c1.getapplicationmy.info/?step_id=1&installer_id=5239203204726058413&publisher_id=298&source_id=0&page_id=0&affiliate_id=0&country_code=RU&locale=EN&browser_id=1&download_id=8663125919197552209&external_id=0&session_id=17169003114224522608&hardware_id=5269729652507506279&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&filesize=3.47MB&installer_file_name=hackwithip.scr&product_file_name=error.txt&reffer=http://www.ziddu.com/&product_download_url=%3CServerUrl%3E/addons/error.txt&product_name=Your+File+Download
200 OK 937 B URL HTTP/1.1 c1.getapplicationmy.info/?step_id=1&installer_id=5239203204726058413&publisher_id=298&source_id=0&page_id=0&affiliate_id=0&country_code=RU&locale=EN&browser_id=1&download_id=8663125919197552209&external_id=0&session_id=17169003114224522608&hardware_id=5269729652507506279&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&filesize=3.47MB&installer_file_name=hackwithip.scr&product_file_name=error.txt&reffer=http://www.ziddu.com/&product_download_url=%3CServerUrl%3E/addons/error.txt&product_name=Your+File+Download
IP
ASN #42831 UK Dedicated Servers Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (937), with no line terminators
Hash 3dff705008d894d6bb064d34101906ff
3bd528c69b0e959f1743e3c5cc299dd480185d76
8a26808a0f1013bd13849c392a2d5e4c369f7a6811c907a6f39086a7f1cd60ac
Analyzer Verdict Alert quad9 Sinkholed
GET /?step_id=1&installer_id=5239203204726058413&publisher_id=298&source_id=0&page_id=0&affiliate_id=0&country_code=RU&locale=EN&browser_id=1&download_id=8663125919197552209&external_id=0&session_id=17169003114224522608&hardware_id=5269729652507506279&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&filesize=3.47MB&installer_file_name=hackwithip.scr&product_file_name=error.txt&reffer=http://www.ziddu.com/&product_download_url=%3CServerUrl%3E/addons/error.txt&product_name=Your+File+Download HTTP/1.1
Host: c1.getapplicationmy.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 937
content-type: text/html; charset=utf-8
date: Mon, 12 Sep 2022 20:24:06 GMT
server: nginx
set-cookie: sid=d9e76a52-32d8-11ed-8f55-172ea17bdfee; path=/; domain=.getapplicationmy.info; expires=Sat, 30 Sep 2090 23:38:13 GMT; max-age=2147483647; HttpOnly
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 76d5eb597558e3dee0d99719d17e71e0
f3a0f3932fa8059f27dc9422d523b938fa9a7d09
d16de6cc9eb0e1297f53dc1137bb764bf5c21a7727be32ad05afebd1fe9501ed
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D16DE6CC9EB0E1297F53DC1137BB764BF5C21A7727BE32AD05AFEBD1FE9501ED"
Last-Modified: Sat, 10 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2878
Expires: Mon, 12 Sep 2022 21:12:04 GMT
Date: Mon, 12 Sep 2022 20:24:06 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 91dd975a7b17b2922dd23c0e49314e40
57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 12 Sep 2022 20:08:19 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: UNXUKzYPCSPJ31sy-cSJOpsqYIKXyI9IusNk-tY2EIKELk8cpPjIaQ==
Age: 947
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 12 Sep 2022 07:17:13 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: WiPezAKWavaT27Glom91Npn4gV99dlOkWyaL6tr3e9rtTrYGKyQjhw==
age: 47215
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 12 Sep 2022 20:24:07 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
c1.getapplicationmy.info/favicon.ico
404 Not Found 9 B URL HTTP/1.1 c1.getapplicationmy.info/favicon.ico
IP
ASN #42831 UK Dedicated Servers Limited
File type ASCII text, with no line terminators
Hash d8f4a1993546cc4b850cde3599e27aec
094b763b4cfcc0b05e5d040581cd513c3ca08067
907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: c1.getapplicationmy.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1.getapplicationmy.info/?step_id=1&installer_id=5239203204726058413&publisher_id=298&source_id=0&page_id=0&affiliate_id=0&country_code=RU&locale=EN&browser_id=1&download_id=8663125919197552209&external_id=0&session_id=17169003114224522608&hardware_id=5269729652507506279&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&filesize=3.47MB&installer_file_name=hackwithip.scr&product_file_name=error.txt&reffer=http://www.ziddu.com/&product_download_url=%3CServerUrl%3E/addons/error.txt&product_name=Your+File+Download
