| seektolove.com/tds/ae |  35.157.235.109 | 302 Found | 0 B |
IP35.157.235.109:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /tds/ae HTTP/1.1
Host: seektolove.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Thu, 08 Dec 2022 22:42:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Access-Control-Allow-Origin: *
P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Accept-CH: UA, Platform, Model, Mobile, Arch
Set-Cookie: dci=4f8f2b3ce29e5e34377ad991b1b704f80009ab59; Max-Age=31536000; Domain=.seektolove.com; Path=/; Expires=Fri, 08 Dec 2023 22:42:16 GMT; Secure; SameSite=None
dm=fe450dd0d1dadc615429144d33241f42; Max-Age=432000; Path=/; Expires=Tue, 13 Dec 2022 22:42:16 GMT
Location: https://seektolove.com/res_route/fback?s1=&s2=&s3=&s4=&s5=&s6=&s7=&s8=&tds_ac_id=&tds_cid=&tds_campaign=&utm_source=&utm_campaign=&utm_term=&tds_layer=ATE&tds_reason_code=TECH_UNKNOWN_CAMPAIGN
|
|
| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashf2acd891dc6eb1f09f57a2b086791781 1e2088306501a61edcca1ade62c4d54f23b3b083 51148fed95cc00d60dc3640350f135b1b2763ff0e3cfbffc40f0948317894be9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "51148FED95CC00D60DC3640350F135B1B2763FF0E3CFBFFC40F0948317894BE9"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11759
Expires: Fri, 09 Dec 2022 01:58:15 GMT
Date: Thu, 08 Dec 2022 22:42:16 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashaea93551fa9deb76ae49a3b4019d64fe e3b8862057ebe839959228e42246d7b1807fc90c 7e210f03b140418085e94ec20c1d27d6ecf7a404cbd323e16476ae5ae95d6dac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7E210F03B140418085E94EC20C1D27D6ECF7A404CBD323E16476AE5AE95D6DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9768
Expires: Fri, 09 Dec 2022 01:25:04 GMT
Date: Thu, 08 Dec 2022 22:42:16 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashbf0c602d32b3c14606f22a86183b5e3c 6eabd8d83475eba731968abe1a05a8bfd272f160 6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 08 Dec 2022 22:08:14 GMT
content-type: application/json
age: 2042
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashc3470f9f0a4df8c1496b577fa9435ff6 f83b0226bb57ed0f3e1acdad61b940414add135d f542579e3a3577a646babde862282c2afda6ed784360a915143216100f7a3d91
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F542579E3A3577A646BABDE862282C2AFDA6ED784360A915143216100F7A3D91"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3914
Expires: Thu, 08 Dec 2022 23:47:30 GMT
Date: Thu, 08 Dec 2022 22:42:16 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash53341dea33f4f3d9b4966f80589f429a 20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: LspuYVlAIsfv3/06hoKXoIuxGXksEqpn92zKu7sXCi6qBz1LPq/f8nVlzjZsQqz+HOGeOi5ffcc=
x-amz-request-id: CD9VWRA3V6YCXFS9
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 08 Dec 2022 21:49:58 GMT
age: 3138
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 22:42:16 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.165 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.165:0
Hashd145bf8ac25018619beb251f65824343 37fe9c989b8baadc9bab34973cca03e62fb232ad 90c1fb78024ba671033dcf4a5f544da2b1bba7f01bcabe0aee34f089ce7c021a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Thu, 08 Dec 2022 22:42:16 GMT
Server: ECS (dcb/7EEA)
X-Cache: Miss from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 0mQA5AxxVKzA7kCenuQj71H02mqf9oivxmjZdKIG8WCXOHQCYy8Z8Q==
|
|
| seektolove.com/res_route/fback?s1=&s2=&s3=&s4=&s5=&s6=&s7=&s8=&tds_ac_id=&tds_cid=&tds_campaign=&utm_source=&utm_campaign=&utm_term=&tds_layer=ATE&tds_reason_code=TECH_UNKNOWN_CAMPAIGN | 18.157.166.88 | 302 Found | 350 B |
URL HTTP/2seektolove.com/res_route/fback?s1=&s2=&s3=&s4=&s5=&s6=&s7=&s8=&tds_ac_id=&tds_cid=&tds_campaign=&utm_source=&utm_campaign=&utm_term=&tds_layer=ATE&tds_reason_code=TECH_UNKNOWN_CAMPAIGN IP18.157.166.88:0
File typeHTML document, ASCII text, with very long lines (350), with no line terminators Hash67f0003da95624d577f7653bcd071724 f8a6d804d1064054ca52cfc703b8f2c8f547ed92 3fc0fbd5baebc9966029c9362a532698f7de479aa586a8b306826e9e952315be
GET /res_route/fback?s1=&s2=&s3=&s4=&s5=&s6=&s7=&s8=&tds_ac_id=&tds_cid=&tds_campaign=&utm_source=&utm_campaign=&utm_term=&tds_layer=ATE&tds_reason_code=TECH_UNKNOWN_CAMPAIGN HTTP/1.1
Host: seektolove.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Thu, 08 Dec 2022 22:42:17 GMT
content-type: text/html; charset=utf-8
content-length: 350
location: https://www.dirtytinder.club/c/8d2358ea43d0439d?s1=36_all_ng&s2=TECH_UNKNOWN_CAMPAIGN&s3=&s4=&s5=&s6=&s7=&s8=&utm_source=
server: nginx
x-powered-by: Express
access-control-allow-origin: *
vary: Accept, Accept-Encoding
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Last-Modified, ETag, Cache-Control, Alert, Content-Length, Pragma, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 08 Dec 2022 22:07:55 GMT
