POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
search
 23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "35BAAAE7B3CE3110EBB2B075881CFAB55ECF3EAB57D834283FD18AC691B41FA2"
Last-Modified: Tue, 20 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11534
Expires: Fri, 23 Sep 2022 08:05:33 GMT
Date: Fri, 23 Sep 2022 04:53:19 GMT
Connection: keep-alive
|
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
search
 143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 23 Sep 2022 04:14:07 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: q4NzsaVyHMEYpWrsTvkR7EmDurO6W3Bc2uFt2VyoNFTZQKwWYbnwPQ==
Age: 2352
|
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
search
143.204.55.110
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Fri, 23 Sep 2022 04:35:15 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Mj9ElRP7fpFFI_a4NFkRXxRDFiOHICKzs9CDsj5sR-oFnpYE1iRYgQ==
age: 1085
X-Firefox-Spdy: h2
|
GET /11e12742-05d2-4bad-8d1d-7a765b249953 HTTP/1.1
Host: track.rendan-compto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
|
search
 18.195.128.171
HTTP/1.1 302
Server: nginx
Date: Fri, 23 Sep 2022 04:53:19 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://42.winprizes542.digital/th1paff/thaff22n4.html?city=Oslo&model=Desktop&brand=Desktop&isp=Blix%20Group%20AS&browser=Firefox&cep=S0PbUq3RdC5aso9cVOp8MBB0OTX39uRVxgWB4g-NBH7FFi81wz_d_obI3E46PCq4Zi8AXLxdGSrVYBUk9UpoaCU3c8YiCdpW0hKgFIZXOYN9bpWmgJBzyHeEV2Z-scq4FzsKNsKF0UQjaqiyMsIvZ2UNYoaQwUGHFjvM9FJHDIqR3ThSiD_uoAjqruOxz-fOOGRes_6kXn8K6qaWM_uxNsSgHTyh-LbvXXkCKqA_9VsTI7JOuLy2bXvA2zxmOR9frzpgT0X7N0zAagx-UWvuOlhixgnyCkW1GkPlS9coxzz_Vp8POHLdjAOk5YX-12VnGGw0hGYGZFDFU5Js4ssZdmxWjv6508z4XG1ga09407Tti0ku7eYFRfr9CaZu667G&lptoken=164763b5919105579922
Pragma: no-cache
Set-Cookie: 11e12742-05d2-4bad-8d1d-7a765b249953-v4=N2MXEWCDNCqPuxCCljG9vwBNK5V2Ekn6JJSXespregs; Max-Age=86400; Expires=Sat, 24-Sep-2022 04:53:19 GMT; Domain=track.rendan-compto.com; Path=/; HttpOnly
cep-v4=6toVRo5nlB4Haqh2ixrpSA-zpgltL3GaCJCv7vL9G7uEqbjK8-EZQpurI4vusq3iGBTy1pwlnGr9V4Lfp8_SoPmq5oaxA248aoFcKZqc6zF9ZLnTLFT0dpKkbDrJ6AGeWCnDc_UcQame2WWF4LRpThsSb-kubukU-XT1lzxTjFQixG-Gnki-E6IMu7X0YrnDx3O1OETNAuzgSMgQfIb4f9YP3YPnpULF3jMIvKZ45C7de2EGJDePayjS7lpfAHgIRWi53T2bCh3qYGKEwF9d4A0Uv9KJjYrgzfAUGGV_48XJWQyRK7SnrqKqX4OIwBj0YzJRb-U-LLCTw5NT-0S1bm4MrD7FPVhOGQmOEy1Xaue7_ZHMikMWxvC52MT-G2jE; Max-Age=86400; Expires=Sat, 24-Sep-2022 04:53:19 GMT; Domain=track.rendan-compto.com; Path=/; HttpOnly
|
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
search
34.117.237.239
HTTP/2 200 OK
content-type: application/json
server: nginx
date: Fri, 23 Sep 2022 04:53:19 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
search
143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Fri, 23 Sep 2022 04:03:22 GMT
Expires: Fri, 23 Sep 2022 04:23:36 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Ol3WgPmkmMill2U5c6MDgO9w-NtYcDnmGqKsguIX753k7HouqS5bvA==
Age: 2997
|
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
search
 93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Age: 6149
Cache-Control: 'max-age=158059'
Date: Fri, 23 Sep 2022 04:53:20 GMT
Last-Modified: Fri, 23 Sep 2022 03:10:51 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
|
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: dcMq0U3fs3m8FI0qLuYI5g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
|
search
44.242.41.15
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: f8su6SIqoTqnrRbWFzeBFW60aXU=
|
GET /js/pub.min.js HTTP/1.1
Host: push.winprizes542.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
|
search
67.212.173.74
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Fri, 23 Sep 2022 04:53:20 GMT
content-length: 1482
last-modified: Fri, 09 Sep 2022 11:46:08 GMT
vary: Accept-Encoding
etag: "631b2780-5ca"
content-encoding: gzip
expires: Sat, 24 Sep 2022 04:53:20 GMT
cache-control: max-age=86400
strict-transport-security: max-age=31536000; includeSubdomains;
X-Firefox-Spdy: h2
|
GET /th1paff/menu_2x.png HTTP/1.1
Host: 42.winprizes542.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://42.winprizes542.digital/th1paff/clean.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
 45.76.148.82
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Fri, 23 Sep 2022 04:53:20 GMT
content-length: 124
last-modified: Mon, 25 Apr 2022 03:21:08 GMT
