Overview

URL fubo.tv
IP151.101.0.230
ASNFASTLY
Location United States
Report completed2022-09-29 12:27:13 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

No files detected



Passive DNS (80)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS www.redditstatic.com (1) 1440 2012-06-30 12:33:28 UTC 2022-09-29 08:58:04 UTC 151.101.85.140
mnemonic passive DNS t.co (1) 569 2012-07-25 19:09:44 UTC 2022-09-29 05:01:50 UTC 104.244.42.69
mnemonic passive DNS adservice.google.no (2) 96969 2017-09-26 14:23:08 UTC 2022-09-29 04:57:21 UTC 216.58.207.194
mnemonic passive DNS dvqigh9b7wa32.cloudfront.net (1) 0 2021-11-04 15:01:03 UTC 2022-09-29 07:03:51 UTC 143.204.42.227 Unknown ranking
mnemonic passive DNS cm.adform.net (1) 1667 2015-03-30 07:47:01 UTC 2022-09-29 09:10:04 UTC 37.157.2.234
mnemonic passive DNS criteo-partners.tremorhub.com (1) 2360 2017-11-20 17:11:05 UTC 2022-09-29 09:10:04 UTC 34.192.121.129
mnemonic passive DNS r3.o.lencr.org (5) 344 2020-12-02 08:52:13 UTC 2022-09-29 04:57:37 UTC 23.36.76.226
mnemonic passive DNS www.google.com (1) 7 2016-08-04 12:36:31 UTC 2022-09-29 07:16:42 UTC 142.250.74.164
mnemonic passive DNS adservice.google.com (2) 76 2021-02-20 16:10:48 UTC 2022-09-29 08:33:51 UTC 142.250.74.34
mnemonic passive DNS www.facebook.com (1) 99 2017-01-30 05:00:00 UTC 2022-09-29 04:56:10 UTC 31.13.72.36
mnemonic passive DNS simage2.pubmatic.com (1) 578 2012-07-21 03:13:48 UTC 2022-09-29 09:10:04 UTC 185.64.189.110
mnemonic passive DNS ups.analytics.yahoo.com (2) 287 2019-05-09 15:57:40 UTC 2022-09-29 09:10:04 UTC 18.156.0.31
mnemonic passive DNS b.clarity.ms (1) 3462 2021-07-27 12:49:08 UTC 2022-09-29 07:21:06 UTC 20.75.32.255
mnemonic passive DNS img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-09-29 04:10:37 UTC 34.120.237.76
mnemonic passive DNS www.googleadservices.com (1) 107 2012-07-21 05:05:30 UTC 2022-09-29 08:10:09 UTC 142.250.74.98
mnemonic passive DNS dnacdn.net (2) 3760 2019-09-02 15:07:45 UTC 2022-09-29 05:35:28 UTC 178.250.0.157
mnemonic passive DNS wa.appsflyer.com (1) 13657 2018-01-30 09:40:40 UTC 2022-09-29 07:15:05 UTC 46.51.199.161
mnemonic passive DNS www.googletagmanager.com (1) 75 2012-12-25 14:52:06 UTC 2022-09-29 04:56:27 UTC 142.250.74.72
mnemonic passive DNS ocsp.sectigo.com (4) 487 2018-12-17 11:31:55 UTC 2022-09-29 06:41:52 UTC 172.64.155.188
mnemonic passive DNS gum.criteo.com (5) 381 2015-01-22 10:58:57 UTC 2022-09-29 05:49:03 UTC 178.250.0.157
mnemonic passive DNS www.google.no (3) 25607 2016-04-05 19:50:59 UTC 2022-09-29 05:12:08 UTC 142.250.74.3
mnemonic passive DNS googleads.g.doubleclick.net (3) 42 2021-02-20 15:43:32 UTC 2022-09-29 12:22:45 UTC 216.58.211.2
mnemonic passive DNS www.clarity.ms (2) 1404 2018-08-22 07:41:57 UTC 2022-09-29 04:57:12 UTC 13.107.246.53
mnemonic passive DNS pixel.rubiconproject.com (1) 314 2012-10-09 03:17:38 UTC 2022-09-29 04:56:18 UTC 213.19.162.80
mnemonic passive DNS rtb-csync.smartadserver.com (1) 583 2012-12-17 16:38:47 UTC 2022-09-29 09:43:47 UTC 185.86.139.113
mnemonic passive DNS ocsp.digicert.com (21) 86 2012-05-21 07:02:23 UTC 2022-09-29 08:58:20 UTC 93.184.220.29
mnemonic passive DNS sync.outbrain.com (1) 757 2016-08-02 06:37:14 UTC 2022-09-29 09:10:04 UTC 64.202.112.31
mnemonic passive DNS bat.bing.com (3) 387 2014-04-08 09:23:16 UTC 2022-09-29 05:03:48 UTC 13.107.21.200
mnemonic passive DNS analytics.twitter.com (1) 526 2013-04-10 19:53:18 UTC 2022-09-29 05:34:49 UTC 104.244.42.131
mnemonic passive DNS c.clarity.ms (2) 803 2021-02-03 23:22:47 UTC 2022-09-29 05:01:33 UTC 20.234.93.27
mnemonic passive DNS static.fubo.tv (6) 96916 2014-07-11 12:22:19 UTC 2022-02-10 08:47:44 UTC 151.101.86.110
mnemonic passive DNS fubo.tv (1) 14933 2014-12-20 22:26:31 UTC 2022-08-26 16:01:46 UTC 151.101.64.230
mnemonic passive DNS static.ads-twitter.com (1) 614 2017-01-30 05:00:15 UTC 2022-09-29 05:34:09 UTC 151.101.84.157
mnemonic passive DNS d.impactradius-event.com (1) 2612 2017-02-01 08:42:43 UTC 2022-09-29 06:42:47 UTC 35.186.249.72
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-05-27 20:08:30 UTC 2022-09-29 11:05:08 UTC 143.204.55.36
mnemonic passive DNS cm.g.doubleclick.net (1) 202 2013-05-30 23:19:45 UTC 2022-09-29 12:24:48 UTC 142.250.74.130
mnemonic passive DNS d330aiyvva2oww.cloudfront.net (1) 0 2021-03-28 20:18:41 UTC 2022-09-29 07:03:51 UTC 143.204.42.42 Unknown ranking
mnemonic passive DNS gem.gbc.criteo.com (1) 6039 2019-02-06 06:21:41 UTC 2022-09-29 05:23:57 UTC 178.250.6.10
mnemonic passive DNS websdk.appsflyer.com (1) 7394 2019-06-11 19:06:57 UTC 2022-09-29 07:15:04 UTC 23.36.76.88
mnemonic passive DNS ocsp.pki.goog (22) 175 2017-06-14 07:23:31 UTC 2022-09-29 04:56:10 UTC 142.250.74.3
mnemonic passive DNS exchange.mediavine.com (1) 2109 2020-11-23 01:20:19 UTC 2022-09-29 09:10:04 UTC 52.57.198.70
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-29 04:56:09 UTC 34.117.237.239
mnemonic passive DNS 11223615.fls.doubleclick.net (1) 218412 2021-10-23 00:55:34 UTC 2022-02-10 08:47:45 UTC 142.250.74.70
mnemonic passive DNS r.casalemedia.com (2) 1896 2012-06-24 01:17:14 UTC 2022-09-29 08:58:06 UTC 104.18.19.126
mnemonic passive DNS sync-criteo.ads.yieldmo.com (1) 2354 2019-12-10 21:28:48 UTC 2022-09-29 09:10:04 UTC 54.155.44.87
mnemonic passive DNS ag.gbc.criteo.com (1) 5925 2018-12-17 13:17:41 UTC 2022-09-29 05:23:57 UTC 178.250.6.119
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-29 05:06:32 UTC 54.189.157.130
mnemonic passive DNS alb.reddit.com (1) 1521 2017-06-15 05:33:56 UTC 2022-09-29 08:58:04 UTC 151.101.85.140
mnemonic passive DNS region1.analytics.google.com (1) 0 2022-03-17 11:26:33 UTC 2022-09-29 06:43:08 UTC 216.239.32.36 Domain (google.com) ranked at: 1
mnemonic passive DNS stats.g.doubleclick.net (1) 96 2013-06-02 22:47:44 UTC 2022-09-29 04:56:14 UTC 64.233.165.155
mnemonic passive DNS static.criteo.net (1) 652 2015-06-24 06:04:54 UTC 2022-09-29 11:34:35 UTC 178.250.0.130
mnemonic passive DNS amolio.fubo.tv (1) 57985 2019-09-06 14:47:21 UTC 2022-01-16 13:28:55 UTC 35.241.16.197
mnemonic passive DNS connect.facebook.net (1) 139 2012-05-22 02:51:28 UTC 2022-09-29 04:57:12 UTC 31.13.72.12
mnemonic passive DNS s.pinimg.com (2) 732 2017-01-13 22:40:08 UTC 2022-09-29 06:46:22 UTC 23.38.200.197
mnemonic passive DNS wa.onelink.me (2) 18186 2018-06-11 17:29:38 UTC 2022-09-29 08:12:14 UTC 34.255.57.107
mnemonic passive DNS ct.pinterest.com (4) 852 2015-03-12 08:12:48 UTC 2022-09-29 05:01:48 UTC 23.38.200.197
mnemonic passive DNS match.sharethrough.com (1) 604 2015-12-22 22:55:59 UTC 2022-09-29 09:10:04 UTC 18.198.13.189
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-29 05:03:41 UTC 143.204.55.25
mnemonic passive DNS criteo-sync.teads.tv (1) 1786 2017-02-17 10:06:41 UTC 2022-09-29 09:10:04 UTC 23.195.255.234
mnemonic passive DNS id5-sync.com (1) 504 2017-01-25 21:02:34 UTC 2022-09-29 09:10:04 UTC 141.95.98.65
mnemonic passive DNS eb2.3lift.com (1) 402 2014-09-24 15:03:42 UTC 2022-09-29 11:19:43 UTC 13.248.245.213
mnemonic passive DNS c.bing.com (1) 247 2012-05-22 10:26:32 UTC 2022-09-29 05:01:33 UTC 13.107.21.200
mnemonic passive DNS ib.adnxs.com (1) 241 2012-05-23 22:36:14 UTC 2022-09-29 04:56:18 UTC 37.252.172.250
mnemonic passive DNS x.bidswitch.net (2) 286 2017-08-28 15:21:00 UTC 2022-09-29 04:56:45 UTC 3.126.140.73
mnemonic passive DNS ad.360yield.com (2) 657 2012-11-28 11:30:25 UTC 2022-09-29 09:10:04 UTC 18.193.172.112
mnemonic passive DNS visitor.omnitagjs.com (1) 1722 2017-01-30 04:58:42 UTC 2022-09-29 08:58:06 UTC 185.255.84.153
mnemonic passive DNS beacon.krxd.net (1) 408 2012-05-22 04:25:40 UTC 2022-09-29 05:22:53 UTC 52.18.211.80
mnemonic passive DNS dis.criteo.com (1) 660 2012-06-02 15:38:12 UTC 2022-09-29 09:10:04 UTC 178.250.0.163
mnemonic passive DNS eibqs.fubo.tv (3) 0 No data No data 23.227.38.65 Domain (fubo.tv) ranked at: 14933
mnemonic passive DNS status.thawte.com (1) 5123 2017-11-27 12:33:51 UTC 2022-09-29 05:20:45 UTC 93.184.220.29
mnemonic passive DNS dpm.demdex.net (2) 204 2017-01-30 04:59:39 UTC 2022-09-29 05:02:42 UTC 34.242.80.80
mnemonic passive DNS ocsp.entrust.net (1) 1208 2013-07-24 12:09:14 UTC 2022-09-29 04:56:32 UTC 104.110.10.32
mnemonic passive DNS sync-t1.taboola.com (1) 1269 2020-06-29 11:52:33 UTC 2022-09-29 09:10:04 UTC 141.226.228.48
mnemonic passive DNS www.fubo.tv (15) 73806 2014-06-01 18:32:38 UTC 2022-09-29 11:33:01 UTC 151.101.86.110
mnemonic passive DNS d2hrivdxn8ekm8.cloudfront.net (1) 0 2021-08-20 02:46:11 UTC 2022-09-28 16:02:59 UTC 54.230.245.16 Unknown ranking
mnemonic passive DNS ocsp.sca1b.amazontrust.com (8) 1015 2017-03-03 15:20:51 UTC 2019-03-27 04:05:54 UTC 143.204.42.156
mnemonic passive DNS contextual.media.net (1) 513 2019-04-30 08:49:36 UTC 2022-09-29 07:21:11 UTC 23.38.200.22
mnemonic passive DNS ad.yieldlab.net (1) 3515 2014-05-07 00:17:56 UTC 2022-09-29 08:58:06 UTC 23.13.245.180
mnemonic passive DNS s.thebrighttag.com (1) 1487 2014-11-26 15:16:07 UTC 2022-09-29 09:10:05 UTC 3.141.157.49
mnemonic passive DNS www.google-analytics.com (1) 40 2012-10-03 01:04:21 UTC 2022-09-29 09:12:01 UTC 142.250.74.174