age: 2062
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.165 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.165:0
Hash583b143e7faeea5b81d0aa78d4eeb12a 995cd1af1958e882190976b00b458e546782f206 800581b40fcc444846884817a6095743cdf3fb5bfc84ed5b57f9fcfd24ceaa31
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=99025
Date: Thu, 08 Dec 2022 22:42:17 GMT
Etag: "6391481a-1d7"
Expires: Sat, 10 Dec 2022 02:12:42 GMT
Last-Modified: Thu, 08 Dec 2022 02:12:42 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: FhIF-nr0k_bg59uDeirxcmowvEl8KCsspnp57T2INNPfLNy18QBibw==
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashfd55f4aaaab6ec40bc7dc10252cd819a a72523f60be265a391fa9edc43e0a93418ad1fd0 bae354b3db14f4fd115311a0c412c9b5e436dd9e0a151afd8b9c18831dd8c2dd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4800
Cache-Control: max-age=128675
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 22:42:17 GMT
Etag: "6391a92c-1d7"
Expires: Sat, 10 Dec 2022 10:26:52 GMT
Last-Modified: Thu, 08 Dec 2022 09:06:52 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
|
|
| www.dirtytinder.club/c/8d2358ea43d0439d?s1=36_all_ng&s2=TECH_UNKNOWN_CAMPAIGN&s3=&s4=&s5=&s6=&s7=&s8=&utm_source= | 3.122.92.146 | 302 Found | 316 B |
URL HTTP/2www.dirtytinder.club/c/8d2358ea43d0439d?s1=36_all_ng&s2=TECH_UNKNOWN_CAMPAIGN&s3=&s4=&s5=&s6=&s7=&s8=&utm_source= IP3.122.92.146:0
File typeHTML document, ASCII text, with very long lines (314) Hash35cdf13f89e7ecc525bbd9b315fe252c 9c9c98ccb8b5b200e95de2246a4ada4f0b0b1db5 d5c0f5747128a04f28148bf3bc31eb155ed13a89ebbc74feae8940e5b448e6fd
GET /c/8d2358ea43d0439d?s1=36_all_ng&s2=TECH_UNKNOWN_CAMPAIGN&s3=&s4=&s5=&s6=&s7=&s8=&utm_source= HTTP/1.1
Host: www.dirtytinder.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Thu, 08 Dec 2022 22:42:17 GMT
content-type: text/html; charset=utf-8
content-length: 316
location: https://www.redir2fuck.com/redirect/index?type=script&to=aHR0cHM6Ly93d3cucmVkaXIyZnVjay5jb20=&data=aHR0cHM6Ly9yZ2pnd2UubWV0bGN1bG91c2RhdGVzLm5ldC9jL2UyOTA1ZjU1ZWMzYTU2OGI/czE9MTM4MDg5JnMyPTEzMTA5MDYmczM9JnM1PSZjbGlja19pZD1zb2lxYTYzOTI2ODQ5MDAwOWMxYWImajE9MSZqOT0x&action=action_tmp
server: nginx
set-cookie: unique_id=6392684900077e98; Path=/; Expires=Mon, 06 Feb 2023 22:42:17 GMT; Secure; SameSite=None
unique_id2=639268490007870b; Path=/; Expires=Wed, 08 Mar 2023 22:42:17 GMT; Secure; SameSite=None
impression=; Path=/; Expires=Thu, 08 Dec 2022 22:42:17 GMT; Secure; SameSite=None
tid=soiqa639268490009c1ab; Path=/; Expires=Fri, 12 Nov 2027 22:42:17 GMT; Secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 54.148.77.40 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP54.148.77.40:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: c1Ni9Ep/UXcavx7yt+gzhQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: oxecep7/i5f8wrrC9ZWTKMSba+E=
|
|
| ocsp.sectigo.com/ | 172.64.155.188 | 200 OK | 471 B |
IP172.64.155.188:0
Hash85438f043a7b745849e9707a4c4fcf5e 3a722802425cc0e90cb1a4e5300c04b337bf7f73 3745bf4fd194d410662cb43f6e71bbfd422e1ef56036695ea3f14495ad2284d2
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 22:42:18 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 08 Dec 2022 11:00:35 GMT
Expires: Thu, 15 Dec 2022 11:00:34 GMT
Etag: "3a722802425cc0e90cb1a4e5300c04b337bf7f73"
Cache-Control: max-age=562095,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7769036e8f8cb503-OSL
|
|
| www.redir2fuck.com/redirect/index?type=script&to=aHR0cHM6Ly93d3cucmVkaXIyZnVjay5jb20=&data=aHR0cHM6Ly9yZ2pnd2UubWV0bGN1bG91c2RhdGVzLm5ldC9jL2UyOTA1ZjU1ZWMzYTU2OGI/czE9MTM4MDg5JnMyPTEzMTA5MDYmczM9JnM1PSZjbGlja19pZD1zb2lxYTYzOTI2ODQ5MDAwOWMxYWImajE9MSZqOT0x&action=action_tmp |  52.19.101.114 | 200 OK | 295 B |
URL HTTP/2www.redir2fuck.com/redirect/index?type=script&to=aHR0cHM6Ly93d3cucmVkaXIyZnVjay5jb20=&data=aHR0cHM6Ly9yZ2pnd2UubWV0bGN1bG91c2RhdGVzLm5ldC9jL2UyOTA1ZjU1ZWMzYTU2OGI/czE9MTM4MDg5JnMyPTEzMTA5MDYmczM9JnM1PSZjbGlja19pZD1zb2lxYTYzOTI2ODQ5MDAwOWMxYWImajE9MSZqOT0x&action=action_tmp IP52.19.101.114:0
File typeHTML document, ASCII text, with no line terminators Hash5d92431cb431bbf42edc4bbdfb1ebc7f 07299349b7c38ff3129f1c53cec1cf749092dd57 07a8b9fb2b5924b9b88b8dd82780926fc51390246edd67775567763b6e44322e
GET /redirect/index?type=script&to=aHR0cHM6Ly93d3cucmVkaXIyZnVjay5jb20=&data=aHR0cHM6Ly9yZ2pnd2UubWV0bGN1bG91c2RhdGVzLm5ldC9jL2UyOTA1ZjU1ZWMzYTU2OGI/czE9MTM4MDg5JnMyPTEzMTA5MDYmczM9JnM1PSZjbGlja19pZD1zb2lxYTYzOTI2ODQ5MDAwOWMxYWImajE9MSZqOT0x&action=action_tmp HTTP/1.1
Host: www.redir2fuck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 22:42:18 GMT
content-type: text/html; charset=utf-8
content-length: 295
X-Firefox-Spdy: h2
|
|