etag: "7c-5dd72113ed2b6"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
GET /th1paff/thaff22n4.html?city=Oslo&model=Desktop&brand=Desktop&isp=Blix%20Group%20AS&browser=Firefox&cep=S0PbUq3RdC5aso9cVOp8MBB0OTX39uRVxgWB4g-NBH7FFi81wz_d_obI3E46PCq4Zi8AXLxdGSrVYBUk9UpoaCU3c8YiCdpW0hKgFIZXOYN9bpWmgJBzyHeEV2Z-scq4FzsKNsKF0UQjaqiyMsIvZ2UNYoaQwUGHFjvM9FJHDIqR3ThSiD_uoAjqruOxz-fOOGRes_6kXn8K6qaWM_uxNsSgHTyh-LbvXXkCKqA_9VsTI7JOuLy2bXvA2zxmOR9frzpgT0X7N0zAagx-UWvuOlhixgnyCkW1GkPlS9coxzz_Vp8POHLdjAOk5YX-12VnGGw0hGYGZFDFU5Js4ssZdmxWjv6508z4XG1ga09407Tti0ku7eYFRfr9CaZu667G&lptoken=164763b5919105579922 HTTP/1.1
Host: 42.winprizes542.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
|
search
45.76.148.82
HTTP/2 200 OK
content-type: text/html
server: nginx
date: Fri, 23 Sep 2022 04:53:19 GMT
vary: Accept-Encoding
last-modified: Wed, 07 Sep 2022 11:47:46 GMT
etag: W/"424d-5e814e1a3843d"
content-encoding: br
X-Firefox-Spdy: h2
|
GET /th1paff/spin_prize2.png HTTP/1.1
Host: 42.winprizes542.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://42.winprizes542.digital/th1paff/clean.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
45.76.148.82
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Fri, 23 Sep 2022 04:53:20 GMT
content-length: 2814
last-modified: Mon, 25 Apr 2022 03:21:10 GMT
etag: "afe-5dd721150e3bc"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
GET /th1paff/action_icons_20px_2x.png HTTP/1.1
Host: 42.winprizes542.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://42.winprizes542.digital/th1paff/clean.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
45.76.148.82
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Fri, 23 Sep 2022 04:53:20 GMT
content-length: 1726
last-modified: Mon, 25 Apr 2022 03:21:06 GMT
etag: "6be-5dd72111551a8"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
GET /th1paff/comment_action_2x.png HTTP/1.1
Host: 42.winprizes542.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://42.winprizes542.digital/th1paff/clean.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
45.76.148.82
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Fri, 23 Sep 2022 04:53:20 GMT
content-length: 641
last-modified: Mon, 25 Apr 2022 03:21:06 GMT
etag: "281-5dd72111a04c9"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
GET /th1paff/prizewheel11.png HTTP/1.1
Host: 42.winprizes542.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
45.76.148.82
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Fri, 23 Sep 2022 04:53:20 GMT
content-length: 604427
last-modified: Mon, 25 Apr 2022 03:21:09 GMT
etag: "9390b-5dd721144cdf8"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
GET /th1paff/default.png HTTP/1.1
Host: 42.winprizes542.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
45.76.148.82
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Fri, 23 Sep 2022 04:53:20 GMT
content-length: 94803
last-modified: Mon, 25 Apr 2022 03:21:06 GMT
etag: "17253-5dd72111adf8a"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
GET /th1paff/like_user_1.jpg HTTP/1.1
Host: 42.winprizes542.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
45.76.148.82
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Fri, 23 Sep 2022 04:53:20 GMT
content-length: 1293
last-modified: Mon, 25 Apr 2022 03:21:08 GMT
etag: "50d-5dd72113bb5d5"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
GET /th1paff/like_user_2.jpg HTTP/1.1
Host: 42.winprizes542.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
45.76.148.82
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Fri, 23 Sep 2022 04:53:20 GMT
content-length: 1216
last-modified: Mon, 25 Apr 2022 03:21:08 GMT
etag: "4c0-5dd72113ca035"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
search
23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14940
Expires: Fri, 23 Sep 2022 09:02:21 GMT
Date: Fri, 23 Sep 2022 04:53:21 GMT
Connection: keep-alive
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
search
23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14940
Expires: Fri, 23 Sep 2022 09:02:21 GMT
Date: Fri, 23 Sep 2022 04:53:21 GMT
Connection: keep-alive
|
GET /th1paff/i11black.png HTTP/1.1
Host: 42.winprizes542.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
45.76.148.82
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Fri, 23 Sep 2022 04:53:20 GMT
content-length: 241130
last-modified: Mon, 25 Apr 2022 03:21:08 GMT
etag: "3adea-5dd721137ed13"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
GET /th1paff/th11.jpg HTTP/1.1
Host: 42.winprizes542.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
45.76.148.82
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Fri, 23 Sep 2022 04:53:20 GMT
content-length: 33011
last-modified: Mon, 25 Apr 2022 03:21:10 GMT
etag: "80f3-5dd7211541fdd"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc638445c-ca62-4366-ae6c-013d448cb1b2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
search
34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
content-length: 9082
x-amzn-requestid: a65fdf4b-7cff-4e93-bdd6-5d5b8cee92ae
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YfWGrF_BIAMFxXw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6322d090-141af6ee47817f451ba481b1;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 07:13:20 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: tf1nRx-_7X7yt5g61AHzoFFbru5BJj3POepcsMYhO4HzkjSPDd6vew==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:07:32 GMT
age: 24349
etag: "70d8758a0eb4bcad5c1973a2cce14e5dbd194f9c"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /th1paff/th12.jpg HTTP/1.1
Host: 42.winprizes542.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
45.76.148.82
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Fri, 23 Sep 2022 04:53:20 GMT
content-length: 5337
last-modified: Mon, 25 Apr 2022 03:21:10 GMT
etag: "14d9-5dd721155585d"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56968ed0-3207-4af0-8229-5f3698c6c55f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
search
34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
content-length: 5936
x-amzn-requestid: 39e79389-c158-4427-aae0-b1d0dc1d0377
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4VowElZoAMF2Ow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632ccfd1-2da28eb66f876af76158b090;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:12:49 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: -DSp0__jaBzizsfagTtIpwhkPqkvjS1L6T17J0OS5W0QhZww03ywpw==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:11:29 GMT
age: 24112
etag: "370d166426ad83fc04ccb6e300238d8cb6ab644a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /th1paff/th13.jpg HTTP/1.1
Host: 42.winprizes542.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
45.76.148.82
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Fri, 23 Sep 2022 04:53:20 GMT
content-length: 5238
last-modified: Mon, 25 Apr 2022 03:21:10 GMT
etag: "1476-5dd72115661fd"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
GET /th1paff/th14.jpg HTTP/1.1
Host: 42.winprizes542.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
45.76.148.82
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Fri, 23 Sep 2022 04:53:20 GMT
content-length: 5988
last-modified: Mon, 25 Apr 2022 03:21:10 GMT
etag: "1764-5dd721157aa1e"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
GET /th1paff/th16.jpg HTTP/1.1
Host: 42.winprizes542.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
45.76.148.82
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Fri, 23 Sep 2022 04:53:20 GMT
content-length: 4130
last-modified: Mon, 25 Apr 2022 03:21:10 GMT
etag: "1022-5dd72115a1b1f"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
GET /th1paff/th15.jpg HTTP/1.1
Host: 42.winprizes542.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
45.76.148.82
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Fri, 23 Sep 2022 04:53:20 GMT
content-length: 3856
last-modified: Mon, 25 Apr 2022 03:21:10 GMT
etag: "f10-5dd721158c35e"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
GET /th1paff/clip_footer_3.png HTTP/1.1
Host: 42.winprizes542.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
45.76.148.82
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Fri, 23 Sep 2022 04:53:20 GMT
content-length: 2460
last-modified: Mon, 25 Apr 2022 03:21:06 GMT
etag: "99c-5dd721117f189"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
GET /th1paff/th17.jpg HTTP/1.1
Host: 42.winprizes542.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
45.76.148.82
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Fri, 23 Sep 2022 04:53:20 GMT
content-length: 4513
last-modified: Mon, 25 Apr 2022 03:21:10 GMT