Recent reports on same IP/ASN/Domain/Screenshot

Last 1 reports on IP: 151.101.0.230

Date UQ / IDS / BL URL IP
2022-09-29 12:27:13 +0000
0 - 0 - 0 fubo.tv 151.101.0.230

Last 5 reports on ASN: FASTLY

Date UQ / IDS / BL URL IP
2022-11-28 11:50:57 +0000
0 - 0 - 1 raw.githubusercontent.com/fraerst/futfu/main/ (...) 185.199.108.133
2022-11-28 11:48:18 +0000
0 - 0 - 1 raw.githubusercontent.com/firefart/hivenightm (...) 185.199.111.133
2022-11-28 11:48:04 +0000
0 - 0 - 2 raw.githubusercontent.com/pankoza-pl/trichlor (...) 185.199.109.133
2022-11-28 11:40:21 +0000
0 - 0 - 4 dnb-logno.web.app 199.36.158.100
2022-11-28 11:16:50 +0000
0 - 0 - 8 pacificcapital.com/wp-content/tplugin/usrs.php 151.101.2.159

Last 1 reports on domain: fubo.tv

Date UQ / IDS / BL URL IP
2022-09-29 12:27:13 +0000
0 - 0 - 0 fubo.tv 151.101.0.230

No other reports with similar screenshot



JavaScript

Executed Scripts (47)


Executed Evals (0)


Executed Writes (1)

#1 JavaScript::Write (size: 5292, repeated: 1) - SHA256: ecdc9cac17e4aeacee305dc193476a5a5adeb3a80a8b69123453c3f93e8d39b3

                                        < html > < head > < title > Dising < /title><script type="text/javascript
">rD = false;function edcTimeout() {rD = true; }function cto_AI(u,n) { if (rD) {return;} var cto_ifr=document.getElementById('cto_sub_ifr_px');var cto_ifr_doc=null;if(typeof(cto_ifr)==='undefined'||cto_ifr==null)cto_ifr_doc=document;else if(cto_ifr.contentDocument)cto_ifr_doc=cto_ifr.contentDocument;else if(cto_ifr.contentWindow)cto_ifr_doc=cto_ifr.contentWindow.document;else if(cto_ifr.document)cto_ifr_doc=cto_ifr.document;else cto_ifr_doc=document;if(cto_ifr_doc.createElement){var im=cto_ifr_doc.createElement('IMG');if(im){var d=document.getElementById('cto_pc');if(d!==null && d.appendChild){d.appendChild(im)}if(n){im.onload=n;im.onerror=n;im.onabort=n}im.src=u}} }function cto_l(){if(typeof(cto_loaded)==='undefined')cto_loaded=1;else cto_loaded++;}function cto_run() {function l_i1_1(){cto_AI('https://x.bidswitch.net/sync?dsp_id=46&user_id=k-3OgY9v2Qy_g3gn0nvQKptqlrka-ZEfpSOu08Qg&expires=30', cto_l);}function l_i2_1(){cto_AI('https://cm.g.doubleclick.net/pixel?google_nid=cjp&google_sc&google_ula=913071&CriteoUserId=k-gMQcrf2Qy_g3gn0nvQKptqlrka_dFBuMx608HQ&google_cm&google_hm=ay1nTVFjcmYyUXlfZzNnbjBudlFLcHRxbHJrYV9kRkJ1TXg2MDhIUQ', cto_l);}function l_i3_1(){cto_AI('https://ib.adnxs.com/getuid?https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=$UID', cto_l);}function l_i4_1(){cto_AI('https://r.casalemedia.com/rum?cm_dsp_id=20&external_user_id=k-lITzjP2Qy_g3gn0nvQKptqlrka9M6itM89T5mg', cto_l);}function l_i5_1(){cto_AI('https://ad.360yield.com/match?publisher_dsp_id=38&external_user_id=k-lMkfQP2Qy_g3gn0nvQKptqlrka8LMUBjNXLCEw', cto_l);}function l_i6_1(){cto_AI('https://contextual.media.net/cksync.php?cs=3&type=crt&ovsid=k-bvqK4v2Qy_g3gn0nvQKptqlrka_MofRDi578LA', cto_l);}function l_i7_1(){cto_AI('https://exchange.mediavine.com/usersync/push?partner=criteo&partnerId=k-xNQwSv2Qy_g3gn0nvQKptqlrka91mFDGn7jczPY30XulQHQZ', cto_l);}function l_i8_1(){cto_AI('https://sync.outbrain.com/cookie-sync?p=criteo&uid=k-2nuHiP2Qy_g3gn0nvQKptqlrka8cfYEYtsfrtw', cto_l);}function l_i9_1(){cto_AI('https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:k-wEmG-P2Qy_g3gn0nvQKptqlrka87JstcoNUUMA', cto_l);}function l_i10_1(){cto_AI('https://pixel.rubiconproject.com/tap.php?v=6434&nid=2149&put=k-ogLcW_2Qy_g3gn0nvQKptqlrka8YypAIOqsBmQ&expires=30', cto_l);}function l_i11_1(){cto_AI('https://match.sharethrough.com/sync/v1?source_id=7658cb1d77a660882b48db06&source_user_id=k-LCiQU_2Qy_g3gn0nvQKptqlrka9gZTucakohnA', cto_l);}function l_i12_1(){cto_AI('https://rtb-csync.smartadserver.com/redir/?partnerid=79&partneruserid=k--0vUUP2Qy_g3gn0nvQKptqlrka-0702wjq0giQ', cto_l);}function l_i13_1(){cto_AI('https://sync-t1.taboola.com/sg/criteortb-network/1/rtb-h/?taboola_hm=k-SFnR2P2Qy_g3gn0nvQKptqlrka-wK052EOqy_A', cto_l);}function l_i14_1(){cto_AI('https://criteo-sync.teads.tv/um?eid=80&uid=k-QUkRDP2Qy_g3gn0nvQKptqlrka82M4OD_RWsgQ', cto_l);}function l_i15_1(){cto_AI('https://eb2.3lift.com/xuid?mid=2711&xuid=k-6fCeN_2Qy_g3gn0nvQKptqlrka9p3-CQDoYKKg&dongle=013b', cto_l);}function l_i16_1(){cto_AI('https://ups.analytics.yahoo.com/ups/58301/sync?_origin=1&uid=k-reot1P2Qy_g3gn0nvQKptqlrka9XIc633BJ2tQ', cto_l);}function l_i17_1(){cto_AI('https://cm.adform.net/pixel?adform_pid=15&adform_pc=k-KGeIpP2Qy_g3gn0nvQKptqlrka8eHSwyj-GeoA', cto_l);}function l_i18_1(){cto_AI('https://visitor.omnitagjs.com/visitor/sync?uid=732efe97317e6352de4c1caf24b5064b&name=CRITEO&visitor=k-lh7PRv2Qy_g3gn0nvQKptqlrka9UtIwabrm5Sw', cto_l);}function l_i19_1(){cto_AI('https://gum.criteo.com/sync?c=8&r=1&a=1&u=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D28645%26dpuuid%3D%40USERID%40', l_i19_2);}function l_i19_2(){cto_AI('https://gum.criteo.com/sync?c=83&r=1&a=1&u=https%3A%2F%2Fbeacon.krxd.net%2Fusermatch.gif%3Fpartner%3Dcriteo%26partner_uid%3D%40USERID%40', l_i19_3);}function l_i19_3(){cto_AI('https://gum.criteo.com/sync?c=10&r=1&u=https%3A%2F%2Fs.thebrighttag.com%2Fcs%3Fbtt%3D0%26tp%3Dcr%26uid%3D%40USERID%40', cto_l);}function l_i20_1(){cto_AI('https://id5-sync.com/s/966/9.gif?puid=k-76VRav2Qy_g3gn0nvQKptqlrka9GHpaDj-qlvw', cto_l);}function l_i21_1(){cto_AI('https://criteo-partners.tremorhub.com/sync?UICR=k-MBHnBP2Qy_g3gn0nvQKptqlrka_lhz8_7ognDg', cto_l);}function l_i22_1(){cto_AI('https://ad.yieldlab.net/m?dt_id=8664&ext_id=k-4zljzv2Qy_g3gn0nvQKptqlrka9h6LDZ4chaHQ', cto_l);}function l_i23_1(){cto_AI('https://sync-criteo.ads.yieldmo.com/sync?id=k-8lu-J_2Qy_g3gn0nvQKptqlrka-hS6-we6p2IQ&pn_id=criteo&ext=1', cto_l);}cto_tot = 23;l_i1_1();l_i2_1();l_i3_1();l_i4_1();l_i5_1();l_i6_1();l_i7_1();l_i8_1();l_i9_1();l_i10_1();l_i11_1();l_i12_1();l_i13_1();l_i14_1();l_i15_1();l_i16_1();l_i17_1();l_i18_1();l_i19_1();l_i20_1();l_i21_1();l_i22_1();l_i23_1();}</script></head><body><iframe id="
cto_sub_ifr_px " src="
javascript: false " style="
width: 1 px;
height: 1 px;
display: none;
"><div id='cto_pc' style='display:none'></div></iframe><script type="
text / javascript ">document.body.onload = function(){ if(window.cto_run) cto_run(); };window.setTimeout(function(){ if(typeof(cto_loaded)==='undefined' || cto_loaded<cto_tot) {edcTimeout();var redirectLocation=location.protocol+'//static.criteo.net/empty.html'; location.replace(redirectLocation);}}, 5000);</script></body></html>
                                    


HTTP Transactions (187)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 29 Sep 2022 12:15:52 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: havj_aT6QYbYudLe-gQrHO0k2gQ8lUmAYviIB8jdTbF3bCsQyIYixQ==
Age: 670


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    1b3053fa528e28810f8a2cc9284cc921
Sha1:   cca9eb471d941881a6b9a1793aecb6c281908f6a
Sha256: a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
                                        
                                            GET / HTTP/1.1 
Host: fubo.tv
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         151.101.64.230
HTTP/1.1 301 Moved Permanently
                                        
Connection: keep-alive
Content-Length: 0
x-amz-id-2: rgvr161yMcwjIBuzSZzkYlJVu5i6n8iHmteoO5AFukf6xseAonib7Y1FawHF/Y7jZAXa29LhWhw=
x-amz-request-id: 866TKRF83F67X0ZH
Location: https://www.fubo.tv/
Server: AmazonS3
Accept-Ranges: bytes
Date: Thu, 29 Sep 2022 12:27:02 GMT
Via: 1.1 varnish
Age: 0
X-Served-By: cache-bma1670-BMA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1664454422.177618,VS0,VE215

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "2A40F957A6B1734AA3F87CFF51B673F0536732DB15B09033DD604879692DF349"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10886
Expires: Thu, 29 Sep 2022 15:28:28 GMT
Date: Thu, 29 Sep 2022 12:27:02 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.25
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Thu, 29 Sep 2022 05:28:28 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: _0hnQOT4ESSBC0eOaGucolL4de6ubN62wDGrk3fvsJy6PbA0oKgB7A==
age: 25115
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            GET / HTTP/1.1 
Host: www.fubo.tv
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         151.101.86.110
HTTP/2 302 Found
                                        
server: Varnish
retry-after: 0
location: /welcome
accept-ranges: bytes
date: Thu, 29 Sep 2022 12:27:02 GMT
via: 1.1 varnish
x-served-by: cache-bma1645-BMA
x-cache: HIT
x-cache-hits: 0
x-timer: S1664454423.552528,VS0,VE1
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Thu, 29 Sep 2022 12:27:02 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /welcome HTTP/1.1 
Host: www.fubo.tv
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers

                                         
                                         151.101.86.110
HTTP/2 302 Found
                                        
x-powered-by: Express
x-datadog-trace-id: 3912965098378233642
x-datadog-parent-id: 3912965098378233642
x-datadog-sampled: 1
x-datadog-sampling-priority: 0
content-language: en
x-caller-svc: acq
cache-control: public, max-age=3600
location: /welcome/geoblock
via: 1.1 google, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Thu, 29 Sep 2022 12:27:02 GMT
age: 67
x-served-by: cache-bma1645-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1664454423.615184,VS0,VE1
vary: x-country-code3, Accept-Encoding
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /welcome/geoblock HTTP/1.1 
Host: www.fubo.tv
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers

                                         
                                         151.101.86.110
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
x-powered-by: Next.js
x-datadog-trace-id: 2878049593174113252
x-datadog-parent-id: 2878049593174113252
x-datadog-sampled: 1
x-datadog-sampling-priority: 0
content-language: en
x-caller-svc: acq
cache-control: public, max-age=3600
etag: "4973-k25OecU1Viz9KO/19Lg1OAvjC8Q"
content-encoding: gzip
via: 1.1 google, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Thu, 29 Sep 2022 12:27:02 GMT
age: 67
x-served-by: cache-bma1645-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1664454423.641523,VS0,VE5
vary: x-country-code3, Accept-Encoding
content-length: 7767
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (18789), with no line terminators
Size:   7767
Md5:    aaae6b8951bee5eafb90b532e89e77b7
Sha1:   144f0ed92fe9bbf7587a7c6eeaed1e517bdaad84
Sha256: aeedced0a50b51ee77f43f05430a358cadad504a94d9755c084ebca526f5fa3d
                                        