| www.redir2fuck.com/redirect/index?type=script&to=aHR0cHM6Ly93d3cucmVkaXIyZnVjay5jb20=&data=aHR0cHM6Ly9yZ2pnd2UubWV0bGN1bG91c2RhdGVzLm5ldC9jL2UyOTA1ZjU1ZWMzYTU2OGI/czE9MTM4MDg5JnMyPTEzMTA5MDYmczM9JnM1PSZjbGlja19pZD1zb2lxYTYzOTI2ODQ5MDAwOWMxYWImajE9MSZqOT0x&action=action_final | 52.19.101.114 | 200 OK | 161 B |
URL HTTP/2www.redir2fuck.com/redirect/index?type=script&to=aHR0cHM6Ly93d3cucmVkaXIyZnVjay5jb20=&data=aHR0cHM6Ly9yZ2pnd2UubWV0bGN1bG91c2RhdGVzLm5ldC9jL2UyOTA1ZjU1ZWMzYTU2OGI/czE9MTM4MDg5JnMyPTEzMTA5MDYmczM9JnM1PSZjbGlja19pZD1zb2lxYTYzOTI2ODQ5MDAwOWMxYWImajE9MSZqOT0x&action=action_final IP52.19.101.114:0
File typeHTML document, ASCII text, with no line terminators Hashb512862a252e3b839900991625986cb4 0a250270c3f78f81e2d7101ddcb32a5e92b30f3e 521957593f66d6378ef71077aaaa3bfdd8701a22cb393731016c7091e8277550
GET /redirect/index?type=script&to=aHR0cHM6Ly93d3cucmVkaXIyZnVjay5jb20=&data=aHR0cHM6Ly9yZ2pnd2UubWV0bGN1bG91c2RhdGVzLm5ldC9jL2UyOTA1ZjU1ZWMzYTU2OGI/czE9MTM4MDg5JnMyPTEzMTA5MDYmczM9JnM1PSZjbGlja19pZD1zb2lxYTYzOTI2ODQ5MDAwOWMxYWImajE9MSZqOT0x&action=action_final HTTP/1.1
Host: www.redir2fuck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.redir2fuck.com/redirect/index?type=script&to=aHR0cHM6Ly93d3cucmVkaXIyZnVjay5jb20=&data=aHR0cHM6Ly9yZ2pnd2UubWV0bGN1bG91c2RhdGVzLm5ldC9jL2UyOTA1ZjU1ZWMzYTU2OGI/czE9MTM4MDg5JnMyPTEzMTA5MDYmczM9JnM1PSZjbGlja19pZD1zb2lxYTYzOTI2ODQ5MDAwOWMxYWImajE9MSZqOT0x&action=action_tmp
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 22:42:18 GMT
content-type: text/html; charset=utf-8
content-length: 161
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash7b8c1870f03a90aac6370fc69516f95f 1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8131
Expires: Fri, 09 Dec 2022 00:57:49 GMT
Date: Thu, 08 Dec 2022 22:42:18 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash7b8c1870f03a90aac6370fc69516f95f 1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8131
Expires: Fri, 09 Dec 2022 00:57:49 GMT
Date: Thu, 08 Dec 2022 22:42:18 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash7b8c1870f03a90aac6370fc69516f95f 1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8131
Expires: Fri, 09 Dec 2022 00:57:49 GMT
Date: Thu, 08 Dec 2022 22:42:18 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F345b9f5c-0162-4ba2-800e-223d402d28bf.jpeg | 34.120.237.76 | 200 OK | 3.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F345b9f5c-0162-4ba2-800e-223d402d28bf.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasha1be0ae00ba0c6009ac14c8df38b8ad0 33edd1469c54a08e3c4cb0003b87b225eba55b3f ab70390c49c5bb3dd7e97ba008c01213a59b3bc271aa8a350ab35ff422d8b3fd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F345b9f5c-0162-4ba2-800e-223d402d28bf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3030
x-amzn-requestid: c5e5e4a1-bc45-42e8-a021-9c8f99e22556
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czUqCFWBoAMFiqg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639134a6-5cc9bdf360f2bfb54e16b448;Sampled=0
x-amzn-remapped-date: Thu, 08 Dec 2022 00:49:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: x5FUJ8Cbw9B9BWcHlencYw564Xri5cgoVXkQ2MbhEjYq7Y5v2P0IxQ==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 14:51:55 GMT
etag: "33edd1469c54a08e3c4cb0003b87b225eba55b3f"
content-type: image/jpeg
age: 28223
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash7b8c1870f03a90aac6370fc69516f95f 1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8131
Expires: Fri, 09 Dec 2022 00:57:49 GMT
Date: Thu, 08 Dec 2022 22:42:18 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f3c5738-c186-4a1f-a431-33143797bcd5.jpeg | 34.120.237.76 | 200 OK | 8.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f3c5738-c186-4a1f-a431-33143797bcd5.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash659b6eb1f1c430e2780758c7787b9a23 4792b0893827924e84cc51450012407717da4d2b f14393b6bcc036fa9ed61114944ebb25192adfec72c09807eb7948a88c790d69
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f3c5738-c186-4a1f-a431-33143797bcd5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8345
x-amzn-requestid: 4e42c335-cc27-41bc-8d5c-cbe3dcc1f623
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cpwRBF_gIAMFdCA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d60d3-254d38575d76726a4462c66f;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 03:09:07 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Z2JMjvOva19O3uj7la6UmjCpwleEyo3y2IfRCp4qp5iuob0AYN9Mng==
via: 1.1 b4085435efbe95a420f374958bd145be.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 12:37:33 GMT
age: 36285
etag: "4792b0893827924e84cc51450012407717da4d2b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9c8ed2c5-144c-4fce-bb57-7d9918c1ab31.jpeg | 34.120.237.76 | 200 OK | 4.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9c8ed2c5-144c-4fce-bb57-7d9918c1ab31.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash44ed82780732ed682ee46b2df52b3ca2 0b3fe77e142178561b28c93b94b1aea2e1c395a5 383da5ca2927044c69ff1d10b630fe3439ca48f1845031ef1b6607fcd054c54b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9c8ed2c5-144c-4fce-bb57-7d9918c1ab31.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4049
x-amzn-requestid: dbde9a26-7609-43b7-a9a5-6e4d2f559989
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cpwRFHIooAMFVmw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d60d3-5f5131b8315a458d18cdc70f;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 03:09:07 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 6_KiAcPwtB6XJyanlunX6qvT9jdlEgMPMdGHM10HmJwQ2Ue_pDsCXg==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 12:37:33 GMT
age: 36285
etag: "0b3fe77e142178561b28c93b94b1aea2e1c395a5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f25ad59-b8ed-49ea-9611-21f63c20c8fb.jpeg | 34.120.237.76 | 200 OK | 8.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f25ad59-b8ed-49ea-9611-21f63c20c8fb.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasheb00a2a503a690cee3e4dd729b5bc9bd cfb1e5bcab2148a777889680e6e36b9d7e8917ec 7e4583ae78ab597639f53669ac2d67d1ebd26be3278c2fc3fc95af934178c116
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f25ad59-b8ed-49ea-9611-21f63c20c8fb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7960
x-amzn-requestid: beadd240-39d0-407d-a890-6a095657cac3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctEd8HC0oAMFUag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638eb459-44d4f63c62f58684782ef14a;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 03:17:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kTEbkncBnAJmQE8cdAqvDtejiwaetpRBsVcpLXy1h52lO4iUkzmOGA==
via: 1.1 74aa91fe819001bcedd882694f52b436.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 16:28:48 GMT
age: 22410
etag: "cfb1e5bcab2148a777889680e6e36b9d7e8917ec"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg | 34.120.237.76 | 200 OK | 5.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashfba9a3854df65740512f96efe7442e58 8fbff7725c842d70e047c635a725723a9dc9c55a 6e639298ebc82343cee9267d2910d15735af55f910e2c3de9218266b7c6fffc9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5188
x-amzn-requestid: afb8cbd2-3674-4dac-9cd9-9ff83618ac0a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ck2-5G9joAMFlPA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638b6b92-2979ff216b9028aa70baef8b;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 15:30:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7Dp35PIr_WYUI1bBa21AvmCMEPi0d3jnhuS8eEk3Q3CXRcGWAnkD8g==
via: 1.1 8ae6af4d17aae7471e5fe2792eb6abcc.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 17:01:04 GMT
age: 20474
etag: "8fbff7725c842d70e047c635a725723a9dc9c55a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0c11050-5c0c-4d59-80cd-f72cf377a852.jpeg | 34.120.237.76 | 200 OK | 7.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0c11050-5c0c-4d59-80cd-f72cf377a852.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb1a13d12c326848d5b7adeb2562a35a5 d795c519ea637a213aab1d80daaf44ce5ad19069 f7b99c93b99268e1b2fa438d493cf23cd75a98833710ddd22b5278a76e9f019a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0c11050-5c0c-4d59-80cd-f72cf377a852.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7919
x-amzn-requestid: 05f49b7c-7c76-4df4-8258-c270078d8fe9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctl_TH-KoAMFkWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638ee9fb-1971e1e0359763a96b4d320b;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 07:06:35 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: BEsmH1BkWu_c_-qHStWD1CT1Lx1AZVcw9tnLcoGZCmnjwFWdtB7BRA==
via: 1.1 d0387b833e3ca8cb748a1296b4b4bf2a.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 21:02:50 GMT
age: 5968
etag: "d795c519ea637a213aab1d80daaf44ce5ad19069"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash0fa34790ebc524bf12d414f68a651b1d fbc638eef2b3dd0364233c924bd6ff05f85c0ee6 0d0be97f4be350f6368bb7d1974fe4b9e826d41260461c9288ae7bb17c533194
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0D0BE97F4BE350F6368BB7D1974FE4B9E826D41260461C9288AE7BB17C533194"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21588
Expires: Fri, 09 Dec 2022 04:42:07 GMT
Date: Thu, 08 Dec 2022 22:42:19 GMT
Connection: keep-alive
|
|
| cdn-dimi.akamaized.net/landings/212225/1624025125/css/css2.css?1624025125 |  184.31.15.107 | 200 OK | 478 B |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/212225/1624025125/css/css2.css?1624025125 IP184.31.15.107:0 ASN#20940 Akamai International B.V.
