keep-alive
ocsp.sectigo.com/
200 OK 471 B IP
Hash da760bd41ef8ff9370254bfa22f58538
d2913d670acf488ba2460758095e8238c1d47966
92af768a29358479e72788fbbb20cfd27aad26588b07a3218968710da11a2d37
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 15:44:28 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 13:42:54 GMT
Expires: Wed, 12 Oct 2022 13:42:53 GMT
Etag: "d2913d670acf488ba2460758095e8238c1d47966"
Cache-Control: max-age=424104,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7567c2204a82b50b-OSL
api.rlcdn.com/api/identity/envelope?pid=1323
401 Unauthorized 19 B URL HTTP/2 api.rlcdn.com/api/identity/envelope?pid=1323
IP
Hash 63dfbd2b39fe4f536a04e7b32ada47b4
207298c4a215ad5d97d888522927910ae772ba48
26e51290d12b4fea0bb98da3ed118837b744555ba723061771ab3df30000b6b7
GET /api/identity/envelope?pid=1323 HTTP/1.1
Host: api.rlcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 401 Unauthorized
content-type: text/plain; charset=utf-8
x-content-type-options: nosniff
date: Fri, 07 Oct 2022 15:44:28 GMT
content-length: 19
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=qqyfyyvv&e=1732785387396
200 OK 98 kB URL HTTP/2 flashnetic.com/r/p.html?f=qqyfyyvv&e=1732785387396
IP
Hash 2bc92ae35876f257fd8b0c9835dca529
6e1822250d70d609353f36ff7c80bfedb33978eb
90a6ddbc3f7a90cae0f79dd32de423db9b52ca9966a4a8515ac4c213d1179d96
GET /r/p.html?f=qqyfyyvv&e=1732785387396 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: tBotLT0RAgi1KZXhNr4pg4f5K2AYTrPw2MPdPVoaA4boQeEBoHmpRA==
age: 12998
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
id.crwdcntrl.net/id
200 OK 63 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash b5add95594b9f5cc29225f4749290dbe
22b00ccdd6ab9e8a7aa1846037840130429dbe50
64dde3a20a4eb2640db4167fb683919487ddceca4419cb7b2fd3680f79ceb6e6
GET /id HTTP/1.1
Host: id.crwdcntrl.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:28 GMT
content-type: application/json;charset=utf-8
content-length: 63
p3p: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV
cache-control: no-cache
pragma: no-cache
expires: 0
x-server: 10.45.6.89
access-control-allow-credentials: true
access-control-allow-origin: https://earnme.club
server: Jetty(9.4.38.v20210224)
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=18992849779
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=18992849779
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=18992849779 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:27 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash edd290e26a9468395239b51f9638ba91
28791c5a70e4ffa68e927318e59a5b2cb126b58c
ae4b91330efd6afeb89946d9674ebabf773d158f68e5a99a59f4205b99aee54d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 07 Oct 2022 15:44:28 GMT
Last-Modified: Fri, 07 Oct 2022 14:14:34 GMT
Server: ECS (bsa/EB1C)
X-Cache: Miss from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 5gjIlH-Jr8FaxFBNAv3ICYghZv4a_IcLoCXfvN93EhUKB8l_eWkhAA==
Age: 5394
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Oct 2022 15:44:28 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=73112632591
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=73112632591
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=73112632591 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:28 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Oct 2022 15:44:28 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=55229792113
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=55229792113
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=55229792113 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:28 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 651 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1311), with no line terminators
Hash d0ca1c05651d01e947264d27ab0592e1
dce7d4c43c77e11b3a5551719f42c4661eab4d1c
a994b21d2015ae1ba01173bc04e465841fa807229ae69730db6cba4978501ed8
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 351
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Fri, 07 Oct 2022 15:44:28 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Sat, 07 Oct 2023 15:44:28 GMT; domain=.smartadserver.com; path=/
vs=525642=5135984; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sat, 07 Oct 2023 15:44:28 GMT; domain=.smartadserver.com; path=/
pid=3120565449137647760; expires=Sat, 07 Oct 2023 15:44:28 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638007542685050092&o=1; expires=Sat, 08 Oct 2022 15:44:28 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Sat, 08 Oct 2022 15:44:28 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5a6f87b3430292b066e83f6998a69a07
44fa645b6340cf30d9281d1eaf7e5253919e7fb1
62aae25278e9312404b8051dfb2c8f446ad4ba0ba71220a35e1652d8742a94f3
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 641
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:28 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: b0bc908c-df03-46ac-bbcb-c04e9c757260
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Oct 2022 15:44:28 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=67493221250
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=67493221250
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=67493221250 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:27 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467564&tk_flint=pbjs_lite_v6.15.0&x_source.tid=dcd92488-81fd-41da-bca1-6452103eb479&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.1068795333525635
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467564&tk_flint=pbjs_lite_v6.15.0&x_source.tid=dcd92488-81fd-41da-bca1-6452103eb479&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.1068795333525635
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash e31bac12cd7acb18efcdf771ac12e1c9
0f62cd0f291fc46e232cd70ca40a662325dfeaa0
b44f1828593da687ff09ec11c6fcbb21e7bc9998b504c714af0b938cfee8c825
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467564&tk_flint=pbjs_lite_v6.15.0&x_source.tid=dcd92488-81fd-41da-bca1-6452103eb479&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.1068795333525635 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Fri, 07 Oct 2022 15:44:28 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8YNRHPA-U-AZM2; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:28 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qoKLDga8Ff9NO9DtVM30fCg9e/wzbfbfdyhOeASrUBYnnvs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:28 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
prg.smartadserver.com/prebid/v1
200 OK 492 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1011), with no line terminators
Hash aec8b6c1a1d6a22de3b04a5942674d1c
629c5cadd64762ba8ae1d98c7f753eef165d99b4
be346683b8a3d659f579fa4ed81c92fd5bfd9d3c41ae5a5c4ea499db9793e593
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 353
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Fri, 07 Oct 2022 15:44:27 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Sat, 07 Oct 2023 15:44:28 GMT; domain=.smartadserver.com; path=/
vs=525642=5135984; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sat, 07 Oct 2023 15:44:28 GMT; domain=.smartadserver.com; path=/
pid=3162271604511404247; expires=Sat, 07 Oct 2023 15:44:28 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638007542685623126&o=1; expires=Sat, 08 Oct 2022 15:44:28 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Sat, 08 Oct 2022 15:44:28 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Oct 2022 15:44:28 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467576&tk_flint=pbjs_lite_v6.15.0&x_source.tid=efa9639c-0829-418e-8de2-45671ed88374&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6684665141436729
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467576&tk_flint=pbjs_lite_v6.15.0&x_source.tid=efa9639c-0829-418e-8de2-45671ed88374&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6684665141436729
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 03bc13fc83b13b4a51d13925ce0ae7e4
fa55a228bdd5c690992ab3106df5297ff56bb0a0
02aee7848fe39cc387ee75836e33d51848a11825085325ff44fed7acbb6f12e8
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467576&tk_flint=pbjs_lite_v6.15.0&x_source.tid=efa9639c-0829-418e-8de2-45671ed88374&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6684665141436729 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Fri, 07 Oct 2022 15:44:28 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8YNRHPY-1O-AO3F; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:28 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qq8MHWzIum9Ju9DtVM30fCg9e/wzbfbfdyhOeASrUBYnnvs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:28 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash b9d5c1caf69667ac2c08d23afb51d4b3
5f5c235e854cc28e799c9281a807c8e3ac417bdf
30f75e5bd26c0713b5fde4c7ac69c71458454c0990a9f5c10527c0c7bdc10018
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 642
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:28 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: 1723f11b-1a9e-45a7-8030-35091b0ec781
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
flashnetic.com/r/p.html?f=sinxirl&e=1978760078767
200 OK 2.4 kB URL HTTP/2 flashnetic.com/r/p.html?f=sinxirl&e=1978760078767
IP
Hash f155e585fa6c3135be8c4c1a342d022d
96df34385c34d9b4f3b88af7e15b7b930c8df5cf
6daf1dbfacd6dbe71eb7168fefafdc9402ebdb46dce6df15726cf6407a5e7192
GET /r/p.html?f=sinxirl&e=1978760078767 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: euhkjotVf1fk6tKlJ7FDb3R28RrwJF3LOHdOU0KCgwvt5Fn0C5P8zA==
age: 12998
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=32315487801
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=32315487801
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=32315487801 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:27 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Oct 2022 15:44:28 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 11 kB URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (19713), with no line terminators
Hash 60ee2551f96d0ffa58ae92defeb03d9c
dfc49276fa416a915bde2c020f93ac279b43f134
1b1738baac52cbaf2db70f6aa0ff8d931daf209d66aecc1527b4e3ca13b87504
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 643
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:28 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: 87b7d4cd-9a85-422f-9969-32c6c15c4f29
Set-Cookie: icu=ChkIv46FARAKGAEgASgBMNySgZoGOAFAAUgBENySgZoGGAA.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 05-Jan-2023 15:44:28 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=1253454144006495448; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 05-Jan-2023 15:44:28 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
Content-Encoding: gzip
ocsp.sectigo.com/
200 OK 471 B IP
Hash da760bd41ef8ff9370254bfa22f58538
d2913d670acf488ba2460758095e8238c1d47966
92af768a29358479e72788fbbb20cfd27aad26588b07a3218968710da11a2d37
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 15:44:28 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 13:42:54 GMT
Expires: Wed, 12 Oct 2022 13:42:53 GMT
Etag: "d2913d670acf488ba2460758095e8238c1d47966"
Cache-Control: max-age=424104,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7567c2220d15b50b-OSL
prg.smartadserver.com/prebid/v1
200 OK 648 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1328), with no line terminators
Hash dfa028d4b46b61d4afef371b7b521dbc
2fefea325d03f6d80d3b9175c0481aae8b572054
4aa056498ff450a5f25a237bed0e3bb9ce6f75cc7125c3dcf8bcc7932b864c1b
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 353
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Fri, 07 Oct 2022 15:44:27 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Sat, 07 Oct 2023 15:44:28 GMT; domain=.smartadserver.com; path=/
vs=525642=5135984; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sat, 07 Oct 2023 15:44:28 GMT; domain=.smartadserver.com; path=/
pid=8562808218881159188; expires=Sat, 07 Oct 2023 15:44:28 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638007542686101328&o=1; expires=Sat, 08 Oct 2022 15:44:28 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Sat, 08 Oct 2022 15:44:28 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=55121249086
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=55121249086
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=55121249086 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:28 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 3e398a18b964a898a631ea6bdb057cef
30cddc235a0181d1b5217f992409b46c125606ec
d6b40fea69a4a2fd75e160ec472885aa00a63ab0aa6cd89d1700f252a5e13a0a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 07 Oct 2022 15:44:28 GMT
Last-Modified: Fri, 07 Oct 2022 14:39:57 GMT
Server: ECS (nyb/1D10)
X-Cache: Miss from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: tBLqeSbV99H9AUG1MGH5zCfnP4BtAcfp3S3B4WKPOIAX8NX73geAzQ==
Age: 3871
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Oct 2022 15:44:28 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=64231097322
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=64231097322
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=64231097322 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:28 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467592&tk_flint=pbjs_lite_v6.15.0&x_source.tid=566481f3-9e96-452b-beb0-5c179c515996&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6088668011930811
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467592&tk_flint=pbjs_lite_v6.15.0&x_source.tid=566481f3-9e96-452b-beb0-5c179c515996&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6088668011930811
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 5ea43a5c4501e8f7208256e9de1846ae
e506ce635786a26e4bbe2098d98f6dd167d7d192
95ebcac6589d29964d495c3a605b52ef516bd175ef952c7d4050bd97c1d8ecfb
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467592&tk_flint=pbjs_lite_v6.15.0&x_source.tid=566481f3-9e96-452b-beb0-5c179c515996&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6088668011930811 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Fri, 07 Oct 2022 15:44:28 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8YNRHSL-1E-LEEE; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:28 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qqir3TesW+9He9DtVM30fCg9e/wzbfbfdyhOeASrUBYnnvs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:28 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
prg.smartadserver.com/prebid/v1
200 OK 513 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1112), with no line terminators
Hash ac12fccfe14319516b2ec720cc280140
a47c53bb63fba07f8363b7a514fc9576f18395e6
1dce9de075ad35fb2a3a73f796e79397851eed7e2b278912047ad8a3966ae7d1
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 353
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Fri, 07 Oct 2022 15:44:27 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Sat, 07 Oct 2023 15:44:28 GMT; domain=.smartadserver.com; path=/
vs=525642=5135984; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sat, 07 Oct 2023 15:44:28 GMT; domain=.smartadserver.com; path=/
pid=6451852653553315877; expires=Sat, 07 Oct 2023 15:44:28 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638007542686493780&o=1; expires=Sat, 08 Oct 2022 15:44:28 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Sat, 08 Oct 2022 15:44:28 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Oct 2022 15:44:28 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=tldvyahfq&e=1978760078767
200 OK 2.9 kB URL HTTP/2 flashnetic.com/r/p.html?f=tldvyahfq&e=1978760078767
IP
Hash 4c85e8685dd7d5fd8ae64aee835236a3
8638c8d4332b795587f439b7549f8144200a7276
bdb105b893af76937daf6873fbf2d7312bd6eedfb5bb2672207888868147f93a
GET /r/p.html?f=tldvyahfq&e=1978760078767 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 42hebsckNAbZM_dtlnzQc2ifpmkBziyFvXBwj-pxBG6tE32FFExnEg==
age: 12998
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467581&tk_flint=pbjs_lite_v6.15.0&x_source.tid=17917a73-6cf1-49a0-8032-68383804a0e0&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.7247941298417345
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467581&tk_flint=pbjs_lite_v6.15.0&x_source.tid=17917a73-6cf1-49a0-8032-68383804a0e0&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.7247941298417345
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 067b8646fd1a72213f4528c2c124447c
78d9c14c3f9bd1911cce27811451e63885ee3a8b
248fc73eba7a230d97ec424289f7b8f3f718b35e53ea53538b91a3cf44c0674e
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467581&tk_flint=pbjs_lite_v6.15.0&x_source.tid=17917a73-6cf1-49a0-8032-68383804a0e0&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.7247941298417345 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Fri, 07 Oct 2022 15:44:28 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8YNRHT4-1R-K87; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:28 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qqboESeVrtcNO9DtVM30fCg9e/wzbfbfdyhOeASrUBYnnvs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:28 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467609&tk_flint=pbjs_lite_v6.15.0&x_source.tid=bf2ce49d-e8c4-4548-b9b3-c31987e2e190&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.06261030164415671
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467609&tk_flint=pbjs_lite_v6.15.0&x_source.tid=bf2ce49d-e8c4-4548-b9b3-c31987e2e190&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.06261030164415671
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash c7eea29b53ee52edadef2729cefa5d18
841961e0be808e676626a27c43d250207e3dbd01
23729a6b301abc695825cc5d087b84f0152e416687340b3756f3a327519957a5
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467609&tk_flint=pbjs_lite_v6.15.0&x_source.tid=bf2ce49d-e8c4-4548-b9b3-c31987e2e190&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.06261030164415671 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Fri, 07 Oct 2022 15:44:28 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8YNRHTO-B-1SG8; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:28 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qpA5OmqVsWWb+9DtVM30fCg9e/wzbfbfdyhOeASrUBYnnvs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:28 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
ib.adnxs.com/ut/v3/prebid
200 OK 140 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash fd3c6ce634ab94b58e3213a1898dbb85
87b52d2a401b41b1f03d9ae444621c80093da178
ccd507f1a8b99b5702e4b27b301e6ee2bfb15c5331fe549361ea7f956c5ba870
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 645
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:28 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 140
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: f56b4f86-737f-4bca-b9e2-c1ca61af710c
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ib.adnxs.com/ut/v3/prebid
200 OK 144 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 2a49aae5aace60720307301b9b9eb0d8
e7e0f92e763cd43b286a71ad36cdcf5f91a8eaf3
15d6d41d926afe5f78d2d955b045200cad63d29e6ce5616e2eb3a524b735ac1c
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 642
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:28 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 144
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: 5603c794-a072-41ac-b701-778f6c4c6b51
Set-Cookie: icu=ChkIv46FARAKGAEgASgBMNySgZoGOAFAAUgBENySgZoGGAA.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 05-Jan-2023 15:44:28 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=4873179844772077170; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 05-Jan-2023 15:44:28 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 00ac83198e1714bd111a16f0c1d6fc7a
70fb76630948de43c7957e92c7f5c2350ad05b84
5c1522deeb8d67b8e484b0894f74c3d386df1edf1a7e4ada30151b938d359601
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 641
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:28 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: 6309cb59-ad93-4165-8273-670a25c23ec1
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
flashnetic.com/r/p.html?f=myexdzaje&e=1978760078767
200 OK 2.5 kB URL HTTP/2 flashnetic.com/r/p.html?f=myexdzaje&e=1978760078767
IP
Hash 619923e2328a856de51d87749116d0ad
4c7ce22195c809166daa95c5feeaff69415c5c3a
8f62b2828b8483f6a2dd2ccce80a5e1ecb0a61cf8123ccf2e5b010ea5f6247d5
GET /r/p.html?f=myexdzaje&e=1978760078767 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jP86tjQAR1EltLswroMApw6nsNf0MKyGbdfHcnHo6-jeaZ7CMGD5zw==
age: 12998
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=2352236255
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=2352236255
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=2352236255 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:28 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Oct 2022 15:44:28 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 146 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash ca742af02d9b74c5504a684903cd0289
45d8837f3899ef359f2ac02ed1d9a378646f2f62
3eef6d5dbb88f95dc2d1f633419abb6cc3af20b2fe2e8b216ed261aa7f9676ef
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 645
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:28 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 146
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: 4b492a2b-8d25-456e-a894-b968f4fbd5de
Set-Cookie: icu=ChkIv46FARAKGAEgASgBMNySgZoGOAFAAUgBENySgZoGGAA.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 05-Jan-2023 15:44:28 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=8389383723493435677; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 05-Jan-2023 15:44:28 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 665218cd8d4aad3a12a36d5603aba5a4
21e4d373f044a9c79bd8e1aac856f43f8341b528
03d8bb2f09384df123277fb095397cc8594983df780d5141d0c3a58dcfe22fcf
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 642
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:28 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: 6e7aa466-34a9-48d4-b258-d4bdfd327bef
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prg.smartadserver.com/prebid/v1
200 OK 513 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1093), with no line terminators
Hash 59ae359240ed1683827bd6ed0e877f42
88bf38c35d67c9abeeada7e6b0de2db864cb1136
338951c16776865efef063f5b6846ab5ffefa71ac39099460a2a1faa1915c970
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 353
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Fri, 07 Oct 2022 15:44:28 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Sat, 07 Oct 2023 15:44:28 GMT; domain=.smartadserver.com; path=/
vs=525642=5135984; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sat, 07 Oct 2023 15:44:28 GMT; domain=.smartadserver.com; path=/
pid=1024542492960550916; expires=Sat, 07 Oct 2023 15:44:28 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638007542686934989&o=1; expires=Sat, 08 Oct 2022 15:44:28 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Sat, 08 Oct 2022 15:44:28 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467598&tk_flint=pbjs_lite_v6.15.0&x_source.tid=6661339b-2644-4ca5-be22-00c436152b31&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6622872959951736
200 OK 5.5 kB URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467598&tk_flint=pbjs_lite_v6.15.0&x_source.tid=6661339b-2644-4ca5-be22-00c436152b31&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6622872959951736
IP
File type JSON data\012- , ASCII text, with very long lines (9774), with no line terminators
Hash 01525ba905889396f1d583802711e1b2
cc7b38f9483e8fb5c8023db7c94d47a55f71c74d
10d52b8fc76dc4acc3c061ab52adbd1d5942370c2d8d0d89eeef256bd0b0eb42
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467598&tk_flint=pbjs_lite_v6.15.0&x_source.tid=6661339b-2644-4ca5-be22-00c436152b31&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6622872959951736 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Fri, 07 Oct 2022 15:44:28 GMT
Content-Type: application/json
Content-Length: 5486
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8YNRHU8-8-23XY; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:28 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qqOCdafD6N00+9DtVM30fCg9e/wzbfbfdyhOeASrUBYnnvs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:28 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Content-Encoding: gzip
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=64092275117
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=64092275117
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=64092275117 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:28 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 458 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (799), with no line terminators
Hash e39c1ae9f96ce248841e2ec10400d611
5b6f8108fe052ebf169042359f7ebe14ff748df1
e809422aa6b07e3dafca6b5f852b8c93b72868c9e765e380ad1ea667a8adcd85
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 353
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Fri, 07 Oct 2022 15:44:28 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Sat, 07 Oct 2023 15:44:28 GMT; domain=.smartadserver.com; path=/
vs=525642=5135984; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sat, 07 Oct 2023 15:44:28 GMT; domain=.smartadserver.com; path=/
pid=2524662762864701659; expires=Sat, 07 Oct 2023 15:44:28 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638007542687193512&o=1; expires=Sat, 08 Oct 2022 15:44:28 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Sat, 08 Oct 2022 15:44:28 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 36b2ebb263a694be6b81a02818e3d9e4
b73b329f15a2fc2ab0d6ea468695b3f79c27be94
e76b12ed5b195fddd74ac3f63fd2f985e22fea47c025eec8b0260b5560f9c515
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Oct 2022 15:44:28 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467616&tk_flint=pbjs_lite_v6.15.0&x_source.tid=871fcc13-4038-46d3-b626-e522143851a7&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.9848335788402856
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467616&tk_flint=pbjs_lite_v6.15.0&x_source.tid=871fcc13-4038-46d3-b626-e522143851a7&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.9848335788402856
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 91a470ea7ad70b488cbe4d2f251f15ca
3284cd12cd29f4c179fa209934a0db22cb133bd0
1b0e22a5717602e81d382a8f040edbbb4224754a96e5924b5614b8e9cc1e6dac