Cookie: sid=d9e76a52-32d8-11ed-8f55-172ea17bdfee
HTTP/1.1 404 Not Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 9
date: Mon, 12 Sep 2022 20:24:06 GMT
server: nginx
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Mon, 12 Sep 2022 19:56:07 GMT
Expires: Mon, 12 Sep 2022 20:36:03 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: jBjTNOO8vnpEM0vjW_GUxsQPDG24oUoFr9iJKYCGF5ssOzfpA4ykMg==
Age: 1680
c1.getapplicationmy.info/?affiliate_id=0&=&browser_id=1&country_code=RU&download_id=8663125919197552209&external_id=0&filesize=3.47MB&hardware_id=5269729652507506279&installer_file_name=hackwithip.scr&installer_id=5239203204726058413&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY2MzAyMTQ0NiwiaWF0IjoxNjYzMDE0MjQ2LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc2EzZDljMDYzMW9oYXRra2cwbjdwcTIiLCJuYmYiOjE2NjMwMTQyNDYsInRzIjoxNjYzMDE0MjQ2ODU0NjkyfQ.tW260H6Bk2oMTOFJcumZZ6DENVZkaWdH8rbVdaMfcN0&locale=EN&page_id=0&product_download_url=%3CServerUrl%3E%2Faddons%2Ferror.txt&product_file_name=error.txt&product_name=Your+File+Download&publisher_id=298&reffer=http%3A%2F%2Fwww.ziddu.com%2F&session_id=17169003114224522608&sid=d9e76a52-32d8-11ed-8f55-172ea17bdfee&source_id=0&step_id=1
302 Found 11 B URL HTTP/1.1 c1.getapplicationmy.info/?affiliate_id=0&=&browser_id=1&country_code=RU&download_id=8663125919197552209&external_id=0&filesize=3.47MB&hardware_id=5269729652507506279&installer_file_name=hackwithip.scr&installer_id=5239203204726058413&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY2MzAyMTQ0NiwiaWF0IjoxNjYzMDE0MjQ2LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc2EzZDljMDYzMW9oYXRra2cwbjdwcTIiLCJuYmYiOjE2NjMwMTQyNDYsInRzIjoxNjYzMDE0MjQ2ODU0NjkyfQ.tW260H6Bk2oMTOFJcumZZ6DENVZkaWdH8rbVdaMfcN0&locale=EN&page_id=0&product_download_url=%3CServerUrl%3E%2Faddons%2Ferror.txt&product_file_name=error.txt&product_name=Your+File+Download&publisher_id=298&reffer=http%3A%2F%2Fwww.ziddu.com%2F&session_id=17169003114224522608&sid=d9e76a52-32d8-11ed-8f55-172ea17bdfee&source_id=0&step_id=1
IP
ASN #42831 UK Dedicated Servers Limited
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
Analyzer Verdict Alert quad9 Sinkholed
GET /?affiliate_id=0&=&browser_id=1&country_code=RU&download_id=8663125919197552209&external_id=0&filesize=3.47MB&hardware_id=5269729652507506279&installer_file_name=hackwithip.scr&installer_id=5239203204726058413&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY2MzAyMTQ0NiwiaWF0IjoxNjYzMDE0MjQ2LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc2EzZDljMDYzMW9oYXRra2cwbjdwcTIiLCJuYmYiOjE2NjMwMTQyNDYsInRzIjoxNjYzMDE0MjQ2ODU0NjkyfQ.tW260H6Bk2oMTOFJcumZZ6DENVZkaWdH8rbVdaMfcN0&locale=EN&page_id=0&product_download_url=%3CServerUrl%3E%2Faddons%2Ferror.txt&product_file_name=error.txt&product_name=Your+File+Download&publisher_id=298&reffer=http%3A%2F%2Fwww.ziddu.com%2F&session_id=17169003114224522608&sid=d9e76a52-32d8-11ed-8f55-172ea17bdfee&source_id=0&step_id=1 HTTP/1.1
Host: c1.getapplicationmy.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://c1.getapplicationmy.info/?step_id=1&installer_id=5239203204726058413&publisher_id=298&source_id=0&page_id=0&affiliate_id=0&country_code=RU&locale=EN&browser_id=1&download_id=8663125919197552209&external_id=0&session_id=17169003114224522608&hardware_id=5269729652507506279&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&filesize=3.47MB&installer_file_name=hackwithip.scr&product_file_name=error.txt&reffer=http://www.ziddu.com/&product_download_url=%3CServerUrl%3E/addons/error.txt&product_name=Your+File+Download
Cookie: sid=d9e76a52-32d8-11ed-8f55-172ea17bdfee
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Mon, 12 Sep 2022 20:24:06 GMT
location: http://btpnative.com/click?data=UmNQRVlwYW5qR2hXWWhfcUlPWG12YWN4eENMb1BnRm8ySWxfUi1HYkRUUEQ1bjBGZmNZOXJBdVp6bDVUVXZPcV9zZm9qYTh2c3VlRHItQU45MFNnRExyemxMeEpMazZVWURwOFYzR1hyd0lnY2p4X2FjVGZGQzJRYmNKR05OOXZNSFU0WGs0bTZzLVdZZElaaDJtZEJmNzNtS1ZUVDdaMTVkemw3aWNzMFJBMQ2&id=5fdabcd3-9f42-4221-b38c-eb0ee7c9adf2
server: nginx
set-cookie: sid=d9e76a52-32d8-11ed-8f55-172ea17bdfee; path=/; domain=.getapplicationmy.info; expires=Sat, 30 Sep 2090 23:38:14 GMT; max-age=2147483647; HttpOnly