Hash71422cc0c98c0f0d038113e2c0f4fc74 8cb475413b46c087e604adcbf6e0dcd7b3e4f1ae edd01a5eba971514bdb2bdac264929d7cc99b67d7b2d3999bb4f57c82a1a986b
GET /landings/212225/1624025125/css/css2.css?1624025125 HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rgjgwe.metlculousdates.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: +P7HmwoyklT5lBsWZZv8dRfONDR5sFbboGSfNKeGGuNgxzrvRIj5nqW9OadQJ+qU+0ZavuZXcfU=
x-amz-request-id: 3SRH1EH4G0K4GEFB
Last-Modified: Fri, 18 Jun 2021 14:05:28 GMT
ETag: "71422cc0c98c0f0d038113e2c0f4fc74"
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 478
Date: Thu, 08 Dec 2022 22:42:19 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/212225/1624025125/css/main.css?1624025125 | 184.31.15.107 | 200 OK | 1.4 kB |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/212225/1624025125/css/main.css?1624025125 IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typeassembler source, ASCII text Hash8df101b94d92ec02934a35a76b709de6 d76437a536afe0430c9d6a765841de9eeb50a448 c8aff816800155d1460ec0dbce2c4ea158df479388e1f276e06514ab28d2bc2b
GET /landings/212225/1624025125/css/main.css?1624025125 HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rgjgwe.metlculousdates.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: dGUFAMVBkOQ2M09fPhZ1Ma8w2Xy1XvKCfgRZ8AuwChumab2SGLxJ/MaaDA5FdXypzEIBQ1OFg34=
x-amz-request-id: 3SRVVYPBVS1113MX
Last-Modified: Fri, 18 Jun 2021 14:05:28 GMT
ETag: "e8ad0d5112ebc38ccffa906a88480571"
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Thu, 08 Dec 2022 22:42:19 GMT
Content-Length: 1438
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/212225/1624025125/js/jquery.validate.min.js?1624025125 | 184.31.15.107 | 200 OK | 7.8 kB |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/212225/1624025125/js/jquery.validate.min.js?1624025125 IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typeUnicode text, UTF-8 text, with very long lines (24228) Hashf808399407c6ac496fe830d5deacb05f 151039ee8631ce8ff989c5cf795c2feba950a499 21e11160c5ba11e65a1c97b0306a9f5dec06c8fd3d4a7d69dd0a80e263577958
GET /landings/212225/1624025125/js/jquery.validate.min.js?1624025125 HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rgjgwe.metlculousdates.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: x0n88vy6R42RaV/564yya+rciGgXVcQvshv7BBD+QqFLxydxKP4YN3T5glF0YCxYX1XDiujp19w=
x-amz-request-id: 76SPH51FAFYCDKPA
Last-Modified: Fri, 18 Jun 2021 14:05:28 GMT
ETag: "23d73c6bd6cbea8f06d0cc227896a827"
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Thu, 08 Dec 2022 22:42:19 GMT
Content-Length: 7815
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/212225/1624025125/js/trls.js?1624025125 | 184.31.15.107 | 200 OK | 13 kB |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/212225/1624025125/js/trls.js?1624025125 IP184.31.15.107:0 ASN#20940 Akamai International B.V.
Hash7c49093e0da4cde7c10e6eaeb5db33e8 8335e795d1fa1d5a59aad88a9f23a8bb43a09986 95390457c7424017fadc461ca9ab9ad441f3fc2f96fb70e7b69ea333cf460a55
GET /landings/212225/1624025125/js/trls.js?1624025125 HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rgjgwe.metlculousdates.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: bEDMW+4uYXQPwp93E6hYipGoikvYukxCW1jf3CF2FDbC2bufMmZoIbFJeitROyv5M+AHZbFBmeE=
x-amz-request-id: 76SN3BPGWTYB3T7P
Last-Modified: Fri, 18 Jun 2021 14:05:28 GMT
ETag: "1f2a63d62e50fb3ea9b5bdfd69c66411"
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Thu, 08 Dec 2022 22:42:19 GMT
Content-Length: 12875
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/212225/1624025125/js/script.js?1624025125 | 184.31.15.107 | 200 OK | 145 B |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/212225/1624025125/js/script.js?1624025125 IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typeASCII text, with CRLF line terminators Hash7088a812e48fb5ed8602225eddbac48f 4ab069794875538586cdbb1a924333a037e630d1 ee31e979a2410b8968bbfa00dbc3a6f2fb870562da1ac4315054da1a6c14eba0
GET /landings/212225/1624025125/js/script.js?1624025125 HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rgjgwe.metlculousdates.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 9v4LI0Nf/QJJk1CdEv3RcXP+gaGX0x+GvEWprsUgwN9MHr/m5kCGlZEi1P6bQ42YQFXAMUEd4PA=
x-amz-request-id: 76SV05V07173EPSM
Last-Modified: Fri, 18 Jun 2021 14:05:28 GMT
ETag: "7088a812e48fb5ed8602225eddbac48f"
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Content-Length: 145
Date: Thu, 08 Dec 2022 22:42:19 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/212225/1624025125/js/jquery-2.2.4.min.js?1624025125 | 184.31.15.107 | 200 OK | 36 kB |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/212225/1624025125/js/jquery-2.2.4.min.js?1624025125 IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typeASCII text, with very long lines (530), with CRLF line terminators Hash378507f30ab981ba7c512e07d134caaf dd17d6f540df83bab63921deda1b9462a5047c00 97d25af867afe95682e66a2d01f9c5e2f085df402403671e6ba885f49a1e03be