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467616&tk_flint=pbjs_lite_v6.15.0&x_source.tid=871fcc13-4038-46d3-b626-e522143851a7&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.9848335788402856 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Fri, 07 Oct 2022 15:44:28 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8YNRHV3-S-1AMY; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:28 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qrSmOmHpfF9VO9DtVM30fCg9e/wzbfbfdyhOeASrUBYnnvs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:28 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash ce5d7d76e2d9ce54eae6e7f7570c0880
79052c787429181741e78a6d6acc625145c64f11
e036af902ece0507ddd3144c30580ab1a0a5e488b9ebc631b4ada50f4fa02c71
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 642
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:28 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: 6d4fdd0c-8a9f-4db5-a1f0-05798d826d1f
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prg.smartadserver.com/prebid/v1
200 OK 459 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (796), with no line terminators
Hash e56ae265b45dabb202df0c226a22c5a9
ea4609bd7ce72cdaf712673896705419e0b7b18a
849dfeb4a66f3fcf6bc28fa9f6b5f3082d8dc6fe202e2d69c403fe91906ff317
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 352
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Fri, 07 Oct 2022 15:44:28 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Sat, 07 Oct 2023 15:44:28 GMT; domain=.smartadserver.com; path=/
vs=525642=5135984; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sat, 07 Oct 2023 15:44:28 GMT; domain=.smartadserver.com; path=/
pid=2088959534939041811; expires=Sat, 07 Oct 2023 15:44:28 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638007542687647026&o=1; expires=Sat, 08 Oct 2022 15:44:28 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Sat, 08 Oct 2022 15:44:28 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=51013749
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=51013749
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=51013749 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:28 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467638&tk_flint=pbjs_lite_v6.15.0&x_source.tid=74feb1af-d4be-4d07-8eee-831ea718ff8f&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.3396641820503351
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467638&tk_flint=pbjs_lite_v6.15.0&x_source.tid=74feb1af-d4be-4d07-8eee-831ea718ff8f&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.3396641820503351
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 6346ac14eb773d6fcf3c9aabcb1cafc8
f27e3d683ecfd6b3095316a9ab3015ad0f92a811
4a5af03a0739f47ec7a73e696fcfb8f960842e3be854cc7443be5f86c211f452
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467638&tk_flint=pbjs_lite_v6.15.0&x_source.tid=74feb1af-d4be-4d07-8eee-831ea718ff8f&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.3396641820503351 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Fri, 07 Oct 2022 15:44:28 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8YNRHVW-1O-LF4M; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:28 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qpL1SYlmmzLou9DtVM30fCg9e/wzbfbfdyhOeASrUBYnnvs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:28 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3714da7cb6c371956b3d34ea5e62266a
7e17d3e8c8d0b5ca1650b7e427a0d6d3ec39efc6
57b7e44f4ef9b743018f8ef2d0b03682ee089307a85d2f1d69903114a11101a7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "57B7E44F4EF9B743018F8EF2D0B03682EE089307A85D2F1D69903114A11101A7"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5981
Expires: Fri, 07 Oct 2022 17:24:09 GMT
Date: Fri, 07 Oct 2022 15:44:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3714da7cb6c371956b3d34ea5e62266a
7e17d3e8c8d0b5ca1650b7e427a0d6d3ec39efc6
57b7e44f4ef9b743018f8ef2d0b03682ee089307a85d2f1d69903114a11101a7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "57B7E44F4EF9B743018F8EF2D0B03682EE089307A85D2F1D69903114A11101A7"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5981
Expires: Fri, 07 Oct 2022 17:24:09 GMT
Date: Fri, 07 Oct 2022 15:44:28 GMT
Connection: keep-alive
prg.smartadserver.com/prebid/v1
200 OK 433 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (746), with no line terminators
Hash e6402f8c575e4c10858b8f3f68650fe6
3d9407d7a113f76fc24d8e4846fc19e662775e1b
8c24994642f9697855103a095b08e6c34c5bb5d549593e9fba2dd93522cb197d
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 353
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Fri, 07 Oct 2022 15:44:28 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Sat, 07 Oct 2023 15:44:28 GMT; domain=.smartadserver.com; path=/
vs=525642=5135984; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sat, 07 Oct 2023 15:44:28 GMT; domain=.smartadserver.com; path=/
pid=3910287442404765745; expires=Sat, 07 Oct 2023 15:44:28 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638007542687954757&o=1; expires=Sat, 08 Oct 2022 15:44:28 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Sat, 08 Oct 2022 15:44:28 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
tpc.googlesyndication.com/sodar/sodar2.js
200 OK 6.4 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2.js
IP
File type ASCII text, with very long lines (1321)
Hash ac906814ed812c4ecdbb624a3bd2f6c3
8e4547eaffaa66a1ee61b36028dbcd7091d0e7de
8ab8cef6156022c4547455defd8252b48b6bcb8b734072849345bb99758705fe
GET /sodar/sodar2.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 6386
date: Fri, 07 Oct 2022 15:44:28 GMT
expires: Fri, 07 Oct 2022 15:44:28 GMT
cache-control: private, max-age=3000
etag: "1637097310169751"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Oct 2022 15:44:28 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467628&tk_flint=pbjs_lite_v6.15.0&x_source.tid=e797334e-db7c-4b39-bd7d-d3825cc4dae6&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.4578701469782058
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467628&tk_flint=pbjs_lite_v6.15.0&x_source.tid=e797334e-db7c-4b39-bd7d-d3825cc4dae6&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.4578701469782058
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 9641257588bf0814cd07b023aac7a1ac
4b2ee1b334aee4c1671257402a26072a86778ad7
8a505708275a626d4af96978de386dab5ea8bf5d278f74ac387fc291abf0091d
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467628&tk_flint=pbjs_lite_v6.15.0&x_source.tid=e797334e-db7c-4b39-bd7d-d3825cc4dae6&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.4578701469782058 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Fri, 07 Oct 2022 15:44:28 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8YNRHX4-1L-2IZH; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:28 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qrC7hFd/XbOeO9DtVM30fCg9e/wzbfbfdyhOeASrUBYnnvs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:28 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
lb.eu-1-id5-sync.com/lb/v1
200 33 B URL HTTP/1.1 lb.eu-1-id5-sync.com/lb/v1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash e8667e708a86da03cbd3a4ad55fdb235
8a611cbe33d866e7e76a641d5973b17acb87c990
9ec4aac1f5175a31937f8a4a1abfcceb12aa6dd146d0ca1a4409b9e4274d578a
GET /lb/v1 HTTP/1.1
Host: lb.eu-1-id5-sync.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: https://earnme.club
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Fri, 07 Oct 2022 15:44:28 GMT
prg.smartadserver.com/prebid/v1
200 OK 558 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1051), with no line terminators
Hash 1ffb8e55308547e996be3b8b2e645bb3
cd863bbf4b5e7a9ecd41d0e60f85866a13384c62
6e8d177830ab3762b75a56752e0c8850cf934ef359cc8b5625b5404deb1d1baf
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 353
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Fri, 07 Oct 2022 15:44:28 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Sat, 07 Oct 2023 15:44:28 GMT; domain=.smartadserver.com; path=/
vs=525642=5135984; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sat, 07 Oct 2023 15:44:28 GMT; domain=.smartadserver.com; path=/
pid=938472696968441860; expires=Sat, 07 Oct 2023 15:44:28 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638007542688216574&o=1; expires=Sat, 08 Oct 2022 15:44:28 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Sat, 08 Oct 2022 15:44:28 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
lbs.eu-1-id5-sync.com/lbs/v1
200 OK 34 B URL HTTP/1.1 lbs.eu-1-id5-sync.com/lbs/v1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9660d907cb49d7d796e32527b42e3309
332b75559726272fc1aca8c510e96571308abffd
277cf54f8396c2d63dec3aea69c8351f2f7e38635faf7a25237c1d656e73dae3
GET /lbs/v1 HTTP/1.1
Host: lbs.eu-1-id5-sync.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Fri, 7 Oct 2022 15:44:28 GMT
access-control-allow-origin: https://earnme.club
vary: Origin
content-type: application/json
content-length: 34
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467644&tk_flint=pbjs_lite_v6.15.0&x_source.tid=0c097f40-56bd-476e-9c8d-f6d7d697f301&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6470066925694513
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467644&tk_flint=pbjs_lite_v6.15.0&x_source.tid=0c097f40-56bd-476e-9c8d-f6d7d697f301&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6470066925694513
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash b3f2f4788257ace610a95100e23424da
4aafc6cc84ea888c839eb0d15b2c360149bb0446
60ae98bd07aeabe4dcead1fa6579b0bc695c682726dec756c7165ac679a2f52a
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467644&tk_flint=pbjs_lite_v6.15.0&x_source.tid=0c097f40-56bd-476e-9c8d-f6d7d697f301&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6470066925694513 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Fri, 07 Oct 2022 15:44:28 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8YNRHY5-W-3T0H; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:28 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qo+rry6c9+Xh+9DtVM30fCg9e/wzbfbfdyhOeASrUBYnnvs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:28 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=1019543691
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=1019543691
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=1019543691 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:28 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Oct 2022 15:44:28 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=81154533650
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=81154533650
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=81154533650 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:28 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Oct 2022 15:44:28 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=neqiwdbd&e=1978760078767
200 OK 2.5 kB URL HTTP/2 flashnetic.com/r/p.html?f=neqiwdbd&e=1978760078767
IP
Hash 60efd57bd3e3622b5ac302fa17bf7fcc
52d96faa52c748854bf6d9b90b09e64fe6c08406
c7e4e3b2f6fbd66f564c8cab451191141dd2f74852ff080632ab38e2839f6e64
GET /r/p.html?f=neqiwdbd&e=1978760078767 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: k8k3KUldcD2-iYY4yn3BWGuiynppw84O2wu89_8lPdRTlJL_fHUkow==
age: 12998
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 448 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (887), with no line terminators
Hash 946d16a794109f34e6315c3a2010aaa5
1b41e8529d7e7be009ce12aa8021361a91e03fe1
378287a536b90fc3ee0781ee3ff426ad68a7d7d6b421a0dbdfcebca33f06a259
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 352
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Fri, 07 Oct 2022 15:44:28 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Sat, 07 Oct 2023 15:44:28 GMT; domain=.smartadserver.com; path=/
vs=525642=5135984; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sat, 07 Oct 2023 15:44:28 GMT; domain=.smartadserver.com; path=/
pid=1145811126491345080; expires=Sat, 07 Oct 2023 15:44:28 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638007542689414900&o=1; expires=Sat, 08 Oct 2022 15:44:28 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Sat, 08 Oct 2022 15:44:28 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=42587579755
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=42587579755
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=42587579755 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:28 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7bee53e98089b05456c274dbb8f8557e
dd7d48959d68eecf49e196a9a221a6b3a16d503d
7dbf060564184b074893ff62ec3b059231b6e6a756c89b9677fe9115e91b224f
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 644
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: bed5c3ef-b2cf-48c3-8f9f-d7799b2d31a2
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467648&tk_flint=pbjs_lite_v6.15.0&x_source.tid=5116d5b0-ea82-44ab-a391-17b9a2fa565b&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.7935694915278182
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467648&tk_flint=pbjs_lite_v6.15.0&x_source.tid=5116d5b0-ea82-44ab-a391-17b9a2fa565b&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.7935694915278182
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 55d12665d811be2ebc764324cf53c823
ee38a2d6ffc5261468a5993ed27e7f38e771b09b
9a83608d84db0f16171c7248c07f66334de04dcd865aee9810ca2660273e0858
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467648&tk_flint=pbjs_lite_v6.15.0&x_source.tid=5116d5b0-ea82-44ab-a391-17b9a2fa565b&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.7935694915278182 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8YNRI11-1B-1IAU; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:28 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qpsjZDsCr09sO9DtVM30fCg9e/wzbfbfdyhOeASrUBYnnvs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:28 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
prg.smartadserver.com/prebid/v1
200 OK 515 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1052), with no line terminators
Hash 141690e577803907b048e1dc76f0272f
425d4264d70edddfff3ada3a84bc47d9bd2b4086
6dcd573b162d3657b1180a57680712a54948b527e7240a5b9f9598199c5ab3b0
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 352
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Fri, 07 Oct 2022 15:44:28 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Sat, 07 Oct 2023 15:44:28 GMT; domain=.smartadserver.com; path=/
vs=525642=5135984; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sat, 07 Oct 2023 15:44:28 GMT; domain=.smartadserver.com; path=/
pid=807672233927700523; expires=Sat, 07 Oct 2023 15:44:28 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638007542689875474&o=1; expires=Sat, 08 Oct 2022 15:44:28 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Sat, 08 Oct 2022 15:44:28 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
ocsp.digicert.com/
200 OK 313 B IP
Hash be35127b8c26584bcaa488cc5cf04d30
db6f464fed7250ce37b1355fef95155b48824292
ffa5581ed5d5990cec95b847c02ce562c1a3090240db245f68a8ddae59e1af4d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6198
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:29 GMT
Last-Modified: Fri, 07 Oct 2022 14:01:11 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 313
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Oct 2022 15:44:29 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=2022100301&st=env
200 OK 11 kB URL HTTP/2 pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=2022100301&st=env
IP
File type JSON data\012- , ASCII text, with very long lines (14798), with no line terminators
Hash bbb12acdbc88fd7d83abf62e7edf6706
85fae6a6f7ddb52c33f6652787f78818ae5d024c
484100c901d3ef1f942307e156332eca261830a560d4477fe4de2a7a8b697cba
GET /getconfig/sodar?sv=200&tid=gpt&tv=2022100301&st=env HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 07 Oct 2022 15:44:29 GMT
server: cafe
cache-control: private
content-length: 11236
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=phzjp&e=1732785387396
200 OK 2.5 kB URL HTTP/2 flashnetic.com/r/p.html?f=phzjp&e=1732785387396
IP
Hash 07ac6e199d91da9883070b2660e602fd
3cbd693de4f214a387dc1a436d5f0643dbdb6ff4
560b5b79ef1c03774e7c0a6d10f368b283a77131e8b9a5c56d44c03c5f6b4ca3
GET /r/p.html?f=phzjp&e=1732785387396 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rwXAU4l87MA3K7UD3xakTbiYqZSxgjOmPydIPW0dQ-MdWv273lqxbw==
age: 12998
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=80601080446
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=80601080446
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=80601080446 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:28 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 137 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash bdd53dfd25f1f156cc4a63c9b50d6a2b
37a2d83f591e5baf91cf54ab20fae4b2959415c4
f0a6fc67878b02b6f25dabf22f87ff3e6ae78de58f988ae11afe96bad514ecc9
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 644
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 137
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: b6d15026-e4d9-48e3-a97f-fa729967e636
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
dnacdn.net/dna
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:28 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=VV0nwV80M0RITmhlJTJCZkMwOUJGQlhaMUN2c3g4Tks5M1NPOCUyRkdGbEhJVnYyUlZjM1F5eTdOOCUyRldhNk5OaFV0d24zNXlV; expires=Wed, 01 Nov 2023 15:44:29 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://earnme.club
server-processing-duration-in-ticks: 225333
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467661&tk_flint=pbjs_lite_v6.15.0&x_source.tid=bf242d0a-98f8-4e1d-aa1b-7cc6fca39fb6&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.9308555327771593
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467661&tk_flint=pbjs_lite_v6.15.0&x_source.tid=bf242d0a-98f8-4e1d-aa1b-7cc6fca39fb6&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.9308555327771593
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash f8666419af5dc534e8474fe8101674e6
41474dba972ff96a39f4267f2bbdffe51ab4c33e
915a992f0dff81e1de8f98a47ef34c9160299cfd99a9136f337752314029251c
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467661&tk_flint=pbjs_lite_v6.15.0&x_source.tid=bf242d0a-98f8-4e1d-aa1b-7cc6fca39fb6&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.9308555327771593 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8YNRI2F-1N-2RGH; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:28 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qq7p6WMWYRKsO9DtVM30fCg9e/wzbfbfdyhOeASrUBYnnvs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:28 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
prg.smartadserver.com/prebid/v1
200 OK 506 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (930), with no line terminators
Hash 2398ea6e472090ac12b32fff345dbefd
9d47269079ecb1b0760c25b11137815c21ef2e32
07377bc21b57d6d9670166e01113907463b986c67f60cbd8e37307031139b62d
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 353
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Fri, 07 Oct 2022 15:44:28 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
vs=525642=5135984; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
pid=4720163732917121261; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638007542690199441&o=1; expires=Sat, 08 Oct 2022 15:44:29 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Sat, 08 Oct 2022 15:44:29 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Oct 2022 15:44:29 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=74607712095
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=74607712095
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=74607712095 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:28 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467657&tk_flint=pbjs_lite_v6.15.0&x_source.tid=b1f01533-c836-4742-90fa-ca1296a8b1a0&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.3893548482622866
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467657&tk_flint=pbjs_lite_v6.15.0&x_source.tid=b1f01533-c836-4742-90fa-ca1296a8b1a0&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.3893548482622866
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 06df3964bb531f281326581fd2ff8c67
59dd59a26614d8b30243b244d6572eda3783dd86
09f222e920539fbf384fcbe78ca90449ec99a78abb0933bb3474e692b1c142d3
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467657&tk_flint=pbjs_lite_v6.15.0&x_source.tid=b1f01533-c836-4742-90fa-ca1296a8b1a0&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.3893548482622866 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8YNRI3N-S-9H10; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:29 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qoCo2jKtRzhfu9DtVM30fCg9e/wzbfbfdxoEisNeURUK3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:29 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
ib.adnxs.com/ut/v3/prebid
200 OK 140 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a9a22e47ca6b2b764cc8dd299573d262
ca113161c44f995e3ad30a8328e355ae20c67cdc
f164020f2f826f03482512c1ea0a9cef36431d7fa3f957ff169f3c66eaecaebc
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 642
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 140
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: 89a7c831-7345-4341-b948-5613fb32df6e
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Oct 2022 15:44:29 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 143 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 505d4229e7ef2868c0c7a1445b7fb4a1
001fd53c7eb1dd1a886c9b690b51ee1c974b1f06
aedf4feae78cf4f8a46463cd30c68cb440dffffcdc3317b7f2884c9689b329b2
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 641
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 143
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: eeae1627-7764-49ed-b155-0f021bc06af8
Set-Cookie: icu=ChkIv46FARAKGAEgASgBMN2SgZoGOAFAAUgBEN2SgZoGGAA.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 05-Jan-2023 15:44:29 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=1102944316467627523; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 05-Jan-2023 15:44:29 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=1139801200
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=1139801200
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=1139801200 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:28 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=uxzaqlnq&e=1978760078767
200 OK 2.8 kB URL HTTP/2 flashnetic.com/r/p.html?f=uxzaqlnq&e=1978760078767
IP
Hash 76bbcd139ffc60d69a0e7ec0b4c9d41e
61fd171c30ec68d76832dc7ec999abd32b6f9188
a19e582f33d2d5cb372c6f111c3564589872dbe54b12992c054d14663f1af99f
GET /r/p.html?f=uxzaqlnq&e=1978760078767 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: D19K8t8mRsOeFDd_ovtTjceuDana-G38L-jFqkJzhAeqRlrYjfQdXg==
age: 12998
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 556 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (946), with no line terminators
Hash 10c1142fbb0a1097899bd30854df2450
c5dff922b63a68cf3d0433e9fabb928270d89b5f
55cd28e4992f5a1899b90e7aad6cf9baaa72d751e2dc2eb783a561221065c59e
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 353
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Fri, 07 Oct 2022 15:44:28 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
vs=527999=5135984; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
pid=4130205642159091712; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638007542691241859&o=1; expires=Sat, 08 Oct 2022 15:44:29 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Sat, 08 Oct 2022 15:44:29 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467675&tk_flint=pbjs_lite_v6.15.0&x_source.tid=d76161a4-5a5b-4dc2-8f32-af9a706b18a2&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.37776258413733466
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467675&tk_flint=pbjs_lite_v6.15.0&x_source.tid=d76161a4-5a5b-4dc2-8f32-af9a706b18a2&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.37776258413733466
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 0f132fda122b6808e58d74db0d0b8185
431210dfa5871d0bd89ec1a914e4eed9196d6f0f
4d4039f7efc1e3a59b9677e929e568cde8407a5e0309d212e72e0643e104579c
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467675&tk_flint=pbjs_lite_v6.15.0&x_source.tid=d76161a4-5a5b-4dc2-8f32-af9a706b18a2&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.37776258413733466 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8YNRI4Y-G-KYBB; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:29 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qpu5s/Ptu7f7e9DtVM30fCg9e/wzbfbfdxoEisNeURUK3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:29 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Oct 2022 15:44:29 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=2022100301&st=env
200 OK 11 kB URL HTTP/2 pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=2022100301&st=env
IP
File type JSON data\012- , ASCII text, with very long lines (14646), with no line terminators
Hash ef91679bfba9648016c5f1ad9c1804d1
8812fd14645e74d18b425554ccff8a58053a6841
84fe6ff47fadcb577fa3eaa88be97e472be83aadeaed7b86fc5961ccf0b098da
GET /getconfig/sodar?sv=200&tid=gpt&tv=2022100301&st=env HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 07 Oct 2022 15:44:29 GMT
server: cafe
cache-control: private
content-length: 11124
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467679&tk_flint=pbjs_lite_v6.15.0&x_source.tid=fdcdf6bd-cead-4a5a-8f6a-6f704d640f5d&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.4398628634426167
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467679&tk_flint=pbjs_lite_v6.15.0&x_source.tid=fdcdf6bd-cead-4a5a-8f6a-6f704d640f5d&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.4398628634426167
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 1f46533560342a733e0dbf652343072b
e112b56124489703bb5e65eeb009517574326144
b74d3ee93487ca96b0546cee59a08bfd4262ed40f2ba4e9815985756e5ba4ebf
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467679&tk_flint=pbjs_lite_v6.15.0&x_source.tid=fdcdf6bd-cead-4a5a-8f6a-6f704d640f5d&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.4398628634426167 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8YNRI5N-1J-FUSF; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:29 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qqB8lHm3Fx6VO9DtVM30fCg9e/wzbfbfdxoEisNeURUK3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:29 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=60209228522
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=60209228522
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=60209228522 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:28 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c489528c546310893586a11275c947e6
ad88a9bf363753e0a7e06ef50a1be58408886343
5cd9b346e896ba808c8463d68c6c658f8e23e68324b05957a803cd83bc34a4f9