ocsp.digicert.com/
200 OK 471 B IP
Hash cb674936db4af4be99c3c397eff8c6ae
de79d76bac3fae5799b0ff35ecc19360595dfb06
992b884b64f9f6fdb76a6ba91c48fed329325b95b99d8003b282879a52093c08
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 443
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 20:24:07 GMT
Last-Modified: Mon, 12 Sep 2022 20:16:44 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
btpnative.com/click?data=UmNQRVlwYW5qR2hXWWhfcUlPWG12YWN4eENMb1BnRm8ySWxfUi1HYkRUUEQ1bjBGZmNZOXJBdVp6bDVUVXZPcV9zZm9qYTh2c3VlRHItQU45MFNnRExyemxMeEpMazZVWURwOFYzR1hyd0lnY2p4X2FjVGZGQzJRYmNKR05OOXZNSFU0WGs0bTZzLVdZZElaaDJtZEJmNzNtS1ZUVDdaMTVkemw3aWNzMFJBMQ2&id=5fdabcd3-9f42-4221-b38c-eb0ee7c9adf2
200 OK 2.2 kB URL HTTP/1.1 btpnative.com/click?data=UmNQRVlwYW5qR2hXWWhfcUlPWG12YWN4eENMb1BnRm8ySWxfUi1HYkRUUEQ1bjBGZmNZOXJBdVp6bDVUVXZPcV9zZm9qYTh2c3VlRHItQU45MFNnRExyemxMeEpMazZVWURwOFYzR1hyd0lnY2p4X2FjVGZGQzJRYmNKR05OOXZNSFU0WGs0bTZzLVdZZElaaDJtZEJmNzNtS1ZUVDdaMTVkemw3aWNzMFJBMQ2&id=5fdabcd3-9f42-4221-b38c-eb0ee7c9adf2
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (349), with CRLF line terminators
Hash 22b9b24503fd35da0a0f0848dd282c0b
4a664fc71a87964199cef620bccc461500e7bf97
c35fb35acf39702a9beca5b73397deceec0ec1e47223542eddb912d337db101c
GET /click?data=UmNQRVlwYW5qR2hXWWhfcUlPWG12YWN4eENMb1BnRm8ySWxfUi1HYkRUUEQ1bjBGZmNZOXJBdVp6bDVUVXZPcV9zZm9qYTh2c3VlRHItQU45MFNnRExyemxMeEpMazZVWURwOFYzR1hyd0lnY2p4X2FjVGZGQzJRYmNKR05OOXZNSFU0WGs0bTZzLVdZZElaaDJtZEJmNzNtS1ZUVDdaMTVkemw3aWNzMFJBMQ2&id=5fdabcd3-9f42-4221-b38c-eb0ee7c9adf2 HTTP/1.1
Host: btpnative.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://c1.getapplicationmy.info/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
Set-Cookie: JoPETVOqDOaABUR=JoPETVOqDOaABUR; path=/
X-Server: web01
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Content-Type
Date: Mon, 12 Sep 2022 20:24:07 GMT
Content-Length: 2157
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: a48KXKK9bVrjOufJobvK3Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: MO46NFqCnJSndSat1W0nUxij1ns=
btpnative.com/Redirect/
302 Found 2.2 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (2142), with CRLF line terminators
Hash 698acffa926046d46eadbcf62304518d
e8aec9f4ce509035b111a0f27d843c32dc212bbc
6a27cba2498316bd3e489e7d0ee8b192c125ded4370957080f46f90c6633cafe
POST /Redirect/ HTTP/1.1
Host: btpnative.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 358
Origin: http://btpnative.com
Connection: keep-alive
Referer: http://btpnative.com/click?data=UmNQRVlwYW5qR2hXWWhfcUlPWG12YWN4eENMb1BnRm8ySWxfUi1HYkRUUEQ1bjBGZmNZOXJBdVp6bDVUVXZPcV9zZm9qYTh2c3VlRHItQU45MFNnRExyemxMeEpMazZVWURwOFYzR1hyd0lnY2p4X2FjVGZGQzJRYmNKR05OOXZNSFU0WGs0bTZzLVdZZElaaDJtZEJmNzNtS1ZUVDdaMTVkemw3aWNzMFJBMQ2&id=5fdabcd3-9f42-4221-b38c-eb0ee7c9adf2
Cookie: JoPETVOqDOaABUR=JoPETVOqDOaABUR
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: https://mybetterck.com/aS/feedclick?s=HFz5zNIIs95ROWPasgEEzxpRTG9mCZxJfSMU3tyux_woPqiJVE9nxxwSB56cKSkXT2CTCm3P5TxbC7U30TJp2YOe9KpoUqG_KP9rM2-MnaYF4NN-Fy2QN7CyP0WpYsxEJnFYxcsUig_ZjafmTRh4cHzsOTmPHHzV9qGGc4gnEG2HGHdgolW6-otIW-taEO6qzhSBMVsAVhP01H2yiS__esX152jrNZsPq3yGQPJxXcAu20esPp5mUmpSy35LDJ9EksHx8KKTxmZ7bCArU45ARqa6IT5YEGN6fK4ZQo-5RTa3IFU6_GWiOtjktFENBpsTBH8Ix7rv-o-hDwc3eliZ8w1c3_gviCtZyfuFl8aWibAMb7bre4z1nJYKMoDe0-GihTydKDN4tS4ljojxUfWyRe1cwYSO3hW0yR2F4Vfl9f89RdEwtQbmdnP_TT0ylJ3B3KbnJV5YwbPe_7svZdyhh1x3SQjATls6gG9CN6V73qwgw7H8zDtnK_4sCkGuu8-sn-IY95q6fgj_sU0RTy1ugMxp8Sk_tVGrfm0DMSDMYOf-Oc5Fyxnoclitee75HXECZw3VvtboKymcDGM__BSluxGZ3mdrCIXjUjAYrlMoSLKoB4DlExxf1M-Njzrg6kpuNaZjvUd96MqK2jOPC_VPHkngNwUNnOgL2hXmCL90sB3Lu3zt1pjrNjsj6wbFkBw-bemSeUmbYWsOs71ZY1wj3Jk9SrrjUEQckOSRCh1Dg951cQqOcJZ29B7nd9X2aCKlBcEd0vWLWPcniTvq7FnLKlu5PnFcN8IVyCptB5yt7BZUVkbxdHsdTZm9lZN06MHnmqw0OfYZj-OntspNmtvYqSGizDbnRLOre0ac7-WRXkZa0xa1Tym71zXEuw6pdJZBSL1c9cFUTWuzuJS8FaOTxbZNL_sN3qJYRwxh8r78HQAD7M3w7tgN3ao1rz-2k-rxeA9qRgGvqzwTts7Pl5c5Ger73w_fEgDx3E85TnCFvszy6wgErdxrYTqXIMOGWk6Jh9GwoJII7YO3acraJPj2wOy0Y7yAkZzLXeCYLlhdQ7xlxCDP32lrwesoy_KG2FS-zBSEUFKb71x-qnXxYcXkJeDAXdPeD8k5Zh7Wk5sUOhCrUkrVnknsZwQ1LAI0XqrA__bwfFnhzrV1FR0Zg7JUj3Pbls2YdipcMX-G7HZcJ1psKE8-UFdKF7KO-ZDDNtUzlrwvY427osrzBMZjB4oU4r4-h4rw1uc4mybmwNrFUQazpjRP2Mnq9Jl18d1iy1CwyR4ofAm_1e7expPg_XUiGq7YOWLroL5e5wAN9fa0E-VHemtA5-njSYs2CsHl7oxvieyZzLOxGlg8yRP-l9k4uHTgGnZxstzZIGD6jRWxVibfvumnr1CklXdqdyQJueqJ85r88Jne4OBHQJpsyxV7m4MRXfqc9uZLPo2zZEFN5lY_FXAWgMdusLUVOz6tuUu0-COflArKyxRKSiEA1cvlrLvsQLmg2vrVlK5Pp8oP2etDvfwyvOBULiCG-9tNAm_5iQZyOHl1bR_ldLStVG0hIW97nm6yiHWrABMkdxsM1RMTiMKoz7ey2FHpFRNheNarbM3brSC2qIuHSVSb5By7qRAMdEf83UL2QtcvZEBhB2Fcfx0th3Q4kcdaUmkicaoteCLDOwnuK6yDu1jg2_y7T_dCa7EZrJEJRYYgkztjT90-K2L-uKionY-xOhZKvtjGQbXnfont6XiKBmxg2A8P-6hjQNe-qgCMhLnblafJRV4wTE94OsVhoW2pqwemq1iuk-95Ptt8jX58PBafMazbXX_ih0dWLFmRkjVynk8BtUekGko8eoV6LiOFwlzkCkbzr4hhb22dkpBFaeVOufzA9N3nZ8WfBUQKpBpKPHqFei6Af3OPbBrXN2DTu-xlaeORzlwdneqSDnuPKbvWNovtyuV0tK1UbSEhb3uebrKIdauoGh-xEWeqfaGouEuwLVY_TN51QfSABfbNJ8SvslHwWnPsbtk97hvO9DWrRNXJ2_UOUVA7kenMPN_aNU7tMO7t5oestkTcX-c
Server: Microsoft-IIS/8.5
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
X-Server: web01
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Content-Type
Date: Mon, 12 Sep 2022 20:24:08 GMT
Content-Length: 2214
ocsp.sectigo.com/
200 OK 471 B IP
Hash 81edfd6c3221136a83a7a78108a8f398
f85330cc6923b07213327d7b94ac0dfde56f0a12
2d86546cbaf3ae7a2182549c510ca0fd6d1dd2cae0d996c680a509c6612dbc36
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 20:24:08 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 09 Sep 2022 07:20:07 GMT
Expires: Fri, 16 Sep 2022 07:20:06 GMT
Etag: "f85330cc6923b07213327d7b94ac0dfde56f0a12"
Cache-Control: max-age=297957,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 749b5d6e08f00b69-OSL
mybetterck.com/aS/feedclick?s=HFz5zNIIs95ROWPasgEEzxpRTG9mCZxJfSMU3tyux_woPqiJVE9nxxwSB56cKSkXT2CTCm3P5TxbC7U30TJp2YOe9KpoUqG_KP9rM2-MnaYF4NN-Fy2QN7CyP0WpYsxEJnFYxcsUig_ZjafmTRh4cHzsOTmPHHzV9qGGc4gnEG2HGHdgolW6-otIW-taEO6qzhSBMVsAVhP01H2yiS__esX152jrNZsPq3yGQPJxXcAu20esPp5mUmpSy35LDJ9EksHx8KKTxmZ7bCArU45ARqa6IT5YEGN6fK4ZQo-5RTa3IFU6_GWiOtjktFENBpsTBH8Ix7rv-o-hDwc3eliZ8w1c3_gviCtZyfuFl8aWibAMb7bre4z1nJYKMoDe0-GihTydKDN4tS4ljojxUfWyRe1cwYSO3hW0yR2F4Vfl9f89RdEwtQbmdnP_TT0ylJ3B3KbnJV5YwbPe_7svZdyhh1x3SQjATls6gG9CN6V73qwgw7H8zDtnK_4sCkGuu8-sn-IY95q6fgj_sU0RTy1ugMxp8Sk_tVGrfm0DMSDMYOf-Oc5Fyxnoclitee75HXECZw3VvtboKymcDGM__BSluxGZ3mdrCIXjUjAYrlMoSLKoB4DlExxf1M-Njzrg6kpuNaZjvUd96MqK2jOPC_VPHkngNwUNnOgL2hXmCL90sB3Lu3zt1pjrNjsj6wbFkBw-bemSeUmbYWsOs71ZY1wj3Jk9SrrjUEQckOSRCh1Dg951cQqOcJZ29B7nd9X2aCKlBcEd0vWLWPcniTvq7FnLKlu5PnFcN8IVyCptB5yt7BZUVkbxdHsdTZm9lZN06MHnmqw0OfYZj-OntspNmtvYqSGizDbnRLOre0ac7-WRXkZa0xa1Tym71zXEuw6pdJZBSL1c9cFUTWuzuJS8FaOTxbZNL_sN3qJYRwxh8r78HQAD7M3w7tgN3ao1rz-2k-rxeA9qRgGvqzwTts7Pl5c5Ger73w_fEgDx3E85TnCFvszy6wgErdxrYTqXIMOGWk6Jh9GwoJII7YO3acraJPj2wOy0Y7yAkZzLXeCYLlhdQ7xlxCDP32lrwesoy_KG2FS-zBSEUFKb71x-qnXxYcXkJeDAXdPeD8k5Zh7Wk5sUOhCrUkrVnknsZwQ1LAI0XqrA__bwfFnhzrV1FR0Zg7JUj3Pbls2YdipcMX-G7HZcJ1psKE8-UFdKF7KO-ZDDNtUzlrwvY427osrzBMZjB4oU4r4-h4rw1uc4mybmwNrFUQazpjRP2Mnq9Jl18d1iy1CwyR4ofAm_1e7expPg_XUiGq7YOWLroL5e5wAN9fa0E-VHemtA5-njSYs2CsHl7oxvieyZzLOxGlg8yRP-l9k4uHTgGnZxstzZIGD6jRWxVibfvumnr1CklXdqdyQJueqJ85r88Jne4OBHQJpsyxV7m4MRXfqc9uZLPo2zZEFN5lY_FXAWgMdusLUVOz6tuUu0-COflArKyxRKSiEA1cvlrLvsQLmg2vrVlK5Pp8oP2etDvfwyvOBULiCG-9tNAm_5iQZyOHl1bR_ldLStVG0hIW97nm6yiHWrABMkdxsM1RMTiMKoz7ey2FHpFRNheNarbM3brSC2qIuHSVSb5By7qRAMdEf83UL2QtcvZEBhB2Fcfx0th3Q4kcdaUmkicaoteCLDOwnuK6yDu1jg2_y7T_dCa7EZrJEJRYYgkztjT90-K2L-uKionY-xOhZKvtjGQbXnfont6XiKBmxg2A8P-6hjQNe-qgCMhLnblafJRV4wTE94OsVhoW2pqwemq1iuk-95Ptt8jX58PBafMazbXX_ih0dWLFmRkjVynk8BtUekGko8eoV6LiOFwlzkCkbzr4hhb22dkpBFaeVOufzA9N3nZ8WfBUQKpBpKPHqFei6Af3OPbBrXN2DTu-xlaeORzlwdneqSDnuPKbvWNovtyuV0tK1UbSEhb3uebrKIdauoGh-xEWeqfaGouEuwLVY_TN51QfSABfbNJ8SvslHwWnPsbtk97hvO9DWrRNXJ2_UOUVA7kenMPN_aNU7tMO7t5oestkTcX-c