                                            GET /_next/static/css/16e09e9fa735d53f0027.css HTTP/1.1 
Host: www.fubo.tv
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/welcome/geoblock
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         151.101.86.110
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                        
x-powered-by: Express
x-datadog-trace-id: 4749679956926184923
x-datadog-parent-id: 4749679956926184923
x-datadog-sampled: 1
x-datadog-sampling-priority: 0
content-language: en
x-caller-svc: acq
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 21 Sep 2022 18:15:41 GMT
etag: W/"179d-183614340c8"
content-encoding: gzip
via: 1.1 google, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Thu, 29 Sep 2022 12:27:02 GMT
age: 106149
x-served-by: cache-bma1645-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1664454423.808376,VS0,VE1
vary: x-country-code3, Accept-Encoding
content-length: 1299
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3990)
Size:   1299
Md5:    c401336eac042c90c27828bb2f3b0deb
Sha1:   3ae76d932a1c3f56277b011e75959b84d224b421
Sha256: aaf3261b0241fbd63caeceb1a66bf9ecc3b6563628f3162690ec0ccebec1b08f
                                        
                                            GET /_next/static/chunks/webpack-070d0762fcdb7166f0c6.js HTTP/1.1 
Host: www.fubo.tv
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/welcome/geoblock
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         151.101.86.110
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
x-powered-by: Express
x-datadog-trace-id: 5060555126452809904
x-datadog-parent-id: 5060555126452809904
x-datadog-sampled: 1
x-datadog-sampling-priority: 0
content-language: en
x-caller-svc: acq
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 21 Sep 2022 18:15:41 GMT
etag: W/"ef8-183614340c8"
content-encoding: gzip
via: 1.1 google, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Thu, 29 Sep 2022 12:27:02 GMT
age: 106149
x-served-by: cache-bma1645-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1664454423.809344,VS0,VE2
vary: x-country-code3, Accept-Encoding
content-length: 1788
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3832), with no line terminators
Size:   1788
Md5:    6313eaa1ae1c9121adecb8ddfdd3e539
Sha1:   01263ba09a7ba5b8130c325ebdcc9b6074f98b7d
Sha256: aa052e7d6fd87009e1bae0ec783acb65b40469e0fb1e4773e72a66373bd748ec
                                        
                                            GET /_next/static/chunks/framework-d9cd8c00a7d7c8d8c129.js HTTP/1.1 
Host: www.fubo.tv
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/welcome/geoblock
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         151.101.86.110
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
x-powered-by: Express
x-datadog-trace-id: 7774586127232705729
x-datadog-parent-id: 7774586127232705729
x-datadog-sampled: 1
x-datadog-sampling-priority: 0
content-language: en
x-caller-svc: acq
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 21 Sep 2022 18:15:41 GMT
etag: W/"20267-183614340c8"
content-encoding: gzip
via: 1.1 google, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Thu, 29 Sep 2022 12:27:02 GMT
age: 106149
x-served-by: cache-bma1645-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1664454423.810246,VS0,VE1
vary: x-country-code3, Accept-Encoding
content-length: 42721
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   42721
Md5:    779362d9e127e5e1c4617ae361153f5c
Sha1:   27f8d7062767ebc6cfaf1b64cfd2f18105f8aa47
Sha256: aaa62d68eb5ca24c3a8ce20e42a5e9981ed5239d72465acc83a83ec8d04b8d89
                                        
                                            GET /_next/static/chunks/main-84289a48358951d4bc90.js HTTP/1.1 
Host: www.fubo.tv
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/welcome/geoblock
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         151.101.86.110
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
x-powered-by: Express
x-datadog-trace-id: 3774447702478175162
x-datadog-parent-id: 3774447702478175162
x-datadog-sampled: 1
x-datadog-sampling-priority: 0
content-language: en
x-caller-svc: acq
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 21 Sep 2022 18:15:41 GMT
etag: W/"1698f-183614340c8"
content-encoding: gzip
via: 1.1 google, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Thu, 29 Sep 2022 12:27:02 GMT
age: 106149
x-served-by: cache-bma1645-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1664454423.810645,VS0,VE1
vary: x-country-code3, Accept-Encoding
content-length: 27438
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   27438
Md5:    dca680a1d0fdd408d01a516e850374db
Sha1:   f18d3bc5b948d96be8a12bf7f1733bfbdea7c628
Sha256: 319407b42e75a36f2c20db3ad02de50fe98f756d26592695ad3afe5a54fb569a
                                        
                                            GET /_next/static/chunks/29107295-62449f6ab50432c0efef.js HTTP/1.1 
Host: www.fubo.tv
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/welcome/geoblock
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         151.101.86.110
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
x-powered-by: Express
x-datadog-trace-id: 2789604802083986060
x-datadog-parent-id: 2789604802083986060
x-datadog-sampled: 1
x-datadog-sampling-priority: 1
content-language: en
x-caller-svc: acq
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 21 Sep 2022 18:15:41 GMT
etag: W/"117fa-183614340c8"
content-encoding: gzip
via: 1.1 google, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Thu, 29 Sep 2022 12:27:02 GMT
age: 106149
x-served-by: cache-bma1645-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1664454423.812148,VS0,VE1
vary: x-country-code3, Accept-Encoding
content-length: 24694
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   24694
Md5:    c931ba50d3a59bf34c50609577a49cab
Sha1:   ad1c9510eda185bed976e5ab7c86ebbce9cacb6d
Sha256: 2ec16d81c4ea39d4bff139213f65d89b17d768f18b71a5004ba3f0d11dfb25b6
                                        
                                            GET /_next/static/chunks/pages/welcome/geoblock-21b458430d0d5bf92fe7.js HTTP/1.1 
Host: www.fubo.tv
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/welcome/geoblock
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         151.101.86.110
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
x-powered-by: Express
x-datadog-trace-id: 2458023825016008146
x-datadog-parent-id: 2458023825016008146
x-datadog-sampled: 1
x-datadog-sampling-priority: 1
content-language: en
x-caller-svc: acq
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 21 Sep 2022 18:15:41 GMT
etag: W/"241-183614340c8"
via: 1.1 google, 1.1 varnish
access-control-allow-origin: *
content-encoding: gzip
accept-ranges: bytes
date: Thu, 29 Sep 2022 12:27:02 GMT
age: 98978
x-served-by: cache-bma1645-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1664454423.814249,VS0,VE1
vary: x-country-code3, Accept-Encoding
content-length: 344
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (577), with no line terminators
Size:   344
Md5:    a1c8e45667de7a3515843f9e06f656be
Sha1:   7b42f07800850e589a504f345f5820865f203f07
Sha256: e82ef0b254ff82b797bddabf964424d2b2b7ae5cf7c546eb9d7b4a0b59f15ff0
                                        
                                            GET /_next/static/HTWNWJgznka--K1akbN-9/_buildManifest.js HTTP/1.1 
Host: www.fubo.tv
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/welcome/geoblock
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         151.101.86.110
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
x-powered-by: Express
x-datadog-trace-id: 4004247504646937625
x-datadog-parent-id: 4004247504646937625
x-datadog-sampled: 1
x-datadog-sampling-priority: 0
content-language: en
x-caller-svc: acq
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 21 Sep 2022 18:15:41 GMT
etag: W/"c12-183614340c8"
content-encoding: gzip
via: 1.1 google, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Thu, 29 Sep 2022 12:27:02 GMT
age: 98978
x-served-by: cache-bma1645-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1664454423.819730,VS0,VE1
vary: x-country-code3, Accept-Encoding
content-length: 942
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3090), with no line terminators
Size:   942
Md5:    e7a01657f7b9045d49ae35c5eeadd627
Sha1:   ab60cbd34902e01311771a692d02e4c102bf4b5a
Sha256: 9dc8341175666ff34691abc7398db93f5c5721f16a7958b07521cda8e1f35897
                                        
                                            GET /_next/static/HTWNWJgznka--K1akbN-9/_ssgManifest.js HTTP/1.1 
Host: www.fubo.tv
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/welcome/geoblock
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         151.101.86.110
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
x-powered-by: Express
x-datadog-trace-id: 6958840181876319598
x-datadog-parent-id: 6958840181876319598
x-datadog-sampled: 1
x-datadog-sampling-priority: 0
content-language: en
x-caller-svc: acq
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 21 Sep 2022 18:15:41 GMT
etag: W/"4d-183614340c8"
via: 1.1 google, 1.1 varnish
access-control-allow-origin: *
content-encoding: gzip
accept-ranges: bytes
date: Thu, 29 Sep 2022 12:27:02 GMT
age: 106149
x-served-by: cache-bma1645-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1664454423.820388,VS0,VE1
vary: x-country-code3, Accept-Encoding
content-length: 61
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   61
Md5:    4897cf1ad319a317732a1647787681b0
Sha1:   0849c83c88816a8f89c49163a017ad9dd003287e
Sha256: 28cd5af369e71207314826989289167c24919387d9266b63b90f012607a8927f
                                        
                                            GET /static/web/fonts/qanelas/34A12F_1_0.woff2 HTTP/1.1 
Host: static.fubo.tv
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fubo.tv
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

                                         
                                         151.101.86.110
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: f9iCP58p8jhTOeseQgO9uPQZNX1T0VaEh7O/AgKq4XqEkai5LPdwHB8HSaLHYYb+jDR6lQQIupC2/Iy2OFjGjQ==
x-amz-request-id: 7J715F5EQP7KP7J8
last-modified: Fri, 08 Sep 2017 18:42:34 GMT
etag: "3ed0689f1b2067ae6394d9eeacf833e3"
server: AmazonS3
cache-control: max-age=8640000
accept-ranges: bytes
date: Thu, 29 Sep 2022 12:27:02 GMT
via: 1.1 varnish
age: 823681
x-served-by: cache-bma1670-BMA
x-cache: HIT
x-cache-hits: 5
x-timer: S1664454423.906868,VS0,VE0
access-control-allow-origin: *
content-length: 33846
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 33846, version 1.0\012- data
Size:   33846
Md5:    3ed0689f1b2067ae6394d9eeacf833e3
Sha1:   725949b6d1b6566366be385a8bcd3db89f990a55
Sha256: 9aa44b0b6617085028eeeeae12355df48e0fce33a616a0d0cfc2418a58b62f8e
                                        
                                            GET /static/web/fonts/qanelas/34A12F_0_0.woff2 HTTP/1.1 
Host: static.fubo.tv
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fubo.tv
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

                                         
                                         151.101.86.110
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: RsSYu3wxDHy1vr0jx3zHSTv6HK8pZCMmY9hwNz/hcxMvuPSivP/QowZ9ro0PUm0SY4NuG2wEoWE=
x-amz-request-id: Q0C7HA6PC6HVJZRG
last-modified: Fri, 08 Sep 2017 18:42:36 GMT
etag: "da27b2ccfec0800479ef4b94d1978f4d"
server: AmazonS3
cache-control: max-age=8640000
accept-ranges: bytes
date: Thu, 29 Sep 2022 12:27:02 GMT
via: 1.1 varnish
age: 1872715
x-served-by: cache-bma1670-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1664454423.906893,VS0,VE2
access-control-allow-origin: *
content-length: 37787
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 37787, version 1.0\012- data
Size:   37787
Md5:    da27b2ccfec0800479ef4b94d1978f4d
Sha1:   2b65fbe92a1033fb77b4d3f2dac33b3e5da6233d
Sha256: 8e4f50bf20134a820b10a8b47891cdbbe18eea6e519c1d0c6ee92724c63e3b88
                                        
                                            GET /static/web/fonts/qanelas/34A12F_3_0.woff2 HTTP/1.1 
Host: static.fubo.tv
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fubo.tv
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

                                         
                                         151.101.86.110
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: PDs58HeS/JYyp/XMTsP0yxGY8M8JNsN5ULSigCFKDgwDILhtuaKZTcey2KqgQ7UnxumaYpTWmjw=
x-amz-request-id: 49FNHJTENQ3CTDWW
last-modified: Fri, 08 Sep 2017 18:42:36 GMT
etag: "e1940df946c02aaa49e73e692fdf65bc"
server: AmazonS3
cache-control: max-age=8640000
accept-ranges: bytes
date: Thu, 29 Sep 2022 12:27:02 GMT
via: 1.1 varnish
age: 711673
x-served-by: cache-bma1670-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1664454423.908922,VS0,VE0
access-control-allow-origin: *
content-length: 33579
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 33579, version 1.0\012- data
Size:   33579
Md5:    e1940df946c02aaa49e73e692fdf65bc
Sha1:   eb981daf7e53b26399a5abdfbe28414321dbcdb3
Sha256: 1ced79a248a2cf3fc790c7988a964e1417ac1c6edac9fdd41ae6656417e754c6
                                        
                                            GET /static/web/fonts/qanelas/34A12F_2_0.woff2 HTTP/1.1 
Host: static.fubo.tv
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fubo.tv
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