GET /landings/212225/1624025125/js/jquery-2.2.4.min.js?1624025125 HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rgjgwe.metlculousdates.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: iGCeVFed+qRt5/WMxWkRwGf/gH1XJWT9G/wuX8FMV9kjQEmQ+TKNro5xNmWT1F7vjK1rbeV2n2g=
x-amz-request-id: 3SRP1WXFV252M78E
Last-Modified: Fri, 18 Jun 2021 14:05:28 GMT
ETag: "61a04f254179208c931ebf40f4cfddf5"
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Thu, 08 Dec 2022 22:42:19 GMT
Content-Length: 36023
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/212225/1624025125/images/btn.png | 184.31.15.107 | 200 OK | 876 B |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/212225/1624025125/images/btn.png IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typePNG image data, 55 x 55, 8-bit colormap, non-interlaced\012- data Hashc90d93be7b9e2e55e87b9d58d3589721 951a4e7d04ec68e711196b3c9db68bce699f7f89 75941932fdfac80826ee9f5516cd038ed9233b6e377c8daf3440a90aa4b0ccc3
GET /landings/212225/1624025125/images/btn.png HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rgjgwe.metlculousdates.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: qS2r5FFQMtAGAH23af0BXqmzGu3JWD1tTH4mc4+4fujcUy6S3Dms9YqNpNpupX0Q58dps+7UyRQ=
x-amz-request-id: G2ZEVQSE2KW3W5TF
Last-Modified: Fri, 18 Jun 2021 14:05:27 GMT
ETag: "c90d93be7b9e2e55e87b9d58d3589721"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 876
Date: Thu, 08 Dec 2022 22:42:19 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| rgjgwe.metlculousdates.net/c/e2905f55ec3a568b?s1=138089&s2=1310906&s3=&s5=&click_id=soiqa639268490009c1ab&j1=1&j9=1 | 63.32.216.166 | 200 OK | 47 kB |
URL HTTP/2rgjgwe.metlculousdates.net/c/e2905f55ec3a568b?s1=138089&s2=1310906&s3=&s5=&click_id=soiqa639268490009c1ab&j1=1&j9=1 IP63.32.216.166:0
Hashdc209cea7f3ed9ca0a579dbc8e209cc7 a316b3fa509417fb9cf04006b16b2a32ec36d408 1ef1178a028dac7c2a8c91d70ffad02e9e85e2d6382b19833e258bb931a2f791
GET /c/e2905f55ec3a568b?s1=138089&s2=1310906&s3=&s5=&click_id=soiqa639268490009c1ab&j1=1&j9=1 HTTP/1.1
Host: rgjgwe.metlculousdates.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.redir2fuck.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 22:42:19 GMT
content-type: text/html; charset=utf-8
set-cookie: unique_id=6392684b000c1b3b; Path=/; Expires=Mon, 06 Feb 2023 22:42:19 GMT; Secure; SameSite=None
unique_id2=6392684b000de400; Path=/; Expires=Wed, 08 Mar 2023 22:42:19 GMT; Secure; SameSite=None
6392684b000de400_c=1; Path=/; Expires=Wed, 08 Mar 2023 22:42:19 GMT; Secure; SameSite=None
ref_token=138089; Path=/; Expires=Sat, 07 Jan 2023 22:42:19 GMT; Secure; SameSite=None
impression=; Path=/; Expires=Thu, 08 Dec 2022 22:42:19 GMT; Secure; SameSite=None
6392684b000de400_sl=[212225]; Path=/; Expires=Thu, 22 Dec 2022 22:42:19 GMT; Secure; SameSite=None
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn-dimi.akamaized.net/landings/212225/1624025125/images/camera.png | 184.31.15.107 | 200 OK | 521 B |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/212225/1624025125/images/camera.png IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typePNG image data, 29 x 22, 8-bit colormap, non-interlaced\012- data Hashe6fc25af3843556766acc03739200472 6aee49dbf2166cb5b0542fbe491d1b26da3f9e2c 8a5920605debc2378688b502b33f55753fc099c17639d56c652981fc0442e57f
GET /landings/212225/1624025125/images/camera.png HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rgjgwe.metlculousdates.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: +6sgPo4IwWDjLEpOourHrMnv1aGCfMHsbFzaIuTWVIa/h1JSb2utLt52SYBYiwI1colyaojeSqs=
x-amz-request-id: VSQJ2R9W0GQP46WC
Last-Modified: Fri, 18 Jun 2021 14:05:27 GMT
ETag: "e6fc25af3843556766acc03739200472"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 521
Date: Thu, 08 Dec 2022 22:42:19 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/212225/1624025125/images/filter.png | 184.31.15.107 | 200 OK | 621 B |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/212225/1624025125/images/filter.png IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typePNG image data, 38 x 33, 8-bit colormap, non-interlaced\012- data Hash9c15c9a0a02ff49660d3c31f5c190b99 54c7501b9dfb865b87cd496e692779609bdc03bf ad282a1099717f016062356106530897020924d9e92f613a21f2c305059184f8
GET /landings/212225/1624025125/images/filter.png HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rgjgwe.metlculousdates.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 6eh5do1b8hgTeOza38mZfW8wgPNOd77OHhj5QOvCkmuRXAHd3sggs6UfTfbV6M2Kt838nKJuYCM=
x-amz-request-id: G2Z4PE5JF8DVJFA5
Last-Modified: Fri, 18 Jun 2021 14:05:27 GMT
ETag: "9c15c9a0a02ff49660d3c31f5c190b99"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 621
Date: Thu, 08 Dec 2022 22:42:19 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/212225/1624025125/css/css2.css | 184.31.15.107 | 200 OK | 478 B |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/212225/1624025125/css/css2.css IP184.31.15.107:0 ASN#20940 Akamai International B.V.