302 Found 0 B URL HTTP/2 mybetterck.com/aS/feedclick?s=HFz5zNIIs95ROWPasgEEzxpRTG9mCZxJfSMU3tyux_woPqiJVE9nxxwSB56cKSkXT2CTCm3P5TxbC7U30TJp2YOe9KpoUqG_KP9rM2-MnaYF4NN-Fy2QN7CyP0WpYsxEJnFYxcsUig_ZjafmTRh4cHzsOTmPHHzV9qGGc4gnEG2HGHdgolW6-otIW-taEO6qzhSBMVsAVhP01H2yiS__esX152jrNZsPq3yGQPJxXcAu20esPp5mUmpSy35LDJ9EksHx8KKTxmZ7bCArU45ARqa6IT5YEGN6fK4ZQo-5RTa3IFU6_GWiOtjktFENBpsTBH8Ix7rv-o-hDwc3eliZ8w1c3_gviCtZyfuFl8aWibAMb7bre4z1nJYKMoDe0-GihTydKDN4tS4ljojxUfWyRe1cwYSO3hW0yR2F4Vfl9f89RdEwtQbmdnP_TT0ylJ3B3KbnJV5YwbPe_7svZdyhh1x3SQjATls6gG9CN6V73qwgw7H8zDtnK_4sCkGuu8-sn-IY95q6fgj_sU0RTy1ugMxp8Sk_tVGrfm0DMSDMYOf-Oc5Fyxnoclitee75HXECZw3VvtboKymcDGM__BSluxGZ3mdrCIXjUjAYrlMoSLKoB4DlExxf1M-Njzrg6kpuNaZjvUd96MqK2jOPC_VPHkngNwUNnOgL2hXmCL90sB3Lu3zt1pjrNjsj6wbFkBw-bemSeUmbYWsOs71ZY1wj3Jk9SrrjUEQckOSRCh1Dg951cQqOcJZ29B7nd9X2aCKlBcEd0vWLWPcniTvq7FnLKlu5PnFcN8IVyCptB5yt7BZUVkbxdHsdTZm9lZN06MHnmqw0OfYZj-OntspNmtvYqSGizDbnRLOre0ac7-WRXkZa0xa1Tym71zXEuw6pdJZBSL1c9cFUTWuzuJS8FaOTxbZNL_sN3qJYRwxh8r78HQAD7M3w7tgN3ao1rz-2k-rxeA9qRgGvqzwTts7Pl5c5Ger73w_fEgDx3E85TnCFvszy6wgErdxrYTqXIMOGWk6Jh9GwoJII7YO3acraJPj2wOy0Y7yAkZzLXeCYLlhdQ7xlxCDP32lrwesoy_KG2FS-zBSEUFKb71x-qnXxYcXkJeDAXdPeD8k5Zh7Wk5sUOhCrUkrVnknsZwQ1LAI0XqrA__bwfFnhzrV1FR0Zg7JUj3Pbls2YdipcMX-G7HZcJ1psKE8-UFdKF7KO-ZDDNtUzlrwvY427osrzBMZjB4oU4r4-h4rw1uc4mybmwNrFUQazpjRP2Mnq9Jl18d1iy1CwyR4ofAm_1e7expPg_XUiGq7YOWLroL5e5wAN9fa0E-VHemtA5-njSYs2CsHl7oxvieyZzLOxGlg8yRP-l9k4uHTgGnZxstzZIGD6jRWxVibfvumnr1CklXdqdyQJueqJ85r88Jne4OBHQJpsyxV7m4MRXfqc9uZLPo2zZEFN5lY_FXAWgMdusLUVOz6tuUu0-COflArKyxRKSiEA1cvlrLvsQLmg2vrVlK5Pp8oP2etDvfwyvOBULiCG-9tNAm_5iQZyOHl1bR_ldLStVG0hIW97nm6yiHWrABMkdxsM1RMTiMKoz7ey2FHpFRNheNarbM3brSC2qIuHSVSb5By7qRAMdEf83UL2QtcvZEBhB2Fcfx0th3Q4kcdaUmkicaoteCLDOwnuK6yDu1jg2_y7T_dCa7EZrJEJRYYgkztjT90-K2L-uKionY-xOhZKvtjGQbXnfont6XiKBmxg2A8P-6hjQNe-qgCMhLnblafJRV4wTE94OsVhoW2pqwemq1iuk-95Ptt8jX58PBafMazbXX_ih0dWLFmRkjVynk8BtUekGko8eoV6LiOFwlzkCkbzr4hhb22dkpBFaeVOufzA9N3nZ8WfBUQKpBpKPHqFei6Af3OPbBrXN2DTu-xlaeORzlwdneqSDnuPKbvWNovtyuV0tK1UbSEhb3uebrKIdauoGh-xEWeqfaGouEuwLVY_TN51QfSABfbNJ8SvslHwWnPsbtk97hvO9DWrRNXJ2_UOUVA7kenMPN_aNU7tMO7t5oestkTcX-c
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aS/feedclick?s=HFz5zNIIs95ROWPasgEEzxpRTG9mCZxJfSMU3tyux_woPqiJVE9nxxwSB56cKSkXT2CTCm3P5TxbC7U30TJp2YOe9KpoUqG_KP9rM2-MnaYF4NN-Fy2QN7CyP0WpYsxEJnFYxcsUig_ZjafmTRh4cHzsOTmPHHzV9qGGc4gnEG2HGHdgolW6-otIW-taEO6qzhSBMVsAVhP01H2yiS__esX152jrNZsPq3yGQPJxXcAu20esPp5mUmpSy35LDJ9EksHx8KKTxmZ7bCArU45ARqa6IT5YEGN6fK4ZQo-5RTa3IFU6_GWiOtjktFENBpsTBH8Ix7rv-o-hDwc3eliZ8w1c3_gviCtZyfuFl8aWibAMb7bre4z1nJYKMoDe0-GihTydKDN4tS4ljojxUfWyRe1cwYSO3hW0yR2F4Vfl9f89RdEwtQbmdnP_TT0ylJ3B3KbnJV5YwbPe_7svZdyhh1x3SQjATls6gG9CN6V73qwgw7H8zDtnK_4sCkGuu8-sn-IY95q6fgj_sU0RTy1ugMxp8Sk_tVGrfm0DMSDMYOf-Oc5Fyxnoclitee75HXECZw3VvtboKymcDGM__BSluxGZ3mdrCIXjUjAYrlMoSLKoB4DlExxf1M-Njzrg6kpuNaZjvUd96MqK2jOPC_VPHkngNwUNnOgL2hXmCL90sB3Lu3zt1pjrNjsj6wbFkBw-bemSeUmbYWsOs71ZY1wj3Jk9SrrjUEQckOSRCh1Dg951cQqOcJZ29B7nd9X2aCKlBcEd0vWLWPcniTvq7FnLKlu5PnFcN8IVyCptB5yt7BZUVkbxdHsdTZm9lZN06MHnmqw0OfYZj-OntspNmtvYqSGizDbnRLOre0ac7-WRXkZa0xa1Tym71zXEuw6pdJZBSL1c9cFUTWuzuJS8FaOTxbZNL_sN3qJYRwxh8r78HQAD7M3w7tgN3ao1rz-2k-rxeA9qRgGvqzwTts7Pl5c5Ger73w_fEgDx3E85TnCFvszy6wgErdxrYTqXIMOGWk6Jh9GwoJII7YO3acraJPj2wOy0Y7yAkZzLXeCYLlhdQ7xlxCDP32lrwesoy_KG2FS-zBSEUFKb71x-qnXxYcXkJeDAXdPeD8k5Zh7Wk5sUOhCrUkrVnknsZwQ1LAI0XqrA__bwfFnhzrV1FR0Zg7JUj3Pbls2YdipcMX-G7HZcJ1psKE8-UFdKF7KO-ZDDNtUzlrwvY427osrzBMZjB4oU4r4-h4rw1uc4mybmwNrFUQazpjRP2Mnq9Jl18d1iy1CwyR4ofAm_1e7expPg_XUiGq7YOWLroL5e5wAN9fa0E-VHemtA5-njSYs2CsHl7oxvieyZzLOxGlg8yRP-l9k4uHTgGnZxstzZIGD6jRWxVibfvumnr1CklXdqdyQJueqJ85r88Jne4OBHQJpsyxV7m4MRXfqc9uZLPo2zZEFN5lY_FXAWgMdusLUVOz6tuUu0-COflArKyxRKSiEA1cvlrLvsQLmg2vrVlK5Pp8oP2etDvfwyvOBULiCG-9tNAm_5iQZyOHl1bR_ldLStVG0hIW97nm6yiHWrABMkdxsM1RMTiMKoz7ey2FHpFRNheNarbM3brSC2qIuHSVSb5By7qRAMdEf83UL2QtcvZEBhB2Fcfx0th3Q4kcdaUmkicaoteCLDOwnuK6yDu1jg2_y7T_dCa7EZrJEJRYYgkztjT90-K2L-uKionY-xOhZKvtjGQbXnfont6XiKBmxg2A8P-6hjQNe-qgCMhLnblafJRV4wTE94OsVhoW2pqwemq1iuk-95Ptt8jX58PBafMazbXX_ih0dWLFmRkjVynk8BtUekGko8eoV6LiOFwlzkCkbzr4hhb22dkpBFaeVOufzA9N3nZ8WfBUQKpBpKPHqFei6Af3OPbBrXN2DTu-xlaeORzlwdneqSDnuPKbvWNovtyuV0tK1UbSEhb3uebrKIdauoGh-xEWeqfaGouEuwLVY_TN51QfSABfbNJ8SvslHwWnPsbtk97hvO9DWrRNXJ2_UOUVA7kenMPN_aNU7tMO7t5oestkTcX-c HTTP/1.1
Host: mybetterck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://btpnative.com/
Connection: keep-alive
Cookie: rhid=81412752446
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Mon, 12 Sep 2022 20:24:08 GMT
content-length: 0
set-cookie: rhid=81412752446; Max-Age=15552000; Expires=Sat, 11-Mar-2023 20:24:08 GMT; Domain=mybetterck.com; Path=/; SameSite=None; secure;