                                         
                                         151.101.86.110
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: 65YjjaDFXCR8YlSGry0epO6qQ4t+17d4sR+Tc4Gu6T37Ll7OsxeuBdP5G/zd79GvNeW7z51tP5U=
x-amz-request-id: 907VYTBQ2NADVC83
last-modified: Fri, 08 Sep 2017 18:42:35 GMT
etag: "750bcf47de37083bd5df2d5c319d5143"
server: AmazonS3
cache-control: max-age=8640000
accept-ranges: bytes
date: Thu, 29 Sep 2022 12:27:02 GMT
via: 1.1 varnish
age: 113053
x-served-by: cache-bma1670-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1664454423.909421,VS0,VE0
access-control-allow-origin: *
content-length: 32933
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 32933, version 1.0\012- data
Size:   32933
Md5:    750bcf47de37083bd5df2d5c319d5143
Sha1:   a9f7bce65310eb75a50f4be3e8aedc22ea74c8d7
Sha256: b3ab3d3cdbca73564b60905126b924993d789c1c466f8a52479d401378f3b070
                                        
                                            GET /static/web/fonts/qanelas/34A12F_5_0.woff2 HTTP/1.1 
Host: static.fubo.tv
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fubo.tv
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

                                         
                                         151.101.86.110
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: ojaM2tmeyLUVLDq2QoW7ABxu6nQnnd7uM+t7q7lnBMV4JGTtw0zCbzqkHR0tBrfvK0Zu8r8dGzw=
x-amz-request-id: RCEM1DSW99W42T7V
last-modified: Fri, 08 Sep 2017 18:42:36 GMT
etag: "a81aedcf44af34beff1d3bbea167ec90"
server: AmazonS3
cache-control: max-age=8640000
accept-ranges: bytes
date: Thu, 29 Sep 2022 12:27:02 GMT
via: 1.1 varnish
age: 692436
x-served-by: cache-bma1670-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1664454423.910105,VS0,VE0
access-control-allow-origin: *
content-length: 30757
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 30757, version 1.0\012- data
Size:   30757
Md5:    a81aedcf44af34beff1d3bbea167ec90
Sha1:   2658bc70730a03447997964b1a60294bb0643437
Sha256: 41366fc0299260f378b77ab0c02fd10b3defcd6f9b3b37b46df29f755caddae3
                                        
                                            GET /static/web/fonts/qanelas/34A12F_4_0.woff2 HTTP/1.1 
Host: static.fubo.tv
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fubo.tv
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

                                         
                                         151.101.86.110
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: H1nXTrhCSt4ita+OY5MU3k47z/FO8Sr6Q1ug0W+9eM+Pa2yvtYxdhqkoVsPK8OeDiLsPHpDMYIs=
x-amz-request-id: 49FXP25Q089N17DN
last-modified: Fri, 08 Sep 2017 18:42:36 GMT
etag: "914dda2275807ad78bdcae6b1a2ef8ef"
server: AmazonS3
cache-control: max-age=8640000
accept-ranges: bytes
date: Thu, 29 Sep 2022 12:27:02 GMT
via: 1.1 varnish
age: 711673
x-served-by: cache-bma1670-BMA
x-cache: HIT
x-cache-hits: 4
x-timer: S1664454423.909848,VS0,VE0
access-control-allow-origin: *
content-length: 33128
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 33128, version 1.0\012- data
Size:   33128
Md5:    914dda2275807ad78bdcae6b1a2ef8ef
Sha1:   63e406e76abb96d63b6b921da2b4e4f477401b23
Sha256: f7e28f6dbbf4e4b2c389c95492f678ae27f2abbc34d139271409e04878e30371
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Thu, 29 Sep 2022 11:29:33 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Thu, 29 Sep 2022 11:38:32 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: g6_W-hv-rs2WIob1YBuqsa5H2oyxOLUrSH8C8rwYrv1O64FpQExTHw==
Age: 3450


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /_next/static/chunks/pages/_app-b686b2fb8e420d9033b2.js HTTP/1.1 
Host: www.fubo.tv
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/welcome/geoblock
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         151.101.86.110
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
x-powered-by: Express
x-datadog-trace-id: 1644932964583975773
x-datadog-parent-id: 1644932964583975773
x-datadog-sampled: 1
x-datadog-sampling-priority: 0
content-language: en
x-caller-svc: acq
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 21 Sep 2022 18:15:41 GMT
etag: W/"b089c-183614340c8"
content-encoding: gzip
via: 1.1 google, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Thu, 29 Sep 2022 12:27:03 GMT
age: 0
x-served-by: cache-bma1645-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1664454423.811292,VS0,VE387
vary: x-country-code3, Accept-Encoding
content-length: 184842
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   184842
Md5:    feadc87017af2f900cad569fa8d50356
Sha1:   42d28e3faef0e80c99b021cb6428fda1f5c5bbf1
Sha256: 2b05be6307e6c25452c3b4d2b549863819c3bec97d7ae680038f1d9431b30774
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1713
Cache-Control: 'max-age=158059'
Date: Thu, 29 Sep 2022 12:27:03 GMT
Last-Modified: Thu, 29 Sep 2022 11:58:30 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: qn1g27l9keG6azGykIUMZA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         54.189.157.130
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: zuOcTTaorTibtmPrHNfYzZ7eKLo=

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Cache-Control: 'max-age=158059'
Date: Thu, 29 Sep 2022 12:27:03 GMT
Server: ECS (amb/6BAE)
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 0
Cache-Control: 'max-age=158059'
Date: Thu, 29 Sep 2022 12:27:03 GMT
Last-Modified: Thu, 29 Sep 2022 12:27:03 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /scitylana/v1/jh2q6sqatv HTTP/1.1 
Host: amolio.fubo.tv
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                         
                                         35.241.16.197
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
accept-ranges: bytes
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
cache-control: public, max-age=86400
content-encoding: gzip
content-length: 73049
last-modified: 2020-10-16 21:55:10 +0000 UTC
date: Thu, 29 Sep 2022 12:27:03 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (41720)
Size:   73049
Md5:    e846fc1971c8f512bfdc9343e5073ae8
Sha1:   75bff6d5e975e925c6d621e1ef6248265d99b333
Sha256: ab42c8fd2ffcd59dff6e04071b57a9e0a2440ee8e91a94a76556a8ea95eb45cf
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.fubo.tv
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/welcome/geoblock
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         151.101.86.110
HTTP/2 200 OK
content-type: image/vnd.microsoft.icon
                                        
x-amz-id-2: ZDwEQNa/LSI/Rj5fsByBHseDChCES7la6MOaehvEGAZLcgLngAYwYzYznnVDwa/A3Bbms2THztg=
x-amz-request-id: 51SYPM2Z7V4JK1DN
cache-control: public, max-age=3600
x-amz-meta-surrogate-key: frontend-web
last-modified: Tue, 27 Sep 2022 21:33:04 GMT
etag: "da985017a4e6252ca21863d3e9d52825"
server: AmazonS3
access-control-allow-origin: *
accept-ranges: bytes
date: Thu, 29 Sep 2022 12:27:04 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1645-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1664454424.588096,VS0,VE526
content-length: 15086
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Size:   15086
Md5:    da985017a4e6252ca21863d3e9d52825
Sha1:   47b2f38469b20296277eb26c4bba204b635c0278
Sha256: 5037d4a30ee5065103a156f09801c19e582d47936cfd256d63531dc9aded5801
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 29 Sep 2022 12:27:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtm.js?id=GTM-P53GRC&l=dataLayer HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.72
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 29 Sep 2022 12:27:04 GMT
expires: Thu, 29 Sep 2022 12:27:04 GMT
cache-control: private, max-age=900
last-modified: Thu, 29 Sep 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 80932
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (34557)
Size:   80932
Md5:    96e7659d3bf2a93f33e6018836930c0d
Sha1:   bd8fb11b3c642fa09bb2c5d273015d56e9d082c0
Sha256: ed3d1471bd8ecbd8180b893a80c2704ce2a511f8af5fc8e7ee75607118bb7859
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 29 Sep 2022 12:27:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 29 Sep 2022 12:27:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 29 Sep 2022 12:27:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Thu, 29 Sep 2022 10:41:09 GMT
expires: Thu, 29 Sep 2022 12:41:09 GMT
cache-control: public, max-age=7200
age: 6355
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   19826
Md5:    cae538dcce82598fbe43c0bf443e62dd
Sha1:   cc68ac6be9c5e0087a0000e5735b83270ace30f5
Sha256: 954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
                                        
                                            GET /pagead/conversion_async.js HTTP/1.1 
Host: www.googleadservices.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.98
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Thu, 29 Sep 2022 12:27:04 GMT
expires: Thu, 29 Sep 2022 12:27:04 GMT
cache-control: private, max-age=3600
etag: 699633608045481581
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 15699
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1654)
Size:   15699
Md5:    bf4a2d46210138906bf6e48ce42d055a
Sha1:   40dac0bd02476f38bc2e5bd94b0736cc0f42cf1d
Sha256: d93ae599fbad79e83d2eea0e270bf627d7cc209358fb18d44c7cb326f76a3337
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 29 Sep 2022 12:27:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 29 Sep 2022 12:27:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /?st=pba& HTTP/1.1 
Host: websdk.appsflyer.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         23.36.76.88
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
x-amz-id-2: 4haMOXDItrc8YAsvjP5Y/gbfdGolA2yEsUPI+FqwDDhYzG2L2zfJACl/etuphYJSQMXfI7TXm8g=
x-amz-request-id: MKFRWNGA75DSVKN5
Last-Modified: Wed, 27 Apr 2022 08:41:43 GMT
ETag: "cc82ca2a69eac2386ea395ea1e0ad0f6"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=2921
Expires: Thu, 29 Sep 2022 13:15:45 GMT
Date: Thu, 29 Sep 2022 12:27:04 GMT
Content-Length: 9575
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (21856)
Size:   9575
Md5:    2902a2c87591f52fe75ec67763d36598
Sha1:   f95fdcd612b076f2deccc29c4674a80f1db9cad6
Sha256: 3f9873dc0fcde232799bfaea802351433c9934862bb296e993c442cf0fbfcd6f
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 29 Sep 2022 12:27:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6428
Expires: Thu, 29 Sep 2022 14:14:12 GMT
Date: Thu, 29 Sep 2022 12:27:04 GMT
Connection: keep-alive

                                        
                                            GET /uwt.js HTTP/1.1 
Host: static.ads-twitter.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.84.157
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
last-modified: Tue, 30 Aug 2022 20:19:10 GMT
cache-control: no-cache
content-encoding: gzip
etag: "d4de8398858246712016031c834bb061+gzip+gzip"
accept-ranges: bytes
date: Thu, 29 Sep 2022 12:27:04 GMT
x-served-by: cache-iad-kjyo7100123-IAD, cache-bma1674-BMA
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15317
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (57443), with no line terminators
Size:   15317
Md5:    1e9c4d503a9e162d8b549dc3d9c040e2
Sha1:   1fa99d7d7e878cdd45567af4b0c3c65542036c1d
Sha256: f936c0124c595fe5d0c7858277f3a5f3bd104de39d36ac92557501fa1dec8563
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6428
Expires: Thu, 29 Sep 2022 14:14:12 GMT
Date: Thu, 29 Sep 2022 12:27:04 GMT
Connection: keep-alive

                                        
                                            GET /ads/pixel.js HTTP/1.1 
Host: www.redditstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.85.140
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 19 Jul 2022 22:48:09 GMT
etag: "95212d33cfff78ad59f5af5b20c48c53"
cache-control: public, max-age=60
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 29 Sep 2022 12:27:04 GMT
vary: Accept-Encoding,Origin
server: snooserv
report-to: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}
nel: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
content-length: 7722
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (25224)
Size:   7722
Md5:    95212d33cfff78ad59f5af5b20c48c53
Sha1:   9b99a4091a6eb716bc68f1428e3c86eca068b25b
Sha256: bd69f250efa08cb2c0a06c35d91fda762779820d87779019c25211f4559ebb1d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5cbaf6d-fc16-4449-8b54-1d55f68eff4f.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 14073
x-amzn-requestid: 4ff72590-e28d-4d4b-af1a-4d62e75e3d66
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZMKnpEsJoAMFlBQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6334be30-38b014a25551aa0a2ab04ccf;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 21:35:44 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: dyDhatfeYzzSQpRY7JpOIu3VhjlI8IOWcKCLCBWYaxJ1CYgCxqdQjA==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 21:49:42 GMT
age: 52642
etag: "72603efba82d649ce5a7a0ca45dc830c0d9ef012"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   14073
Md5:    11594ce7500d8776bfd5162b17f87d72
Sha1:   72603efba82d649ce5a7a0ca45dc830c0d9ef012
Sha256: 511f5aa33750cd4a02cf3968bf165ffa521e77cb4fb7135b516d7ad14e8b9d01
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb2016911-a1a6-4bdf-a8f3-89e94a0aaff7.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7810
x-amzn-requestid: ff9cdb43-e7f3-4fb3-a2c9-28059f7749e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZGVYtFlRoAMF-LQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63326904-2b426b8e379fb9da122731e6;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 03:07:48 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: v_9XHswnO6iHo9-XgqSOIDYxa_RSEzQTDqJ5Uoi5pB9sJ3kl3H-XSQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 23:45:29 GMT
age: 45695
etag: "31b8538deb0f00d5b4182739a4a2fcc1b956a998"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7810
Md5:    456968f691ae9464d69a37bffe9bd7ce
Sha1:   31b8538deb0f00d5b4182739a4a2fcc1b956a998
Sha256: 5cde1e3158e6c6c0b7a01d3bd32f2aa292b3b205f604e5c4ed71cafedad06bf2
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6428
Expires: Thu, 29 Sep 2022 14:14:12 GMT
Date: Thu, 29 Sep 2022 12:27:04 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4600
Cache-Control: 'max-age=158059'
Date: Thu, 29 Sep 2022 12:27:04 GMT
Last-Modified: Thu, 29 Sep 2022 11:10:24 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 313