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 642
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: a4fef8ff-2b54-49db-823b-15d9f6ee24b8
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prg.smartadserver.com/prebid/v1
200 OK 485 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (888), with no line terminators
Hash ffa2758f58ac63249d57da0684e94a35
44da22178f38332ab80f2cb2bc172073df3bc49a
ce671a74623f2674be6aa017e01820e9201ca2c00b53f742a67728241c598617
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 353
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Fri, 07 Oct 2022 15:44:28 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
vs=525642=5135984; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
pid=9169090393704558823; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638007542691534111&o=1; expires=Sat, 08 Oct 2022 15:44:29 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Sat, 08 Oct 2022 15:44:29 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=88781837977
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=88781837977
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=88781837977 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:28 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467666&tk_flint=pbjs_lite_v6.15.0&x_source.tid=ff528d52-82c8-4872-a465-31fabf9afbb5&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6870870622620064
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467666&tk_flint=pbjs_lite_v6.15.0&x_source.tid=ff528d52-82c8-4872-a465-31fabf9afbb5&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6870870622620064
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash a8e5bec6059d958a39495ecc003cc812
db8c64703fe9892e5d0d0c71992f4d3625e59a59
f277e7da26d116ec4507b14341a504b1f222eee4e7a99a8a03bbf049ddc26c56
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467666&tk_flint=pbjs_lite_v6.15.0&x_source.tid=ff528d52-82c8-4872-a465-31fabf9afbb5&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6870870622620064 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8YNRI71-1P-IP1Z; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:29 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qo9pt6KbAA22+9DtVM30fCg9e/wzbfbfdxoEisNeURUK3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:29 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
ib.adnxs.com/ut/v3/prebid
200 OK 140 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 92b458d8c8349ec2b7083f180a60b9d3
66e0b3e9612373464a3e3aaef8aa8bb544f50f1e
61f1f233d0eead219367e386aa8c7b5ca44f5ccfe0cc13184903cd4015ff4fd8
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 645
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 140
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: 21d08615-44fc-45ec-ac90-e1d3ed923a79
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Oct 2022 15:44:29 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
200 OK 44 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
File type gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)\012- data
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
OPTIONS /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://flashnetic.com/
Origin: https://flashnetic.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 15:44:28 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
allow: POST,OPTIONS
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Oct 2022 15:44:29 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 140 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 6f58fbcb98ae2280d2babe54e1423636
728e1b0bc61cd48faded86d7a1e1adc8129a74b3
e52c6a840fc34c7ea1194bbdc579078c2a7d16b8fcd750f9148ab1a28c45e56e
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 644
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 140
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: c1bba72d-f582-4e51-a2d7-8d23a0715855
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467683&tk_flint=pbjs_lite_v6.15.0&x_source.tid=bfe69bbb-a3e3-4da4-991e-dc7f4d773246&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.12442373735869483
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467683&tk_flint=pbjs_lite_v6.15.0&x_source.tid=bfe69bbb-a3e3-4da4-991e-dc7f4d773246&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.12442373735869483
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 9c102e1089cc436c586c42b613e0143c
cb33dd00f8a555944739534812c46ae8c0a61206
2d65e8506cd7c1ea9fdba3a95b9428a47ec0602ef47cd63cd5e5982273790502
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467683&tk_flint=pbjs_lite_v6.15.0&x_source.tid=bfe69bbb-a3e3-4da4-991e-dc7f4d773246&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.12442373735869483 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8YNRI86-21-KNA4; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:29 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qqLFp0amcKHbu9DtVM30fCg9e/wzbfbfdxoEisNeURUK3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:29 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Oct 2022 15:44:29 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 475 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (999), with no line terminators
Hash e6cc518921fad04aff1a8dfe601cdbe3
4a3c15b5c511d2ae15d4f3314581639417222418
416bd0ea32bc3e61698cbc5e103fc93cfb5e402b4124bcc822a7c79b2a29008c
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 353
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Fri, 07 Oct 2022 15:44:29 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
vs=527999=5135984; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
pid=6380201286112178190; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638007542692292517&o=1; expires=Sat, 08 Oct 2022 15:44:29 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Sat, 08 Oct 2022 15:44:29 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
prg.smartadserver.com/prebid/v1
200 OK 545 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (982), with no line terminators
Hash b7480bbb75309adec0b592308164a331
46ad49c8a68b9738bc1222eaeea144a192de1b67
f6d6b2826b05e7b04573e34a416f8a96107871213df52523a5e742b74a47811b
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 353
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Fri, 07 Oct 2022 15:44:29 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
vs=527999=5135984; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
pid=4803851295233732814; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638007542691927156&o=1; expires=Sat, 08 Oct 2022 15:44:29 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Sat, 08 Oct 2022 15:44:29 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=70768654957
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=70768654957
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=70768654957 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:28 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 11 kB URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (19818), with no line terminators
Hash 2ca3fb5aa021304a5c941ebacfaf7b6f
6eeca049a692da91afe6a1ea7d40cf4df0cfe108
27ba340a5ac9fd5d38b497dd248fbca3a7f1a25136fc22764d07d94060914c83
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 643
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: c56ff615-1160-4472-b171-31f96a2d1c1f
Set-Cookie: icu=ChkIv46FARAKGAEgASgBMN2SgZoGOAFAAUgBEN2SgZoGGAA.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 05-Jan-2023 15:44:29 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=3539976187816860278; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 05-Jan-2023 15:44:29 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
Content-Encoding: gzip
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467696&tk_flint=pbjs_lite_v6.15.0&x_source.tid=ae16ac2a-e236-4532-889f-e5b2c8d9502f&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.8421349434486669
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467696&tk_flint=pbjs_lite_v6.15.0&x_source.tid=ae16ac2a-e236-4532-889f-e5b2c8d9502f&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.8421349434486669
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash b8bb783a22cecc6576b5a63cea4f1847
318c7e03989870bc8cbf2e2d52645e187ec853cd
f523f107f2e0201e79f1539885932cdc2109d2d9f4b293bf88c84a20f812ee94
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467696&tk_flint=pbjs_lite_v6.15.0&x_source.tid=ae16ac2a-e236-4532-889f-e5b2c8d9502f&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.8421349434486669 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8YNRI9X-1H-BJ9; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:29 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qr1JOnzb4SqXe9DtVM30fCg9e/wzbfbfdxoEisNeURUK3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:29 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467692&tk_flint=pbjs_lite_v6.15.0&x_source.tid=e72c89d0-692a-4350-857e-5f96703c57b1&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.38544750272377426
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467692&tk_flint=pbjs_lite_v6.15.0&x_source.tid=e72c89d0-692a-4350-857e-5f96703c57b1&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.38544750272377426
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 5473704c16035631b64a99ed51d611f3
f0614cfcc33e5c23676b47faa9db376a8cf3e608
f496548c8bd47a51df60409902f09e4eb60dfedfb4573f634b65cb1d9f76c2d8
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467692&tk_flint=pbjs_lite_v6.15.0&x_source.tid=e72c89d0-692a-4350-857e-5f96703c57b1&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.38544750272377426 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8YNRI9B-D-8MXM; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:29 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qpa1nCGijYYDe9DtVM30fCg9e/wzbfbfdxoEisNeURUK3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:29 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Oct 2022 15:44:29 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 549 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1011), with no line terminators
Hash 8ea23ead0400e2e101259f71edec0ca8
f0bd4684b9333f2e71a0b1b1d89b3ed2d9691c94
e00112bf1545e1b42ed8c33e2628450ea7b1c8fbf7cefac95fc4caf2682bc31f
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 354
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Fri, 07 Oct 2022 15:44:29 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
vs=527999=5135984; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
pid=157586602480431131; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638007542692628970&o=1; expires=Sat, 08 Oct 2022 15:44:29 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Sat, 08 Oct 2022 15:44:29 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
prg.smartadserver.com/prebid/v1
200 OK 469 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (913), with no line terminators
Hash 88b46b585b3040dc9e5f84d37f9d0892
ee17c9c503d7bb83b2a4319d4409978485137f07
051de10ebd6e54fa116bcff5c4ab38df54bf9d90b8f2448fbfaea51d1588cf36
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 353
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Fri, 07 Oct 2022 15:44:28 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
vs=527999=5135984; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
pid=1549130627422679083; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638007542693074885&o=1; expires=Sat, 08 Oct 2022 15:44:29 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Sat, 08 Oct 2022 15:44:29 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=83526562227
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=83526562227
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=83526562227 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:29 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467762&tk_flint=pbjs_lite_v6.15.0&x_source.tid=7ec420fa-96fa-430a-9a61-d1550c2a0673&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.23934857365688356
200 OK 5.1 kB URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467762&tk_flint=pbjs_lite_v6.15.0&x_source.tid=7ec420fa-96fa-430a-9a61-d1550c2a0673&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.23934857365688356
IP
File type JSON data\012- , ASCII text, with very long lines (9288), with no line terminators
Hash d2a84e9ecf6d760fad902cc4f84aeea2
7ac26c9bcd42835543ff115229f4ef6fef1467a5
050fbb2884e5e386af1b4493b35b279b48e5719b332e3eeb53fa864384f64592
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467762&tk_flint=pbjs_lite_v6.15.0&x_source.tid=7ec420fa-96fa-430a-9a61-d1550c2a0673&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.23934857365688356 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json
Content-Length: 5105
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8YNRIB1-15-FSRM; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:29 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qo/9Fm93Cu98u9DtVM30fCg9e/wzbfbfdxoEisNeURUK3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:29 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Content-Encoding: gzip
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Oct 2022 15:44:29 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 1d92f6a6763faed672eba3b6dcea7988
1c8272bc056e2c94712afde19ad39489c81e78cb
53f0fd52c2993839d9932aea293570143770c09c4af82def7a37f1a1309ce79f
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 641
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: 50895973-ccee-43e5-aad2-7613f7a85040
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=71583617017
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=71583617017
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=71583617017 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:28 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Oct 2022 15:44:29 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=20932554651
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=20932554651
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=20932554651 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:29 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 145 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d973df97c0a28b0df11624a3f7e17c52
bf86d4e81fc6beb0e9036b3f5cf63367e7ed3d6e
027bcc25e8c97ec9a6963a31b28e206bdde4180d67d7d081c8213b8ed03e0950
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 643
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 145
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: d3cdc751-bd25-4ae3-b80b-0ee2499a0aa0
Set-Cookie: icu=ChkIv46FARAKGAEgASgBMN2SgZoGOAFAAUgBEN2SgZoGGAA.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 05-Jan-2023 15:44:29 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=8013191134403055496; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 05-Jan-2023 15:44:29 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Oct 2022 15:44:29 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467757&tk_flint=pbjs_lite_v6.15.0&x_source.tid=218ca073-e2a4-4dab-8710-05f84a037fc2&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.5344980193366722
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467757&tk_flint=pbjs_lite_v6.15.0&x_source.tid=218ca073-e2a4-4dab-8710-05f84a037fc2&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.5344980193366722
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash c29776fc242772bce47e58b954bdf743
fbe4724324f7a5962f816258da780ec50f6fc355
9f70fce33a9fe3a06bd2177319b062c2737b0b4912248d091354fbfb39b9121d
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467757&tk_flint=pbjs_lite_v6.15.0&x_source.tid=218ca073-e2a4-4dab-8710-05f84a037fc2&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.5344980193366722 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8YNRIDB-1Y-3DLZ; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:29 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qrxtz/9v4tLte9DtVM30fCg9e/wzbfbfdxoEisNeURUK3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:29 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
ib.adnxs.com/ut/v3/prebid
200 OK 145 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 87b71d79fbc25217161bc601ba4813d0
f26267b6495b04b05956f35c01917f9436ce4d8f
7c3547c1756362ca51ffeb068c1be454a50fc5961f932755f29fde63d4555002
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 642
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 145
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: d830b1e6-9952-4a13-9c71-f4a838350e44
Set-Cookie: icu=ChkIv46FARAKGAEgASgBMN2SgZoGOAFAAUgBEN2SgZoGGAA.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 05-Jan-2023 15:44:29 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=3682147392212076711; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 05-Jan-2023 15:44:29 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prg.smartadserver.com/prebid/v1
200 OK 452 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (872), with no line terminators
Hash 0d2cd5155ea350b60ba239c09e834e79
b388abd941078b692647b2258b1b5613c3fe708c
2c980b40f2f874172a084184360d328d68377252c291bdcdcba61618864aabfe
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 354
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Fri, 07 Oct 2022 15:44:29 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
vs=527999=5135984; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
pid=4582899030563287253; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638007542693870298&o=1; expires=Sat, 08 Oct 2022 15:44:29 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Sat, 08 Oct 2022 15:44:29 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=87630618545
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=87630618545
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=87630618545 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:28 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 650 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1277), with no line terminators
Hash 56d54c23322a7c72c25e511f74984edf
791cbbe1cf39c61a5a0c06b226e1e741df0953ae
f01d4cafff8b82b76b176052d56ba7063326b64f71dd6da65b00ffc33aa3a4c5
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 353
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Fri, 07 Oct 2022 15:44:28 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
vs=527999=5135984; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
pid=9038776425904402497; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638007542694095236&o=1; expires=Sat, 08 Oct 2022 15:44:29 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Sat, 08 Oct 2022 15:44:29 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Oct 2022 15:44:29 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467769&tk_flint=pbjs_lite_v6.15.0&x_source.tid=9eaa00a0-4dda-4b03-9194-97ddfb622ad9&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6135038811444099
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467769&tk_flint=pbjs_lite_v6.15.0&x_source.tid=9eaa00a0-4dda-4b03-9194-97ddfb622ad9&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6135038811444099
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 7c633dd83cffe10f0845042e7107e634
e56751462c19a72108c956e3046a90f7bfc069b1
a9bb47101dc0d09439cb6861e24f138ed4294175a782010a260dc5e51f0c6bb0
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467769&tk_flint=pbjs_lite_v6.15.0&x_source.tid=9eaa00a0-4dda-4b03-9194-97ddfb622ad9&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6135038811444099 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8YNRIE2-P-9ZG4; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:29 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qrxtz/9v4tLte9DtVM30fCg9e/wzbfbfdxoEisNeURUK3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:29 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467780&tk_flint=pbjs_lite_v6.15.0&x_source.tid=f09e37e3-d5ab-4bf4-946b-ed285af2da73&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.016503081531660357
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467780&tk_flint=pbjs_lite_v6.15.0&x_source.tid=f09e37e3-d5ab-4bf4-946b-ed285af2da73&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.016503081531660357
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 2a159e776cfd5b80142ea96c97af8ee5
163ad4b1cab3597f7be9d4280691f1dfa44bfb31
069f134fbd3345daeab2810be21427e3d25e4fa0afa00fd15dc36cb0722a4fae
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467780&tk_flint=pbjs_lite_v6.15.0&x_source.tid=f09e37e3-d5ab-4bf4-946b-ed285af2da73&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.016503081531660357 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8YNRIF4-8-A4LV; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:29 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qqS9dZo34kGLu9DtVM30fCg9e/wzbfbfdxoEisNeURUK3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:29 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
ib.adnxs.com/ut/v3/prebid
200 OK 144 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash ec8b6dca22b6b0854c61a98957889dc3
1b0f4364bc6d51d5f823300d3edbef2e1f8710f4
22e0ef6791a63ef23c3bcb04f6d2d55148b898a175cde0de8f0e982784651bbd
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 642
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 144
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: 20e2f1f1-b3f2-431b-bdfd-ead611ed481d
Set-Cookie: icu=ChkIv46FARAKGAEgASgBMN2SgZoGOAFAAUgBEN2SgZoGGAA.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 05-Jan-2023 15:44:29 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=6714310342623165244; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 05-Jan-2023 15:44:29 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prg.smartadserver.com/prebid/v1
200 OK 414 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (734), with no line terminators
Hash 3374ce1ffe61f54903a1722dd3a3eadd
5983d0052e0c4adf384b76112966d4cdfb10ee4a
402a17e30d551546adfc06f29d6cdd18259e7b5c6e08093ab385c5c60ea80ac3
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 354
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Fri, 07 Oct 2022 15:44:28 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
vs=527999=5135984; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
pid=8739081819966992561; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638007542694529501&o=1; expires=Sat, 08 Oct 2022 15:44:29 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Sat, 08 Oct 2022 15:44:29 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
prg.smartadserver.com/prebid/v1
200 OK 583 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1112), with no line terminators
Hash eff3b99430e253755f127ca50a7ec779
52a4a9c9eea76125c80063970207068fbf286aec
dc0cbad891ce70bce3a2718c2d7e7472adeba38558c8062f794a4dc55000b789
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 353
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Fri, 07 Oct 2022 15:44:29 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
vs=527999=5135984; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
pid=7355921734395293870; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638007542694947159&o=1; expires=Sat, 08 Oct 2022 15:44:29 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Sat, 08 Oct 2022 15:44:29 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
ib.adnxs.com/ut/v3/prebid
200 OK 135 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d0987288e582885e237cd19e581cccd0
2995b40d5aa1f7909461ccc37660aa217d60a83b
b1413542c58e8af5d3f53b38cc95dcba607ca5854e7e05a5b36d9a7c5db5a68a
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 639
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 135
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: 58925ae4-d10f-44f5-9942-43a77c75a59a
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=14167402670
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=14167402670
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=14167402670 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:28 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 145 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 8e159a633ede3a89063151a5b9818156
0c657674d628a57ae7a6144efdc0768e11112ef8
5911f8af54a799d21853a2ea5801bb5335b494b7bab68fffc8e7f198465db261
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 645
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 145
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: 7e7d49a6-8cd4-43e8-814d-67d93ef3300f
Set-Cookie: icu=ChkIv46FARAKGAEgASgBMN2SgZoGOAFAAUgBEN2SgZoGGAA.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 05-Jan-2023 15:44:29 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=5092101242415138563; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 05-Jan-2023 15:44:29 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Oct 2022 15:44:29 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467788&tk_flint=pbjs_lite_v6.15.0&x_source.tid=51ed9a36-4074-45e6-914e-28e69633a3db&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6740835173299436
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467788&tk_flint=pbjs_lite_v6.15.0&x_source.tid=51ed9a36-4074-45e6-914e-28e69633a3db&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6740835173299436
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash e69edb5dd56b0755664cd627daa7a8a5
b841cf568c3692efe4700655e459cc7818587b9b
1e78d09a46da3c0ae2f239793d5ecb9c70b7279dce5d891e6e1ac0e7380b85e5
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467788&tk_flint=pbjs_lite_v6.15.0&x_source.tid=51ed9a36-4074-45e6-914e-28e69633a3db&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6740835173299436 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8YNRIGB-G-JSX6; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:29 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qrdcxPREviu6e9DtVM30fCg9e/wzbfbfdxoEisNeURUK3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:29 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=58031792176
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=58031792176
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=58031792176 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:28 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467797&tk_flint=pbjs_lite_v6.15.0&x_source.tid=34f31005-5f9a-4cef-acc5-b3c866cc8a24&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.8914775578936349
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467797&tk_flint=pbjs_lite_v6.15.0&x_source.tid=34f31005-5f9a-4cef-acc5-b3c866cc8a24&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.8914775578936349
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 4a9f5a77379ba7b8bef2d278bdf920dd
d6c1655fdb497010fd1038b1d15f9f1918a0d796