location: https://p274639.mybetterck.com/adServe/domainClick?ai=gQySgi_KOavD0T_MtvjRJYiXD7klJ1soTN51QfSABfYD6oPh4t22c9B9_vdKnsZCUhrhXB7h4Q0Uuwo5IbgEBdUi6xSvMdRUq3nDjZUkzHvLJyjqHra8mGW6CHfeBodVgvgI1g_o4dK0Bqs_9EYIR_VYuzZSYLtak8a2TCfMlWrIMMlTWYfZjlToK4-_1ACOP0s6MBsFTTAOGVIq7SQHt2xDKr8Rw5O7dO4wvtGnrzTddVqW4b_Ykxw_vxfmXwaLNORDvO_u8SbIzzh0hp6ogO7JzK4vQzmiPaDGm4CwDwXfw_JoL1ALTR_29IAMKrswtsrhcGeRW6RqgEE0f5Fjh3vtj3NGgMzEq3YKtutinrJlqf_64l0Z6hpyy_YN0YQtpLSZmparWHWvrphb_I88ZSIO3PHyowRR_6p576eQm9fr2iPLc49PERgUkMD_VLeROfuqs0moSwPq7QXN-ylcxrw3TeQXSnFC-IokKZjFQZ7rqNKnLYX0tSt7rVxbodhYGC1z390ar1VbaMHjMW5FMVZ1q7sg30V1X0j3MVUJ4vmn3Zyn6-Rw-YR_ep3g43JQoLurTSybV3_zVVlMvpZOzxY7hA_5WLvNF7vPMElssBC8QYVDSNYmQ3hu-U9ACuKtcekCIShJdvtuB6OXN_rsgcmEGqekUBiPLxdLCBTbS2E-vcPMz4vkC64iBhPFiFfoyJTuzQtneEKj1HVaOgt_lw&ui=HFz5zNIIs96w8gbO8AoGVPmI0xR1wwxSkHbcb-1BDEPae27sO3GexgpH9EvfOydJZrsZu2eNDhk-LJo3qPlOGXZXZUCOgFkT1gsa8MJxGQGr3ggsXV5Gzw&si=1&oref=22a3b7b148bba753762bd6aaf4a8a708&optunit=r66YW_yPPGUiDtzx8qMEUc7n_r2HV6hZ&rb=2Vb288azLYM&rr=0&abtg=0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17152
Expires: Tue, 13 Sep 2022 01:10:00 GMT
Date: Mon, 12 Sep 2022 20:24:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17152
Expires: Tue, 13 Sep 2022 01:10:00 GMT
Date: Mon, 12 Sep 2022 20:24:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17152
Expires: Tue, 13 Sep 2022 01:10:00 GMT
Date: Mon, 12 Sep 2022 20:24:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17152
Expires: Tue, 13 Sep 2022 01:10:00 GMT
Date: Mon, 12 Sep 2022 20:24:08 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae1f7987-7b92-4cec-85ab-243250e02a06.webp
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae1f7987-7b92-4cec-85ab-243250e02a06.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b7ccc33ae0c85a906f2c17db281ec790
1904722d70348235d5472c54f888d2b4b991e2aa
f48edc03624f582b05b596694b76bd784f85eb9f2ca5dd025bbea9cc2ff1f096
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae1f7987-7b92-4cec-85ab-243250e02a06.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6999
x-amzn-requestid: 61e3e817-fb62-47c7-b938-2dfc6a134622
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YO1mlG3XIAMFo5w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631c3629-37c2c8982c4ccf891875c59a;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 07:00:57 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: S2TR552YpZeEbhTSAn4vdXexYpvR4Lrr-LaJmfNd7LnO0L4QM8w-Dg==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 07:13:41 GMT
age: 47427
etag: "1904722d70348235d5472c54f888d2b4b991e2aa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6b50df-cdcd-4b44-9ed3-90a502ea29ad.jpeg
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6b50df-cdcd-4b44-9ed3-90a502ea29ad.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 239262b6ab17cb19414c35cd4f761092
48eddcf9838e980e67cc8f9cbb05b475df2f0331
cd27cbce632d769288d9c33c5c8e887ba02df5677f10f7a6d03139b590ba24b4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6b50df-cdcd-4b44-9ed3-90a502ea29ad.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9815
x-amzn-requestid: 89243e57-94eb-4c6b-903f-aa01df030ecc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YUIxnEAjoAMF_Ig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631e54d6-199403e2695b214711f5117f;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 21:36:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PWOeca9JRnIgEymeLVyqTBucBJ0j6OS9Rmqwd4CcAKixqo0zvb452w==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Sep 2022 21:48:14 GMT
age: 81354
etag: "48eddcf9838e980e67cc8f9cbb05b475df2f0331"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a938fd0-09b1-4550-89f4-e81e9c6a8737.jpeg
200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a938fd0-09b1-4550-89f4-e81e9c6a8737.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b674daf3dc6e85ed054ab34d69979b86
47aaf5a3af2c25820d01d613c82b7f1279a298fc
7b9993ef69d4b77c1533ada040c85563b9cf7b1f5d007177c005f6cd7fdba1d3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a938fd0-09b1-4550-89f4-e81e9c6a8737.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4162
x-amzn-requestid: 9dc27e34-69e1-439d-8974-1297584ef4d0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YSIhuHlWIAMFhOQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631d87a4-410e9ede524aa657609a057a;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 07:00:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: UxATqmWDCTwVqA3ORIXXObWZZj158TSRUoaAr48b08sxdAxBicw5zA==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 07:27:45 GMT
age: 46583
etag: "47aaf5a3af2c25820d01d613c82b7f1279a298fc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81f9b0a3-fe8f-4665-9e54-9dfaf5d4876b.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81f9b0a3-fe8f-4665-9e54-9dfaf5d4876b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6174529fff57758e958da5432344962f
05ec2076b32398d60ee77fab8c14345bc7dfe647
65284a76355864efa944dff5033575013c6d74a019a7b731e0236603f2f656a7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81f9b0a3-fe8f-4665-9e54-9dfaf5d4876b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9466
x-amzn-requestid: ba3f7eac-61c9-4b5f-ae8a-b372906a25ba
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YOTeoHMKoAMFr5Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bff90-1e70e2c444242a2d46387986;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 03:08:00 GMT
x-amz-cf-pop: SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: -SwaUjMInlOaGpH6yK1W1a57QCQMgY-l43RdUfKVtZA1zJzMrLzC6g==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 f7283f3fe2c258cf54f8b7d3dd272e0e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 04:04:42 GMT
age: 58766
etag: "05ec2076b32398d60ee77fab8c14345bc7dfe647"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefa6ec5a-4e0b-4c94-b9da-4836fbaa107b.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefa6ec5a-4e0b-4c94-b9da-4836fbaa107b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e407da4d97d497925b1ab523fd416787
166741631fb93d109b18dde6d316b3fa3276aa8f
707460c02438da6114e35e0b6569d42c0f3fb747f8cb51002f4d52bedbcffa61
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefa6ec5a-4e0b-4c94-b9da-4836fbaa107b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8485
x-amzn-requestid: a56c9282-2786-4ae7-9fc2-0468bcc820a8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YQ1k_FM1oAMFZ2Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631d02ec-753cc4f121c9b77d22bb82b5;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 21:34:36 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Mfmj40aUc8l5RPk56M-pbqTwhde_HzYcmN5MDrfv-WFPhbpoShWYNw==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Sep 2022 22:16:58 GMT
age: 79630
etag: "166741631fb93d109b18dde6d316b3fa3276aa8f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F75931920-737e-40b5-8dd6-d2070639ea2d.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F75931920-737e-40b5-8dd6-d2070639ea2d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c14088c4ca0d576e087feed41b7f1565
172b23f2ef39b6c3fdebb5441b10a95712206d0a
2699efa811ceac5420f5bd26c35a6f48b51854e29cbce7cbb62efb613db7d6b9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F75931920-737e-40b5-8dd6-d2070639ea2d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8799
x-amzn-requestid: 1bcdf387-9ad2-449a-861e-3352b1744d23
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YUI-0G6vIAMFgbA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631e552b-42aa46af6315148106c4fdee;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 21:37:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: g2mxKK8L5T4YkeD8JqNUuV_KfsIq8ypRMvxhsyzSZSEIP4gDl4zLVQ==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Sep 2022 21:41:51 GMT
age: 81737
etag: "172b23f2ef39b6c3fdebb5441b10a95712206d0a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
p274639.mybetterck.com/adServe/domainClick?ai=gQySgi_KOavD0T_MtvjRJYiXD7klJ1soTN51QfSABfYD6oPh4t22c9B9_vdKnsZCUhrhXB7h4Q0Uuwo5IbgEBdUi6xSvMdRUq3nDjZUkzHvLJyjqHra8mGW6CHfeBodVgvgI1g_o4dK0Bqs_9EYIR_VYuzZSYLtak8a2TCfMlWrIMMlTWYfZjlToK4-_1ACOP0s6MBsFTTAOGVIq7SQHt2xDKr8Rw5O7dO4wvtGnrzTddVqW4b_Ykxw_vxfmXwaLNORDvO_u8SbIzzh0hp6ogO7JzK4vQzmiPaDGm4CwDwXfw_JoL1ALTR_29IAMKrswtsrhcGeRW6RqgEE0f5Fjh3vtj3NGgMzEq3YKtutinrJlqf_64l0Z6hpyy_YN0YQtpLSZmparWHWvrphb_I88ZSIO3PHyowRR_6p576eQm9fr2iPLc49PERgUkMD_VLeROfuqs0moSwPq7QXN-ylcxrw3TeQXSnFC-IokKZjFQZ7rqNKnLYX0tSt7rVxbodhYGC1z390ar1VbaMHjMW5FMVZ1q7sg30V1X0j3MVUJ4vmn3Zyn6-Rw-YR_ep3g43JQoLurTSybV3_zVVlMvpZOzxY7hA_5WLvNF7vPMElssBC8QYVDSNYmQ3hu-U9ACuKtcekCIShJdvtuB6OXN_rsgcmEGqekUBiPLxdLCBTbS2E-vcPMz4vkC64iBhPFiFfoyJTuzQtneEKj1HVaOgt_lw&ui=HFz5zNIIs96w8gbO8AoGVPmI0xR1wwxSkHbcb-1BDEPae27sO3GexgpH9EvfOydJZrsZu2eNDhk-LJo3qPlOGXZXZUCOgFkT1gsa8MJxGQGr3ggsXV5Gzw&si=1&oref=22a3b7b148bba753762bd6aaf4a8a708&optunit=r66YW_yPPGUiDtzx8qMEUc7n_r2HV6hZ&rb=2Vb288azLYM&rr=0&abtg=0
302 Found 0 B URL HTTP/2 p274639.mybetterck.com/adServe/domainClick?ai=gQySgi_KOavD0T_MtvjRJYiXD7klJ1soTN51QfSABfYD6oPh4t22c9B9_vdKnsZCUhrhXB7h4Q0Uuwo5IbgEBdUi6xSvMdRUq3nDjZUkzHvLJyjqHra8mGW6CHfeBodVgvgI1g_o4dK0Bqs_9EYIR_VYuzZSYLtak8a2TCfMlWrIMMlTWYfZjlToK4-_1ACOP0s6MBsFTTAOGVIq7SQHt2xDKr8Rw5O7dO4wvtGnrzTddVqW4b_Ykxw_vxfmXwaLNORDvO_u8SbIzzh0hp6ogO7JzK4vQzmiPaDGm4CwDwXfw_JoL1ALTR_29IAMKrswtsrhcGeRW6RqgEE0f5Fjh3vtj3NGgMzEq3YKtutinrJlqf_64l0Z6hpyy_YN0YQtpLSZmparWHWvrphb_I88ZSIO3PHyowRR_6p576eQm9fr2iPLc49PERgUkMD_VLeROfuqs0moSwPq7QXN-ylcxrw3TeQXSnFC-IokKZjFQZ7rqNKnLYX0tSt7rVxbodhYGC1z390ar1VbaMHjMW5FMVZ1q7sg30V1X0j3MVUJ4vmn3Zyn6-Rw-YR_ep3g43JQoLurTSybV3_zVVlMvpZOzxY7hA_5WLvNF7vPMElssBC8QYVDSNYmQ3hu-U9ACuKtcekCIShJdvtuB6OXN_rsgcmEGqekUBiPLxdLCBTbS2E-vcPMz4vkC64iBhPFiFfoyJTuzQtneEKj1HVaOgt_lw&ui=HFz5zNIIs96w8gbO8AoGVPmI0xR1wwxSkHbcb-1BDEPae27sO3GexgpH9EvfOydJZrsZu2eNDhk-LJo3qPlOGXZXZUCOgFkT1gsa8MJxGQGr3ggsXV5Gzw&si=1&oref=22a3b7b148bba753762bd6aaf4a8a708&optunit=r66YW_yPPGUiDtzx8qMEUc7n_r2HV6hZ&rb=2Vb288azLYM&rr=0&abtg=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adServe/domainClick?ai=gQySgi_KOavD0T_MtvjRJYiXD7klJ1soTN51QfSABfYD6oPh4t22c9B9_vdKnsZCUhrhXB7h4Q0Uuwo5IbgEBdUi6xSvMdRUq3nDjZUkzHvLJyjqHra8mGW6CHfeBodVgvgI1g_o4dK0Bqs_9EYIR_VYuzZSYLtak8a2TCfMlWrIMMlTWYfZjlToK4-_1ACOP0s6MBsFTTAOGVIq7SQHt2xDKr8Rw5O7dO4wvtGnrzTddVqW4b_Ykxw_vxfmXwaLNORDvO_u8SbIzzh0hp6ogO7JzK4vQzmiPaDGm4CwDwXfw_JoL1ALTR_29IAMKrswtsrhcGeRW6RqgEE0f5Fjh3vtj3NGgMzEq3YKtutinrJlqf_64l0Z6hpyy_YN0YQtpLSZmparWHWvrphb_I88ZSIO3PHyowRR_6p576eQm9fr2iPLc49PERgUkMD_VLeROfuqs0moSwPq7QXN-ylcxrw3TeQXSnFC-IokKZjFQZ7rqNKnLYX0tSt7rVxbodhYGC1z390ar1VbaMHjMW5FMVZ1q7sg30V1X0j3MVUJ4vmn3Zyn6-Rw-YR_ep3g43JQoLurTSybV3_zVVlMvpZOzxY7hA_5WLvNF7vPMElssBC8QYVDSNYmQ3hu-U9ACuKtcekCIShJdvtuB6OXN_rsgcmEGqekUBiPLxdLCBTbS2E-vcPMz4vkC64iBhPFiFfoyJTuzQtneEKj1HVaOgt_lw&ui=HFz5zNIIs96w8gbO8AoGVPmI0xR1wwxSkHbcb-1BDEPae27sO3GexgpH9EvfOydJZrsZu2eNDhk-LJo3qPlOGXZXZUCOgFkT1gsa8MJxGQGr3ggsXV5Gzw&si=1&oref=22a3b7b148bba753762bd6aaf4a8a708&optunit=r66YW_yPPGUiDtzx8qMEUc7n_r2HV6hZ&rb=2Vb288azLYM&rr=0&abtg=0 HTTP/1.1
Host: p274639.mybetterck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://btpnative.com/
Connection: keep-alive
Cookie: rhid=81412752446
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 12 Sep 2022 20:24:08 GMT
content-length: 0
set-cookie: rhid=81412752446; Max-Age=15552000; Expires=Sat, 11-Mar-2023 20:24:08 GMT; Domain=mybetterck.com; Path=/; SameSite=None; secure;
loi=ad_490233_off_142374_aff_3322_cid_274639-575901862-GETAPPLICATIONMY.INFO_ts_1663014248; Max-Age=3600; Expires=Mon, 12-Sep-2022 21:24:08 GMT; Domain=mybetterck.com; Path=/; SameSite=None; secure;
location: https://myfood.ltd/?v=20171031&s1=0
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36ab1cf7-da3f-4bea-abd5-3f9da5a18c29.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36ab1cf7-da3f-4bea-abd5-3f9da5a18c29.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash beca122055c554548ca6ef68a66a4e2e
cf5ec3650282d05c082eb0534f1b70a59f9f4bbe
a9cf7ef5dfb6a58c66bc29b2a280c2253e56a28ce317d8271273ddae2008d9d5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36ab1cf7-da3f-4bea-abd5-3f9da5a18c29.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9126
x-amzn-requestid: 86fd10d3-f2bb-4191-93b0-3a416000fd68
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YUJHeGMqoAMFnwA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631e5562-1f8b12e10d7212353f050f3f;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 21:38:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: WcMMN48JT7YRvUBGR6oAes5EwusRcdgrWT60xJffsOfsbkJ4_XyALg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Sep 2022 21:41:51 GMT
age: 81744
etag: "cf5ec3650282d05c082eb0534f1b70a59f9f4bbe"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
162.210.196.172
93.184.220.29
209.15.13.136
104.18.32.68
23.33.119.27