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9d0e9057-f203-4080-95b8-652ecd15effa.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7859
x-amzn-requestid: 34d0718f-46d4-446f-bb06-8449bd8f4287
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZIlO4FcBoAMFy0w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63334f2b-58ae81c9077e4f1575750f15;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 19:29:47 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: LwYd0qn4P-zh1W4GvU8vNEo3_TZHEqtErAj3UKx7a82LIDaBsiXE-w==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 19:04:20 GMT
age: 62564
etag: "35ec6e80d324bb215796c590a7ffafbaea55d88e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7859
Md5:    c62a6368c456e9614ca4c8e360a2ef12
Sha1:   35ec6e80d324bb215796c590a7ffafbaea55d88e
Sha256: 90a37acc6beda1aa98a98cb84e00a7e469d6d919a14f4709c5f67a83ae95278d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F783cca30-851d-4c3b-97b3-dfc92f711d23.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4093
x-amzn-requestid: 88076712-b2bb-4aee-81a7-ae35201748ba
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZMKZtEXeoAMFVbA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6334bdd7-317a47e2018160b928a40ff9;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 21:34:15 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: VztBCwvlCphzQJw_HAODqlJjRAaYDoKFzmkAYhrhUTZJ5rmNtNSzuQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 21:50:26 GMT
age: 52598
etag: "c17c7bdfa4b40f9a0634da65c610869e5c410bf1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4093
Md5:    aed4d25286420a1405c3274931194002
Sha1:   c17c7bdfa4b40f9a0634da65c610869e5c410bf1
Sha256: f32058bdd49930b927d1f9fdfd204ed054b4f85e0d679eff067d522d42ac504a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 29 Sep 2022 12:27:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb46b76b4-e585-46c3-bf03-5bfe9273000c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 3332
x-amzn-requestid: fb6cb616-5b4d-4aaf-a891-50b4de8b6f95
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZJ_6AGNYIAMFSHQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6333e03f-377fe02d1cc7ad2b3a15ca1a;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 05:48:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: nJJZxZlapt4k5988yU-V94pBBH2SmfSZ0Zb_oJXA07mppg0lF04wLg==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 17:18:10 GMT
age: 68934
etag: "4fc0699c763f67a2602b4b3f46b8b4013d2049c6"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3332
Md5:    6ac86079d2901fb11bfaff81d91bb2d2
Sha1:   4fc0699c763f67a2602b4b3f46b8b4013d2049c6
Sha256: 8c25b9129fc01f6ffad911994e91436ab0026ed0b54568757a20ab7f92584467
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6362b4f1-5935-43c9-9147-6d019a1ea6cd.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4235
x-amzn-requestid: 60825c64-7743-4b16-b80d-d1195ccb0f23
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZMK2nFsDoAMFRwg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6334be90-1898e5d9111db7c843c1ebb4;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 21:37:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: C-XC9qsktkENdI6lWZp5RQjeEvrrFMUfBq1mA5dxEjRq5tkfL5Jsxw==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 22:04:55 GMT
age: 51729
etag: "2bbcd6305b4da3204bf1c04b6db23d44cfc84fbb"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4235
Md5:    30471179bd7cdeecea2fa4ea98701aef
Sha1:   2bbcd6305b4da3204bf1c04b6db23d44cfc84fbb
Sha256: 967e070aec3942c64cc6c4cfdc13d430825c9e5c26dbec5bb3d66237d5978dfc
                                        
                                            GET /activityi;src=11223615;type=invmedia;cat=pageview;ord=7249120017074;gtm=2wg9q0;auiddc=703173399.1664454422;~oref=https%3A%2F%2Fwww.fubo.tv%2Fwelcome%2Fgeoblock? HTTP/1.1 
Host: 11223615.fls.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.70
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 29 Sep 2022 12:27:04 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 365
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 29-Sep-2022 12:42:04 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (464), with no line terminators
Size:   365
Md5:    f91c43b306ff35c51177e9c362aba6eb
Sha1:   a77400201aa2f19d82fefee0a888067fd9c596cd
Sha256: b97fe74a5c8a5aef88f33bad7ebbc924b071c8f17443c79804ff592b7b53dffe
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 29 Sep 2022 12:27:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /bat.js HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         13.107.21.200
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: private,max-age=1800
content-length: 11367
content-encoding: gzip
last-modified: Thu, 28 Jul 2022 17:32:37 GMT
accept-ranges: bytes
etag: "80a8697a8a2d81:0"
vary: Accept-Encoding
set-cookie: MUID=0C3BFEA77C056A783617EC897DF06B94; domain=.bing.com; expires=Tue, 24-Oct-2023 12:27:04 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: B30613CBA6E541C588E57CE43938A782 Ref B: OSL30EDGE0212 Ref C: 2022-09-29T12:27:04Z
date: Thu, 29 Sep 2022 12:27:03 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (38826), with no line terminators
Size:   11367
Md5:    293ae3e0fc8b0d5c143fdf9d8490228d
Sha1:   3976c659b908e70818a3a1ac71860b497fe2d1a9
Sha256: 04a840d967ae836e14179bde574cabf14a1fc871182ca0f8193e7a0b06c727ab
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 29 Sep 2022 12:27:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6084
Cache-Control: 'max-age=158059'
Date: Thu, 29 Sep 2022 12:27:04 GMT
Last-Modified: Thu, 29 Sep 2022 10:45:40 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 312

                                        
                                            GET /config/planoutConfigs.json HTTP/1.1 
Host: www.fubo.tv
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/welcome/geoblock
Cookie: _gcl_au=1.1.703173399.1664454422; _ga=GA1.2.108317899.1664454422; _gid=GA1.2.908595966.1664454422; ftvOption%3AuniqueId=OlDcEZrE9-Ik00E0nq; ajs_anonymous_id=%22OlDcEZrE9-Ik00E0nq%22
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         151.101.86.110
HTTP/2 200 OK
content-type: application/json
                                        
x-amz-id-2: wEWZtMlihGhPLyrObiOzP47NsrEsG3oKIabfwfv/7GbVMGssQE0VBG8bUwpszrZkjnW6B7QgqWM=
x-amz-request-id: RVH51QJ1QY1E7ZY0
cache-control: public, max-age=3600
last-modified: Tue, 27 Sep 2022 23:10:19 GMT
x-amz-version-id: VHSvkARE7A8dKXWC0UNkztr8s4V7dQbk
etag: "c65a16453fa1758fa9d69f8151471b36"
server: AmazonS3
access-control-allow-origin: *
accept-ranges: bytes
date: Thu, 29 Sep 2022 12:27:04 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1645-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1664454424.441322,VS0,VE225
content-length: 5598
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text
Size:   5598
Md5:    c65a16453fa1758fa9d69f8151471b36
Sha1:   3403c29e6bee9a80aed7ea02cc0d8412b3c44fa4
Sha256: db35e87c3c85a65235e978aee18d93b08b30e81f286e30e1a544fe430df58a60
                                        
                                            OPTIONS /init?consentDisabled=true HTTP/1.1 
Host: eibqs.fubo.tv
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.fubo.tv/
Origin: https://www.fubo.tv
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

                                         
                                         23.227.38.65
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
date: Thu, 29 Sep 2022 12:27:04 GMT
content-length: 0
access-control-allow-origin: https://www.fubo.tv
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: GET,HEAD,POST,OPTIONS
access-control-max-age: 86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yzFPUrVwE2eRxwI%2FL4v22BC%2F0dmILDMydwGB8Pp2JwVy4PD51KJnXgJRqSB%2FOZqp1hUCzRRCUAVpcpm8xMe%2BKOvxP0Uora9BxUMg82jFFhhXAUu1MncWJLFuiz0T03Xz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7524b5fa1a9b0b39-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            OPTIONS /tag HTTP/1.1 
Host: eibqs.fubo.tv
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.fubo.tv/
Origin: https://www.fubo.tv
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

                                         
                                         23.227.38.65
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
date: Thu, 29 Sep 2022 12:27:04 GMT
content-length: 0
access-control-allow-origin: https://www.fubo.tv
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: GET,HEAD,POST,OPTIONS
access-control-max-age: 86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dgQkvx5rPTltVjgM1KzdhFLmca96opyDWPTgj2y0I%2BtBGiBbcLUZZ0nylbETM7rgwlRCMQSIpevV6nJcSLf%2Fvx5uAjiSNyJr0LoezYHyohnPlZQJGxuHBIze3rTJzZC2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7524b5fa1a9f0b39-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 29 Sep 2022 12:27:04 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 28 Sep 2022 14:09:17 GMT
Expires: Wed, 05 Oct 2022 14:09:16 GMT
Etag: "63e7d431ba2f6045a4107e7e9e95286721dbffbe"
Cache-Control: max-age=523931,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7524b5f92e980b31-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1044
Cache-Control: 'max-age=158059'
Date: Thu, 29 Sep 2022 12:27:04 GMT
Last-Modified: Thu, 29 Sep 2022 12:09:40 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 313

                                        
                                            GET /pagead/conversion_async.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.164
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Thu, 29 Sep 2022 12:27:04 GMT
expires: Thu, 29 Sep 2022 12:27:04 GMT
cache-control: private, max-age=3600
etag: 17557423932572341828
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 15694
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            GET /i/adsct?bci=3&eci=2&event_id=9593fb86-c8f7-4013-85ac-79949d6533e4&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=ce130320-522c-4ca3-a103-907392acec71&tw_document_href=https%3A%2F%2Fwww.fubo.tv%2Fwelcome%2Fgeoblock&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nuojk&type=javascript&version=2.3.27 HTTP/1.1 
Host: t.co
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.244.42.69
HTTP/2 200 OK
content-type: image/gif;charset=utf-8
                                        
date: Thu, 29 Sep 2022 12:27:04 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=e1701fae-23bd-4d0d-87f4-1af2c10676de; Max-Age=63072000; Expires=Sat, 28 Sep 2024 12:27:04 GMT; Path=/; Domain=t.co; Secure; SameSite=None
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: c2b6f98a9e2840fa
strict-transport-security: max-age=0
x-response-time: 118
x-connection-hash: c6befe66e1e69fdc9ad72a0383fb98af95cbe2c16d9f95d4d916aa754fc9608e
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    377d257f2d2e294916143c069141c1c5
Sha1:   b7cae69682cf31dd670b65088db8395acda6ed3e
Sha256: ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 29 Sep 2022 12:27:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 29 Sep 2022 12:27:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ddm/fls/i/src=12423194;type=fubot00;cat=fubot0;ord=7329577951683;gtm=2od9q0;auiddc=703173399.1664454422;~oref=https%3A%2F%2Fwww.fubo.tv%2Fwelcome%2Fgeoblock HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://12423194.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.34
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 29 Sep 2022 12:27:04 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 360
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (460), with no line terminators
Size:   360
Md5:    0c5358a7d12d38c212c9ca8d72279f0b
Sha1:   4f9d415e652260497ff95dc2d7702f09d0b52f6c
Sha256: 95254e240b52127f355a8260c5128a4fa86dee653f9a8e0b4f5da13d64f4e3e5
                                        
                                            GET /ddm/fls/i/src=11223615;type=invmedia;cat=pageview;ord=7249120017074;gtm=2wg9q0;auiddc=703173399.1664454422;~oref=https%3A%2F%2Fwww.fubo.tv%2Fwelcome%2Fgeoblock HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://11223615.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.34
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 29 Sep 2022 12:27:04 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 365
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (463), with no line terminators
Size:   365
Md5:    9e79f0f727015c7b8465201ec4018387
Sha1:   64d739cc2b2906c902ff81541c4168b5a82490e5
Sha256: b3f0d251be11017d6001c3b516406400c5aa01af23a9aa96253c6e018c04e61e
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 29 Sep 2022 12:27:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /A355896-2f02-4c31-bcac-0a3b7225ceaf1.js HTTP/1.1 
Host: d.impactradius-event.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         35.186.249.72
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
x-guploader-uploadid: ADPycdtDU21EwvJGwuUrrq6mCBgoEcFLSyRTj23I1de_4NTZxs76oyn-IVvaoIZCTPf3OGhkhPrBSsG1cooei5J0DvCsLTv_wugd
x-goog-generation: 1658858864453221
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 13499
content-encoding: gzip
x-goog-hash: crc32c=m39TDQ==, md5=d4n4WQUBJub6QUyINEz5Eg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
vary: Accept-Encoding
content-length: 13499
server: UploadServer
date: Thu, 29 Sep 2022 12:27:04 GMT
expires: Thu, 29 Sep 2022 12:32:04 GMT
cache-control: public,max-age=900,s-maxage=300
last-modified: Tue, 26 Jul 2022 18:07:44 GMT
etag: "7789f859050126e6fa414c88344cf912"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  C source, ASCII text, with very long lines (43843), with no line terminators
Size:   13499
Md5:    7789f859050126e6fa414c88344cf912
Sha1:   56b8706176328a4165d7e5ebdd793a912f717aff
Sha256: 70e26d7f3b6f98848308dbb5eb87f0c5c645ceaeb985251b6f03bf5a252dc703
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 29 Sep 2022 12:27:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /syncframe?topUrl=www.fubo.tv&origin=onetag HTTP/1.1 
Host: gum.criteo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         178.250.0.157
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
date: Thu, 29 Sep 2022 12:27:03 GMT
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=24fb9eeb-d0f3-4e2a-9a51-6e6d2179010e; expires=Tue, 24 Oct 2023 12:27:04 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 590036
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   5558
Md5:    ad1a6c8c3800ebb7808c780cec97c2be
Sha1:   0cee61d34ab4e2d038419482aac303648b4ba3f7
Sha256: 4a8eb07e5e95c2335f5d40be97435a14665e74c06b9edc4e62f69934e2e98bb3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 29 Sep 2022 12:27:04 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 28 Sep 2022 14:09:17 GMT
Expires: Wed, 05 Oct 2022 14:09:16 GMT
Etag: "63e7d431ba2f6045a4107e7e9e95286721dbffbe"
Cache-Control: max-age=523931,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7524b5fba8a30b31-OSL