516a12958b28e3c3803e8119eccf5722ecee5e60fb17c304d554050549ea9440
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467797&tk_flint=pbjs_lite_v6.15.0&x_source.tid=34f31005-5f9a-4cef-acc5-b3c866cc8a24&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.8914775578936349 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8YNRILE-S-8EHG; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:29 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qqtfMTu+/t7ce9DtVM30fCg9e/wzbfbfdxoEisNeURUK3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:29 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash da0dd33cfbc6a52c36e6c4384dd90f7e
1afa2c4db37eae151a0481505377a60ff772aad5
c638c12924e7b90daff29caa3d66a38eb763b74639d4e1d13abb874343a20190
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 642
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: 21f211e1-3fd9-440a-8f4b-2c54c519f1c8
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=42290066202
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=42290066202
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=42290066202 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:28 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Oct 2022 15:44:29 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 584 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1142), with no line terminators
Hash 2ef8abb6d124fdc9bb72b5eac6546220
a70404b3b6f4b737193988aa602224bc86553111
b40778af2de023a0565251bdf7f95bca174220d9069733ba46455996eb568056
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 351
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Fri, 07 Oct 2022 15:44:29 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
vs=527999=5135984; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
pid=2727042648349405210; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638007542696702944&o=1; expires=Sat, 08 Oct 2022 15:44:29 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Sat, 08 Oct 2022 15:44:29 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Oct 2022 15:44:29 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash eabb0c1ebf2e948f8dd4f45785964031
d5ba1f6e2edf11fce24eb58cf463b3fe9042e759
afadf73e6528aa3b6986041d75a1e52b4d8103059d74391f401fb65c2c97353c
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 644
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: 0f92a5d4-41b1-40fb-8d22-00c6ecc33dd3
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prg.smartadserver.com/prebid/v1
200 OK 524 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (987), with no line terminators
Hash d169f3ae6b1743747e5f14ac1abf69d7
78e6cf29c6a13520b38e792ca992c1a86f356d0a
c4d89fb615dc1aac74611de489379ed004327836cdcf7eb93af8da980faa5ed4
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 352
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Fri, 07 Oct 2022 15:44:28 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
vs=527999=5135984; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
pid=3638756100963364971; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638007542697172523&o=1; expires=Sat, 08 Oct 2022 15:44:29 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Sat, 08 Oct 2022 15:44:29 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467802&tk_flint=pbjs_lite_v6.15.0&x_source.tid=ac6e54c4-07e8-4f98-b82f-045efdc3fcef&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.1911341762270734
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467802&tk_flint=pbjs_lite_v6.15.0&x_source.tid=ac6e54c4-07e8-4f98-b82f-045efdc3fcef&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.1911341762270734
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 6178693528b45ce680856e900bf5cced
c62fce4fde52181ce3f4baf4e73a995d16f09a77
1f6efd8fc91fde766833b22fb1eddeda28a92463083e8df59a544c8c3369a154
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467802&tk_flint=pbjs_lite_v6.15.0&x_source.tid=ac6e54c4-07e8-4f98-b82f-045efdc3fcef&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.1911341762270734 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8YNRIMY-1I-8J8H; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:29 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qq0/auWqJMKau9DtVM30fCg9e/wzbfbfdxoEisNeURUK3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:29 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
googleads.g.doubleclick.net/pagead/render_post_ads_v1.html
200 OK 5.0 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/render_post_ads_v1.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (12776)
Hash 7718eb5aa6061a2f54af5133265a6f6f
cdeda586593a1808bd418e4ca411e301e11d0e55
542d0cb3c6bff1bd616bfc4f0f39869e61366ef6d838f5a543f85e8a4a2a6408
GET /pagead/render_post_ads_v1.html HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flashnetic.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 4980
x-xss-protection: 0
date: Thu, 06 Oct 2022 20:16:57 GMT
expires: Fri, 07 Oct 2022 20:16:57 GMT
cache-control: public, max-age=86400
age: 70052
etag: 12223946614886178233
content-type: text/html; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/xbfe_backfill.js
200 OK 3.2 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/xbfe_backfill.js
IP
File type ASCII text, with very long lines (1609)
Hash c2fc93f94c0733f228c1818b57927180
82e304d5ba7517e1b7dbbb599ca34d38b3122cf7
66bddef1c48dbdd11780d7cf4926fe85e89bb5c861273805f52fc2fe4a8a927a
GET /pagead/xbfe_backfill.js HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 3158
x-xss-protection: 0
date: Fri, 07 Oct 2022 14:50:06 GMT
expires: Fri, 07 Oct 2022 15:50:06 GMT
cache-control: public, max-age=3600
age: 3263
etag: 11640381189078294886
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 574 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1050), with no line terminators
Hash 2435516e015ee3f5025a67fea20c3b04
84a45b8a45bd79867c6636894eb18bd68ad5d8b2
80e47c78ecdcc2470cd0af4592bda6b9f729792987e37bce0be7eb0bd0371aec
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 353
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Fri, 07 Oct 2022 15:44:29 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
vs=527999=5135984; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
pid=123534121777819673; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638007542697602641&o=1; expires=Sat, 08 Oct 2022 15:44:29 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Sat, 08 Oct 2022 15:44:29 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467812&tk_flint=pbjs_lite_v6.15.0&x_source.tid=d8c69639-4bf7-4d4b-8a3b-1c2adaa47454&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.18836580572858863
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467812&tk_flint=pbjs_lite_v6.15.0&x_source.tid=d8c69639-4bf7-4d4b-8a3b-1c2adaa47454&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.18836580572858863
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 74b72868c8ec57b95256d3b51b4aef75
c2bbf3d8a9d7c03fe1b45809f42c7f6a2564d51a
2567be65d21b95258e1a7e9d049e9e1d156721be9aed6b0e43894df2343b025f
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467812&tk_flint=pbjs_lite_v6.15.0&x_source.tid=d8c69639-4bf7-4d4b-8a3b-1c2adaa47454&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.18836580572858863 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8YNRINW-11-49OY; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:29 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qqDDD/J9vXO5+9DtVM30fCg9e/wzbfbfdxoEisNeURUK3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:29 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7df8001b4ae53954f34ff975a56a3e7c
9d2229c7e6d2c52812a13a3b02aa0e89bc3a009f
14201d71b0b03fef1de0f34153e1a253db6fb2c1012f4c10d8c7a2d9c111edd2
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 641
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: 9a2c743a-3b22-4e52-a0fb-512f0a49a438
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=29817210510
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=29817210510
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=29817210510 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:29 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Oct 2022 15:44:29 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467816&tk_flint=pbjs_lite_v6.15.0&x_source.tid=930af1e9-7ad3-414f-9aec-498d809b151a&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.2105091329123684
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467816&tk_flint=pbjs_lite_v6.15.0&x_source.tid=930af1e9-7ad3-414f-9aec-498d809b151a&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.2105091329123684
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 28babcceb0c85f4720a0be0fc44514c9
bd4e912dcd72290d4848d36dc937b645608dc21d
322fbbc69354a21394efd37bda78647292ccfcf424ddfa6d34d285955f796e55
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665157467816&tk_flint=pbjs_lite_v6.15.0&x_source.tid=930af1e9-7ad3-414f-9aec-498d809b151a&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.2105091329123684 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Fri, 07 Oct 2022 15:44:29 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8YNRIQ8-1Y-8VP8; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:29 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qrnPFA7BdJBgu9DtVM30fCg9e/wzbfbfdxoEisNeURUK3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:29 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
prg.smartadserver.com/prebid/v1
200 OK 604 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1249), with no line terminators
Hash 17c2208a5e0dbd14583dc552d70a1e63
a406b439a7fe8c1bd8217f1af34b4fdc9f4de258
786df8231cd4ecf893d2e0da6759d4a7dd2e9ec9f7055797edd044d210560576
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 352
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Fri, 07 Oct 2022 15:44:29 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
vs=527999=5135984; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
pid=5622428098566090917; expires=Sat, 07 Oct 2023 15:44:29 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638007542698496880&o=1; expires=Sat, 08 Oct 2022 15:44:29 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Sat, 08 Oct 2022 15:44:29 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
id5-sync.com/g/v2/579.json
200 216 B URL HTTP/1.1 id5-sync.com/g/v2/579.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 10b9124d0d43cffb78b1b4de4c0d3882
4a929d8cde66c532d2d961e5bf45d86f86678f2f
198d6f90f13d41231be99e9d660bf19e860e6535633dbe068714926f8f7d1c98
POST /g/v2/579.json HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 412
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: https://earnme.club
access-control-allow-credentials: true
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Fri, 07 Oct 2022 15:44:30 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
id5-sync.com/g/v2/579.json
200 216 B URL HTTP/1.1 id5-sync.com/g/v2/579.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 93051e503149335975cd1acd5ef45bff
d03bd710f112dd49ada20624d8deada72cfe3c8a
06ecfee2eedaf5e46de5d23f866e174f7204dee318df54503d15f766310a9e4c
POST /g/v2/579.json HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 315
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: https://earnme.club
access-control-allow-credentials: true
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Fri, 07 Oct 2022 15:44:30 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 579e733097a7260db68f6ab5fc4ab3c9
bcee618650f7eb1595974812db6995d7ee0e9764
c025aa32afae5edb4c793bcc3076c86ae945438c7d2e96f7847054aeb1ed690b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pagead2.googlesyndication.com/pagead/gen_204?id=awbid&awbid_b=AKAmf-AS3WhDxbHMDhN2YJjSemim7OYYFbtw6sYIhxr84jY8U47DsXuyv6kvlC9pIv5JogeeWDA6zxpCVLpOD9SJCscV5J36ew
204 No Content 0 B URL HTTP/2 pagead2.googlesyndication.com/pagead/gen_204?id=awbid&awbid_b=AKAmf-AS3WhDxbHMDhN2YJjSemim7OYYFbtw6sYIhxr84jY8U47DsXuyv6kvlC9pIv5JogeeWDA6zxpCVLpOD9SJCscV5J36ew
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/gen_204?id=awbid&awbid_b=AKAmf-AS3WhDxbHMDhN2YJjSemim7OYYFbtw6sYIhxr84jY8U47DsXuyv6kvlC9pIv5JogeeWDA6zxpCVLpOD9SJCscV5J36ew HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 07 Oct 2022 15:44:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/recaptcha/api2/aframe
200 OK 513 B URL HTTP/2 www.google.com/recaptcha/api2/aframe
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (783), with no line terminators
Hash 161490352b41e8ed9a2557e450304014
8a580f9efead3e675127c7cd2efc57b36669c6de
f87e75644edebc814ec010ca2f801bee82e95f09b4b7c12eb5c4812f6507ab66
GET /recaptcha/api2/aframe HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Fri, 07 Oct 2022 15:44:30 GMT
date: Fri, 07 Oct 2022 15:44:30 GMT
cache-control: private, max-age=300
content-type: text/html; charset=utf-8
content-security-policy: script-src 'nonce-errc-WU56P54g3GdsLHmSQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 513
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.adnxs.com/v/s/229/trk.js
200 OK 29 kB URL HTTP/1.1 cdn.adnxs.com/v/s/229/trk.js
IP
File type ASCII text, with very long lines (2298)
Hash 1033c6cc4fa7cfe057470fba1c221888
6fd2d572c4909ba247573f79eb004aab6a13f420
d0f779a756193d460bdcb10d0313c8dde3b6331e5041b9f4b36529fa88eeface
GET /v/s/229/trk.js HTTP/1.1
Host: cdn.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 29365
Content-Type: application/x-javascript
ETag: "e4a20054d2e3bd70bee1fab0cc606a4f:1664962901.362129"
Last-Modified: Wed, 05 Oct 2022 09:41:41 GMT
Server: AkamaiNetStorage
Content-Encoding: gzip
Cache-Control: max-age=31536000
Expires: Thu, 05 Oct 2023 09:41:59 GMT
Access-Control-Allow-Origin: *, *
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 07 Oct 2022 15:44:30 GMT
Age: 194551
X-Served-By: cache-lga21948-LGA, cache-bma1679-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1, 377748
X-Timer: S1665157471.507185,VS0,VE0
Vary: Accept-Encoding
pagead2.googlesyndication.com/pagead/gen_204?id=awbid&awbid_b=AKAmf-Ckxcum6BgfpPm9eVa_37eF4Y9gy1ED6SYh1Cqy4bbEahFPAdnDYpPCGvYXvQn0Q5KT23gRhMBEUFdSCGxiENwFIfhdzA&pr=8:59A88551D1F91BE4
204 No Content 0 B URL HTTP/2 pagead2.googlesyndication.com/pagead/gen_204?id=awbid&awbid_b=AKAmf-Ckxcum6BgfpPm9eVa_37eF4Y9gy1ED6SYh1Cqy4bbEahFPAdnDYpPCGvYXvQn0Q5KT23gRhMBEUFdSCGxiENwFIfhdzA&pr=8:59A88551D1F91BE4
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/gen_204?id=awbid&awbid_b=AKAmf-Ckxcum6BgfpPm9eVa_37eF4Y9gy1ED6SYh1Cqy4bbEahFPAdnDYpPCGvYXvQn0Q5KT23gRhMBEUFdSCGxiENwFIfhdzA&pr=8:59A88551D1F91BE4 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 07 Oct 2022 15:44:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ams3-ib.adnxs.com/it?an_audit=0&referrer=https%253A%252F%252Fearnme.club%252F&e=wqT_3QKEBugEAwAAAwDWAAUBCNySgZoGEImBqLnJgIXlYxgAKjYJbHnlettMpT8RLA3W4eNxoT8ZAAAAIIXrwT8hLA0SACkRJPS4AjEAAABA4XqEPzDvvN8MOJhQQOUeSGVQoZ_pJFi18qABYABoif3DAXjf9QWAAQGKAQNVU0SSAQNFVVKYAawCoAH6AagBAbABALgBAcABBcgBAtABANgBAOABAPABANgCAOACm4VO6gIUaHR0cHM6Ly9lYXJubWUuY2x1Yi-AAwCIAwGQAwCYAxegAwGqA-oBCr8BaHR0cHM6Ly9wYWdlYWQyLmdvb2dsZXN5bmRpY2F0aW9uLmNvbS9wYWdlYWQvZ2VuXzIwND9pZD1hd2JpZCZhd2JpZF9iPUFLQW1mLURlU1F6Zlh6ZVlwaDJXYWRrdGVCdnBHY3RRSXJCS2ctd0kyVTVwTXJzWElqWTFiWlZuY243R3lFenl1YWN1SC1hNUEtS0RnWDVsajIwZE9JeUdrdWd4RC1RdVB3JnByPTEwOiR7QVVDVElPTl9QUklDRX0aEzcxOTA1ODE3NjQ5OTg5NTUxNDUiCDc3MjIxNzkzKgQzOTQxOgEwwAOsAsgDANgDtsDEAeADAOgDAPgDAYAEAJIEDS91dC92My9wcmViaWSYBACiBAw5MS45MC40Mi4xNTSoBACyBBAIABABGKwCIPoBKAAwADgCuAQAwAQAyAQA2gQCCAHgBAHwBKGf6SSIBQGYBQCgBfba6vS1tsHAa8AFAMkFAAAAAAAA8D_SBQkJAAAAAAAAAADYBQHgBQHwBbzgG_oFBAgAEACQBgCYBgC4BgDBBgAAAAAAAPA_0AbujwHaBhYKEAAAAAAAAAAAAAAAAAAAAAAQABgA4AYB8gYCCACABwGIBwCgBwGqBwwxNDcyMDAyNTYxMji6Bw8IABAAGAAgADAAOOUVQADIB9_1BdIHDQkAAAAAAAAAABAAGADaBwYIABAAGADgBwDqBwIIAPAH_PYLiggCEACVCAAAgD-YCAE.&s=f266e82a41dff600e588f8d9663f2c145dd5e9d7
200 OK 0 B URL HTTP/1.1 ams3-ib.adnxs.com/it?an_audit=0&referrer=https%253A%252F%252Fearnme.club%252F&e=wqT_3QKEBugEAwAAAwDWAAUBCNySgZoGEImBqLnJgIXlYxgAKjYJbHnlettMpT8RLA3W4eNxoT8ZAAAAIIXrwT8hLA0SACkRJPS4AjEAAABA4XqEPzDvvN8MOJhQQOUeSGVQoZ_pJFi18qABYABoif3DAXjf9QWAAQGKAQNVU0SSAQNFVVKYAawCoAH6AagBAbABALgBAcABBcgBAtABANgBAOABAPABANgCAOACm4VO6gIUaHR0cHM6Ly9lYXJubWUuY2x1Yi-AAwCIAwGQAwCYAxegAwGqA-oBCr8BaHR0cHM6Ly9wYWdlYWQyLmdvb2dsZXN5bmRpY2F0aW9uLmNvbS9wYWdlYWQvZ2VuXzIwND9pZD1hd2JpZCZhd2JpZF9iPUFLQW1mLURlU1F6Zlh6ZVlwaDJXYWRrdGVCdnBHY3RRSXJCS2ctd0kyVTVwTXJzWElqWTFiWlZuY243R3lFenl1YWN1SC1hNUEtS0RnWDVsajIwZE9JeUdrdWd4RC1RdVB3JnByPTEwOiR7QVVDVElPTl9QUklDRX0aEzcxOTA1ODE3NjQ5OTg5NTUxNDUiCDc3MjIxNzkzKgQzOTQxOgEwwAOsAsgDANgDtsDEAeADAOgDAPgDAYAEAJIEDS91dC92My9wcmViaWSYBACiBAw5MS45MC40Mi4xNTSoBACyBBAIABABGKwCIPoBKAAwADgCuAQAwAQAyAQA2gQCCAHgBAHwBKGf6SSIBQGYBQCgBfba6vS1tsHAa8AFAMkFAAAAAAAA8D_SBQkJAAAAAAAAAADYBQHgBQHwBbzgG_oFBAgAEACQBgCYBgC4BgDBBgAAAAAAAPA_0AbujwHaBhYKEAAAAAAAAAAAAAAAAAAAAAAQABgA4AYB8gYCCACABwGIBwCgBwGqBwwxNDcyMDAyNTYxMji6Bw8IABAAGAAgADAAOOUVQADIB9_1BdIHDQkAAAAAAAAAABAAGADaBwYIABAAGADgBwDqBwIIAPAH_PYLiggCEACVCAAAgD-YCAE.&s=f266e82a41dff600e588f8d9663f2c145dd5e9d7
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /it?an_audit=0&referrer=https%253A%252F%252Fearnme.club%252F&e=wqT_3QKEBugEAwAAAwDWAAUBCNySgZoGEImBqLnJgIXlYxgAKjYJbHnlettMpT8RLA3W4eNxoT8ZAAAAIIXrwT8hLA0SACkRJPS4AjEAAABA4XqEPzDvvN8MOJhQQOUeSGVQoZ_pJFi18qABYABoif3DAXjf9QWAAQGKAQNVU0SSAQNFVVKYAawCoAH6AagBAbABALgBAcABBcgBAtABANgBAOABAPABANgCAOACm4VO6gIUaHR0cHM6Ly9lYXJubWUuY2x1Yi-AAwCIAwGQAwCYAxegAwGqA-oBCr8BaHR0cHM6Ly9wYWdlYWQyLmdvb2dsZXN5bmRpY2F0aW9uLmNvbS9wYWdlYWQvZ2VuXzIwND9pZD1hd2JpZCZhd2JpZF9iPUFLQW1mLURlU1F6Zlh6ZVlwaDJXYWRrdGVCdnBHY3RRSXJCS2ctd0kyVTVwTXJzWElqWTFiWlZuY243R3lFenl1YWN1SC1hNUEtS0RnWDVsajIwZE9JeUdrdWd4RC1RdVB3JnByPTEwOiR7QVVDVElPTl9QUklDRX0aEzcxOTA1ODE3NjQ5OTg5NTUxNDUiCDc3MjIxNzkzKgQzOTQxOgEwwAOsAsgDANgDtsDEAeADAOgDAPgDAYAEAJIEDS91dC92My9wcmViaWSYBACiBAw5MS45MC40Mi4xNTSoBACyBBAIABABGKwCIPoBKAAwADgCuAQAwAQAyAQA2gQCCAHgBAHwBKGf6SSIBQGYBQCgBfba6vS1tsHAa8AFAMkFAAAAAAAA8D_SBQkJAAAAAAAAAADYBQHgBQHwBbzgG_oFBAgAEACQBgCYBgC4BgDBBgAAAAAAAPA_0AbujwHaBhYKEAAAAAAAAAAAAAAAAAAAAAAQABgA4AYB8gYCCACABwGIBwCgBwGqBwwxNDcyMDAyNTYxMji6Bw8IABAAGAAgADAAOOUVQADIB9_1BdIHDQkAAAAAAAAAABAAGADaBwYIABAAGADgBwDqBwIIAPAH_PYLiggCEACVCAAAgD-YCAE.&s=f266e82a41dff600e588f8d9663f2c145dd5e9d7 HTTP/1.1
Host: ams3-ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:30 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 6e932579-e942-4bd9-9ef5-a25831437736
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 946.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 170fe4e0643649170fd33fa82ff999e4
7cfae010a803d4855ebb08f5c4502fd12ab9f056
88f9e5e0e5cb79c08461f8cb2c82740c74246e69227fc054a23c5af2a93c70b6
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 07 Oct 2022 15:44:30 GMT
Last-Modified: Fri, 07 Oct 2022 13:54:58 GMT
Server: ECS (nyb/1D0E)
X-Cache: Miss from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 4g17ZGLkYNQQsrZ4_kNx6skio4sd2yRo61aUUJt8xMNHBpEdV9O3Aw==
Age: 6572
beacon-ams3.rubiconproject.com/beacon/d/2c3e29b9-1d56-4631-af76-68c1e88a9c04?oo=0&accountId=17210&siteId=397268&zoneId=2226136&sizeId=15&e=6A1E40E384DA563B2F390627E90F73B00C66A2FBBB0BAB6F1CC0F398F65D383FB50D27E68DE252F0A2E1F49A69A9BFF99F0BE1F8337FD75D450735AEF8B6C3BED61C662FD35B4334820D9B9592B2B40DCBB2E4E913EBB9DE3D94523B67C9D7780D7A6FE87F5C1044E430D468B45F7FDDC42B57DDC14104FAD69E6BCE473548E37E625848872D964AE88D14A8E282D0F97EA1393EB28CA371FC4BD844C8AA86B0345E861C5113AC6795B257D009B4F955D70B37B96D690511CE8E3144C496B5B8
200 43 B URL HTTP/1.1 beacon-ams3.rubiconproject.com/beacon/d/2c3e29b9-1d56-4631-af76-68c1e88a9c04?oo=0&accountId=17210&siteId=397268&zoneId=2226136&sizeId=15&e=6A1E40E384DA563B2F390627E90F73B00C66A2FBBB0BAB6F1CC0F398F65D383FB50D27E68DE252F0A2E1F49A69A9BFF99F0BE1F8337FD75D450735AEF8B6C3BED61C662FD35B4334820D9B9592B2B40DCBB2E4E913EBB9DE3D94523B67C9D7780D7A6FE87F5C1044E430D468B45F7FDDC42B57DDC14104FAD69E6BCE473548E37E625848872D964AE88D14A8E282D0F97EA1393EB28CA371FC4BD844C8AA86B0345E861C5113AC6795B257D009B4F955D70B37B96D690511CE8E3144C496B5B8
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /beacon/d/2c3e29b9-1d56-4631-af76-68c1e88a9c04?oo=0&accountId=17210&siteId=397268&zoneId=2226136&sizeId=15&e=6A1E40E384DA563B2F390627E90F73B00C66A2FBBB0BAB6F1CC0F398F65D383FB50D27E68DE252F0A2E1F49A69A9BFF99F0BE1F8337FD75D450735AEF8B6C3BED61C662FD35B4334820D9B9592B2B40DCBB2E4E913EBB9DE3D94523B67C9D7780D7A6FE87F5C1044E430D468B45F7FDDC42B57DDC14104FAD69E6BCE473548E37E625848872D964AE88D14A8E282D0F97EA1393EB28CA371FC4BD844C8AA86B0345E861C5113AC6795B257D009B4F955D70B37B96D690511CE8E3144C496B5B8 HTTP/1.1
Host: beacon-ams3.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
Cache-Control: private, max-age=0, no-cache
Expires: 01 Jan 1970 10:00:00 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Content-Type: image/avif
Content-Length: 43
Date: Fri, 07 Oct 2022 15:44:29 GMT
Keep-Alive: timeout=60
Connection: keep-alive
pagead2.googlesyndication.com/pagead/gen_204?id=awbid&awbid_b=AKAmf-AU8JjGi8ymnEGlUymdSf6lTYY2LexAx_vHkyBc8BBSl1cdZW9x9X4tkEd3kqYUwCuzTE6po37qTfFAwHo1RW0CR5yOlw
204 No Content 0 B URL HTTP/2 pagead2.googlesyndication.com/pagead/gen_204?id=awbid&awbid_b=AKAmf-AU8JjGi8ymnEGlUymdSf6lTYY2LexAx_vHkyBc8BBSl1cdZW9x9X4tkEd3kqYUwCuzTE6po37qTfFAwHo1RW0CR5yOlw
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/gen_204?id=awbid&awbid_b=AKAmf-AU8JjGi8ymnEGlUymdSf6lTYY2LexAx_vHkyBc8BBSl1cdZW9x9X4tkEd3kqYUwCuzTE6po37qTfFAwHo1RW0CR5yOlw HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 07 Oct 2022 15:44:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ams3-ib.adnxs.com/it?an_audit=0&referrer=https%253A%252F%252Fearnme.club%252F&e=wqT_3QKEBugEAwAAAwDWAAUBCN2SgZoGEJX-0rfW9_TPYxgAKjYJRGlv8IXJpD8RaqkX11MGoT8ZAAAAIIXrwT8hag0SACkRJPS4AjEAAABA4XqEPzDvvN8MOJhQQOUeSGVQoZ_pJFi18qABYABoif3DAXi79AWAAQGKAQNVU0SSAQNFVVKYAawCoAH6AagBAbABALgBAcABBcgBAtABANgBAOABAPABANgCAOACm4VO6gIUaHR0cHM6Ly9lYXJubWUuY2x1Yi-AAwCIAwGQAwCYAxegAwGqA-oBCr8BaHR0cHM6Ly9wYWdlYWQyLmdvb2dsZXN5bmRpY2F0aW9uLmNvbS9wYWdlYWQvZ2VuXzIwND9pZD1hd2JpZCZhd2JpZF9iPUFLQW1mLUJEel9ScGFIVWg5X0h4LUN2WGtiNThybzlPbmxlSFl3MFY1R1pfTWRfSGFwSmpzQk52R0tNYU5qb0k4WkM4OFFaa1dxZVFlcXo2SjgyS200YkFraXJLSmRpd21BJnByPTEwOiR7QVVDVElPTl9QUklDRX0aEzcxNzg2ODkxNDE0ODE0NTUzODEiCDc3MjIxNzkzKgQzOTQxOgEwwAOsAsgDANgDtsDEAeADAOgDAPgDAYAEAJIEDS91dC92My9wcmViaWSYBACiBAw5MS45MC40Mi4xNTSoBACyBBAIABABGKwCIPoBKAAwADgCuAQAwAQAyAQA2gQCCAHgBAHwBKGf6SSIBQGYBQCgBYquo7fIzr7hDcAFAMkFAAAAAAAA8D_SBQkJAAAAAAAAAADYBQHgBQHwBbzgG_oFBAgAEACQBgCYBgC4BgDBBgAAAAAAAPA_0AbujwHaBhYKEAAAAAAAAAAAAAAAAAAAAAAQABgA4AYB8gYCCACABwGIBwCgBwGqBwwxNDcyMDAyNTYxMji6Bw8IABAAGAAgADAAOOUVQADIB7v0BdIHDQkAAAAAAAAAABAAGADaBwYIABAAGADgBwDqBwIIAPAH_PYLiggCEACVCAAAgD-YCAE.&s=ddf5b2b7948ab06a671e100e9ad78de872aeeaa3
200 OK 0 B URL HTTP/1.1 ams3-ib.adnxs.com/it?an_audit=0&referrer=https%253A%252F%252Fearnme.club%252F&e=wqT_3QKEBugEAwAAAwDWAAUBCN2SgZoGEJX-0rfW9_TPYxgAKjYJRGlv8IXJpD8RaqkX11MGoT8ZAAAAIIXrwT8hag0SACkRJPS4AjEAAABA4XqEPzDvvN8MOJhQQOUeSGVQoZ_pJFi18qABYABoif3DAXi79AWAAQGKAQNVU0SSAQNFVVKYAawCoAH6AagBAbABALgBAcABBcgBAtABANgBAOABAPABANgCAOACm4VO6gIUaHR0cHM6Ly9lYXJubWUuY2x1Yi-AAwCIAwGQAwCYAxegAwGqA-oBCr8BaHR0cHM6Ly9wYWdlYWQyLmdvb2dsZXN5bmRpY2F0aW9uLmNvbS9wYWdlYWQvZ2VuXzIwND9pZD1hd2JpZCZhd2JpZF9iPUFLQW1mLUJEel9ScGFIVWg5X0h4LUN2WGtiNThybzlPbmxlSFl3MFY1R1pfTWRfSGFwSmpzQk52R0tNYU5qb0k4WkM4OFFaa1dxZVFlcXo2SjgyS200YkFraXJLSmRpd21BJnByPTEwOiR7QVVDVElPTl9QUklDRX0aEzcxNzg2ODkxNDE0ODE0NTUzODEiCDc3MjIxNzkzKgQzOTQxOgEwwAOsAsgDANgDtsDEAeADAOgDAPgDAYAEAJIEDS91dC92My9wcmViaWSYBACiBAw5MS45MC40Mi4xNTSoBACyBBAIABABGKwCIPoBKAAwADgCuAQAwAQAyAQA2gQCCAHgBAHwBKGf6SSIBQGYBQCgBYquo7fIzr7hDcAFAMkFAAAAAAAA8D_SBQkJAAAAAAAAAADYBQHgBQHwBbzgG_oFBAgAEACQBgCYBgC4BgDBBgAAAAAAAPA_0AbujwHaBhYKEAAAAAAAAAAAAAAAAAAAAAAQABgA4AYB8gYCCACABwGIBwCgBwGqBwwxNDcyMDAyNTYxMji6Bw8IABAAGAAgADAAOOUVQADIB7v0BdIHDQkAAAAAAAAAABAAGADaBwYIABAAGADgBwDqBwIIAPAH_PYLiggCEACVCAAAgD-YCAE.&s=ddf5b2b7948ab06a671e100e9ad78de872aeeaa3
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /it?an_audit=0&referrer=https%253A%252F%252Fearnme.club%252F&e=wqT_3QKEBugEAwAAAwDWAAUBCN2SgZoGEJX-0rfW9_TPYxgAKjYJRGlv8IXJpD8RaqkX11MGoT8ZAAAAIIXrwT8hag0SACkRJPS4AjEAAABA4XqEPzDvvN8MOJhQQOUeSGVQoZ_pJFi18qABYABoif3DAXi79AWAAQGKAQNVU0SSAQNFVVKYAawCoAH6AagBAbABALgBAcABBcgBAtABANgBAOABAPABANgCAOACm4VO6gIUaHR0cHM6Ly9lYXJubWUuY2x1Yi-AAwCIAwGQAwCYAxegAwGqA-oBCr8BaHR0cHM6Ly9wYWdlYWQyLmdvb2dsZXN5bmRpY2F0aW9uLmNvbS9wYWdlYWQvZ2VuXzIwND9pZD1hd2JpZCZhd2JpZF9iPUFLQW1mLUJEel9ScGFIVWg5X0h4LUN2WGtiNThybzlPbmxlSFl3MFY1R1pfTWRfSGFwSmpzQk52R0tNYU5qb0k4WkM4OFFaa1dxZVFlcXo2SjgyS200YkFraXJLSmRpd21BJnByPTEwOiR7QVVDVElPTl9QUklDRX0aEzcxNzg2ODkxNDE0ODE0NTUzODEiCDc3MjIxNzkzKgQzOTQxOgEwwAOsAsgDANgDtsDEAeADAOgDAPgDAYAEAJIEDS91dC92My9wcmViaWSYBACiBAw5MS45MC40Mi4xNTSoBACyBBAIABABGKwCIPoBKAAwADgCuAQAwAQAyAQA2gQCCAHgBAHwBKGf6SSIBQGYBQCgBYquo7fIzr7hDcAFAMkFAAAAAAAA8D_SBQkJAAAAAAAAAADYBQHgBQHwBbzgG_oFBAgAEACQBgCYBgC4BgDBBgAAAAAAAPA_0AbujwHaBhYKEAAAAAAAAAAAAAAAAAAAAAAQABgA4AYB8gYCCACABwGIBwCgBwGqBwwxNDcyMDAyNTYxMji6Bw8IABAAGAAgADAAOOUVQADIB7v0BdIHDQkAAAAAAAAAABAAGADaBwYIABAAGADgBwDqBwIIAPAH_PYLiggCEACVCAAAgD-YCAE.&s=ddf5b2b7948ab06a671e100e9ad78de872aeeaa3 HTTP/1.1
Host: ams3-ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:30 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: fc94a986-9ecb-4daf-9479-953ff83ce4ad
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 946.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.28.0&cb=49179754782
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.28.0&cb=49179754782
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.28.0&cb=49179754782 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 494
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:30 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://earnme.club
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
prebid-eu.creativecdn.com/bidder/prebid/bids
204 No Content 0 B URL HTTP/2 prebid-eu.creativecdn.com/bidder/prebid/bids
IP
ASN #204995 Rtb House S.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bidder/prebid/bids HTTP/1.1
Host: prebid-eu.creativecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 534
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 07 Oct 2022 15:44:30 GMT
access-control-allow-origin: https://earnme.club
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-max-age: 3600
vary: Origin
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 610
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 07 Oct 2022 15:44:30 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://earnme.club
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F&tg_i.page=https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F&tg_i.domain=earnme.club&tg_i.pbadslot=%2F21671350435%2C22687820958%2F300x250-earnme.club_._2&tk_flint=pbjs_lite_v6.28.0&x_source.tid=c371ab29-3c21-48d5-89e1-8e4516b3fbab&l_pb_bid_id=8e97cf12da39cb8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.7313138494022438
200 OK 444 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F&tg_i.page=https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F&tg_i.domain=earnme.club&tg_i.pbadslot=%2F21671350435%2C22687820958%2F300x250-earnme.club_._2&tk_flint=pbjs_lite_v6.28.0&x_source.tid=c371ab29-3c21-48d5-89e1-8e4516b3fbab&l_pb_bid_id=8e97cf12da39cb8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.7313138494022438
IP
File type JSON data\012- , ASCII text, with very long lines (444), with no line terminators
Hash 9acdbe83808bd0e2523b87aa75831e3a
9102d03693b3e6cff9e268d460ffa6f6425c8825
8677bed0c74cb0e5ef08353026c4d6bbab1307cbccfd843d581530e86eafa4df
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F&tg_i.page=https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F&tg_i.domain=earnme.club&tg_i.pbadslot=%2F21671350435%2C22687820958%2F300x250-earnme.club_._2&tk_flint=pbjs_lite_v6.28.0&x_source.tid=c371ab29-3c21-48d5-89e1-8e4516b3fbab&l_pb_bid_id=8e97cf12da39cb8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.7313138494022438 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Fri, 07 Oct 2022 15:44:30 GMT
Content-Type: application/json
Content-Length: 444
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://earnme.club
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8YNRJJH-21-5S4B; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:30 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qoToF/UuRLGJO9DtVM30fCg9e/wzbfbfdx8uYpStB8YdHvs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Sat, 07-Oct-2023 15:44:30 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
ib.adnxs.com/ut/v3/prebid
200 OK 145 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash e5928586cabde488d857a0fe832f5d77
c8166f16d0c3012a8f8ebb7ddc1f135f91798da3
8bb4f73077848d092744ce6e4414a51583ba6833dde77bd16120de96bc694930
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 694
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:30 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 145
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://earnme.club
AN-X-Request-Uuid: c7eb71d4-fc85-4352-9c67-c0b661691d2c
Set-Cookie: icu=ChkIv46FARAKGAEgASgBMN6SgZoGOAFAAUgBEN6SgZoGGAA.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 05-Jan-2023 15:44:30 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=7920281428840237283; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 05-Jan-2023 15:44:30 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prg.smartadserver.com/prebid/v1
200 OK 476 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (901), with no line terminators
Hash d9bb23da596bf5bdd75295be3e00bff3
731a284758c6bdb1e6d339274fa5ff26f0353bdb
8df4529c499117d0bfdd02926ca60a39d9f9aaeea56fc8cd18e87ce8a03f87f6
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 401
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Fri, 07 Oct 2022 15:44:29 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://earnme.club
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Sat, 07 Oct 2023 15:44:30 GMT; domain=.smartadserver.com; path=/
vs=527998=5135984; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sat, 07 Oct 2023 15:44:30 GMT; domain=.smartadserver.com; path=/
pid=4361410324477571086; expires=Sat, 07 Oct 2023 15:44:30 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638007542709419222&o=1; expires=Sat, 08 Oct 2022 15:44:30 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Sat, 08 Oct 2022 15:44:30 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
pagead2.googlesyndication.com/pagead/gen_204?id=awbid&awbid_b=AKAmf-B--r0TpDpX1yKtfVbZKCfBG0xJuhC_NQlaP5uwFF8KSPab7gh-PqBAkDTcHvtpa5iI0mZ5mq2eQYzdmcJXJLbfzSmYJQ&pr=8:6AF680E8AE76CCB1
204 No Content 0 B URL HTTP/2 pagead2.googlesyndication.com/pagead/gen_204?id=awbid&awbid_b=AKAmf-B--r0TpDpX1yKtfVbZKCfBG0xJuhC_NQlaP5uwFF8KSPab7gh-PqBAkDTcHvtpa5iI0mZ5mq2eQYzdmcJXJLbfzSmYJQ&pr=8:6AF680E8AE76CCB1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/gen_204?id=awbid&awbid_b=AKAmf-B--r0TpDpX1yKtfVbZKCfBG0xJuhC_NQlaP5uwFF8KSPab7gh-PqBAkDTcHvtpa5iI0mZ5mq2eQYzdmcJXJLbfzSmYJQ&pr=8:6AF680E8AE76CCB1 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 07 Oct 2022 15:44:31 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
beacon-ams3.rubiconproject.com/beacon/d/c5b9e3f6-649b-4f8c-ac2e-eee8cea1e37f?oo=0&accountId=17210&siteId=397268&zoneId=2229032&sizeId=15&e=6A1E40E384DA563B94BEEC970DEC1B302EA9BE8DB6B31966D2AC697F1B4CFC5C7388069F8A149C69EC1C7E343508D4F8B8B520C669668569A66829D08B0EE07992CD278387FB956CE6088CF4473F8EC7814746BF8D2E33E70998C50DED8A98CA1C3661CD14F65813F71BB1C46EDBE4659408274C9D173076C659379473A26BBF7E625848872D964AE88D14A8E282D0F9C3D8E2CA31326870B2ACEDFE3254FEE45E0587743AAEBC668B026ACB1EBCB56525B40CEB5D31F6438F406512CC840BED
200 43 B URL HTTP/1.1 beacon-ams3.rubiconproject.com/beacon/d/c5b9e3f6-649b-4f8c-ac2e-eee8cea1e37f?oo=0&accountId=17210&siteId=397268&zoneId=2229032&sizeId=15&e=6A1E40E384DA563B94BEEC970DEC1B302EA9BE8DB6B31966D2AC697F1B4CFC5C7388069F8A149C69EC1C7E343508D4F8B8B520C669668569A66829D08B0EE07992CD278387FB956CE6088CF4473F8EC7814746BF8D2E33E70998C50DED8A98CA1C3661CD14F65813F71BB1C46EDBE4659408274C9D173076C659379473A26BBF7E625848872D964AE88D14A8E282D0F9C3D8E2CA31326870B2ACEDFE3254FEE45E0587743AAEBC668B026ACB1EBCB56525B40CEB5D31F6438F406512CC840BED
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /beacon/d/c5b9e3f6-649b-4f8c-ac2e-eee8cea1e37f?oo=0&accountId=17210&siteId=397268&zoneId=2229032&sizeId=15&e=6A1E40E384DA563B94BEEC970DEC1B302EA9BE8DB6B31966D2AC697F1B4CFC5C7388069F8A149C69EC1C7E343508D4F8B8B520C669668569A66829D08B0EE07992CD278387FB956CE6088CF4473F8EC7814746BF8D2E33E70998C50DED8A98CA1C3661CD14F65813F71BB1C46EDBE4659408274C9D173076C659379473A26BBF7E625848872D964AE88D14A8E282D0F9C3D8E2CA31326870B2ACEDFE3254FEE45E0587743AAEBC668B026ACB1EBCB56525B40CEB5D31F6438F406512CC840BED HTTP/1.1
Host: beacon-ams3.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
Cache-Control: private, max-age=0, no-cache
Expires: 01 Jan 1970 10:00:00 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Content-Type: image/avif
Content-Length: 43
Date: Fri, 07 Oct 2022 15:44:30 GMT
Keep-Alive: timeout=60
Connection: keep-alive
a.ad.gt/api/v1/u/matches/405?_it=amazon
200 OK 3.7 kB URL HTTP/2 a.ad.gt/api/v1/u/matches/405?_it=amazon
IP
File type C source, ASCII text, with very long lines (2097)
Hash d5335ffab415d92c24ac4ad710c39ff2
f15c080e53a264a2c35ef7f343c60bc4c18fd2dd
3aec1fcffa60026dec8d3d50c4519c2f5e09ab06d141fe0e221bb37e205811e2
GET /api/v1/u/matches/405?_it=amazon HTTP/1.1
Host: a.ad.gt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:30 GMT
content-type: application/javascript
server: nginx/1.20.0
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=yynobtwovf&e=1353993759111
200 OK 2.4 kB URL HTTP/2 flashnetic.com/r/p.html?f=yynobtwovf&e=1353993759111
IP
File type HTML document, ASCII text
Hash ccedbd583bf8ca22e02de3d95fe14751
6d46f469086c82f85ad55afbceec383ddedf7eb9
f891348567074a03fc16dfb2245d6fcbb0e685cd0d8ee513614b4157107bc111
GET /r/p.html?f=yynobtwovf&e=1353993759111 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: h_nTHXZ0eWdXtBOLg-yHEz9KCfJZQDyT5atUdkrCsDafvTvAEYuGXA==
age: 13000
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=aztivr&e=1353993759111
200 OK 7.4 kB URL HTTP/2 flashnetic.com/r/p.html?f=aztivr&e=1353993759111
IP
File type HTML document, ASCII text, with very long lines (2020)
Hash e1dc6f0f9b3ded76f0a593e35f78a3e5
45dc8a5769c01a6d5751ea0ed17c05e615b2ffa5
53d501fe0609c91f241aca83a03796f1efbe4db676fde7341413cb34dadfc718
GET /r/p.html?f=aztivr&e=1353993759111 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hvQP-Hb9ThccChxw44i8We_NTuNvvg-XUaEWkl0HrFGO67teTEWl4w==
age: 13000
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=idxkgir&e=1353993759111
200 OK 2.9 kB URL HTTP/2 flashnetic.com/r/p.html?f=idxkgir&e=1353993759111
IP
File type HTML document, ASCII text, with very long lines (783)
Hash 54f6de3c18d68c956252aaec426cf3d0
0faabf983582f71aecaa9bf1be59e68b9106d66f
2928478948f59e49b0a920e9a95afbcd78daefa3d241ad90838d13d1b9cdddf3
GET /r/p.html?f=idxkgir&e=1353993759111 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Q3XdNertfRPb0Y111n7aNYdZxCxZReI3JNTOHpyfj8mKbn8VjdgctA==
age: 13000
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=mfvilm&e=1732785387396
200 OK 144 kB URL HTTP/2 flashnetic.com/r/p.html?f=mfvilm&e=1732785387396
IP
Size 144 kB (143634 bytes)
Hash e935129026d017f4ee9a49b1dc31572a
7824b30b6493f8f827abe0d047d7c59a1a8d1db8
2b2604241bc3bd1f8fb810b12fc10793f22d127c5caadc8434d81398a5a32e46
GET /r/p.html?f=mfvilm&e=1732785387396 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UNOcxBwM_1ANTUQ9JGtga4w2jC0OhyFMXVUdE9vMQ14OFjFmw0dfsQ==
age: 12998
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
ams3-ib.adnxs.com/rd_log?an_audit=0&referrer=https%3A%2F%2Fearnme.club%2F&e=wqT_3QLuLejuFgAAAwDWAAUBCNySgZoGEImBqLnJgIXlYxgAKjYJbHnlettMpT8RLA3W4eNxoT8ZAAAAIIXrwT8hLA0SACkRJPQTAjEAAABA4XqEPzDvvN8MOJhQQOUeSGVQoZ_pJFi18qABYABoif3DAXjf9QWAAQGKAQNVU0SSAQNFVVKYAawCoAH6AagBAbABALgBAcABBcgBAtABANgBAOABAPABANgCAOACm4VO6gIUaHR0cHM6Ly9lYXJubWUuY2x1Yi_yAg0KBkhFSUdIVBIDMjUw8gIMCgVXSURUSBIDMzAw8gIhCgZMT0FERVISF3JlbmRlcl9wb3N0X2Fkc192MS5odG1s8gIXCgpJRlJBTUVfS0VZEgk0MDQ5MzQ4ODPyAr8VCgtQUkVfU0NSSVBUUxKvFTxzY3JpcHQ-KGZ1bmN0aW9uKCl7LyoKCiBDb3B5cmlnaHQgVGhlIENsb3N1cmUgTGlicmFyeSBBdXRob3JzLgogU1BEWC1MaWNlbnNlLUlkZW50aWZpZXI6IEFwYWNoZS0yLjAKKi8KdmFyIGg9dGhpc3x8c2VsZjt2YXIgaz1BcnJheS5wcm90b3R5cGUuaW5kZXhPZj9mdW5jdGlvbihhLGMpe3JldHVybiBBcnJheS5wcm90b3R5cGUuaW5kZXhPZi5jYWxsKGEsYyx2b2lkIDApfTpmdW5jdGlvbihhLGMpe2lmKCJzdHJpbmciPT09dHlwZW9mIGEpcmV0dXJuInN0cmluZyIhPT10eXBlb2YgY3x8MSE9Yy5sZW5ndGg_LTE6YS4Na_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_YToVVzxxdWVyeVNlbGVjdG9yKCdbDSUAPQFEDF0nKX1FHfBJcj1SZWdFeHAoIl5odHRwcz86Ly8oXFx3fC0pK1xcLmNkblxcLmFtcHByb2plY3RcXC4obmV0fG9yZykoXFw_fC98JCkiKTsKZnVtKwB0FeAAaAVhDGM9W10FCQRkPQHGDDtkb3tBexhiPWE7dHJ5BQwAZUGTGGU9ISFiJiYBJFAhPWIubG9jYXRpb24uaHJlZiliOnsBLZBsKGIuZm9vKTtlPSEwO2JyZWFrIGJ9Y2F0Y2gobSl7fWU9ITF9AV4IZj1lGRcAZgEWDGlmKGYpeQBnPl4ADDtkPWJ1HyH0NUIkcmVmZXJyZXJ8fAGXJH1lbHNlIGc9ZCwNywBjKd8wbmV3IHUoZ3x8IiIpKQXVFGE9Yi5wYSHUGYYAYQX_TH19d2hpbGUoYSYmYiE9YSk7Yj0whdUIYT1jjc10LTE7Yjw9YTsrK2IpY1tiXS5kZXB0aD1hLWI7Yj1oISs5HgGuNSo4YW5jZXN0b3JPcmlnaW5zbhwADWsAPR11ACmhWxRhPTE7YTwRikw7KythKWc9Y1thXSxnLnVybHx8KAUILkIBOnYAFFthLQoxXSEMGCxnLmg9ITAB4ykiAGgZqyHVZeUAZyUWJQIEZD0yBAEcMDw9ZDstLWSh2EhmPWNbZF0sIWcmJnIudGVzdChmAY8gKSYmKGc9ZiksBQ4sJiYhZi5oKXtiPWY7RRsAfQ1dAGQV5gQmJgHMATsEOzBBZSVaCCYmZAVIARsIKTtjBa0QdihiLGe16BRjLmc_Yy4F-gw6Yy5pAUAAfbXmAHahoRwpe3RoaXMuaUHVAQkIZz1jGSIAdR0iCHVybBEkFGg9ISFjOwUvBYglCr36AHd1SRx0KCksYz1hLvEKPCI_Iik7c2V0VGltZW91dCgRjA0xAGTZcxhkPy4wMTpkQTVEIShNYXRoLnJhbmRvbSgpPmQpaQ8MYj1xKCGkACJl_zQ6Ly8iKyhiJiYidHJ1ZYFrAGJWawQ4LXJjZCIpPyJwYWdlYWQyzZ0Qc3luZGlpuSAtY24uY29tIjpmIwAFIAwpKyIvCUV4L2dlbl8yMDQ_aWQ9amNhJmpjPTc3JnZlcnNpb249IoVFDGU9KGUBsQwpJiZlWpkADTEwIil8fCJ1bmtub3duImHjXCtlKyImc2FtcGxlPSIrZDtiPXdpbmRvdwVYAGY5NBRmPyExOmYhMzRlPWIubmF2aWdhdG9yKTIOAFAudXNlckFnZW50LGU9L0Nocm9tZS9JmyBlKSYmIS9FZGcZERw_ITA6ITE7ZWGTFVEwLnNlbmRCZWFjb24_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-PC9kaXY-8gKZAQoMUE9TVF9TQ1JJUFRTEogBPHMSAgg2CAEW9glQYWRzLmcuZG91YmxlY2xpY2submV0MQY8eGJmZV9iYWNrZmlsbC5qcwFlLbUNUwA-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_SBQkJAAAAAAAAAADYBQHgBQHwBbzgG_oFBAgAEACQBgCYBgC4BgDBBgAAAAAAAPA_0AbujwHaBhYKEAAAAAAAAAAAAAAAAAAAAAAQABgA4AYB8gYCCACABwGIBwCgBwGqBwwxNDcyMDAyNTYxMji6Bw8IABAAGAAgADAAOOUVQADIB9_1BdIHDQkAAAAAAAAAABAAGADaBwYIABAAGADgBwDqBwIIAPAH_PYLiggCEACVCAAAgD-YCAE.&s=61a1c267547e05cf110b54fbc4ee90bf6a17b94f&bdref=https%3A%2F%2Fearnme.club%2F&bdtop=true&bdifs=2&bstk=https%3A%2F%2Fearnme.club%2F,https%3A%2F%2Fflashnetic.com%2Fr%2Fp.html%3Ff%3Dsinxirl%26e%3D1978760078767,https%3A%2F%2Fflashnetic.com%2Fr%2Fp.html%3Ff%3Dsinxirl%26e%3D1978760078767&
200 OK 0 B URL HTTP/1.1 ams3-ib.adnxs.com/rd_log?an_audit=0&referrer=https%3A%2F%2Fearnme.club%2F&e=wqT_3QLuLejuFgAAAwDWAAUBCNySgZoGEImBqLnJgIXlYxgAKjYJbHnlettMpT8RLA3W4eNxoT8ZAAAAIIXrwT8hLA0SACkRJPQTAjEAAABA4XqEPzDvvN8MOJhQQOUeSGVQoZ_pJFi18qABYABoif3DAXjf9QWAAQGKAQNVU0SSAQNFVVKYAawCoAH6AagBAbABALgBAcABBcgBAtABANgBAOABAPABANgCAOACm4VO6gIUaHR0cHM6Ly9lYXJubWUuY2x1Yi_yAg0KBkhFSUdIVBIDMjUw8gIMCgVXSURUSBIDMzAw8gIhCgZMT0FERVISF3JlbmRlcl9wb3N0X2Fkc192MS5odG1s8gIXCgpJRlJBTUVfS0VZEgk0MDQ5MzQ4ODPyAr8VCgtQUkVfU0NSSVBUUxKvFTxzY3JpcHQ-KGZ1bmN0aW9uKCl7LyoKCiBDb3B5cmlnaHQgVGhlIENsb3N1cmUgTGlicmFyeSBBdXRob3JzLgogU1BEWC1MaWNlbnNlLUlkZW50aWZpZXI6IEFwYWNoZS0yLjAKKi8KdmFyIGg9dGhpc3x8c2VsZjt2YXIgaz1BcnJheS5wcm90b3R5cGUuaW5kZXhPZj9mdW5jdGlvbihhLGMpe3JldHVybiBBcnJheS5wcm90b3R5cGUuaW5kZXhPZi5jYWxsKGEsYyx2b2lkIDApfTpmdW5jdGlvbihhLGMpe2lmKCJzdHJpbmciPT09dHlwZW9mIGEpcmV0dXJuInN0cmluZyIhPT10eXBlb2YgY3x8MSE9Yy5sZW5ndGg_LTE6YS4Na_B1KGMsMCk7Zm9yKHZhciBkPTA7ZDxhLmxlbmd0aDtkKyspaWYoZCBpbiBhJiZhW2RdPT09YylyZXR1cm4gZDtyZXR1cm4tMX07LyoKCiBTUERYLUxpY2Vuc2UtSWRlbnRpZmllcjogQXBhY2hlLTIuMAoqLwpmdQnMOCBsKGEpe2xbIiAiXShhKQ1OCCBhfQkTAD09wQR9OxENBCBuATVYYT12b2lkIDA9PT1hP2RvY3VtZW50OmEVQyQuY3JlYXRlRWxlARkYKCJpbWciKR1FiHAoYSxjLGQpe2EuZ29vZ2xlX2ltYWdlX3JlcXVlc3RzfHwoWhoAED1bXSk7ISwUYj1uKGEuEXwEKTshKQQpewEaAGUuugAZFwRmPVpTAEgsZz1rKGYsYik7MDw9ZyYmQXJyMhYCqHNwbGljZS5jYWxsKGYsZywxKX1iLnJlbW92ZUV2ZW50TGlzdGVuZXImJmJOFwA0KCJsb2FkIixlLCExKTu2OgAQZXJyb3INOxh9O2IuYWRkQnMAPhQAPnAAPiAABCYmRkgAACg2agAcYi5zcmM9YztaMQEYLnB1c2goYi7RAQRxKCl8BGE9MZI0LmN1cnJlbnRTY3JpcHRNGgAoMjkCMG51bGw6YSkmJiI3NyJBS2guZ2V0QXR0cmlidXRlKCJkYXRhLWpjIik_YToVVzxxdWVyeVNlbGVjdG9yKCdbDSUAPQFEDF0nKX1FHfBJcj1SZWdFeHAoIl5odHRwcz86Ly8oXFx3fC0pK1xcLmNkblxcLmFtcHByb2plY3RcXC4obmV0fG9yZykoXFw_fC98JCkiKTsKZnVtKwB0FeAAaAVhDGM9W10FCQRkPQHGDDtkb3tBexhiPWE7dHJ5BQwAZUGTGGU9ISFiJiYBJFAhPWIubG9jYXRpb24uaHJlZiliOnsBLZBsKGIuZm9vKTtlPSEwO2JyZWFrIGJ9Y2F0Y2gobSl7fWU9ITF9AV4IZj1lGRcAZgEWDGlmKGYpeQBnPl4ADDtkPWJ1HyH0NUIkcmVmZXJyZXJ8fAGXJH1lbHNlIGc9ZCwNywBjKd8wbmV3IHUoZ3x8IiIpKQXVFGE9Yi5wYSHUGYYAYQX_TH19d2hpbGUoYSYmYiE9YSk7Yj0whdUIYT1jjc10LTE7Yjw9YTsrK2IpY1tiXS5kZXB0aD1hLWI7Yj1oISs5HgGuNSo4YW5jZXN0b3JPcmlnaW5zbhwADWsAPR11ACmhWxRhPTE7YTwRikw7KythKWc9Y1thXSxnLnVybHx8KAUILkIBOnYAFFthLQoxXSEMGCxnLmg9ITAB4ykiAGgZqyHVZeUAZyUWJQIEZD0yBAEcMDw9ZDstLWSh2EhmPWNbZF0sIWcmJnIudGVzdChmAY8gKSYmKGc9ZiksBQ4sJiYhZi5oKXtiPWY7RRsAfQ1dAGQV5gQmJgHMATsEOzBBZSVaCCYmZAVIARsIKTtjBa0QdihiLGe16BRjLmc_Yy4F-gw6Yy5pAUAAfbXmAHahoRwpe3RoaXMuaUHVAQkIZz1jGSIAdR0iCHVybBEkFGg9ISFjOwUvBYglCr36AHd1SRx0KCksYz1hLvEKPCI_Iik7c2V0VGltZW91dCgRjA0xAGTZcxhkPy4wMTpkQTVEIShNYXRoLnJhbmRvbSgpPmQpaQ8MYj1xKCGkACJl_zQ6Ly8iKyhiJiYidHJ1ZYFrAGJWawQ4LXJjZCIpPyJwYWdlYWQyzZ0Qc3luZGlpuSAtY24uY29tIjpmIwAFIAwpKyIvCUV4L2dlbl8yMDQ_aWQ9amNhJmpjPTc3JnZlcnNpb249IoVFDGU9KGUBsQwpJiZlWpkADTEwIil8fCJ1bmtub3duImHjXCtlKyImc2FtcGxlPSIrZDtiPXdpbmRvdwVYAGY5NBRmPyExOmYhMzRlPWIubmF2aWdhdG9yKTIOAFAudXNlckFnZW50LGU9L0Nocm9tZS9JmyBlKSYmIS9FZGcZERw_ITA6ITE7ZWGTFVEwLnNlbmRCZWFjb24_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-PC9kaXY-8gKZAQoMUE9TVF9TQ1JJUFRTEogBPHMSAgg2CAEW9glQYWRzLmcuZG91YmxlY2xpY2submV0MQY8eGJmZV9iYWNrZmlsbC5qcwFlLbUNUwA-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_SBQkJAAAAAAAAAADYBQHgBQHwBbzgG_oFBAgAEACQBgCYBgC4BgDBBgAAAAAAAPA_0AbujwHaBhYKEAAAAAAAAAAAAAAAAAAAAAAQABgA4AYB8gYCCACABwGIBwCgBwGqBwwxNDcyMDAyNTYxMji6Bw8IABAAGAAgADAAOOUVQADIB9_1BdIHDQkAAAAAAAAAABAAGADaBwYIABAAGADgBwDqBwIIAPAH_PYLiggCEACVCAAAgD-YCAE.&s=61a1c267547e05cf110b54fbc4ee90bf6a17b94f&bdref=https%3A%2F%2Fearnme.club%2F&bdtop=true&bdifs=2&bstk=https%3A%2F%2Fearnme.club%2F,https%3A%2F%2Fflashnetic.com%2Fr%2Fp.html%3Ff%3Dsinxirl%26e%3D1978760078767,https%3A%2F%2Fflashnetic.com%2Fr%2Fp.html%3Ff%3Dsinxirl%26e%3D1978760078767&
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rd_log?an_audit=0&referrer=https%3A%2F%2Fearnme.club%2F&e=wqT_3QLuLejuFgAAAwDWAAUBCNySgZoGEImBqLnJgIXlYxgAKjYJbHnlettMpT8RLA3W4eNxoT8ZAAAAIIXrwT8hLA0SACkRJPQTAjEAAABA4XqEPzDvvN8MOJhQQOUeSGVQoZ_pJFi18qABYABoif3DAXjf9QWAAQGKAQNVU0SSAQNFVVKYAawCoAH6AagBAbABALgBAcABBcgBAtABANgBAOABAPABANgCAOACm4VO6gIUaHR0cHM6Ly9lYXJubWUuY2x1Yi_yAg0KBkhFSUdIVBIDMjUw8gIMCgVXSURUSBIDMzAw8gIhCgZMT0FERVISF3JlbmRlcl9wb3N0X2Fkc192MS5odG1s8gIXCgpJRlJBTUVfS0VZEgk0MDQ5MzQ4ODPyAr8VCgtQUkVfU0NSSVBUUxKvFTxzY3JpcHQ-KGZ1bmN0aW9uKCl7LyoKCiBDb3B5cmlnaHQgVGhlIENsb3N1cmUgTGlicmFyeSBBdXRob3JzLgogU1BEWC1MaWNlbnNlLUlkZW50aWZpZXI6IEFwYWNoZS0yLjAKKi8KdmFyIGg9dGhpc3x8c2VsZjt2YXIgaz1BcnJheS5wcm90b3R5cGUuaW5kZXhPZj9mdW5jdGlvbihhLGMpe3JldHVybiBBcnJheS5wcm90b3R5cGUuaW5kZXhPZi5jYWxsKGEsYyx2b2lkIDApfTpmdW5jdGlvbihhLGMpe2lmKCJzdHJpbmciPT09dHlwZW9mIGEpcmV0dXJuInN0cmluZyIhPT10eXBlb2YgY3x8MSE9Yy5sZW5ndGg_LTE6YS4Na_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_YToVVzxxdWVyeVNlbGVjdG9yKCdbDSUAPQFEDF0nKX1FHfBJcj1SZWdFeHAoIl5odHRwcz86Ly8oXFx3fC0pK1xcLmNkblxcLmFtcHByb2plY3RcXC4obmV0fG9yZykoXFw_fC98JCkiKTsKZnVtKwB0FeAAaAVhDGM9W10FCQRkPQHGDDtkb3tBexhiPWE7dHJ5BQwAZUGTGGU9ISFiJiYBJFAhPWIubG9jYXRpb24uaHJlZiliOnsBLZBsKGIuZm9vKTtlPSEwO2JyZWFrIGJ9Y2F0Y2gobSl7fWU9ITF9AV4IZj1lGRcAZgEWDGlmKGYpeQBnPl4ADDtkPWJ1HyH0NUIkcmVmZXJyZXJ8fAGXJH1lbHNlIGc9ZCwNywBjKd8wbmV3IHUoZ3x8IiIpKQXVFGE9Yi5wYSHUGYYAYQX_TH19d2hpbGUoYSYmYiE9YSk7Yj0whdUIYT1jjc10LTE7Yjw9YTsrK2IpY1tiXS5kZXB0aD1hLWI7Yj1oISs5HgGuNSo4YW5jZXN0b3JPcmlnaW5zbhwADWsAPR11ACmhWxRhPTE7YTwRikw7KythKWc9Y1thXSxnLnVybHx8KAUILkIBOnYAFFthLQoxXSEMGCxnLmg9ITAB4ykiAGgZqyHVZeUAZyUWJQIEZD0yBAEcMDw9ZDstLWSh2EhmPWNbZF0sIWcmJnIudGVzdChmAY8gKSYmKGc9ZiksBQ4sJiYhZi5oKXtiPWY7RRsAfQ1dAGQV5gQmJgHMATsEOzBBZSVaCCYmZAVIARsIKTtjBa0QdihiLGe16BRjLmc_Yy4F-gw6Yy5pAUAAfbXmAHahoRwpe3RoaXMuaUHVAQkIZz1jGSIAdR0iCHVybBEkFGg9ISFjOwUvBYglCr36AHd1SRx0KCksYz1hLvEKPCI_Iik7c2V0VGltZW91dCgRjA0xAGTZcxhkPy4wMTpkQTVEIShNYXRoLnJhbmRvbSgpPmQpaQ8MYj1xKCGkACJl_zQ6Ly8iKyhiJiYidHJ1ZYFrAGJWawQ4LXJjZCIpPyJwYWdlYWQyzZ0Qc3luZGlpuSAtY24uY29tIjpmIwAFIAwpKyIvCUV4L2dlbl8yMDQ_aWQ9amNhJmpjPTc3JnZlcnNpb249IoVFDGU9KGUBsQwpJiZlWpkADTEwIil8fCJ1bmtub3duImHjXCtlKyImc2FtcGxlPSIrZDtiPXdpbmRvdwVYAGY5NBRmPyExOmYhMzRlPWIubmF2aWdhdG9yKTIOAFAudXNlckFnZW50LGU9L0Nocm9tZS9JmyBlKSYmIS9FZGcZERw_ITA6ITE7ZWGTFVEwLnNlbmRCZWFjb24_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-PC9kaXY-8gKZAQoMUE9TVF9TQ1JJUFRTEogBPHMSAgg2CAEW9glQYWRzLmcuZG91YmxlY2xpY2submV0MQY8eGJmZV9iYWNrZmlsbC5qcwFlLbUNUwA-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_SBQkJAAAAAAAAAADYBQHgBQHwBbzgG_oFBAgAEACQBgCYBgC4BgDBBgAAAAAAAPA_0AbujwHaBhYKEAAAAAAAAAAAAAAAAAAAAAAQABgA4AYB8gYCCACABwGIBwCgBwGqBwwxNDcyMDAyNTYxMji6Bw8IABAAGAAgADAAOOUVQADIB9_1BdIHDQkAAAAAAAAAABAAGADaBwYIABAAGADgBwDqBwIIAPAH_PYLiggCEACVCAAAgD-YCAE.&s=61a1c267547e05cf110b54fbc4ee90bf6a17b94f&bdref=https%3A%2F%2Fearnme.club%2F&bdtop=true&bdifs=2&bstk=https%3A%2F%2Fearnme.club%2F,https%3A%2F%2Fflashnetic.com%2Fr%2Fp.html%3Ff%3Dsinxirl%26e%3D1978760078767,https%3A%2F%2Fflashnetic.com%2Fr%2Fp.html%3Ff%3Dsinxirl%26e%3D1978760078767& HTTP/1.1
Host: ams3-ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:31 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 2b280fd2-95df-4db7-b4a2-551842d9cc0c
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 946.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
flashnetic.com/r/p.html?f=xiivwc&e=1353993759111
200 OK 2.6 kB URL HTTP/2 flashnetic.com/r/p.html?f=xiivwc&e=1353993759111
IP
File type HTML document, ASCII text
Hash 829f60a9e84218f4a929303789e81cbe
6d151f436b210c9717c13a2bc76693ece1184b59
6a969e86633e9dc2eccc065d62d3908a231abdd7ad791fe2cf27027da0ada6ea
GET /r/p.html?f=xiivwc&e=1353993759111 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gFSQT_d9NODI7xX2kluqOx0uT3s1E-0djgt8Q6ONpdfz9ErWjvZAXA==
age: 13000
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=ubdjhtee&e=1353993759111
200 OK 2.3 kB URL HTTP/2 flashnetic.com/r/p.html?f=ubdjhtee&e=1353993759111
IP
File type HTML document, ASCII text
Hash e7c6bf250f1f3988bb044a8ff21d6685
db36cddfb4a06c55f8391d502a75431a1399c25e
6534777851c35b7947ba280e06893c4ee1f885f46952dc985b6a0a74de7e3c7c
GET /r/p.html?f=ubdjhtee&e=1353993759111 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2vMUo2lqidu3wKA8_AGEvMRAfV8BruPz6JcE7EnL801bNoDAH9qT-Q==
age: 13000
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?origin=publishertag&topUrl=earnme.club
200 OK 5.1 kB URL HTTP/2 gum.criteo.com/syncframe?origin=publishertag&topUrl=earnme.club
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (13465)
Hash 34a6e01086616219680f16eed3737ad9
3cf3c687f443c35333b447b00c7ead84bdbc23cf
1f57aef3e44612c507607d48e746df4e859bad2a4f059389d6c7f68385cfaaf9
GET /syncframe?origin=publishertag&topUrl=earnme.club HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:29 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=588c22e3-e138-4223-8ed5-2a5ed24df8e0; expires=Wed, 01 Nov 2023 15:44:29 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 576141
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash cd650e1cf4265bc70730e05c09fe7683
96b17fab03ff031f81969df752bb5dfba3f0f29a
c466b1e8fdd632a158f50fc90289924a2470ead6e2ed417f2c655db6cab63339
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5451
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:31 GMT
Last-Modified: Fri, 07 Oct 2022 14:13:41 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash c0b169adb040901082c62e4132cd397e
0d3f59de09bcb6a11ea8761b045e9e652b906206
b400b2a02ca239bb3cb9a6aafa8d4af7f7df861578112f674532013db3960e22
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5448
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:31 GMT
Last-Modified: Fri, 07 Oct 2022 14:13:43 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
eus.rubiconproject.com/usync.html?&geo=eu&co=no
200 OK 233 B URL HTTP/1.1 eus.rubiconproject.com/usync.html?&geo=eu&co=no
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 6220919f0a2b24a12a281ea8b891ecf6
759111c360edc6df73ed10aaaa212cb22c47ce0d
030c6e199782fb1908f6f89d3cd41950fd3ae0830c5020ba9ed617111bacd180
GET /usync.html?&geo=eu&co=no HTTP/1.1
Host: eus.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flashnetic.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache/2.2.15 (CentOS)
Last-Modified: Tue, 14 Dec 2021 23:07:59 GMT
ETag: "40014-119-5d32342a551c0"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 233
Content-Type: text/html; charset=UTF-8
Date: Fri, 07 Oct 2022 15:44:31 GMT
Connection: keep-alive
Vary: Accept-Encoding
pixel.quantserve.com/pixel/p-EtBqU4Lj3YbAv.gif?idmatch=0&gdpr=0&gdpr_consent=
302 Found 0 B URL HTTP/2 pixel.quantserve.com/pixel/p-EtBqU4Lj3YbAv.gif?idmatch=0&gdpr=0&gdpr_consent=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/p-EtBqU4Lj3YbAv.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1
Host: pixel.quantserve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 07 Oct 2022 15:44:31 GMT
content-length: 0
cache-control: private, no-cache, no-store, proxy-revalidate
expires: Fri, 04 Aug 1978 12:00:00 GMT
location: https://rtb-csync.smartadserver.com/redir/?partnerid=80&&partneruserid=aGv9r2ph_PlzYPuob2rkrDhu_fpzO6iqaj63-UJ8
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV"
pragma: no-cache
set-cookie: d=EGsBDQGjJ4ir0QA; expires=Thu, 05-Jan-2023 15:44:31 GMT; path=/; domain=.quantserve.com
mc=6340495f-82712-3f64e-ca54f; expires=Tue, 07-Nov-2023 15:44:31 GMT; path=/; domain=.quantserve.com
X-Firefox-Spdy: h2
ad.turn.com/r/cs?pid=33&redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D32%26partneruserid%3D%23USER_ID%23%26gdpr%3D%23GDPR_APPLICABLE%23%26gdpr_consent%3D%23GDPR_CONSENT%23&gdpr=0&gdpr_consent=
302 Found 0 B URL HTTP/2 ad.turn.com/r/cs?pid=33&redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D32%26partneruserid%3D%23USER_ID%23%26gdpr%3D%23GDPR_APPLICABLE%23%26gdpr_consent%3D%23GDPR_CONSENT%23&gdpr=0&gdpr_consent=
IP
ASN #56396 Amobee EMEA Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /r/cs?pid=33&redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D32%26partneruserid%3D%23USER_ID%23%26gdpr%3D%23GDPR_APPLICABLE%23%26gdpr_consent%3D%23GDPR_CONSENT%23&gdpr=0&gdpr_consent= HTTP/1.1
Host: ad.turn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="/w3c/p3p.xml", CP="NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV"
cache-control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
pragma: no-cache
set-cookie: uid=8507146420347519924; Domain=.turn.com; Expires=Wed, 05-Apr-2023 15:44:31 GMT; Path=/; Secure; SameSite=None
location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=32&partneruserid=8507146420347519924&gdpr=0&gdpr_consent=
content-length: 0
date: Fri, 07 Oct 2022 15:44:31 GMT
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 9f7bbf6efd32ea0ce7702a08711c1627
29d14a7b518afd292a4dff281a1a659794281a19
24e80c50be393906f28fd33c80c40ad75bbb502badd04912e3720ea24ec0b3ac
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 07 Oct 2022 15:44:31 GMT
Last-Modified: Fri, 07 Oct 2022 13:57:27 GMT
Server: ECS (nyb/1D10)
X-Cache: Miss from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: IYmBxRWVbw6Df2T0yGRacVKyeiFexDLoz8lD2GP2qp7hpW1Rls2JSQ==
Age: 6424
flashnetic.com/r/p.html?f=cnnjueyicu&e=1353993759111
200 OK 2.8 kB URL HTTP/2 flashnetic.com/r/p.html?f=cnnjueyicu&e=1353993759111
IP
Hash d3f23691a20b7462ce3e1f452d45dba2
ab712ceb846a6b21d5e72391d99793ae173d1963
d3c0491b728f9b58e328764ace9b6ff6ac6aa771fb311464a8dba630d09f9f5f
GET /r/p.html?f=cnnjueyicu&e=1353993759111 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: e270_4b61E49YojyddpW-mAtTNRsEid7wyO6DXfnbgpQLg2icGibXg==
age: 13000
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
match.prod.bidr.io/cookie-sync/sas?gdpr=0&gdpr_consent=
303 See Other 0 B URL HTTP/1.1 match.prod.bidr.io/cookie-sync/sas?gdpr=0&gdpr_consent=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cookie-sync/sas?gdpr=0&gdpr_consent= HTTP/1.1
Host: match.prod.bidr.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 303 See Other
Date: Fri, 07 Oct 2022 15:44:31 GMT
location: https://match.prod.bidr.io/cookie-sync/sas?gdpr=0&gdpr_consent=&_bee_ppp=1
Server: gunicorn
set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Fri, 07 Oct 2022 15:54:31 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=2592000; includeSubDomains
Content-Length: 0
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bda52a47df6de7bd83565c1210f15061
53bf6190099e5a2beb096141b144a4c6696deb03
5a82e851969b9d41fa483eb95aac1dee1dc07f9a9ad57bb8db65ca3a4ef19194
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5A82E851969B9D41FA483EB95AAC1DEE1DC07F9A9AD57BB8DB65CA3A4EF19194"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9581
Expires: Fri, 07 Oct 2022 18:24:12 GMT
Date: Fri, 07 Oct 2022 15:44:31 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash ea15dfb4723a059a63e8053115fa13a0
114207d047ff2b655638e77330c936b1783d7a9e
6d226fc9ae14fbf79d19c0028eaead644e2eedfa19e75a0a9b95234672db3f00
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4151
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:31 GMT
Last-Modified: Fri, 07 Oct 2022 14:35:20 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 6c98d61ad31659f7284a43250fabdf93
8715cda972c9170aacff07628f95fa35a48f5064
25b04f4c3b58bd2f632d7359260d92de04321b37a10868749b70a57cc9b1938b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5297
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:31 GMT
Last-Modified: Fri, 07 Oct 2022 14:16:14 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 996da3e28f5e0efe39516bf32b71f053
1ad9ec3125a0abccc5d69db97dabcb190a38dd04
292c6d817aa3ea12093543c0d90ea6f85cdbe7620e8c674de4ccfc2ff412f0eb
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 15:44:31 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Tue, 11 Oct 2022 12:46:12 GMT
ETag: "1ad9ec3125a0abccc5d69db97dabcb190a38dd04"
Last-Modified: Fri, 07 Oct 2022 12:46:13 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 549
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7567c2367b26b4f7-OSL
secure.adnxs.com/getuid?https://ids.ad.gt/api/v1/match?id=AU1D-0100-001665157471-RL3XQ4BH-T0I0&adnxs_id=$UID&gdpr=0
307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/getuid?https://ids.ad.gt/api/v1/match?id=AU1D-0100-001665157471-RL3XQ4BH-T0I0&adnxs_id=$UID&gdpr=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https://ids.ad.gt/api/v1/match?id=AU1D-0100-001665157471-RL3XQ4BH-T0I0&adnxs_id=$UID&gdpr=0 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:31 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fmatch%3Fid%3DAU1D-0100-001665157471-RL3XQ4BH-T0I0%26adnxs_id%3D%24UID%26gdpr%3D0
AN-X-Request-Uuid: 84f79c74-a656-4cd6-b231-4cbd1f52c7d8
Set-Cookie: uuid2=6215077008989351335; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 05-Jan-2023 15:44:31 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 954.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
token.rubiconproject.com/token?pid=50242&puid=AU1D-0100-001665157471-RL3XQ4BH-T0I0&gdpr=0
204 No Content 0 B URL HTTP/1.1 token.rubiconproject.com/token?pid=50242&puid=AU1D-0100-001665157471-RL3XQ4BH-T0I0&gdpr=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /token?pid=50242&puid=AU1D-0100-001665157471-RL3XQ4BH-T0I0&gdpr=0 HTTP/1.1
Host: token.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: 54ab5e55007c9747024b4f039df5ce6b
sync.mathtag.com/sync/img?redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fmediamath_match%3Fuser_id%3D%5BMM_UUID%5D%26id%3DAU1D-0100-001665157471-RL3XQ4BH-T0I0
302 Moved Temporarily 0 B URL HTTP/1.1 sync.mathtag.com/sync/img?redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fmediamath_match%3Fuser_id%3D%5BMM_UUID%5D%26id%3DAU1D-0100-001665157471-RL3XQ4BH-T0I0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/img?redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fmediamath_match%3Fuser_id%3D%5BMM_UUID%5D%26id%3DAU1D-0100-001665157471-RL3XQ4BH-T0I0 HTTP/1.1
Host: sync.mathtag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Date: Fri, 07 Oct 2022 15:44:31 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=360
Access-Control-Allow-Origin: *
Server: MT3 4539 98cc2da master cdg-pixel-x26 config:1.0.0
Cache-Control: no-cache
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: uuid=2ae16340-495f-4d00-8971-0a5f0756b652; domain=.mathtag.com; path=/; expires=Sat, 04-Nov-2023 15:44:31 GMT; SameSite=None; Secure
location: https://ids.ad.gt/api/v1/mediamath_match?user_id=2ae16340-495f-4d00-8971-0a5f0756b652&id=AU1D-0100-001665157471-RL3XQ4BH-T0I0
Expires: Fri, 07 Oct 2022 15:44:30 GMT
match.adsrvr.org/track/cmf/generic?ttd_pid=8gkxb6n&ttd_tpi=1&ttd_puid=AU1D-0100-001665157471-RL3XQ4BH-T0I0&gdpr=0
200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?ttd_pid=8gkxb6n&ttd_tpi=1&ttd_puid=AU1D-0100-001665157471-RL3XQ4BH-T0I0&gdpr=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?ttd_pid=8gkxb6n&ttd_tpi=1&ttd_puid=AU1D-0100-001665157471-RL3XQ4BH-T0I0&gdpr=0 HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:31 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
sync.smartadserver.com/getuid?url=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fsmart_match%3Fid%3DAU1D-0100-001665157471-RL3XQ4BH-T0I0%26sas_uid%3D%5bsas_uid%5d&gdpr=0
302 Found 0 B URL HTTP/1.1 sync.smartadserver.com/getuid?url=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fsmart_match%3Fid%3DAU1D-0100-001665157471-RL3XQ4BH-T0I0%26sas_uid%3D%5bsas_uid%5d&gdpr=0
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?url=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fsmart_match%3Fid%3DAU1D-0100-001665157471-RL3XQ4BH-T0I0%26sas_uid%3D%5bsas_uid%5d&gdpr=0 HTTP/1.1
Host: sync.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
content-length: 0
date: Fri, 07 Oct 2022 15:44:31 GMT
cache-control: no-cache,no-store
location: https://sync.smartadserver.com:443/getuid?url=https://ids.ad.gt/api/v1/smart_match?id=AU1D-0100-001665157471-RL3XQ4BH-T0I0&sas_uid=[sas_uid]&gdpr=0&cklb=1
pragma: no-cache
set-cookie: TestIfCookie=ok; expires=Mon, 01 Jan 0001 00:00:00 GMT; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sat, 07 Oct 2023 15:44:31 GMT; domain=.smartadserver.com; path=/
pbw=%24b%3d12960%3b%24o%3d99999; expires=Sat, 07 Oct 2023 15:44:31 GMT; domain=.smartadserver.com; path=/
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
ids.ad.gt/api/v1/g_hosted?id=AU1D-0100-001665157471-RL3XQ4BH-T0I0
302 Found 473 B URL HTTP/2 ids.ad.gt/api/v1/g_hosted?id=AU1D-0100-001665157471-RL3XQ4BH-T0I0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (363)
Hash 800cf9751dd363bb8177f8e595e10bbb
323ead8e4eb7ddc65d93b1e707f329cb1be2a229
9083f849d86c0237e6bb234018380b2749146c15752c8a01d8988fa167743b4c
GET /api/v1/g_hosted?id=AU1D-0100-001665157471-RL3XQ4BH-T0I0 HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 07 Oct 2022 15:44:31 GMT
content-type: text/html; charset=utf-8
content-length: 473
location: https://cm.g.doubleclick.net/pixel?google_nid=audigent_w_appnexus_3985&google_hm=QVUxRC0wMTAwLTAwMTY2NTE1NzQ3MS1STDNYUTRCSC1UMEkw
server: nginx/1.20.0
set-cookie: au_id=AU1D-0100-001665157471-RL3XQ4BH-T0I0; Expires=Sun, 06 Oct 2024 15:44:31 GMT; Domain=.ad.gt; Path=/; SameSite=None; Secure
g_hosted=; Expires=Sun, 06 Oct 2024 15:44:31 GMT; Domain=.ad.gt; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
ids.ad.gt/api/v1/ip_match?id=AU1D-0100-001665157471-RL3XQ4BH-T0I0
200 OK 0 B URL HTTP/2 ids.ad.gt/api/v1/ip_match?id=AU1D-0100-001665157471-RL3XQ4BH-T0I0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v1/ip_match?id=AU1D-0100-001665157471-RL3XQ4BH-T0I0 HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:31 GMT
content-type: text/html; charset=utf-8
content-length: 0
server: nginx/1.20.0
X-Firefox-Spdy: h2
demand.trafficroots.com/sync.php?partner=3379&redirect=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D137%26partneruserid%3D%7Btrafficroots_id%7D&gdpr=0&gdpr_consent=
302 Found 0 B URL HTTP/1.1 demand.trafficroots.com/sync.php?partner=3379&redirect=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D137%26partneruserid%3D%7Btrafficroots_id%7D&gdpr=0&gdpr_consent=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync.php?partner=3379&redirect=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D137%26partneruserid%3D%7Btrafficroots_id%7D&gdpr=0&gdpr_consent= HTTP/1.1
Host: demand.trafficroots.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 07 Oct 2022 15:44:31 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: PARTNER_ID_3379=bebd0c663a; expires=Sat, 07-Oct-2023 15:44:31 GMT; Max-Age=31536000; path=/; domain=.trafficroots.com; secure; HttpOnly; SameSite=None
Location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=137&partneruserid=bebd0c663a&gdpr=0&gdpr_consent=
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: origin-when-cross-origin
pagead2.googlesyndication.com/pagead/gen_204?id=awbid&awbid_b=AKAmf-Aq9fg-I_eyQo5K_x_3yGKIrdzrH2IsvE-z9eXrDiWJTylD5c6AUvVMHP9mGhAoKQZ8wMapAYJi9tDiZ2hLBjSh2VlAEA&pr=13:Y0BJXAAAAAD7pBPKgJX9vg3vJWe3ayim4i4O_Q
204 No Content 0 B URL HTTP/2 pagead2.googlesyndication.com/pagead/gen_204?id=awbid&awbid_b=AKAmf-Aq9fg-I_eyQo5K_x_3yGKIrdzrH2IsvE-z9eXrDiWJTylD5c6AUvVMHP9mGhAoKQZ8wMapAYJi9tDiZ2hLBjSh2VlAEA&pr=13:Y0BJXAAAAAD7pBPKgJX9vg3vJWe3ayim4i4O_Q
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/gen_204?id=awbid&awbid_b=AKAmf-Aq9fg-I_eyQo5K_x_3yGKIrdzrH2IsvE-z9eXrDiWJTylD5c6AUvVMHP9mGhAoKQZ8wMapAYJi9tDiZ2hLBjSh2VlAEA&pr=13:Y0BJXAAAAAD7pBPKgJX9vg3vJWe3ayim4i4O_Q HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ce36c23c3f1753dc192ed99a52bc5e0a.safeframe.googlesyndication.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 07 Oct 2022 15:44:32 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash d7afa5fc7c882a5e14a227032b1f501d
afa8aef6ec0ef8011c50f1b7cb7cdd335e1ff691
861a432f1d2ac8cd8f6c5847d93d97fffacd8a51f96db3061371bd69e9c2bb66
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 07 Oct 2022 15:44:32 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 06 Oct 2022 22:08:51 GMT
Expires: Fri, 07 Oct 2022 22:08:51 GMT
ETag: "afa8aef6ec0ef8011c50f1b7cb7cdd335e1ff691"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
a5112.casalemedia.com/impression/v1?bidID=880d3cb7-3506-4289-a282-3ff5a25878ab&traceID=cd04imtg9b3rivgp5rd0&dspID=85&userID=&cmpro=0&deviceType=2&expiryTime=1665158068&ap=Y0BJWwAMyzsKwkkdAAaLgwRnS2QQr_lLlwWanw&siteID=262455&creativeID=17e3486&pubID=187063&format=banner&channel=site
200 OK 43 B URL HTTP/1.1 a5112.casalemedia.com/impression/v1?bidID=880d3cb7-3506-4289-a282-3ff5a25878ab&traceID=cd04imtg9b3rivgp5rd0&dspID=85&userID=&cmpro=0&deviceType=2&expiryTime=1665158068&ap=Y0BJWwAMyzsKwkkdAAaLgwRnS2QQr_lLlwWanw&siteID=262455&creativeID=17e3486&pubID=187063&format=banner&channel=site
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /impression/v1?bidID=880d3cb7-3506-4289-a282-3ff5a25878ab&traceID=cd04imtg9b3rivgp5rd0&dspID=85&userID=&cmpro=0&deviceType=2&expiryTime=1665158068&ap=Y0BJWwAMyzsKwkkdAAaLgwRnS2QQr_lLlwWanw&siteID=262455&creativeID=17e3486&pubID=187063&format=banner&channel=site HTTP/1.1
Host: a5112.casalemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ce36c23c3f1753dc192ed99a52bc5e0a.safeframe.googlesyndication.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 15:44:32 GMT
Server: Apache
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Type: image/gif
Expires: 0
Pragma: no-cache
Content-Length: 43
Keep-Alive: timeout=1, max=500
Connection: Keep-Alive
dsum.casalemedia.com/pbusermatch?origin=prebid&site_id=775312&p=1&i=0&gdpr=0&gdpr_consent=&us_privacy=1---
302 Found 0 B URL HTTP/1.1 dsum.casalemedia.com/pbusermatch?origin=prebid&site_id=775312&p=1&i=0&gdpr=0&gdpr_consent=&us_privacy=1---
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pbusermatch?origin=prebid&site_id=775312&p=1&i=0&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1
Host: dsum.casalemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Fri, 07 Oct 2022 15:44:32 GMT
Server: Apache
Cache-Control: no-cache
Expires: 0
Location: /pbusermatch?origin=prebid&site_id=775312&p=1&i=0&gdpr=0&gdpr_consent=&us_privacy=1---&C=1
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 0
Set-Cookie: CMID=Y0BJYMSKkqUEyTKd1SKEpgAA; Path=/; Domain=casalemedia.com; Expires=Sat, 07 Oct 2023 15:44:32 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=4520; Path=/; Domain=casalemedia.com; Expires=Thu, 05 Jan 2023 15:44:32 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=4520; Path=/; Domain=casalemedia.com; Expires=Thu, 05 Jan 2023 15:44:32 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=500
Connection: Keep-Alive
p.ad.gt/api/v1/p/405
200 OK 12 kB IP
File type ASCII text, with very long lines (40099), with no line terminators
Hash 5fe59c37180d2f91240541880407474e
6a6c6536d88d40003d438423d04d8a6ffe591007
d42ea49f15542f24c5c8d0277379822c2bf14390112dc8ad92b5f32854275f65
GET /api/v1/p/405 HTTP/1.1
Host: p.ad.gt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:31 GMT
content-type: application/javascript
server: nginx/1.20.0
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
match.adsrvr.org/track/cmf/generic?ttd_pid=smart-adserver&ttd_tpi=1&gdpr=0&gdpr_consent=
200 OK 937 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?ttd_pid=smart-adserver&ttd_tpi=1&gdpr=0&gdpr_consent=
IP
File type gzip compressed data, max compression\012- data
Hash 90d959fa17157be73ff098f7af545a01
09087866ad84be268eae41ba8e5ecb6857253be7
6a99e65d0f50d51aa2a192100c6f20cb661435c3700dc3dbba1bda56c1d224ca
GET /track/cmf/generic?ttd_pid=smart-adserver&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:32 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
ams3-ib.adnxs.com/it?an_audit=0&referrer=https%253A%252F%252Fearnme.club%252F&e=wqT_3QKEBugEAwAAAwDWAAUBCNySgZoGEImBqLnJgIXlYxgAKjYJbHnlettMpT8RLA3W4eNxoT8ZAAAAIIXrwT8hLA0SACkRJPS4AjEAAABA4XqEPzDvvN8MOJhQQOUeSGVQoZ_pJFi18qABYABoif3DAXjf9QWAAQGKAQNVU0SSAQNFVVKYAawCoAH6AagBAbABALgBAcABBcgBAtABANgBAOABAPABANgCAOACm4VO6gIUaHR0cHM6Ly9lYXJubWUuY2x1Yi-AAwCIAwGQAwCYAxegAwGqA-oBCr8BaHR0cHM6Ly9wYWdlYWQyLmdvb2dsZXN5bmRpY2F0aW9uLmNvbS9wYWdlYWQvZ2VuXzIwND9pZD1hd2JpZCZhd2JpZF9iPUFLQW1mLURlU1F6Zlh6ZVlwaDJXYWRrdGVCdnBHY3RRSXJCS2ctd0kyVTVwTXJzWElqWTFiWlZuY243R3lFenl1YWN1SC1hNUEtS0RnWDVsajIwZE9JeUdrdWd4RC1RdVB3JnByPTEwOiR7QVVDVElPTl9QUklDRX0aEzcxOTA1ODE3NjQ5OTg5NTUxNDUiCDc3MjIxNzkzKgQzOTQxOgEwwAOsAsgDANgDtsDEAeADAOgDAPgDAYAEAJIEDS91dC92My9wcmViaWSYBACiBAw5MS45MC40Mi4xNTSoBACyBBAIABABGKwCIPoBKAAwADgCuAQAwAQAyAQA2gQCCAHgBAHwBKGf6SSIBQGYBQCgBfba6vS1tsHAa8AFAMkFAAAAAAAA8D_SBQkJAAAAAAAAAADYBQHgBQHwBbzgG_oFBAgAEACQBgCYBgC4BgDBBgAAAAAAAPA_0AbujwHaBhYKEAAAAAAAAAAAAAAAAAAAAAAQABgA4AYB8gYCCACABwGIBwCgBwGqBwwxNDcyMDAyNTYxMji6Bw8IABAAGAAgADAAOOUVQADIB9_1BdIHDQkAAAAAAAAAABAAGADaBwYIABAAGADgBwDqBwIIAPAH_PYLiggCEACVCAAAgD-YCAE.&s=f266e82a41dff600e588f8d9663f2c145dd5e9d7
200 OK 0 B URL HTTP/1.1 ams3-ib.adnxs.com/it?an_audit=0&referrer=https%253A%252F%252Fearnme.club%252F&e=wqT_3QKEBugEAwAAAwDWAAUBCNySgZoGEImBqLnJgIXlYxgAKjYJbHnlettMpT8RLA3W4eNxoT8ZAAAAIIXrwT8hLA0SACkRJPS4AjEAAABA4XqEPzDvvN8MOJhQQOUeSGVQoZ_pJFi18qABYABoif3DAXjf9QWAAQGKAQNVU0SSAQNFVVKYAawCoAH6AagBAbABALgBAcABBcgBAtABANgBAOABAPABANgCAOACm4VO6gIUaHR0cHM6Ly9lYXJubWUuY2x1Yi-AAwCIAwGQAwCYAxegAwGqA-oBCr8BaHR0cHM6Ly9wYWdlYWQyLmdvb2dsZXN5bmRpY2F0aW9uLmNvbS9wYWdlYWQvZ2VuXzIwND9pZD1hd2JpZCZhd2JpZF9iPUFLQW1mLURlU1F6Zlh6ZVlwaDJXYWRrdGVCdnBHY3RRSXJCS2ctd0kyVTVwTXJzWElqWTFiWlZuY243R3lFenl1YWN1SC1hNUEtS0RnWDVsajIwZE9JeUdrdWd4RC1RdVB3JnByPTEwOiR7QVVDVElPTl9QUklDRX0aEzcxOTA1ODE3NjQ5OTg5NTUxNDUiCDc3MjIxNzkzKgQzOTQxOgEwwAOsAsgDANgDtsDEAeADAOgDAPgDAYAEAJIEDS91dC92My9wcmViaWSYBACiBAw5MS45MC40Mi4xNTSoBACyBBAIABABGKwCIPoBKAAwADgCuAQAwAQAyAQA2gQCCAHgBAHwBKGf6SSIBQGYBQCgBfba6vS1tsHAa8AFAMkFAAAAAAAA8D_SBQkJAAAAAAAAAADYBQHgBQHwBbzgG_oFBAgAEACQBgCYBgC4BgDBBgAAAAAAAPA_0AbujwHaBhYKEAAAAAAAAAAAAAAAAAAAAAAQABgA4AYB8gYCCACABwGIBwCgBwGqBwwxNDcyMDAyNTYxMji6Bw8IABAAGAAgADAAOOUVQADIB9_1BdIHDQkAAAAAAAAAABAAGADaBwYIABAAGADgBwDqBwIIAPAH_PYLiggCEACVCAAAgD-YCAE.&s=f266e82a41dff600e588f8d9663f2c145dd5e9d7
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /it?an_audit=0&referrer=https%253A%252F%252Fearnme.club%252F&e=wqT_3QKEBugEAwAAAwDWAAUBCNySgZoGEImBqLnJgIXlYxgAKjYJbHnlettMpT8RLA3W4eNxoT8ZAAAAIIXrwT8hLA0SACkRJPS4AjEAAABA4XqEPzDvvN8MOJhQQOUeSGVQoZ_pJFi18qABYABoif3DAXjf9QWAAQGKAQNVU0SSAQNFVVKYAawCoAH6AagBAbABALgBAcABBcgBAtABANgBAOABAPABANgCAOACm4VO6gIUaHR0cHM6Ly9lYXJubWUuY2x1Yi-AAwCIAwGQAwCYAxegAwGqA-oBCr8BaHR0cHM6Ly9wYWdlYWQyLmdvb2dsZXN5bmRpY2F0aW9uLmNvbS9wYWdlYWQvZ2VuXzIwND9pZD1hd2JpZCZhd2JpZF9iPUFLQW1mLURlU1F6Zlh6ZVlwaDJXYWRrdGVCdnBHY3RRSXJCS2ctd0kyVTVwTXJzWElqWTFiWlZuY243R3lFenl1YWN1SC1hNUEtS0RnWDVsajIwZE9JeUdrdWd4RC1RdVB3JnByPTEwOiR7QVVDVElPTl9QUklDRX0aEzcxOTA1ODE3NjQ5OTg5NTUxNDUiCDc3MjIxNzkzKgQzOTQxOgEwwAOsAsgDANgDtsDEAeADAOgDAPgDAYAEAJIEDS91dC92My9wcmViaWSYBACiBAw5MS45MC40Mi4xNTSoBACyBBAIABABGKwCIPoBKAAwADgCuAQAwAQAyAQA2gQCCAHgBAHwBKGf6SSIBQGYBQCgBfba6vS1tsHAa8AFAMkFAAAAAAAA8D_SBQkJAAAAAAAAAADYBQHgBQHwBbzgG_oFBAgAEACQBgCYBgC4BgDBBgAAAAAAAPA_0AbujwHaBhYKEAAAAAAAAAAAAAAAAAAAAAAQABgA4AYB8gYCCACABwGIBwCgBwGqBwwxNDcyMDAyNTYxMji6Bw8IABAAGAAgADAAOOUVQADIB9_1BdIHDQkAAAAAAAAAABAAGADaBwYIABAAGADgBwDqBwIIAPAH_PYLiggCEACVCAAAgD-YCAE.&s=f266e82a41dff600e588f8d9663f2c145dd5e9d7 HTTP/1.1
Host: ams3-ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:32 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: e7a4643a-98d6-4d0f-9a48-09fd4565e109
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 946.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ssum-sec.casalemedia.com/usermatch?s=179394&cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D33%26partneruserid%3D&gdpr=0&gdpr_consent=
302 Found 0 B URL HTTP/1.1 ssum-sec.casalemedia.com/usermatch?s=179394&cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D33%26partneruserid%3D&gdpr=0&gdpr_consent=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatch?s=179394&cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D33%26partneruserid%3D&gdpr=0&gdpr_consent= HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Fri, 07 Oct 2022 15:44:32 GMT
Server: Apache
Cache-Control: no-cache
Expires: 0
Location: /usermatch?cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D33%26partneruserid%3D&gdpr=0&gdpr_consent=&s=179394&C=1
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 0
Set-Cookie: CMID=Y0BJYLD4geeKHn5aGvJNdwAA; Path=/; Domain=casalemedia.com; Expires=Sat, 07 Oct 2023 15:44:32 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=4486; Path=/; Domain=casalemedia.com; Expires=Thu, 05 Jan 2023 15:44:32 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=4486; Path=/; Domain=casalemedia.com; Expires=Thu, 05 Jan 2023 15:44:32 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=500
Connection: Keep-Alive
rtb-csync.smartadserver.com/redir/?issi=1&partnerid=134&partneruserid=OB_OK&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmart_adserver_eb%26google_hm%3DSMART_USER_ID_B64&gdpr=0&gdpr_consent=
302 Found 0 B URL HTTP/1.1 rtb-csync.smartadserver.com/redir/?issi=1&partnerid=134&partneruserid=OB_OK&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmart_adserver_eb%26google_hm%3DSMART_USER_ID_B64&gdpr=0&gdpr_consent=
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redir/?issi=1&partnerid=134&partneruserid=OB_OK&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmart_adserver_eb%26google_hm%3DSMART_USER_ID_B64&gdpr=0&gdpr_consent= HTTP/1.1
Host: rtb-csync.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
content-length: 0
date: Fri, 07 Oct 2022 15:44:32 GMT
cache-control: no-cache,no-store
location: https://cm.g.doubleclick.net/pixel?google_nid=smart_adserver_eb&google_hm=NzQ3MDUzNjY2NDcyMDY2NjY2MA==&gdpr=0&gdpr_consent=
pragma: no-cache
set-cookie: pid=7470536664720666660; expires=Tue, 07 Nov 2023 15:44:32 GMT; domain=smartadserver.com; path=/
TestIfCookieP=ok; expires=Tue, 07 Nov 2023 15:44:32 GMT; domain=smartadserver.com; path=/
csync=134:OB_OK; expires=Sat, 07 Oct 2023 15:44:32 GMT; domain=smartadserver.com; path=/
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
ams3-ib.adnxs.com/it?an_audit=0&referrer=https%253A%252F%252Fearnme.club%252F&e=wqT_3QKEBugEAwAAAwDWAAUBCN2SgZoGEJX-0rfW9_TPYxgAKjYJRGlv8IXJpD8RaqkX11MGoT8ZAAAAIIXrwT8hag0SACkRJPS4AjEAAABA4XqEPzDvvN8MOJhQQOUeSGVQoZ_pJFi18qABYABoif3DAXi79AWAAQGKAQNVU0SSAQNFVVKYAawCoAH6AagBAbABALgBAcABBcgBAtABANgBAOABAPABANgCAOACm4VO6gIUaHR0cHM6Ly9lYXJubWUuY2x1Yi-AAwCIAwGQAwCYAxegAwGqA-oBCr8BaHR0cHM6Ly9wYWdlYWQyLmdvb2dsZXN5bmRpY2F0aW9uLmNvbS9wYWdlYWQvZ2VuXzIwND9pZD1hd2JpZCZhd2JpZF9iPUFLQW1mLUJEel9ScGFIVWg5X0h4LUN2WGtiNThybzlPbmxlSFl3MFY1R1pfTWRfSGFwSmpzQk52R0tNYU5qb0k4WkM4OFFaa1dxZVFlcXo2SjgyS200YkFraXJLSmRpd21BJnByPTEwOiR7QVVDVElPTl9QUklDRX0aEzcxNzg2ODkxNDE0ODE0NTUzODEiCDc3MjIxNzkzKgQzOTQxOgEwwAOsAsgDANgDtsDEAeADAOgDAPgDAYAEAJIEDS91dC92My9wcmViaWSYBACiBAw5MS45MC40Mi4xNTSoBACyBBAIABABGKwCIPoBKAAwADgCuAQAwAQAyAQA2gQCCAHgBAHwBKGf6SSIBQGYBQCgBYquo7fIzr7hDcAFAMkFAAAAAAAA8D_SBQkJAAAAAAAAAADYBQHgBQHwBbzgG_oFBAgAEACQBgCYBgC4BgDBBgAAAAAAAPA_0AbujwHaBhYKEAAAAAAAAAAAAAAAAAAAAAAQABgA4AYB8gYCCACABwGIBwCgBwGqBwwxNDcyMDAyNTYxMji6Bw8IABAAGAAgADAAOOUVQADIB7v0BdIHDQkAAAAAAAAAABAAGADaBwYIABAAGADgBwDqBwIIAPAH_PYLiggCEACVCAAAgD-YCAE.&s=ddf5b2b7948ab06a671e100e9ad78de872aeeaa3
200 OK 0 B URL HTTP/1.1 ams3-ib.adnxs.com/it?an_audit=0&referrer=https%253A%252F%252Fearnme.club%252F&e=wqT_3QKEBugEAwAAAwDWAAUBCN2SgZoGEJX-0rfW9_TPYxgAKjYJRGlv8IXJpD8RaqkX11MGoT8ZAAAAIIXrwT8hag0SACkRJPS4AjEAAABA4XqEPzDvvN8MOJhQQOUeSGVQoZ_pJFi18qABYABoif3DAXi79AWAAQGKAQNVU0SSAQNFVVKYAawCoAH6AagBAbABALgBAcABBcgBAtABANgBAOABAPABANgCAOACm4VO6gIUaHR0cHM6Ly9lYXJubWUuY2x1Yi-AAwCIAwGQAwCYAxegAwGqA-oBCr8BaHR0cHM6Ly9wYWdlYWQyLmdvb2dsZXN5bmRpY2F0aW9uLmNvbS9wYWdlYWQvZ2VuXzIwND9pZD1hd2JpZCZhd2JpZF9iPUFLQW1mLUJEel9ScGFIVWg5X0h4LUN2WGtiNThybzlPbmxlSFl3MFY1R1pfTWRfSGFwSmpzQk52R0tNYU5qb0k4WkM4OFFaa1dxZVFlcXo2SjgyS200YkFraXJLSmRpd21BJnByPTEwOiR7QVVDVElPTl9QUklDRX0aEzcxNzg2ODkxNDE0ODE0NTUzODEiCDc3MjIxNzkzKgQzOTQxOgEwwAOsAsgDANgDtsDEAeADAOgDAPgDAYAEAJIEDS91dC92My9wcmViaWSYBACiBAw5MS45MC40Mi4xNTSoBACyBBAIABABGKwCIPoBKAAwADgCuAQAwAQAyAQA2gQCCAHgBAHwBKGf6SSIBQGYBQCgBYquo7fIzr7hDcAFAMkFAAAAAAAA8D_SBQkJAAAAAAAAAADYBQHgBQHwBbzgG_oFBAgAEACQBgCYBgC4BgDBBgAAAAAAAPA_0AbujwHaBhYKEAAAAAAAAAAAAAAAAAAAAAAQABgA4AYB8gYCCACABwGIBwCgBwGqBwwxNDcyMDAyNTYxMji6Bw8IABAAGAAgADAAOOUVQADIB7v0BdIHDQkAAAAAAAAAABAAGADaBwYIABAAGADgBwDqBwIIAPAH_PYLiggCEACVCAAAgD-YCAE.&s=ddf5b2b7948ab06a671e100e9ad78de872aeeaa3
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /it?an_audit=0&referrer=https%253A%252F%252Fearnme.club%252F&e=wqT_3QKEBugEAwAAAwDWAAUBCN2SgZoGEJX-0rfW9_TPYxgAKjYJRGlv8IXJpD8RaqkX11MGoT8ZAAAAIIXrwT8hag0SACkRJPS4AjEAAABA4XqEPzDvvN8MOJhQQOUeSGVQoZ_pJFi18qABYABoif3DAXi79AWAAQGKAQNVU0SSAQNFVVKYAawCoAH6AagBAbABALgBAcABBcgBAtABANgBAOABAPABANgCAOACm4VO6gIUaHR0cHM6Ly9lYXJubWUuY2x1Yi-AAwCIAwGQAwCYAxegAwGqA-oBCr8BaHR0cHM6Ly9wYWdlYWQyLmdvb2dsZXN5bmRpY2F0aW9uLmNvbS9wYWdlYWQvZ2VuXzIwND9pZD1hd2JpZCZhd2JpZF9iPUFLQW1mLUJEel9ScGFIVWg5X0h4LUN2WGtiNThybzlPbmxlSFl3MFY1R1pfTWRfSGFwSmpzQk52R0tNYU5qb0k4WkM4OFFaa1dxZVFlcXo2SjgyS200YkFraXJLSmRpd21BJnByPTEwOiR7QVVDVElPTl9QUklDRX0aEzcxNzg2ODkxNDE0ODE0NTUzODEiCDc3MjIxNzkzKgQzOTQxOgEwwAOsAsgDANgDtsDEAeADAOgDAPgDAYAEAJIEDS91dC92My9wcmViaWSYBACiBAw5MS45MC40Mi4xNTSoBACyBBAIABABGKwCIPoBKAAwADgCuAQAwAQAyAQA2gQCCAHgBAHwBKGf6SSIBQGYBQCgBYquo7fIzr7hDcAFAMkFAAAAAAAA8D_SBQkJAAAAAAAAAADYBQHgBQHwBbzgG_oFBAgAEACQBgCYBgC4BgDBBgAAAAAAAPA_0AbujwHaBhYKEAAAAAAAAAAAAAAAAAAAAAAQABgA4AYB8gYCCACABwGIBwCgBwGqBwwxNDcyMDAyNTYxMji6Bw8IABAAGAAgADAAOOUVQADIB7v0BdIHDQkAAAAAAAAAABAAGADaBwYIABAAGADgBwDqBwIIAPAH_PYLiggCEACVCAAAgD-YCAE.&s=ddf5b2b7948ab06a671e100e9ad78de872aeeaa3 HTTP/1.1
Host: ams3-ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:32 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: ccad5ca0-06aa-41f3-a957-d2fc8963c04c
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 946.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ssum-sec.casalemedia.com/usermatch?ix_um=1&cb=https%3A%2F%2Fjs-sec.indexww.com%2Fht%2Fhtw-pixel.gif%3F&s=187063&us_privacy=&gdpr_consent=&gdpr=1
302 Found 0 B URL HTTP/1.1 ssum-sec.casalemedia.com/usermatch?ix_um=1&cb=https%3A%2F%2Fjs-sec.indexww.com%2Fht%2Fhtw-pixel.gif%3F&s=187063&us_privacy=&gdpr_consent=&gdpr=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatch?ix_um=1&cb=https%3A%2F%2Fjs-sec.indexww.com%2Fht%2Fhtw-pixel.gif%3F&s=187063&us_privacy=&gdpr_consent=&gdpr=1 HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ce36c23c3f1753dc192ed99a52bc5e0a.safeframe.googlesyndication.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Fri, 07 Oct 2022 15:44:32 GMT
Server: Apache
Cache-Control: no-cache
Expires: 0
Location: /usermatch?ix_um=1&cb=https%3A%2F%2Fjs-sec.indexww.com%2Fht%2Fhtw-pixel.gif%3F&s=187063&us_privacy=&gdpr_consent=&gdpr=1&C=1
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 0
Set-Cookie: CMID=Y0BJYLD4geeKHn5aGvJNeAAA; Path=/; Domain=casalemedia.com; Expires=Sat, 07 Oct 2023 15:44:32 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=4486; Path=/; Domain=casalemedia.com; Expires=Thu, 05 Jan 2023 15:44:32 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=4486; Path=/; Domain=casalemedia.com; Expires=Thu, 05 Jan 2023 15:44:32 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=499
Connection: Keep-Alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 95adcfd07725b2a2b908435d69910081
f1245eb282ee45be249b71131bf3dc1a10619671
f72fc8452cae01507ac6d4b98ada3a619d1b77c6d5d8f2b574512aa61d20c782
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 07 Oct 2022 15:44:32 GMT
Last-Modified: Fri, 07 Oct 2022 13:57:45 GMT
Server: ECS (nyb/1D0E)
X-Cache: Miss from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Uozdw2zYtReAp6E1M-uMpxgOpYuHgGT6Igm7ItLjODkb39ixGoeDPw==
Age: 6407
x.bidswitch.net/ul_cb/sync?ssp=themediagrid&us_privacy=1---
200 OK 43 B URL HTTP/1.1 x.bidswitch.net/ul_cb/sync?ssp=themediagrid&us_privacy=1---
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/sync?ssp=themediagrid&us_privacy=1--- HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: image/gif
Date: Fri, 07 Oct 2022 15:44:32 GMT
Content-Length: 43
Connection: keep-alive
ssum-sec.casalemedia.com/usermatch?ix_um=1&cb=https%3A%2F%2Fjs-sec.indexww.com%2Fht%2Fhtw-pixel.gif%3F&s=187063&us_privacy=&gdpr_consent=&gdpr=1&C=1
200 OK 173 B URL HTTP/1.1 ssum-sec.casalemedia.com/usermatch?ix_um=1&cb=https%3A%2F%2Fjs-sec.indexww.com%2Fht%2Fhtw-pixel.gif%3F&s=187063&us_privacy=&gdpr_consent=&gdpr=1&C=1
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 833c19115e01fcc299a1f3377608fabf
5c93376ca824aa7e25df7ffd79ad35a27fe6b71c
bc6178ebfd4760718d2e1cfa948348d22ad27a9bad337dbaff64306d9da5d148
GET /usermatch?ix_um=1&cb=https%3A%2F%2Fjs-sec.indexww.com%2Fht%2Fhtw-pixel.gif%3F&s=187063&us_privacy=&gdpr_consent=&gdpr=1&C=1 HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ce36c23c3f1753dc192ed99a52bc5e0a.safeframe.googlesyndication.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 15:44:32 GMT
Server: Apache
Cache-Control: no-cache
Content-Type: text/html
Expires: 0
Pragma: no-cache
Content-Length: 173
Keep-Alive: timeout=1, max=498
Connection: Keep-Alive
d.adtriba.com/collect?atb_ptid=e6f96112&atb_dpuid=gdn&atb_dcaid=campaignname&cachebuster=2836916298
302 Found 644 B URL HTTP/1.1 d.adtriba.com/collect?atb_ptid=e6f96112&atb_dpuid=gdn&atb_dcaid=campaignname&cachebuster=2836916298
IP
File type gzip compressed data, max compression\012- data
Hash beb4bc59c81ad46a3d59fe414b41aeb6
e39c7374d80a0b3593538396d4425531b67af237
8e397715a45c7946481d012928fcd6de72a35ff6efa8a0940d57d98caf31dab5
GET /collect?atb_ptid=e6f96112&atb_dpuid=gdn&atb_dcaid=campaignname&cachebuster=2836916298 HTTP/1.1
Host: d.adtriba.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, must-revalidate
Date: Fri, 07 Oct 2022 15:44:32 GMT
Expires: Sat, 01 Jan 2000 01:00:00 GMT
Last-Modified: Fri, 07 Oct 2022 15:44:32 GMT
Location: /px.gif
P3P: CP="This is not a P3P policy! See https://www.adtriba.com/privacy-policy.html for more info."
Server: nginx/1.16.1
Set-Cookie: atbgdid=f5e06354-7984-4347-8106-5e3dd9a08a8b; Expires=Mon, 07 Oct 2024 15:44:32 GMT; Domain=.adtriba.com; Path=/; SameSite=None; Secure
Content-Length: 0
Connection: keep-alive
pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=2022100301&st=env
200 OK 11 kB URL HTTP/2 pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=2022100301&st=env
IP
File type JSON data\012- , ASCII text, with very long lines (14679), with no line terminators
Hash 80305034fcb4fc031f119e3ae345c236
de2bc0a60ec43ad4aa8c3a36e04c9b703918df92
8b892ef8b1daea2fc8413cdce3801f95f057e62ed7e24dc178215bd4bf7dc16b
GET /getconfig/sodar?sv=200&tid=gpt&tv=2022100301&st=env HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 07 Oct 2022 15:44:32 GMT
server: cafe
cache-control: private
content-length: 11148
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
sync.tidaltv.com/genericusersync.ashx?dpid=3157&gdpr=0&gdpr_consent=
302 Found 0 B URL HTTP/2 sync.tidaltv.com/genericusersync.ashx?dpid=3157&gdpr=0&gdpr_consent=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /genericusersync.ashx?dpid=3157&gdpr=0&gdpr_consent= HTTP/1.1
Host: sync.tidaltv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 07 Oct 2022 15:44:32 GMT
content-length: 0
location: https://sync.tidaltv.com/genericusersync.ashx?dpid=3157&gdpr=0&gdpr_consent=&s_h=1
set-cookie: tidal_ttid=3e757dfb-ec87-4fb2-8a55-1c0869cb9187; Domain=.tidaltv.com; Expires=Sat, 07-Oct-2023 15:44:32 GMT; Path=/; SameSite=None; Secure
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-DEEk851OW1AL6allhcZurqLc0MjktZqNh9InT9wWIj9KoxGVU-1uKojaK3lywGo8rPFTCRr8Jvoq4gv5jQ4wH57NDL5fTrc50IYuWtiA0aM6kV7Q4
200 OK 42 B URL HTTP/2 pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-DEEk851OW1AL6allhcZurqLc0MjktZqNh9InT9wWIj9KoxGVU-1uKojaK3lywGo8rPFTCRr8Jvoq4gv5jQ4wH57NDL5fTrc50IYuWtiA0aM6kV7Q4
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/gen_204?id=xbid&dbm_b=AKAmf-DEEk851OW1AL6allhcZurqLc0MjktZqNh9InT9wWIj9KoxGVU-1uKojaK3lywGo8rPFTCRr8Jvoq4gv5jQ4wH57NDL5fTrc50IYuWtiA0aM6kV7Q4 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e83811dc5ccbf792aae0d84a99559558.safeframe.googlesyndication.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 07 Oct 2022 15:44:33 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-DfJbKpdkxjQL0EnqRgccg0L-H9K-9Po0z7bZ8cD5nt3lpZJihKXoZK7ZaWtxmXQ_HelyETpTHNvgyP-I1kSrRWZDaYzuaBSBxiEN12no7PjZ93CUo
200 OK 42 B URL HTTP/2 pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-DfJbKpdkxjQL0EnqRgccg0L-H9K-9Po0z7bZ8cD5nt3lpZJihKXoZK7ZaWtxmXQ_HelyETpTHNvgyP-I1kSrRWZDaYzuaBSBxiEN12no7PjZ93CUo
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/gen_204?id=xbid&dbm_b=AKAmf-DfJbKpdkxjQL0EnqRgccg0L-H9K-9Po0z7bZ8cD5nt3lpZJihKXoZK7ZaWtxmXQ_HelyETpTHNvgyP-I1kSrRWZDaYzuaBSBxiEN12no7PjZ93CUo HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1a88e3397f453cf0144ad860932b955b.safeframe.googlesyndication.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 07 Oct 2022 15:44:33 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash 05dc820485b100917b39e380e671871b
6dca69ce616fa5117b14fada8f8bbb56b642e33a
ddf9c2a955809b79e558b01a6db113bbb4f66708c87ec690fd29fb7fbe761105
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2123
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:33 GMT
Last-Modified: Fri, 07 Oct 2022 15:09:10 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 312
ocsp.digicert.com/
200 OK 312 B IP
Hash 05dc820485b100917b39e380e671871b
6dca69ce616fa5117b14fada8f8bbb56b642e33a
ddf9c2a955809b79e558b01a6db113bbb4f66708c87ec690fd29fb7fbe761105
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2293
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:33 GMT
Last-Modified: Fri, 07 Oct 2022 15:06:21 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 312
rtb-csync.smartadserver.com/redir/?partnerid=80&&partneruserid=aGv9r2ph_PlzYPuob2rkrDhu_fpzO6iqaj63-UJ8
200 OK 43 B URL HTTP/1.1 rtb-csync.smartadserver.com/redir/?partnerid=80&&partneruserid=aGv9r2ph_PlzYPuob2rkrDhu_fpzO6iqaj63-UJ8
IP
ASN #201081 SmartAdServer SAS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 221d8352905f2c38b3cb2bd191d630b0
d804b495cb9b84b9007a25b5d85f9ae674004cde
89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
GET /redir/?partnerid=80&&partneruserid=aGv9r2ph_PlzYPuob2rkrDhu_fpzO6iqaj63-UJ8 HTTP/1.1
Host: rtb-csync.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: image/gif
date: Fri, 07 Oct 2022 15:44:32 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: pid=4699081860174901475; expires=Tue, 07 Nov 2023 15:44:33 GMT; domain=smartadserver.com; path=/
TestIfCookieP=ok; expires=Tue, 07 Nov 2023 15:44:33 GMT; domain=smartadserver.com; path=/
csync=80:aGv9r2ph_PlzYPuob2rkrDhu_fpzO6iqaj63-UJ8; expires=Sat, 07 Oct 2023 15:44:33 GMT; domain=smartadserver.com; path=/
transfer-encoding: chunked
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
www.gstatic.com/mysidia/85254efcadaacab5fed344cbf203b7e7.js?tag=client_fast_engine
200 OK 6.4 kB URL HTTP/2 www.gstatic.com/mysidia/85254efcadaacab5fed344cbf203b7e7.js?tag=client_fast_engine
IP
File type ASCII text, with very long lines (1606)
Hash 8abf5b40a5e704fcdd913ed18a934dbb
550860329d6f9c84c74c7641dbaf372563e68072
b68df465ffc9757357a27addb118dd05020869ec117e5c52f77f56cd1796a0be
GET /mysidia/85254efcadaacab5fed344cbf203b7e7.js?tag=client_fast_engine HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/mysidia
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="mysidia"
report-to: {"group":"mysidia","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/mysidia"}]}
content-length: 6351
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 21:48:45 GMT
expires: Tue, 03 Jan 2023 21:48:45 GMT
cache-control: public, max-age=7776000
last-modified: Tue, 04 Oct 2022 19:51:47 GMT
content-type: text/javascript
age: 150948
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.gstatic.com/mysidia/c471d9b7113df21a6cf58632ab968748.js?tag=text/vanilla_highlight
200 OK 5.4 kB URL HTTP/2 www.gstatic.com/mysidia/c471d9b7113df21a6cf58632ab968748.js?tag=text/vanilla_highlight
IP
File type ASCII text, with very long lines (2051)
Hash fa5cfb930f7ab8930f397b7b00b8eaae
df28bf702d1cd4df9c4a28e7e42ce97a8ca469a0
70a5b4e46f9c7de2417744657fbfd94ee55d8a092ebd1ed9795e4361379de670
GET /mysidia/c471d9b7113df21a6cf58632ab968748.js?tag=text/vanilla_highlight HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/mysidia
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="mysidia"
report-to: {"group":"mysidia","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/mysidia"}]}
content-length: 5350
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 06:42:20 GMT
expires: Tue, 03 Jan 2023 06:42:20 GMT
cache-control: public, max-age=7776000
last-modified: Fri, 30 Sep 2022 21:54:54 GMT
content-type: text/javascript
age: 205333
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
match.prod.bidr.io/cookie-sync/sas?gdpr=0&gdpr_consent=&_bee_ppp=1
303 See Other 0 B URL HTTP/1.1 match.prod.bidr.io/cookie-sync/sas?gdpr=0&gdpr_consent=&_bee_ppp=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cookie-sync/sas?gdpr=0&gdpr_consent=&_bee_ppp=1 HTTP/1.1
Host: match.prod.bidr.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 303 See Other
Date: Fri, 07 Oct 2022 15:44:33 GMT
location: https://rtb-csync.smartadserver.com/redir?partnerid=127&partneruserid=&gdpr=0
Server: gunicorn
strict-transport-security: max-age=2592000; includeSubDomains
Content-Length: 0
Connection: keep-alive
rtb-csync.smartadserver.com/redir/?issi=1&partnerid=32&partneruserid=8507146420347519924&gdpr=0&gdpr_consent=
200 OK 43 B URL HTTP/1.1 rtb-csync.smartadserver.com/redir/?issi=1&partnerid=32&partneruserid=8507146420347519924&gdpr=0&gdpr_consent=
IP
ASN #201081 SmartAdServer SAS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 221d8352905f2c38b3cb2bd191d630b0
d804b495cb9b84b9007a25b5d85f9ae674004cde
89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
GET /redir/?issi=1&partnerid=32&partneruserid=8507146420347519924&gdpr=0&gdpr_consent= HTTP/1.1
Host: rtb-csync.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: image/gif
date: Fri, 07 Oct 2022 15:44:32 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: pid=882441000301424804; expires=Tue, 07 Nov 2023 15:44:33 GMT; domain=smartadserver.com; path=/
TestIfCookieP=ok; expires=Tue, 07 Nov 2023 15:44:33 GMT; domain=smartadserver.com; path=/
csync=32:8507146420347519924; expires=Sat, 07 Oct 2023 15:44:33 GMT; domain=smartadserver.com; path=/
transfer-encoding: chunked
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fmatch%3Fid%3DAU1D-0100-001665157471-RL3XQ4BH-T0I0%26adnxs_id%3D%24UID%26gdpr%3D0
302 Found 0 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fmatch%3Fid%3DAU1D-0100-001665157471-RL3XQ4BH-T0I0%26adnxs_id%3D%24UID%26gdpr%3D0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fmatch%3Fid%3DAU1D-0100-001665157471-RL3XQ4BH-T0I0%26adnxs_id%3D%24UID%26gdpr%3D0 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:33 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://ids.ad.gt/api/v1/match?id=AU1D-0100-001665157471-RL3XQ4BH-T0I0&adnxs_id=0&gdpr=0
AN-X-Request-Uuid: 3098f570-1483-427b-b13b-1e4960ad8913
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 954.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
sync.smartadserver.com/getuid?url=https://ids.ad.gt/api/v1/smart_match?id=AU1D-0100-001665157471-RL3XQ4BH-T0I0&sas_uid=[sas_uid]&gdpr=0&cklb=1
200 OK 0 B URL HTTP/1.1 sync.smartadserver.com/getuid?url=https://ids.ad.gt/api/v1/smart_match?id=AU1D-0100-001665157471-RL3XQ4BH-T0I0&sas_uid=[sas_uid]&gdpr=0&cklb=1
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?url=https://ids.ad.gt/api/v1/smart_match?id=AU1D-0100-001665157471-RL3XQ4BH-T0I0&sas_uid=[sas_uid]&gdpr=0&cklb=1 HTTP/1.1
Host: sync.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-length: 0
date: Fri, 07 Oct 2022 15:44:32 GMT
pagead2.googlesyndication.com/pagead/js/r20221003/r20110914/abg_lite.js
200 OK 12 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/r20221003/r20110914/abg_lite.js
IP
File type ASCII text, with very long lines (1562)
Hash 8f99edc8964377f69afd2f9cfa2d0c72
4e7b35e70737758bef057b6bfa9affb1ee6b71a6
ade40616d08dd98c97d0a8eb6977a62ce0790c428410abbc7f25d600bf64eeb5
GET /pagead/js/r20221003/r20110914/abg_lite.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e83811dc5ccbf792aae0d84a99559558.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 11696
x-xss-protection: 0
date: Fri, 07 Oct 2022 15:44:03 GMT
expires: Fri, 21 Oct 2022 15:44:03 GMT
cache-control: public, max-age=1209600
etag: 3440521625644817407
content-type: text/javascript; charset=UTF-8
age: 30
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
rtb-csync.smartadserver.com/redir/?issi=1&partnerid=92&partneruserid=KNCMpUNFhNXG&ev=1&pid=560288&gdpr_consent=&gdpr=0
200 OK 43 B URL HTTP/1.1 rtb-csync.smartadserver.com/redir/?issi=1&partnerid=92&partneruserid=KNCMpUNFhNXG&ev=1&pid=560288&gdpr_consent=&gdpr=0
IP
ASN #201081 SmartAdServer SAS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 221d8352905f2c38b3cb2bd191d630b0
d804b495cb9b84b9007a25b5d85f9ae674004cde
89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
GET /redir/?issi=1&partnerid=92&partneruserid=KNCMpUNFhNXG&ev=1&pid=560288&gdpr_consent=&gdpr=0 HTTP/1.1
Host: rtb-csync.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: image/gif
date: Fri, 07 Oct 2022 15:44:32 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: pid=1945116037904396323; expires=Tue, 07 Nov 2023 15:44:33 GMT; domain=smartadserver.com; path=/
TestIfCookieP=ok; expires=Tue, 07 Nov 2023 15:44:33 GMT; domain=smartadserver.com; path=/
csync=92:KNCMpUNFhNXG; expires=Sat, 07 Oct 2023 15:44:33 GMT; domain=smartadserver.com; path=/
transfer-encoding: chunked
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
rtb-csync.smartadserver.com/redir/?issi=1&partnerid=137&partneruserid=bebd0c663a&gdpr=0&gdpr_consent=
200 OK 43 B URL HTTP/1.1 rtb-csync.smartadserver.com/redir/?issi=1&partnerid=137&partneruserid=bebd0c663a&gdpr=0&gdpr_consent=
IP
ASN #201081 SmartAdServer SAS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 221d8352905f2c38b3cb2bd191d630b0
d804b495cb9b84b9007a25b5d85f9ae674004cde
89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
GET /redir/?issi=1&partnerid=137&partneruserid=bebd0c663a&gdpr=0&gdpr_consent= HTTP/1.1
Host: rtb-csync.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: image/gif
date: Fri, 07 Oct 2022 15:44:32 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: pid=2947078229559930903; expires=Tue, 07 Nov 2023 15:44:33 GMT; domain=smartadserver.com; path=/
TestIfCookieP=ok; expires=Tue, 07 Nov 2023 15:44:33 GMT; domain=smartadserver.com; path=/
csync=137:bebd0c663a; expires=Sat, 07 Oct 2023 15:44:33 GMT; domain=smartadserver.com; path=/
transfer-encoding: chunked
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
image2.pubmatic.com/AdServer/UCookieSetPug?rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001665157471-RL3XQ4BH-T0I0
302 Found 937 B URL HTTP/2 image2.pubmatic.com/AdServer/UCookieSetPug?rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001665157471-RL3XQ4BH-T0I0
IP
Hash e9b7df8eb349ea389f72547e6480705a
2e8a1d42b6ef2a7bf8d76d2bf786782f6e2b7a3e
75e79193ad7e4515163d31f16ece35509a1ba7f34e51c0372e427e5490baed2b
GET /AdServer/UCookieSetPug?rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001665157471-RL3XQ4BH-T0I0 HTTP/1.1
Host: image2.pubmatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Fri, 07 Oct 2022 15:44:30 GMT
set-cookie: KTPCACOOKIE=true; domain=pubmatic.com; secure; expires=Thu, 05-Jan-2023 15:44:30 GMT; path=/
location: https://image2.pubmatic.com/AdServer/UCookieSetPug?ird=1&rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001665157471-RL3XQ4BH-T0I0
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
cache-control: no-store, no-cache, private
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 96423370618a4e8cef79532d1bebee5b
4c0a07466a54f9355819062fb899f86f21716876
1c6ca25ca73d54ab1186a44ef9b3d3ac75d936a4acc11e4d3dbb103a8cb150e2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ebcacb94db1196ad457d9d0f99f1f05c
c29dd9bb8f75a26b57712af80eeed8a224c8869b
3683d9f0309804614cff247d22fd62443e039b180c763bc953582aad45cab8dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash d7afa5fc7c882a5e14a227032b1f501d
afa8aef6ec0ef8011c50f1b7cb7cdd335e1ff691
861a432f1d2ac8cd8f6c5847d93d97fffacd8a51f96db3061371bd69e9c2bb66
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 07 Oct 2022 15:44:33 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 06 Oct 2022 22:08:51 GMT
Expires: Fri, 07 Oct 2022 22:08:51 GMT
ETag: "afa8aef6ec0ef8011c50f1b7cb7cdd335e1ff691"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ids.ad.gt/api/v1/mediamath_match?user_id=2ae16340-495f-4d00-8971-0a5f0756b652&id=AU1D-0100-001665157471-RL3XQ4BH-T0I0
200 OK 2.5 kB URL HTTP/2 ids.ad.gt/api/v1/mediamath_match?user_id=2ae16340-495f-4d00-8971-0a5f0756b652&id=AU1D-0100-001665157471-RL3XQ4BH-T0I0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 35cf6b6274b950a2db89a7d67b9cacc4
88d8388c426524caeb706853b8414c3aa4bad172
a41736c924565e2c3d06b0b8d6fabf2505e9cae7a1cffeca8f4b76fb437cabdb
GET /api/v1/mediamath_match?user_id=2ae16340-495f-4d00-8971-0a5f0756b652&id=AU1D-0100-001665157471-RL3XQ4BH-T0I0 HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Connection: keep-alive
Cookie: au_id=AU1D-0100-001665157471-RL3XQ4BH-T0I0; g_hosted=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:33 GMT
content-type: image/gif
server: nginx/1.20.0
cache-control: public, max-age=43200
expires: Sat, 08 Oct 2022 03:44:33 GMT
set-cookie: au_id=AU1D-0100-001665157471-RL3XQ4BH-T0I0; Expires=Sun, 06 Oct 2024 15:44:33 GMT; Domain=.ad.gt; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
ams3-ib.adnxs.com/vevent?an_audit=0&referrer=https%3A%2F%2Fearnme.club%2F&e=wqT_3QKEBugEAwAAAwDWAAUBCNySgZoGEImBqLnJgIXlYxgAKjYJbHnlettMpT8RLA3W4eNxoT8ZAAAAIIXrwT8hLA0SACkRJPS4AjEAAABA4XqEPzDvvN8MOJhQQOUeSGVQoZ_pJFi18qABYABoif3DAXjf9QWAAQGKAQNVU0SSAQNFVVKYAawCoAH6AagBAbABALgBAcABBcgBAtABANgBAOABAPABANgCAOACm4VO6gIUaHR0cHM6Ly9lYXJubWUuY2x1Yi-AAwCIAwGQAwCYAxegAwGqA-oBCr8BaHR0cHM6Ly9wYWdlYWQyLmdvb2dsZXN5bmRpY2F0aW9uLmNvbS9wYWdlYWQvZ2VuXzIwND9pZD1hd2JpZCZhd2JpZF9iPUFLQW1mLURlU1F6Zlh6ZVlwaDJXYWRrdGVCdnBHY3RRSXJCS2ctd0kyVTVwTXJzWElqWTFiWlZuY243R3lFenl1YWN1SC1hNUEtS0RnWDVsajIwZE9JeUdrdWd4RC1RdVB3JnByPTEwOiR7QVVDVElPTl9QUklDRX0aEzcxOTA1ODE3NjQ5OTg5NTUxNDUiCDc3MjIxNzkzKgQzOTQxOgEwwAOsAsgDANgDtsDEAeADAOgDAPgDAYAEAJIEDS91dC92My9wcmViaWSYBACiBAw5MS45MC40Mi4xNTSoBACyBBAIABABGKwCIPoBKAAwADgCuAQAwAQAyAQA2gQCCAHgBAHwBKGf6SSIBQGYBQCgBfba6vS1tsHAa8AFAMkFAAAAAAAA8D_SBQkJAAAAAAAAAADYBQHgBQHwBbzgG_oFBAgAEACQBgCYBgC4BgDBBgAAAAAAAPA_0AbujwHaBhYKEAAAAAAAAAAAAAAAAAAAAAAQABgA4AYB8gYCCACABwGIBwCgBwGqBwwxNDcyMDAyNTYxMji6Bw8IABAAGAAgADAAOOUVQADIB9_1BdIHDQkAAAAAAAAAABAAGADaBwYIABAAGADgBwDqBwIIAPAH_PYLiggCEACVCAAAgD-YCAE.&s=f266e82a41dff600e588f8d9663f2c145dd5e9d7&type=nv&nvt=5&jm=1003&px=0&py=0&bw=300&bh=250&sid=2753213061076926375&vd=ct~0|rr~0&sv=229&tv=view7-1hs&ua=gecko40&pl=linux&x=v&tag_id=26730095&sw=1280&sh=1024&pw=300&ph=250&ww=300&wh=250&ft=3
200 OK 0 B URL HTTP/1.1 ams3-ib.adnxs.com/vevent?an_audit=0&referrer=https%3A%2F%2Fearnme.club%2F&e=wqT_3QKEBugEAwAAAwDWAAUBCNySgZoGEImBqLnJgIXlYxgAKjYJbHnlettMpT8RLA3W4eNxoT8ZAAAAIIXrwT8hLA0SACkRJPS4AjEAAABA4XqEPzDvvN8MOJhQQOUeSGVQoZ_pJFi18qABYABoif3DAXjf9QWAAQGKAQNVU0SSAQNFVVKYAawCoAH6AagBAbABALgBAcABBcgBAtABANgBAOABAPABANgCAOACm4VO6gIUaHR0cHM6Ly9lYXJubWUuY2x1Yi-AAwCIAwGQAwCYAxegAwGqA-oBCr8BaHR0cHM6Ly9wYWdlYWQyLmdvb2dsZXN5bmRpY2F0aW9uLmNvbS9wYWdlYWQvZ2VuXzIwND9pZD1hd2JpZCZhd2JpZF9iPUFLQW1mLURlU1F6Zlh6ZVlwaDJXYWRrdGVCdnBHY3RRSXJCS2ctd0kyVTVwTXJzWElqWTFiWlZuY243R3lFenl1YWN1SC1hNUEtS0RnWDVsajIwZE9JeUdrdWd4RC1RdVB3JnByPTEwOiR7QVVDVElPTl9QUklDRX0aEzcxOTA1ODE3NjQ5OTg5NTUxNDUiCDc3MjIxNzkzKgQzOTQxOgEwwAOsAsgDANgDtsDEAeADAOgDAPgDAYAEAJIEDS91dC92My9wcmViaWSYBACiBAw5MS45MC40Mi4xNTSoBACyBBAIABABGKwCIPoBKAAwADgCuAQAwAQAyAQA2gQCCAHgBAHwBKGf6SSIBQGYBQCgBfba6vS1tsHAa8AFAMkFAAAAAAAA8D_SBQkJAAAAAAAAAADYBQHgBQHwBbzgG_oFBAgAEACQBgCYBgC4BgDBBgAAAAAAAPA_0AbujwHaBhYKEAAAAAAAAAAAAAAAAAAAAAAQABgA4AYB8gYCCACABwGIBwCgBwGqBwwxNDcyMDAyNTYxMji6Bw8IABAAGAAgADAAOOUVQADIB9_1BdIHDQkAAAAAAAAAABAAGADaBwYIABAAGADgBwDqBwIIAPAH_PYLiggCEACVCAAAgD-YCAE.&s=f266e82a41dff600e588f8d9663f2c145dd5e9d7&type=nv&nvt=5&jm=1003&px=0&py=0&bw=300&bh=250&sid=2753213061076926375&vd=ct~0|rr~0&sv=229&tv=view7-1hs&ua=gecko40&pl=linux&x=v&tag_id=26730095&sw=1280&sh=1024&pw=300&ph=250&ww=300&wh=250&ft=3
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /vevent?an_audit=0&referrer=https%3A%2F%2Fearnme.club%2F&e=wqT_3QKEBugEAwAAAwDWAAUBCNySgZoGEImBqLnJgIXlYxgAKjYJbHnlettMpT8RLA3W4eNxoT8ZAAAAIIXrwT8hLA0SACkRJPS4AjEAAABA4XqEPzDvvN8MOJhQQOUeSGVQoZ_pJFi18qABYABoif3DAXjf9QWAAQGKAQNVU0SSAQNFVVKYAawCoAH6AagBAbABALgBAcABBcgBAtABANgBAOABAPABANgCAOACm4VO6gIUaHR0cHM6Ly9lYXJubWUuY2x1Yi-AAwCIAwGQAwCYAxegAwGqA-oBCr8BaHR0cHM6Ly9wYWdlYWQyLmdvb2dsZXN5bmRpY2F0aW9uLmNvbS9wYWdlYWQvZ2VuXzIwND9pZD1hd2JpZCZhd2JpZF9iPUFLQW1mLURlU1F6Zlh6ZVlwaDJXYWRrdGVCdnBHY3RRSXJCS2ctd0kyVTVwTXJzWElqWTFiWlZuY243R3lFenl1YWN1SC1hNUEtS0RnWDVsajIwZE9JeUdrdWd4RC1RdVB3JnByPTEwOiR7QVVDVElPTl9QUklDRX0aEzcxOTA1ODE3NjQ5OTg5NTUxNDUiCDc3MjIxNzkzKgQzOTQxOgEwwAOsAsgDANgDtsDEAeADAOgDAPgDAYAEAJIEDS91dC92My9wcmViaWSYBACiBAw5MS45MC40Mi4xNTSoBACyBBAIABABGKwCIPoBKAAwADgCuAQAwAQAyAQA2gQCCAHgBAHwBKGf6SSIBQGYBQCgBfba6vS1tsHAa8AFAMkFAAAAAAAA8D_SBQkJAAAAAAAAAADYBQHgBQHwBbzgG_oFBAgAEACQBgCYBgC4BgDBBgAAAAAAAPA_0AbujwHaBhYKEAAAAAAAAAAAAAAAAAAAAAAQABgA4AYB8gYCCACABwGIBwCgBwGqBwwxNDcyMDAyNTYxMji6Bw8IABAAGAAgADAAOOUVQADIB9_1BdIHDQkAAAAAAAAAABAAGADaBwYIABAAGADgBwDqBwIIAPAH_PYLiggCEACVCAAAgD-YCAE.&s=f266e82a41dff600e588f8d9663f2c145dd5e9d7&type=nv&nvt=5&jm=1003&px=0&py=0&bw=300&bh=250&sid=2753213061076926375&vd=ct~0|rr~0&sv=229&tv=view7-1hs&ua=gecko40&pl=linux&x=v&tag_id=26730095&sw=1280&sh=1024&pw=300&ph=250&ww=300&wh=250&ft=3 HTTP/1.1
Host: ams3-ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:33 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: e6e6c149-a737-47cd-ac21-84c00acef16e
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 946.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
gem.gbc.criteo.com/newidsd
200 OK 38 kB URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
File type JSON data\012- , ASCII text, with very long lines (3095)
Hash ba4d449f0b5d4cde79a2b4549afd727e
81415be141d04ccbe985aefa4529a153863a77ca
e07482794df35357b10f7c277ee2bb33a9aa57bac0adde506407032023fbe859
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:32 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 70393
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&li=gpt_2022100301&jk=2475443186667210&rc=
204 No Content 0 B URL HTTP/2 pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&li=gpt_2022100301&jk=2475443186667210&rc=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/sodar?id=sodar2&v=225&li=gpt_2022100301&jk=2475443186667210&rc= HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 07 Oct 2022 15:44:33 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ams3-ib.adnxs.com/vevent?an_audit=0&referrer=https%3A%2F%2Fearnme.club%2F&e=wqT_3QKEBugEAwAAAwDWAAUBCN2SgZoGEJX-0rfW9_TPYxgAKjYJRGlv8IXJpD8RaqkX11MGoT8ZAAAAIIXrwT8hag0SACkRJPS4AjEAAABA4XqEPzDvvN8MOJhQQOUeSGVQoZ_pJFi18qABYABoif3DAXi79AWAAQGKAQNVU0SSAQNFVVKYAawCoAH6AagBAbABALgBAcABBcgBAtABANgBAOABAPABANgCAOACm4VO6gIUaHR0cHM6Ly9lYXJubWUuY2x1Yi-AAwCIAwGQAwCYAxegAwGqA-oBCr8BaHR0cHM6Ly9wYWdlYWQyLmdvb2dsZXN5bmRpY2F0aW9uLmNvbS9wYWdlYWQvZ2VuXzIwND9pZD1hd2JpZCZhd2JpZF9iPUFLQW1mLUJEel9ScGFIVWg5X0h4LUN2WGtiNThybzlPbmxlSFl3MFY1R1pfTWRfSGFwSmpzQk52R0tNYU5qb0k4WkM4OFFaa1dxZVFlcXo2SjgyS200YkFraXJLSmRpd21BJnByPTEwOiR7QVVDVElPTl9QUklDRX0aEzcxNzg2ODkxNDE0ODE0NTUzODEiCDc3MjIxNzkzKgQzOTQxOgEwwAOsAsgDANgDtsDEAeADAOgDAPgDAYAEAJIEDS91dC92My9wcmViaWSYBACiBAw5MS45MC40Mi4xNTSoBACyBBAIABABGKwCIPoBKAAwADgCuAQAwAQAyAQA2gQCCAHgBAHwBKGf6SSIBQGYBQCgBYquo7fIzr7hDcAFAMkFAAAAAAAA8D_SBQkJAAAAAAAAAADYBQHgBQHwBbzgG_oFBAgAEACQBgCYBgC4BgDBBgAAAAAAAPA_0AbujwHaBhYKEAAAAAAAAAAAAAAAAAAAAAAQABgA4AYB8gYCCACABwGIBwCgBwGqBwwxNDcyMDAyNTYxMji6Bw8IABAAGAAgADAAOOUVQADIB7v0BdIHDQkAAAAAAAAAABAAGADaBwYIABAAGADgBwDqBwIIAPAH_PYLiggCEACVCAAAgD-YCAE.&s=ddf5b2b7948ab06a671e100e9ad78de872aeeaa3&type=nv&nvt=5&jm=1003&px=0&py=0&bw=300&bh=250&sid=2753213061076926375&vd=ct~0|rr~0&sv=229&tv=view7-1hs&ua=gecko40&pl=linux&x=v&tag_id=26730095&sw=1280&sh=1024&pw=300&ph=250&ww=300&wh=250&ft=3
200 OK 0 B URL HTTP/1.1 ams3-ib.adnxs.com/vevent?an_audit=0&referrer=https%3A%2F%2Fearnme.club%2F&e=wqT_3QKEBugEAwAAAwDWAAUBCN2SgZoGEJX-0rfW9_TPYxgAKjYJRGlv8IXJpD8RaqkX11MGoT8ZAAAAIIXrwT8hag0SACkRJPS4AjEAAABA4XqEPzDvvN8MOJhQQOUeSGVQoZ_pJFi18qABYABoif3DAXi79AWAAQGKAQNVU0SSAQNFVVKYAawCoAH6AagBAbABALgBAcABBcgBAtABANgBAOABAPABANgCAOACm4VO6gIUaHR0cHM6Ly9lYXJubWUuY2x1Yi-AAwCIAwGQAwCYAxegAwGqA-oBCr8BaHR0cHM6Ly9wYWdlYWQyLmdvb2dsZXN5bmRpY2F0aW9uLmNvbS9wYWdlYWQvZ2VuXzIwND9pZD1hd2JpZCZhd2JpZF9iPUFLQW1mLUJEel9ScGFIVWg5X0h4LUN2WGtiNThybzlPbmxlSFl3MFY1R1pfTWRfSGFwSmpzQk52R0tNYU5qb0k4WkM4OFFaa1dxZVFlcXo2SjgyS200YkFraXJLSmRpd21BJnByPTEwOiR7QVVDVElPTl9QUklDRX0aEzcxNzg2ODkxNDE0ODE0NTUzODEiCDc3MjIxNzkzKgQzOTQxOgEwwAOsAsgDANgDtsDEAeADAOgDAPgDAYAEAJIEDS91dC92My9wcmViaWSYBACiBAw5MS45MC40Mi4xNTSoBACyBBAIABABGKwCIPoBKAAwADgCuAQAwAQAyAQA2gQCCAHgBAHwBKGf6SSIBQGYBQCgBYquo7fIzr7hDcAFAMkFAAAAAAAA8D_SBQkJAAAAAAAAAADYBQHgBQHwBbzgG_oFBAgAEACQBgCYBgC4BgDBBgAAAAAAAPA_0AbujwHaBhYKEAAAAAAAAAAAAAAAAAAAAAAQABgA4AYB8gYCCACABwGIBwCgBwGqBwwxNDcyMDAyNTYxMji6Bw8IABAAGAAgADAAOOUVQADIB7v0BdIHDQkAAAAAAAAAABAAGADaBwYIABAAGADgBwDqBwIIAPAH_PYLiggCEACVCAAAgD-YCAE.&s=ddf5b2b7948ab06a671e100e9ad78de872aeeaa3&type=nv&nvt=5&jm=1003&px=0&py=0&bw=300&bh=250&sid=2753213061076926375&vd=ct~0|rr~0&sv=229&tv=view7-1hs&ua=gecko40&pl=linux&x=v&tag_id=26730095&sw=1280&sh=1024&pw=300&ph=250&ww=300&wh=250&ft=3
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /vevent?an_audit=0&referrer=https%3A%2F%2Fearnme.club%2F&e=wqT_3QKEBugEAwAAAwDWAAUBCN2SgZoGEJX-0rfW9_TPYxgAKjYJRGlv8IXJpD8RaqkX11MGoT8ZAAAAIIXrwT8hag0SACkRJPS4AjEAAABA4XqEPzDvvN8MOJhQQOUeSGVQoZ_pJFi18qABYABoif3DAXi79AWAAQGKAQNVU0SSAQNFVVKYAawCoAH6AagBAbABALgBAcABBcgBAtABANgBAOABAPABANgCAOACm4VO6gIUaHR0cHM6Ly9lYXJubWUuY2x1Yi-AAwCIAwGQAwCYAxegAwGqA-oBCr8BaHR0cHM6Ly9wYWdlYWQyLmdvb2dsZXN5bmRpY2F0aW9uLmNvbS9wYWdlYWQvZ2VuXzIwND9pZD1hd2JpZCZhd2JpZF9iPUFLQW1mLUJEel9ScGFIVWg5X0h4LUN2WGtiNThybzlPbmxlSFl3MFY1R1pfTWRfSGFwSmpzQk52R0tNYU5qb0k4WkM4OFFaa1dxZVFlcXo2SjgyS200YkFraXJLSmRpd21BJnByPTEwOiR7QVVDVElPTl9QUklDRX0aEzcxNzg2ODkxNDE0ODE0NTUzODEiCDc3MjIxNzkzKgQzOTQxOgEwwAOsAsgDANgDtsDEAeADAOgDAPgDAYAEAJIEDS91dC92My9wcmViaWSYBACiBAw5MS45MC40Mi4xNTSoBACyBBAIABABGKwCIPoBKAAwADgCuAQAwAQAyAQA2gQCCAHgBAHwBKGf6SSIBQGYBQCgBYquo7fIzr7hDcAFAMkFAAAAAAAA8D_SBQkJAAAAAAAAAADYBQHgBQHwBbzgG_oFBAgAEACQBgCYBgC4BgDBBgAAAAAAAPA_0AbujwHaBhYKEAAAAAAAAAAAAAAAAAAAAAAQABgA4AYB8gYCCACABwGIBwCgBwGqBwwxNDcyMDAyNTYxMji6Bw8IABAAGAAgADAAOOUVQADIB7v0BdIHDQkAAAAAAAAAABAAGADaBwYIABAAGADgBwDqBwIIAPAH_PYLiggCEACVCAAAgD-YCAE.&s=ddf5b2b7948ab06a671e100e9ad78de872aeeaa3&type=nv&nvt=5&jm=1003&px=0&py=0&bw=300&bh=250&sid=2753213061076926375&vd=ct~0|rr~0&sv=229&tv=view7-1hs&ua=gecko40&pl=linux&x=v&tag_id=26730095&sw=1280&sh=1024&pw=300&ph=250&ww=300&wh=250&ft=3 HTTP/1.1
Host: ams3-ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 07 Oct 2022 15:44:33 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: 9c9ece9a-03e5-4523-ac03-535937738e35
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 946.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 96423370618a4e8cef79532d1bebee5b
4c0a07466a54f9355819062fb899f86f21716876
1c6ca25ca73d54ab1186a44ef9b3d3ac75d936a4acc11e4d3dbb103a8cb150e2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 15:44:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dsum.casalemedia.com/pbusermatch?origin=prebid&site_id=775312&p=1&i=0&gdpr=0&gdpr_consent=&us_privacy=1---&C=1
200 OK 43 B URL HTTP/1.1 dsum.casalemedia.com/pbusermatch?origin=prebid&site_id=775312&p=1&i=0&gdpr=0&gdpr_consent=&us_privacy=1---&C=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /pbusermatch?origin=prebid&site_id=775312&p=1&i=0&gdpr=0&gdpr_consent=&us_privacy=1---&C=1 HTTP/1.1
Host: dsum.casalemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 15:44:33 GMT
Server: Apache
Cache-Control: no-cache
Content-Type: image/gif
Expires: 0
Pragma: no-cache
Content-Length: 43
Keep-Alive: timeout=1, max=500
Connection: Keep-Alive
flashnetic.com/r/p.html?f=muajrzwo&e=1353993759111
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=muajrzwo&e=1353993759111
IP
GET /r/p.html?f=muajrzwo&e=1353993759111 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uy4KkGuQM2oWZ6FKnU2nTRbxhTyM5bqhwy4Aa4Ecc3PZPp8NN3VoJg==
age: 13000
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=uvyrpfvpm&e=1978760078767
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=uvyrpfvpm&e=1978760078767
IP
GET /r/p.html?f=uvyrpfvpm&e=1978760078767 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xqhUiixrrN-8YQVVOV7DmWgHLe6U1xtGzV04jJ_szRc20R9U-t0MsQ==
age: 12998
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=mtijwljs&e=1732785387396
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=mtijwljs&e=1732785387396
IP
GET /r/p.html?f=mtijwljs&e=1732785387396 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UWMP7vnD6NLJETKZ0F4-yg19sIqc6KHq7i3T-xT2AumD54RL46GwnQ==
age: 12998
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=oilclbk&e=1732785387396
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=oilclbk&e=1732785387396
IP
GET /r/p.html?f=oilclbk&e=1732785387396 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _7Km8sluZEwfc8MPXRLmqOdSPrPjJb9qG0zSi_RiRBxJgoDAB6I-8g==
age: 12998
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
bh.contextweb.com/bh/rtset?pid=562316&ev=1&rurl=https://ids.ad.gt/api/v1/ppnt_match?uid=%%VGUID%%&id=AU1D-0100-001665157471-RL3XQ4BH-T0I0
302 Found 0 B URL HTTP/2 bh.contextweb.com/bh/rtset?pid=562316&ev=1&rurl=https://ids.ad.gt/api/v1/ppnt_match?uid=%%VGUID%%&id=AU1D-0100-001665157471-RL3XQ4BH-T0I0
IP
GET /bh/rtset?pid=562316&ev=1&rurl=https://ids.ad.gt/api/v1/ppnt_match?uid=%%VGUID%%&id=AU1D-0100-001665157471-RL3XQ4BH-T0I0 HTTP/1.1
Host: bh.contextweb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
p3p: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT"
cw-server: bh-deployment-7945856c5-sn6kv
cache-control: private, max-age=0, no-cache, no-store
expires: -1
content-language: en-US
location: https://ids.ad.gt/api/v1/ppnt_match?uid=0AuS2oC8IoTP&ev=1&pid=562316&id=AU1D-0100-001665157471-RL3XQ4BH-T0I0
server: Jetty(9.4.14.v20181114)
strict-transport-security: max-age=15768000
set-cookie: V=0AuS2oC8IoTP;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Mon, 02-Oct-2023 15:44:31 GMT;Max-Age=31104000;SameSite=None
INGRESSCOOKIE=7de1ca1ca350d63e; path=/; HttpOnly; Secure; SameSite=None
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=hvngzyacno&e=1353993759111
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=hvngzyacno&e=1353993759111
IP
GET /r/p.html?f=hvngzyacno&e=1353993759111 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oOW920ORQi0RsGKSaKZAXTYbGTx-8XZ4UaEknyURzo4QagPhA3yDEQ==
age: 13000
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
ids.ad.gt/api/v1/ppnt_match?uid=0AuS2oC8IoTP&ev=1&pid=562316&id=AU1D-0100-001665157471-RL3XQ4BH-T0I0
200 OK 0 B URL HTTP/2 ids.ad.gt/api/v1/ppnt_match?uid=0AuS2oC8IoTP&ev=1&pid=562316&id=AU1D-0100-001665157471-RL3XQ4BH-T0I0
IP
GET /api/v1/ppnt_match?uid=0AuS2oC8IoTP&ev=1&pid=562316&id=AU1D-0100-001665157471-RL3XQ4BH-T0I0 HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Connection: keep-alive
Cookie: au_id=AU1D-0100-001665157471-RL3XQ4BH-T0I0; g_hosted=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:33 GMT
content-type: image/gif
server: nginx/1.20.0
cache-control: public, max-age=43200
expires: Sat, 08 Oct 2022 03:44:33 GMT
set-cookie: au_id=AU1D-0100-001665157471-RL3XQ4BH-T0I0; Expires=Sun, 06 Oct 2024 15:44:33 GMT; Domain=.ad.gt; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:400,400italic,700,600
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,400italic,700,600
IP
GET /css?family=Open+Sans:400,400italic,700,600 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 07 Oct 2022 15:44:25 GMT
date: Fri, 07 Oct 2022 15:44:25 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=bjrbjlrg&e=1978760078767
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=bjrbjlrg&e=1978760078767
IP
GET /r/p.html?f=bjrbjlrg&e=1978760078767 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RfyozsdAF82-M9arlSnmI80lDpfMdcN2tQkd0texXjdevmV3HDplMw==
age: 12998
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=jklxfzn&e=1732785387396
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=jklxfzn&e=1732785387396
IP
GET /r/p.html?f=jklxfzn&e=1732785387396 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4FWBYKeh1taZbvRh_tFvamzMrMYiK3w1Ez8_WglTw5nXAPQarz4pjQ==
age: 12998
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
cdn.hadronid.net/hadron.js?url=https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F&ref=https%3A%2F%2Fwww.google.com%2F&_it=amazon&partner_id=405
200 OK 0 B URL HTTP/2 cdn.hadronid.net/hadron.js?url=https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F&ref=https%3A%2F%2Fwww.google.com%2F&_it=amazon&partner_id=405
IP
GET /hadron.js?url=https%3A%2F%2Fearnme.club%2Fairtel-starts-5g-trial%2F&ref=https%3A%2F%2Fwww.google.com%2F&_it=amazon&partner_id=405 HTTP/1.1
Host: cdn.hadronid.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:27 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"882e65a3fdb672b003a4bf553c7d4dd5"
last-modified: Fri, 07 Oct 2022 14:38:12 GMT
x-amz-id-2: 6PpILUuuy0pYHHDQq8g0K8yz8xVA0ACRKqb42bo+jkUbrmdxm93iK3DyQGj2daUhPGlNlX//ujQ=
x-amz-request-id: YHGC2X4SN320WVYQ
cache-control: max-age=3600
cf-cache-status: HIT
age: 3972
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bPxa6szwuxHQdGNsytSYFQCyKbsdkwSaJSfxj5CeX6r0s4iLASVGuQuUdqzD9wzzNeiDVjdq56ixK5Zb39UD9m2Yo%2Fcfihu66HyyGfJqjppgvRLgUONZ4%2F4NQr%2B2ebQeY3Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7567c21bd8da0afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
200 OK 0 B URL HTTP/2 c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
IP
GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Thu, 06 Oct 2022 01:32:47 GMT
x-amz-version-id: YousslGi_alc9N7i1PBVBMNtdY1LkTzi
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 01:34:28 GMT
cache-control: public, max-age=86400
etag: W/"a4d296427fc806b21335359e398c025c"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: I_uMGgkFacDS9tbBb6Fg3KDhyVn104e5i3JGgoXvx3ExaO0Uo5dOkQ==
age: 50998
X-Firefox-Spdy: h2
htlbid.com/v3/earnme.club/adsstarbid.js
200 OK 0 B URL HTTP/2 htlbid.com/v3/earnme.club/adsstarbid.js
IP
GET /v3/earnme.club/adsstarbid.js HTTP/1.1
Host: htlbid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 13 Jun 2022 06:46:43 GMT
server: AmazonS3
content-encoding: br
date: Fri, 07 Oct 2022 15:44:26 GMT
cache-control: max-age=600
etag: W/"c0185a5add25b0953f000fc7d272c31f"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6aFetlpTQkEszNIW_rF7uc5B726aFItfScvjVMJ2AfL1GPtpELxHJw==
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=kpbrzxafp&e=1353993759111
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=kpbrzxafp&e=1353993759111
IP
GET /r/p.html?f=kpbrzxafp&e=1353993759111 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: e9XT1RgQSzlUTvVeL3PgMsG_immfnsy6xqC8o9JzYZ4lauR19oYGbw==
age: 13000
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
id.hadron.ad.gt/v1/hadron.json?_it=amazon&partner_id=405&sync=0&domain=earnme.club
200 OK 0 B URL HTTP/2 id.hadron.ad.gt/v1/hadron.json?_it=amazon&partner_id=405&sync=0&domain=earnme.club
IP
GET /v1/hadron.json?_it=amazon&partner_id=405&sync=0&domain=earnme.club HTTP/1.1
Host: id.hadron.ad.gt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Allow-Origin: *
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:29 GMT
content-type: application/json
server: nginx/1.20.0
access-control-allow-origin: https://earnme.club
access-control-allow-credentials: true
vary: Origin
content-encoding: gzip
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=tzsucolpl&e=1732785387396
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=tzsucolpl&e=1732785387396
IP
GET /r/p.html?f=tzsucolpl&e=1732785387396 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ToDO-jbmWNqrsObw4DLoAMxWc5Mblje47KUF0kG296AFZlX7FEGiYQ==
age: 12998
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
prebid.smilewanted.com/
403 Forbidden 0 B IP
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 362
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
date: Fri, 07 Oct 2022 15:44:25 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 7567c211ce79b4e8-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
static.criteo.net/js/ld/publishertag.prebid.js
200 OK 0 B URL HTTP/2 static.criteo.net/js/ld/publishertag.prebid.js
IP
GET /js/ld/publishertag.prebid.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 15:44:30 GMT
content-type: text/javascript
last-modified: Sat, 01 Oct 2022 02:55:29 GMT
etag: W/"6337ac21-161a8"
expires: Sat, 08 Oct 2022 15:44:30 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=udbbwart&e=1978760078767
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=udbbwart&e=1978760078767
IP
GET /r/p.html?f=udbbwart&e=1978760078767 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XcvXeD4bPQ0CsY5TuaCAZyaBId4nZ2EhTXr6coNjllO8ELVIWNP9xw==
age: 12998
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
ag.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 ag.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: ag.gbc.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:32 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 114375
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
c.amazon-adsystem.com/aax2/apstag.js
200 OK 0 B URL HTTP/2 c.amazon-adsystem.com/aax2/apstag.js
IP
GET /aax2/apstag.js HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 07 Oct 2022 15:28:49 GMT
last-modified: Thu, 06 Oct 2022 22:15:20 GMT
etag: W/"4c87a00941c1aa3dcbab77fc8dc08ec0"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600
server: AmazonS3
content-encoding: gzip
via: 1.1 ec85113c6ed859938b3fcfa19bc035f8.cloudfront.net (CloudFront), 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: FRA60-P1, OSL50-P1
x-amz-cf-id: j_krLvkOwhM9soCtHZdSsIKWYQ7rxsc2Iklg1wBnerevO7UYftcDhg==
age: 937
X-Firefox-Spdy: h2
flashnetic.com/t.js?i=tvdi2ru09cf0ymc0mwei9&cb=7150701665157465471
200 OK 0 B URL HTTP/2 flashnetic.com/t.js?i=tvdi2ru09cf0ymc0mwei9&cb=7150701665157465471
IP
GET /t.js?i=tvdi2ru09cf0ymc0mwei9&cb=7150701665157465471 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 03 Oct 2022 09:57:56 GMT
x-amz-version-id: dA4Fe8HVqWzJ0kdxW9pTboxBQT4XyDQO
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"1f8bcab833fd358cdd3a0188d9bf9292"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: J4APG6LTq5l2_vOh0EdftX_Gvc8QDAr8uB-VcZuhDzs5-aobs8s0WQ==
age: 12997
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=bqcubfd&e=1978760078767
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=bqcubfd&e=1978760078767
IP
GET /r/p.html?f=bqcubfd&e=1978760078767 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Zp5kq9DC_u08o28XWxv9NfnqGsJpOvsKi69yRZzSns3SkufTfomcDQ==
age: 12998
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=nirkonufrn&e=1353993759111
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=nirkonufrn&e=1353993759111
IP
GET /r/p.html?f=nirkonufrn&e=1353993759111 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RmWDpV5CSjIaBs73e69rFS4eCSuCdv6mSyU5lGtWrDfczyMm7o89SQ==
age: 13000
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
bh.contextweb.com/bh/rtset?pid=560288&ev=1&rurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D92%26partneruserid%3D%25%25VGUID%25%25&gdpr=0&gdpr_consent=
302 Found 0 B URL HTTP/2 bh.contextweb.com/bh/rtset?pid=560288&ev=1&rurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D92%26partneruserid%3D%25%25VGUID%25%25&gdpr=0&gdpr_consent=
IP
GET /bh/rtset?pid=560288&ev=1&rurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D92%26partneruserid%3D%25%25VGUID%25%25&gdpr=0&gdpr_consent= HTTP/1.1
Host: bh.contextweb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT"
cw-server: bh-deployment-7945856c5-kn8sf
cache-control: private, max-age=0, no-cache, no-store
expires: -1
content-language: en-US
location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=92&partneruserid=KNCMpUNFhNXG&ev=1&pid=560288&gdpr_consent=&gdpr=0
server: Jetty(9.4.14.v20181114)
strict-transport-security: max-age=15768000
set-cookie: V=KNCMpUNFhNXG;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Mon, 02-Oct-2023 15:44:31 GMT;Max-Age=31104000;SameSite=None
INGRESSCOOKIE=8c5f6fd1bcd2ad23; path=/; HttpOnly; Secure; SameSite=None
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fearnme.club%2F&domain=earnme.club&cw=1&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fearnme.club%2F&domain=earnme.club&cw=1&lsw=1
IP
GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fearnme.club%2F&domain=earnme.club&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:27 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://earnme.club
server-processing-duration-in-ticks: 948626
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=axkdonx&e=1732785387396
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=axkdonx&e=1732785387396
IP
GET /r/p.html?f=axkdonx&e=1732785387396 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7Kozs_oYF8A9EbLLpfygXtwri1ww7pzwAd_dn1j98CJ9NGynATrVdg==
age: 12998
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
earnme.club/wp-admin/css/colors/blue/blue.php?id=mwrf5qrp3x9btnh579s9y
200 OK 0 B URL HTTP/2 earnme.club/wp-admin/css/colors/blue/blue.php?id=mwrf5qrp3x9btnh579s9y
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-admin/css/colors/blue/blue.php?id=mwrf5qrp3x9btnh579s9y HTTP/1.1
Host: earnme.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/airtel-starts-5g-trial/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Fri, 07 Oct 2022 15:44:25 GMT
X-Firefox-Spdy: h2
flashnetic.com/t.js?i=ao0y4krv21gsuol1v4o82&cb=2021231665157465470
200 OK 0 B URL HTTP/2 flashnetic.com/t.js?i=ao0y4krv21gsuol1v4o82&cb=2021231665157465470
IP
GET /t.js?i=ao0y4krv21gsuol1v4o82&cb=2021231665157465470 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 03 Oct 2022 09:57:56 GMT
x-amz-version-id: dA4Fe8HVqWzJ0kdxW9pTboxBQT4XyDQO
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"1f8bcab833fd358cdd3a0188d9bf9292"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: s454Gi3zwPiUY-mmozobDAIzlgESuGB21fZEz7aXlzC1BbG6TQvHGQ==
age: 12997
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/t.js?i=uv85s8wiydoa62b7a5wma&cb=8491771665157465472
200 OK 0 B URL HTTP/2 flashnetic.com/t.js?i=uv85s8wiydoa62b7a5wma&cb=8491771665157465472
IP
GET /t.js?i=uv85s8wiydoa62b7a5wma&cb=8491771665157465472 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 03 Oct 2022 09:57:56 GMT
x-amz-version-id: dA4Fe8HVqWzJ0kdxW9pTboxBQT4XyDQO
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"1f8bcab833fd358cdd3a0188d9bf9292"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RNU7mM2b2AD7rQNyPnIwNnIqM6w1RYpjhY-U3uJO1-xkVyhnp9l44A==
age: 12997
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=twawgjm&e=1978760078767
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=twawgjm&e=1978760078767
IP
GET /r/p.html?f=twawgjm&e=1978760078767 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: w6RClhHvNKYe2MKnAW4jBQ2NjQt-X08KM-raXofSr0E8D5kX3aH_9A==
age: 12998
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
hb.adpone.com/prebid6.28.0.js
200 OK 0 B URL HTTP/2 hb.adpone.com/prebid6.28.0.js
IP
GET /prebid6.28.0.js HTTP/1.1
Host: hb.adpone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:26 GMT
content-type: application/javascript
x-amz-id-2: ZeYyFO1WO8bd0INZHGvPyLzFUYGKr05MtFUB6deBGQhTT09x1c8Kl8rNdCgyDw3KVM5M2xXZRr0=
x-amz-request-id: KSCZ9PK2H52Q0QYC
last-modified: Thu, 01 Sep 2022 08:38:40 GMT
etag: W/"94ea378b0eaeec94d5e74f26642abb74"
x-amz-version-id: x5L5JdEDG5On.qeaBIFlrpEiCcjiPsIi
cache-control: max-age=14400
cf-cache-status: HIT
age: 6229
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mdniDFq1CGao8tQOfupqS5bMP6sPRZC9f%2BGQh6k5dLS98iqlcBL3wmIxdjyhHo3m29mjSf31x%2FH8taau55Ef4fVX5b05xGaj9xMhlr%2BiJzCXM61%2BZ2%2Fr48tym0SNkHc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7567c2131dfbb506-OSL
content-encoding: br
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=nostsr&e=1732785387396
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=nostsr&e=1732785387396
IP
GET /r/p.html?f=nostsr&e=1732785387396 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: e97iR0H8lhwG4jL7m7CjusTW3YU1FTR823KTuzuQNu3j5DOTxGiSOA==
age: 12998
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
cloudflare.com/cdn-cgi/trace
200 OK 0 B URL HTTP/2 cloudflare.com/cdn-cgi/trace
IP
GET /cdn-cgi/trace HTTP/1.1
Host: cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:25 GMT
content-type: text/plain
access-control-allow-origin: *
server: cloudflare
cf-ray: 7567c20d9a1fb51e-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fearnme.club%2F&domain=earnme.club&cw=1&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fearnme.club%2F&domain=earnme.club&cw=1&lsw=1
IP
OPTIONS /sid/json?origin=prebid&topUrl=https%3A%2F%2Fearnme.club%2F&domain=earnme.club&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://earnme.club/
Origin: https://earnme.club
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 15:44:27 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: GET
access-control-allow-origin: https://earnme.club
server-processing-duration-in-ticks: 233520
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=tulcslxoraq&e=1353993759111
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=tulcslxoraq&e=1353993759111
IP
GET /r/p.html?f=tulcslxoraq&e=1353993759111 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: z3n-Moc5RYRA4D9plFRBO894U5EwiCf07Eem-EOma8PooEq7jzD6ew==
age: 13000
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=yacttrh&e=1353993759111
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=yacttrh&e=1353993759111
IP
GET /r/p.html?f=yacttrh&e=1353993759111 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: EZfMOhDHTRkixBr5H5dTKo87m-kLTKAMJnPMXz0zRfb6FPb50J23Yw==
age: 13000
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=dhgabpqg&e=1353993759111
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=dhgabpqg&e=1353993759111
IP
GET /r/p.html?f=dhgabpqg&e=1353993759111 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Fri, 07 Oct 2022 12:07:49 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: F8VJnmDqlK5qNeeyyEtmvEOuL-oIGpXvsTikj3CGIqFJfnZFCyFrHQ==
age: 13000
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
prebid.media.net/rtb/prebid?cid=8CUQWX43D
200 OK 0 B URL HTTP/2 prebid.media.net/rtb/prebid?cid=8CUQWX43D
IP
POST /rtb/prebid?cid=8CUQWX43D HTTP/1.1
Host: prebid.media.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 2376
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 15:44:26 GMT
content-type: application/json;charset=UTF-8
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: https://earnme.club
access-control-allow-credentials: true
content-encoding: gzip
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
157.90.71.190
93.184.220.29
147.75.85.234
104.18.24.121
142.250.74.3
37.157.2.237
52.95.122.74
178.250.0.157
185.80.36.245
151.101.85.108
23.36.77.32