etag: "11a1-5dd72115b43ff"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
GET /th1paff/footer_right.png HTTP/1.1
Host: 42.winprizes542.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
45.76.148.82
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Fri, 23 Sep 2022 04:53:20 GMT
content-length: 4919
last-modified: Mon, 25 Apr 2022 03:21:06 GMT
etag: "1337-5dd72111cb44a"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
search
23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14940
Expires: Fri, 23 Sep 2022 09:02:21 GMT
Date: Fri, 23 Sep 2022 04:53:21 GMT
Connection: keep-alive
|
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62dd28d6-72d9-4f9c-8eb7-cc97b6279d6b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
search
34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
content-length: 9892
x-amzn-requestid: f1d435d6-ed01-46b6-8f36-615f07f8cac0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4VpWGamoAMFppA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632ccfd5-2c3726b022bd389a156532c4;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:12:53 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Ycp3xxTZqMDmPjKujrcqGRnuF0lKBH_avDsVSVASv_mU4tTkEfqoYw==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 04:26:02 GMT
age: 1639
etag: "977068c1cfdf8dfb64cbe8fb8d917ebc8e3e970e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F948809a9-98f3-49af-9568-833cc0cfb149.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
search
34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
content-length: 5533
x-amzn-requestid: af64386b-45ae-47bb-a6fd-f80e306495df
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YcCkMGVEIAMFfhg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63217e1a-7e417f28422324ed2ddc85da;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 07:09:14 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: fyCuR7eISu5Of0AcZBH5FOtHKRe-Nepnt52kqZtQm0tj1L7lAtGc8A==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 03:45:46 GMT
age: 4055
etag: "e95d1909750d36a9e426c170778985310cbfc4e4"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffccf6ade-04f7-4d15-943c-bde343725d94.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
search
34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
content-length: 8029
x-amzn-requestid: 2fc5c63d-5cef-42f4-a6d2-b55f51c57af6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4Y0tHjGoAMFcFw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632cd4ea-73f2f78a2d1ca8fc666d2571;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:34:34 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 7DX67a-HmEh76IorINvRU61AKtSiimdPnHFnYeR2OJezZJ1_mJq0MA==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 21:48:22 GMT
age: 25499
etag: "1d7f7b4cfdd7425213a21afdd1d5a5d8d11d0e54"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb77ad616-c829-40b4-8b70-2be46252d64c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
search
34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
content-length: 10279
x-amzn-requestid: 2ff2c324-51c5-484d-b049-3eacbdc1024a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yyj8THHdoAMF44g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632a804e-0f4da4ba2a84679b3fd297fc;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 03:09:02 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: z0uCxl-5L4gijwJsCjssxmgnJr4yhzvtiZdcX4wOXzgiuh8-Yj92vg==
via: 1.1 c21a0d27ceec21e266c9f962d0349438.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 06:00:26 GMT
age: 82375
etag: "60a83a1618ffae06e49ca3002bac1db9980dcfe8"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /favicon.ico HTTP/1.1
Host: 42.winprizes542.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
45.76.148.82
HTTP/2 404 Not Found
content-type: text/html; charset=iso-8859-1
server: nginx
date: Fri, 23 Sep 2022 04:53:21 GMT
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
--- Additional Info ---
|
GET /th1paff/clean.css HTTP/1.1
Host: 42.winprizes542.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
|
search
45.76.148.82
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Fri, 23 Sep 2022 04:53:20 GMT
vary: Accept-Encoding
last-modified: Mon, 25 Apr 2022 03:21:06 GMT
etag: W/"2b87-5dd721117c2a9"
content-encoding: br
X-Firefox-Spdy: h2
--- Additional Info ---
|