                                        
                                            GET /ddm/fls/i/src=11223615;type=invmedia;cat=pageview;ord=7249120017074;gtm=2wg9q0;auiddc=703173399.1664454422;~oref=https%3A%2F%2Fwww.fubo.tv%2Fwelcome%2Fgeoblock HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         216.58.207.194
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 29 Sep 2022 12:27:04 GMT
expires: Thu, 29 Sep 2022 12:27:04 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 177
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Size:   177
Md5:    9393b28661a65a763699c108887882eb
Sha1:   c237ba6491e6fb9ca57da33dd9d048ca8e86cfda
Sha256: 2bdce28c6fb3cb210861d4aba734ab7aedfc979a8fa273512a61d8cf8afc78b0
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 482
Cache-Control: 'max-age=158059'
Date: Thu, 29 Sep 2022 12:27:04 GMT
Last-Modified: Thu, 29 Sep 2022 12:19:02 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 313

                                        
                                            GET /ddm/fls/i/src=12423194;type=fubot00;cat=fubot0;ord=7329577951683;gtm=2od9q0;auiddc=703173399.1664454422;~oref=https%3A%2F%2Fwww.fubo.tv%2Fwelcome%2Fgeoblock HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         216.58.207.194
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 29 Sep 2022 12:27:04 GMT
expires: Thu, 29 Sep 2022 12:27:04 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 177
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Size:   177
Md5:    9393b28661a65a763699c108887882eb
Sha1:   c237ba6491e6fb9ca57da33dd9d048ca8e86cfda
Sha256: 2bdce28c6fb3cb210861d4aba734ab7aedfc979a8fa273512a61d8cf8afc78b0
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5731
Cache-Control: 'max-age=158059'
Date: Thu, 29 Sep 2022 12:27:04 GMT
Last-Modified: Thu, 29 Sep 2022 10:51:33 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 313

                                        
                                            GET /dna HTTP/1.1 
Host: dnacdn.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         178.250.0.157
HTTP/2 200 OK
                                        
date: Thu, 29 Sep 2022 12:27:03 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=dZx_0l80M0RITmhlJTJCZkMwOUJGQlhaMUN2czVTbVY3MUhMQ1RadXdwJTJCZTdFVnBPQmpDUVFFVEt4NVYyJTJCaWczNjE0R2xG; expires=Tue, 24 Oct 2023 12:27:04 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 274833
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5731
Cache-Control: 'max-age=158059'
Date: Thu, 29 Sep 2022 12:27:04 GMT
Last-Modified: Thu, 29 Sep 2022 10:51:33 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 313

                                        
                                            GET /action/0?ti=4029355&tm=gtm002&Ver=2&mid=47023465-bf93-436d-8476-c784cd80fae7&sid=0517b9903ff211ed842ea1ec608ee927&vid=0517c2e03ff211ed8576cdd70f5ab61e&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&p=https%3A%2F%2Fwww.fubo.tv%2Fwelcome%2Fgeoblock&r=&lt=2018&evt=pageLoad&sv=1&rn=457856 HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         13.107.21.200
HTTP/2 204 No Content
                                        
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=0307B1D0526965CD3031A3FE539C64D5; domain=.bing.com; expires=Tue, 24-Oct-2023 12:27:05 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 808CD19F4DCB41739923FE7DFCDEEEF1 Ref B: OSL30EDGE0212 Ref C: 2022-09-29T12:27:04Z
date: Thu, 29 Sep 2022 12:27:04 GMT
X-Firefox-Spdy: h2

                                        
                                            GET /tracker-latest.min.js HTTP/1.1 
Host: d2hrivdxn8ekm8.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.245.16
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
content-length: 10025
last-modified: Fri, 24 Jun 2022 19:33:58 GMT
x-amz-version-id: nxP954O2qyuHFEWoPjj05B2blGcZvYQN
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 20:18:24 GMT
etag: "2fd76c8e88356206a1c7a31860e7fe72"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rJ8shAS-g8GwVyq9r-9RCetwEEgsMhwACTAiTv4y27kYC43eVxgCzg==
age: 58122
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  C source, ASCII text, with very long lines (10025), with no line terminators
Size:   10025
Md5:    2fd76c8e88356206a1c7a31860e7fe72
Sha1:   e14f2a16b9ed0a69a86f92623240cb140ab247a7
Sha256: 4e4516e3afa1170bf934a7882bf09eacf63d4600ea4b2609724c6cfa49333472
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 29 Sep 2022 12:27:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6488
Cache-Control: 'max-age=158059'
Date: Thu, 29 Sep 2022 12:27:05 GMT
Last-Modified: Thu, 29 Sep 2022 10:38:57 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-J6DFVR542H&cid=108317899.1664454422&gtm=2oe9q0&aip=1&z=1073651313 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.3
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 29 Sep 2022 12:27:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/1p-conversion/867734716/?random=1664454421866&cv=9&fst=1664454421866&num=1&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fwww.fubo.tv%2Fwelcome%2Fgeoblock&hn=www.google.com&gcp=1&sscte=1&ct_cookie_present=1&async=1&rfmt=3&fmt=4&ipr=y&prhg=0 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.fubo.tv/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.3
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 29 Sep 2022 12:27:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   63
Md5:    0339f8f57d1bf75003db591e28957e45
Sha1:   ae2286e497c9f76a02cb40c40a674b73bd293b76
Sha256: 609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
                                        
                                            GET /pagead/1p-conversion/818027835/?random=1664454421688&cv=9&fst=1664454421688&num=1&value=0&label=DeR0CKeir6UBELu6iIYD&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg9q0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fwww.fubo.tv%2Fwelcome%2Fgeoblock&auid=703173399.1664454422&hn=www.google.com&bttype=purchase&gcp=1&sscte=1&ct_cookie_present=1&async=1&rfmt=3&fmt=4&ipr=y&prhg=0 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.fubo.tv/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.3
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 29 Sep 2022 12:27:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   63
Md5:    0339f8f57d1bf75003db591e28957e45
Sha1:   ae2286e497c9f76a02cb40c40a674b73bd293b76
Sha256: 609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 29 Sep 2022 12:27:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /en_US/fbevents.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         31.13.72.12
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                        
vary: Accept-Encoding
content-encoding: gzip
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: mL+PLWp/I1QAq3Z76khx3tUU6oRUcKoUuFxEc8JEaZ7MB3f+bFzXs78OvMm8ePCX1yYmWF8R0jqWATOOCiHmYQ==
priority: u=3,i
content-length: 26840
x-fb-trip-id: 1904183273
date: Thu, 29 Sep 2022 12:27:05 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (64348)
Size:   26840
Md5:    e1327a02d76346c7e23d114e4e508b30
Sha1:   195b8ad875ab8f7a7adf735f1f70aa02b3a2e1a3
Sha256: 331e67b451c6559915b12ab2df810ccdba73b3971c5301b2010b54dd6d391de2
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 29 Sep 2022 12:27:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /5a28e627?data=dmVyc2lvbj0xLjIuMTUmdG9rZW49NjVjM2ZjZTYtY2Q3Zi00ZmE3LTliOTAtODY5NDMwY2NiZTRmJnNlc3Npb25JZD0wZmEyZDJjMy04M2VmLTRlYjMtMmE0YS05Nzk5MjJjYTFmNWY%3D&date=1664454422225 HTTP/1.1 
Host: dvqigh9b7wa32.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fubo.tv
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.42.227
HTTP/2 200 OK
content-type: image/gif
                                        
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 08 Mar 2017 06:19:28 GMT
accept-ranges: bytes
server: AmazonS3
date: Thu, 29 Sep 2022 06:28:54 GMT
etag: "fb02f374b8f73825415db1bccd4bd76d"
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 6sdMjPPCj34wTsq4PVvdlSIfG9WJ2iNK0CSKVgLWvA2ip0ypfnGvvg==
age: 25023
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    fb02f374b8f73825415db1bccd4bd76d
Sha1:   b103aa629cacdd90b39538a7561da7f8e49ad73f
Sha256: caa849b179befa2645a8e2c474d2e82a76777a3305315ece911013e8ee9a916c
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5880
Cache-Control: 'max-age=158059'
Date: Thu, 29 Sep 2022 12:27:05 GMT
Last-Modified: Thu, 29 Sep 2022 10:49:05 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 312

                                        
                                            GET /newidsd HTTP/1.1 
Host: gem.gbc.criteo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

                                         
                                         178.250.6.10
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
date: Thu, 29 Sep 2022 12:27:04 GMT
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 82376
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2

                                        
                                            GET /5a28e627?data=aXB2Nj10cnVlJnZlcnNpb249MS4yLjE1JnRva2VuPTY1YzNmY2U2LWNkN2YtNGZhNy05YjkwLTg2OTQzMGNjYmU0ZiZzZXNzaW9uSWQ9MGZhMmQyYzMtODNlZi00ZWIzLTJhNGEtOTc5OTIyY2ExZjVm&date=1664454422225 HTTP/1.1 
Host: d330aiyvva2oww.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fubo.tv
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.42.42
HTTP/2 200 OK
content-type: image/gif
                                        
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 08 Mar 2017 06:19:28 GMT
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 23:01:50 GMT
etag: "fb02f374b8f73825415db1bccd4bd76d"
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ubswyQTI85flL5F4X3PzGIde0mXUFyD7nZTeTYU3vZO_UXnpaqxl2A==
age: 48316
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    fb02f374b8f73825415db1bccd4bd76d
Sha1:   b103aa629cacdd90b39538a7561da7f8e49ad73f
Sha256: caa849b179befa2645a8e2c474d2e82a76777a3305315ece911013e8ee9a916c
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6488
Cache-Control: 'max-age=158059'
Date: Thu, 29 Sep 2022 12:27:05 GMT
Last-Modified: Thu, 29 Sep 2022 10:38:57 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /pagead/viewthroughconversion/867734716/?random=1664454421873&cv=9&fst=1664454421873&num=1&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=0&data=path%3D%2Fwelcome%2Fgeoblock%3Breferrer%3D%3Bsearch%3D%3Btitle%3D%3Burl%3Dhttps%3A%2F%2Fwww.fubo.tv%2Fwelcome%2Fgeoblock&frm=0&url=https%3A%2F%2Fwww.fubo.tv%2Fwelcome%2Fgeoblock&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.211.2
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 29 Sep 2022 12:27:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1027
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 29-Sep-2022 12:42:05 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2336), with no line terminators
Size:   1027
Md5:    340a28b5e81a0c78a943214d22f31721
Sha1:   0773b10f645a477036a2e117cb93042b3286aa9a
Sha256: 7bd2c0a3cb0a718072fcef46c5e9e62dad228a4d902fc8c708e9251f35068171
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 29 Sep 2022 12:27:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/viewthroughconversion/818027835/?random=1664454421688&cv=9&fst=1664454421688&num=1&fmt=3&value=0&label=DeR0CKeir6UBELu6iIYD&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg9q0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fwww.fubo.tv%2Fwelcome%2Fgeoblock&auid=703173399.1664454422&hn=www.google.com&bttype=purchase&gcp=1&ct_cookie_present=1&async=1 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.211.2
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 29 Sep 2022 12:27:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 29-Sep-2022 12:42:05 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 29 Sep 2022 12:27:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /p/action/4029355.js HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         13.107.21.200
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
cache-control: private,max-age=60
content-length: 666
content-encoding: gzip
vary: Accept-Encoding
set-cookie: MUID=0365720E73EE682304F66020721B6986; domain=.bing.com; expires=Tue, 24-Oct-2023 12:27:04 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: ARR/3.0
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: CF5EAA1548374954B33896EB1E059A2F Ref B: OSL30EDGE0212 Ref C: 2022-09-29T12:27:04Z
date: Thu, 29 Sep 2022 12:27:04 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   666
Md5:    a2c8c493ac31ff24cf266a12bd658966
Sha1:   3f0c3940e3e1d4931f9d32904c3cf5484ef33e63
Sha256: e5c47f3ef73efb1bf63317e447d211947708dcd07745ea8f6354baf183c2c4a5
                                        