Hash71422cc0c98c0f0d038113e2c0f4fc74 8cb475413b46c087e604adcbf6e0dcd7b3e4f1ae edd01a5eba971514bdb2bdac264929d7cc99b67d7b2d3999bb4f57c82a1a986b
GET /landings/212225/1624025125/css/css2.css HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn-dimi.akamaized.net/landings/212225/1624025125/css/main.css?1624025125
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
x-amz-id-2: +P7HmwoyklT5lBsWZZv8dRfONDR5sFbboGSfNKeGGuNgxzrvRIj5nqW9OadQJ+qU+0ZavuZXcfU=
x-amz-request-id: 3SRH1EH4G0K4GEFB
Last-Modified: Fri, 18 Jun 2021 14:05:28 GMT
ETag: "71422cc0c98c0f0d038113e2c0f4fc74"
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 478
Date: Thu, 08 Dec 2022 22:42:19 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/212225/1624025125/images/KFOmCnqEu92Fr1Me5Q.ttf | 184.31.15.107 | 200 OK | 55 kB |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/212225/1624025125/images/KFOmCnqEu92Fr1Me5Q.ttf IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typeTrueType Font data, 18 tables, 1st "GDEF"\012- data Hash7a9a92b4470855ced48acaf1b401cf44 cdba978af646cad0f171670bd036577c453c702b 92d6e55bbd776b87a18f48d9fd240bf0e029007cb5e9c69c4537f3326aeceb1e
GET /landings/212225/1624025125/images/KFOmCnqEu92Fr1Me5Q.ttf HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rgjgwe.metlculousdates.net
Connection: keep-alive
Referer: https://cdn-dimi.akamaized.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: ikXxGD3V55TtP6jGVtUGbyHqUiHUqCgb3+gelfaqLxGkMURzm5+ptdLgvufLXjgWPv6+1e11TDc=
x-amz-request-id: G2Z2ZQSPT2KV8EE2
Last-Modified: Fri, 18 Jun 2021 14:05:27 GMT
ETag: "0d984acaec916c225c012f27d0c56a91"
Accept-Ranges: bytes
Content-Type: application/x-font-ttf
Server: AmazonS3
Content-Length: 131916
Date: Thu, 08 Dec 2022 22:42:19 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash0e9eef4ed41ef94e9ea175ad243e294e b6f83e508270413dabe55e2884b5409ca7978e24 0e741ca8d92717128bca7aed937bca43519a8d20a9d3dd8670da656ad51a695e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 22:42:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash0e9eef4ed41ef94e9ea175ad243e294e b6f83e508270413dabe55e2884b5409ca7978e24 0e741ca8d92717128bca7aed937bca43519a8d20a9d3dd8670da656ad51a695e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 22:42:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| cdn-dimi.akamaized.net/landings/212225/1624025125/images/KFOlCnqEu92Fr1MmWUlvAw.ttf | 184.31.15.107 | 200 OK | 65 kB |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/212225/1624025125/images/KFOlCnqEu92Fr1MmWUlvAw.ttf IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typeTrueType Font data, 18 tables, 1st "GDEF"\012- data Hashe9827a8decf0d05202cc8057bc518428 01d1b867fb81dabb9d94a8c2928bdb2b066fc2bb 8fa5fb8ae3079bbfcba6ae2625e419aeeb0a58155dc30e4308f5d3d4586ea893
GET /landings/212225/1624025125/images/KFOlCnqEu92Fr1MmWUlvAw.ttf HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rgjgwe.metlculousdates.net
Connection: keep-alive
Referer: https://cdn-dimi.akamaized.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: JjY7K3ACjyfHw8f0c40KEvr8Bw+EmjghFjhoCYFuJQ6seGXl896FqCkW90D6EPjHiI4hbmKrOb8=
x-amz-request-id: G2Z6J4CSDXVWPY0W
Last-Modified: Fri, 18 Jun 2021 14:05:27 GMT
ETag: "74bc6165dc68714ccaa88f5c64656b1c"
Accept-Ranges: bytes
Content-Type: application/x-font-ttf
Server: AmazonS3
Content-Length: 131008
Date: Thu, 08 Dec 2022 22:42:19 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/212225/1624025125/images/KFOlCnqEu92Fr1MmWUlvAw.ttf | 184.31.15.107 | 206 Partial Content | 24 kB |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/212225/1624025125/images/KFOlCnqEu92Fr1MmWUlvAw.ttf IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typePDP-11 executable - version 15\012- data Hashd78f54043074a6a5618877489776bc14 6c21c6d4f6358b88d1f51726d88c984026ea6fa8 fb048aa0f7a71279e528b58b11f2532e677417c7bf0bde2acd3676f98acd93a6
GET /landings/212225/1624025125/images/KFOlCnqEu92Fr1MmWUlvAw.ttf HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rgjgwe.metlculousdates.net
Connection: keep-alive
Referer: https://cdn-dimi.akamaized.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Range: bytes=51712-
If-Range: "74bc6165dc68714ccaa88f5c64656b1c"
HTTP/1.1 206 Partial Content
x-amz-id-2: JjY7K3ACjyfHw8f0c40KEvr8Bw+EmjghFjhoCYFuJQ6seGXl896FqCkW90D6EPjHiI4hbmKrOb8=
x-amz-request-id: G2Z6J4CSDXVWPY0W
Last-Modified: Fri, 18 Jun 2021 14:05:27 GMT
ETag: "74bc6165dc68714ccaa88f5c64656b1c"
Accept-Ranges: bytes
Content-Type: application/x-font-ttf
Server: AmazonS3
Date: Thu, 08 Dec 2022 22:42:19 GMT
Content-Range: bytes 51712-131007/131008
Content-Length: 79296
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/212225/1624025125/images/bg.mp4 | 184.31.15.107 | 206 Partial Content | 52 kB |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/212225/1624025125/images/bg.mp4 IP184.31.15.107:0 ASN#20940 Akamai International B.V.
File typeISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data Hashccdc1c570f080c29c026ee0225be6af3 946986ab29ec57c6e11eb776cdf09c101a527ab8 99317d1f172d73c0971e3367955f95c5dd77f1fd19a82974e96612b265d89ffd
GET /landings/212225/1624025125/images/bg.mp4 HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://rgjgwe.metlculousdates.net/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 206 Partial Content
x-amz-id-2: PYCeh/fcpOLFMxwp+WjJrLuyZWn0W+QEBQxTdDCG8v368APnG/m0oked+OngdOIureCe7kW4K0g=
x-amz-request-id: YNQGNQF9RNKBV33G
Last-Modified: Fri, 18 Jun 2021 14:05:27 GMT
ETag: "cc4714e8b4e4c5fec9b05bafaeb508d5"
Accept-Ranges: bytes
Content-Type: video/mp4
Server: AmazonS3
Date: Thu, 08 Dec 2022 22:42:19 GMT
Content-Range: bytes 0-3823843/3823844
Content-Length: 3823844
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-dimi.akamaized.net/landings/212225/1624025125/images/KFOmCnqEu92Fr1Me5Q.ttf | 184.31.15.107 | 206 Partial Content | 24 kB |
URL HTTP/1.1cdn-dimi.akamaized.net/landings/212225/1624025125/images/KFOmCnqEu92Fr1Me5Q.ttf IP184.31.15.107:0 ASN#20940 Akamai International B.V.
Hashbeedc6f39a843724c0ea9b44df5a65a7 cc03e0f350ac83b902f28731a46681a5a2a99b22 8cc3cd79daefae5e6fa2a52600a0a64895f4ced5fa036ae6446cae66a100cace
GET /landings/212225/1624025125/images/KFOmCnqEu92Fr1Me5Q.ttf HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rgjgwe.metlculousdates.net
Connection: keep-alive
Referer: https://cdn-dimi.akamaized.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Range: bytes=50572-
If-Range: "0d984acaec916c225c012f27d0c56a91"
HTTP/1.1 206 Partial Content
x-amz-id-2: ikXxGD3V55TtP6jGVtUGbyHqUiHUqCgb3+gelfaqLxGkMURzm5+ptdLgvufLXjgWPv6+1e11TDc=
x-amz-request-id: G2Z2ZQSPT2KV8EE2
Last-Modified: Fri, 18 Jun 2021 14:05:27 GMT
ETag: "0d984acaec916c225c012f27d0c56a91"
Accept-Ranges: bytes
Content-Type: application/x-font-ttf
Server: AmazonS3
Date: Thu, 08 Dec 2022 22:42:19 GMT
Content-Range: bytes 50572-131915/131916
Content-Length: 81344
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| rgjgwe.metlculousdates.net/js/pushjs/1.0.0/subscriber.js | 63.32.216.166 | 200 OK | 0 B |
URL HTTP/2rgjgwe.metlculousdates.net/js/pushjs/1.0.0/subscriber.js IP63.32.216.166:0
GET /js/pushjs/1.0.0/subscriber.js HTTP/1.1
Host: rgjgwe.metlculousdates.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rgjgwe.metlculousdates.net/c/e2905f55ec3a568b?s1=138089&s2=1310906&s3=&s5=backuser&click_id=soiqa639268490009c1ab&iexpp=1&j1=1&j9=1
Cookie: unique_id=6392684b000c1b3b; unique_id2=6392684b000de400; 6392684b000de400_c=1; ref_token=138089; impression=; 6392684b000de400_sl=[212225]
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 22:42:19 GMT
content-type: application/javascript
expires: Thu, 15 Dec 2022 22:42:19 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| rgjgwe.metlculousdates.net/js/service-worker.js | 63.32.216.166 | 200 OK | 0 B |
URL HTTP/2rgjgwe.metlculousdates.net/js/service-worker.js IP63.32.216.166:0
GET /js/service-worker.js HTTP/1.1
Host: rgjgwe.metlculousdates.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: unique_id=6392684b000c1b3b; unique_id2=6392684b000de400; 6392684b000de400_c=1; ref_token=138089; impression=; 6392684b000de400_sl=[212225]
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 22:42:19 GMT
content-type: application/javascript
expires: Thu, 15 Dec 2022 22:42:19 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
0.0.0.0