                                            GET /pagead/viewthroughconversion/867734716/?random=1664454421866&cv=9&fst=1664454421866&num=1&fmt=3&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fwww.fubo.tv%2Fwelcome%2Fgeoblock&hn=www.google.com&gcp=1&ct_cookie_present=1&async=1 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.211.2
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 29 Sep 2022 12:27:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 29-Sep-2022 12:42:05 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /rp.gif?ts=1664454421710&id=t2_6dsax8gf&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=375819b7-e80f-4875-a7ad-3cf4581f4ae2&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_02c59ad6 HTTP/1.1 
Host: alb.reddit.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.85.140
HTTP/2 200 OK
content-type: image/gif
                                        
server: Varnish
retry-after: 0
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
date: Thu, 29 Sep 2022 12:27:05 GMT
via: 1.1 varnish
content-length: 42
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 29 Sep 2022 12:27:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ct/core.js HTTP/1.1 
Host: s.pinimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         23.38.200.197
HTTP/2 200 OK
content-type: application/javascript
                                        
etag: "cd5f811dc7c19de8566479150bc37ef8"
cache-control: max-age=7200
accept-ranges: bytes
content-length: 1146
vary: Accept-Encoding, Origin
x-cdn: akamai
access-control-max-age: 86400
access-control-expose-headers: X-CDN
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1146), with no line terminators
Size:   1146
Md5:    cd5f811dc7c19de8566479150bc37ef8
Sha1:   d17e9c54bce997b95bd0b6fceb0ad936077bbbf8
Sha256: dbcef3b5ce770e8a3e8350473f04fbe627a78fa93a4441a24afec965643733e8
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         143.204.42.156
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 29 Sep 2022 12:27:05 GMT
Last-Modified: Thu, 29 Sep 2022 11:21:35 GMT
Server: ECS (nyb/1D0D)
X-Cache: Miss from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: yoXOh0nPHm8dgcFihmuluXLLljtHo9Xd23GR1ZBSIPwYwvWqYkqIZg==
Age: 3930

                                        
                                            GET /i/adsct?bci=3&eci=2&event_id=9593fb86-c8f7-4013-85ac-79949d6533e4&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=ce130320-522c-4ca3-a103-907392acec71&tw_document_href=https%3A%2F%2Fwww.fubo.tv%2Fwelcome%2Fgeoblock&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nuojk&type=javascript&version=2.3.27 HTTP/1.1 
Host: analytics.twitter.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.244.42.131
HTTP/2 200 OK
content-type: image/gif;charset=utf-8
                                        
date: Thu, 29 Sep 2022 12:27:04 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_nf4VZL63VrW6iHwuVQI8/A=="; Max-Age=63072000; Expires=Sat, 28 Sep 2024 12:27:05 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 6cb64d3d98161f59
strict-transport-security: max-age=631138519
x-response-time: 106
x-connection-hash: 761b3030bdf5e17f0daf89816b282d4211da8ecd0a5c184efb1009636ae7a842
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    377d257f2d2e294916143c069141c1c5
Sha1:   b7cae69682cf31dd670b65088db8395acda6ed3e
Sha256: ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
                                        
                                            GET /v1/onelink HTTP/1.1 
Host: wa.onelink.me
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fubo.tv
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.255.57.107
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: https://www.fubo.tv
Date: Thu, 29 Sep 2022 12:27:05 GMT
Content-Length: 13
Connection: keep-alive


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   13
Md5:    593e8538d63f30de24fbb439dd424870
Sha1:   f838a78077c6d023e0d0bca95f0f335df4b8b468
Sha256: 38bc0f256821a9c0a02a1c0cedf8ff70c211e637ef77ac199de2fe0cf36ba9ec
                                        
                                            POST /g/collect?v=2&tid=G-J6DFVR542H&gtm=2oe9q0&_p=2000254506&_gaz=1&cid=108317899.1664454422&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1664454421&sct=1&seg=0&dl=https%3A%2F%2Fwww.fubo.tv%2Fwelcome%2Fgeoblock&dt=&en=page_view&_fv=1&_ss=1 HTTP/1.1 
Host: region1.analytics.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fubo.tv
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                         
                                         216.239.32.36
HTTP/2 204 No Content
content-type: text/plain
                                        
access-control-allow-origin: https://www.fubo.tv
date: Thu, 29 Sep 2022 12:27:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 29 Sep 2022 12:27:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /g/collect?v=2&tid=G-J6DFVR542H&cid=108317899.1664454422&gtm=2oe9q0&aip=1 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fubo.tv
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                         
                                         64.233.165.155
HTTP/2 204 No Content
content-type: text/plain
                                        
access-control-allow-origin: https://www.fubo.tv
date: Thu, 29 Sep 2022 12:27:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 29 Sep 2022 12:27:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ct/lib/main.8f82d377.js HTTP/1.1 
Host: s.pinimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         23.38.200.197
HTTP/2 200 OK
content-type: application/javascript
                                        
etag: "a6d88dfc00c49311bf8bfb0c93dd49d4"
content-encoding: gzip
accept-ranges: bytes
content-length: 18620
cache-control: max-age=1209600
vary: Accept-Encoding, Origin
x-cdn: akamai
access-control-max-age: 86400
access-control-expose-headers: X-CDN
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (53772), with no line terminators
Size:   18620
Md5:    a6d88dfc00c49311bf8bfb0c93dd49d4
Sha1:   97a94818112f70a0798f8e308a9b32ff50d27c0c
Sha256: 3a98f5a50898a72647cef7362731acb3cec5648a9057c836f683970955ed991d
                                        
                                            GET /tr/?id=1534663066852899&ev=PageView&dl=https%3A%2F%2Fwww.fubo.tv%2Fwelcome%2Fgeoblock&rl=&if=false&ts=1664454422568&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.1.1664454422567.1116482522&it=1664454422290&coo=false&eid=8c101c68-aa60-4e8f-af88-1d7e3aecb826&rqm=GET HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         31.13.72.36
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
date: Thu, 29 Sep 2022 12:27:05 GMT
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         143.204.42.156
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 29 Sep 2022 12:27:05 GMT
Last-Modified: Thu, 29 Sep 2022 10:40:12 GMT
Server: ECS (bsa/EB18)
X-Cache: Miss from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: LVCnqYG55CDHI_rP0oIfxZPnFvqrBbljvTeNgmtCNliAEFLg9eCXsg==
Age: 6413

                                        
                                            POST /events?site-id=59c471a2-45e2-4665-baa8-659101a61fc8 HTTP/1.1 
Host: wa.appsflyer.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 1256
Origin: https://www.fubo.tv
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         46.51.199.161
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: https://www.fubo.tv
Date: Thu, 29 Sep 2022 12:27:05 GMT
Set-Cookie: af_id=a852105a-c4a8-4b91-a2a2-0eb7bc21b952-p; Domain=appsflyer.com; Expires=Sat, 28 Sep 2024 12:27:05 GMT
Content-Length: 71
Connection: keep-alive


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   71
Md5:    c9b121ada8933683b5304148a65ac48d
Sha1:   7b2741c8c6ed0a61029c3a9fee5353743a3c8643
Sha256: 0743d04a300bd93e4f56589694288ba557d520fcffc1ebe26ff1404cc5bf0d16
                                        
                                            GET /v1/onelink?af_id=a852105a-c4a8-4b91-a2a2-0eb7bc21b952-p HTTP/1.1 
Host: wa.onelink.me
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fubo.tv
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.255.57.107
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: https://www.fubo.tv
Date: Thu, 29 Sep 2022 12:27:05 GMT
Set-Cookie: af_id=a852105a-c4a8-4b91-a2a2-0eb7bc21b952-p; Path=/; Domain=onelink.me; Expires=Sat, 28 Sep 2024 12:27:05 GMT
Content-Length: 51
Connection: keep-alive


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   51
Md5:    ebd29b2075459006c0d5d2749cf2c33f
Sha1:   e6c834c5a8eeb00afbb4877d0e7b0d768a3b69a8
Sha256: 4df0b6131922d242a0b339aa8f6b4ba922ab7ff3fac4408a267a7e875f6dc23b
                                        
                                            GET /user/?tid=2614467736760&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1664454422589 HTTP/1.1 
Host: ct.pinterest.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fubo.tv
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         23.38.200.197
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
access-control-allow-credentials: true
access-control-expose-headers: Epik,Pin-Unauth
pin-unauth: dWlkPU9EVmtNekU0WXpndFlUWTVNQzAwWlRObExXRmlNVFF0T1dNeU9HSXhZV1F5TURNdw
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
access-control-allow-origin: https://www.fubo.tv
content-encoding: gzip
content-length: 377
x-envoy-upstream-service-time: 1
referrer-policy: origin
x-pinterest-rid: 1353154593717491
date: Thu, 29 Sep 2022 12:27:05 GMT
vary: Accept-Encoding
akamai-grn: 0.274f2417.1664454425.163fb4a0
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (534), with no line terminators
Size:   377
Md5:    c549367f59c0235632eb3a01e1b9f898
Sha1:   52c09aa9bdade171507f4c2edf895efd5e98b3b9
Sha256: cb27fea7556642110c0368a1fbc03c3aaa2ed590a642d0b46daab252a284adee
                                        
                                            GET /user/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%7D&tid=2614467736760&cb=1664454422590 HTTP/1.1 
Host: ct.pinterest.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.fubo.tv
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         23.38.200.197
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
access-control-allow-credentials: true
access-control-expose-headers: Epik,Pin-Unauth
pin-unauth: dWlkPU1UazBZVFExT0RFdFltWmhNaTAwTmpGbExUZzFOekl0TXpCaVpUazRPV00xWVRFdw
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
access-control-allow-origin: https://www.fubo.tv
content-encoding: gzip
content-length: 377
x-envoy-upstream-service-time: 1
referrer-policy: origin
x-pinterest-rid: 1091319109651784
date: Thu, 29 Sep 2022 12:27:05 GMT
vary: Accept-Encoding
akamai-grn: 0.274f2417.1664454425.163fb4a5
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (534), with no line terminators
Size:   377
Md5:    c549367f59c0235632eb3a01e1b9f898
Sha1:   52c09aa9bdade171507f4c2edf895efd5e98b3b9
Sha256: cb27fea7556642110c0368a1fbc03c3aaa2ed590a642d0b46daab252a284adee
                                        
                                            GET /v3/?tid=2614467736760&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.fubo.tv%2Fwelcome%2Fgeoblock%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%228f82d377%22%2C%22ecm_enabled%22%3Afalse%7D&cb=1664454422591 HTTP/1.1 
Host: ct.pinterest.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         23.38.200.197
HTTP/2 200 OK
content-type: image/gif
                                        
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-length: 35
access-control-allow-origin: *
x-envoy-upstream-service-time: 2
referrer-policy: origin
x-pinterest-rid: 1299278796200677
date: Thu, 29 Sep 2022 12:27:05 GMT
akamai-grn: 0.274f2417.1664454425.163fb4ac
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   35
Md5:    9b8d19f4310c758344e40bf17fbc7e85
Sha1:   2290ef058812d5f5e398736e2316cba8cf8093cf
Sha256: 37b17c5135a176a9474521af147d96dfa1fb4ca0f43f00d1400bd1885be3ab9b
                                        
                                            GET /c.gif HTTP/1.1 
Host: c.clarity.ms
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         20.234.93.27
HTTP/2 302 Found
                                        
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=56376E23F1DA404ABAF999078CF905BB&RedC=c.clarity.ms&MXFR=317ABB76D69C62CD1578A958D29C6C38
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure; MUID=317ABB76D69C62CD1578A958D29C6C38; domain=.clarity.ms; expires=Tue, 24-Oct-2023 12:27:05 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Thu, 29 Sep 2022 12:27:05 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /c.gif?CtsSyncId=56376E23F1DA404ABAF999078CF905BB&RedC=c.clarity.ms&MXFR=317ABB76D69C62CD1578A958D29C6C38 HTTP/1.1 
Host: c.bing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.fubo.tv/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         13.107.21.200
HTTP/2 302 Found
                                        
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=56376E23F1DA404ABAF999078CF905BB&MUID=26FB5B59FB436CE0130A4977FAB66D5C
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=26FB5B59FB436CE0130A4977FAB66D5C; domain=c.bing.com; expires=Tue, 24-Oct-2023 12:27:05 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 4582E66C45BA4EF3B4243565813B0FFE Ref B: OSL30EDGE0212 Ref C: 2022-09-29T12:27:05Z
date: Thu, 29 Sep 2022 12:27:04 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /sid/json?origin=onetag&domain=fubo.tv&sn=FirefoxSyncframe&so=0&topUrl=www.fubo.tv&info=ZgNk6F80M0RITmhlJTJCZkMwOUJGQlhaMUN2czVTbVY3MUhMQ1RadXdwJTJCZTdFVnBPQU5XMEcza3IlMkJWR3AlMkZta0IxNkJTYnU&idsd=-466541342,-1187978959&cw=1&lsw=1 HTTP/1.1 
Host: gum.criteo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?topUrl=www.fubo.tv&origin=onetag
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         178.250.0.157
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
date: Thu, 29 Sep 2022 12:27:04 GMT
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 873687
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5526)
Size:   4459
Md5:    809303813e0188adf8d7d4909b34ca2b
Sha1:   1c029f99929f3c668d1c8f0fc027185c786b2408
Sha256: f13deeecfcbd5a14960c61a2c45020d26e5ef850bba2ed7eeb2084214d79a753
                                        
                                            GET /c.gif?CtsSyncId=56376E23F1DA404ABAF999078CF905BB&MUID=26FB5B59FB436CE0130A4977FAB66D5C HTTP/1.1 
Host: c.clarity.ms
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.fubo.tv/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         20.234.93.27
HTTP/2 200 OK
content-type: image/gif
                                        
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
last-modified: Tue, 13 Sep 2022 19:54:52 GMT
accept-ranges: bytes
etag: "8d3298b0aac7d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Thu, 29-Sep-2022 12:37:05 GMT; path=/; SameSite=None; Secure;
date: Thu, 29 Sep 2022 12:27:05 GMT
content-length: 42
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    32023bb33cfb2a1990a4ef2d85b6ac16
Sha1:   23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
Sha256: 99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
                                        
                                            GET /v3/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%7D&tid=2614467736760&cb=1664454422590&pd=%7B%22np%22%3A%22gtm%22%2C%22pin_unauth%22%3A%22dWlkPU9EVmtNekU0WXpndFlUWTVNQzAwWlRObExXRmlNVFF0T1dNeU9HSXhZV1F5TURNdw%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.fubo.tv%2Fwelcome%2Fgeoblock%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%228f82d377%22%2C%22is_eu%22%3Afalse%2C%22ecm_enabled%22%3Afalse%7D&cb=1664454422780 HTTP/1.1 
Host: ct.pinterest.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         23.38.200.197
HTTP/2 200 OK
content-type: image/gif
                                        
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-length: 35
access-control-allow-origin: *
x-envoy-upstream-service-time: 2
referrer-policy: origin
x-pinterest-rid: 4210327555726809
date: Thu, 29 Sep 2022 12:27:05 GMT
set-cookie: _pinterest_ct_ua="TWc9PSZraU9haytSQWRDOUxoNTFPTjVUVGxhSmRTNi95UzY1S1ArUmtkWjZiNzRBQkl1TTRzM25SUHVESkxwZENnMWdtNTJMSzVhV29DamhiKzZpZmxqc2QvcmkvMzRSbGFNNUVaNHNBNnZtZzNaST0mUUY2cWY2eCtLcXdUSE01RDVsVGFBNWFPbGJzPQ=="; Expires=Fri, 29 Sep 2023 12:27:05 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None
akamai-grn: 0.274f2417.1664454425.163fb88f
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   35
Md5:    9b8d19f4310c758344e40bf17fbc7e85
Sha1:   2290ef058812d5f5e398736e2316cba8cf8093cf
Sha256: 37b17c5135a176a9474521af147d96dfa1fb4ca0f43f00d1400bd1885be3ab9b
                                        
                                            GET /sync?c=8&r=1&a=1&u=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D28645%26dpuuid%3D%40USERID%40 HTTP/1.1 
Host: gum.criteo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         178.250.0.157
HTTP/2 302 Found
                                        
date: Thu, 29 Sep 2022 12:27:05 GMT
server: Kestrel
content-length: 0
cache-control: private, max-age=0, no-cache, no-store, must-revalidate
location: https://dpm.demdex.net/ibs:dpid=28645&dpuuid=
server-processing-duration-in-ticks: 519957
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2

                                        
                                            GET /cksync.php?cs=3&type=crt&ovsid=k-bvqK4v2Qy_g3gn0nvQKptqlrka_MofRDi578LA HTTP/1.1 
Host: contextual.media.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         23.38.200.22
HTTP/2 200 OK
content-type: image/gif
                                        
server: Apache
content-length: 45
set-cookie: visitor-id=3074560253580246000V10; Expires=Fri, 29 Sep 2023 12:27:05 GMT; domain=.media.net; Path=/; data-c-ts=1664454425;Expires=Sat, 29 Oct 2022 12:27:05 GMT;path=/;domain=.media.net; data-c=k-bvqK4v2Qy_g3gn0nvQKptqlrka_MofRDi578LA~~3;Expires=Sat, 29 Oct 2022 12:27:05 GMT;path=/;domain=.media.net;
p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA", CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA, CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA, CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA
strict-transport-security: max-age=31536000
x-mnet-hl2: E
expires: Thu, 29 Sep 2022 12:27:05 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Thu, 29 Sep 2022 12:27:05 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 87a, 1 x 1\012- data
Size:   45
Md5:    99cceceaed4d575484b69ddaf9ed66a7
Sha1:   1e3a3b15296b585833a22d987a387aa58aa1642d
Sha256: 832f63f4187160c195b04f1911c2e623a75e805f4b23abb9b0bea214b4283a43
                                        
                                            GET /eus2/s/0.6.41/clarity.js HTTP/1.1 
Host: www.clarity.ms
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.fubo.tv/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         13.107.246.53
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
                                        
cache-control: public,max-age=86400
content-encoding: br
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d8d107429df470"
vary: Accept-Encoding
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
x-azure-ref: 0GY81YwAAAABhM6zfl/DQQ7mRYmVrh4ZIU1ZHMjBFREdFMDUxMwA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Thu, 29 Sep 2022 12:27:05 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (54809)
Size:   23949
Md5:    8ae89e569e46a6b259a24fdbddfaa603
Sha1:   bd55a355b317d739780e48e8e8347c5ae78a977c
Sha256: 73a0c607225ed84a050b5e7367a4a92479ba356cd7fde0507cd20b2ea40190e1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         143.204.42.156
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 29 Sep 2022 12:27:05 GMT
Last-Modified: Thu, 29 Sep 2022 10:40:10 GMT
Server: ECS (nyb/1D2A)
X-Cache: Miss from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: b81Qty5tIgKeofjWPIYDQytVeXKFkfc6A9Y4k5rFKrR_ZNHsa0yaKA==
Age: 6416

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5607
Cache-Control: 'max-age=158059'
Date: Thu, 29 Sep 2022 12:27:05 GMT
Last-Modified: Thu, 29 Sep 2022 10:53:38 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /pixel?google_nid=cjp&google_sc=&google_ula=913071&CriteoUserId=k-gMQcrf2Qy_g3gn0nvQKptqlrka_dFBuMx608HQ&google_cm=&google_hm=ay1nTVFjcmYyUXlfZzNnbjBudlFLcHRxbHJrYV9kRkJ1TXg2MDhIUQ&google_tc= HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.130
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
                                        
location: https://dis.criteo.com/dis/rtb/google/cookiematch.aspx?id=&CriteoUserId=k-gMQcrf2Qy_g3gn0nvQKptqlrka_dFBuMx608HQ&google_error=3
date: Thu, 29 Sep 2022 12:27:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
server: HTTP server (unknown)
content-length: 332
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Size:   332
Md5:    818ccd894c1238ecc3fe079a4d47e82a
Sha1:   a5d2cb881ca9f5e8eea1c069f98fe1ac3240a205
Sha256: 536311c9f8094b4fd370ae40e29805251d48f27d10413aabde69a450aad65bd1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4684
Cache-Control: 'max-age=158059'
Date: Thu, 29 Sep 2022 12:27:05 GMT
Last-Modified: Thu, 29 Sep 2022 11:09:01 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /um?eid=80&uid=k-QUkRDP2Qy_g3gn0nvQKptqlrka82M4OD_RWsgQ HTTP/1.1 
Host: criteo-sync.teads.tv
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         23.195.255.234
HTTP/2 200 OK
content-type: image/gif
                                        
server: akka-http/10.2.9
content-length: 23
expires: Thu, 29 Sep 2022 12:27:05 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Thu, 29 Sep 2022 12:27:05 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   23
Md5:    da5b449fff36752a93779fa4067cd2eb
Sha1:   71a96eea77f21ab5f1819b96c4cedd5cd34476ca
Sha256: 328e90a318268aea96180cc31666ae6d6f79d90d078c123bc3d98ee08a192fb7
                                        
                                            GET /tap.php?v=6434&nid=2149&put=k-ogLcW_2Qy_g3gn0nvQKptqlrka8YypAIOqsBmQ&expires=30 HTTP/1.1 
Host: pixel.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         213.19.162.80
HTTP/1.1 204 No Content
Content-Type: image/gif
                                        
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: 7c5d24517ee193cc868994bc18883d1d

                                        
                                            GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:k-wEmG-P2Qy_g3gn0nvQKptqlrka87JstcoNUUMA HTTP/1.1 
Host: simage2.pubmatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         185.64.189.110
HTTP/2 200 OK
content-type: image/gif; charset=utf-8
                                        
server: nginx
date: Thu, 29 Sep 2022 12:27:05 GMT
content-length: 42
set-cookie: KRTBCOOKIE_97=3385-uid:k-wEmG-P2Qy_g3gn0nvQKptqlrka87JstcoNUUMA&KRTB&23144-uid:k-wEmG-P2Qy_g3gn0nvQKptqlrka87JstcoNUUMA&KRTB&23286-uid:k-wEmG-P2Qy_g3gn0nvQKptqlrka87JstcoNUUMA&KRTB&23287-uid:k-wEmG-P2Qy_g3gn0nvQKptqlrka87JstcoNUUMA; domain=pubmatic.com; secure; expires=Sat, 29-Oct-2022 12:27:05 GMT; path=/ PugT=1664454425; domain=pubmatic.com; secure; expires=Sat, 29-Oct-2022 12:27:05 GMT; path=/
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
cache-control: no-store, no-cache, private
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /dna HTTP/1.1 
Host: dnacdn.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=dZx_0l80M0RITmhlJTJCZkMwOUJGQlhaMUN2czVTbVY3MUhMQ1RadXdwJTJCZTdFVnBPQmpDUVFFVEt4NVYyJTJCaWczNjE0R2xG
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         178.250.0.157
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
date: Thu, 29 Sep 2022 12:27:04 GMT
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=ZgNk6F80M0RITmhlJTJCZkMwOUJGQlhaMUN2czVTbVY3MUhMQ1RadXdwJTJCZTdFVnBPQU5XMEcza3IlMkJWR3AlMkZta0IxNkJTYnU; expires=Tue, 24 Oct 2023 12:27:05 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 302721
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   129
Md5:    5332609076cbd38a85c96d5079b5802e
Sha1:   937bc77e24a11692a9001351a26358a1990f92a1
Sha256: 2235f4ff3b4a8ec6e62bc3ad3f4ad3ad58149cd53f5c9c9d6d681eb66b5222d0
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4360
Cache-Control: 'max-age=158059'
Date: Thu, 29 Sep 2022 12:27:05 GMT
Last-Modified: Thu, 29 Sep 2022 11:14:25 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         143.204.42.156
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 29 Sep 2022 12:27:05 GMT
Last-Modified: Thu, 29 Sep 2022 11:52:27 GMT
Server: ECS (nyb/1D1C)
X-Cache: Miss from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: iErIYOGhtFbEY0mKfP_kwOffLJlhyPLZmRHNwdbW6jIFNL41xo3EEg==
Age: 2078

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4384
Cache-Control: 'max-age=158059'
Date: Thu, 29 Sep 2022 12:27:06 GMT
Last-Modified: Thu, 29 Sep 2022 11:14:02 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 312

                                        
                                            GET /sync/v1?source_id=7658cb1d77a660882b48db06&source_user_id=k-LCiQU_2Qy_g3gn0nvQKptqlrka9gZTucakohnA HTTP/1.1 
Host: match.sharethrough.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         18.198.13.189
HTTP/2 204 No Content
                                        
date: Thu, 29 Sep 2022 12:27:06 GMT
X-Firefox-Spdy: h2

                                        
                                            GET /rum?cm_dsp_id=20&external_user_id=k-lITzjP2Qy_g3gn0nvQKptqlrka9M6itM89T5mg HTTP/1.1 
Host: r.casalemedia.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.18.19.126
HTTP/2 302 Found
                                        
date: Thu, 29 Sep 2022 12:27:06 GMT
content-length: 0
location: /rum?cm_dsp_id=20&external_user_id=k-lITzjP2Qy_g3gn0nvQKptqlrka9M6itM89T5mg&C=1
cf-ray: 7524b6026994b4ff-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
pragma: no-cache
set-cookie: CMID=YzWPGo-bmGL5qW47XVdclAAA; Path=/; Domain=casalemedia.com; Expires=Fri, 29 Sep 2023 12:27:06 GMT; Max-Age=31536000; Secure; SameSite=None CMPS=4345; Path=/; Domain=casalemedia.com; Expires=Wed, 28 Dec 2022 12:27:06 GMT; Max-Age=7776000; Secure; SameSite=None CMPRO=4345; Path=/; Domain=casalemedia.com; Expires=Wed, 28 Dec 2022 12:27:06 GMT; Max-Age=7776000; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SAsEs2eP15ld%2BMwp86uNcEB1fSXcw6c2UdNOhxYUFVhHRQUq4mY6uZ4wlRuaXFcUvPw2FAx4XoaYmbNcMAUdAx1gJRhMgmkut2rvBrpOU4Ok7X6PYEAefyLAMyMQih15wFzE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5702
Cache-Control: 'max-age=158059'
Date: Thu, 29 Sep 2022 12:27:06 GMT
Last-Modified: Thu, 29 Sep 2022 10:52:04 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    d8f74ec8403711442ed7ca495d83e154
Sha1:   e03909df888977eb5e8c3993566a4167eaa94d6e
Sha256: