i.geistm.com/l/Popdust_OptaviaCompetitors_FIFTY
301 Moved Permanently 134 B URL HTTP/1.1 i.geistm.com/l/Popdust_OptaviaCompetitors_FIFTY
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /l/Popdust_OptaviaCompetitors_FIFTY HTTP/1.1
Host: i.geistm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Sun, 29 Jan 2023 09:25:45 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://i.geistm.com:443/l/Popdust_OptaviaCompetitors_FIFTY
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5eb7c9bc996a0ff420e58af45526f053
8c2614832b8efe1c9da0bbd465d6f3f172d95a9e
c085cf277dd0429fe15e4a4bce5595636e9f2204d5a8e77220f8bf88adf4068f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C085CF277DD0429FE15E4A4BCE5595636E9F2204D5A8E77220F8BF88ADF4068F"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6325
Expires: Sun, 29 Jan 2023 11:11:11 GMT
Date: Sun, 29 Jan 2023 09:25:46 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3eb88dea4fe00db1182370e72683c3ab
ca520abf1e91bfd2aef40c6a1270a911071e8922
d8083ee567c7b3023111dc30f32c94237df7db30d4d2daaea0a569e8a3069ad7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D8083EE567C7B3023111DC30F32C94237DF7DB30D4D2DAAEA0A569E8A3069AD7"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5230
Expires: Sun, 29 Jan 2023 10:52:56 GMT
Date: Sun, 29 Jan 2023 09:25:46 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 302c7548412192add063ad6c8b99cf3b
e5d178931a27db036ce8daae302594d3ff7050b8
fc2bd9091006189e67e8074093805ee5492ce16e1dbfba32e083abeeae34969d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC2BD9091006189E67E8074093805EE5492CE16E1DBFBA32E083ABEEAE34969D"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4365
Expires: Sun, 29 Jan 2023 10:38:31 GMT
Date: Sun, 29 Jan 2023 09:25:46 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 29 Jan 2023 08:35:36 GMT
content-type: application/json
age: 3010
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Xg1BzVTNGzx0Ew2XwXaDCf9U36s000qLg9TZoSqhoP9CqiNd6jSaBvAudRfpciYdF1vvZ0WpGgk=
x-amz-request-id: RC1BYWZHGM6NTQ87
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 29 Jan 2023 09:21:20 GMT
age: 266
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 09:25:46 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 23555fd49bb71dab0ac09749e96c3071
b5762131152b53a35a53219ce0509c2238b612e9
9f76b2a37e34db980bc43a1998740a045bf565bd1694adf07256ea83f30bdaad
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 29 Jan 2023 09:25:46 GMT
Last-Modified: Sun, 29 Jan 2023 08:28:40 GMT
Server: ECS (nyb/1D18)
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: QykwRTctF-RWZf0hrzp6yqgQv5uVfVOGLskmc_MWykMuZ3TSCNJ9FQ==
Age: 3426
i.geistm.com/l/Popdust_OptaviaCompetitors_FIFTY
302 Found 258 B URL HTTP/2 i.geistm.com/l/Popdust_OptaviaCompetitors_FIFTY
IP
File type HTML document, ASCII text, with no line terminators
Hash 52a659d0c563fda8281aaeb4a1d34bbe
97696dbb19dbccfa38516d59b745abaa02dd9010
8e8b420190d717d655c23bdec6b8dc9beb2aaac9ce3921c4e399a4ade7c3b96a
GET /l/Popdust_OptaviaCompetitors_FIFTY HTTP/1.1
Host: i.geistm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Sun, 29 Jan 2023 09:25:46 GMT
content-type: text/html; charset=utf-8
content-length: 258
location: https://www.popdust.com/nutrisystem-weight-loss-program-2658232706.html?&gdpid=63d63b9a9517950225184a5d
server: nginx
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type, Accept
set-cookie: gdpid=63d63b9a9517950225184a5d; Max-Age=31536000; Path=/; Expires=Mon, 29 Jan 2024 09:25:46 GMT; Secure; SameSite=None
57153c6a691c888e1549416a=%26gdpid%3D63d63b9a9517950225184a5d; Max-Age=10800; Path=/; Expires=Sun, 29 Jan 2023 12:25:46 GMT; Secure; SameSite=None
vary: Accept
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Pragma, ETag, Retry-After, Content-Type, Content-Length, Expires, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 29 Jan 2023 08:41:41 GMT
age: 2645
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cea05ef659022e621304aaf718b8a403
4e3c307d7116e1648a7e4f0987d5f61f08c726a6
05c0521dfa7917cff17d1d992b94129a4c515fd640d00d190114a290c3fdd321
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "05C0521DFA7917CFF17D1D992B94129A4C515FD640D00D190114A290C3FDD321"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3765
Expires: Sun, 29 Jan 2023 10:28:31 GMT
Date: Sun, 29 Jan 2023 09:25:46 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 16a7b6a7128312e2f985d30df18c4487
6017bff79ffb525d9c7f9f32b999b74b5dc69602
663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16"
Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19024
Expires: Sun, 29 Jan 2023 14:42:50 GMT
Date: Sun, 29 Jan 2023 09:25:46 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bab8a4c1e6bb2e6c9cc00222eef1235d
1a5dd108e9f9aaf33bc048b0097a9f510d295cad
fd182297a143655a9142e3ee5bbafefd76ca974094f43fb695611f6876f3ab63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8c630e9bbc930d1c367efa81b67be3f7
ec536695531d40a813d99a06271c7c2d698d51d3
39ca0a60c3e2e85712757ead0830d0da82beac1e4f44b6e90243e5ca9326bf4b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
assets.rebelmouse.io/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbWFnZSI6Imh0dHBzOi8vYXNzZXRzLnJibC5tcy8zMTczMTkxNC9vcmlnaW4ucG5nIiwiZXhwaXJlc19hdCI6MTczNTc3ODQ0NH0.K8o49c4t9nlovnvPJu8-OZao1PvsZqyqX1eVeFsrMHU/img.png?width=1200&height=800&quality=85&coordinates=0%2C0%2C0%2C0
200 OK 65 kB URL HTTP/2 assets.rebelmouse.io/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbWFnZSI6Imh0dHBzOi8vYXNzZXRzLnJibC5tcy8zMTczMTkxNC9vcmlnaW4ucG5nIiwiZXhwaXJlc19hdCI6MTczNTc3ODQ0NH0.K8o49c4t9nlovnvPJu8-OZao1PvsZqyqX1eVeFsrMHU/img.png?width=1200&height=800&quality=85&coordinates=0%2C0%2C0%2C0
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x800, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5c58fca17f1375014ff3a108e8b28c23
0ec6e04f9d2f2be41203b578056b2c88538c1829
5696f53afe75320a0d32c74b0fcdde350a2cccf17a8f29d7041b7420f3fc1d94
GET /eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbWFnZSI6Imh0dHBzOi8vYXNzZXRzLnJibC5tcy8zMTczMTkxNC9vcmlnaW4ucG5nIiwiZXhwaXJlc19hdCI6MTczNTc3ODQ0NH0.K8o49c4t9nlovnvPJu8-OZao1PvsZqyqX1eVeFsrMHU/img.png?width=1200&height=800&quality=85&coordinates=0%2C0%2C0%2C0 HTTP/1.1
Host: assets.rebelmouse.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
etag: W/"62f01-UpWHRe0FvinJCGBrFWZ7PUD/QhY"
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sun, 29 Jan 2023 09:25:47 GMT
age: 1461111
x-served-by: cache-iad-kiad7000155-IAD, cache-bma1675-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 1
x-timer: S1674984347.159255,VS0,VE1
vary: Accept-Encoding
fastly-service: 6n5SeXI9vaBDWRYEBuCDvI
cache-control: max-age=31536000, public, immutable
access-control-allow-origin: *
content-length: 64620
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f69c5f43bf99edb53b690cb0bba51efb
e303559ff0956b6bf963b572b17da2a713ce5206
bc95b0a6b8b9a1df9c53272c4324ca1d008699b3da74110efa37ed0118c66181
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash f92b3d35053dc5e25988778fdbff1e79
913a821586cd72ce90b79578ab35d971b5b39ec8
00c5493a131ffd1bafc8c2e3c08bea47dfa28491f708407c7c156774b34d0c72
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "00C5493A131FFD1BAFC8C2E3C08BEA47DFA28491F708407C7C156774B34D0C72"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5983
Expires: Sun, 29 Jan 2023 11:05:30 GMT
Date: Sun, 29 Jan 2023 09:25:47 GMT
Connection: keep-alive
www.googletagmanager.com/gtag/js?id=UA-19669260-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-19669260-1
IP
File type ASCII text, with very long lines (1759)
Hash 70b510a944033726cd65f03d8f97a69c
cfc39d176edc24338c772c8f4a625c655ec35544
976caa4fe5f96af50a69008b449f4e984a875187ca00cb757b995b93bac9e8c7
GET /gtag/js?id=UA-19669260-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 29 Jan 2023 09:25:47 GMT
expires: Sun, 29 Jan 2023 09:25:47 GMT
cache-control: private, max-age=900
last-modified: Sun, 29 Jan 2023 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44011
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: UcpitI6APKRSYRTgqCUWQw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: nD3kj71C+Fj0nN7kJ5GNIav/RjE=
ad.doubleclick.net/ddm/trackimpj/N4319.2118304GEISTM/B9212348.356514158;dc_trk_aid=547707614;dc_trk_cid=184795813;ord=%5Btimestamp%5D;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=%24%7BGDPR%7D;gdpr_consent=%24%7BGDPR_CONSENT_755%7D;ltd=?
200 OK 11 kB URL HTTP/2 ad.doubleclick.net/ddm/trackimpj/N4319.2118304GEISTM/B9212348.356514158;dc_trk_aid=547707614;dc_trk_cid=184795813;ord=%5Btimestamp%5D;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=%24%7BGDPR%7D;gdpr_consent=%24%7BGDPR_CONSENT_755%7D;ltd=?
IP
File type ASCII text, with very long lines (15170), with no line terminators
Hash ebcb017ef810e51985a3a25568a56a01
2111c4ae0ede3ff0467178556b6b9ae5674c5623
80c5f0b11c0ea3c71a98652ae359b7bea345936b111adfa8ba76bd69b0ae0aca
GET /ddm/trackimpj/N4319.2118304GEISTM/B9212348.356514158;dc_trk_aid=547707614;dc_trk_cid=184795813;ord=%5Btimestamp%5D;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=%24%7BGDPR%7D;gdpr_consent=%24%7BGDPR_CONSENT_755%7D;ltd=? HTTP/1.1
Host: ad.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 29 Jan 2023 09:25:47 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 11406
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 29-Jan-2023 09:40:47 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8c630e9bbc930d1c367efa81b67be3f7
ec536695531d40a813d99a06271c7c2d698d51d3
39ca0a60c3e2e85712757ead0830d0da82beac1e4f44b6e90243e5ca9326bf4b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bab8a4c1e6bb2e6c9cc00222eef1235d
1a5dd108e9f9aaf33bc048b0097a9f510d295cad
fd182297a143655a9142e3ee5bbafefd76ca974094f43fb695611f6876f3ab63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f69c5f43bf99edb53b690cb0bba51efb
e303559ff0956b6bf963b572b17da2a713ce5206
bc95b0a6b8b9a1df9c53272c4324ca1d008699b3da74110efa37ed0118c66181
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8cf65fcdafa84b63cf7005fe57927fcb
3f7d163a96e7f00eb2de9828624ec46e22b4b40a
dfcf629cc49444f646f3a014014a91e36251b4b43655ce2e2eca55263dd196e3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 25 Jan 2023 19:33:54 GMT
expires: Thu, 25 Jan 2024 19:33:54 GMT
cache-control: public, max-age=31536000
age: 309113
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 23555fd49bb71dab0ac09749e96c3071
b5762131152b53a35a53219ce0509c2238b612e9
9f76b2a37e34db980bc43a1998740a045bf565bd1694adf07256ea83f30bdaad
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=111224
Date: Sun, 29 Jan 2023 09:25:47 GMT
Etag: "63d54991-1d7"
Expires: Mon, 30 Jan 2023 16:19:31 GMT
Last-Modified: Sat, 28 Jan 2023 16:13:05 GMT
Server: ECS (nyb/1D05)
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: r3_dfOYuAHOTcf9elTiOjQuyHA0aeLcCjY4ozsb_xPXCm_2xrnyZww==
Age: 386
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8cf65fcdafa84b63cf7005fe57927fcb
3f7d163a96e7f00eb2de9828624ec46e22b4b40a
dfcf629cc49444f646f3a014014a91e36251b4b43655ce2e2eca55263dd196e3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.popdust.com/detroitchicago/imp.gif?e=%7B%22ad_cache_level%22%3A0%2C%22ad_lazyload_version%22%3A0%2C%22ad_load_version%22%3A0%2C%22city%22%3A%22%22%2C%22country%22%3A%22NO%22%2C%22days_since_last_visit%22%3A-1%2C%22domain_id%22%3A76345%2C%22engaged_time_visit%22%3A0%2C%22ezcache_level%22%3A1%2C%22ezcache_skip_code%22%3A7%2C%22form_factor_id%22%3A1%2C%22framework_id%22%3A1%2C%22is_return_visitor%22%3Afalse%2C%22is_sitespeed%22%3A0%2C%22last_page_load%22%3A%22%22%2C%22last_pageview_id%22%3A%22%22%2C%22lt_cache_level%22%3A0%2C%22metro_code%22%3A0%2C%22page_ad_positions%22%3A%22%22%2C%22page_view_count%22%3A0%2C%22page_view_id%22%3A%22e33016a4-3f89-4d66-4dea-5d7b76cce8e3%22%2C%22position_selection_id%22%3A0%2C%22postal_code%22%3A%22%22%2C%22pv_event_count%22%3A0%2C%22response_size_orig%22%3A245864%2C%22response_time_orig%22%3A27%2C%22serverid%22%3A%2218.196.250.14%3A27957%22%2C%22state%22%3A%22%22%2C%22t_epoch%22%3A1674984346%2C%22template_id%22%3A126%2C%22time_on_site_visit%22%3A0%2C%22url%22%3A%22https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3Fgdpid%3D63d63b9a9517950225184a5d%22%2C%22user_id%22%3A0%2C%22weather_precipitation%22%3A0%2C%22weather_summary%22%3A%22%22%2C%22weather_temperature%22%3A0%2C%22word_count%22%3A1341%2C%22worst_bad_word_level%22%3A0%7D&ez_orig=1
200 OK 47 B URL HTTP/2 www.popdust.com/detroitchicago/imp.gif?e=%7B%22ad_cache_level%22%3A0%2C%22ad_lazyload_version%22%3A0%2C%22ad_load_version%22%3A0%2C%22city%22%3A%22%22%2C%22country%22%3A%22NO%22%2C%22days_since_last_visit%22%3A-1%2C%22domain_id%22%3A76345%2C%22engaged_time_visit%22%3A0%2C%22ezcache_level%22%3A1%2C%22ezcache_skip_code%22%3A7%2C%22form_factor_id%22%3A1%2C%22framework_id%22%3A1%2C%22is_return_visitor%22%3Afalse%2C%22is_sitespeed%22%3A0%2C%22last_page_load%22%3A%22%22%2C%22last_pageview_id%22%3A%22%22%2C%22lt_cache_level%22%3A0%2C%22metro_code%22%3A0%2C%22page_ad_positions%22%3A%22%22%2C%22page_view_count%22%3A0%2C%22page_view_id%22%3A%22e33016a4-3f89-4d66-4dea-5d7b76cce8e3%22%2C%22position_selection_id%22%3A0%2C%22postal_code%22%3A%22%22%2C%22pv_event_count%22%3A0%2C%22response_size_orig%22%3A245864%2C%22response_time_orig%22%3A27%2C%22serverid%22%3A%2218.196.250.14%3A27957%22%2C%22state%22%3A%22%22%2C%22t_epoch%22%3A1674984346%2C%22template_id%22%3A126%2C%22time_on_site_visit%22%3A0%2C%22url%22%3A%22https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3Fgdpid%3D63d63b9a9517950225184a5d%22%2C%22user_id%22%3A0%2C%22weather_precipitation%22%3A0%2C%22weather_summary%22%3A%22%22%2C%22weather_temperature%22%3A0%2C%22word_count%22%3A1341%2C%22worst_bad_word_level%22%3A0%7D&ez_orig=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash a3251fee66f3b5cce6b349e16c9f401f
800163870d95174d953579598e14e4900392d2a0
8993c7a90996b8dca477e92b7cca19ab3c505c1f4672d5dafa96cb827e1b97f6
POST /detroitchicago/imp.gif?e=%7B%22ad_cache_level%22%3A0%2C%22ad_lazyload_version%22%3A0%2C%22ad_load_version%22%3A0%2C%22city%22%3A%22%22%2C%22country%22%3A%22NO%22%2C%22days_since_last_visit%22%3A-1%2C%22domain_id%22%3A76345%2C%22engaged_time_visit%22%3A0%2C%22ezcache_level%22%3A1%2C%22ezcache_skip_code%22%3A7%2C%22form_factor_id%22%3A1%2C%22framework_id%22%3A1%2C%22is_return_visitor%22%3Afalse%2C%22is_sitespeed%22%3A0%2C%22last_page_load%22%3A%22%22%2C%22last_pageview_id%22%3A%22%22%2C%22lt_cache_level%22%3A0%2C%22metro_code%22%3A0%2C%22page_ad_positions%22%3A%22%22%2C%22page_view_count%22%3A0%2C%22page_view_id%22%3A%22e33016a4-3f89-4d66-4dea-5d7b76cce8e3%22%2C%22position_selection_id%22%3A0%2C%22postal_code%22%3A%22%22%2C%22pv_event_count%22%3A0%2C%22response_size_orig%22%3A245864%2C%22response_time_orig%22%3A27%2C%22serverid%22%3A%2218.196.250.14%3A27957%22%2C%22state%22%3A%22%22%2C%22t_epoch%22%3A1674984346%2C%22template_id%22%3A126%2C%22time_on_site_visit%22%3A0%2C%22url%22%3A%22https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3Fgdpid%3D63d63b9a9517950225184a5d%22%2C%22user_id%22%3A0%2C%22weather_precipitation%22%3A0%2C%22weather_summary%22%3A%22%22%2C%22weather_temperature%22%3A0%2C%22word_count%22%3A1341%2C%22worst_bad_word_level%22%3A0%7D&ez_orig=1 HTTP/1.1
Host: www.popdust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.popdust.com/nutrisystem-weight-loss-program-2658232706.html?&gdpid=63d63b9a9517950225184a5d
Origin: https://www.popdust.com
Connection: keep-alive
Cookie: ezoadgid_76345=-1; ezoref_76345=; ezosuibasgeneris-1=1a2deee5-c477-43ef-5cc5-92f5a801e8c6; ezoab_76345=mod1; lp_76345=https://www.popdust.com/nutrisystem-weight-loss-program-2658232706.html?gdpid=63d63b9a9517950225184a5d; ezovuuidtime_76345=1674984346; ezovuuid_76345=59cd4e71-42e0-420b-4b5e-cfef861ab757; ezopvc_76345=1; ezovab_76345=vmod1-c; fs.bot.check=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
access-control-allow-headers: Content-Type
access-control-allow-methods: HEAD, PUT, POST, GET, OPTIONS
access-control-allow-origin: https://www.popdust.com
access-control-max-age: 1728000
cache-control: private, max-age=0, must-revalidate, no-cache, no-store
content-encoding: br
content-type: image/gif
date: Sun, 29 Jan 2023 09:25:47 GMT
expires: Sat, 28 Jan 2023 09:25:47 GMT
vary: Accept-Encoding
x-middleton-display: imp_sol
content-length: 47
X-Firefox-Spdy: h2
i.geistm.com/js/gdp.min.js
200 OK 9.4 kB URL HTTP/2 i.geistm.com/js/gdp.min.js
IP
File type ASCII text, with very long lines (9350), with no line terminators
Hash bacd0e448c82fd67be7f309047d108fb
8d495feae6d7a99b36e89ac058d089642984630b
536e486eaa1937349d103e049fd2ef08be16d16cefbd3cc1a39aa39f8b1bcc09
GET /js/gdp.min.js HTTP/1.1
Host: i.geistm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:47 GMT
content-type: text/javascript; charset=utf-8
content-length: 9350
server: nginx
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type, Accept
set-cookie: gdpid=63d63b9b9517950225184a5f; Max-Age=157680000; Path=/; Expires=Fri, 28 Jan 2028 09:25:47 GMT; Secure; SameSite=None
etag: W/"2486-jUlf6ubXqZs26JrAWNCJZCmEYws"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
fonts.gstatic.com/s/dmseriftext/v11/rnCu-xZa_krGokauCeNq1wWyWfSFXQ.woff2
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/dmseriftext/v11/rnCu-xZa_krGokauCeNq1wWyWfSFXQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 24268, version 1.0\012- data
Hash 89c38db51a795110799dc8fab57e0e26
db8d08b6ddfe4705e2ebc7bdcf298323b61722bd
8b5e5b87c47a81314d380a889fbe85884065b168d6eb31f4b2620de90e21c11f
GET /s/dmseriftext/v11/rnCu-xZa_krGokauCeNq1wWyWfSFXQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 24268
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 29 Jan 2023 06:36:52 GMT
expires: Mon, 29 Jan 2024 06:36:52 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 15 Dec 2022 22:57:50 GMT
content-type: font/woff2
age: 10135
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ebf5916260229d8c5818259cfed47297
ff179111dc73d2df9127d5e935036e107839d578
cbc27b27de36a697668805fe3a39d96cd8ff8ba99f23fb26dd9ca945d00f4214
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CBC27B27DE36A697668805FE3A39D96CD8FF8BA99F23FB26DD9CA945D00F4214"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4021
Expires: Sun, 29 Jan 2023 10:32:48 GMT
Date: Sun, 29 Jan 2023 09:25:47 GMT
Connection: keep-alive
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 23 Jan 2023 18:52:41 GMT
expires: Tue, 23 Jan 2024 18:52:41 GMT
cache-control: public, max-age=31536000
age: 484386
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 24 Jan 2023 13:09:06 GMT
expires: Wed, 24 Jan 2024 13:09:06 GMT
cache-control: public, max-age=31536000
age: 418601
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/ibarrarealnova/v20/sZlfdQiA-DBIDCcaWtQzL4BZHoiDkHtYEQ.woff2
200 OK 27 kB URL HTTP/2 fonts.gstatic.com/s/ibarrarealnova/v20/sZlfdQiA-DBIDCcaWtQzL4BZHoiDkHtYEQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 26976, version 1.0\012- data
Hash 239a65252733cf0fb24c5bf877f8f9f2
b23455ca02a299b5c021abf0b365971f7894a065
ab74d46457b8be56b14e8344a4d85d192acb9e1835d697c704dfeb027e71038c
GET /s/ibarrarealnova/v20/sZlfdQiA-DBIDCcaWtQzL4BZHoiDkHtYEQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 26976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Jan 2023 02:32:56 GMT
expires: Sat, 27 Jan 2024 02:32:56 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Jul 2022 19:05:58 GMT
content-type: font/woff2
age: 197571
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.geistm.com/js/gdp.min.js
200 OK 9.4 kB URL HTTP/2 i.geistm.com/js/gdp.min.js
IP
File type ASCII text, with very long lines (9350), with no line terminators
Hash 8bf0f97f5de819b4cc59ada9edd03b41
ba7b0375140b616031d68b34d279de0eac2db36b
f41a49e2790f1d587172a033e981a0feca41914e9461dc078c99862e33750291
GET /js/gdp.min.js HTTP/1.1
Host: i.geistm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Cookie: gdpid=63d63b9b9517950225184a5f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
If-None-Match: W/"2486-jUlf6ubXqZs26JrAWNCJZCmEYws"
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:47 GMT
content-type: text/javascript; charset=utf-8
content-length: 9350
server: nginx
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type, Accept
set-cookie: gdpid=63d63b9b9517950225184a5f; Max-Age=157680000; Path=/; Expires=Fri, 28 Jan 2028 09:25:47 GMT; Secure; SameSite=None
etag: W/"2486-unsDdRQLYWAx1os00nneDqwts2s"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ebf5916260229d8c5818259cfed47297
ff179111dc73d2df9127d5e935036e107839d578
cbc27b27de36a697668805fe3a39d96cd8ff8ba99f23fb26dd9ca945d00f4214
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CBC27B27DE36A697668805FE3A39D96CD8FF8BA99F23FB26DD9CA945D00F4214"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4021
Expires: Sun, 29 Jan 2023 10:32:48 GMT
Date: Sun, 29 Jan 2023 09:25:47 GMT
Connection: keep-alive
assets.rbl.ms/17423832/2000x.png
200 OK 23 kB URL HTTP/2 assets.rbl.ms/17423832/2000x.png
IP
File type PNG image data, 305 x 268, 8-bit/color RGBA, non-interlaced\012- data
Hash 22bc05e0470d6531ec5b60e5ae4d2545
4b837a54781bf411e2a41745b0bad6a3add0401e
069f215d83a4f71763a543d0d4c8a7df3d5ddd4b134eeb1bffe5871646a21a40
GET /17423832/2000x.png HTTP/1.1
Host: assets.rbl.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: qAzcNufCUR2SUzDzXvg7g7Vg7zpojOPaqNRcZlUAeQ2LvcLYRRBhZzQpz7ttTnso4/A0hSgjaEc=
x-amz-request-id: 3XVMD3FF330ACV9D
last-modified: Mon, 12 Mar 2018 13:52:39 GMT
x-amz-version-id: ZzY_N.IIC.2eqFY9.brx2ypN7xU7YQJZ
etag: "22bc05e0470d6531ec5b60e5ae4d2545"
content-type: image/png
server: AmazonS3
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Sun, 29 Jan 2023 09:25:47 GMT
via: 1.1 varnish
age: 1669594
x-served-by: cache-bma1669-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674984348.610916,VS0,VE1
content-length: 22903
X-Firefox-Spdy: h2
assets.rebelmouse.io/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbWFnZSI6Imh0dHBzOi8vYXNzZXRzLnJibC5tcy8zMjkxMzQyMS9vcmlnaW4ucG5nIiwiZXhwaXJlc19hdCI6MTY5NDkyNzExOX0.Y-Va_rg1Al8NhPaJYaVJe6O2ma5ltN92IuLKdJOVLho/img.png?width=271&height=180&quality=80&coordinates=0%2C0%2C0%2C179
200 OK 6.0 kB URL HTTP/2 assets.rebelmouse.io/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbWFnZSI6Imh0dHBzOi8vYXNzZXRzLnJibC5tcy8zMjkxMzQyMS9vcmlnaW4ucG5nIiwiZXhwaXJlc19hdCI6MTY5NDkyNzExOX0.Y-Va_rg1Al8NhPaJYaVJe6O2ma5ltN92IuLKdJOVLho/img.png?width=271&height=180&quality=80&coordinates=0%2C0%2C0%2C179
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 271x181, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5e93420b887eff7f808910393f9f836d
0b3a9eecfdf98c0ffc63c01daf535c3d49e6c1cc
c2e8753e983a2c418a44a32fe3da3d548c77834851e5bc81ba5111b00c3fe1fc
GET /eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbWFnZSI6Imh0dHBzOi8vYXNzZXRzLnJibC5tcy8zMjkxMzQyMS9vcmlnaW4ucG5nIiwiZXhwaXJlc19hdCI6MTY5NDkyNzExOX0.Y-Va_rg1Al8NhPaJYaVJe6O2ma5ltN92IuLKdJOVLho/img.png?width=271&height=180&quality=80&coordinates=0%2C0%2C0%2C179 HTTP/1.1
Host: assets.rebelmouse.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
etag: W/"8aad6-MVD85AyKDDWaFVvdAqiRkFv2jpk"
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sun, 29 Jan 2023 09:25:47 GMT
age: 151820
x-served-by: cache-iad-kiad7000027-IAD, cache-bma1675-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 1
x-timer: S1674984348.639023,VS0,VE2
vary: Accept-Encoding
fastly-service: 6n5SeXI9vaBDWRYEBuCDvI
cache-control: max-age=31536000, public, immutable
access-control-allow-origin: *
content-length: 6034
X-Firefox-Spdy: h2
assets.rebelmouse.io/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbWFnZSI6Imh0dHBzOi8vYXNzZXRzLnJibC5tcy8zMjkwMjU1NC9vcmlnaW4uanBnIiwiZXhwaXJlc19hdCI6MTY4NzkwNzg4OX0.FK8D3TdsFDRJeDNSzqO7LG1nAfqH3hSNb-19urRhwBU/img.jpg?width=271&height=180&quality=80&coordinates=0%2C0%2C0%2C0
200 OK 7.1 kB URL HTTP/2 assets.rebelmouse.io/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbWFnZSI6Imh0dHBzOi8vYXNzZXRzLnJibC5tcy8zMjkwMjU1NC9vcmlnaW4uanBnIiwiZXhwaXJlc19hdCI6MTY4NzkwNzg4OX0.FK8D3TdsFDRJeDNSzqO7LG1nAfqH3hSNb-19urRhwBU/img.jpg?width=271&height=180&quality=80&coordinates=0%2C0%2C0%2C0
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 271x181, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a497e29340d7112e00f5f6eeaf6337a3
999cf6547e83fde13d5f628aefcc86c8d0f7be9a
ff69253e8050065f59e549d49b9b2dc4a99991a0c1dd386475375d6351e24202
GET /eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbWFnZSI6Imh0dHBzOi8vYXNzZXRzLnJibC5tcy8zMjkwMjU1NC9vcmlnaW4uanBnIiwiZXhwaXJlc19hdCI6MTY4NzkwNzg4OX0.FK8D3TdsFDRJeDNSzqO7LG1nAfqH3hSNb-19urRhwBU/img.jpg?width=271&height=180&quality=80&coordinates=0%2C0%2C0%2C0 HTTP/1.1
Host: assets.rebelmouse.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
etag: W/"ec309-Jp6rJFpx5KcNdOJEulLxsmvu7Gk"
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sun, 29 Jan 2023 09:25:47 GMT
age: 321173
x-served-by: cache-iad-kcgs7200117-IAD, cache-bma1675-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 1
x-timer: S1674984348.645208,VS0,VE1
vary: Accept-Encoding
fastly-service: 6n5SeXI9vaBDWRYEBuCDvI
cache-control: max-age=31536000, public, immutable
access-control-allow-origin: *
content-length: 7134
X-Firefox-Spdy: h2
assets.rebelmouse.io/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbWFnZSI6Imh0dHBzOi8vYXNzZXRzLnJibC5tcy8zMjEyMTQ0MS9vcmlnaW4uanBnIiwiZXhwaXJlc19hdCI6MTcyMDgwNDQzOH0.JrnczOLTXtm0V0BaBOm5kqzMHHGmnOaCWytnMoOqhng/img.jpg?width=271&height=180&quality=80&coordinates=0%2C0%2C30%2C0
200 OK 6.9 kB URL HTTP/2 assets.rebelmouse.io/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbWFnZSI6Imh0dHBzOi8vYXNzZXRzLnJibC5tcy8zMjEyMTQ0MS9vcmlnaW4uanBnIiwiZXhwaXJlc19hdCI6MTcyMDgwNDQzOH0.JrnczOLTXtm0V0BaBOm5kqzMHHGmnOaCWytnMoOqhng/img.jpg?width=271&height=180&quality=80&coordinates=0%2C0%2C30%2C0
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 271x181, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2abcca0dead2ebd70fbcddbcea11113e
182406593156ae87fb8055684df6c5d6f37db975
bb93a3efc653c286089c5c1d2e279b749694bce196e512f5d4e38ed54d6bddc9
GET /eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbWFnZSI6Imh0dHBzOi8vYXNzZXRzLnJibC5tcy8zMjEyMTQ0MS9vcmlnaW4uanBnIiwiZXhwaXJlc19hdCI6MTcyMDgwNDQzOH0.JrnczOLTXtm0V0BaBOm5kqzMHHGmnOaCWytnMoOqhng/img.jpg?width=271&height=180&quality=80&coordinates=0%2C0%2C30%2C0 HTTP/1.1
Host: assets.rebelmouse.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
etag: W/"db2fe-Wvw5EpjMo7TaeMMvE0rRSJWBHRk"
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sun, 29 Jan 2023 09:25:47 GMT
age: 307294
x-served-by: cache-iad-kjyo7100064-IAD, cache-bma1675-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 1
x-timer: S1674984348.646143,VS0,VE1
vary: Accept-Encoding
fastly-service: 6n5SeXI9vaBDWRYEBuCDvI
cache-control: max-age=31536000, public, immutable
access-control-allow-origin: *
content-length: 6886
X-Firefox-Spdy: h2
www.popdust.com/static/dist/social-ux/8499.1abbe09a834cbe8380a2.bundle.mjs
200 OK 772 B URL HTTP/2 www.popdust.com/static/dist/social-ux/8499.1abbe09a834cbe8380a2.bundle.mjs
IP
File type ASCII text, with very long lines (1605)
Hash d61aa5cf264dca2d94c17efa2f478c2e
9afa4a4e3df41061c1a5123e6f1720e7dc217b7c
c56df1e3b365cdbd5e542aaf1e68ce85ebff2319b7174aca4e927a86df86335e
GET /static/dist/social-ux/8499.1abbe09a834cbe8380a2.bundle.mjs HTTP/1.1
Host: www.popdust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.popdust.com/nutrisystem-weight-loss-program-2658232706.html?&gdpid=63d63b9a9517950225184a5d
Connection: keep-alive
Cookie: ezoadgid_76345=-1; ezoref_76345=; ezosuibasgeneris-1=1a2deee5-c477-43ef-5cc5-92f5a801e8c6; ezoab_76345=mod1; lp_76345=https://www.popdust.com/nutrisystem-weight-loss-program-2658232706.html?gdpid=63d63b9a9517950225184a5d; ezovuuidtime_76345=1674984346; ezovuuid_76345=59cd4e71-42e0-420b-4b5e-cfef861ab757; ezopvc_76345=1; ezovab_76345=vmod1-c; fs.bot.check=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
age: 86
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cache-control: max-age=31536000
content-encoding: br
content-type: application/x-javascript
date: Sun, 29 Jan 2023 09:25:47 UTC
display: staticcontent_sol, orig_site_sol
etag: W/"6329a609-683-gzip"
fastly-request-backend: fastly
fastly-sie: 86400.000
fastly-swr: 2592000.000
last-modified: Tue, 24 Jan 2023 19:08:54 GMT
response: 200
server: Apache/2.4.39 (Ubuntu)
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding,User-Agent,Origin
via: 1.1 F_wfe_production, 1.1 varnish, 1.1 varnish
x-cache: HIT, MISS
x-cache-hits: 1, 0
x-ezoic-cdn: Hit ds;mm;9bacc427a3bb46c0b66c32403bcdfa44;2-76345-22;960a5b44-0228-4abf-76ae-f4ff7f386c22
x-frame-options: SAMEORIGIN
x-middleton-display: staticcontent_sol, orig_site_sol
x-middleton-response: 200
x-origin-cache-control: max-age=31536000
x-request-id: f4567d25-c574-45d8-9f2e-7eef6ca618a1
x-served-by: cache-iad-kjyo7100032-IAD, cache-hhn4021-HHN
x-sol: orig
x-timer: S1663782312.302128,VS0,VE91
content-length: 772
X-Firefox-Spdy: h2
assets.rebelmouse.io/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbWFnZSI6Imh0dHBzOi8vYXNzZXRzLnJibC5tcy8zMjkxNDEzNC9vcmlnaW4uanBnIiwiZXhwaXJlc19hdCI6MTY4OTI3OTg5Mn0.L9m-pCUS2hGvZFySP9AbFVZ9JEPq9rZ6A2RbWoHlkck/img.jpg?width=271&height=180&quality=80&coordinates=0%2C1443%2C0%2C1443
200 OK 2.4 kB URL HTTP/2 assets.rebelmouse.io/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbWFnZSI6Imh0dHBzOi8vYXNzZXRzLnJibC5tcy8zMjkxNDEzNC9vcmlnaW4uanBnIiwiZXhwaXJlc19hdCI6MTY4OTI3OTg5Mn0.L9m-pCUS2hGvZFySP9AbFVZ9JEPq9rZ6A2RbWoHlkck/img.jpg?width=271&height=180&quality=80&coordinates=0%2C1443%2C0%2C1443
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 271x181, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ebe296ec00489a876eb39af027c7b594
8c2e905352a08fab2c903bd7ff0f840e280498fa
c1ab93f3524d5721e71a9c73412ae4917a09b2134f26086ee765ab0c1edfbdf9
GET /eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbWFnZSI6Imh0dHBzOi8vYXNzZXRzLnJibC5tcy8zMjkxNDEzNC9vcmlnaW4uanBnIiwiZXhwaXJlc19hdCI6MTY4OTI3OTg5Mn0.L9m-pCUS2hGvZFySP9AbFVZ9JEPq9rZ6A2RbWoHlkck/img.jpg?width=271&height=180&quality=80&coordinates=0%2C1443%2C0%2C1443 HTTP/1.1
Host: assets.rebelmouse.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
etag: W/"3a2c65-PbeKwHC54348xVx/SsqKnK32LxA"
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sun, 29 Jan 2023 09:25:47 GMT
age: 142727
x-served-by: cache-iad-kiad7000067-IAD, cache-bma1675-BMA
x-cache: HIT, MISS
x-cache-hits: 1, 0
x-timer: S1674984348.637840,VS0,VE92
vary: Accept-Encoding
fastly-service: 6n5SeXI9vaBDWRYEBuCDvI
cache-control: max-age=31536000, public, immutable
access-control-allow-origin: *
content-length: 2416
X-Firefox-Spdy: h2
www.popdust.com/core/users/tracking/
200 OK 76 B URL HTTP/2 www.popdust.com/core/users/tracking/
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 63fd19bfc357bf15bdeeb32b6d03816d
6cb9adbef8892ed1238b11329991fb8908426eca
506fc2ad72dc2c89b461de513e5124644f0e91b53db6ae90cecd24c881db761e
POST /core/users/tracking/ HTTP/1.1
Host: www.popdust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.popdust.com/nutrisystem-weight-loss-program-2658232706.html?&gdpid=63d63b9a9517950225184a5d
Content-Type: text/plain;charset=UTF-8
Origin: https://www.popdust.com
Content-Length: 78
Connection: keep-alive
Cookie: ezoadgid_76345=-1; ezoref_76345=; ezosuibasgeneris-1=1a2deee5-c477-43ef-5cc5-92f5a801e8c6; ezoab_76345=mod1; lp_76345=https://www.popdust.com/nutrisystem-weight-loss-program-2658232706.html?gdpid=63d63b9a9517950225184a5d; ezovuuidtime_76345=1674984346; ezovuuid_76345=59cd4e71-42e0-420b-4b5e-cfef861ab757; ezopvc_76345=1; ezovab_76345=vmod1-c; fs.bot.check=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: https://www.popdust.com
access-control-max-age: 1728000
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cache-control: no-cache, must-revalidate, private
content-encoding: br
content-type: application/json
date: Sun, 29 Jan 2023 09:25:47 GMT
display: staticcontent_sol, orig_site_sol
fastly-sie: 86400.000
fastly-swr: 2592000.000
fastly-ttl: 120.000
response: 200
server: Apache/2.4.39 (Ubuntu)
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding,Cookie,Origin
via: 1.1 F_wfe_production, 1.1 varnish, 1.1 varnish
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-ezoic-cdn: Miss
x-frame-options: SAMEORIGIN
x-middleton-display: staticcontent_sol, orig_site_sol
x-middleton-response: 200
x-origin-cache-control: no-cache, must-revalidate, private
x-rebelmouse-layouts-key: www.popdust.com,(null)
x-request-id: b68f1462-5adf-4f1f-b51c-65bbee9a73e8
x-served-by: cache-iad-kcgs7200089-IAD, cache-hhn-etou8220090-HHN
x-sol: orig
x-timer: S1674984348.637658,VS0,VE104
content-length: 76
X-Firefox-Spdy: h2
www.popdust.com/detroitchicago/cmbdv2.js?gcb=195-6&cb=03-8y0c-6y18-5&cmbcb=121&sj=x03x0cx18
200 OK 241 kB URL HTTP/2 www.popdust.com/detroitchicago/cmbdv2.js?gcb=195-6&cb=03-8y0c-6y18-5&cmbcb=121&sj=x03x0cx18
IP
File type ASCII text, with very long lines (11780)
Size 241 kB (241198 bytes)
Hash b7cd6972e768c267e49bbe350c88a7b9
d6021c83045c3a468da331884f6515c6ca089a25
4333aeb3907ae83206ea59749942563ca4ad8dbc0f48d588da9f29ac653d14f5
GET /detroitchicago/cmbdv2.js?gcb=195-6&cb=03-8y0c-6y18-5&cmbcb=121&sj=x03x0cx18 HTTP/1.1
Host: www.popdust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.popdust.com/nutrisystem-weight-loss-program-2658232706.html?&gdpid=63d63b9a9517950225184a5d
Connection: keep-alive
Cookie: ezoadgid_76345=-1; ezoref_76345=; ezosuibasgeneris-1=1a2deee5-c477-43ef-5cc5-92f5a801e8c6; ezoab_76345=mod1; lp_76345=https://www.popdust.com/nutrisystem-weight-loss-program-2658232706.html?gdpid=63d63b9a9517950225184a5d; ezovuuidtime_76345=1674984346; ezovuuid_76345=59cd4e71-42e0-420b-4b5e-cfef861ab757; ezopvc_76345=1; ezovab_76345=vmod1-c; fs.bot.check=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000, public
content-encoding: br
content-type: application/javascript
date: Sun, 29 Jan 2023 09:25:47 GMT
server: Apache/2.4.39 (Ubuntu)
vary: Accept-Encoding
x-middleton-display: sol-js
x-robots-tag: noindex
X-Firefox-Spdy: h2
i.geistm.com/tap/page?gdpid=63d63b9b9517950225184a5f&url=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html&query=%26gdpid%3D63d63b9a9517950225184a5d&source=null
404 Not Found 638 B URL HTTP/2 i.geistm.com/tap/page?gdpid=63d63b9b9517950225184a5f&url=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html&query=%26gdpid%3D63d63b9a9517950225184a5d&source=null
IP
Hash fb4b17f962cbf32ac3ee36305efd645e
59e10d1253342dc0921e69b7e44d42f75b9ccfb6
a32804f9c440f84a1941fc72611e0492aa723605d2e36214cf5f74b0bc7db5f1
GET /tap/page?gdpid=63d63b9b9517950225184a5f&url=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html&query=%26gdpid%3D63d63b9a9517950225184a5d&source=null HTTP/1.1
Host: i.geistm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Sun, 29 Jan 2023 09:25:47 GMT
content-type: text/html; charset=utf-8
server: nginx
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type, Accept
content-security-policy: default-src 'none'
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e54dcd3d97b20e93bec5820073c4f47
a6d7c8605db8aa7af547756432f23c66b3f3c181
29038c3ab9d4526c362bebf271a1ea15d6ee0288d66d241b1edb1e62ea754429
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "29038C3AB9D4526C362BEBF271A1EA15D6EE0288D66D241B1EDB1E62EA754429"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19124
Expires: Sun, 29 Jan 2023 14:44:31 GMT
Date: Sun, 29 Jan 2023 09:25:47 GMT
Connection: keep-alive
q.quora.com/_/ad/bc4cff1207c241f481d2e2c833a4607b/pixel?j=1&u=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&tag=ViewContent&ts=1674984354315
200 OK 43 B URL HTTP/1.1 q.quora.com/_/ad/bc4cff1207c241f481d2e2c833a4607b/pixel?j=1&u=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&tag=ViewContent&ts=1674984354315
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /_/ad/bc4cff1207c241f481d2e2c833a4607b/pixel?j=1&u=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&tag=ViewContent&ts=1674984354315 HTTP/1.1
Host: q.quora.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Sun, 29 Jan 2023 09:25:48 GMT
Server: nginx
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Q-Stat: ,f0915dfbaef9a2ea5027c1472a490293,10.0.0.140,21206,91.90.42.154,,231385367003,1,1674984348.009,0.001,,.,0,0,0.000,0.000,-,0,0,197,165,82,10,26847,,,,,,-,
Content-Length: 43
Connection: keep-alive
q.quora.com/_/ad/bc4cff1207c241f481d2e2c833a4607b/pixel?j=1&u=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&tag=Generic&ts=1674984354316
200 OK 43 B URL HTTP/1.1 q.quora.com/_/ad/bc4cff1207c241f481d2e2c833a4607b/pixel?j=1&u=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&tag=Generic&ts=1674984354316
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /_/ad/bc4cff1207c241f481d2e2c833a4607b/pixel?j=1&u=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&tag=Generic&ts=1674984354316 HTTP/1.1
Host: q.quora.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Sun, 29 Jan 2023 09:25:48 GMT
Server: nginx
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Q-Stat: ,fdf66015db47d0255f069d384e4b7dc7,10.0.0.140,43944,91.90.42.154,,97266353345,1,1674984348.014,0.001,,.,0,0,0.000,0.004,-,0,0,197,108,54,10,35796,,,,,,-,
Content-Length: 43
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 6dfb40955c2c42d5f18df14dda112040
aee70e3e1c91420daaaf0537868213c0b7ccd78e
1ddb3fff0b6a75feb79297bbdd79f2120c703fc1d36959453603a29e5ea38975
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=114460
Date: Sun, 29 Jan 2023 09:25:48 GMT
Etag: "63d54292-1d7"
Expires: Mon, 30 Jan 2023 17:13:28 GMT
Last-Modified: Sat, 28 Jan 2023 15:43:14 GMT
Server: ECS (nyb/1D0F)
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 5DwGV_0yY0KEOTv0NFMR6S3XIIh5Vs9yI9yC3vf4KRKSVO7sfjN5sg==
Age: 5414
pages-stats.rbl.ms/spacer.gif?1674984354273&event=post-page-view&version=1&format=json&data=%7B%22site_id%22%3A13918151%2C%22roar_id%22%3A13918151%2C%22client%22%3A%22desktop%22%2C%22referrer%22%3A%22%22%2C%22post_id%22%3A2658232706%2C%22provider_id%22%3A0%2C%22sections%22%3A%5B1228836%2C473293110%2C22020607%5D%2C%22buckets%22%3A%5B%5D%2C%22authors%22%3A%5B15039559%5D%7D
200 OK 43 B URL HTTP/2 pages-stats.rbl.ms/spacer.gif?1674984354273&event=post-page-view&version=1&format=json&data=%7B%22site_id%22%3A13918151%2C%22roar_id%22%3A13918151%2C%22client%22%3A%22desktop%22%2C%22referrer%22%3A%22%22%2C%22post_id%22%3A2658232706%2C%22provider_id%22%3A0%2C%22sections%22%3A%5B1228836%2C473293110%2C22020607%5D%2C%22buckets%22%3A%5B%5D%2C%22authors%22%3A%5B15039559%5D%7D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /spacer.gif?1674984354273&event=post-page-view&version=1&format=json&data=%7B%22site_id%22%3A13918151%2C%22roar_id%22%3A13918151%2C%22client%22%3A%22desktop%22%2C%22referrer%22%3A%22%22%2C%22post_id%22%3A2658232706%2C%22provider_id%22%3A0%2C%22sections%22%3A%5B1228836%2C473293110%2C22020607%5D%2C%22buckets%22%3A%5B%5D%2C%22authors%22%3A%5B15039559%5D%7D HTTP/1.1
Host: pages-stats.rbl.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:48 GMT
content-type: image/gif
content-length: 43
server: openresty
last-modified: Wed, 25 Jan 2023 17:46:50 GMT
etag: "63d16b0a-2b"
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 86747648fa6715267c37811681295404
524d4ee62dfeefb40d04dd8fc0caf8cb2d7545b1
896d1cd5ef2179bbe7adc7d4b351eee6b2e14e4e0241a3ebf83c49c4d7f1860c
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 29 Jan 2023 09:25:47 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 29 Jan 2023 06:06:42 GMT
Expires: Mon, 30 Jan 2023 06:06:42 GMT
ETag: "524d4ee62dfeefb40d04dd8fc0caf8cb2d7545b1"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
user-stats.rbl.ms/spacer.gif?1674984354528&event=page-view&version=1&format=json&data=%7B%22site_id%22%3A13918151%2C%22roar_id%22%3A13918151%2C%22client%22%3A%22desktop%22%2C%22referrer%22%3A%22%22%2C%22user_tracking_id%22%3A%22-4924408332%22%2C%22post_id%22%3A2658232706%2C%22sections%22%3A%5B1228836%2C473293110%2C22020607%5D%2C%22tags%22%3A%5B%22nurtisystem%22%5D%7D
200 OK 43 B URL HTTP/2 user-stats.rbl.ms/spacer.gif?1674984354528&event=page-view&version=1&format=json&data=%7B%22site_id%22%3A13918151%2C%22roar_id%22%3A13918151%2C%22client%22%3A%22desktop%22%2C%22referrer%22%3A%22%22%2C%22user_tracking_id%22%3A%22-4924408332%22%2C%22post_id%22%3A2658232706%2C%22sections%22%3A%5B1228836%2C473293110%2C22020607%5D%2C%22tags%22%3A%5B%22nurtisystem%22%5D%7D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /spacer.gif?1674984354528&event=page-view&version=1&format=json&data=%7B%22site_id%22%3A13918151%2C%22roar_id%22%3A13918151%2C%22client%22%3A%22desktop%22%2C%22referrer%22%3A%22%22%2C%22user_tracking_id%22%3A%22-4924408332%22%2C%22post_id%22%3A2658232706%2C%22sections%22%3A%5B1228836%2C473293110%2C22020607%5D%2C%22tags%22%3A%5B%22nurtisystem%22%5D%7D HTTP/1.1
Host: user-stats.rbl.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:48 GMT
content-type: image/gif
content-length: 43
server: openresty
last-modified: Wed, 25 Jan 2023 17:47:34 GMT
etag: "63d16b36-2b"
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11456
Expires: Sun, 29 Jan 2023 12:36:44 GMT
Date: Sun, 29 Jan 2023 09:25:48 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11456
Expires: Sun, 29 Jan 2023 12:36:44 GMT
Date: Sun, 29 Jan 2023 09:25:48 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11456
Expires: Sun, 29 Jan 2023 12:36:44 GMT
Date: Sun, 29 Jan 2023 09:25:48 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11456
Expires: Sun, 29 Jan 2023 12:36:44 GMT
Date: Sun, 29 Jan 2023 09:25:48 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8f2806c-ec5e-41a0-85d8-007f6d34d108.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8f2806c-ec5e-41a0-85d8-007f6d34d108.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6021d6a06bff2826eb341747e82484f7
a817ff1ba206234627706551820d0d9856b398de
f0ba6de8709fdb73e94dbdace635232c76b9d70dad73badaca0542d9ad49604d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8f2806c-ec5e-41a0-85d8-007f6d34d108.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11624
x-amzn-requestid: dff12902-8b83-4df1-a2c9-a2ee9565830f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fIhnjEmpIAMFdlA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cce2fc-0216188a3154167648f7d976;Sampled=0
x-amzn-remapped-date: Sun, 22 Jan 2023 07:17:16 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: kxzVU1bNn09g_-73AY-mNvzhHo-dTyQinPkfPEqhDcKFfrTnbDpaZQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 23:15:07 GMT
age: 36641
etag: "a817ff1ba206234627706551820d0d9856b398de"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdf6aeac1-fd74-4724-86b5-f0e86d98c915.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdf6aeac1-fd74-4724-86b5-f0e86d98c915.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 43c4a8e963936a8064dbd2bd3c67b905
8508727c97127c98b886833af28b3470306216c2
070c29fe7c0a227029483d675eac863904ab6b291467acdf62167f4845699c21
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdf6aeac1-fd74-4724-86b5-f0e86d98c915.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8652
x-amzn-requestid: 5a5a883e-d7d4-4fc5-925a-3a95830c504e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVguyG7BIAMFm8g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d214c4-390b59a32060e41203533c58;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 05:51:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ewSsCY4u9DwRtaj00U9JCim9tYeCgHRuIQFpdHm4ttI6L02-e44iDQ==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 23:11:24 GMT
age: 36864
etag: "8508727c97127c98b886833af28b3470306216c2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3be81f83687ddb6c93d3ff3c09a9dba2
50a48e737310d3f31840db4301b25927fbcc12c5
e78c909e2381898e7f546183784a05dff47c31734c95358aaada8c2777ad47be
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9167
x-amzn-requestid: e6e0789c-a4a9-4ffa-a0ae-691770d1035b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fPF9YEBmIAMF0kQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf8388-01d2093432d3959903671a69;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 07:06:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: awfNeaKbFw2bjiTGwUrwUTxU-qbVS2eTjn948H8kn1hy7pi_DwLMlQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 17:35:56 GMT
age: 56992
etag: "50a48e737310d3f31840db4301b25927fbcc12c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d4cfe7c-2bbe-4efd-b73a-59ea603c332f.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d4cfe7c-2bbe-4efd-b73a-59ea603c332f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4c77437e3a7361861aed8bfecbfe6bd6
fefd238c13c0fdfb7d964c90fcc8a8cbbf953034
282d15c443cb6232ae0a30046a0dc24360617355a4651cdba59b11e6f7313d8a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d4cfe7c-2bbe-4efd-b73a-59ea603c332f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5594
x-amzn-requestid: d56c9b84-dc1f-4d5c-91bf-7db55058bf67
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fLyeEGOloAMFpzA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ce3126-5013a6b971d6800c5c85a4eb;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 07:03:02 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: D2ZAelkDgsd0wjoOSoPRwTzhozs84_aIcgwU-QmbDrTnHztVD0VL_A==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 14:57:16 GMT
age: 66512
etag: "fefd238c13c0fdfb7d964c90fcc8a8cbbf953034"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61c84a42-94fd-4328-97f3-9602ba58a2d1.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61c84a42-94fd-4328-97f3-9602ba58a2d1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d19ea264e32a923808112293d74b97c7
19a01a961cca989ee07ff53e50d6f2e65d73729a
16792f5d3ff24bda8f7ac4b6b522c736c4e070b5aa9fd109fa868906064278c8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61c84a42-94fd-4328-97f3-9602ba58a2d1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5021
x-amzn-requestid: e31ce00f-0014-42a0-832d-90852c823cd1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fFNoZGgxIAMFz1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cb8fcf-72f835c06d6604ec1eeee3d3;Sampled=0
x-amzn-remapped-date: Sat, 21 Jan 2023 07:10:07 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: nh1ha9gcWLXGZFahBAETcNpC6wB6Va4tUpYV76mz5BwVknVn1m7dzQ==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 12:02:22 GMT
age: 77006
etag: "19a01a961cca989ee07ff53e50d6f2e65d73729a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4205d8106659e00fff1cbe9262918b8c
ab4f6528594a1725934727dc7d834c028a79c609
31f1a28602a194bd0856495d4d81d5c72cd7ff4e5bad6bdd1a31ec3041f4a2cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4475
x-amzn-requestid: b7b272d6-3089-4f33-89b5-5cb388640e10
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_e6HsaIAMF5Lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445f8-1789f7f4264270916da323db;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:45:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 4jPbm4WufkUKm7ljLvpHrJUFhr-JQ_nl3iYfI5S8nTqEszFdUtz9EQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 05:24:09 GMT
etag: "ab4f6528594a1725934727dc7d834c028a79c609"
content-type: image/jpeg
age: 14499
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
prd-collector-anon.ex.co/main/events
200 OK 0 B URL HTTP/2 prd-collector-anon.ex.co/main/events
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /main/events HTTP/1.1
Host: prd-collector-anon.ex.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 741
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:48 GMT
content-type: text/plain; charset=utf-8
content-length: 0
vary: Origin
access-control-allow-origin: https://www.popdust.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
assets.rebelmouse.io/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbWFnZSI6Imh0dHBzOi8vYXNzZXRzLnJibC5tcy8yMjkwODY3My9vcmlnaW4ucG5nIiwiZXhwaXJlc19hdCI6MTcxOTc1Nzg0OX0.BlViBHYSir7ftis3cYekQ2XBk2t58t4n8iKCZpV0Oig/img.png?width=192&height=192
200 OK 3.4 kB URL HTTP/2 assets.rebelmouse.io/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbWFnZSI6Imh0dHBzOi8vYXNzZXRzLnJibC5tcy8yMjkwODY3My9vcmlnaW4ucG5nIiwiZXhwaXJlc19hdCI6MTcxOTc1Nzg0OX0.BlViBHYSir7ftis3cYekQ2XBk2t58t4n8iKCZpV0Oig/img.png?width=192&height=192
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8071de2cb3b6b88e6af5e02fe895a326
ec2c9d103737108d2cecf69a7527c0d83d5e621d
bf92df0b27d5af7268a26f25e819cdadc30e7e5367cfe4bee56afa678a010935
GET /eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbWFnZSI6Imh0dHBzOi8vYXNzZXRzLnJibC5tcy8yMjkwODY3My9vcmlnaW4ucG5nIiwiZXhwaXJlc19hdCI6MTcxOTc1Nzg0OX0.BlViBHYSir7ftis3cYekQ2XBk2t58t4n8iKCZpV0Oig/img.png?width=192&height=192 HTTP/1.1
Host: assets.rebelmouse.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
etag: W/"4306-zAxHAaBlK0PD3JgC+EDZ7+BMYVU"
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sun, 29 Jan 2023 09:25:48 GMT
age: 1631674
x-served-by: cache-iad-kcgs7200032-IAD, cache-bma1675-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 1
x-timer: S1674984349.521920,VS0,VE1
vary: Accept-Encoding
fastly-service: 6n5SeXI9vaBDWRYEBuCDvI
cache-control: max-age=31536000, public, immutable
access-control-allow-origin: *
content-length: 3378
X-Firefox-Spdy: h2
assets.rebelmouse.io/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbWFnZSI6Imh0dHBzOi8vYXNzZXRzLnJibC5tcy8yMjkwODY3My9vcmlnaW4ucG5nIiwiZXhwaXJlc19hdCI6MTcxOTc1Nzg0OX0.BlViBHYSir7ftis3cYekQ2XBk2t58t4n8iKCZpV0Oig/img.png?width=32&height=32
200 OK 740 B URL HTTP/2 assets.rebelmouse.io/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbWFnZSI6Imh0dHBzOi8vYXNzZXRzLnJibC5tcy8yMjkwODY3My9vcmlnaW4ucG5nIiwiZXhwaXJlc19hdCI6MTcxOTc1Nzg0OX0.BlViBHYSir7ftis3cYekQ2XBk2t58t4n8iKCZpV0Oig/img.png?width=32&height=32
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash a431445c5540354814a45bc30cbf8837
880c40bc7ad9e9074768e8bf91f33bd8897ecfee
f03d322d1a328fee64afd6499f4348b54653e24e11642a6dcbc4fedab7ba95b3
GET /eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbWFnZSI6Imh0dHBzOi8vYXNzZXRzLnJibC5tcy8yMjkwODY3My9vcmlnaW4ucG5nIiwiZXhwaXJlc19hdCI6MTcxOTc1Nzg0OX0.BlViBHYSir7ftis3cYekQ2XBk2t58t4n8iKCZpV0Oig/img.png?width=32&height=32 HTTP/1.1
Host: assets.rebelmouse.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
etag: W/"4306-zAxHAaBlK0PD3JgC+EDZ7+BMYVU"
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sun, 29 Jan 2023 09:25:48 GMT
age: 1631856
x-served-by: cache-iad-kcgs7200053-IAD, cache-bma1675-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 1
x-timer: S1674984349.524816,VS0,VE1
vary: Accept-Encoding
fastly-service: 6n5SeXI9vaBDWRYEBuCDvI
cache-control: max-age=31536000, public, immutable
access-control-allow-origin: *
content-length: 740
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ed8a8c45dceab588456b222e04775919
0242859712655caa3c3e9b936878c7c7874b7b5a
669f0691b8bf32a10fb219ce47ad69495e5cd2a11317b672aecca53f50b51de3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.analytics.google.com/g/collect?v=2&tid=G-VWQCYNNMD2>m=2oe1p0&_p=2146152221&_gaz=1&cid=1431532804.1674984355&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1674984354&sct=1&seg=0&dl=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&dt=I%20Performed%20Nutrisytem%27s%20Program%20Test%3A%20Here%E2%80%99s%20Who%20Won%20-%20Popdust&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.transport=beacon&ep.campaignName=Geist%2C64&ep.campaignSource=Popdust&ep.campaignMedium=&ep.campaignContent=&ep.dimension6=Geist%2C64&ep.dimension1=Popdust&ep.dimension7=2658232706&ep.dimension4=nurtisystem&ep.dimension8=nurtisystem&ep.dimension3=sponsored&ep.dimension5=09%2F16%2F2022
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-VWQCYNNMD2>m=2oe1p0&_p=2146152221&_gaz=1&cid=1431532804.1674984355&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1674984354&sct=1&seg=0&dl=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&dt=I%20Performed%20Nutrisytem%27s%20Program%20Test%3A%20Here%E2%80%99s%20Who%20Won%20-%20Popdust&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.transport=beacon&ep.campaignName=Geist%2C64&ep.campaignSource=Popdust&ep.campaignMedium=&ep.campaignContent=&ep.dimension6=Geist%2C64&ep.dimension1=Popdust&ep.dimension7=2658232706&ep.dimension4=nurtisystem&ep.dimension8=nurtisystem&ep.dimension3=sponsored&ep.dimension5=09%2F16%2F2022
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-VWQCYNNMD2>m=2oe1p0&_p=2146152221&_gaz=1&cid=1431532804.1674984355&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1674984354&sct=1&seg=0&dl=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&dt=I%20Performed%20Nutrisytem%27s%20Program%20Test%3A%20Here%E2%80%99s%20Who%20Won%20-%20Popdust&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.transport=beacon&ep.campaignName=Geist%2C64&ep.campaignSource=Popdust&ep.campaignMedium=&ep.campaignContent=&ep.dimension6=Geist%2C64&ep.dimension1=Popdust&ep.dimension7=2658232706&ep.dimension4=nurtisystem&ep.dimension8=nurtisystem&ep.dimension3=sponsored&ep.dimension5=09%2F16%2F2022 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.popdust.com
date: Sun, 29 Jan 2023 09:25:48 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
stats.g.doubleclick.net/g/collect?v=2&tid=G-VWQCYNNMD2&cid=1431532804.1674984355>m=2oe1p0&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-VWQCYNNMD2&cid=1431532804.1674984355>m=2oe1p0&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-VWQCYNNMD2&cid=1431532804.1674984355>m=2oe1p0&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.popdust.com
date: Sun, 29 Jan 2023 09:25:48 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 622fef0135648b055d1691ae97508eff
535c21115ccc50934d06c70e153df6ae542f1b5c
a66508fe21cab04638a3988ee90babe52167f0399a5440e329cf397182c813b4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tags.bkrtx.com/js/bk-coretag.js
200 OK 16 kB URL HTTP/2 tags.bkrtx.com/js/bk-coretag.js
IP
File type ASCII text, with very long lines (42581)
Hash 1d6730c68cb783c9b157fece2471f7b7
9c176c938a3567b446e02ccf1f919bf5bbccc921
32098d2ec6839522764c3c6c83b8427d8dca6bd041118e367b0ea6c7e1f05375
GET /js/bk-coretag.js HTTP/1.1
Host: tags.bkrtx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 21 May 2021 19:14:21 GMT
etag: W/"60a8068d-cbc2"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 16078
cache-control: max-age=604800
expires: Sun, 05 Feb 2023 09:25:48 GMT
date: Sun, 29 Jan 2023 09:25:48 GMT
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Sun, 29 Jan 2023 07:45:20 GMT
expires: Sun, 29 Jan 2023 09:45:20 GMT
cache-control: public, max-age=7200
age: 6028
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 7078b1d21bbac26012d93fc9501fbbb0
412189ffa7980709edc28b87a820aa1ae64fa3a7
6db1d0d3f3924d7e75e1fd087553cf4ec5fa938ecc52adf3f149570551eaf7f3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2912
Cache-Control: max-age=119167
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:48 GMT
Etag: "63d55ebb-1d7"
Expires: Mon, 30 Jan 2023 18:31:55 GMT
Last-Modified: Sat, 28 Jan 2023 17:43:23 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b7da7d1d3e5880d5d4e313ac7fcf2a83
60a1e887ccb7c7cdae0035c65ef7df9908547fef
af17efcd17df50324c29cff05cea79f18cba79f6b1134ec0e6d1637759b5e895
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash aadfbc8f576d94ec450a29424aaae366
08a5718386f99984658ab778d9d13538c8945de7
0e5e81a010f6df4591da74a157eba03589e0fc00ecaf982cc55af035c4be3433
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5548
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:48 GMT
Last-Modified: Sun, 29 Jan 2023 07:53:21 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 541db4f3f0ba067bfb58cdac34cb86f4
20e6883f068568888ce37c6b9ef8f5d12be257c0
83898f3b2da2a11996d2eb3a5115ef301255030fdf231b8bf7971916769bc7be
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: pzNYk8qJwfcfu4+Nx3mgNmBLHzVH+kJwNSJ4rk+MVME4ZCyli+s9tw5LobIXyI1Nmpgb2KD/fPxU1oK4rMMGCg==
content-length: 27815
x-fb-trip-id: 2074150462
date: Sun, 29 Jan 2023 09:25:48 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-VWQCYNNMD2&cid=1431532804.1674984355>m=2oe1p0&aip=1&z=673281769
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-VWQCYNNMD2&cid=1431532804.1674984355>m=2oe1p0&aip=1&z=673281769
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-VWQCYNNMD2&cid=1431532804.1674984355>m=2oe1p0&aip=1&z=673281769 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 29 Jan 2023 09:25:48 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ed8a8c45dceab588456b222e04775919
0242859712655caa3c3e9b936878c7c7874b7b5a
669f0691b8bf32a10fb219ce47ad69495e5cd2a11317b672aecca53f50b51de3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash a8ca415e742bd35fd8bd024e0ba1425d
6a1468c3c62f71fc66fea47c618d57dded4161be
0d8ad4ae1946e324bfef9e3ce207848625ff2b84b5f740a6425eb878ac174b42
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 29 Jan 2023 09:25:48 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 28 Jan 2023 20:43:42 GMT
Expires: Sun, 29 Jan 2023 20:43:42 GMT
ETag: "6a1468c3c62f71fc66fea47c618d57dded4161be"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
tpc.googlesyndication.com/sodar/Enqz_20U.html
200 OK 8.4 kB URL HTTP/2 tpc.googlesyndication.com/sodar/Enqz_20U.html
IP
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1572)
Hash 1f9fad7314bb487966fd7a9b78cdb4d3
e91e30f9df2eb23f64dc24adf2a154329d2a5dd4
ca76b66cd7d1e0c949c4e96a1f3307f6ba4238cea55009174ce14505fd77a15f
GET /sodar/Enqz_20U.html HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
timing-allow-origin: *
content-length: 8395
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 22 Jan 2023 19:36:04 GMT
expires: Mon, 22 Jan 2024 19:36:04 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: text/html
age: 568184
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pages-stats.rbl.ms/spacer.gif?1674984355290&event=post-page-view-duration&version=1&format=json&data=%7B%22site_id%22%3A13918151%2C%22roar_id%22%3A13918151%2C%22client%22%3A%22desktop%22%2C%22referrer%22%3A%22%22%2C%22duration%22%3A1000%7D
200 OK 43 B URL HTTP/2 pages-stats.rbl.ms/spacer.gif?1674984355290&event=post-page-view-duration&version=1&format=json&data=%7B%22site_id%22%3A13918151%2C%22roar_id%22%3A13918151%2C%22client%22%3A%22desktop%22%2C%22referrer%22%3A%22%22%2C%22duration%22%3A1000%7D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /spacer.gif?1674984355290&event=post-page-view-duration&version=1&format=json&data=%7B%22site_id%22%3A13918151%2C%22roar_id%22%3A13918151%2C%22client%22%3A%22desktop%22%2C%22referrer%22%3A%22%22%2C%22duration%22%3A1000%7D HTTP/1.1
Host: pages-stats.rbl.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:48 GMT
content-type: image/gif
content-length: 43
server: openresty
last-modified: Wed, 25 Jan 2023 17:46:41 GMT
etag: "63d16b01-2b"
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b7da7d1d3e5880d5d4e313ac7fcf2a83
60a1e887ccb7c7cdae0035c65ef7df9908547fef
af17efcd17df50324c29cff05cea79f18cba79f6b1134ec0e6d1637759b5e895
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
sb.scorecardresearch.com/beacon.js
200 OK 1.9 kB URL HTTP/2 sb.scorecardresearch.com/beacon.js
IP
File type ASCII text, with very long lines (3936)
Hash ccbe1595614949962ea0f4c9ec84e783
65525e8918223db782724d28fce74efb513a0fb0
f422f26d9197a10abf1a13a13a87a5fcc4b98ad57aae11fadfddf2df02b591f5
GET /beacon.js HTTP/1.1
Host: sb.scorecardresearch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 28 Jun 2022 13:19:23 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Sun, 29 Jan 2023 01:20:12 GMT
cache-control: max-age=86400
etag: W/"eaf85c1c6758e84acfe134efd70e9373"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HQYw1kYiwu9IkL5Z5aEQc4fL1jlMNMdH2HZQlzmBG5SYbwyleFTlRg==
age: 29137
X-Firefox-Spdy: h2
rules.quantcount.com/rules-p-31iz6hfFutd16.js
200 OK 160 B URL HTTP/2 rules.quantcount.com/rules-p-31iz6hfFutd16.js
IP
Hash af15ecfe46737cb2a37226fd060f23a6
531085beadcbfe87ed7e5bb352ee60045929287a
4718dd9f68e969d1cb5e1b6172206b7150ad1d8cd5c5c1fe5812dd0e1646d426
GET /rules-p-31iz6hfFutd16.js HTTP/1.1
Host: rules.quantcount.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 160
last-modified: Fri, 14 Oct 2022 00:41:49 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
date: Sun, 29 Jan 2023 09:16:18 GMT
cache-control: max-age=3600
etag: "af15ecfe46737cb2a37226fd060f23a6"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 52bb5852b1acec80b918512e69d8f7dc.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: 8c4LOfL6NAJ5QGEvaw5cUFxlFPzuHDeNxPL1YHnjEnJveYSbDT90gg==
age: 570
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/bg/o7PJ4mencrJpfBYBJyNLdqHy4_8T8e3TraCPfA4Fn-I.js
200 OK 14 kB URL HTTP/2 pagead2.googlesyndication.com/bg/o7PJ4mencrJpfBYBJyNLdqHy4_8T8e3TraCPfA4Fn-I.js
IP
File type ASCII text, with very long lines (35756)
Hash 35140d94f445a831d30781b8adcf5d51
6c87c844332042a520158f20791a2a450e411439
2cd84ad1068050b649d6f5c6600cf0e79fd1983ff5979b695f987337ac4edfd5
GET /bg/o7PJ4mencrJpfBYBJyNLdqHy4_8T8e3TraCPfA4Fn-I.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14089
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 23 Jan 2023 20:31:24 GMT
expires: Tue, 23 Jan 2024 20:31:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 19 Jan 2023 11:48:00 GMT
content-type: text/javascript
age: 478464
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash e8a4c7990aadde463c62a6c6ea773f05
1bab12c300cead142f8c0a29ca4864c814e5a8e5
ebea67a3a4c62aae0d207db74509a4758c0d1e56cba692557164858d6ba258fe
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6117
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:48 GMT
Last-Modified: Sun, 29 Jan 2023 07:43:51 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 279
s.yimg.com/wi/config/10022623.json
200 OK 22 B URL HTTP/2 s.yimg.com/wi/config/10022623.json
IP
ASN #203220 Yahoo! UK Services Limited
File type JSON data\012- , ASCII text, with no line terminators
Hash 14293ad9ad0ffaf9f7a3acf1b0793b66
718dea6b65b9516e5e33fac53451056397deb255
73a1b438b0221511fb3dde18e019f5ab045811b2248d25d424e40980c683a9dc
GET /wi/config/10022623.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
x-amz-request-id: H8CCA96YQKYSGQ87
x-amz-id-2: 7aJM/p7iI8AgQpMvU0URCmeMm/ahb3ch9CEy/4+zibJcaX16okbBrrqCk3bPzt4HceE/nBXwRvc=
content-type: application/json
date: Sun, 29 Jan 2023 09:25:48 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
content-encoding: gzip
content-length: 22
age: 0
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/9O8VcKlZFo8
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/9O8VcKlZFo8
IP
Hash 8b9c14eef656903994be7111670778e4
376f66dc915c806939f5c1dd3f17f96523ebc71e
2b8a0aea2df31629f23aca80b05ada2f042f1f96b8becf05ead0d5a660edd020
POST /s/gts1p5/9O8VcKlZFo8 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:48 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1p5/K-jlOqKn9CY
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/K-jlOqKn9CY
IP
Hash 702c2948177031d46d4c83e99b5ed7b0
858a062e8fa69334df9b34203349dc7c595c5f6b
aefdd8f7107efd57817fa1cf9315a9ee248fc074b34f2ea285702542413385b0
POST /s/gts1p5/K-jlOqKn9CY HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:48 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
a.pub.network/core/prebid-analytics-7.19.9.js
200 OK 174 kB URL HTTP/2 a.pub.network/core/prebid-analytics-7.19.9.js
IP
Size 174 kB (173715 bytes)
Hash 6730f3d3fcbf2bc70083fce4d674ceb0
d274a689e3e2a22c0718bbd668a0b2f5af7045a6
37881a7660fa9eab55d90c126ce08509c399e0f25e12fb1155cfbb29a5d8eae3
GET /core/prebid-analytics-7.19.9.js HTTP/1.1
Host: a.pub.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Cookie: _fsuid=3e394998-628e-4ca0-a622-31b5d56f900b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:48 GMT
content-type: text/html
x-guploader-uploadid: ADPycdsqtvuJlFNseWBohC9mRf9bvPhTc-_5692bghUylcKebcnpw_Xr-AzQ_7fAiR26n7wMV55owpWXaJLsm0zCVKBHw7D4i13p
cache-control: public, max-age=31507496
expires: Mon, 29 Jan 2024 01:30:44 GMT
last-modified: Thu, 19 Jan 2023 21:04:22 GMT
etag: W/"63f38dd07f88d1501fbaebc315cb56fb"
x-goog-generation: 1674162262212600
x-goog-metageneration: 3
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 561234
content-language: en
x-goog-hash: crc32c=F3256A==, md5=Y/ON0H+I0VAfuuvDFctW+w==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: *
cf-cache-status: HIT
age: 28495
vary: Accept-Encoding
server: cloudflare
cf-ray: 7910ec345b02b517-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/I5VESkaUCHo
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/I5VESkaUCHo
IP
Hash 4fe92622b2df8a86d4785c26b9ad3fb4
d4713da1546e123e562d56bc68ed2377c023909d
10b8961a6b6b26ffb7f9c84517b855cd933d1f9b51965f18967ef6a4551f1114
POST /s/gts1d4/I5VESkaUCHo HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:48 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/I5VESkaUCHo
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/I5VESkaUCHo
IP
Hash 4fe92622b2df8a86d4785c26b9ad3fb4
d4713da1546e123e562d56bc68ed2377c023909d
10b8961a6b6b26ffb7f9c84517b855cd933d1f9b51965f18967ef6a4551f1114
POST /s/gts1d4/I5VESkaUCHo HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:48 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
optimise.net/?d=www.popdust.com&t=desktop
200 OK 0 B URL HTTP/2 optimise.net/?d=www.popdust.com&t=desktop
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /?d=www.popdust.com&t=desktop HTTP/1.1
Host: optimise.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.popdust.com/
Origin: https://www.popdust.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:48 GMT
access-control-allow-origin: https://www.popdust.com
access-control-allow-credentials: true
access-control-allow-methods: ACL, CANCELUPLOAD, CHECKIN, CHECKOUT, COPY, DELETE, GET, HEAD, LOCK, MKCALENDAR, MKCOL, MOVE, OPTIONS, POST, PROPFIND, PROPPATCH, PUT, REPORT, SEARCH, UNCHECKOUT, UNLOCK, UPDATE, VERSION-CONTROL
access-control-max-age: 3600
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Key, Authorization
access-control-expose-headers: fs-client-rtt
strict-transport-security: max-age=31536000;includeSubDomains;preload;
content-length: 0
via: 1.1 google
fs-client-rtt: 8
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: 0
pragma: no-cache
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/I5VESkaUCHo
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/I5VESkaUCHo
IP
Hash 4fe92622b2df8a86d4785c26b9ad3fb4
d4713da1546e123e562d56bc68ed2377c023909d
10b8961a6b6b26ffb7f9c84517b855cd933d1f9b51965f18967ef6a4551f1114
POST /s/gts1d4/I5VESkaUCHo HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:49 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pixel.quantserve.com/pixel;r=1398079958;labels=Domain.popdust_com%2CDomainId.76345;rf=0;a=p-31iz6hfFutd16;url=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d;uht=2;fpan=1;fpa=P0-1813112332-1674984355413;pbc=;ns=0;ce=1;qjs=1;qv=8508733c-20230116145555;cm=;gdpr=0;ref=;d=popdust.com;dst=0;et=1674984355546;tzo=0;ogl=type.article%2Curl.https%3A%2F%2Fwww%252Epopdust%252Ecom%2Fnutrisystem-weight-loss-program-2658232706%252Ehtml%2Csite_name.Popdust%2Cimage.https%3A%2F%2Fassets%252Erebelmouse%252Eio%2FeyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9%252EeyJpbWFnZSI6Im%2Cimage%3Awidth.1200%2Cimage%3Aheight.600%2Ctitle.I%20Performed%20A%20Weight%20Loss%20Program%20Test%3A%20Here%E2%80%99s%20Who%20Won%2Cdescription.I%20kept%20telling%20myself%20that%20I%E2%80%99d%20get%20in%20shape%252C%20but%20that%20motivation%20lasted%20about%20a%20;ses=0d1739dd-a67c-4191-b5d5-7d53d9a4325d
200 OK 35 B URL HTTP/2 pixel.quantserve.com/pixel;r=1398079958;labels=Domain.popdust_com%2CDomainId.76345;rf=0;a=p-31iz6hfFutd16;url=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d;uht=2;fpan=1;fpa=P0-1813112332-1674984355413;pbc=;ns=0;ce=1;qjs=1;qv=8508733c-20230116145555;cm=;gdpr=0;ref=;d=popdust.com;dst=0;et=1674984355546;tzo=0;ogl=type.article%2Curl.https%3A%2F%2Fwww%252Epopdust%252Ecom%2Fnutrisystem-weight-loss-program-2658232706%252Ehtml%2Csite_name.Popdust%2Cimage.https%3A%2F%2Fassets%252Erebelmouse%252Eio%2FeyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9%252EeyJpbWFnZSI6Im%2Cimage%3Awidth.1200%2Cimage%3Aheight.600%2Ctitle.I%20Performed%20A%20Weight%20Loss%20Program%20Test%3A%20Here%E2%80%99s%20Who%20Won%2Cdescription.I%20kept%20telling%20myself%20that%20I%E2%80%99d%20get%20in%20shape%252C%20but%20that%20motivation%20lasted%20about%20a%20;ses=0d1739dd-a67c-4191-b5d5-7d53d9a4325d
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55d25e9dc950d5db4d53a3b195c046c6
75e91ae3e549dab12ed1c9787ade9131aef1c981
a0d3a0aff7dc3bf32d2176fc3dcda6e7aba2867c4f4d1f7af6355d2cfc6c44f8
GET /pixel;r=1398079958;labels=Domain.popdust_com%2CDomainId.76345;rf=0;a=p-31iz6hfFutd16;url=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d;uht=2;fpan=1;fpa=P0-1813112332-1674984355413;pbc=;ns=0;ce=1;qjs=1;qv=8508733c-20230116145555;cm=;gdpr=0;ref=;d=popdust.com;dst=0;et=1674984355546;tzo=0;ogl=type.article%2Curl.https%3A%2F%2Fwww%252Epopdust%252Ecom%2Fnutrisystem-weight-loss-program-2658232706%252Ehtml%2Csite_name.Popdust%2Cimage.https%3A%2F%2Fassets%252Erebelmouse%252Eio%2FeyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9%252EeyJpbWFnZSI6Im%2Cimage%3Awidth.1200%2Cimage%3Aheight.600%2Ctitle.I%20Performed%20A%20Weight%20Loss%20Program%20Test%3A%20Here%E2%80%99s%20Who%20Won%2Cdescription.I%20kept%20telling%20myself%20that%20I%E2%80%99d%20get%20in%20shape%252C%20but%20that%20motivation%20lasted%20about%20a%20;ses=0d1739dd-a67c-4191-b5d5-7d53d9a4325d HTTP/1.1
Host: pixel.quantserve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:49 GMT
content-type: image/gif
content-length: 35
cache-control: private, no-cache, no-store, proxy-revalidate
expires: Fri, 04 Aug 1978 12:00:00 GMT
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV"
pragma: no-cache
set-cookie: mc=63d63b9d-0c8f9-b5fab-5a855; expires=Thu, 29-Feb-2024 09:25:49 GMT; path=/; domain=.quantserve.com
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1973203182716627&ev=PageView&dl=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&rl=&if=false&ts=1674984355640&sw=1280&sh=1024&v=2.9.92&r=stable&ec=0&o=30&fbp=fb.1.1674984355640.59557481&it=1674984355382&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1973203182716627&ev=PageView&dl=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&rl=&if=false&ts=1674984355640&sw=1280&sh=1024&v=2.9.92&r=stable&ec=0&o=30&fbp=fb.1.1674984355640.59557481&it=1674984355382&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1973203182716627&ev=PageView&dl=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&rl=&if=false&ts=1674984355640&sw=1280&sh=1024&v=2.9.92&r=stable&ec=0&o=30&fbp=fb.1.1674984355640.59557481&it=1674984355382&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Sun, 29 Jan 2023 09:25:49 GMT
X-Firefox-Spdy: h2
freestar-io.videoplayerhub.com/gallery.js
301 Moved Permanently 142 kB URL HTTP/2 freestar-io.videoplayerhub.com/gallery.js
IP
Size 142 kB (142366 bytes)
Hash 8770da1bb15ed6ec4d5b4fea38d60f0b
241d4baaa0194190469d9ec34aa8b6c181830635
20489471842505eb3d1a50e0f79dbbb18d1c56cfeebdf9d5d8c2b48040fc011a
GET /gallery.js HTTP/1.1
Host: freestar-io.videoplayerhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Sun, 29 Jan 2023 09:25:48 GMT
location: https://btloader.com/tag?h=freestar-io&upapi=true
cache-control: max-age=3600
expires: Sun, 29 Jan 2023 10:25:48 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HJc90ajWf8%2BagTp8OTB4puPBOqeWbPb7lRLdTTO%2BjtbtLmCdQnH5L%2B80ji%2BLlycAX9zCeZs3sJ3mNBveZ13HpJgFj8UuAMPzNv0dpMjfnYcmKYH09nBEqk3f05ShmzsXvjtPC%2BD3zSDh8nhWqGwGtg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7910ec34991bb515-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/K-jlOqKn9CY
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/K-jlOqKn9CY
IP
Hash 702c2948177031d46d4c83e99b5ed7b0
858a062e8fa69334df9b34203349dc7c595c5f6b
aefdd8f7107efd57817fa1cf9315a9ee248fc074b34f2ea285702542413385b0
POST /s/gts1p5/K-jlOqKn9CY HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:49 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
widgets.outbrain.com/outbrain.js
200 OK 76 kB URL HTTP/2 widgets.outbrain.com/outbrain.js
IP
File type ASCII text, with very long lines (1595)
Hash 059f2771db17d4037a25dc12b9d8002b
2ec48a6858f5e0672cfcee8cf67914867958beeb
9347087306d9c85e9fb643ee324aacf6ed5308753636e4b45a06b6cd6f01c263
GET /outbrain.js HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 75800
x-traceid: dc202962c90cb8ff3bdd75d7de90f0a3
etag: "16-fhWhhjwxPvAh/zz/xpJXors0Aes"
last-modified: Sun, 29 Jan 2023 08:11:53 GMT
cache-control: max-age=14400
content-encoding: gzip
vary: Accept-Encoding
date: Sun, 29 Jan 2023 09:25:48 GMT
edge-cache-tag: widget-cheetah
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 445063afd151207b8f2cbf00e1aef829
48d80360c1d94ce5315b13b9b6570534b46c3e52
47f18d9dd5cddfded0522a3f71ba70cc32740f23a52b5443c530461a35440e51
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3480
Cache-Control: max-age=89121
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:49 GMT
Etag: "63d4e726-117"
Expires: Mon, 30 Jan 2023 10:11:10 GMT
Last-Modified: Sat, 28 Jan 2023 09:13:10 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 445063afd151207b8f2cbf00e1aef829
48d80360c1d94ce5315b13b9b6570534b46c3e52
47f18d9dd5cddfded0522a3f71ba70cc32740f23a52b5443c530461a35440e51
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2836
Cache-Control: max-age=88477
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:49 GMT
Etag: "63d4e726-117"
Expires: Mon, 30 Jan 2023 10:00:26 GMT
Last-Modified: Sat, 28 Jan 2023 09:13:10 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 279
ad-delivery.net/px.gif?ch=2
200 OK 43 B URL HTTP/2 ad-delivery.net/px.gif?ch=2
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /px.gif?ch=2 HTTP/1.1
Host: ad-delivery.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:49 GMT
content-type: image/gif
content-length: 43
x-guploader-uploadid: ADPycdvRyQuiKR7vao0d0gZH1fD4TACxVBfdiOoBZcjsTHe5pQD9btOiEjggzyh8C86yatVzyUlYTAFym5Cc073wIsWMUTACWflM
x-goog-generation: 1620242732037093
x-goog-metageneration: 5
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 43
x-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: *, Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
expires: Thu, 26 Jan 2023 22:54:58 GMT
cache-control: public, max-age=86400
age: 214077
last-modified: Wed, 05 May 2021 19:25:32 GMT
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3"
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AoAZbrTyeQnvHyM79iBQ7Swdt2IdqG5l71fW3rm3NYyesYDMStXJTKAEPRma0g49Zu0jWv6q8psDI7Ahp7bvUu6D%2Fje8COtAUibZNA5LTC9sGhOmuXOOcnoMMqBjscm16Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7910ec3688bcb505-OSL
X-Firefox-Spdy: h2
ad-delivery.net/px.gif?ch=1&e=0.08096028116233611
200 OK 43 B URL HTTP/2 ad-delivery.net/px.gif?ch=1&e=0.08096028116233611
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /px.gif?ch=1&e=0.08096028116233611 HTTP/1.1
Host: ad-delivery.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:49 GMT
content-type: image/gif
content-length: 43
x-guploader-uploadid: ADPycdvRyQuiKR7vao0d0gZH1fD4TACxVBfdiOoBZcjsTHe5pQD9btOiEjggzyh8C86yatVzyUlYTAFym5Cc073wIsWMUTACWflM
x-goog-generation: 1620242732037093
x-goog-metageneration: 5
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 43
x-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: *, Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
expires: Thu, 26 Jan 2023 22:54:58 GMT
cache-control: public, max-age=86400
age: 214077
last-modified: Wed, 05 May 2021 19:25:32 GMT
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3"
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z%2FH%2BiIljRthCI6XynOb7Rw8lapa1msFRivB5yaFrFRQH8VVwbQ5dw7k36afxaa2a67thiUZLSeTTltOOwl3u9DN%2B9LRubxmpVsN9MoiXPS4osD9Z7hhelKvTXFB50lo4Ag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7910ec3698c4b505-OSL
X-Firefox-Spdy: h2
widgets.outbrain.com/nanoWidget/2010108/module/notOutbrain.js
200 OK 21 B URL HTTP/2 widgets.outbrain.com/nanoWidget/2010108/module/notOutbrain.js
IP
File type very short file (no magic)
Hash b9afc501fc43fbea335a2dc5d43263a1
7290a2dd6afbf39ecfc35b52dfb32a38fc222994
d6e425ca7840c0ab6f26f5fc2822a47e26b4a8bbd104468a9c185bc132b8662f
GET /nanoWidget/2010108/module/notOutbrain.js HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "68b329da9893e34099c7d8ad5cb9c940:1674981719.097256"
last-modified: Sun, 29 Jan 2023 08:11:10 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 21
cache-control: max-age=604800
expires: Sun, 05 Feb 2023 09:25:49 GMT
date: Sun, 29 Jan 2023 09:25:49 GMT
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/-vVKdY11C3E
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/-vVKdY11C3E
IP
Hash 8501df073e195b61b11671c71dc6e517
64f997cf18c9beb1dfd3335c640be61633ee3a6a
65cbdda61019321f2953ea85522407c1242d3239afa4297265329ad72cfbb591
POST /s/gts1d4/-vVKdY11C3E HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:49 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/-vVKdY11C3E
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/-vVKdY11C3E
IP
Hash 8501df073e195b61b11671c71dc6e517
64f997cf18c9beb1dfd3335c640be61633ee3a6a
65cbdda61019321f2953ea85522407c1242d3239afa4297265329ad72cfbb591
POST /s/gts1d4/-vVKdY11C3E HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:49 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.confiant-integrations.net/gptprebidnative/202212211045/wrap.js
200 OK 69 kB URL HTTP/2 cdn.confiant-integrations.net/gptprebidnative/202212211045/wrap.js
IP
File type Unicode text, UTF-8 text, with very long lines (21703)
Hash 74c06122ecd72cbc47dde68ba289ba32
3538243b29e57fb56b924b7fa1f3ec5208546dad
fa4628bf39080ef74092151b7e0da9041411b6d25ca4a16800ff6cf08fd9b7ba
GET /gptprebidnative/202212211045/wrap.js HTTP/1.1
Host: cdn.confiant-integrations.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:49 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: WZ3d5nz6Q78/yNm0wY3JWuRPSlIEK6G6n01doQRCRXQepnSVM6il3PFJ+DEQYqj5Nlr+nFOqmq0=
x-amz-request-id: JQCRHGREJ92MCEV5
last-modified: Wed, 21 Dec 2022 15:47:15 GMT
etag: W/"fa407ba001f2ac06196124f41d523471"
cache-control: public, max-age=31536000
cf-cache-status: HIT
age: 1441280
vary: Accept-Encoding
server: cloudflare
cf-ray: 7910ec358ca10b51-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
tcheck.outbrainimg.com/tcheck/check/d3d3LnBvcGR1c3QuY29t
200 OK 15 B URL HTTP/1.1 tcheck.outbrainimg.com/tcheck/check/d3d3LnBvcGR1c3QuY29t
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 529cac05e2a53fd8794eb9e5699d9740
6b22e508bdcfbb35d24e176eefc89179212397a6
39d160e97e2bea07b0cf1c647259ffa4f0bd07069dba4e6c19a22d38b408510f
GET /tcheck/check/d3d3LnBvcGR1c3QuY29t HTTP/1.1
Host: tcheck.outbrainimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
Content-Length: 15
X-TraceId: 93d55ea2f49ff5903ef865cc5efb61cd
ETag: W/"f-ayLlCL3PuzXSThdu78iReSEjl6Y"
Cache-Control: max-age=14824
Expires: Sun, 29 Jan 2023 13:32:53 GMT
Date: Sun, 29 Jan 2023 09:25:49 GMT
Connection: keep-alive
Access-Control-Max-Age: 43200
Access-Control-Allow-Credentials: false
Access-Control-Allow-Methods: GET,POST
Access-Control-Allow-Origin: *
api.btloader.com/pv?tid=z5pOdR7XMu&w=5149009265033216&o=5714937848528896&cv=2.1.06-2-g014272c&r=false&vr=1280x939&pageURL=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&sid=OxfsYKF0RR&upapi=true
204 No Content 0 B URL HTTP/2 api.btloader.com/pv?tid=z5pOdR7XMu&w=5149009265033216&o=5714937848528896&cv=2.1.06-2-g014272c&r=false&vr=1280x939&pageURL=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&sid=OxfsYKF0RR&upapi=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pv?tid=z5pOdR7XMu&w=5149009265033216&o=5714937848528896&cv=2.1.06-2-g014272c&r=false&vr=1280x939&pageURL=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&sid=OxfsYKF0RR&upapi=true HTTP/1.1
Host: api.btloader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
vary: Origin
date: Sun, 29 Jan 2023 09:25:49 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ef589be52a3e55b643978f17949a73da
74545de6f144282252ff92c751f97cc835c80341
7bfa68c43e60a2627770163b5c1b96fbd7e4843984ad5ff6225c5490b8073b26
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.no/adsid/integrator.js?domain=www.popdust.com
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=www.popdust.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.popdust.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sun, 29 Jan 2023 09:25:49 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
api.btloader.com/country
200 OK 16 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 452880c1a375b8fba8c9499f0930d05f
ffe5484a23512c2a574d837fe2d3267b134e48c8
8b3383aa4c71f1d816bfaf33e3ef2e8ded067698a7798b9f306204d5777b140d
GET /country HTTP/1.1
Host: api.btloader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: private, max-age=300, stale-while-revalidate=600, stale-if-error=600
content-type: application/json
vary: Origin
date: Sun, 29 Jan 2023 09:25:49 GMT
content-length: 16
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.popdust.com/static/dist/social-ux/5517.9c8f5339b69b57d80999.bundle.mjs
200 OK 2.0 kB URL HTTP/2 www.popdust.com/static/dist/social-ux/5517.9c8f5339b69b57d80999.bundle.mjs
IP
File type ASCII text, with very long lines (3978)
Hash 233c1fac2dff65d3bb1d3ebf9dcedd90
e4c460cb2a4e124a33cfeea5789ff3807d75056d
cfd2fe908747a2fc1a65d20b5f5799a0c882b19a017c8799a3a0242035e6e6f0
GET /static/dist/social-ux/5517.9c8f5339b69b57d80999.bundle.mjs HTTP/1.1
Host: www.popdust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.popdust.com/nutrisystem-weight-loss-program-2658232706.html?&gdpid=63d63b9a9517950225184a5d
Connection: keep-alive
Cookie: ezoadgid_76345=-1; ezoref_76345=; ezosuibasgeneris-1=1a2deee5-c477-43ef-5cc5-92f5a801e8c6; ezoab_76345=mod1; lp_76345=https://www.popdust.com/nutrisystem-weight-loss-program-2658232706.html?gdpid=63d63b9a9517950225184a5d; ezovuuidtime_76345=1674984346; ezovuuid_76345=59cd4e71-42e0-420b-4b5e-cfef861ab757; ezopvc_76345=1; ezovab_76345=vmod1-c; fs.bot.check=true; _ga_VWQCYNNMD2=GS1.1.1674984354.1.0.1674984354.60.0.0; _ga=GA1.2.1431532804.1674984355; exco-uid=fkb6omqrzpvh4u1h; _gid=GA1.2.847625689.1674984355; _gat_gtag_UA_19669260_1=1; fs.session.id=b3f27972-31f6-4b4d-83f4-e071f22b76a3; _fbp=fb.1.1674984355640.59557481; __qca=P0-1813112332-1674984355413
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
age: 16
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cache-control: max-age=31536000
content-encoding: br
content-type: application/x-javascript
date: Sun, 29 Jan 2023 09:25:49 UTC
display: staticcontent_sol, orig_site_sol
etag: W/"632c41b9-fc8-gzip"
fastly-request-backend: fastly
fastly-sie: 86400.000
fastly-swr: 2592000.000
last-modified: Tue, 24 Jan 2023 19:08:54 GMT
response: 200
server: Apache/2.4.39 (Ubuntu)
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding,User-Agent,Origin
via: 1.1 F_wfe_production, 1.1 varnish, 1.1 varnish
x-cache: HIT, MISS
x-cache-hits: 1, 0
x-ezoic-cdn: Hit ds;mm;c0646d1ec75790de227ed0b7d38d980f;2-76345-22;7f5f93dd-f722-486d-49e6-28658eec0cae
x-frame-options: SAMEORIGIN
x-middleton-display: staticcontent_sol, orig_site_sol
x-middleton-response: 200
x-origin-cache-control: max-age=31536000
x-request-id: c8deb3bb-c41f-4b92-8622-ab2eb3c238cd
x-served-by: cache-iad-kiad7000169-IAD, cache-hhn4051-HHN
x-sol: orig
x-timer: S1663932726.913069,VS0,VE90
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/KGq8DytYmJM
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/KGq8DytYmJM
IP
Hash a0c31347d22cb72f3fcd8800d8cb83e1
522cc47fb787080b74229ffd5c549917209550d4
c16367e3a8fe1736d54e2b08cd2ff2c4041eba5749c0a2f95726c3f224fa1bef
POST /s/gts1d4/KGq8DytYmJM HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:49 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/adsid/integrator.js?domain=www.popdust.com
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=www.popdust.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.popdust.com HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sun, 29 Jan 2023 09:25:49 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/-vVKdY11C3E
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/-vVKdY11C3E
IP
Hash 8501df073e195b61b11671c71dc6e517
64f997cf18c9beb1dfd3335c640be61633ee3a6a
65cbdda61019321f2953ea85522407c1242d3239afa4297265329ad72cfbb591
POST /s/gts1d4/-vVKdY11C3E HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:49 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
api.floors.dev/sgw/v1/floors
200 OK 0 B URL HTTP/2 api.floors.dev/sgw/v1/floors
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /sgw/v1/floors HTTP/1.1
Host: api.floors.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-api-key
Referer: https://www.popdust.com/
Origin: https://www.popdust.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:49 GMT
access-control-allow-origin: https://www.popdust.com
access-control-allow-credentials: true
access-control-allow-methods: ACL, CANCELUPLOAD, CHECKIN, CHECKOUT, COPY, DELETE, GET, HEAD, LOCK, MKCALENDAR, MKCOL, MOVE, OPTIONS, POST, PROPFIND, PROPPATCH, PUT, REPORT, SEARCH, UNCHECKOUT, UNLOCK, UPDATE, VERSION-CONTROL
access-control-max-age: 3600
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Key, Authorization, x-api-key
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
strict-transport-security: max-age=31536000;includeSubDomains;preload;
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
a.pub.network/popdust-com/pubfig.min.js
200 OK 63 kB URL HTTP/2 a.pub.network/popdust-com/pubfig.min.js
IP
Hash 0823cbcce4efe463321f46da4720c48f
a4bec7334e3c583748b890b4b13c41ef266ea9f3
c080f3df1bc267689b2e56fa617f74ac597f86c7d6f2d5e860695425094858ec
GET /popdust-com/pubfig.min.js HTTP/1.1
Host: a.pub.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:47 GMT
content-type: application/javascript
x-guploader-uploadid: ADPycdsYej0_Aq9m0lbBbaPiKjwUlaWjl7a9Z6hSMYNCzIArMtHinl_x3UYSd5rHUZI7sybY3yuw2UrQcYMWDkGj2X3NsVxBHI0V
x-goog-generation: 1674670404512943
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 174711
x-goog-hash: crc32c=a39bCQ==, md5=IXD9aK6hNyNSQgrN7mwr8A==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: *
expires: Sun, 29 Jan 2023 09:55:47 GMT
cache-control: public, max-age=1800
last-modified: Wed, 25 Jan 2023 18:13:24 GMT
etag: W/"2170fd68aea1372352420acdee6c2bf0"
cf-cache-status: HIT
age: 179970
vary: Accept-Encoding
server: cloudflare
cf-ray: 7910ec2a6da1b517-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ef589be52a3e55b643978f17949a73da
74545de6f144282252ff92c751f97cc835c80341
7bfa68c43e60a2627770163b5c1b96fbd7e4843984ad5ff6225c5490b8073b26
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/KGq8DytYmJM
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/KGq8DytYmJM
IP
Hash a0c31347d22cb72f3fcd8800d8cb83e1
522cc47fb787080b74229ffd5c549917209550d4
c16367e3a8fe1736d54e2b08cd2ff2c4041eba5749c0a2f95726c3f224fa1bef
POST /s/gts1d4/KGq8DytYmJM HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:49 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
api.floors.dev/sgw/v1/floors
200 OK 2.0 kB URL HTTP/2 api.floors.dev/sgw/v1/floors
IP
Hash 7c0d0f099ec4b3978ebef3d4cee69309
6b54ba46ff2335a7bfd63d0b7443f5c370a72479
4b1da7cfba9b6721b0c190e5f0fc03a9acdf9ca0170b9ac510411198481011f4
POST /sgw/v1/floors HTTP/1.1
Host: api.floors.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
x-api-key: 4e799501-b8b6-4ef1-bad5-225b3dd1aa8d
Origin: https://www.popdust.com
Content-Length: 522
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:49 GMT
access-control-allow-origin: https://www.popdust.com
access-control-allow-credentials: true
access-control-allow-methods: ACL, CANCELUPLOAD, CHECKIN, CHECKOUT, COPY, DELETE, GET, HEAD, LOCK, MKCALENDAR, MKCOL, MOVE, OPTIONS, POST, PROPFIND, PROPPATCH, PUT, REPORT, SEARCH, UNCHECKOUT, UNLOCK, UPDATE, VERSION-CONTROL
access-control-max-age: 3600
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Key, Authorization, x-api-key
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
strict-transport-security: max-age=31536000;includeSubDomains;preload;
content-type: application/json
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
odb.outbrain.com/utils/get?url=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html&srcUrl=https%3A%2F%2Fwww.popdust.com%2Ffeeds%2Fsponsored.rss&idx=0&rand=63003&key=NANOWDGT01&widgetJSId=AR_11&va=true&et=true&format=html&adblck=false&abwl=false&px=424&py=4905&vpd=3966&activeTab=true&ab=0&wl=0&settings=true&recs=true&version=2010108&sig=5Bba4dvm&apv=false&&osLang=en-US&winW=1268&winH=939&scrW=1280&scrH=1024&dpr=1&secured=true&cmpStat=0&ccpaStat=0&chs=1&ogn=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d
200 OK 3.9 kB URL HTTP/2 odb.outbrain.com/utils/get?url=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html&srcUrl=https%3A%2F%2Fwww.popdust.com%2Ffeeds%2Fsponsored.rss&idx=0&rand=63003&key=NANOWDGT01&widgetJSId=AR_11&va=true&et=true&format=html&adblck=false&abwl=false&px=424&py=4905&vpd=3966&activeTab=true&ab=0&wl=0&settings=true&recs=true&version=2010108&sig=5Bba4dvm&apv=false&&osLang=en-US&winW=1268&winH=939&scrW=1280&scrH=1024&dpr=1&secured=true&cmpStat=0&ccpaStat=0&chs=1&ogn=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d
IP
File type ASCII text, with very long lines (11532), with no line terminators
Hash 25f26ed1a5d55c7233bda4f89cc41652
4fbaa9ce596fba08cec8700445ebb7129da660c6
f2983e60324ecbf881132f57159c93fd2dafd8870478c93835c0e9b60e183569
GET /utils/get?url=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html&srcUrl=https%3A%2F%2Fwww.popdust.com%2Ffeeds%2Fsponsored.rss&idx=0&rand=63003&key=NANOWDGT01&widgetJSId=AR_11&va=true&et=true&format=html&adblck=false&abwl=false&px=424&py=4905&vpd=3966&activeTab=true&ab=0&wl=0&settings=true&recs=true&version=2010108&sig=5Bba4dvm&apv=false&&osLang=en-US&winW=1268&winH=939&scrW=1280&scrH=1024&dpr=1&secured=true&cmpStat=0&ccpaStat=0&chs=1&ogn=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d HTTP/1.1
Host: odb.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
expires: Thu, 01 Jan 1970 00:00:00 GMT
x-traceid: 8b94b057d4d076b553f8fe9c08c34903
content-encoding: gzip
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
date: Sun, 29 Jan 2023 09:25:49 GMT
x-served-by: cache-lga21952-LGA, cache-hel1410030-HEL
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1674984350.624151,VS0,VE123
vary: Accept-Encoding, User-Agent
traffic-path: NYDC1, LGA, HEL, Europe1
content-length: 3871
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 04c624d8879f883e20d8df7051843b37
0ba630a4f0865b761623030784e2b931cc6bfe1f
de8698a1e78247e0fbbe185a542c8ba7dcde748c3e84a5f636d2c6a6a10aedd1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6498
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:49 GMT
Last-Modified: Sun, 29 Jan 2023 07:37:31 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash 04c624d8879f883e20d8df7051843b37
0ba630a4f0865b761623030784e2b931cc6bfe1f
de8698a1e78247e0fbbe185a542c8ba7dcde748c3e84a5f636d2c6a6a10aedd1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6504
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:49 GMT
Last-Modified: Sun, 29 Jan 2023 07:37:25 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 278 B IP
Hash dc5487c7a148b00188516c7de2fdd0f6
835cf3c9d7378f6193c8be4767946886563d5458
1e263f227fbccaaa9e8d559f276c4a97c2de68f7d38953a23a16916a11b9ac22
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4187
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:49 GMT
Etag: "63d5b9f9-116"
Last-Modified: Sun, 29 Jan 2023 08:16:02 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 278
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe3c3d3d0f7b485017d20db5e7df9d6e
c05ff8a33adf1277ef619635a19d94e27e1fe732
bc3988575ea22f567a4775ecc1b35761d4c2dc0539141c461000cb1051347cde
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BC3988575EA22F567A4775ECC1B35761D4C2DC0539141C461000CB1051347CDE"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5204
Expires: Sun, 29 Jan 2023 10:52:33 GMT
Date: Sun, 29 Jan 2023 09:25:49 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash b885cae0853eedd233842124fba5b68b
c89cd676b5f1546b055cdd94a0a6ca1590872b78
4d16e026021213e25b61d4bb27dfd4e879ec6e87ea7062bd720a2140e130b2bc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3110
Cache-Control: max-age=152071
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:49 GMT
Etag: "63d5de7e-1d7"
Expires: Tue, 31 Jan 2023 03:40:20 GMT
Last-Modified: Sun, 29 Jan 2023 02:48:30 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 1d87007d974e900c84dab49de35700ec
2c14104dbbd75bcaac1b31cf4bdf257bb5a46bf7
ae30ee36f2600590c80e3f9a44c4d6e2bbcb441eef2c1a5ca4c726468beab75f
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1414
Server: nginx
Content-Type: application/ocsp-response
Expires: Thu, 02 Feb 2023 05:50:20 GMT
ETag: "2c14104dbbd75bcaac1b31cf4bdf257bb5a46bf7"
Last-Modified: Sun, 29 Jan 2023 05:50:21 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 29 Jan 2023 09:25:49 GMT
Age: 2374
X-Served-By: cache-qpg1235-QPG, cache-bma1651-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 22, 56
X-Timer: S1674984350.858118,VS0,VE0
ocsp.digicert.com/
200 OK 278 B IP
Hash 9d9f4a27359a887e26079bd816f791ca
ef2575b917b730092f5b515334455d63ed3cede1
d83fbb3413ee6f2131f50da1eddb5b998727147d87a7d2c318884f92a51c7c1f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:49 GMT
Etag: "63d4ba01-118"
Server: ECS (amb/6B7E)
Content-Length: 278
ocsp.sectigo.com/
200 OK 471 B IP
Hash 8ef1dbe04ff3834735b0659e7ae82c62
56d86283c8861f679162e92c70bbea59f819b8dc
a41623bee3b144f94362b7351bf88236e4291f113068361be33209f550fb3373
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 09:25:49 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 29 Jan 2023 01:42:55 GMT
Expires: Sun, 05 Feb 2023 01:42:54 GMT
Etag: "56d86283c8861f679162e92c70bbea59f819b8dc"
Cache-Control: max-age=576424,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7910ec3a8d67b4f7-OSL
match.adsrvr.org/track/rid?ttd_pid=6bjin1p&fmt=json
200 OK 63 B URL HTTP/2 match.adsrvr.org/track/rid?ttd_pid=6bjin1p&fmt=json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 3da374db25c58d720e01fc60120a44ad
b5db7318a5c1a3d989d5497d4362db86e393d639
ace29cd24716ae4064ff9ef3659302cdd60b7d56d831a7c2bd293cb020c2428c
GET /track/rid?ttd_pid=6bjin1p&fmt=json HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:49 GMT
content-type: application/json; charset=utf-8
content-length: 63
cache-control: private
expires: Tue, 28 Feb 2023 09:25:49 GMT
vary: Origin
access-control-allow-origin: https://www.popdust.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Content-Length, Content-Encoding, Vary, Cache-Control, Accept
x-aspnet-version: 4.0.30319
X-Firefox-Spdy: h2
api.rlcdn.com/api/identity/envelope?pid=106
401 Unauthorized 19 B URL HTTP/2 api.rlcdn.com/api/identity/envelope?pid=106
IP
Hash 63dfbd2b39fe4f536a04e7b32ada47b4
207298c4a215ad5d97d888522927910ae772ba48
26e51290d12b4fea0bb98da3ed118837b744555ba723061771ab3df30000b6b7
GET /api/identity/envelope?pid=106 HTTP/1.1
Host: api.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 401 Unauthorized
content-type: text/plain; charset=utf-8
x-content-type-options: nosniff
date: Sun, 29 Jan 2023 09:25:49 GMT
content-length: 19
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fwww.popdust.com%2F&domain=www.popdust.com&cw=1&lsw=1
200 OK 910 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fwww.popdust.com%2F&domain=www.popdust.com&cw=1&lsw=1
IP
Hash e152cbb184aa6b1b413308791a6ed191
73019fc57c57d36bdfa411d060dfc9711af9f1bd
6c3d16b241c5f9810995a1ae86a8d86e1b423d9a8e646513bddf103552899225
GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fwww.popdust.com%2F&domain=www.popdust.com&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:49 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://www.popdust.com
server-processing-duration-in-ticks: 805193
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
a.quora.com/qevents.js
200 OK 14 kB IP
Hash 67b0ef63054640376b2edb64220caef5
c5ddf17094d61a18283e5b9bb833d03ce17f47d7
cc736ad4c3b13a740b01042ed571be45b1782eb0221bea65db72668459b7eddc
GET /qevents.js HTTP/1.1
Host: a.quora.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:47 GMT
content-type: text/plain
x-amz-id-2: Lo6V6sS9dollZm991E+r9QS5ilIWlcul705lMiga2oQnz8bnT95jaa4X7qyu2MPUU2YNcD20ek4=
x-amz-request-id: ABWFWAK2P6Z86ST7
last-modified: Fri, 18 Mar 2022 00:16:52 GMT
etag: W/"47078e63380c6b0cbbfb6d8508b25ee7"
x-amz-meta-s3cmd-attrs: atime:1647562609/ctime:1647562609/gid:150037/gname:ezhang/md5:47078e63380c6b0cbbfb6d8508b25ee7/mode:33204/mtime:1647562609/uid:150037/uname:ezhang
cache-control: public, max-age=14400
x-amz-version-id: vyBstMTGyA6m5sV66zq8xsypUg.tAOk.
cf-cache-status: HIT
age: 887785
expires: Sun, 29 Jan 2023 13:25:47 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 7910ec2c3c2db506-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
id.hadron.ad.gt/api/v1/hadronid?_it=prebid&partner_id=474&_it=prebid
200 OK 9.8 kB URL HTTP/2 id.hadron.ad.gt/api/v1/hadronid?_it=prebid&partner_id=474&_it=prebid
IP
File type ASCII text, with very long lines (55792), with no line terminators
Hash ceb6b400aae6c446e1854e485124fcab
1116b1b6fc130bcd01d1772acb20615139f87452
637a54befb70c9437adb2955b4b32b5e15982b741fcbed68abb10b0beca2c857
GET /api/v1/hadronid?_it=prebid&partner_id=474&_it=prebid HTTP/1.1
Host: id.hadron.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:50 GMT
content-type: text/javascript; charset=UTF-8
origin-trial:
content-encoding: gzip
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7910ec3aba080b65-OSL
X-Firefox-Spdy: h2
www.popdust.com/static/fonts/roboto/Roboto-regular/Roboto-regular.woff2
200 OK 10 kB URL HTTP/2 www.popdust.com/static/fonts/roboto/Roboto-regular/Roboto-regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 10292, version 2.0\012- data
Hash cb2a6c89908f59e9871c5210ee9f0d6c
6b2001c56ed9fca59516a36389ca5a6c947030c0
f0463f607469f46dfca91244e7d8db9e84f330db27c3f16fe36d03e2bc89053d
GET /static/fonts/roboto/Roboto-regular/Roboto-regular.woff2 HTTP/1.1
Host: www.popdust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.popdust.com/static/css-build/roar/runner/social-ux-non-critical.css?v=rmxassetse8b874e39b339059e338b461576785bb
Cookie: ezoadgid_76345=-1; ezoref_76345=; ezosuibasgeneris-1=1a2deee5-c477-43ef-5cc5-92f5a801e8c6; ezoab_76345=mod1; lp_76345=https://www.popdust.com/nutrisystem-weight-loss-program-2658232706.html?gdpid=63d63b9a9517950225184a5d; ezovuuidtime_76345=1674984346; ezovuuid_76345=59cd4e71-42e0-420b-4b5e-cfef861ab757; ezopvc_76345=1; ezovab_76345=vmod1-c; fs.bot.check=true; _ga_VWQCYNNMD2=GS1.1.1674984354.1.0.1674984354.60.0.0; _ga=GA1.2.1431532804.1674984355; exco-uid=fkb6omqrzpvh4u1h; _gid=GA1.2.847625689.1674984355; _gat_gtag_UA_19669260_1=1; fs.session.id=b3f27972-31f6-4b4d-83f4-e071f22b76a3; _fbp=fb.1.1674984355640.59557481; __qca=P0-1813112332-1674984355413; __gads=ID=eca85bdc8ac77c99:T=1674984349:S=ALNI_MapipCphw1752hF6bxBjKTLvweymA; __gpi=UID=00000baba5c238df:T=1674984349:RT=1674984349:S=ALNI_MZlYS1t5jSXOXoNeY_pgB_rNEOL_g; _pbjs_userid_consent_data=3524755945110770; cookie=886172c0-440b-4dd7-aa75-fda26cce8054; _lr_retry_request=true; _lr_env_src_ats=false
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 605
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cache-control: max-age=31536000
content-type: application/font-woff2
date: Sun, 29 Jan 2023 09:25:50 UTC
display: staticcontent_sol
etag: "63297e2d-2834-gzip"
fastly-request-backend: fastly
fastly-sie: 86400.000
fastly-swr: 2592000.000
last-modified: Tue, 24 Jan 2023 19:08:54 GMT
response: 200
server: Apache/2.4.39 (Ubuntu)
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding,User-Agent,Origin
via: 1.1 F_wfe_production, 1.1 varnish, 1.1 varnish
x-cache: HIT, MISS
x-cache-hits: 3, 0
x-ezoic-cdn: Hit ds;mm;bb786a4a17c84c4469b7c4acdc18f733;2-76345-22;c14b9a84-5c16-47a6-60fc-d5815c553018
x-frame-options: SAMEORIGIN
x-middleton-display: staticcontent_sol
x-middleton-response: 200
x-origin-cache-control: max-age=31536000
x-request-id: 740fd953-917c-4f16-9b18-e31e02f13fe9
x-served-by: cache-iad-kjyo7100091-IAD, cache-hhn4032-HHN
x-timer: S1663782872.832430,VS0,VE90
X-Firefox-Spdy: h2
code.jquery.com/jquery-3.5.1.min.js
200 OK 31 kB URL HTTP/2 code.jquery.com/jquery-3.5.1.min.js
IP
File type ASCII text, with very long lines (65451)
Hash 3700d0b271343804b9b9aa1c13efa521
3d6b03dbd74872ca3dfbb0529f6c80943788f918
fda7541f8e4cf921d20bcd0dc1d0efe69644c79bd18a0be4ce2f34246c83603e
GET /jquery-3.5.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:50 GMT
content-encoding: gzip
content-length: 30879
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15d84"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1674984350.dop010.sk1.t,1674984350.cds237.sk1.hn,1674984350.cds208.sk1.c
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 8ef1dbe04ff3834735b0659e7ae82c62
56d86283c8861f679162e92c70bbea59f819b8dc
a41623bee3b144f94362b7351bf88236e4291f113068361be33209f550fb3373
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 09:25:50 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 29 Jan 2023 01:42:55 GMT
Expires: Sun, 05 Feb 2023 01:42:54 GMT
Etag: "56d86283c8861f679162e92c70bbea59f819b8dc"
Cache-Control: max-age=576423,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7910ec3b4e27b4f7-OSL
i.geistm.com/x/Popdust
200 OK 43 B IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 57f187c7a868faeac558007a8eb6cb2e
11ab10ab109fdb53d91d444ac781101f5a6360c6
aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22
GET /x/Popdust HTTP/1.1
Host: i.geistm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Cookie: gdpid=63d63b9b9517950225184a5f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:50 GMT
content-type: image/gif
content-length: 43
server: nginx
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type, Accept
set-cookie: gdpid=63d63b9b9517950225184a5f; Max-Age=157680000; Path=/; Expires=Fri, 28 Jan 2028 09:25:50 GMT; Secure; SameSite=None
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/jFzla0hlOqE
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/jFzla0hlOqE
IP
Hash 35ad62ec6f4e3668f2548a6731c21f0a
e62703de6d3a3057724d897b0f3c43c64ac48c43
b3f24ebe47eebb3859cedb5fe0c1169b5a2a98b0fec25003517e0427fed5eb30
POST /s/gts1d4/jFzla0hlOqE HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:50 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
id.hadron.ad.gt/api/v1/pbhid?partner_id=474&_it=prebid
200 OK 158 kB URL HTTP/2 id.hadron.ad.gt/api/v1/pbhid?partner_id=474&_it=prebid
IP
File type JSON data\012- , ASCII text, with very long lines (65342)
Size 158 kB (157890 bytes)
Hash da0bc3512729152f12d0ccec2e8f8208
dfd4945e914fa4cfb8a37c9dde95545e2e1bf242
dc67095696ed859b3c7b1d646a99077faadafb74c3cbfd059f68bc6295fda240
GET /api/v1/pbhid?partner_id=474&_it=prebid HTTP/1.1
Host: id.hadron.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:50 GMT
content-type: application/json
access-control-allow-origin: https://www.popdust.com
access-control-allow-credentials: true
vary: Origin
content-encoding: gzip
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7910ec3a8d7d0b06-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/jFzla0hlOqE
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/jFzla0hlOqE
IP
Hash 35ad62ec6f4e3668f2548a6731c21f0a
e62703de6d3a3057724d897b0f3c43c64ac48c43
b3f24ebe47eebb3859cedb5fe0c1169b5a2a98b0fec25003517e0427fed5eb30
POST /s/gts1d4/jFzla0hlOqE HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:50 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s2s.t13.io/cookie_sync
200 OK 593 B IP
File type JSON data\012- , ASCII text, with very long lines (2322), with no line terminators
Hash 2281842484acd0795530f48cda662153
7cdf657ea7ed4c7170769655b05fd540ee5a66cf
a868299db84b002aff413be845ef85725149bbd5703cc507e67f848fa401475e
POST /cookie_sync HTTP/1.1
Host: s2s.t13.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 244
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-origin: https://www.popdust.com
content-type: application/json
content-encoding: gzip
content-length: 593
date: Sun, 29 Jan 2023 09:25:50 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 2dd77abe9c379a3902d11b3a2edd820d
704cc3fc0a1cc0de0172827d63acee8454ae7832
3b9757f15908326fa777fd9484f19e716c25fed59412f962dd67b3fa28052326
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 29 Jan 2023 09:25:50 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 28 Jan 2023 21:33:32 GMT
Expires: Sun, 29 Jan 2023 21:33:32 GMT
ETag: "704cc3fc0a1cc0de0172827d63acee8454ae7832"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
www.popdust.com/static/css-build/roar/runner/social-ux-non-critical.css?v=rmxassetse8b874e39b339059e338b461576785bb
200 OK 19 kB URL HTTP/2 www.popdust.com/static/css-build/roar/runner/social-ux-non-critical.css?v=rmxassetse8b874e39b339059e338b461576785bb
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash e04ed44839022904fca74b0e9f03a36d
bd1275833ecaa22d438cb131c09aa749cbd63664
52645ab1732a7ada760839ce83a72f21aa85c31489dcf91c2a5ebcfb23870b02
GET /static/css-build/roar/runner/social-ux-non-critical.css?v=rmxassetse8b874e39b339059e338b461576785bb HTTP/1.1
Host: www.popdust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.popdust.com/nutrisystem-weight-loss-program-2658232706.html?&gdpid=63d63b9a9517950225184a5d
Connection: keep-alive
Cookie: ezoadgid_76345=-1; ezoref_76345=; ezosuibasgeneris-1=1a2deee5-c477-43ef-5cc5-92f5a801e8c6; ezoab_76345=mod1; lp_76345=https://www.popdust.com/nutrisystem-weight-loss-program-2658232706.html?gdpid=63d63b9a9517950225184a5d; ezovuuidtime_76345=1674984346; ezovuuid_76345=59cd4e71-42e0-420b-4b5e-cfef861ab757; ezopvc_76345=1; ezovab_76345=vmod1-c; fs.bot.check=true; _ga_VWQCYNNMD2=GS1.1.1674984354.1.0.1674984354.60.0.0; _ga=GA1.2.1431532804.1674984355; exco-uid=fkb6omqrzpvh4u1h; _gid=GA1.2.847625689.1674984355; _gat_gtag_UA_19669260_1=1; fs.session.id=b3f27972-31f6-4b4d-83f4-e071f22b76a3; _fbp=fb.1.1674984355640.59557481; __qca=P0-1813112332-1674984355413; __gads=ID=eca85bdc8ac77c99:T=1674984349:S=ALNI_MapipCphw1752hF6bxBjKTLvweymA; __gpi=UID=00000baba5c238df:T=1674984349:RT=1674984349:S=ALNI_MZlYS1t5jSXOXoNeY_pgB_rNEOL_g; _pbjs_userid_consent_data=3524755945110770; cookie=886172c0-440b-4dd7-aa75-fda26cce8054; _lr_retry_request=true; _lr_env_src_ats=false
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
age: 1246
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cache-control: max-age=31536000
content-encoding: br
content-type: text/css
date: Sun, 29 Jan 2023 09:25:49 UTC
display: staticcontent_sol, orig_site_sol
etag: W/"6357c19a-188f4-gzip"
fastly-request-backend: fastly
fastly-sie: 86400.000
fastly-swr: 2592000.000
last-modified: Tue, 24 Jan 2023 19:08:54 GMT
response: 200
server: Apache/2.4.39 (Ubuntu)
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding,User-Agent,Origin
via: 1.1 F_wfe_production, 1.1 varnish, 1.1 varnish
x-cache: HIT, MISS
x-cache-hits: 5, 0
x-ezoic-cdn: Hit ds;mm;1d0169d0659c8208e632e8e50c784487;2-76345-22;5500667f-2b52-4668-5b80-097e8f692c2a
x-frame-options: SAMEORIGIN
x-middleton-display: staticcontent_sol, orig_site_sol
x-middleton-response: 200
x-origin-cache-control: max-age=31536000
x-request-id: 11138bf9-b034-44fb-bfbd-5913f52eb73e
x-served-by: cache-iad-kjyo7100047-IAD, cache-hhn4070-HHN
x-sol: orig
x-timer: S1666697720.016847,VS0,VE92
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash e822d41cf422e863628f1a7826ff9f5c
98b6d2c8f0481d24a677f2474077c383922cbf93
3c9a2d5a39eaa9bf0b5c4e4d0f2bfe30559ea062e40224d10d4b3094a8e3691a
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6181
Cache-Control: max-age=112319
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:50 GMT
Etag: "63d53738-1d7"
Expires: Mon, 30 Jan 2023 16:37:49 GMT
Last-Modified: Sat, 28 Jan 2023 14:54:48 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 404ff3a87ae7b1aee428a80482689ab1
b6bb2ed4ffe3c733b4e587db73890bd71829000c
3cf8846a2cc76e0d058a61ec72032d97acea339ce63b02e7bd7ecc2dbfab4125
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=157698
Date: Sun, 29 Jan 2023 09:25:50 GMT
Etag: "63d5fd7a-1d7"
Expires: Tue, 31 Jan 2023 05:14:08 GMT
Last-Modified: Sun, 29 Jan 2023 05:00:42 GMT
Server: ECS (nyb/1D1D)
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: yd112FYO1E-1HVkYQGyvUgunDzkcwvBLdDhfzahKL42Pyk7l9XJX3w==
Age: 806
ocsp.digicert.com/
200 OK 471 B IP
Hash 8fa29731c1d0c17b16b6722e790fbd30
355726ce18b332ba206caed871e6a72aa43f32a8
a45f60676c60538b85579828acc6247f6de576f869a73b3bb58501ccc5b0a172
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4317
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:50 GMT
Last-Modified: Sun, 29 Jan 2023 08:13:53 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 404ff3a87ae7b1aee428a80482689ab1
b6bb2ed4ffe3c733b4e587db73890bd71829000c
3cf8846a2cc76e0d058a61ec72032d97acea339ce63b02e7bd7ecc2dbfab4125
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=157729
Date: Sun, 29 Jan 2023 09:25:50 GMT
Etag: "63d5fd7a-1d7"
Expires: Tue, 31 Jan 2023 05:14:39 GMT
Last-Modified: Sun, 29 Jan 2023 05:00:42 GMT
Server: ECS (nyb/1D1F)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: GdxDgd65k-OIpYvBKckngSef_7uxXQAQ3HGmZMdMcOfZpyLauFVSbg==
Age: 837
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 404ff3a87ae7b1aee428a80482689ab1
b6bb2ed4ffe3c733b4e587db73890bd71829000c
3cf8846a2cc76e0d058a61ec72032d97acea339ce63b02e7bd7ecc2dbfab4125
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=157604
Date: Sun, 29 Jan 2023 09:25:50 GMT
Etag: "63d5fd7a-1d7"
Expires: Tue, 31 Jan 2023 05:12:34 GMT
Last-Modified: Sun, 29 Jan 2023 05:00:42 GMT
Server: ECS (nyb/1D1B)
X-Cache: Miss from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: z2jOQnau5JyOCoMLsTdZl7mn2WWUcHFipoQiu79640RqrVlL3aW1BQ==
Age: 712
freestar-d.openx.net/w/1.0/arj?ju=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html&ch=UTF-8&res=1280x1024x24&ifr=false&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=3adca000-e1ed-4dff-bc23-628ae2e14ef2%2C5fe52e36-c53a-4b1e-99a8-0a898e05a47d%2Ce636585e-82f2-4af1-adfd-9ec562a97b4a%2Ccf9ac44b-7140-44c5-8933-698cb201c031%2Cbf8c9fb5-22b6-4da8-bcb9-688863000feb%2Caa99447f-f6a8-4edb-9c52-ee2dfcaeae07&nocache=1674984356870&pubcid=69a0b6f5-314f-491f-b15c-126446a3e75f&schain=1.0%2C1!freestar.com%2C807%2C1%2C%2C%2C&aus=300x250%7C300x250%7C300x600%2C160x600%2C300x250%7C728x90%7C728x90%7C728x90&divids=popdust_left_1%2Cpopdust_left_2%2Cpopdust_left_3%2Cpopdust_leaderboard_MID63d630668f4172b18405dcf2%2Cpopdust_leaderboard_MID2%2Cpopdust_leaderboard_MID63d630668f4172b18405dd02&aucs=%252F15184186%252Fpopdust_left_1%252Fpopdust_left_1%2C%252F15184186%252Fpopdust_left_2%252Fpopdust_left_2%2C%252F15184186%252Fpopdust_left_3%252Fpopdust_left_3%2C%252F15184186%252Fpopdust_leaderboard_MID%252Fpopdust_leaderboard_MID63d630668f4172b18405dcf2%2C%252F15184186%252Fpopdust_leaderboard_MID%252Fpopdust_leaderboard_MID2%2C%252F15184186%252Fpopdust_leaderboard_MID%252Fpopdust_leaderboard_MID63d630668f4172b18405dd02&auid=539181725%2C539181725%2C539181725%2C539181725%2C539181725%2C539181725
200 OK 78 B URL HTTP/2 freestar-d.openx.net/w/1.0/arj?ju=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html&ch=UTF-8&res=1280x1024x24&ifr=false&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=3adca000-e1ed-4dff-bc23-628ae2e14ef2%2C5fe52e36-c53a-4b1e-99a8-0a898e05a47d%2Ce636585e-82f2-4af1-adfd-9ec562a97b4a%2Ccf9ac44b-7140-44c5-8933-698cb201c031%2Cbf8c9fb5-22b6-4da8-bcb9-688863000feb%2Caa99447f-f6a8-4edb-9c52-ee2dfcaeae07&nocache=1674984356870&pubcid=69a0b6f5-314f-491f-b15c-126446a3e75f&schain=1.0%2C1!freestar.com%2C807%2C1%2C%2C%2C&aus=300x250%7C300x250%7C300x600%2C160x600%2C300x250%7C728x90%7C728x90%7C728x90&divids=popdust_left_1%2Cpopdust_left_2%2Cpopdust_left_3%2Cpopdust_leaderboard_MID63d630668f4172b18405dcf2%2Cpopdust_leaderboard_MID2%2Cpopdust_leaderboard_MID63d630668f4172b18405dd02&aucs=%252F15184186%252Fpopdust_left_1%252Fpopdust_left_1%2C%252F15184186%252Fpopdust_left_2%252Fpopdust_left_2%2C%252F15184186%252Fpopdust_left_3%252Fpopdust_left_3%2C%252F15184186%252Fpopdust_leaderboard_MID%252Fpopdust_leaderboard_MID63d630668f4172b18405dcf2%2C%252F15184186%252Fpopdust_leaderboard_MID%252Fpopdust_leaderboard_MID2%2C%252F15184186%252Fpopdust_leaderboard_MID%252Fpopdust_leaderboard_MID63d630668f4172b18405dd02&auid=539181725%2C539181725%2C539181725%2C539181725%2C539181725%2C539181725
IP
File type JSON data\012- , ASCII text
Hash 6bc7934142756f75d8b1e88b40f2b4e2
aedb6af58010cf258b2060a7cc8953984925a434
8f5954cf4feaf6e1722d7886dd676c464a0b59fbec8d1e1db0c8963995a3ac1d
GET /w/1.0/arj?ju=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html&ch=UTF-8&res=1280x1024x24&ifr=false&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=3adca000-e1ed-4dff-bc23-628ae2e14ef2%2C5fe52e36-c53a-4b1e-99a8-0a898e05a47d%2Ce636585e-82f2-4af1-adfd-9ec562a97b4a%2Ccf9ac44b-7140-44c5-8933-698cb201c031%2Cbf8c9fb5-22b6-4da8-bcb9-688863000feb%2Caa99447f-f6a8-4edb-9c52-ee2dfcaeae07&nocache=1674984356870&pubcid=69a0b6f5-314f-491f-b15c-126446a3e75f&schain=1.0%2C1!freestar.com%2C807%2C1%2C%2C%2C&aus=300x250%7C300x250%7C300x600%2C160x600%2C300x250%7C728x90%7C728x90%7C728x90&divids=popdust_left_1%2Cpopdust_left_2%2Cpopdust_left_3%2Cpopdust_leaderboard_MID63d630668f4172b18405dcf2%2Cpopdust_leaderboard_MID2%2Cpopdust_leaderboard_MID63d630668f4172b18405dd02&aucs=%252F15184186%252Fpopdust_left_1%252Fpopdust_left_1%2C%252F15184186%252Fpopdust_left_2%252Fpopdust_left_2%2C%252F15184186%252Fpopdust_left_3%252Fpopdust_left_3%2C%252F15184186%252Fpopdust_leaderboard_MID%252Fpopdust_leaderboard_MID63d630668f4172b18405dcf2%2C%252F15184186%252Fpopdust_leaderboard_MID%252Fpopdust_leaderboard_MID2%2C%252F15184186%252Fpopdust_leaderboard_MID%252Fpopdust_leaderboard_MID63d630668f4172b18405dd02&auid=539181725%2C539181725%2C539181725%2C539181725%2C539181725%2C539181725 HTTP/1.1
Host: freestar-d.openx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept, Accept-Encoding
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Sun, 29 Jan 2023 09:25:50 GMT
content-type: application/json
content-length: 78
content-encoding: gzip
cache-control: private, max-age=0, no-cache
access-control-allow-origin: https://www.popdust.com
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 404ff3a87ae7b1aee428a80482689ab1
b6bb2ed4ffe3c733b4e587db73890bd71829000c
3cf8846a2cc76e0d058a61ec72032d97acea339ce63b02e7bd7ecc2dbfab4125
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=157757
Date: Sun, 29 Jan 2023 09:25:50 GMT
Etag: "63d5fd7a-1d7"
Expires: Tue, 31 Jan 2023 05:15:07 GMT
Last-Modified: Sun, 29 Jan 2023 05:00:42 GMT
Server: ECS (bsa/EB24)
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: hm108JmMK-aLgoW1ugTH8572Cg71n_HZ6nGJWGt3DftvRp2FFOR5EQ==
Age: 865
ocsp.pki.goog/s/gts1d4/jFzla0hlOqE
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/jFzla0hlOqE
IP
Hash 35ad62ec6f4e3668f2548a6731c21f0a
e62703de6d3a3057724d897b0f3c43c64ac48c43
b3f24ebe47eebb3859cedb5fe0c1169b5a2a98b0fec25003517e0427fed5eb30
POST /s/gts1d4/jFzla0hlOqE HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:50 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash d82a90ac553bdf3f3d630fa7f0040395
2e5e0e5ecfade9ea6f0502768395bbe1114f8521
58fde8895b500d31e7439cb737d3a887396d9a01a9660c187f26965a25a4cdbe
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5134
Cache-Control: max-age=147999
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:50 GMT
Etag: "63d5c6af-1d7"
Expires: Tue, 31 Jan 2023 02:32:29 GMT
Last-Modified: Sun, 29 Jan 2023 01:06:55 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 314 B IP
Hash 4d08df7a08aba618dc2931e09c2a9c9a
5c0e0ea828f5c769eb45c3c499fad469f20b6d7d
a4fba084caab6f397be9161b8fdf281cc7aafd588fb32d55b6ae50cc44e6b0bc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4154
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:50 GMT
Last-Modified: Sun, 29 Jan 2023 08:16:36 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 314
divehope.com/v2cxiLYxiBC8hTa99i01oUOL0-8tK5t9TJrb_WrYdBgotlk4iLVWOYjbeC8_mV3ni
200 OK 96 kB URL HTTP/2 divehope.com/v2cxiLYxiBC8hTa99i01oUOL0-8tK5t9TJrb_WrYdBgotlk4iLVWOYjbeC8_mV3ni
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash e181b36f493debc6913775581fed5336
6641f98d663e068e2427c0b47b15b934636215b2
0dc4a4cbbdc0f3358baef1dcc21caae648b99588db583e656cfba00fa7dfb063
GET /v2cxiLYxiBC8hTa99i01oUOL0-8tK5t9TJrb_WrYdBgotlk4iLVWOYjbeC8_mV3ni HTTP/1.1
Host: divehope.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private, must-revalidate, max-age=21600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "e020726945566a353b4f71850f708eff5d705768e712f46c1a8dc6a2de5140db"
strict-transport-security: max-age=15724800; preload
timing-allow-origin: *
vary: Accept-Encoding, Accept-Language
x-buildname: hoothoot
x-buildnumber: 757822166
x-datacenter: gce-europe-west1
x-hostname: fen-hoothoot-europe-west1-q5p4
date: Sun, 29 Jan 2023 09:25:49 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.7&cb=70657187713&lsavail=0
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.19.7&cb=70657187713&lsavail=0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=7.19.7&cb=70657187713&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 3966
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:50 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://www.popdust.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash e822d41cf422e863628f1a7826ff9f5c
98b6d2c8f0481d24a677f2474077c383922cbf93
3c9a2d5a39eaa9bf0b5c4e4d0f2bfe30559ea062e40224d10d4b3094a8e3691a
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 941
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:50 GMT
Last-Modified: Sun, 29 Jan 2023 09:10:09 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
dnacdn.net/dna
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:50 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=0aPe0F80M0RITmhlJTJCZkMwOUJGQlhaMUN2czY5JTJGckJlWktWWGZiejJ6S3ZxRGpFaG4wbzJPMlplYnVtOVNVYkZCaGN1ag; expires=Fri, 23 Feb 2024 09:25:50 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://www.popdust.com
server-processing-duration-in-ticks: 306984
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash d8cd0def47dd00e2a6a6eea45c0c8ac7
461db62ea353486bdc6cae64ab4daaa0962f8838
5658eb770f35378d919fdec137d1daff425553871c8d7ff8438133670533da0e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=100132
Date: Sun, 29 Jan 2023 09:25:50 GMT
Etag: "63d51c89-1d7"
Expires: Mon, 30 Jan 2023 13:14:42 GMT
Last-Modified: Sat, 28 Jan 2023 13:00:57 GMT
Server: ECS (nyb/1D1C)
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: yVJGjRZkWOi3mxni6rEXhlW455E-XLYp0D01m9h3GPGW2GGR1XOYSw==
Age: 825
btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
204 No Content 0 B URL HTTP/2 btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1
Host: btlr.sharethrough.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1209
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 29 Jan 2023 09:25:50 GMT
vary: Origin
cache-control: private, no-cache, no-store, must-revalidate
access-control-allow-origin: https://www.popdust.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
tlx.3lift.com/header/auction?lib=prebid&v=7.19.7&referrer=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html&tmax=1200
200 OK 19 B URL HTTP/2 tlx.3lift.com/header/auction?lib=prebid&v=7.19.7&referrer=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html&tmax=1200
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a548f7b55db665b1df71a33a2bee47a7
4f88e5b6a18226d7207f1458b0b83e428dbf9898
0535c3bb3a17e4ac0fb7d29214d2181275662129dc2bdd2a89c35934e9fc5ba5
POST /header/auction?lib=prebid&v=7.19.7&referrer=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html&tmax=1200 HTTP/1.1
Host: tlx.3lift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 5470
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:50 GMT
content-type: application/json; charset=utf-8
content-length: 19
cache-control: no-cache, no-store, must-revalidate
expires: Thu, 15 Oct 1992 20:10:00 GMT
pragma: no-cache
x-xss-protection: 0
accept-ch: sec-ch-ua-platform,sec-ch-viewport-height,sec-ch-rtt,sec-ch-ua-arch,sec-ch-ua,sec-ch-ua-bitness,sec-ch-prefers-color-scheme,sec-ch-width,sec-ch-ect,user-agent,sec-ch-downlink,sec-ch-ua-mobile,sec-ch-save-data,sec-ch-device-memory,sec-ch-dpr,sec-ch-ua-full-version,sec-ch-ua-model,sec-ch-ua-platform-version,sec-ch-viewport-width
x-auction-status: 17, 17, 17, 17, 17, 17, 17, 17, 17, 17, 17, 17
access-control-allow-origin: https://www.popdust.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
204 No Content 0 B URL HTTP/2 btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1
Host: btlr.sharethrough.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1209
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sun, 29 Jan 2023 09:25:50 GMT
vary: Origin
cache-control: private, no-cache, no-store, must-revalidate
access-control-allow-origin: https://www.popdust.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
204 No Content 0 B URL HTTP/2 btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1
Host: btlr.sharethrough.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1168
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sun, 29 Jan 2023 09:25:50 GMT
vary: Origin
cache-control: private, no-cache, no-store, must-revalidate
access-control-allow-origin: https://www.popdust.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
204 No Content 0 B URL HTTP/2 btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1
Host: btlr.sharethrough.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1204
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sun, 29 Jan 2023 09:25:50 GMT
vary: Origin
cache-control: private, no-cache, no-store, must-revalidate
access-control-allow-origin: https://www.popdust.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 63560ad03393252986b13e2806235f6c
60688946ba84a4006755d5eddc14e079b5212b7f
e7927cf46618c0b601058c3119f12be4a2d04337e4b860b849461f3a8cc6f215
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E7927CF46618C0B601058C3119F12BE4A2D04337E4B860B849461F3A8CC6F215"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8148
Expires: Sun, 29 Jan 2023 11:41:38 GMT
Date: Sun, 29 Jan 2023 09:25:50 GMT
Connection: keep-alive
btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
204 No Content 0 B URL HTTP/2 btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1
Host: btlr.sharethrough.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1184
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 29 Jan 2023 09:25:50 GMT
vary: Origin
cache-control: private, no-cache, no-store, must-revalidate
access-control-allow-origin: https://www.popdust.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ap.lijit.com/rtb/bid?src=prebid_prebid_7.19.7
200 OK 100 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_7.19.7
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a42f5624242a477729a8b8a68556b1b3
582e10bc1a5866ad78eb7a66eac41f303820eff3
05d94fff8dd88484fd173a7f3eed7765840d8e17bfd52adeab1c3f381da37a7b
POST /rtb/bid?src=prebid_prebid_7.19.7 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 4097
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 09:25:50 GMT
Content-Type: application/json
Access-Control-Allow-Origin: https://www.popdust.com
Access-Control-Allow-Methods: GET, POST, DELETE, PUT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type
Vary: Accept-Encoding, User-Agent
Content-Encoding: gzip
Content-Length: 100
X-Sovrn-Pod: ad_ap3ams1
btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
204 No Content 0 B URL HTTP/2 btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1
Host: btlr.sharethrough.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1203
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sun, 29 Jan 2023 09:25:50 GMT
vary: Origin
cache-control: private, no-cache, no-store, must-revalidate
access-control-allow-origin: https://www.popdust.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
prebid.a-mo.net/cchain/0?gdpr=&gdpr_consent=&us_privacy=&cb=https%3A%2F%2Fs2s.t13.io%2Fsetuid%3Fbidder%3Damxfsx%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26f%3Di%26uid%3D
302 Found 0 B URL HTTP/2 prebid.a-mo.net/cchain/0?gdpr=&gdpr_consent=&us_privacy=&cb=https%3A%2F%2Fs2s.t13.io%2Fsetuid%3Fbidder%3Damxfsx%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26f%3Di%26uid%3D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cchain/0?gdpr=&gdpr_consent=&us_privacy=&cb=https%3A%2F%2Fs2s.t13.io%2Fsetuid%3Fbidder%3Damxfsx%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26f%3Di%26uid%3D HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: max-age=0, private, must-revalidate
content-length: 0
date: Sun, 29 Jan 2023 09:25:50 GMT
location: https://s2s.t13.io/setuid?bidder=amxfsx&gdpr=&gdpr_consent=&us_privacy=&f=i&uid=7e9eed8d-5b05-491e-bfc2-236f444cd1ce&gdpr=&gdpr_consent=&us_privacy=
server: envoy
x-envoy-upstream-service-time: 2
X-Firefox-Spdy: h2
btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
204 No Content 0 B URL HTTP/2 btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1
Host: btlr.sharethrough.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1166
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sun, 29 Jan 2023 09:25:50 GMT
vary: Origin
cache-control: private, no-cache, no-store, must-revalidate
access-control-allow-origin: https://www.popdust.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
204 No Content 0 B URL HTTP/2 btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1
Host: btlr.sharethrough.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1203
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sun, 29 Jan 2023 09:25:50 GMT
vary: Origin
cache-control: private, no-cache, no-store, must-revalidate
access-control-allow-origin: https://www.popdust.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
pages-stats.rbl.ms/spacer.gif?1674984357308&event=post-page-view-duration&version=1&format=json&data=%7B%22site_id%22%3A13918151%2C%22roar_id%22%3A13918151%2C%22client%22%3A%22desktop%22%2C%22referrer%22%3A%22%22%2C%22duration%22%3A2000%7D
200 OK 43 B URL HTTP/2 pages-stats.rbl.ms/spacer.gif?1674984357308&event=post-page-view-duration&version=1&format=json&data=%7B%22site_id%22%3A13918151%2C%22roar_id%22%3A13918151%2C%22client%22%3A%22desktop%22%2C%22referrer%22%3A%22%22%2C%22duration%22%3A2000%7D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /spacer.gif?1674984357308&event=post-page-view-duration&version=1&format=json&data=%7B%22site_id%22%3A13918151%2C%22roar_id%22%3A13918151%2C%22client%22%3A%22desktop%22%2C%22referrer%22%3A%22%22%2C%22duration%22%3A2000%7D HTTP/1.1
Host: pages-stats.rbl.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:50 GMT
content-type: image/gif
content-length: 43
server: openresty
last-modified: Wed, 25 Jan 2023 17:46:41 GMT
etag: "63d16b01-2b"
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 277 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with very long lines (713), with no line terminators
Hash afcd89729f6c0460fcfcd464c7541fe9
73e8d80eeb43cadeda47a6e0acde31dcfc89db39
44abaf2abcd891851278490c4ffee573cd075a2d77d07fa28b3aa7c852008bf8
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 2757
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 29 Jan 2023 09:25:50 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.popdust.com
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: 6f7beb47-686c-4164-ae68-7bd88e82b85f
Set-Cookie: icu=ChgIodc0EAoYASABKAEwnvfYngY4AUABSAEQnvfYngYYAA..; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 29-Apr-2023 09:25:50 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=6258558624250822730; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 29-Apr-2023 09:25:50 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 868.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 278 B IP
Hash 15bd953e7dcdc766f02334da7b59b78d
9fb2568963c965d1c7c4dbdb9245d698f939a17f
88f33ce1345e3c8bca6677c327b26601c971401ab312b331cda142a45848997b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 741
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:50 GMT
Last-Modified: Sun, 29 Jan 2023 09:13:29 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 278
ocsp.sectigo.com/
200 OK 471 B IP
Hash 5c00a6b71849e1f63887d38333830003
274723ffd4a062e1997a213ceeeab8a56ac83141
5e15ea6950fd4aa51af37519ac391c2c95cfd74ded6ac6e35432ccf68c70cb23
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 09:25:50 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 28 Jan 2023 01:56:49 GMT
Expires: Sat, 04 Feb 2023 01:56:48 GMT
Etag: "274723ffd4a062e1997a213ceeeab8a56ac83141"
Cache-Control: max-age=490857,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7910ec3e79d5b4f7-OSL
adservice.google.no/adsid/integrator.js?domain=www.popdust.com
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=www.popdust.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.popdust.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sun, 29 Jan 2023 09:25:50 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
grid.bidswitch.net/hbjson
200 OK 49 B URL HTTP/2 grid.bidswitch.net/hbjson
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 585d409a027841d02ae1c5cfc0b02d43
d0c6acf3a09cba6dddd769f4911340d8638ec96c
fc0a9006c709b2a9720f22edd8979d90671b9404e849cd52195efcb10716162a
POST /hbjson HTTP/1.1
Host: grid.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 3426
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:50 GMT
content-type: application/json
content-length: 49
access-control-allow-credentials: true
access-control-allow-origin: https://www.popdust.com
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
widgets.outbrain.com/images/widgetIcons/ob_logo.svg
200 OK 7.6 kB URL HTTP/2 widgets.outbrain.com/images/widgetIcons/ob_logo.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (7647), with no line terminators
Hash b79638966e0374c455e78107aee59bf4
cbc23d2cca41f9f83e5e70283e6dc18ca9c26f53
21a924ac651ba65e51a5c9b5ae4b51453eb9b957d5990001a85960df95603d13
GET /images/widgetIcons/ob_logo.svg HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/svg+xml
etag: "b79638966e0374c455e78107aee59bf4:1673369411.171576"
last-modified: Tue, 10 Jan 2023 16:40:08 GMT
server: AkamaiNetStorage
content-length: 7647
cache-control: max-age=2592000
expires: Tue, 28 Feb 2023 09:25:51 GMT
date: Sun, 29 Jan 2023 09:25:51 GMT
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
widgets.outbrain.com/images/widgetIcons/achoice.svg
200 OK 990 B URL HTTP/2 widgets.outbrain.com/images/widgetIcons/achoice.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (990), with no line terminators
Hash 5ab8e16b5f46213840bcd403e349419c
f03f6dc8e2206a94119af76f9a3b3c835390cae7
9ba56f5ffa579747efde1d2a429b325a9fb7220d30f4268e4a44ecbe4a9bf034
GET /images/widgetIcons/achoice.svg HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/svg+xml
etag: "5ab8e16b5f46213840bcd403e349419c:1673369393.880194"
last-modified: Tue, 10 Jan 2023 16:40:08 GMT
server: AkamaiNetStorage
content-length: 990
cache-control: max-age=2592000
expires: Tue, 28 Feb 2023 09:25:51 GMT
date: Sun, 29 Jan 2023 09:25:51 GMT
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=16924&site_id=151312&zone_id=2022622&size_id=15%3B15%3B15%3B2%3B2%3B2&alt_size_ids=%3B%3B9%2C10%3B%3B%3B&rp_schain=1.0,1!freestar.com,807,1,,,&eid_pubcid.org=886172c0-440b-4dd7-aa75-fda26cce8054%5E1&ppuid=3e394998-628e-4ca0-a622-31b5d56f900b&rf=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html&tg_i.name=popdust-com&tg_i.domain=popdust.com&tg_i.cat=IAB1&tg_i.sectioncat=IAB1&tg_i.pagecat=IAB1&tg_i.page=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&tg_i.fs_ad_product=banner&tg_i.pbadslot=%2F15184186%2Fpopdust_left_1%2Fpopdust_left_1%3B%2F15184186%2Fpopdust_left_2%2Fpopdust_left_2%3B%2F15184186%2Fpopdust_left_3%2Fpopdust_left_3%3B%2F15184186%2Fpopdust_leaderboard_MID%2Fpopdust_leaderboard_MID63d630668f4172b18405dcf2%3B%2F15184186%2Fpopdust_leaderboard_MID%2Fpopdust_leaderboard_MID2%3B%2F15184186%2Fpopdust_leaderboard_MID%2Fpopdust_leaderboard_MID63d630668f4172b18405dd02&tk_flint=pbjs_lite_v7.19.7&x_source.tid=3adca000-e1ed-4dff-bc23-628ae2e14ef2%3B5fe52e36-c53a-4b1e-99a8-0a898e05a47d%3Be636585e-82f2-4af1-adfd-9ec562a97b4a%3Bcf9ac44b-7140-44c5-8933-698cb201c031%3Bbf8c9fb5-22b6-4da8-bcb9-688863000feb%3Baa99447f-f6a8-4edb-9c52-ee2dfcaeae07&l_pb_bid_id=54dbb2333fc25f3%3B55d722bb4ea4959%3B561a287f920cd578%3B57ca287880659b68%3B58f9737e706a2cd8%3B59ef8819d8f0d628&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F15184186%2Fpopdust_left_1%2Fpopdust_left_1%3B%2F15184186%2Fpopdust_left_2%2Fpopdust_left_2%3B%2F15184186%2Fpopdust_left_3%2Fpopdust_left_3%3B%2F15184186%2Fpopdust_leaderboard_MID%2Fpopdust_leaderboard_MID63d630668f4172b18405dcf2%3B%2F15184186%2Fpopdust_leaderboard_MID%2Fpopdust_leaderboard_MID2%3B%2F15184186%2Fpopdust_leaderboard_MID%2Fpopdust_leaderboard_MID63d630668f4172b18405dd02&slots=6&rand=0.318775827723614
200 OK 15 kB URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=16924&site_id=151312&zone_id=2022622&size_id=15%3B15%3B15%3B2%3B2%3B2&alt_size_ids=%3B%3B9%2C10%3B%3B%3B&rp_schain=1.0,1!freestar.com,807,1,,,&eid_pubcid.org=886172c0-440b-4dd7-aa75-fda26cce8054%5E1&ppuid=3e394998-628e-4ca0-a622-31b5d56f900b&rf=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html&tg_i.name=popdust-com&tg_i.domain=popdust.com&tg_i.cat=IAB1&tg_i.sectioncat=IAB1&tg_i.pagecat=IAB1&tg_i.page=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&tg_i.fs_ad_product=banner&tg_i.pbadslot=%2F15184186%2Fpopdust_left_1%2Fpopdust_left_1%3B%2F15184186%2Fpopdust_left_2%2Fpopdust_left_2%3B%2F15184186%2Fpopdust_left_3%2Fpopdust_left_3%3B%2F15184186%2Fpopdust_leaderboard_MID%2Fpopdust_leaderboard_MID63d630668f4172b18405dcf2%3B%2F15184186%2Fpopdust_leaderboard_MID%2Fpopdust_leaderboard_MID2%3B%2F15184186%2Fpopdust_leaderboard_MID%2Fpopdust_leaderboard_MID63d630668f4172b18405dd02&tk_flint=pbjs_lite_v7.19.7&x_source.tid=3adca000-e1ed-4dff-bc23-628ae2e14ef2%3B5fe52e36-c53a-4b1e-99a8-0a898e05a47d%3Be636585e-82f2-4af1-adfd-9ec562a97b4a%3Bcf9ac44b-7140-44c5-8933-698cb201c031%3Bbf8c9fb5-22b6-4da8-bcb9-688863000feb%3Baa99447f-f6a8-4edb-9c52-ee2dfcaeae07&l_pb_bid_id=54dbb2333fc25f3%3B55d722bb4ea4959%3B561a287f920cd578%3B57ca287880659b68%3B58f9737e706a2cd8%3B59ef8819d8f0d628&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F15184186%2Fpopdust_left_1%2Fpopdust_left_1%3B%2F15184186%2Fpopdust_left_2%2Fpopdust_left_2%3B%2F15184186%2Fpopdust_left_3%2Fpopdust_left_3%3B%2F15184186%2Fpopdust_leaderboard_MID%2Fpopdust_leaderboard_MID63d630668f4172b18405dcf2%3B%2F15184186%2Fpopdust_leaderboard_MID%2Fpopdust_leaderboard_MID2%3B%2F15184186%2Fpopdust_leaderboard_MID%2Fpopdust_leaderboard_MID63d630668f4172b18405dd02&slots=6&rand=0.318775827723614
IP
File type JSON data\012- , ASCII text, with very long lines (4960)
Hash 09b7ad4c542688cad7dc180f5c078cf6
7f40e7837e5b4324379ac83b688a97548910ea14
3a4d6cb8f9a946c2443fd04da8a4bd676251bcdbd5cb4c66ef420d5e018f455a
GET /a/api/fastlane.json?account_id=16924&site_id=151312&zone_id=2022622&size_id=15%3B15%3B15%3B2%3B2%3B2&alt_size_ids=%3B%3B9%2C10%3B%3B%3B&rp_schain=1.0,1!freestar.com,807,1,,,&eid_pubcid.org=886172c0-440b-4dd7-aa75-fda26cce8054%5E1&ppuid=3e394998-628e-4ca0-a622-31b5d56f900b&rf=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html&tg_i.name=popdust-com&tg_i.domain=popdust.com&tg_i.cat=IAB1&tg_i.sectioncat=IAB1&tg_i.pagecat=IAB1&tg_i.page=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&tg_i.fs_ad_product=banner&tg_i.pbadslot=%2F15184186%2Fpopdust_left_1%2Fpopdust_left_1%3B%2F15184186%2Fpopdust_left_2%2Fpopdust_left_2%3B%2F15184186%2Fpopdust_left_3%2Fpopdust_left_3%3B%2F15184186%2Fpopdust_leaderboard_MID%2Fpopdust_leaderboard_MID63d630668f4172b18405dcf2%3B%2F15184186%2Fpopdust_leaderboard_MID%2Fpopdust_leaderboard_MID2%3B%2F15184186%2Fpopdust_leaderboard_MID%2Fpopdust_leaderboard_MID63d630668f4172b18405dd02&tk_flint=pbjs_lite_v7.19.7&x_source.tid=3adca000-e1ed-4dff-bc23-628ae2e14ef2%3B5fe52e36-c53a-4b1e-99a8-0a898e05a47d%3Be636585e-82f2-4af1-adfd-9ec562a97b4a%3Bcf9ac44b-7140-44c5-8933-698cb201c031%3Bbf8c9fb5-22b6-4da8-bcb9-688863000feb%3Baa99447f-f6a8-4edb-9c52-ee2dfcaeae07&l_pb_bid_id=54dbb2333fc25f3%3B55d722bb4ea4959%3B561a287f920cd578%3B57ca287880659b68%3B58f9737e706a2cd8%3B59ef8819d8f0d628&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F15184186%2Fpopdust_left_1%2Fpopdust_left_1%3B%2F15184186%2Fpopdust_left_2%2Fpopdust_left_2%3B%2F15184186%2Fpopdust_left_3%2Fpopdust_left_3%3B%2F15184186%2Fpopdust_leaderboard_MID%2Fpopdust_leaderboard_MID63d630668f4172b18405dcf2%3B%2F15184186%2Fpopdust_leaderboard_MID%2Fpopdust_leaderboard_MID2%3B%2F15184186%2Fpopdust_leaderboard_MID%2Fpopdust_leaderboard_MID63d630668f4172b18405dd02&slots=6&rand=0.318775827723614 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.21.4
date: Sun, 29 Jan 2023 09:25:50 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://www.popdust.com
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LDH6FODT-N-ALT; Domain=.rubiconproject.com; Path=/; Expires=Mon, 29-Jan-2024 09:25:50 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qqs64EB7iMkku9DtVM30fCgUUU2gzpZzyLn/OLEFJonbv488g5K9nSkIlukOfI2q0Sp09IPATRuekwJXg+Hr/0A; Domain=.rubiconproject.com; Path=/; Expires=Mon, 29-Jan-2024 09:25:50 GMT; Max-Age=31536000; SameSite=None; Secure
khaos=LDH6FODT-N-ALT; Domain=.rubiconproject.com; Path=/; Expires=Mon, 29-Jan-2024 09:25:50 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qqs64EB7iMkku9DtVM30fCgUUU2gzpZzyLn/OLEFJonbv488g5K9nSkIlukOfI2q0Sp09IPATRuekwJXg+Hr/0A; Domain=.rubiconproject.com; Path=/; Expires=Mon, 29-Jan-2024 09:25:50 GMT; Max-Age=31536000; SameSite=None; Secure
khaos=LDH6FODT-N-ALT; Domain=.rubiconproject.com; Path=/; Expires=Mon, 29-Jan-2024 09:25:50 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qqs64EB7iMkku9DtVM30fCgUUU2gzpZzyLn/OLEFJonbv488g5K9nSkIlukOfI2q0Sp09IPATRuekwJXg+Hr/0A; Domain=.rubiconproject.com; Path=/; Expires=Mon, 29-Jan-2024 09:25:50 GMT; Max-Age=31536000; SameSite=None; Secure
khaos=LDH6FODT-N-ALT; Domain=.rubiconproject.com; Path=/; Expires=Mon, 29-Jan-2024 09:25:50 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qqs64EB7iMkku9DtVM30fCgUUU2gzpZzyLn/OLEFJonbv488g5K9nSkIlukOfI2q0Sp09IPATRuekwJXg+Hr/0A; Domain=.rubiconproject.com; Path=/; Expires=Mon, 29-Jan-2024 09:25:50 GMT; Max-Age=31536000; SameSite=None; Secure
khaos=LDH6FODT-N-ALT; Domain=.rubiconproject.com; Path=/; Expires=Mon, 29-Jan-2024 09:25:50 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qqs64EB7iMkku9DtVM30fCgUUU2gzpZzyLn/OLEFJonbv488g5K9nSkIlukOfI2q0Sp09IPATRuekwJXg+Hr/0A; Domain=.rubiconproject.com; Path=/; Expires=Mon, 29-Jan-2024 09:25:50 GMT; Max-Age=31536000; SameSite=None; Secure
khaos=LDH6FODT-N-ALT; Domain=.rubiconproject.com; Path=/; Expires=Mon, 29-Jan-2024 09:25:50 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qqs64EB7iMkku9DtVM30fCgUUU2gzpZzyLn/OLEFJonbv488g5K9nSkIlukOfI2q0Sp09IPATRuekwJXg+Hr/0A; Domain=.rubiconproject.com; Path=/; Expires=Mon, 29-Jan-2024 09:25:50 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-encoding: gzip
X-Firefox-Spdy: h2
amplify.outbrain.com/cp/obtp.js
200 OK 5.9 kB URL HTTP/2 amplify.outbrain.com/cp/obtp.js
IP
File type ASCII text, with very long lines (17737), with no line terminators
Hash 69ccf6d91702cd65dedfbad36e94c61b
adce8bd55dcc466c709dc96e230cbdd72fb27645
9a5b793c3b453c30229658bebe68719aa0df37a71ef371a6c6117e123b091e64
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "9f0b052ec22f789c3cc95c26dd0da7f4:1674389451.57807"
last-modified: Sun, 22 Jan 2023 12:08:14 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1200
expires: Sun, 29 Jan 2023 09:45:51 GMT
date: Sun, 29 Jan 2023 09:25:51 GMT
content-length: 5884
X-Firefox-Spdy: h2
cms.quantserve.com/pixel/p-N04C2m09Yy8f8.gif?idmatch=0&gdpr=&gdpr_consent=&us_privacy=&redir=https%3A%2F%2Fs2s.t13.io%2Fsetuid%3Fbidder%3Dquantcastfsx%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26f%3Di%26uid%3D
302 Found 0 B URL HTTP/2 cms.quantserve.com/pixel/p-N04C2m09Yy8f8.gif?idmatch=0&gdpr=&gdpr_consent=&us_privacy=&redir=https%3A%2F%2Fs2s.t13.io%2Fsetuid%3Fbidder%3Dquantcastfsx%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26f%3Di%26uid%3D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/p-N04C2m09Yy8f8.gif?idmatch=0&gdpr=&gdpr_consent=&us_privacy=&redir=https%3A%2F%2Fs2s.t13.io%2Fsetuid%3Fbidder%3Dquantcastfsx%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26f%3Di%26uid%3D HTTP/1.1
Host: cms.quantserve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Sun, 29 Jan 2023 09:25:51 GMT
content-length: 0
cache-control: private, no-cache, no-store, proxy-revalidate
expires: Fri, 04 Aug 1978 12:00:00 GMT
location: https://s2s.t13.io/setuid?bidder=quantcastfsx&&uid=N8u9oTKa4PEsyuigZZ709jbP76MsyOGnNMkTdghD
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV"
pragma: no-cache
set-cookie: d=EBIBDQGVKMnokwA; expires=Sat, 29-Apr-2023 09:25:51 GMT; path=/; domain=.quantserve.com
mc=63d63b9f-217df-a7764-08051; expires=Thu, 29-Feb-2024 09:25:51 GMT; path=/; domain=.quantserve.com
X-Firefox-Spdy: h2
static.adsafeprotected.com/skeleton.js
200 OK 17 B URL HTTP/2 static.adsafeprotected.com/skeleton.js
IP
File type ASCII text, with no line terminators
Hash 53fab767ecbd3bf07990b10246befbd4
49044085bb137d175d261b5fb9617c6f0f302c49
bdeed1e1c0751610c8f3dc2a5c78c93f841c366b36a7f7a54f5e6752c2656c05
GET /skeleton.js HTTP/1.1
Host: static.adsafeprotected.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 17
date: Sat, 05 Nov 2022 01:51:23 GMT
x-amz-replication-status: COMPLETED
last-modified: Mon, 17 Aug 2020 23:54:35 GMT
etag: "53fab767ecbd3bf07990b10246befbd4"
x-amz-server-side-encryption: AES256
cache-control: max-age=315360000
x-amz-version-id: nylqTweorRThFHMBJSrf_fHcWx3KVKN3
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: d82WeK5ij5RieOShObINWTgVbPU5Dajd1fB67Qm0sIyfvrr4mXI3XA==
age: 7371269
X-Firefox-Spdy: h2
c.amazon-adsystem.com/aax2/apstag.js
200 OK 47 kB URL HTTP/2 c.amazon-adsystem.com/aax2/apstag.js
IP
Hash 5acece2fbbb717cbc0418deda24dde83
a6567802824705fb9f83da85bb3c47c2f4517dac
28f9575173c3894c425ab3c1233c04d6560bb7c392302227874fb45d26dcb525
GET /aax2/apstag.js HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 29 Jan 2023 09:24:51 GMT
last-modified: Wed, 25 Jan 2023 21:28:25 GMT
etag: W/"8a6d0f2d51de2b80e524e04684f71215"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600
server: AmazonS3
content-encoding: gzip
via: 1.1 ec85113c6ed859938b3fcfa19bc035f8.cloudfront.net (CloudFront), 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: FRA60-P1, OSL50-P1
x-amz-cf-id: ZxpbwwCeKFqLxTcD3EJ6djwWJ4GaNO9ggOZPvSpns9z5fwdHH85rgQ==
age: 61
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-19669260-1&cid=1431532804.1674984355&jid=1706169150&_u=YADAAUAAAAAAACAAI~&z=171940614
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-19669260-1&cid=1431532804.1674984355&jid=1706169150&_u=YADAAUAAAAAAACAAI~&z=171940614
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-19669260-1&cid=1431532804.1674984355&jid=1706169150&_u=YADAAUAAAAAAACAAI~&z=171940614 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 29 Jan 2023 09:25:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
vars.hotjar.com/box-fc6c0cda90900662e5160cde908b3e86.html
200 OK 111 kB URL HTTP/2 vars.hotjar.com/box-fc6c0cda90900662e5160cde908b3e86.html
IP
Size 111 kB (111069 bytes)
Hash 1921039615f09de6a2900ca3eae2d0b1
8ac68a8d997c7680a044f08c9c6f12344f9d5335
232f5b795ea7106804871476b1d14a1203588c05fc57262ff35b0a3ec30e26b1
GET /box-fc6c0cda90900662e5160cde908b3e86.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1034
date: Fri, 27 Jan 2023 09:04:06 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "c34915675a9e912c93dac934322be7d1"
last-modified: Fri, 27 Jan 2023 09:03:53 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5etpVma2ILZOGIW3Oev0itZ4CQ-1vnyHHJNUv9KP7ifx0OEFRhv9fg==
age: 174105
X-Firefox-Spdy: h2
script.hotjar.com/modules.dcdf252a9a6cf097c357.js
200 OK 68 kB URL HTTP/2 script.hotjar.com/modules.dcdf252a9a6cf097c357.js
IP
File type Unicode text, UTF-8 text, with very long lines (48602)
Hash 4ab050de5a6437b8d1f5955ab1dbfb07
498e55a41dc3df84cf825bd946a1300a04b38677
87cbfe168c8537c46132cab67a16afe706796b7f301ac8dc5bd8f9ea847e4a72
GET /modules.dcdf252a9a6cf097c357.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 68336
date: Fri, 27 Jan 2023 09:04:05 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "4ab050de5a6437b8d1f5955ab1dbfb07"
last-modified: Fri, 27 Jan 2023 09:03:53 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 17IvCT99x19ypw3WxJ2yG6Acssae1lqL0sEqCYix61VI5dSykOBXlA==
age: 174106
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 4a22cb138bcf490f281fd37cf492be02
b4893a0b5cbe999f13ef989631b1e1cd6902411e
f237d4c723f1fd160cd29dec937cb17a80e6ad716e90b339573503a16e9fb420
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=135728
Date: Sun, 29 Jan 2023 09:25:51 GMT
Etag: "63d59b2b-1d7"
Expires: Mon, 30 Jan 2023 23:07:59 GMT
Last-Modified: Sat, 28 Jan 2023 22:01:15 GMT
Server: ECS (nyb/1D1D)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Qfbxnv3_3yeMvPmsl_oBIzmNV59zep6pbBLLiHV7Bg8wxM_EYM6CmQ==
Age: 4004
ocsp.digicert.com/
200 OK 313 B IP
Hash 16079991629b5f277cf7fd803c583f4f
6526913d5033fc6262f3648a8aeb5c6875b19578
9732808d0b5e570381b2f610518abae0eb9de852f65952c5919a116fe3a20600
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1016
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:51 GMT
Last-Modified: Sun, 29 Jan 2023 09:08:55 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 313
c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fwww.popdust.com&pubid=0ab198dd-b265-462a-ae36-74e163ad6159
200 OK 715 B URL HTTP/2 c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fwww.popdust.com&pubid=0ab198dd-b265-462a-ae36-74e163ad6159
IP
File type JSON data\012- , ASCII text, with very long lines (715), with no line terminators
Hash 71ff2249d73ae3bdd364ac707917b8af
403fc7f58e7f37982c229dad752925209b870fba
37242aa83971c2832d43401e931308e46b5c6946ffbface43876d30110b2e191
GET /cdn/prod/config?src=600&u=https%3A%2F%2Fwww.popdust.com&pubid=0ab198dd-b265-462a-ae36-74e163ad6159 HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json;charset=UTF-8
content-length: 715
access-control-allow-origin: https://www.popdust.com
access-control-allow-credentials: true
cache-control: max-age=21550, s-maxage=21600
date: Sun, 29 Jan 2023 09:25:51 GMT
server: Server
x-cache: Miss from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: tBuhJXh4bdVC_ofUvX1ZmAor8Qj7K8WPhAN6BrIuQFgwnZ-c9j8Dfg==
X-Firefox-Spdy: h2
mcdp-nydc1.outbrain.com/l?token=d9ba313a3e1bb9d7a27a045a355be41e_9270_1674984349692&tm=501&eT=0&widgetWidth=425&widgetHeight=41&widgetX=424&widgetY=4888&wRV=2010108&pVis=0&lsd=-1&eIdx=&cnsnt=no_consent&cheq=0&rtt=277&oo=true&lo=3424&odbreq=3728&odbres=4005&to=1674984352454&chs=1&ab=0&wl=0
200 OK 2 B URL HTTP/1.1 mcdp-nydc1.outbrain.com/l?token=d9ba313a3e1bb9d7a27a045a355be41e_9270_1674984349692&tm=501&eT=0&widgetWidth=425&widgetHeight=41&widgetX=424&widgetY=4888&wRV=2010108&pVis=0&lsd=-1&eIdx=&cnsnt=no_consent&cheq=0&rtt=277&oo=true&lo=3424&odbreq=3728&odbres=4005&to=1674984352454&chs=1&ab=0&wl=0
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
GET /l?token=d9ba313a3e1bb9d7a27a045a355be41e_9270_1674984349692&tm=501&eT=0&widgetWidth=425&widgetHeight=41&widgetX=424&widgetY=4888&wRV=2010108&pVis=0&lsd=-1&eIdx=&cnsnt=no_consent&cheq=0&rtt=277&oo=true&lo=3424&odbreq=3728&odbres=4005&to=1674984352454&chs=1&ab=0&wl=0 HTTP/1.1
Host: mcdp-nydc1.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 09:25:51 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 2
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: content-range
X-TraceId: 205f0d94c64821aaa997541fe97ea2c0
jadserve.postrelease.com/t?ntv_url=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d
200 OK 1.7 kB URL HTTP/2 jadserve.postrelease.com/t?ntv_url=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d
IP
File type ASCII text, with very long lines (4766), with no line terminators
Hash b18ed0ab508f0a54fd8d6f4bbbc549f5
546e30ea34d07293d91df6c90d9a46511f8f4505
5377d04a29ea71d4a6e35d2fddc788921dd8852f05f067d53b0f1f8011912732
GET /t?ntv_url=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d HTTP/1.1
Host: jadserve.postrelease.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:51 GMT
content-type: text/javascript;charset=UTF-8
content-length: 1678
server: nginx/1.12.2
expires: Mon, 1 Jan 1990 12:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-origin: *
p3p: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: opt_out=1; Domain=.postrelease.com; Expires=Mon, 29-Jan-2024 09:25:51 GMT; Path=/; Secure; SameSite=None;
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash efada10d2d3b1c0348542f4385bb0125
f7a73a926024caff1886422c930c6816192293d6
109aa85aa5895922a8c042bee431609d2c514ee08547cc0f4cbd96de9060b04f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.jsdelivr.net/gh/prebid/shared-id/pubcid.js/docs/pubcid.min.js
200 OK 437 B URL HTTP/2 cdn.jsdelivr.net/gh/prebid/shared-id/pubcid.js/docs/pubcid.min.js
IP
File type ASCII text, with very long lines (693)
Hash 3e32ff89cf939963a7d49f75342d6e8e
176bf2bf753a652fcd2b12721dfd72c50f424740
01f4ecc7a42b9fd7f72a334434871c05e97d09fb74451696e7bc59d3f28b9b27
GET /gh/prebid/shared-id/pubcid.js/docs/pubcid.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: master
x-jsd-version-type: branch
etag: W/"2dc-IrZxm/sP4aqtIfs1EfEw6Dg5q1Y"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 29 Jan 2023 09:25:51 GMT
age: 17827
x-served-by: cache-fra-eddf8230037-FRA, cache-bma1644-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 437
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash efada10d2d3b1c0348542f4385bb0125
f7a73a926024caff1886422c930c6816192293d6
109aa85aa5895922a8c042bee431609d2c514ee08547cc0f4cbd96de9060b04f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash efada10d2d3b1c0348542f4385bb0125
f7a73a926024caff1886422c930c6816192293d6
109aa85aa5895922a8c042bee431609d2c514ee08547cc0f4cbd96de9060b04f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash efada10d2d3b1c0348542f4385bb0125
f7a73a926024caff1886422c930c6816192293d6
109aa85aa5895922a8c042bee431609d2c514ee08547cc0f4cbd96de9060b04f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.ampproject.org/rtv/012301112346000/amp4ads-v0.mjs
200 OK 62 kB URL HTTP/2 cdn.ampproject.org/rtv/012301112346000/amp4ads-v0.mjs
IP
File type Unicode text, UTF-8 text, with very long lines (65008)
Hash 27cf438fb43d91ae188ec660779545d6
8b9a4cafe884163806af638d24d38b3d3ebc9a4b
fbad1bda779d108b137b7ef98564a9538f866d3c20208c5c3f59f30be33e43ad
GET /rtv/012301112346000/amp4ads-v0.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 61771
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 23 Jan 2023 18:11:13 GMT
expires: Tue, 23 Jan 2024 18:11:13 GMT
cache-control: public, max-age=31536000
etag: "004684fcaffa7679"
content-type: text/javascript; charset=UTF-8
age: 486878
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.ampproject.org/rtv/012301112346000/v0/amp-fit-text-0.1.mjs
200 OK 1.9 kB URL HTTP/2 cdn.ampproject.org/rtv/012301112346000/v0/amp-fit-text-0.1.mjs
IP
File type ASCII text, with very long lines (5021)
Hash 7fe5c160dceb250b352d5e11b7586036
0903f40a74a5805f6391a371509369de8e2e1c50
eaec033417fdbf02ec62fc0bf45d0bee3538e3e1722660a312cbe3e4dd60068f
GET /rtv/012301112346000/v0/amp-fit-text-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.popdust.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 1907
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 28 Jan 2023 15:52:57 GMT
expires: Sun, 28 Jan 2024 15:52:57 GMT
cache-control: public, max-age=31536000
etag: "5788572ff662ddbc"
content-type: text/javascript; charset=UTF-8
age: 63174
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/U9Z1AR6Ft-g
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/U9Z1AR6Ft-g
IP
Hash fe0db92823624dfc3b4cb2b8329c5ab2
deb14232325bb9560608bedb77abdb6f6081f0ed
4e9420da593c65b953a7c36cd756dffa51595bb2466ee7be41aff4180bd7fdf4
POST /s/gts1d4/U9Z1AR6Ft-g HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:51 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.id5-sync.com/api/1.0/id5-api.js
200 OK 46 kB URL HTTP/2 cdn.id5-sync.com/api/1.0/id5-api.js
IP
Hash 7ac663b19c690452e6042412960409e9
6c97e148c823f8eede36e9a770bdaf3d87929dce
8f020bc9b34a6b9c93af18ea9627ed7aad9114806a06415d91da92c926641de7
GET /api/1.0/id5-api.js HTTP/1.1
Host: cdn.id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:51 GMT
content-type: text/javascript;charset=utf-8
x-amz-id-2: CO+cPK9MlXQ+Pp7rzr8UBe9jXf3QVRyCEIXUUj0WHfDV3zQVrjcz3bOmEOU9iBqkaS9ucJx5v/0=
x-amz-request-id: H722FXZ7MH4EZWKX
last-modified: Wed, 18 Jan 2023 10:47:57 GMT
etag: W/"4d61440f9cbdbb9b0b5a43273c7c3caf"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600
cf-cache-status: HIT
age: 948
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
server: cloudflare
cf-ray: 7910ec453ce6b4f4-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.ampproject.org/rtv/012301112346000/v0/amp-ad-exit-0.1.mjs
200 OK 5.2 kB URL HTTP/2 cdn.ampproject.org/rtv/012301112346000/v0/amp-ad-exit-0.1.mjs
IP
File type ASCII text, with very long lines (14751)
Hash 8d4f7148a157a31d69df198119f15f6c
869d2edb3409f82d8da8690b3b6c7c4212466bf1
9e17a0f37428d7db29cea9973f978d4716aaa7581c2480e9c337efcc84def4bf
GET /rtv/012301112346000/v0/amp-ad-exit-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.popdust.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 5217
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 23 Jan 2023 18:11:13 GMT
expires: Tue, 23 Jan 2024 18:11:13 GMT
cache-control: public, max-age=31536000
etag: "cee5c64b71634b65"
content-type: text/javascript; charset=UTF-8
age: 486878
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.prod.uidapi.com/uid2SecureSignal.js
200 OK 1.9 kB URL HTTP/1.1 cdn.prod.uidapi.com/uid2SecureSignal.js
IP
File type ASCII text, with very long lines (1859), with no line terminators
Hash aded621b17723f487b3c9d0e43cf2f94
90fbec381aa4a6ae2a2bb37eb082291432a1ab18
71fc1599035adc6bc34df2117b8631285905f97737ba730af28644ee6a0d8dde
GET /uid2SecureSignal.js HTTP/1.1
Host: cdn.prod.uidapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript
Content-Length: 1859
Connection: keep-alive
Date: Sun, 29 Jan 2023 04:07:51 GMT
Last-Modified: Mon, 23 Jan 2023 04:07:36 GMT
ETag: "aded621b17723f487b3c9d0e43cf2f94"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: H1ECeYK59FCHl2fMdw71DnwXWDIwbbsPXgizXjme7oGCVDFlL1YMMA==
Age: 19081
secure.cdn.fastclick.net/js/pubcid/latest/pubcid.min.js
200 OK 17 kB URL HTTP/2 secure.cdn.fastclick.net/js/pubcid/latest/pubcid.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (36525), with NEL line terminators
Hash 65875d9adc4599663a61e744c57d3e08
da7689e79bd92cd1c676badf0fb897f045d48653
830050c7e3b735c29efa65defb4de8dc42969a8cbb12e520479f9d067a90f4bf
GET /js/pubcid/latest/pubcid.min.js HTTP/1.1
Host: secure.cdn.fastclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Apache
last-modified: Thu, 13 Oct 2022 18:14:48 GMT
etag: "d4ed-5eaee7c12df48-gzip"
accept-ranges: bytes
content-encoding: gzip
content-length: 17131
content-type: application/javascript
cache-control: max-age=900
expires: Sun, 29 Jan 2023 09:40:51 GMT
date: Sun, 29 Jan 2023 09:25:51 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
tr.outbrain.com/cachedClickId?marketerId=undefined
200 OK 35 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=undefined
IP
File type ASCII text, with no line terminators
Hash 75c843c7b717e7b722777907475c67a3
983d1c9a05b315288039b9d4694ce3b402259240
1d348f9f803c95305f63def9d75fd50e79e54a375e1a4a888edbbea366845580
GET /cachedClickId?marketerId=undefined HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 09:25:51 GMT
Content-Type: application/javascript
Content-Length: 35
X-TraceId: bbc885ee0f76b52053fe1391e415e473
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP
Hash 05b4a09fe7196b10160ab75ac1e78bb7
dd56268d1c83de132049d310f57c9bb544765a5d
d3c04b5b4e505a702d32b07d167f2aee7038861926fadaf5268788f4184580ad
POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1462
Content-Type: application/ocsp-response
Etag: "BA8118C5757DCF3A57BEEDB9CF7F1DF703AC1E63"
Expires: Sun, 29 Jan 2023 21:00:00 UTC
Last-Modified: Sun, 29 Jan 2023 09:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
Accept-Ranges: bytes
Date: Sun, 29 Jan 2023 09:25:51 GMT
Via: 1.1 varnish
Age: 70
X-Served-By: cache-bma1651-BMA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1674984352.832464,VS0,VE1
tr.outbrain.com/unifiedPixel?marketerId=00ae65f2556a0742a174dbf7f84e15e860&obApiVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&cht=tcf&optOut=false&bust=0054538044415596953&referrer=
200 OK 53 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?marketerId=00ae65f2556a0742a174dbf7f84e15e860&obApiVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&cht=tcf&optOut=false&bust=0054538044415596953&referrer=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 414bd2a5161db03fdd910327b42c6daa
65d4cf50496813c5f1a34eddd5c50dc67d44ff47
b51f3497b0a65f1e1e87e75f5e7e823d871c23bcf76a5ee4101783c8f939e553
GET /unifiedPixel?marketerId=00ae65f2556a0742a174dbf7f84e15e860&obApiVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&cht=tcf&optOut=false&bust=0054538044415596953&referrer= HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 09:25:51 GMT
Content-Type: image/gif;
Content-Length: 53
Cache-Control: no-cache
X-TraceId: 2d8588b5fa1805469fce221adf08fead
aax-dtb-cf.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&pid=v3tgLIpBl3AQG&cb=0&ws=1280x939&v=23.123.1617&t=1000&slots=%5B%7B%22sd%22%3A%22popdust_left_1%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F15184186%2C10937338%2Fpopdust_left_1%22%7D%2C%7B%22sd%22%3A%22popdust_left_2%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F15184186%2C10937338%2Fpopdust_left_2%22%7D%2C%7B%22sd%22%3A%22popdust_left_3%22%2C%22s%22%3A%5B%22300x250%22%2C%22160x600%22%2C%22300x600%22%5D%2C%22sn%22%3A%22%2F15184186%2C10937338%2Fpopdust_left_3%22%7D%2C%7B%22sd%22%3A%22popdust_leaderboard_MID63d630668f4172b18405dcf2%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F15184186%2C10937338%2Fpopdust_leaderboard_MID%22%7D%2C%7B%22sd%22%3A%22popdust_leaderboard_MID2%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F15184186%2C10937338%2Fpopdust_leaderboard_MID%22%7D%2C%7B%22sd%22%3A%22popdust_leaderboard_MID63d630668f4172b18405dd02%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F15184186%2C10937338%2Fpopdust_leaderboard_MID%22%7D%5D&schain=1.0%2C1!freestar.com%2C807%2C1%2C%2C%2C&pubid=0ab198dd-b265-462a-ae36-74e163ad6159&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D
200 OK 207 B URL HTTP/2 aax-dtb-cf.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&pid=v3tgLIpBl3AQG&cb=0&ws=1280x939&v=23.123.1617&t=1000&slots=%5B%7B%22sd%22%3A%22popdust_left_1%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F15184186%2C10937338%2Fpopdust_left_1%22%7D%2C%7B%22sd%22%3A%22popdust_left_2%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F15184186%2C10937338%2Fpopdust_left_2%22%7D%2C%7B%22sd%22%3A%22popdust_left_3%22%2C%22s%22%3A%5B%22300x250%22%2C%22160x600%22%2C%22300x600%22%5D%2C%22sn%22%3A%22%2F15184186%2C10937338%2Fpopdust_left_3%22%7D%2C%7B%22sd%22%3A%22popdust_leaderboard_MID63d630668f4172b18405dcf2%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F15184186%2C10937338%2Fpopdust_leaderboard_MID%22%7D%2C%7B%22sd%22%3A%22popdust_leaderboard_MID2%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F15184186%2C10937338%2Fpopdust_leaderboard_MID%22%7D%2C%7B%22sd%22%3A%22popdust_leaderboard_MID63d630668f4172b18405dd02%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F15184186%2C10937338%2Fpopdust_leaderboard_MID%22%7D%5D&schain=1.0%2C1!freestar.com%2C807%2C1%2C%2C%2C&pubid=0ab198dd-b265-462a-ae36-74e163ad6159&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D
IP
File type ASCII text, with no line terminators
Hash bd30b64e6c0e1067ba32cbb625e78792
5cbe6066209a15118880fd3d5555c49a4d18dd0a
f5ea650703190d7915019fea9202087ad7f13d3fa7d3ee6c8fde8bd5dd479f38
GET /e/dtb/bid?src=600&u=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&pid=v3tgLIpBl3AQG&cb=0&ws=1280x939&v=23.123.1617&t=1000&slots=%5B%7B%22sd%22%3A%22popdust_left_1%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F15184186%2C10937338%2Fpopdust_left_1%22%7D%2C%7B%22sd%22%3A%22popdust_left_2%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F15184186%2C10937338%2Fpopdust_left_2%22%7D%2C%7B%22sd%22%3A%22popdust_left_3%22%2C%22s%22%3A%5B%22300x250%22%2C%22160x600%22%2C%22300x600%22%5D%2C%22sn%22%3A%22%2F15184186%2C10937338%2Fpopdust_left_3%22%7D%2C%7B%22sd%22%3A%22popdust_leaderboard_MID63d630668f4172b18405dcf2%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F15184186%2C10937338%2Fpopdust_leaderboard_MID%22%7D%2C%7B%22sd%22%3A%22popdust_leaderboard_MID2%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F15184186%2C10937338%2Fpopdust_leaderboard_MID%22%7D%2C%7B%22sd%22%3A%22popdust_leaderboard_MID63d630668f4172b18405dd02%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F15184186%2C10937338%2Fpopdust_leaderboard_MID%22%7D%5D&schain=1.0%2C1!freestar.com%2C807%2C1%2C%2C%2C&pubid=0ab198dd-b265-462a-ae36-74e163ad6159&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D HTTP/1.1
Host: aax-dtb-cf.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
content-length: 207
server: Server
date: Sun, 29 Jan 2023 09:25:51 GMT
x-amz-rid: BG861ZRDZJQCTFPNVWXZ
access-control-allow-origin: https://www.popdust.com
access-control-allow-credentials: true
timing-allow-origin: *
strict-transport-security: max-age=47474747; includeSubDomains; preload
vary: Accept-Encoding,User-Agent
x-cache: Miss from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hLQM2xIDQDTBlLxCKjL0e18hKyISfndUHltRgfDZFJOTKs9dY3W88A==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash efada10d2d3b1c0348542f4385bb0125
f7a73a926024caff1886422c930c6816192293d6
109aa85aa5895922a8c042bee431609d2c514ee08547cc0f4cbd96de9060b04f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/U9Z1AR6Ft-g
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/U9Z1AR6Ft-g
IP
Hash fe0db92823624dfc3b4cb2b8329c5ab2
deb14232325bb9560608bedb77abdb6f6081f0ed
4e9420da593c65b953a7c36cd756dffa51595bb2466ee7be41aff4180bd7fdf4
POST /s/gts1d4/U9Z1AR6Ft-g HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:51 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
z.moatads.com/nativonielsen548znrb18/moatcontent.js?moatClientLevel1=15751
200 OK 56 kB URL HTTP/2 z.moatads.com/nativonielsen548znrb18/moatcontent.js?moatClientLevel1=15751
IP
File type ASCII text, with very long lines (549)
Hash 774acff2cee5852cdfc3fd8471cb2667
4890313b2e624aea6f3771c80b8aca7780a40f45
085732dbcb6d0e412abf9f05267e8a5eedc04ac2185b8df00215f284bdcf7874
GET /nativonielsen548znrb18/moatcontent.js?moatClientLevel1=15751 HTTP/1.1
Host: z.moatads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: P7XMDicfzq8/GD5zoLBF2L8YGG4fDRH+Rtyd+yrNeaH/yo6EBpAr64SzvpR5uLKDRLTLNOTPaaM=
x-amz-request-id: CS8H0ZBXEG9N1J2M
last-modified: Mon, 24 Aug 2020 17:04:05 GMT
etag: "774acff2cee5852cdfc3fd8471cb2667"
content-encoding: gzip
accept-ranges: bytes
content-type: application/x-javascript
content-length: 55696
server: AmazonS3
vary: Accept-Encoding
unused62: 8096267
cache-control: max-age=6938
date: Sun, 29 Jan 2023 09:25:51 GMT
X-Firefox-Spdy: h2
jadserve.postrelease.com/trk.gif?ntv_ui=dc368fd8-0d43-45e7-9f8c-4e16d882cf06&ntv_fl=0T3GPaJUwO2ShV7fSUenEeoJHpC-M1T_f4PrHtvxu3sVMPUzR9isyQmxgzF9smfljxgE1iaHAKnOKzASmxLFxYNjoZqDaOURWUTH_KPVPSvd6ni88X3062wTN4KN4AVj32Jk0gPPZGAf6ZEK0ByYaIPc0oF9j3no_7zy-uqSMyXD5l7cVAroxhu9Ca4tCQXIxVr2YLXDBTfTYBr5ls-wCRjsjpSFiZ7SFlY5-zpMQLyS37xMH7oUInGQWL_jqd604PBmkXP_MMtklhfP6ovvJiZZk2UbOHXnYCLGBRV_TwU=&ntv_ht=nzvWYwA&ntv_at=303,302&ntv_a=AAAAAAAAAAFiURA&ord=1674984358325&ntv_dpl=1028,1029,101961,1033,1034,101963,1003,1006,1007,1041,1009,1011,1050,1019&ntv_it
200 OK 43 B URL HTTP/2 jadserve.postrelease.com/trk.gif?ntv_ui=dc368fd8-0d43-45e7-9f8c-4e16d882cf06&ntv_fl=0T3GPaJUwO2ShV7fSUenEeoJHpC-M1T_f4PrHtvxu3sVMPUzR9isyQmxgzF9smfljxgE1iaHAKnOKzASmxLFxYNjoZqDaOURWUTH_KPVPSvd6ni88X3062wTN4KN4AVj32Jk0gPPZGAf6ZEK0ByYaIPc0oF9j3no_7zy-uqSMyXD5l7cVAroxhu9Ca4tCQXIxVr2YLXDBTfTYBr5ls-wCRjsjpSFiZ7SFlY5-zpMQLyS37xMH7oUInGQWL_jqd604PBmkXP_MMtklhfP6ovvJiZZk2UbOHXnYCLGBRV_TwU=&ntv_ht=nzvWYwA&ntv_at=303,302&ntv_a=AAAAAAAAAAFiURA&ord=1674984358325&ntv_dpl=1028,1029,101961,1033,1034,101963,1003,1006,1007,1041,1009,1011,1050,1019&ntv_it
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /trk.gif?ntv_ui=dc368fd8-0d43-45e7-9f8c-4e16d882cf06&ntv_fl=0T3GPaJUwO2ShV7fSUenEeoJHpC-M1T_f4PrHtvxu3sVMPUzR9isyQmxgzF9smfljxgE1iaHAKnOKzASmxLFxYNjoZqDaOURWUTH_KPVPSvd6ni88X3062wTN4KN4AVj32Jk0gPPZGAf6ZEK0ByYaIPc0oF9j3no_7zy-uqSMyXD5l7cVAroxhu9Ca4tCQXIxVr2YLXDBTfTYBr5ls-wCRjsjpSFiZ7SFlY5-zpMQLyS37xMH7oUInGQWL_jqd604PBmkXP_MMtklhfP6ovvJiZZk2UbOHXnYCLGBRV_TwU=&ntv_ht=nzvWYwA&ntv_at=303,302&ntv_a=AAAAAAAAAAFiURA&ord=1674984358325&ntv_dpl=1028,1029,101961,1033,1034,101963,1003,1006,1007,1041,1009,1011,1050,1019&ntv_it HTTP/1.1
Host: jadserve.postrelease.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:51 GMT
content-type: image/gif
content-length: 43
server: nginx/1.12.2
expires: Mon, 1 Jan 1990 12:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-origin: *
p3p: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: opt_out=1; Domain=.postrelease.com; Expires=Mon, 29-Jan-2024 09:25:51 GMT; Path=/; Secure; SameSite=None;
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b279d00e3fe506fa55ae410fca0c901
c88d705cf5d6d692ec6104dcc4690c8817afebab
11f31abefac6551a99c0d4fc1fcb303b678cc50b7616d5cdb53c0a6382f024a5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "11F31ABEFAC6551A99C0D4FC1FCB303B678CC50B7616D5CDB53C0A6382F024A5"
Last-Modified: Sat, 28 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4804
Expires: Sun, 29 Jan 2023 10:45:56 GMT
Date: Sun, 29 Jan 2023 09:25:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b279d00e3fe506fa55ae410fca0c901
c88d705cf5d6d692ec6104dcc4690c8817afebab
11f31abefac6551a99c0d4fc1fcb303b678cc50b7616d5cdb53c0a6382f024a5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "11F31ABEFAC6551A99C0D4FC1FCB303B678CC50B7616D5CDB53C0A6382F024A5"
Last-Modified: Sat, 28 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4804
Expires: Sun, 29 Jan 2023 10:45:56 GMT
Date: Sun, 29 Jan 2023 09:25:52 GMT
Connection: keep-alive
jadserve.postrelease.com/trk.gif?ntv_at=394&ntv_usid=1348708&ntv_pl=1123600
200 OK 43 B URL HTTP/2 jadserve.postrelease.com/trk.gif?ntv_at=394&ntv_usid=1348708&ntv_pl=1123600
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /trk.gif?ntv_at=394&ntv_usid=1348708&ntv_pl=1123600 HTTP/1.1
Host: jadserve.postrelease.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:51 GMT
content-type: image/gif
content-length: 43
server: nginx/1.12.2
expires: Mon, 1 Jan 1990 12:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-origin: *
p3p: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: opt_out=1; Domain=.postrelease.com; Expires=Mon, 29-Jan-2024 09:25:51 GMT; Path=/; Secure; SameSite=None;
X-Firefox-Spdy: h2
jadserve.postrelease.com/gdprConsent?ntv_pl=1123601&ntv_gdpr_consent=&ntv_it
200 OK 43 B URL HTTP/2 jadserve.postrelease.com/gdprConsent?ntv_pl=1123601&ntv_gdpr_consent=&ntv_it
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /gdprConsent?ntv_pl=1123601&ntv_gdpr_consent=&ntv_it HTTP/1.1
Host: jadserve.postrelease.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:51 GMT
content-type: image/gif
content-length: 43
server: nginx/1.12.2
expires: Mon, 1 Jan 1990 12:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-origin: *
p3p: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: opt_out=1; Domain=.postrelease.com; Expires=Mon, 29-Jan-2024 09:25:51 GMT; Path=/; Secure; SameSite=None;
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 4d58b1248799e7a16bd8578528899c66
97516097daa4325cf13da1afbc3a5c4dd9f5c2bc
eb4d0090d6c27e8ccf6af95c37f2e13620205567d1ba3699dec91d2bcbe40767
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 09:25:52 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 28 Jan 2023 13:57:51 GMT
Expires: Sat, 04 Feb 2023 13:57:50 GMT
Etag: "97516097daa4325cf13da1afbc3a5c4dd9f5c2bc"
Cache-Control: max-age=534118,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7910ec46dc5eb4f7-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3e863faa386be5424a5d4a452860ccbd
ceee8a9b940473ca6678375d68b2989c074d5175
678aa5fb1efcb394a85ca175ef644b9585d8cb5dc1c55a2331a8af0f3a601571
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "678AA5FB1EFCB394A85CA175EF644B9585D8CB5DC1C55A2331A8AF0F3A601571"
Last-Modified: Sat, 28 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21526
Expires: Sun, 29 Jan 2023 15:24:38 GMT
Date: Sun, 29 Jan 2023 09:25:52 GMT
Connection: keep-alive
lbs.eu-1-id5-sync.com/lbs/v1
200 OK 34 B URL HTTP/1.1 lbs.eu-1-id5-sync.com/lbs/v1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7e46e21948855209a330a650c4dcee49
293e24947ab2ebbc880ce762cd3827a9dc84ba86
402292d3e8e4f9509c8434133dd595141659a6625d2a13d08ac90a4fb962b33e
GET /lbs/v1 HTTP/1.1
Host: lbs.eu-1-id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sun, 29 Jan 2023 09:25:52 GMT
access-control-allow-origin: https://www.popdust.com
vary: Origin
content-type: application/json
content-length: 34
strict-transport-security: max-age=63072000; includeSubDomains; preload
lb.eu-1-id5-sync.com/lb/v1
200 33 B URL HTTP/1.1 lb.eu-1-id5-sync.com/lb/v1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9966f4653ceecf2f62bc7e311e21db95
9c7b0578ff2803eb0d48695d76c045888e9b6b17
cf97180cb0bacee13e8b7f8c048c5df20e142357456169a731f6d9cdf588c39b
GET /lb/v1 HTTP/1.1
Host: lb.eu-1-id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: https://www.popdust.com
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Sun, 29 Jan 2023 09:25:51 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
id5-sync.com/api/esp/increment?counter=no-config
204 0 B URL HTTP/1.1 id5-sync.com/api/esp/increment?counter=no-config
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/esp/increment?counter=no-config HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: https://www.popdust.com
access-control-allow-credentials: true
date: Sun, 29 Jan 2023 09:25:51 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
ssc-cms.33across.com/ps/?m=xch&rt=html&gdpr=&gdpr_consent=&us_privacy=&id=zzz000000000002zzz&ru=https%3A%2F%2Fs2s.t13.io%2Fsetuid%3Fbidder%3D33across%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26f%3Db%26uid%3D33XUSERID33X
204 No Content 0 B URL HTTP/2 ssc-cms.33across.com/ps/?m=xch&rt=html&gdpr=&gdpr_consent=&us_privacy=&id=zzz000000000002zzz&ru=https%3A%2F%2Fs2s.t13.io%2Fsetuid%3Fbidder%3D33across%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26f%3Db%26uid%3D33XUSERID33X
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ps/?m=xch&rt=html&gdpr=&gdpr_consent=&us_privacy=&id=zzz000000000002zzz&ru=https%3A%2F%2Fs2s.t13.io%2Fsetuid%3Fbidder%3D33across%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26f%3Db%26uid%3D33XUSERID33X HTTP/1.1
Host: ssc-cms.33across.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
x-33x-status: 2000208
server: 33XP019
date: Sun, 29 Jan 2023 09:25:51 GMT
X-Firefox-Spdy: h2
oajs.openx.net/esp?url=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&rid=esp
200 OK 2 B URL HTTP/2 oajs.openx.net/esp?url=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&rid=esp
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /esp?url=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&rid=esp HTTP/1.1
Host: oajs.openx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-powered-by: Express
access-control-allow-origin: https://www.popdust.com
vary: Origin
access-control-allow-credentials: true
content-type: application/json; charset=utf-8
content-length: 2
etag: W/"2-vyGp6PvFo4RvsFtPoIWeCReyIC8"
date: Sun, 29 Jan 2023 09:25:52 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f65df335b22409e66005eeba4888b194
fe0619cba5a8ea6ceed165bc8491d62f005fcd5c
24d306c78f99cbe08c59679163f9f21348463c4d749ed3f53130327f257920de
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "24D306C78F99CBE08C59679163F9F21348463C4D749ED3F53130327F257920DE"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2946
Expires: Sun, 29 Jan 2023 10:14:58 GMT
Date: Sun, 29 Jan 2023 09:25:52 GMT
Connection: keep-alive
hal9000.redintelligence.net/zone/vjrffs1adg9r?subid=&gdpr=-1&gdpr_consent=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCOq52nzvWY7ipIdTh6gSNgZCgCdf6-ptpqqup4-IP8C4QASDh4YUxYMOEgICYGMgBCakC2FH_lG07sj6oAwGqBN8BT9Cs6P4onBH-XQ3QanY6mTTInrhz4EEZoD4tp5OcEaA3OHp-tvqSpeL3NykcSQ5TaeceqFvbgOw5tSWgnXv2SVcHHZbWS9i3Cqrg4sNnvTO1Jrhq7-vPQdt8QOQonxckprqtCDEIrem7tHeUy71Aj30oA-Eq75QQqQRnKa9Yq4xAcu_F4Bnf4lKHVX_-nb-MQes6toOP9FGRw_5bVIF1_cHkU6vSsrKDBeF5OdHnoXdsZFAzGxvliQaevWb8BZzegJdwIFbsdWj9uXBm-jmxZdwiU8BlFF4MoSBdGfyDccAEnf2hifAD4AQDkAYBoAZNgAesrfWfA6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6SjsQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCA8IgGEQARgdMgKKAjoCgECACgGYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSTADUE5ymSWqttQWHUSs8XnayMNYqF-pGaulXU427GpGRog4oLznbP6mzEnBOPilHq1MXNWYTy-U-UZR_7k6RFQuCKglQg2HXwe2zargYASAT%26sig%3DAOD64_24VJd-MQCZZMrCydhRa9XgMI_byw%26client%3Dca-pub-4301469008561137%26dbm_c%3DAKAmf-DNQ4FcTSAcsTHfHggYq_QKBjRERZbT3-wDIRLMJBPAj6PyJnvCeLhFUrfY191v-lcpr-W1H-8nHqty8JDaoFgd-TZpDnveWePBh4VMbgTISMDeNhmvk1SLPpJuAdJlkiUFMvgeL3WinKlJMQg9XYZwRlYRd58feOkYjAHL9T5igUYjiqc%26cry%3D1%26dbm_d%3DAKAmf-DQs6EI3Z2pFl2W2s5XTqnaAMSr8ypiPXyAxb5PE4QBKiWN4-EFHB5mWGVgXBRTVwntWumjncJHYHYx9jshmQNtac7BnGELj3oHj56LDtfRoHfm68sgr7PW0bQOdr7PBBfO61mYwQs0O4mDef4xsTgfqC6-mEgtUEUI9hWJcxKdpXj-WEzroWTzGp8IO0bUK4KVZWOWih9YkBxtc8Shkw9_P6aNoaR80_Cep3hjYtY9k9H7y39awwrMvpikmOuZL5wiKnUwradzLqGJRYMfZsEeMvDNi6P3tznjYFgtQiEI1HOpSel65OxcE_Jm1qXIt6L534T_3mYCZoX_ow94BPPEuZZJHsIU3qI6T18Jf2LawAC-8k0rqPyYlm54dPbkT06SDlclzTDxfJazAsUp-QYDAPNM8AD4WtL2RG_93sPvzepZ2sJWdRDj2PjfTzKhPlSqKFamS67f21lPQpY3QNfkMuKRb4gSF0vi1X0bgdrZUaB-VlzRfSCQeGzXJmbo-iSUxGSujvK_uf1R0xKzNKzPsV2Ly24ZMB_YcIgNCT8q7gUibw35inBN0D6_2gUBctUAX2rl2v6dQbtNmUm14O0Q--Tx0AtH88vMm3vHGPqC6QtQB-2vPkAWYwflWtum0KRUOxMq%26adurl%3D
200 OK 4.1 kB URL HTTP/1.1 hal9000.redintelligence.net/zone/vjrffs1adg9r?subid=&gdpr=-1&gdpr_consent=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCOq52nzvWY7ipIdTh6gSNgZCgCdf6-ptpqqup4-IP8C4QASDh4YUxYMOEgICYGMgBCakC2FH_lG07sj6oAwGqBN8BT9Cs6P4onBH-XQ3QanY6mTTInrhz4EEZoD4tp5OcEaA3OHp-tvqSpeL3NykcSQ5TaeceqFvbgOw5tSWgnXv2SVcHHZbWS9i3Cqrg4sNnvTO1Jrhq7-vPQdt8QOQonxckprqtCDEIrem7tHeUy71Aj30oA-Eq75QQqQRnKa9Yq4xAcu_F4Bnf4lKHVX_-nb-MQes6toOP9FGRw_5bVIF1_cHkU6vSsrKDBeF5OdHnoXdsZFAzGxvliQaevWb8BZzegJdwIFbsdWj9uXBm-jmxZdwiU8BlFF4MoSBdGfyDccAEnf2hifAD4AQDkAYBoAZNgAesrfWfA6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6SjsQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCA8IgGEQARgdMgKKAjoCgECACgGYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSTADUE5ymSWqttQWHUSs8XnayMNYqF-pGaulXU427GpGRog4oLznbP6mzEnBOPilHq1MXNWYTy-U-UZR_7k6RFQuCKglQg2HXwe2zargYASAT%26sig%3DAOD64_24VJd-MQCZZMrCydhRa9XgMI_byw%26client%3Dca-pub-4301469008561137%26dbm_c%3DAKAmf-DNQ4FcTSAcsTHfHggYq_QKBjRERZbT3-wDIRLMJBPAj6PyJnvCeLhFUrfY191v-lcpr-W1H-8nHqty8JDaoFgd-TZpDnveWePBh4VMbgTISMDeNhmvk1SLPpJuAdJlkiUFMvgeL3WinKlJMQg9XYZwRlYRd58feOkYjAHL9T5igUYjiqc%26cry%3D1%26dbm_d%3DAKAmf-DQs6EI3Z2pFl2W2s5XTqnaAMSr8ypiPXyAxb5PE4QBKiWN4-EFHB5mWGVgXBRTVwntWumjncJHYHYx9jshmQNtac7BnGELj3oHj56LDtfRoHfm68sgr7PW0bQOdr7PBBfO61mYwQs0O4mDef4xsTgfqC6-mEgtUEUI9hWJcxKdpXj-WEzroWTzGp8IO0bUK4KVZWOWih9YkBxtc8Shkw9_P6aNoaR80_Cep3hjYtY9k9H7y39awwrMvpikmOuZL5wiKnUwradzLqGJRYMfZsEeMvDNi6P3tznjYFgtQiEI1HOpSel65OxcE_Jm1qXIt6L534T_3mYCZoX_ow94BPPEuZZJHsIU3qI6T18Jf2LawAC-8k0rqPyYlm54dPbkT06SDlclzTDxfJazAsUp-QYDAPNM8AD4WtL2RG_93sPvzepZ2sJWdRDj2PjfTzKhPlSqKFamS67f21lPQpY3QNfkMuKRb4gSF0vi1X0bgdrZUaB-VlzRfSCQeGzXJmbo-iSUxGSujvK_uf1R0xKzNKzPsV2Ly24ZMB_YcIgNCT8q7gUibw35inBN0D6_2gUBctUAX2rl2v6dQbtNmUm14O0Q--Tx0AtH88vMm3vHGPqC6QtQB-2vPkAWYwflWtum0KRUOxMq%26adurl%3D
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (1736), with CRLF line terminators
Hash d6eb8f11b71cbdda51a53cb210b9b04b
8c27b9f5f19b847a4873d6e35440c45622abbf1c
14ab143b6c81a3b7374ba90bc488f7535778c5cfa19da53d6ee09fccbcb0a0c2
GET /zone/vjrffs1adg9r?subid=&gdpr=-1&gdpr_consent=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCOq52nzvWY7ipIdTh6gSNgZCgCdf6-ptpqqup4-IP8C4QASDh4YUxYMOEgICYGMgBCakC2FH_lG07sj6oAwGqBN8BT9Cs6P4onBH-XQ3QanY6mTTInrhz4EEZoD4tp5OcEaA3OHp-tvqSpeL3NykcSQ5TaeceqFvbgOw5tSWgnXv2SVcHHZbWS9i3Cqrg4sNnvTO1Jrhq7-vPQdt8QOQonxckprqtCDEIrem7tHeUy71Aj30oA-Eq75QQqQRnKa9Yq4xAcu_F4Bnf4lKHVX_-nb-MQes6toOP9FGRw_5bVIF1_cHkU6vSsrKDBeF5OdHnoXdsZFAzGxvliQaevWb8BZzegJdwIFbsdWj9uXBm-jmxZdwiU8BlFF4MoSBdGfyDccAEnf2hifAD4AQDkAYBoAZNgAesrfWfA6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6SjsQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCA8IgGEQARgdMgKKAjoCgECACgGYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSTADUE5ymSWqttQWHUSs8XnayMNYqF-pGaulXU427GpGRog4oLznbP6mzEnBOPilHq1MXNWYTy-U-UZR_7k6RFQuCKglQg2HXwe2zargYASAT%26sig%3DAOD64_24VJd-MQCZZMrCydhRa9XgMI_byw%26client%3Dca-pub-4301469008561137%26dbm_c%3DAKAmf-DNQ4FcTSAcsTHfHggYq_QKBjRERZbT3-wDIRLMJBPAj6PyJnvCeLhFUrfY191v-lcpr-W1H-8nHqty8JDaoFgd-TZpDnveWePBh4VMbgTISMDeNhmvk1SLPpJuAdJlkiUFMvgeL3WinKlJMQg9XYZwRlYRd58feOkYjAHL9T5igUYjiqc%26cry%3D1%26dbm_d%3DAKAmf-DQs6EI3Z2pFl2W2s5XTqnaAMSr8ypiPXyAxb5PE4QBKiWN4-EFHB5mWGVgXBRTVwntWumjncJHYHYx9jshmQNtac7BnGELj3oHj56LDtfRoHfm68sgr7PW0bQOdr7PBBfO61mYwQs0O4mDef4xsTgfqC6-mEgtUEUI9hWJcxKdpXj-WEzroWTzGp8IO0bUK4KVZWOWih9YkBxtc8Shkw9_P6aNoaR80_Cep3hjYtY9k9H7y39awwrMvpikmOuZL5wiKnUwradzLqGJRYMfZsEeMvDNi6P3tznjYFgtQiEI1HOpSel65OxcE_Jm1qXIt6L534T_3mYCZoX_ow94BPPEuZZJHsIU3qI6T18Jf2LawAC-8k0rqPyYlm54dPbkT06SDlclzTDxfJazAsUp-QYDAPNM8AD4WtL2RG_93sPvzepZ2sJWdRDj2PjfTzKhPlSqKFamS67f21lPQpY3QNfkMuKRb4gSF0vi1X0bgdrZUaB-VlzRfSCQeGzXJmbo-iSUxGSujvK_uf1R0xKzNKzPsV2Ly24ZMB_YcIgNCT8q7gUibw35inBN0D6_2gUBctUAX2rl2v6dQbtNmUm14O0Q--Tx0AtH88vMm3vHGPqC6QtQB-2vPkAWYwflWtum0KRUOxMq%26adurl%3D HTTP/1.1
Host: hal9000.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cd2df4e246d74192c0184b9be3117324.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 09:25:52 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4144
Connection: close
Content-Type: text/html; charset=UTF-8
s-jsonp.moatads.com/ocr/NATIVOINVCONTENT1/level3/15751?t=202302995
200 OK 0 B URL HTTP/2 s-jsonp.moatads.com/ocr/NATIVOINVCONTENT1/level3/15751?t=202302995
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ocr/NATIVOINVCONTENT1/level3/15751?t=202302995 HTTP/1.1
Host: s-jsonp.moatads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 7TxVum1eMFnBmu4xxJFSCeCrLTWi9eHJiA9/GhlluDw541RaU0IXVvVgaA8/q4y1xcwraH3sS4Q=
x-amz-request-id: 935E3E68B92065CC
last-modified: Tue, 18 Nov 2014 20:18:12 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
x-amz-version-id: null
accept-ranges: bytes
content-type: application/x-javascript
content-length: 0
server: AmazonS3
unused62: 8096267
cache-control: max-age=3189
date: Sun, 29 Jan 2023 09:25:52 GMT
X-Firefox-Spdy: h2
aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-index_n-LoopMe_n-Azerion_n-MediaNet_ox-db5_cnv_n-inmobi_n-sharethrough_pm-db5_ym_rbd_sovrn_3lift
302 Found 0 B URL HTTP/1.1 aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-index_n-LoopMe_n-Azerion_n-MediaNet_ox-db5_cnv_n-inmobi_n-sharethrough_pm-db5_ym_rbd_sovrn_3lift
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-index_n-LoopMe_n-Azerion_n-MediaNet_ox-db5_cnv_n-inmobi_n-sharethrough_pm-db5_ym_rbd_sovrn_3lift HTTP/1.1
Host: aax-eu.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: Server
Date: Sun, 29 Jan 2023 09:25:52 GMT
Content-Length: 0
Connection: keep-alive
x-amz-rid: 36AYT3J4K0AM98E4T556
Set-Cookie: ad-id=A-K2WxpgfEkoqo08bXHDULg|t; Domain=.amazon-adsystem.com; Expires=Sun, 01-Oct-2023 09:25:52 GMT; Path=/; Secure; HttpOnly; SameSite=None
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Location: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-index_n-LoopMe_n-Azerion_n-MediaNet_ox-db5_cnv_n-inmobi_n-sharethrough_pm-db5_ym_rbd_sovrn_3lift&dcc=t
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-index_n-LoopMe_n-Azerion_n-MediaNet_ox-db5_cnv_n-inmobi_n-sharethrough_pm-db5_ym_rbd_sovrn_3lift&dcc=t
200 OK 64 B URL HTTP/1.1 aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-index_n-LoopMe_n-Azerion_n-MediaNet_ox-db5_cnv_n-inmobi_n-sharethrough_pm-db5_ym_rbd_sovrn_3lift&dcc=t
IP
File type HTML document, ASCII text
Hash be99f9f8ced5e5eb1f9721d861712f89
4291ee98f7ce20471796ec89961abb1acb2af1d8
f17fe415b91a13ea86b93344389e18c996384323ca3c2f4267b18c96b8314a12
GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-index_n-LoopMe_n-Azerion_n-MediaNet_ox-db5_cnv_n-inmobi_n-sharethrough_pm-db5_ym_rbd_sovrn_3lift&dcc=t HTTP/1.1
Host: aax-eu.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.popdust.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Server
Date: Sun, 29 Jan 2023 09:25:52 GMT
Content-Type: text/html;charset=ISO-8859-1
Content-Length: 64
Connection: keep-alive
x-amz-rid: MQ0M632N4T1QZJM482RV
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
hal90006.redintelligence.net/request.php?zone=vjrffs1adg9r&nw=20&renderingType=javascript&namespace=d75bbc9130&subid=&uid=db75097012697d17&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=300x250&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCOq52nzvWY7ipIdTh6gSNgZCgCdf6-ptpqqup4-IP8C4QASDh4YUxYMOEgICYGMgBCakC2FH_lG07sj6oAwGqBN8BT9Cs6P4onBH-XQ3QanY6mTTInrhz4EEZoD4tp5OcEaA3OHp-tvqSpeL3NykcSQ5TaeceqFvbgOw5tSWgnXv2SVcHHZbWS9i3Cqrg4sNnvTO1Jrhq7-vPQdt8QOQonxckprqtCDEIrem7tHeUy71Aj30oA-Eq75QQqQRnKa9Yq4xAcu_F4Bnf4lKHVX_-nb-MQes6toOP9FGRw_5bVIF1_cHkU6vSsrKDBeF5OdHnoXdsZFAzGxvliQaevWb8BZzegJdwIFbsdWj9uXBm-jmxZdwiU8BlFF4MoSBdGfyDccAEnf2hifAD4AQDkAYBoAZNgAesrfWfA6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6SjsQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCA8IgGEQARgdMgKKAjoCgECACgGYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSTADUE5ymSWqttQWHUSs8XnayMNYqF-pGaulXU427GpGRog4oLznbP6mzEnBOPilHq1MXNWYTy-U-UZR_7k6RFQuCKglQg2HXwe2zargYASAT%26sig%3DAOD64_24VJd-MQCZZMrCydhRa9XgMI_byw%26client%3Dca-pub-4301469008561137%26dbm_c%3DAKAmf-DNQ4FcTSAcsTHfHggYq_QKBjRERZbT3-wDIRLMJBPAj6PyJnvCeLhFUrfY191v-lcpr-W1H-8nHqty8JDaoFgd-TZpDnveWePBh4VMbgTISMDeNhmvk1SLPpJuAdJlkiUFMvgeL3WinKlJMQg9XYZwRlYRd58feOkYjAHL9T5igUYjiqc%26cry%3D1%26dbm_d%3DAKAmf-DQs6EI3Z2pFl2W2s5XTqnaAMSr8ypiPXyAxb5PE4QBKiWN4-EFHB5mWGVgXBRTVwntWumjncJHYHYx9jshmQNtac7BnGELj3oHj56LDtfRoHfm68sgr7PW0bQOdr7PBBfO61mYwQs0O4mDef4xsTgfqC6-mEgtUEUI9hWJcxKdpXj-WEzroWTzGp8IO0bUK4KVZWOWih9YkBxtc8Shkw9_P6aNoaR80_Cep3hjYtY9k9H7y39awwrMvpikmOuZL5wiKnUwradzLqGJRYMfZsEeMvDNi6P3tznjYFgtQiEI1HOpSel65OxcE_Jm1qXIt6L534T_3mYCZoX_ow94BPPEuZZJHsIU3qI6T18Jf2LawAC-8k0rqPyYlm54dPbkT06SDlclzTDxfJazAsUp-QYDAPNM8AD4WtL2RG_93sPvzepZ2sJWdRDj2PjfTzKhPlSqKFamS67f21lPQpY3QNfkMuKRb4gSF0vi1X0bgdrZUaB-VlzRfSCQeGzXJmbo-iSUxGSujvK_uf1R0xKzNKzPsV2Ly24ZMB_YcIgNCT8q7gUibw35inBN0D6_2gUBctUAX2rl2v6dQbtNmUm14O0Q--Tx0AtH88vMm3vHGPqC6QtQB-2vPkAWYwflWtum0KRUOxMq%26adurl%3D&documentReferer=https%3A%2F%2Fwww.popdust.com%2F&ancestorOrigins=null&random=9062479872402&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0
302 Found 0 B URL HTTP/1.1 hal90006.redintelligence.net/request.php?zone=vjrffs1adg9r&nw=20&renderingType=javascript&namespace=d75bbc9130&subid=&uid=db75097012697d17&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=300x250&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCOq52nzvWY7ipIdTh6gSNgZCgCdf6-ptpqqup4-IP8C4QASDh4YUxYMOEgICYGMgBCakC2FH_lG07sj6oAwGqBN8BT9Cs6P4onBH-XQ3QanY6mTTInrhz4EEZoD4tp5OcEaA3OHp-tvqSpeL3NykcSQ5TaeceqFvbgOw5tSWgnXv2SVcHHZbWS9i3Cqrg4sNnvTO1Jrhq7-vPQdt8QOQonxckprqtCDEIrem7tHeUy71Aj30oA-Eq75QQqQRnKa9Yq4xAcu_F4Bnf4lKHVX_-nb-MQes6toOP9FGRw_5bVIF1_cHkU6vSsrKDBeF5OdHnoXdsZFAzGxvliQaevWb8BZzegJdwIFbsdWj9uXBm-jmxZdwiU8BlFF4MoSBdGfyDccAEnf2hifAD4AQDkAYBoAZNgAesrfWfA6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6SjsQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCA8IgGEQARgdMgKKAjoCgECACgGYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSTADUE5ymSWqttQWHUSs8XnayMNYqF-pGaulXU427GpGRog4oLznbP6mzEnBOPilHq1MXNWYTy-U-UZR_7k6RFQuCKglQg2HXwe2zargYASAT%26sig%3DAOD64_24VJd-MQCZZMrCydhRa9XgMI_byw%26client%3Dca-pub-4301469008561137%26dbm_c%3DAKAmf-DNQ4FcTSAcsTHfHggYq_QKBjRERZbT3-wDIRLMJBPAj6PyJnvCeLhFUrfY191v-lcpr-W1H-8nHqty8JDaoFgd-TZpDnveWePBh4VMbgTISMDeNhmvk1SLPpJuAdJlkiUFMvgeL3WinKlJMQg9XYZwRlYRd58feOkYjAHL9T5igUYjiqc%26cry%3D1%26dbm_d%3DAKAmf-DQs6EI3Z2pFl2W2s5XTqnaAMSr8ypiPXyAxb5PE4QBKiWN4-EFHB5mWGVgXBRTVwntWumjncJHYHYx9jshmQNtac7BnGELj3oHj56LDtfRoHfm68sgr7PW0bQOdr7PBBfO61mYwQs0O4mDef4xsTgfqC6-mEgtUEUI9hWJcxKdpXj-WEzroWTzGp8IO0bUK4KVZWOWih9YkBxtc8Shkw9_P6aNoaR80_Cep3hjYtY9k9H7y39awwrMvpikmOuZL5wiKnUwradzLqGJRYMfZsEeMvDNi6P3tznjYFgtQiEI1HOpSel65OxcE_Jm1qXIt6L534T_3mYCZoX_ow94BPPEuZZJHsIU3qI6T18Jf2LawAC-8k0rqPyYlm54dPbkT06SDlclzTDxfJazAsUp-QYDAPNM8AD4WtL2RG_93sPvzepZ2sJWdRDj2PjfTzKhPlSqKFamS67f21lPQpY3QNfkMuKRb4gSF0vi1X0bgdrZUaB-VlzRfSCQeGzXJmbo-iSUxGSujvK_uf1R0xKzNKzPsV2Ly24ZMB_YcIgNCT8q7gUibw35inBN0D6_2gUBctUAX2rl2v6dQbtNmUm14O0Q--Tx0AtH88vMm3vHGPqC6QtQB-2vPkAWYwflWtum0KRUOxMq%26adurl%3D&documentReferer=https%3A%2F%2Fwww.popdust.com%2F&ancestorOrigins=null&random=9062479872402&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /request.php?zone=vjrffs1adg9r&nw=20&renderingType=javascript&namespace=d75bbc9130&subid=&uid=db75097012697d17&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=300x250&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCOq52nzvWY7ipIdTh6gSNgZCgCdf6-ptpqqup4-IP8C4QASDh4YUxYMOEgICYGMgBCakC2FH_lG07sj6oAwGqBN8BT9Cs6P4onBH-XQ3QanY6mTTInrhz4EEZoD4tp5OcEaA3OHp-tvqSpeL3NykcSQ5TaeceqFvbgOw5tSWgnXv2SVcHHZbWS9i3Cqrg4sNnvTO1Jrhq7-vPQdt8QOQonxckprqtCDEIrem7tHeUy71Aj30oA-Eq75QQqQRnKa9Yq4xAcu_F4Bnf4lKHVX_-nb-MQes6toOP9FGRw_5bVIF1_cHkU6vSsrKDBeF5OdHnoXdsZFAzGxvliQaevWb8BZzegJdwIFbsdWj9uXBm-jmxZdwiU8BlFF4MoSBdGfyDccAEnf2hifAD4AQDkAYBoAZNgAesrfWfA6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6SjsQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCA8IgGEQARgdMgKKAjoCgECACgGYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSTADUE5ymSWqttQWHUSs8XnayMNYqF-pGaulXU427GpGRog4oLznbP6mzEnBOPilHq1MXNWYTy-U-UZR_7k6RFQuCKglQg2HXwe2zargYASAT%26sig%3DAOD64_24VJd-MQCZZMrCydhRa9XgMI_byw%26client%3Dca-pub-4301469008561137%26dbm_c%3DAKAmf-DNQ4FcTSAcsTHfHggYq_QKBjRERZbT3-wDIRLMJBPAj6PyJnvCeLhFUrfY191v-lcpr-W1H-8nHqty8JDaoFgd-TZpDnveWePBh4VMbgTISMDeNhmvk1SLPpJuAdJlkiUFMvgeL3WinKlJMQg9XYZwRlYRd58feOkYjAHL9T5igUYjiqc%26cry%3D1%26dbm_d%3DAKAmf-DQs6EI3Z2pFl2W2s5XTqnaAMSr8ypiPXyAxb5PE4QBKiWN4-EFHB5mWGVgXBRTVwntWumjncJHYHYx9jshmQNtac7BnGELj3oHj56LDtfRoHfm68sgr7PW0bQOdr7PBBfO61mYwQs0O4mDef4xsTgfqC6-mEgtUEUI9hWJcxKdpXj-WEzroWTzGp8IO0bUK4KVZWOWih9YkBxtc8Shkw9_P6aNoaR80_Cep3hjYtY9k9H7y39awwrMvpikmOuZL5wiKnUwradzLqGJRYMfZsEeMvDNi6P3tznjYFgtQiEI1HOpSel65OxcE_Jm1qXIt6L534T_3mYCZoX_ow94BPPEuZZJHsIU3qI6T18Jf2LawAC-8k0rqPyYlm54dPbkT06SDlclzTDxfJazAsUp-QYDAPNM8AD4WtL2RG_93sPvzepZ2sJWdRDj2PjfTzKhPlSqKFamS67f21lPQpY3QNfkMuKRb4gSF0vi1X0bgdrZUaB-VlzRfSCQeGzXJmbo-iSUxGSujvK_uf1R0xKzNKzPsV2Ly24ZMB_YcIgNCT8q7gUibw35inBN0D6_2gUBctUAX2rl2v6dQbtNmUm14O0Q--Tx0AtH88vMm3vHGPqC6QtQB-2vPkAWYwflWtum0KRUOxMq%26adurl%3D&documentReferer=https%3A%2F%2Fwww.popdust.com%2F&ancestorOrigins=null&random=9062479872402&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0 HTTP/1.1
Host: hal90006.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cd2df4e246d74192c0184b9be3117324.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Sun, 29 Jan 2023 09:25:52 GMT
Server: Apache
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Expires: Sun, 29 Jan 2023 09:25:52 +0100
Pragma: no-cache
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: 8lcfmzhxc8d6_uid=05e573af85dcf424; expires=Sat, 29-Apr-2023 09:25:52 GMT; Max-Age=7776000; path=/; domain=.redintelligence.net; secure; SameSite=None
Location: request.php?zone=vjrffs1adg9r&nw=20&renderingType=javascript&namespace=d75bbc9130&subid=&uid=db75097012697d17&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=300x250&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCOq52nzvWY7ipIdTh6gSNgZCgCdf6-ptpqqup4-IP8C4QASDh4YUxYMOEgICYGMgBCakC2FH_lG07sj6oAwGqBN8BT9Cs6P4onBH-XQ3QanY6mTTInrhz4EEZoD4tp5OcEaA3OHp-tvqSpeL3NykcSQ5TaeceqFvbgOw5tSWgnXv2SVcHHZbWS9i3Cqrg4sNnvTO1Jrhq7-vPQdt8QOQonxckprqtCDEIrem7tHeUy71Aj30oA-Eq75QQqQRnKa9Yq4xAcu_F4Bnf4lKHVX_-nb-MQes6toOP9FGRw_5bVIF1_cHkU6vSsrKDBeF5OdHnoXdsZFAzGxvliQaevWb8BZzegJdwIFbsdWj9uXBm-jmxZdwiU8BlFF4MoSBdGfyDccAEnf2hifAD4AQDkAYBoAZNgAesrfWfA6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6SjsQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCA8IgGEQARgdMgKKAjoCgECACgGYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSTADUE5ymSWqttQWHUSs8XnayMNYqF-pGaulXU427GpGRog4oLznbP6mzEnBOPilHq1MXNWYTy-U-UZR_7k6RFQuCKglQg2HXwe2zargYASAT%26sig%3DAOD64_24VJd-MQCZZMrCydhRa9XgMI_byw%26client%3Dca-pub-4301469008561137%26dbm_c%3DAKAmf-DNQ4FcTSAcsTHfHggYq_QKBjRERZbT3-wDIRLMJBPAj6PyJnvCeLhFUrfY191v-lcpr-W1H-8nHqty8JDaoFgd-TZpDnveWePBh4VMbgTISMDeNhmvk1SLPpJuAdJlkiUFMvgeL3WinKlJMQg9XYZwRlYRd58feOkYjAHL9T5igUYjiqc%26cry%3D1%26dbm_d%3DAKAmf-DQs6EI3Z2pFl2W2s5XTqnaAMSr8ypiPXyAxb5PE4QBKiWN4-EFHB5mWGVgXBRTVwntWumjncJHYHYx9jshmQNtac7BnGELj3oHj56LDtfRoHfm68sgr7PW0bQOdr7PBBfO61mYwQs0O4mDef4xsTgfqC6-mEgtUEUI9hWJcxKdpXj-WEzroWTzGp8IO0bUK4KVZWOWih9YkBxtc8Shkw9_P6aNoaR80_Cep3hjYtY9k9H7y39awwrMvpikmOuZL5wiKnUwradzLqGJRYMfZsEeMvDNi6P3tznjYFgtQiEI1HOpSel65OxcE_Jm1qXIt6L534T_3mYCZoX_ow94BPPEuZZJHsIU3qI6T18Jf2LawAC-8k0rqPyYlm54dPbkT06SDlclzTDxfJazAsUp-QYDAPNM8AD4WtL2RG_93sPvzepZ2sJWdRDj2PjfTzKhPlSqKFamS67f21lPQpY3QNfkMuKRb4gSF0vi1X0bgdrZUaB-VlzRfSCQeGzXJmbo-iSUxGSujvK_uf1R0xKzNKzPsV2Ly24ZMB_YcIgNCT8q7gUibw35inBN0D6_2gUBctUAX2rl2v6dQbtNmUm14O0Q--Tx0AtH88vMm3vHGPqC6QtQB-2vPkAWYwflWtum0KRUOxMq%26adurl%3D&documentReferer=https%3A%2F%2Fwww.popdust.com%2F&ancestorOrigins=null&random=9062479872402&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0&uidRedirect=1
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8
id5-sync.com/g/v2/882.json
200 216 B URL HTTP/1.1 id5-sync.com/g/v2/882.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash cd0035c3e52e0e26b98ec59c07a46679
99684066ffcc02abd626198a4be61b14cfd73224
cbf597c9618f29eab6ba19cc0813c87311ed63779c90a43d32dfb987454ced91
POST /g/v2/882.json HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 615
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: https://www.popdust.com
access-control-allow-credentials: true
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Sun, 29 Jan 2023 09:25:51 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
mv.outbrain.com/Multivac/api/get?url=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html&settings=true&recs=true&widgetJSId=AR_11&key=NANOWDGT01&version=2010108&apv=false&sig=5Bba4dvm&format=html&rand=6084&osLang=en-US&seid=null&va=true&et=true&cmpStat=0&ccpaStat=0&srcUrl=https%3A%2F%2Fwww.popdust.com%2Ffeeds%2Fsponsored.rss&scrW=1280&scrH=1024&t=ZDliYTMxM2EzZTFiYjlkN2EyN2EwNDVhMzU1YmU0MWU=&winW=1268&winH=939&adblck=false&abwl=false&secured=true&feedIdx=0&lastIdx=0&lastCardIdx=0&fAB=11741-81726&layeredTestInfo=11741-81726-&dpr=1&cw=425&activeTab=true&ogn=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&chs=1
200 OK 60 kB URL HTTP/2 mv.outbrain.com/Multivac/api/get?url=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html&settings=true&recs=true&widgetJSId=AR_11&key=NANOWDGT01&version=2010108&apv=false&sig=5Bba4dvm&format=html&rand=6084&osLang=en-US&seid=null&va=true&et=true&cmpStat=0&ccpaStat=0&srcUrl=https%3A%2F%2Fwww.popdust.com%2Ffeeds%2Fsponsored.rss&scrW=1280&scrH=1024&t=ZDliYTMxM2EzZTFiYjlkN2EyN2EwNDVhMzU1YmU0MWU=&winW=1268&winH=939&adblck=false&abwl=false&secured=true&feedIdx=0&lastIdx=0&lastCardIdx=0&fAB=11741-81726&layeredTestInfo=11741-81726-&dpr=1&cw=425&activeTab=true&ogn=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&chs=1
IP
File type Unicode text, UTF-8 text, with very long lines (65518), with no line terminators
Hash b537b7573c1297e684d3ae27b3311035
f34013d6c62789e9b0221fe8f058fc5a3554ec1b
a1b4c8f5328a067aab38d01c6dfef68aeaf262899185896592705bbeb770b7fc
GET /Multivac/api/get?url=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html&settings=true&recs=true&widgetJSId=AR_11&key=NANOWDGT01&version=2010108&apv=false&sig=5Bba4dvm&format=html&rand=6084&osLang=en-US&seid=null&va=true&et=true&cmpStat=0&ccpaStat=0&srcUrl=https%3A%2F%2Fwww.popdust.com%2Ffeeds%2Fsponsored.rss&scrW=1280&scrH=1024&t=ZDliYTMxM2EzZTFiYjlkN2EyN2EwNDVhMzU1YmU0MWU=&winW=1268&winH=939&adblck=false&abwl=false&secured=true&feedIdx=0&lastIdx=0&lastCardIdx=0&fAB=11741-81726&layeredTestInfo=11741-81726-&dpr=1&cw=425&activeTab=true&ogn=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&chs=1 HTTP/1.1
Host: mv.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
expires: Thu, 01 Jan 1970 00:00:00 GMT
x-traceid: f9a869169bb9a27a98bccbe9aa23dd7a
content-encoding: gzip
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
date: Sun, 29 Jan 2023 09:25:52 GMT
x-served-by: cache-lga21978-LGA, cache-hel1410030-HEL
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1674984351.396632,VS0,VE1059
vary: Accept-Encoding, User-Agent
traffic-path: NYDC1, LGA, HEL, Europe1
content-length: 59687
X-Firefox-Spdy: h2
widgets.outbrain.com/nanoWidget/2010108/module/reel.js?e=1
200 OK 8.7 kB URL HTTP/2 widgets.outbrain.com/nanoWidget/2010108/module/reel.js?e=1
IP
File type ASCII text, with very long lines (1610)
Hash 29bdb502e42550f4023041a280851201
d06d3249225ae67309cde3c26c59330cce8814b8
103c109f7e91712890bcdd91153a3de4ad5fa87a111f84ab3389bed6a1ff081f
GET /nanoWidget/2010108/module/reel.js?e=1 HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "67e7aced9b3fd476be50f6f5c96450a0:1674981729.150497"
last-modified: Sun, 29 Jan 2023 08:11:10 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=604800
expires: Sun, 05 Feb 2023 09:25:52 GMT
date: Sun, 29 Jan 2023 09:25:52 GMT
content-length: 8700
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 2933fbbbeb6868c5415522827e45328c
977d46c83225448f9ed2caf077314212406d3f9a
a3816431be3ffc824cc2073cd6d0f20e155df0fe1bc453eb4f81b44405d5a095
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 29 Jan 2023 09:25:52 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 29 Jan 2023 04:02:42 GMT
Expires: Mon, 30 Jan 2023 04:02:42 GMT
ETag: "977d46c83225448f9ed2caf077314212406d3f9a"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
hal90006.redintelligence.net/request.php?zone=vjrffs1adg9r&nw=20&renderingType=javascript&namespace=d75bbc9130&subid=&uid=db75097012697d17&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=300x250&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCOq52nzvWY7ipIdTh6gSNgZCgCdf6-ptpqqup4-IP8C4QASDh4YUxYMOEgICYGMgBCakC2FH_lG07sj6oAwGqBN8BT9Cs6P4onBH-XQ3QanY6mTTInrhz4EEZoD4tp5OcEaA3OHp-tvqSpeL3NykcSQ5TaeceqFvbgOw5tSWgnXv2SVcHHZbWS9i3Cqrg4sNnvTO1Jrhq7-vPQdt8QOQonxckprqtCDEIrem7tHeUy71Aj30oA-Eq75QQqQRnKa9Yq4xAcu_F4Bnf4lKHVX_-nb-MQes6toOP9FGRw_5bVIF1_cHkU6vSsrKDBeF5OdHnoXdsZFAzGxvliQaevWb8BZzegJdwIFbsdWj9uXBm-jmxZdwiU8BlFF4MoSBdGfyDccAEnf2hifAD4AQDkAYBoAZNgAesrfWfA6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6SjsQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCA8IgGEQARgdMgKKAjoCgECACgGYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSTADUE5ymSWqttQWHUSs8XnayMNYqF-pGaulXU427GpGRog4oLznbP6mzEnBOPilHq1MXNWYTy-U-UZR_7k6RFQuCKglQg2HXwe2zargYASAT%26sig%3DAOD64_24VJd-MQCZZMrCydhRa9XgMI_byw%26client%3Dca-pub-4301469008561137%26dbm_c%3DAKAmf-DNQ4FcTSAcsTHfHggYq_QKBjRERZbT3-wDIRLMJBPAj6PyJnvCeLhFUrfY191v-lcpr-W1H-8nHqty8JDaoFgd-TZpDnveWePBh4VMbgTISMDeNhmvk1SLPpJuAdJlkiUFMvgeL3WinKlJMQg9XYZwRlYRd58feOkYjAHL9T5igUYjiqc%26cry%3D1%26dbm_d%3DAKAmf-DQs6EI3Z2pFl2W2s5XTqnaAMSr8ypiPXyAxb5PE4QBKiWN4-EFHB5mWGVgXBRTVwntWumjncJHYHYx9jshmQNtac7BnGELj3oHj56LDtfRoHfm68sgr7PW0bQOdr7PBBfO61mYwQs0O4mDef4xsTgfqC6-mEgtUEUI9hWJcxKdpXj-WEzroWTzGp8IO0bUK4KVZWOWih9YkBxtc8Shkw9_P6aNoaR80_Cep3hjYtY9k9H7y39awwrMvpikmOuZL5wiKnUwradzLqGJRYMfZsEeMvDNi6P3tznjYFgtQiEI1HOpSel65OxcE_Jm1qXIt6L534T_3mYCZoX_ow94BPPEuZZJHsIU3qI6T18Jf2LawAC-8k0rqPyYlm54dPbkT06SDlclzTDxfJazAsUp-QYDAPNM8AD4WtL2RG_93sPvzepZ2sJWdRDj2PjfTzKhPlSqKFamS67f21lPQpY3QNfkMuKRb4gSF0vi1X0bgdrZUaB-VlzRfSCQeGzXJmbo-iSUxGSujvK_uf1R0xKzNKzPsV2Ly24ZMB_YcIgNCT8q7gUibw35inBN0D6_2gUBctUAX2rl2v6dQbtNmUm14O0Q--Tx0AtH88vMm3vHGPqC6QtQB-2vPkAWYwflWtum0KRUOxMq%26adurl%3D&documentReferer=https%3A%2F%2Fwww.popdust.com%2F&ancestorOrigins=null&random=9062479872402&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0&uidRedirect=1
200 OK 511 B URL HTTP/1.1 hal90006.redintelligence.net/request.php?zone=vjrffs1adg9r&nw=20&renderingType=javascript&namespace=d75bbc9130&subid=&uid=db75097012697d17&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=300x250&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCOq52nzvWY7ipIdTh6gSNgZCgCdf6-ptpqqup4-IP8C4QASDh4YUxYMOEgICYGMgBCakC2FH_lG07sj6oAwGqBN8BT9Cs6P4onBH-XQ3QanY6mTTInrhz4EEZoD4tp5OcEaA3OHp-tvqSpeL3NykcSQ5TaeceqFvbgOw5tSWgnXv2SVcHHZbWS9i3Cqrg4sNnvTO1Jrhq7-vPQdt8QOQonxckprqtCDEIrem7tHeUy71Aj30oA-Eq75QQqQRnKa9Yq4xAcu_F4Bnf4lKHVX_-nb-MQes6toOP9FGRw_5bVIF1_cHkU6vSsrKDBeF5OdHnoXdsZFAzGxvliQaevWb8BZzegJdwIFbsdWj9uXBm-jmxZdwiU8BlFF4MoSBdGfyDccAEnf2hifAD4AQDkAYBoAZNgAesrfWfA6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6SjsQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCA8IgGEQARgdMgKKAjoCgECACgGYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSTADUE5ymSWqttQWHUSs8XnayMNYqF-pGaulXU427GpGRog4oLznbP6mzEnBOPilHq1MXNWYTy-U-UZR_7k6RFQuCKglQg2HXwe2zargYASAT%26sig%3DAOD64_24VJd-MQCZZMrCydhRa9XgMI_byw%26client%3Dca-pub-4301469008561137%26dbm_c%3DAKAmf-DNQ4FcTSAcsTHfHggYq_QKBjRERZbT3-wDIRLMJBPAj6PyJnvCeLhFUrfY191v-lcpr-W1H-8nHqty8JDaoFgd-TZpDnveWePBh4VMbgTISMDeNhmvk1SLPpJuAdJlkiUFMvgeL3WinKlJMQg9XYZwRlYRd58feOkYjAHL9T5igUYjiqc%26cry%3D1%26dbm_d%3DAKAmf-DQs6EI3Z2pFl2W2s5XTqnaAMSr8ypiPXyAxb5PE4QBKiWN4-EFHB5mWGVgXBRTVwntWumjncJHYHYx9jshmQNtac7BnGELj3oHj56LDtfRoHfm68sgr7PW0bQOdr7PBBfO61mYwQs0O4mDef4xsTgfqC6-mEgtUEUI9hWJcxKdpXj-WEzroWTzGp8IO0bUK4KVZWOWih9YkBxtc8Shkw9_P6aNoaR80_Cep3hjYtY9k9H7y39awwrMvpikmOuZL5wiKnUwradzLqGJRYMfZsEeMvDNi6P3tznjYFgtQiEI1HOpSel65OxcE_Jm1qXIt6L534T_3mYCZoX_ow94BPPEuZZJHsIU3qI6T18Jf2LawAC-8k0rqPyYlm54dPbkT06SDlclzTDxfJazAsUp-QYDAPNM8AD4WtL2RG_93sPvzepZ2sJWdRDj2PjfTzKhPlSqKFamS67f21lPQpY3QNfkMuKRb4gSF0vi1X0bgdrZUaB-VlzRfSCQeGzXJmbo-iSUxGSujvK_uf1R0xKzNKzPsV2Ly24ZMB_YcIgNCT8q7gUibw35inBN0D6_2gUBctUAX2rl2v6dQbtNmUm14O0Q--Tx0AtH88vMm3vHGPqC6QtQB-2vPkAWYwflWtum0KRUOxMq%26adurl%3D&documentReferer=https%3A%2F%2Fwww.popdust.com%2F&ancestorOrigins=null&random=9062479872402&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0&uidRedirect=1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with CRLF line terminators
Hash cda8ad719b9b4f1e87a045d45e07edbe
77d513c064905b725fd1b9d5f3054a5e1d83753c
d4cbd9abf6bf3eeefc5e92f78c88d51e86f3104bee19d8b0d1a29d3a2ccbd741
GET /request.php?zone=vjrffs1adg9r&nw=20&renderingType=javascript&namespace=d75bbc9130&subid=&uid=db75097012697d17&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=300x250&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCOq52nzvWY7ipIdTh6gSNgZCgCdf6-ptpqqup4-IP8C4QASDh4YUxYMOEgICYGMgBCakC2FH_lG07sj6oAwGqBN8BT9Cs6P4onBH-XQ3QanY6mTTInrhz4EEZoD4tp5OcEaA3OHp-tvqSpeL3NykcSQ5TaeceqFvbgOw5tSWgnXv2SVcHHZbWS9i3Cqrg4sNnvTO1Jrhq7-vPQdt8QOQonxckprqtCDEIrem7tHeUy71Aj30oA-Eq75QQqQRnKa9Yq4xAcu_F4Bnf4lKHVX_-nb-MQes6toOP9FGRw_5bVIF1_cHkU6vSsrKDBeF5OdHnoXdsZFAzGxvliQaevWb8BZzegJdwIFbsdWj9uXBm-jmxZdwiU8BlFF4MoSBdGfyDccAEnf2hifAD4AQDkAYBoAZNgAesrfWfA6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6SjsQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCA8IgGEQARgdMgKKAjoCgECACgGYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSTADUE5ymSWqttQWHUSs8XnayMNYqF-pGaulXU427GpGRog4oLznbP6mzEnBOPilHq1MXNWYTy-U-UZR_7k6RFQuCKglQg2HXwe2zargYASAT%26sig%3DAOD64_24VJd-MQCZZMrCydhRa9XgMI_byw%26client%3Dca-pub-4301469008561137%26dbm_c%3DAKAmf-DNQ4FcTSAcsTHfHggYq_QKBjRERZbT3-wDIRLMJBPAj6PyJnvCeLhFUrfY191v-lcpr-W1H-8nHqty8JDaoFgd-TZpDnveWePBh4VMbgTISMDeNhmvk1SLPpJuAdJlkiUFMvgeL3WinKlJMQg9XYZwRlYRd58feOkYjAHL9T5igUYjiqc%26cry%3D1%26dbm_d%3DAKAmf-DQs6EI3Z2pFl2W2s5XTqnaAMSr8ypiPXyAxb5PE4QBKiWN4-EFHB5mWGVgXBRTVwntWumjncJHYHYx9jshmQNtac7BnGELj3oHj56LDtfRoHfm68sgr7PW0bQOdr7PBBfO61mYwQs0O4mDef4xsTgfqC6-mEgtUEUI9hWJcxKdpXj-WEzroWTzGp8IO0bUK4KVZWOWih9YkBxtc8Shkw9_P6aNoaR80_Cep3hjYtY9k9H7y39awwrMvpikmOuZL5wiKnUwradzLqGJRYMfZsEeMvDNi6P3tznjYFgtQiEI1HOpSel65OxcE_Jm1qXIt6L534T_3mYCZoX_ow94BPPEuZZJHsIU3qI6T18Jf2LawAC-8k0rqPyYlm54dPbkT06SDlclzTDxfJazAsUp-QYDAPNM8AD4WtL2RG_93sPvzepZ2sJWdRDj2PjfTzKhPlSqKFamS67f21lPQpY3QNfkMuKRb4gSF0vi1X0bgdrZUaB-VlzRfSCQeGzXJmbo-iSUxGSujvK_uf1R0xKzNKzPsV2Ly24ZMB_YcIgNCT8q7gUibw35inBN0D6_2gUBctUAX2rl2v6dQbtNmUm14O0Q--Tx0AtH88vMm3vHGPqC6QtQB-2vPkAWYwflWtum0KRUOxMq%26adurl%3D&documentReferer=https%3A%2F%2Fwww.popdust.com%2F&ancestorOrigins=null&random=9062479872402&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0&uidRedirect=1 HTTP/1.1
Host: hal90006.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cd2df4e246d74192c0184b9be3117324.safeframe.googlesyndication.com/
Connection: keep-alive
Cookie: 8lcfmzhxc8d6_uid=05e573af85dcf424
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 09:25:52 GMT
Server: Apache
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Expires: Sun, 29 Jan 2023 09:25:52 +0100
Pragma: no-cache
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: 8lcfmzhxc8d6_uid=05e573af85dcf424; expires=Sat, 29-Apr-2023 09:25:52 GMT; Max-Age=7776000; path=/; domain=.redintelligence.net; secure; SameSite=None
X-NEORY-SubId: 13036300057646304438062012219006
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 511
Connection: close
Content-Type: application/x-javascript; charset=utf-8
rock.defybrick.com/placement_invocation?id=65349&idx=0
200 OK 18 kB URL HTTP/2 rock.defybrick.com/placement_invocation?id=65349&idx=0
IP
File type ASCII text, with very long lines (49039), with no line terminators
Hash 449a423abeac702cfd7368c5a1ba9822
06ebb32e04680d68e383016ff6b6eb6e326a0a61
4a2f633ca7a84b09da778fcb97cb91163af9ca231efdb0cda7875398c472b040
GET /placement_invocation?id=65349&idx=0 HTTP/1.1
Host: rock.defybrick.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 18460
content-encoding: gzip
server: Caddy
date: Sun, 29 Jan 2023 03:28:18 GMT
cache-control: max-age=43200
expires: Sun, 29 Jan 2023 15:28:18 GMT
etag: "bf8f-sbLSqLgrhMmD0M6HbtAQ/QtX6WE"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: tB22UEU-s5zWay_eGFQuRrD9gBYPoBVav07X8rrCVGhZjvQT5jQ0Yg==
age: 21454
X-Firefox-Spdy: h2
images.outbrainimg.com/transform/v3/eyJpdSI6IjM5NjQ4NGEzZTk2OGE4ODE5NzU5ODU5YTk5MTUyZWQ1YmFjNWM4MzljOTYyM2UwNDNhZDJjYTFjZGYzMTFjZTkiLCJ3Ijo2MDAsImgiOjQwMCwiZCI6MS41LCJjcyI6MiwiZiI6NX0.mp4
200 OK 405 kB URL HTTP/2 images.outbrainimg.com/transform/v3/eyJpdSI6IjM5NjQ4NGEzZTk2OGE4ODE5NzU5ODU5YTk5MTUyZWQ1YmFjNWM4MzljOTYyM2UwNDNhZDJjYTFjZGYzMTFjZTkiLCJ3Ijo2MDAsImgiOjQwMCwiZCI6MS41LCJjcyI6MiwiZiI6NX0.mp4
IP
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size 405 kB (404631 bytes)
Hash d88fdb8f38bb55643768d1875560078a
f013f2392de0811e97ba9b4ccb002b05f28ef8ec
1d10dbe671e450f24ba995f12cdd5872152a7e36faccc9f8880a0c143328ad8e
GET /transform/v3/eyJpdSI6IjM5NjQ4NGEzZTk2OGE4ODE5NzU5ODU5YTk5MTUyZWQ1YmFjNWM4MzljOTYyM2UwNDNhZDJjYTFjZGYzMTFjZTkiLCJ3Ijo2MDAsImgiOjQwMCwiZCI6MS41LCJjcyI6MiwiZiI6NX0.mp4 HTTP/1.1
Host: images.outbrainimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: video/mp4
content-length: 404631
last-modified: Fri, 11 Nov 2022 22:30:37 GMT
x-traceid: 7d5ae2cad7b4eacefb5f7fb9b9a5983b
cache-control: max-age=719946
date: Sun, 29 Jan 2023 09:25:52 GMT
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
timing-allow-origin: *, *
X-Firefox-Spdy: h2
images.outbrainimg.com/transform/v3/eyJpdSI6IjM5NjQ4NGEzZTk2OGE4ODE5NzU5ODU5YTk5MTUyZWQ1YmFjNWM4MzljOTYyM2UwNDNhZDJjYTFjZGYzMTFjZTkiLCJ3Ijo2MDAsImgiOjQwMCwiZCI6MS41LCJjcyI6MiwiZiI6NX0.mp4
206 Partial Content 405 kB URL HTTP/2 images.outbrainimg.com/transform/v3/eyJpdSI6IjM5NjQ4NGEzZTk2OGE4ODE5NzU5ODU5YTk5MTUyZWQ1YmFjNWM4MzljOTYyM2UwNDNhZDJjYTFjZGYzMTFjZTkiLCJ3Ijo2MDAsImgiOjQwMCwiZCI6MS41LCJjcyI6MiwiZiI6NX0.mp4
IP
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size 405 kB (404631 bytes)
Hash d88fdb8f38bb55643768d1875560078a
f013f2392de0811e97ba9b4ccb002b05f28ef8ec
1d10dbe671e450f24ba995f12cdd5872152a7e36faccc9f8880a0c143328ad8e
GET /transform/v3/eyJpdSI6IjM5NjQ4NGEzZTk2OGE4ODE5NzU5ODU5YTk5MTUyZWQ1YmFjNWM4MzljOTYyM2UwNDNhZDJjYTFjZGYzMTFjZTkiLCJ3Ijo2MDAsImgiOjQwMCwiZCI6MS41LCJjcyI6MiwiZiI6NX0.mp4 HTTP/1.1
Host: images.outbrainimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
content-type: video/mp4
last-modified: Fri, 11 Nov 2022 22:30:37 GMT
x-traceid: 7d5ae2cad7b4eacefb5f7fb9b9a5983b
cache-control: max-age=719946
date: Sun, 29 Jan 2023 09:25:52 GMT
content-range: bytes 0-404630/404631
content-length: 404631
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
timing-allow-origin: *, *
X-Firefox-Spdy: h2
widgets.outbrain.com/nanoWidget/2010108/module/clip.js?e=1
200 OK 711 B URL HTTP/2 widgets.outbrain.com/nanoWidget/2010108/module/clip.js?e=1
IP
File type ASCII text, with very long lines (518)
Hash cf08e43c01b1b3d88141449140b725ce
a80d860e7f704ca570b8c14b2daa01c501b27a49
191a86ebae8e4a650eaaf9c5b1840cafb85e27b3cc6614fe2b82473b52ab77f5
GET /nanoWidget/2010108/module/clip.js?e=1 HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "8410df50ce0450f4f9fd562e2cabd99b:1674981709.654211"
last-modified: Sun, 29 Jan 2023 08:11:10 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=604800
expires: Sun, 05 Feb 2023 09:25:52 GMT
date: Sun, 29 Jan 2023 09:25:52 GMT
content-length: 711
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
mcdp-nydc1.outbrain.com/l?token=6ed5e7e851f6d3060006454cff08834f_9270_1674984351568&tm=3280&eT=0&widgetWidth=838&widgetHeight=561&widgetX=427&widgetY=4913&wRV=2010108&pVis=1&lsd=-1&eIdx=&cnsnt=no_consent&rtt=1339&oo=true&lo=3424&odbreq=3728&odbres=4005&mvreq=5408&mvres=6749&re=6786&cs=5&to=1674984352454&chs=1&ab=0&wl=0
200 OK 2 B URL HTTP/1.1 mcdp-nydc1.outbrain.com/l?token=6ed5e7e851f6d3060006454cff08834f_9270_1674984351568&tm=3280&eT=0&widgetWidth=838&widgetHeight=561&widgetX=427&widgetY=4913&wRV=2010108&pVis=1&lsd=-1&eIdx=&cnsnt=no_consent&rtt=1339&oo=true&lo=3424&odbreq=3728&odbres=4005&mvreq=5408&mvres=6749&re=6786&cs=5&to=1674984352454&chs=1&ab=0&wl=0
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
GET /l?token=6ed5e7e851f6d3060006454cff08834f_9270_1674984351568&tm=3280&eT=0&widgetWidth=838&widgetHeight=561&widgetX=427&widgetY=4913&wRV=2010108&pVis=1&lsd=-1&eIdx=&cnsnt=no_consent&rtt=1339&oo=true&lo=3424&odbreq=3728&odbres=4005&mvreq=5408&mvres=6749&re=6786&cs=5&to=1674984352454&chs=1&ab=0&wl=0 HTTP/1.1
Host: mcdp-nydc1.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 09:25:52 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 2
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: content-range
X-TraceId: 991c6b46cb8eed55cf389a6e57387131
mcdp-nydc1.outbrain.com/l?token=f2bdb8858b65adbf8945a99a0dfc8f4d_9270_1674984351850&tm=3305&eT=0&widgetWidth=838&widgetHeight=615&widgetX=427&widgetY=5864&wRV=2010108&pVis=1&lsd=-1&eIdx=&cnsnt=no_consent&rtt=1339&oo=true&lo=3424&odbreq=3728&odbres=4005&mvreq=5408&mvres=6749&re=6812&cs=5&to=1674984352454&chs=1&ab=0&wl=0
200 OK 2 B URL HTTP/1.1 mcdp-nydc1.outbrain.com/l?token=f2bdb8858b65adbf8945a99a0dfc8f4d_9270_1674984351850&tm=3305&eT=0&widgetWidth=838&widgetHeight=615&widgetX=427&widgetY=5864&wRV=2010108&pVis=1&lsd=-1&eIdx=&cnsnt=no_consent&rtt=1339&oo=true&lo=3424&odbreq=3728&odbres=4005&mvreq=5408&mvres=6749&re=6812&cs=5&to=1674984352454&chs=1&ab=0&wl=0
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
GET /l?token=f2bdb8858b65adbf8945a99a0dfc8f4d_9270_1674984351850&tm=3305&eT=0&widgetWidth=838&widgetHeight=615&widgetX=427&widgetY=5864&wRV=2010108&pVis=1&lsd=-1&eIdx=&cnsnt=no_consent&rtt=1339&oo=true&lo=3424&odbreq=3728&odbres=4005&mvreq=5408&mvres=6749&re=6812&cs=5&to=1674984352454&chs=1&ab=0&wl=0 HTTP/1.1
Host: mcdp-nydc1.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 09:25:52 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 2
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: content-range
X-TraceId: 0529338a814b25fadc2338c863d59e02
widgets.outbrain.com/widgetMonitor/monitor.html?name=obm-ClipError&env=1&message=Error%20loading%20as%20video%3A%20https%3A%2F%2Fimages.outbrainimg.com%2Ftransform%2Fv3%2FeyJpdSI6IjM5NjQ4NGEzZTk2OGE4ODE5NzU5ODU5YTk5MTUyZWQ1YmFjNWM4MzljOTYyM2UwNDNhZDJjYTFjZGYzMTFjZTkiLCJ3Ijo2MDAsImgiOjQwMCwiZCI6MS41LCJjcyI6MiwiZiI6NX0.mp4&stack=undefined&ver=2010108&errorEleUrl=https%3A%2F%2Fimages.outbrainimg.com%2Ftransform%2Fv3%2FeyJpdSI6IjM5NjQ4NGEzZTk2OGE4ODE5NzU5ODU5YTk5MTUyZWQ1YmFjNWM4MzljOTYyM2UwNDNhZDJjYTFjZGYzMTFjZTkiLCJ3Ijo2MDAsImgiOjQwMCwiZCI6MS41LCJjcyI6MiwiZiI6NX0.mp4&sId=1778062&dId=4757106319&pId=9270
200 OK 1.6 kB URL HTTP/2 widgets.outbrain.com/widgetMonitor/monitor.html?name=obm-ClipError&env=1&message=Error%20loading%20as%20video%3A%20https%3A%2F%2Fimages.outbrainimg.com%2Ftransform%2Fv3%2FeyJpdSI6IjM5NjQ4NGEzZTk2OGE4ODE5NzU5ODU5YTk5MTUyZWQ1YmFjNWM4MzljOTYyM2UwNDNhZDJjYTFjZGYzMTFjZTkiLCJ3Ijo2MDAsImgiOjQwMCwiZCI6MS41LCJjcyI6MiwiZiI6NX0.mp4&stack=undefined&ver=2010108&errorEleUrl=https%3A%2F%2Fimages.outbrainimg.com%2Ftransform%2Fv3%2FeyJpdSI6IjM5NjQ4NGEzZTk2OGE4ODE5NzU5ODU5YTk5MTUyZWQ1YmFjNWM4MzljOTYyM2UwNDNhZDJjYTFjZGYzMTFjZTkiLCJ3Ijo2MDAsImgiOjQwMCwiZCI6MS41LCJjcyI6MiwiZiI6NX0.mp4&sId=1778062&dId=4757106319&pId=9270
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3599), with no line terminators
Hash 272b28d051411ad1166530ade5d7a836
42b6a8411abea1519ba86aa1077a508d7c03f2d2
5f2e4281a1d67ac435cf8e18cfd45f08bcba2a069dc0714013dbc419eaefc248
GET /widgetMonitor/monitor.html?name=obm-ClipError&env=1&message=Error%20loading%20as%20video%3A%20https%3A%2F%2Fimages.outbrainimg.com%2Ftransform%2Fv3%2FeyJpdSI6IjM5NjQ4NGEzZTk2OGE4ODE5NzU5ODU5YTk5MTUyZWQ1YmFjNWM4MzljOTYyM2UwNDNhZDJjYTFjZGYzMTFjZTkiLCJ3Ijo2MDAsImgiOjQwMCwiZCI6MS41LCJjcyI6MiwiZiI6NX0.mp4&stack=undefined&ver=2010108&errorEleUrl=https%3A%2F%2Fimages.outbrainimg.com%2Ftransform%2Fv3%2FeyJpdSI6IjM5NjQ4NGEzZTk2OGE4ODE5NzU5ODU5YTk5MTUyZWQ1YmFjNWM4MzljOTYyM2UwNDNhZDJjYTFjZGYzMTFjZTkiLCJ3Ijo2MDAsImgiOjQwMCwiZCI6MS41LCJjcyI6MiwiZiI6NX0.mp4&sId=1778062&dId=4757106319&pId=9270 HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: text/html
etag: "9e7d58ad34c85761770fc947d9bee792:1617096471.391057"
last-modified: Tue, 30 Mar 2021 09:27:46 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=604800
expires: Sun, 05 Feb 2023 09:25:53 GMT
date: Sun, 29 Jan 2023 09:25:53 GMT
content-length: 1602
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
mcdp-nydc1.outbrain.com/l?token=770e57098813aeef96ed19f48a838dd2_9270_1674984351699&tm=3302&eT=0&widgetWidth=838&widgetHeight=331&widgetX=427&widgetY=5508&wRV=2010108&pVis=0&lsd=-1&eIdx=&cnsnt=no_consent&rtt=1339&oo=true&lo=3424&odbreq=3728&odbres=4005&mvreq=5408&mvres=6749&re=6809&cs=5&to=1674984352454&chs=1&ab=0&wl=0
200 OK 2 B URL HTTP/1.1 mcdp-nydc1.outbrain.com/l?token=770e57098813aeef96ed19f48a838dd2_9270_1674984351699&tm=3302&eT=0&widgetWidth=838&widgetHeight=331&widgetX=427&widgetY=5508&wRV=2010108&pVis=0&lsd=-1&eIdx=&cnsnt=no_consent&rtt=1339&oo=true&lo=3424&odbreq=3728&odbres=4005&mvreq=5408&mvres=6749&re=6809&cs=5&to=1674984352454&chs=1&ab=0&wl=0
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
GET /l?token=770e57098813aeef96ed19f48a838dd2_9270_1674984351699&tm=3302&eT=0&widgetWidth=838&widgetHeight=331&widgetX=427&widgetY=5508&wRV=2010108&pVis=0&lsd=-1&eIdx=&cnsnt=no_consent&rtt=1339&oo=true&lo=3424&odbreq=3728&odbres=4005&mvreq=5408&mvres=6749&re=6809&cs=5&to=1674984352454&chs=1&ab=0&wl=0 HTTP/1.1
Host: mcdp-nydc1.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 09:25:53 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 2
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: content-range
X-TraceId: 888d3b72392334cca781e0e401240b90
static.hotjar.com/c/hotjar-2399092.js?sv=7
200 OK 3.5 kB URL HTTP/2 static.hotjar.com/c/hotjar-2399092.js?sv=7
IP
File type ASCII text, with very long lines (7535)
Hash de277f29d1b81d22fbdf480bb24d41c2
5c04f2e7230baec0c3518e4c6112d6b4c223141d
2f1e37867426e06fb4c2168af9ce36bfc220f4e6773d24843eaca4ad641fcd3a
GET /c/hotjar-2399092.js?sv=7 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
date: Sun, 29 Jan 2023 09:25:15 GMT
cache-control: max-age=60
etag: W/7d09a48a93730ea8cf8de49ced8b07e9
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 49omBfEUuNPf151NYMDI8wD9kq_gGcS0qMnwCyIu1jgCMxlvOL5iew==
age: 36
X-Firefox-Spdy: h2
mcdp-nydc1.outbrain.com/l?token=4ddd0501923bab29361d2087fd5a5ae4_9270_1674984352031&tm=3308&eT=0&widgetWidth=838&widgetHeight=277&widgetX=427&widgetY=6503&wRV=2010108&pVis=1&lsd=-1&eIdx=&cnsnt=no_consent&rtt=1339&oo=true&lo=3424&odbreq=3728&odbres=4005&mvreq=5408&mvres=6749&re=6815&cs=5&to=1674984352454&chs=1&ab=0&wl=0
200 OK 2 B URL HTTP/1.1 mcdp-nydc1.outbrain.com/l?token=4ddd0501923bab29361d2087fd5a5ae4_9270_1674984352031&tm=3308&eT=0&widgetWidth=838&widgetHeight=277&widgetX=427&widgetY=6503&wRV=2010108&pVis=1&lsd=-1&eIdx=&cnsnt=no_consent&rtt=1339&oo=true&lo=3424&odbreq=3728&odbres=4005&mvreq=5408&mvres=6749&re=6815&cs=5&to=1674984352454&chs=1&ab=0&wl=0
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
GET /l?token=4ddd0501923bab29361d2087fd5a5ae4_9270_1674984352031&tm=3308&eT=0&widgetWidth=838&widgetHeight=277&widgetX=427&widgetY=6503&wRV=2010108&pVis=1&lsd=-1&eIdx=&cnsnt=no_consent&rtt=1339&oo=true&lo=3424&odbreq=3728&odbres=4005&mvreq=5408&mvres=6749&re=6815&cs=5&to=1674984352454&chs=1&ab=0&wl=0 HTTP/1.1
Host: mcdp-nydc1.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 09:25:53 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 2
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: content-range
X-TraceId: 3d9750d76abcc1fde427c490a0359bf1
mcdp-nydc1.outbrain.com/l?token=fcb7b38cae0498ca73ad5086b93753ad_9270_1674984352305&tm=3310&eT=0&widgetWidth=838&widgetHeight=262&widgetX=427&widgetY=6804&wRV=2010108&pVis=1&lsd=-1&eIdx=&cnsnt=no_consent&rtt=1339&oo=true&lo=3424&odbreq=3728&odbres=4005&mvreq=5408&mvres=6749&re=6818&cs=5&to=1674984352454&chs=1&ab=0&wl=0
200 OK 2 B URL HTTP/1.1 mcdp-nydc1.outbrain.com/l?token=fcb7b38cae0498ca73ad5086b93753ad_9270_1674984352305&tm=3310&eT=0&widgetWidth=838&widgetHeight=262&widgetX=427&widgetY=6804&wRV=2010108&pVis=1&lsd=-1&eIdx=&cnsnt=no_consent&rtt=1339&oo=true&lo=3424&odbreq=3728&odbres=4005&mvreq=5408&mvres=6749&re=6818&cs=5&to=1674984352454&chs=1&ab=0&wl=0
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
GET /l?token=fcb7b38cae0498ca73ad5086b93753ad_9270_1674984352305&tm=3310&eT=0&widgetWidth=838&widgetHeight=262&widgetX=427&widgetY=6804&wRV=2010108&pVis=1&lsd=-1&eIdx=&cnsnt=no_consent&rtt=1339&oo=true&lo=3424&odbreq=3728&odbres=4005&mvreq=5408&mvres=6749&re=6818&cs=5&to=1674984352454&chs=1&ab=0&wl=0 HTTP/1.1
Host: mcdp-nydc1.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 09:25:53 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 2
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: content-range
X-TraceId: 51eb3c4c3b09a0925e28bb1f536b2c0b
flint.defybrick.com/show_pla?id=65349&url=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&sf=0&k=&idx=0&ch=&ext=&np=linux%20x86_64&nv=&rand=64201672529911027122260869198561011922605110722560527991215715025789&nc=0&tsf=0&tsfmi=&pv=0&cb=1674984359550&ref=&pit=1&hl=1&op=0&fs=1280x939&ss=1280x1024&pre=0&jsonp=OBR.extern.onCheqResponse&mr=&ag=1317291471&at=&bid=e30%3D&di=W1siZWYiLDI3OV0sWzEyLCJ7XCJlXCI6MCxcIndnbFwiOjF9Il0sWy0xLCJMaW51eCB4ODZfNjQi%0D%0AXSxbLTIsIjcsSUxIWUxCOUJMVGEySnFRZzNGb2VlbDJ3WWJFMm9nQklLSjZjUjAwME1KSFF3WVRE%0D%0AR1lhaHYzdXQ3MVZwWFI5TzgrTTVyVlNLczFrUEJlLy85OXNuVkpHcFVkUGZkenpuM09mYyJdLFst%0D%0AMywiW10iXSxbLTQsIi0iXSxbLTUsIi0iXSxbLTYsIntcIndcIjpbXCIwXCIsXCJfX2V6XCIsXCJS%0D%0ARUJFTE1PVVNFX0JPT1RTVFJBUF9EQVRBXCIsXCJSRUJFTE1PVVNFX0JBU0VfQVNTRVRTX1VSTFwi%0D%0ALFwiUkVCRUxNT1VTRV9CQVNFX1NTTF9ET01BSU5cIixcIlJFQkVMTU9VU0VfVEFTS1NfUVVFVUVc%0D%0AIixcIlJFQkVMTU9VU0VfTE9XX1RBU0tTX1FVRVVFXCIsXCJSRUJFTE1PVVNFX0xPV0VTVF9UQVNL%0D%0AU19RVUVVRVwiLFwiUkVCRUxNT1VTRV9BQ1RJVkVfVEFTS1NfUVVFVUVcIixcIlJFQkVMTU9VU0Vf%0D%0AU1RETElCXCIsXCJSTV9PVkVSUklERVNcIixcIlJNX0FEX0xPQURFUlwiLFwiZ29vZ2xldGFnXCIs%0D%0AXCJfX1JVTk5FUl9QVUJMSUNfX1wiLFwiX19yZWJlbG1vdXNlSnNCYXNlVXJsXCIsXCJfX3JlYmVs%0D%0AbW91c2VQcmltYXJ5Q29sb3JcIixcIndlYnBhY2tDaHVua3NvY2lhbFVYXCIsXCJSRUJFTE1PVVNF%0D%0AX0lOSVRfSURMRV9RVUVVRVwiLFwiZnJlZXN0YXJcIixcImZicVwiLFwiX2ZicVwiLFwiZXpvdWlk%0D%0AXCIsXCJlem9UZW1wbGF0ZVwiLFwiZXpvRm9ybWZhY3RvclwiLFwiZXpvX2VsZW1lbnRzX3RvX2No%0D%0AZWNrXCIsXCJzb2NfYXBwX2lkXCIsXCJkaWRcIixcImV6ZG9tYWluXCIsXCJlem9pY1NlYXJjaGFi%0D%0AbGVcIixcIl9lemFxXCIsXCJfZXpFeHRyYVF1ZXJpZXNcIixcImNyZWF0ZV9lem9scGxcIixcImF0%0D%0AdGFjaF9lem9scGxcIixcIl9hdWRpbnNfZG9tXCIsXCJfYXVkaW5zX2RpZFwiLFwiTm90aWZ5UGFp%0D%0AbnRFdmVudFwiLFwiX19jb3JlLWpzX3NoYXJlZF9fXCIsXCJyZWdlbmVyYXRvclJ1bnRpbWVcIixc%0D%0AImV6dXhcIixcIm1ldHJpY05hbWVNYXBcIixcImV6X2F0dGFjaEV2ZW50XCIsXCJlel9hdHRhY2hF%0D%0AdmVudFdpdGhDYXB0dXJlXCIsXCJlel9kZXRhY2hFdmVudFwiLFwiZXpfZ2V0UXVlcnlTdHJpbmdc%0D%0AIixcImV6bG9nVml0YWxcIixcIl9fZXpEb3REYXRhXCIsXCJfZXpmZFwiLFwicml2ZXRlZFwiLFwi%0D%0AZXpfdG9zX3RyYWNrX2NvdW50XCIsXCJlel9sYXN0X2FjdGl2aXR5X2NvdW50XCJdLFwiblwiOltd%0D%0ALFwiZFwiOltdfSJdLFstNywiLSJdLFstOCwiLSJdLFstOSwiKyJdLFstMTAsIi0iXSxbLTExLCJ7%0D%0AXCJ0XCI6XCJcIixcIm1cIjpbXCJvZzp0aXRsZVwiLFwib2c6ZGVzY3JpcHRpb25cIixcImRlc2Ny%0D%0AaXB0aW9uXCIsXCJrZXl3b3Jkc1wiLFwiZGVzY3JpcHRpb25cIl19Il0sWy0xMiwiXCJ1bnNwZWNp%0D%0AZmllZFwiIl0sWy0xMywiLSJdLFstMTQsIntcIm9cIjowLjA0OTU0OTU0OTU0OTU0OTU1fSJdLFst%0D%0AMTUsIi0iXSxbLTE2LCIwIl0sWy0xNywiMTYiXSxbLTE4LCJbMSwwLDAsMF0iXSxbLTE5LCJbMCww%0D%0ALDAsMCwwLDAsMSwyNCwyNCxcIi1cIiwxMjgwLDEwMDIsMTI4MCwxMDI0LDEyODAsMTAyNCwxMjgw%0D%0ALDkzOSwwLDAsMCwwLFwiLVwiLFwiLVwiXSJdLFstMjAsIjE0MzE1MzI4MDQuMTY3NDk4NDM1NSJd%0D%0ALFstMjEsIjVCYmE0ZHZtIl0sWy0yMiwiW1wiblwiLFwiblwiXSJdLFstMjMsIisiXSxbLTI0LCJb%0D%0AXSJdLFstMjUsIi0iXSxbLTI2LCItIl0sWy0yNywiLSJdLFstMjgsImVuLVVTLGVuIl0sWy0yOSwi%0D%0Ae1widlwiOlswLDAsMCwwLDAsMCwwLDIsMCwyLDAsMiwwLDAsMCwwLDIsMiwwXX0iXSxbLTMwLCJb%0D%0AXCJ2XCIsMF0iXSxbLTMxLCJmYWxzZSJdLFstMzIsIjIiXSxbLTMzLCItIl0sWy0zNCwiLSJdLFst%0D%0AMzUsIlsxNjc0OTg0MzU5NTI4LDBdIl0sWy0zNiwiW1wiNS80XCIsXCI1LzRcIl0iXSxbLTM3LCIt%0D%0AIl0sWy0zOCwiaSwtMSwtMSw3NzAsMCw4LDAsNSwyNDgsMTc1LDUxNCwwLCwxNzE2LDcwNzYsNzA3%0D%0ANSJdLFstMzksIltcIjIwMTAwMTAxXCIsMCxcIkdlY2tvXCIsXCJOZXRzY2FwZVwiLFwiTW96aWxs%0D%0AYVwiLFwiMjAxODEwMDEwMDAwMDBcIixudWxsLGZhbHNlLG51bGwsZmFsc2UsbnVsbCwwXSJdLFst%0D%0ANDAsIjM3Il0sWy00MSwiLSJdLFstNDIsIjE3NzAwNTAwODEiXSxbLTQzLCIwMDAwMDAwMTAwMDAw%0D%0AMDAwMDExMTEwMDEwMCJdLFstNDQsIjAsNSwwLDUiXSxbLTQ1LCItIl0sWy00NiwiMCJdLFstNDcs%0D%0AIlVUQyxlbi1VUyxsYXRuLGdyZWdvcnkiXSxbLTQ4LCIwLDAiXSxbLTQ5LCItIl0sWyJibmNoIiw3%0D%0ANF1d&tsfu=&fst=1280x939&dep=0&cpos=%5B%7B%22x%22%3A424%2C%22y%22%3A4859%2C%22w%22%3A844%2C%22h%22%3A2288%7D%2C%7B%22w%22%3A1280%2C%22h%22%3A939%7D%5D&ver=41&cri=MFIjrK3OMf&sdd=%7B%7D&pto=7101
200 OK 1.4 kB URL HTTP/2 flint.defybrick.com/show_pla?id=65349&url=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&sf=0&k=&idx=0&ch=&ext=&np=linux%20x86_64&nv=&rand=64201672529911027122260869198561011922605110722560527991215715025789&nc=0&tsf=0&tsfmi=&pv=0&cb=1674984359550&ref=&pit=1&hl=1&op=0&fs=1280x939&ss=1280x1024&pre=0&jsonp=OBR.extern.onCheqResponse&mr=&ag=1317291471&at=&bid=e30%3D&di=W1siZWYiLDI3OV0sWzEyLCJ7XCJlXCI6MCxcIndnbFwiOjF9Il0sWy0xLCJMaW51eCB4ODZfNjQi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%0D%0ANF1d&tsfu=&fst=1280x939&dep=0&cpos=%5B%7B%22x%22%3A424%2C%22y%22%3A4859%2C%22w%22%3A844%2C%22h%22%3A2288%7D%2C%7B%22w%22%3A1280%2C%22h%22%3A939%7D%5D&ver=41&cri=MFIjrK3OMf&sdd=%7B%7D&pto=7101
IP
File type ASCII text, with very long lines (2217), with no line terminators
Hash f3581a199949bde76bb232b3afcbce07
a00b198d2e89161e2b5845a1aa178f083efe8ce4
964ff4c37098b034fbfdc4aac2815097d0cb0fdbc2a93291591cbaa65cebf9f4
GET /show_pla?id=65349&url=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&sf=0&k=&idx=0&ch=&ext=&np=linux%20x86_64&nv=&rand=64201672529911027122260869198561011922605110722560527991215715025789&nc=0&tsf=0&tsfmi=&pv=0&cb=1674984359550&ref=&pit=1&hl=1&op=0&fs=1280x939&ss=1280x1024&pre=0&jsonp=OBR.extern.onCheqResponse&mr=&ag=1317291471&at=&bid=e30%3D&di=W1siZWYiLDI3OV0sWzEyLCJ7XCJlXCI6MCxcIndnbFwiOjF9Il0sWy0xLCJMaW51eCB4ODZfNjQi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%0D%0ANF1d&tsfu=&fst=1280x939&dep=0&cpos=%5B%7B%22x%22%3A424%2C%22y%22%3A4859%2C%22w%22%3A844%2C%22h%22%3A2288%7D%2C%7B%22w%22%3A1280%2C%22h%22%3A939%7D%5D&ver=41&cri=MFIjrK3OMf&sdd=%7B%7D&pto=7101 HTTP/1.1
Host: flint.defybrick.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/javascript
date: Sun, 29 Jan 2023 09:25:53 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 1350
X-Firefox-Spdy: h2
hal90006.redintelligence.net/request_content.php?s=13036300057646304438062012219006&a=58e07517
200 OK 2.3 kB URL HTTP/1.1 hal90006.redintelligence.net/request_content.php?s=13036300057646304438062012219006&a=58e07517
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash b114e49760405f1c916e6e4590d526b3
87162affdba04ec6f06166d5cdd726e32597ddf2
fe6e3c687c6e49db9e6090365131e46658374df51b3c05d79dbb03a9ce0d20d3
GET /request_content.php?s=13036300057646304438062012219006&a=58e07517 HTTP/1.1
Host: hal90006.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cd2df4e246d74192c0184b9be3117324.safeframe.googlesyndication.com/
Cookie: 8lcfmzhxc8d6_uid=05e573af85dcf424
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 09:25:53 GMT
Server: Apache
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Expires: Sun, 29 Jan 2023 09:25:53 +0100
Pragma: no-cache
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2291
Connection: close
Content-Type: text/html; charset=utf-8
ib.adnxs.com/getuid?https%3A%2F%2Fs2s.t13.io%2Fsetuid%3Fbidder%3Dadnxs%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26f%3Di%26uid%3D%24UID
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/getuid?https%3A%2F%2Fs2s.t13.io%2Fsetuid%3Fbidder%3Dadnxs%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26f%3Di%26uid%3D%24UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https%3A%2F%2Fs2s.t13.io%2Fsetuid%3Fbidder%3Dadnxs%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26f%3Di%26uid%3D%24UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sun, 29 Jan 2023 09:25:53 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fs2s.t13.io%252Fsetuid%253Fbidder%253Dadnxs%2526gdpr%253D%2526gdpr_consent%253D%2526us_privacy%253D%2526f%253Di%2526uid%253D%2524UID
AN-X-Request-Uuid: 339b04c3-c157-48fd-81fe-8c8aa5cfb0ea
Set-Cookie: uuid2=9107908882370289; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 29-Apr-2023 09:25:53 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 868.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
flint.defybrick.com/tracker/imp.gif?e=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&cb=1674984360084&cri=MFIjrK3OMf
200 OK 43 B URL HTTP/2 flint.defybrick.com/tracker/imp.gif?e=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&cb=1674984360084&cri=MFIjrK3OMf
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /tracker/imp.gif?e=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&cb=1674984360084&cri=MFIjrK3OMf HTTP/1.1
Host: flint.defybrick.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Sun, 29 Jan 2023 09:25:53 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.6.2/jquery.min.js
200 OK 32 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.6.2/jquery.min.js
IP
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32764)
Hash 548260b20981c0be2d9dcf8d01c08c24
84230120f8f1bd559eca3fb2fec6acf6cffbf4e7
2f8a612a714e5c928525fdb193f8ec12f7965a6c0d63dd8e58ccae239358c8bb
GET /ajax/libs/jquery/1.6.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hal90006.redintelligence.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 32245
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 24 Jan 2023 06:39:38 GMT
expires: Wed, 24 Jan 2024 06:39:38 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 441975
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fs2s.t13.io%252Fsetuid%253Fbidder%253Dadnxs%2526gdpr%253D%2526gdpr_consent%253D%2526us_privacy%253D%2526f%253Di%2526uid%253D%2524UID
302 Found 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fs2s.t13.io%252Fsetuid%253Fbidder%253Dadnxs%2526gdpr%253D%2526gdpr_consent%253D%2526us_privacy%253D%2526f%253Di%2526uid%253D%2524UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fs2s.t13.io%252Fsetuid%253Fbidder%253Dadnxs%2526gdpr%253D%2526gdpr_consent%253D%2526us_privacy%253D%2526f%253Di%2526uid%253D%2524UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.popdust.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Sun, 29 Jan 2023 09:25:53 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://s2s.t13.io/setuid?bidder=adnxs&gdpr=&gdpr_consent=&us_privacy=&f=i&uid=0
AN-X-Request-Uuid: 98e8d322-edbb-459f-946e-25b1a45a0094
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 868.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
widgetmonitor.outbrain.com/WidgetErrorMonitor/api/report?name=obm-ClipError&version=2010108&message=Error%20loading%20as%20video%3A%20https%3A%2F%2Fimages.outbrainimg.com%2Ftransform%2Fv3%2FeyJpdSI6IjM5NjQ4NGEzZTk2OGE4ODE5NzU5ODU5YTk5MTUyZWQ1YmFjNWM4MzljOTYyM2UwNDNhZDJjYTFjZGYzMTFjZTkiLCJ3Ijo2MDAsImgiOjQwMCwiZCI6MS41LCJjcyI6MiwiZiI6NX0.mp4&env=1&url=https%3A%2F%2Fwww.popdust.com%2F&referrer=&agent=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&stack=undefined&errorEleUrl=https%3A%2F%2Fimages.outbrainimg.com%2Ftransform%2Fv3%2FeyJpdSI6IjM5NjQ4NGEzZTk2OGE4ODE5NzU5ODU5YTk5MTUyZWQ1YmFjNWM4MzljOTYyM2UwNDNhZDJjYTFjZGYzMTFjZTkiLCJ3Ijo2MDAsImgiOjQwMCwiZCI6MS41LCJjcyI6MiwiZiI6NX0.mp4&pId=9270&sId=1778062&dId=4757106319
200 OK 2 B URL HTTP/1.1 widgetmonitor.outbrain.com/WidgetErrorMonitor/api/report?name=obm-ClipError&version=2010108&message=Error%20loading%20as%20video%3A%20https%3A%2F%2Fimages.outbrainimg.com%2Ftransform%2Fv3%2FeyJpdSI6IjM5NjQ4NGEzZTk2OGE4ODE5NzU5ODU5YTk5MTUyZWQ1YmFjNWM4MzljOTYyM2UwNDNhZDJjYTFjZGYzMTFjZTkiLCJ3Ijo2MDAsImgiOjQwMCwiZCI6MS41LCJjcyI6MiwiZiI6NX0.mp4&env=1&url=https%3A%2F%2Fwww.popdust.com%2F&referrer=&agent=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&stack=undefined&errorEleUrl=https%3A%2F%2Fimages.outbrainimg.com%2Ftransform%2Fv3%2FeyJpdSI6IjM5NjQ4NGEzZTk2OGE4ODE5NzU5ODU5YTk5MTUyZWQ1YmFjNWM4MzljOTYyM2UwNDNhZDJjYTFjZGYzMTFjZTkiLCJ3Ijo2MDAsImgiOjQwMCwiZCI6MS41LCJjcyI6MiwiZiI6NX0.mp4&pId=9270&sId=1778062&dId=4757106319
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /WidgetErrorMonitor/api/report?name=obm-ClipError&version=2010108&message=Error%20loading%20as%20video%3A%20https%3A%2F%2Fimages.outbrainimg.com%2Ftransform%2Fv3%2FeyJpdSI6IjM5NjQ4NGEzZTk2OGE4ODE5NzU5ODU5YTk5MTUyZWQ1YmFjNWM4MzljOTYyM2UwNDNhZDJjYTFjZGYzMTFjZTkiLCJ3Ijo2MDAsImgiOjQwMCwiZCI6MS41LCJjcyI6MiwiZiI6NX0.mp4&env=1&url=https%3A%2F%2Fwww.popdust.com%2F&referrer=&agent=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&stack=undefined&errorEleUrl=https%3A%2F%2Fimages.outbrainimg.com%2Ftransform%2Fv3%2FeyJpdSI6IjM5NjQ4NGEzZTk2OGE4ODE5NzU5ODU5YTk5MTUyZWQ1YmFjNWM4MzljOTYyM2UwNDNhZDJjYTFjZGYzMTFjZTkiLCJ3Ijo2MDAsImgiOjQwMCwiZCI6MS41LCJjcyI6MiwiZiI6NX0.mp4&pId=9270&sId=1778062&dId=4757106319 HTTP/1.1
Host: widgetmonitor.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://widgets.outbrain.com
Connection: keep-alive
Referer: https://widgets.outbrain.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 09:25:53 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 2
Connection: close
Access-Control-Allow-Origin: *
X-TraceId: fa2a6950e256ed63d024c2f037551e00
ETag: W/"2-vyGp6PvFo4RvsFtPoIWeCReyIC8"
cdn.contentspread.net/24i/content/soberfb/EN/S-300x250.gif
200 OK 71 kB URL HTTP/1.1 cdn.contentspread.net/24i/content/soberfb/EN/S-300x250.gif
IP
ASN #24961 myLoc managed IT AG
File type GIF image data, version 89a, 300 x 250\012- data
Hash d6ba1ff0393a5eb5224cf2416db7ba0b
c73aed3c96fd54b634cf2f38358fb59f99484ae0
fb805ea8e0e2123c713b4613ec92e55d7c11db579417ab8bdbd070d5c18e5104
GET /24i/content/soberfb/EN/S-300x250.gif HTTP/1.1
Host: cdn.contentspread.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hal90006.redintelligence.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 29 Jan 2023 09:25:53 GMT
Content-Type: image/gif
Content-Length: 71110
Last-Modified: Mon, 23 Jul 2018 15:20:14 GMT
Connection: close
ETag: "5b55f22e-115c6"
Accept-Ranges: bytes
hal90006.redintelligence.net/viewability?s=13036300057646304438062012219006&a=0bb4ea72&vb=m
200 OK 0 B URL HTTP/1.1 hal90006.redintelligence.net/viewability?s=13036300057646304438062012219006&a=0bb4ea72&vb=m
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /viewability?s=13036300057646304438062012219006&a=0bb4ea72&vb=m HTTP/1.1
Host: hal90006.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hal90006.redintelligence.net/request_content.php?s=13036300057646304438062012219006&a=58e07517
Cookie: 8lcfmzhxc8d6_uid=05e573af85dcf424
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 09:25:53 GMT
Server: Apache
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8
eb2.3lift.com/sync?gdpr=&cmp_cs=&us_privacy=&redir=https%3A%2F%2Fs2s.t13.io%2Fsetuid%3Fbidder%3Dtriplelift%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26f%3Db%26uid%3D%24UID
302 Found 0 B URL HTTP/2 eb2.3lift.com/sync?gdpr=&cmp_cs=&us_privacy=&redir=https%3A%2F%2Fs2s.t13.io%2Fsetuid%3Fbidder%3Dtriplelift%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26f%3Db%26uid%3D%24UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?gdpr=&cmp_cs=&us_privacy=&redir=https%3A%2F%2Fs2s.t13.io%2Fsetuid%3Fbidder%3Dtriplelift%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26f%3Db%26uid%3D%24UID HTTP/1.1
Host: eb2.3lift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 29 Jan 2023 09:25:53 GMT
content-length: 0
set-cookie: tluid=3943038410899382549673; Max-Age=7776000; Expires=Sat, 29 Apr 2023 09:25:53 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
location: /sync?gdpr=&cmp_cs=&us_privacy=&redir=https%3A%2F%2Fs2s.t13.io%2Fsetuid%3Fbidder%3Dtriplelift%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26f%3Db%26uid%3D%24UID&ld=1
cache-control: no-cache, no-store, must-revalidate
p3p: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC"
X-Firefox-Spdy: h2
eb2.3lift.com/sync?gdpr=&cmp_cs=&us_privacy=&redir=https%3A%2F%2Fs2s.t13.io%2Fsetuid%3Fbidder%3Dtriplelift%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26f%3Db%26uid%3D%24UID&ld=1
200 OK 0 B URL HTTP/2 eb2.3lift.com/sync?gdpr=&cmp_cs=&us_privacy=&redir=https%3A%2F%2Fs2s.t13.io%2Fsetuid%3Fbidder%3Dtriplelift%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26f%3Db%26uid%3D%24UID&ld=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?gdpr=&cmp_cs=&us_privacy=&redir=https%3A%2F%2Fs2s.t13.io%2Fsetuid%3Fbidder%3Dtriplelift%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26f%3Db%26uid%3D%24UID&ld=1 HTTP/1.1
Host: eb2.3lift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.popdust.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:53 GMT
content-type: text/html; charset=utf-8
content-length: 0
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
pixel.rubiconproject.com/exchange/sync.php?p=pbs-triple13&gdpr=&gdpr_consent=&us_privacy=
204 No Content 0 B URL HTTP/1.1 pixel.rubiconproject.com/exchange/sync.php?p=pbs-triple13&gdpr=&gdpr_consent=&us_privacy=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /exchange/sync.php?p=pbs-triple13&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1
Host: pixel.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: 66ef90d06496cfd000aab8206f2b6221
Content-Type: image/gif
ocsp.digicert.com/
200 OK 313 B IP
Hash 2ae92259ec035172729f1aa2db9ffb15
52f63e1a41cff5e2a332084c90a2732d71b44957
43ba154d0c583ea8473701dfe181f636be5df7c93e3d2b25def035696abef46c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3839
Cache-Control: max-age=162170
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:54 GMT
Etag: "63d6031d-139"
Expires: Tue, 31 Jan 2023 06:28:44 GMT
Last-Modified: Sun, 29 Jan 2023 05:24:45 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 313
ssbsync-global.smartadserver.com/api/sync?callerId=5&gdpr=&gdpr_consent=&us_privacy=&redirectUri=https%3A%2F%2Fs2s.t13.io%2Fsetuid%3Fbidder%3Dsmartadserver%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26f%3Di%26uid%3D%5Bssb_sync_pid%5D
302 Found 0 B URL HTTP/2 ssbsync-global.smartadserver.com/api/sync?callerId=5&gdpr=&gdpr_consent=&us_privacy=&redirectUri=https%3A%2F%2Fs2s.t13.io%2Fsetuid%3Fbidder%3Dsmartadserver%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26f%3Di%26uid%3D%5Bssb_sync_pid%5D
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/sync?callerId=5&gdpr=&gdpr_consent=&us_privacy=&redirectUri=https%3A%2F%2Fs2s.t13.io%2Fsetuid%3Fbidder%3Dsmartadserver%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26f%3Di%26uid%3D%5Bssb_sync_pid%5D HTTP/1.1
Host: ssbsync-global.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-length: 0
date: Sun, 29 Jan 2023 09:25:53 GMT
location: https://s2s.t13.io/setuid?bidder=smartadserver&gdpr=&gdpr_consent=&us_privacy=&f=i&uid=5467122338882696508
set-cookie: pid=5467122338882696508; expires=Thu, 29 Feb 2024 09:24:54 GMT; domain=smartadserver.com; path=/; secure; samesite=none
X-Firefox-Spdy: h2
eb2.3lift.com/sync?
200 OK 37 B IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /sync? HTTP/1.1
Host: eb2.3lift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:54 GMT
content-type: image/gif
content-length: 37
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
ap.lijit.com/beacon?informer=13388523
302 Found 98 B URL HTTP/1.1 ap.lijit.com/beacon?informer=13388523
IP
File type gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)\012- data
Hash 35dd0d6e0e0bdfefa1788b7d780a861b
12d298bfac14961e2f158f34078dcb472befa48e
05d0c996bffcb553aeb307ab6065accca0f85c710b749c5865c7d012e7f50043
GET /beacon?informer=13388523 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Sun, 29 Jan 2023 09:25:54 GMT
Set-Cookie: ljt_reader=GEQ1rNZH-DKF8ihiSz6zfogT; Path=/; Domain=.lijit.com; Expires=Mon, 29-Jan-2024 09:25:54 GMT; Max-Age=31536000;Secure;SameSite=None
Expires: Fri, 20 Mar 2009 00:00:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0
Pragma: no-cache
P3P: CP="CUR ADM OUR NOR STA NID"
Location: https://ap.lijit.com/beacon?informer=13388523&dnr=1
Content-Length: 0
X-Sovrn-Pod: ad_ap3ams1
ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=156696
200 OK 5.6 kB URL HTTP/2 ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=156696
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (15889), with no line terminators
Hash 18a6bc0e051c0767f814f63ff07e65f9
8fbe4eb399d8501b90276723d38c9ffb4ab483fa
26341482a8d6c8384b2cb91aba95833ac2002bd284ff690adbd2009bf76cb95b
GET /AdServer/js/user_sync.html?kdntuid=1&p=156696 HTTP/1.1
Host: ads.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Fri, 16 Dec 2022 06:36:49 GMT
server: Apache
accept-ranges: bytes
content-encoding: gzip
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC", CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
content-length: 5554
content-type: text/html
cache-control: max-age=94432
expires: Mon, 30 Jan 2023 11:39:46 GMT
date: Sun, 29 Jan 2023 09:25:54 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
eus.rubiconproject.com/usync.html
200 OK 233 B URL HTTP/1.1 eus.rubiconproject.com/usync.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 6220919f0a2b24a12a281ea8b891ecf6
759111c360edc6df73ed10aaaa212cb22c47ce0d
030c6e199782fb1908f6f89d3cd41950fd3ae0830c5020ba9ed617111bacd180
GET /usync.html HTTP/1.1
Host: eus.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache/2.2.15 (CentOS)
Last-Modified: Wed, 02 Nov 2022 02:30:44 GMT
ETag: "403b9-119-5ec73a0a33d00"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 233
Content-Type: text/html; charset=UTF-8
Date: Sun, 29 Jan 2023 09:25:54 GMT
Connection: keep-alive
Vary: Accept-Encoding
ap.lijit.com/beacon?informer=13388523&dnr=1
204 No Content 0 B URL HTTP/1.1 ap.lijit.com/beacon?informer=13388523&dnr=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /beacon?informer=13388523&dnr=1 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.popdust.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Sun, 29 Jan 2023 09:25:54 GMT
Set-Cookie: ljt_reader=GEQ1rNZHLdIPKwOyS9WczLP9; Path=/; Domain=.lijit.com; Expires=Mon, 29-Jan-2024 09:25:54 GMT; Max-Age=31536000;Secure;SameSite=None
Expires: Fri, 20 Mar 2009 00:00:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0
Pragma: no-cache
P3P: CP="CUR ADM OUR NOR STA NID"
X-Sovrn-Pod: ad_ap3ams1
acdn.adnxs.com/dmp/async_usersync.html
200 OK 17 kB URL HTTP/1.1 acdn.adnxs.com/dmp/async_usersync.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (52990)
Hash 9c6b5ce6b3452e98573e6409c34dd73c
de607fadef62e36945a409a838eb8fc36d819b42
cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
GET /dmp/async_usersync.html HTTP/1.1
Host: acdn.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 17053
Server: nginx/1.18.0 (Ubuntu)
Content-Type: text/html
Last-Modified: Fri, 25 Mar 2022 16:06:02 GMT
ETag: W/"623de86a-cf34"
Expires: Wed, 18 Jan 2023 06:44:40 GMT
Cache-Control: max-age=86402
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 29 Jan 2023 09:25:54 GMT
Age: 9651
X-Served-By: cache-lga13626-LGA, cache-bma1627-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 20, 36772
X-Timer: S1674984354.487653,VS0,VE0
Vary: Accept-Encoding
www.popdust.com/nutrisystem-weight-loss-program-2658232706.html?&gdpid=63d63b9a9517950225184a5d
200 OK 61 kB URL HTTP/2 www.popdust.com/nutrisystem-weight-loss-program-2658232706.html?&gdpid=63d63b9a9517950225184a5d
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (51577)
Hash 3cb89e213ad6609f5c65d1411b152e82
f40a140c1a6271219bd4cf79cd715fea73aeb2b7
302ea950f844741cb7b437ff4ae7a9514c8d54336d21714915e8836301411e76
GET /nutrisystem-weight-loss-program-2658232706.html?&gdpid=63d63b9a9517950225184a5d HTTP/1.1
Host: www.popdust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
age: 2711
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cache-control: private, max-age=0, must-revalidate, no-cache, no-store
cache-tag: article/2658232706,long_cache_articles/13918151,author/15039559
cloudflare-cdn-cache-control: max-age=3700, stale-while-revalidate=2592000, stale-if-error=87600
content-encoding: br
content-type: text/html; charset=utf-8
date: Sun, 29 Jan 2023 09:25:46 UTC
display: orig_site_sol
etag: W/"ca7150e12c35bc2499383b4246ada697-gzip"
expires: Sat, 28 Jan 2023 09:25:46 GMT
fastly-request-backend: fastly
fastly-sie: 86400.000
fastly-swr: 2592000.000
link: <https://assets.rebelmouse.io/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbWFnZSI6Imh0dHBzOi8vYXNzZXRzLnJibC5tcy8zMTczMTkxNC9vcmlnaW4ucG5nIiwiZXhwaXJlc19hdCI6MTczNTc3ODQ0NH0.K8o49c4t9nlovnvPJu8-OZao1PvsZqyqX1eVeFsrMHU/img.png?width=1200&height=800&quality=85&coordinates=0%2C0%2C0%2C0>; rel=preload; as=image; imagesrcset="https://assets.rebelmouse.io/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbWFnZSI6Imh0dHBzOi8vYXNzZXRzLnJibC5tcy8zMTczMTkxNC9vcmlnaW4ucG5nIiwiZXhwaXJlc19hdCI6MTczNTc3ODQ0NH0.K8o49c4t9nlovnvPJu8-OZao1PvsZqyqX1eVeFsrMHU/img.png?width=1200&height=800&quality=85&coordinates=0%2C0%2C0%2C0 3x, https://assets.rebelmouse.io/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbWFnZSI6Imh0dHBzOi8vYXNzZXRzLnJibC5tcy8zMTczMTkxNC9vcmlnaW4ucG5nIiwiZXhwaXJlc19hdCI6MTczNTc3ODQ0NH0.K8o49c4t9nlovnvPJu8-OZao1PvsZqyqX1eVeFsrMHU/img.png?width=1200&height=800&quality=85&coordinates=0%2C0%2C0%2C0 2x"
pagespeed: off
response: 200
server: istio-envoy
set-cookie: ezoadgid_76345=-1; Path=/; Domain=popdust.com; Expires=Sun, 29 Jan 2023 09:55:46 UTC
ezoref_76345=; Path=/; Domain=popdust.com; Expires=Sun, 29 Jan 2023 11:25:46 UTC
ezosuibasgeneris-1=1a2deee5-c477-43ef-5cc5-92f5a801e8c6; Path=/; Domain=popdust.com; Expires=Mon, 29 Jan 2024 09:25:46 UTC; Secure; SameSite=None
ezoab_76345=mod1; Path=/; Domain=popdust.com; Expires=Sun, 29 Jan 2023 11:25:46 UTC
lp_76345=https://www.popdust.com/nutrisystem-weight-loss-program-2658232706.html?gdpid=63d63b9a9517950225184a5d; Path=/; Domain=popdust.com; Expires=Sun, 29 Jan 2023 09:55:46 UTC
ezovuuidtime_76345=1674984346; Path=/; Domain=popdust.com; Expires=Tue, 31 Jan 2023 09:25:46 UTC
ezovuuid_76345=59cd4e71-42e0-420b-4b5e-cfef861ab757; Path=/; Domain=popdust.com; Expires=Sun, 29 Jan 2023 09:55:46 UTC
ezopvc_76345=1; Path=/; Domain=popdust.com; Expires=Sun, 29 Jan 2023 09:55:46 UTC
ezovab_76345=vmod1-c; Path=/; Domain=popdust.com; Expires=Sun, 29 Jan 2023 11:25:46 UTC
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding,User-Agent
via: 1.1 F_wfe_production,1.1 warehouse@3.6.1 production, 1.1 varnish, 1.1 varnish
x-cache: HIT, HIT
x-cache-hits: 22, 1
x-envoy-upstream-service-time: 22
x-ezoic-cdn: Miss
x-frame-options: SAMEORIGIN
x-middleton-display: orig_site_sol
x-middleton-response: 200
x-origin-cache-control: public, max-age=0
x-rebelmouse-layouts-key: www.popdust.com,(null)
x-rebelmouse-origin-timing: 0
x-request-id: be315fff-2e46-4afb-9662-97947a661ab9
x-served-by: cache-iad-kiad7000146-IAD, cache-hhn-etou8220052-HHN
x-sol: orig
x-timer: S1674984347.843229,VS0,VE1
xkey: article/2658232706 long_cache_articles/13918151 author/15039559
X-Firefox-Spdy: h2
a.pub.network/core/pubfig/pubfig.engine.4.38.0.2e4043c17e44abb1d7a86d7e8ef76d3b9a2955db.js
200 OK 139 kB URL HTTP/2 a.pub.network/core/pubfig/pubfig.engine.4.38.0.2e4043c17e44abb1d7a86d7e8ef76d3b9a2955db.js
IP
File type Unicode text, UTF-8 text, with very long lines (50547), with NEL line terminators
Size 139 kB (139048 bytes)
Hash 57cc02b1e067744b69edd2ded7c3444a
85a9f386dddcf35b5d7f95f32e077cdd2c599e05
bcf1950649cdd5dacafc0a128d2386b345a8bc8b54fa8e10a419f0a85f6b2c15
GET /core/pubfig/pubfig.engine.4.38.0.2e4043c17e44abb1d7a86d7e8ef76d3b9a2955db.js HTTP/1.1
Host: a.pub.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Cookie: _fsuid=3e394998-628e-4ca0-a622-31b5d56f900b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:48 GMT
content-type: application/javascript
x-guploader-uploadid: ADPycds-VgFUccl-2ipV-4GfywdWmiM03tfitlcnWcPOuEb6kCfSjaPA9gkBrIabZaaqQ3uzQg408klHFdx0fJLiCNoHHsoEEqrd
x-goog-generation: 1674581784645778
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 461992
content-language: en
x-goog-hash: crc32c=kL5lSw==, md5=1pYDOMkjNOTpd5uvq9e9AA==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: *
expires: Sun, 29 Jan 2023 10:25:48 GMT
cache-control: public, max-age=3600
last-modified: Tue, 24 Jan 2023 17:36:24 GMT
etag: W/"d6960338c92334e4e9779bafabd7bd00"
cf-cache-status: HIT
age: 201312
vary: Accept-Encoding
server: cloudflare
cf-ray: 7910ec32d8f2b517-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ib.adnxs.com/async_usersync?cbfn=queuePixels
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/async_usersync?cbfn=queuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /async_usersync?cbfn=queuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acdn.adnxs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sun, 29 Jan 2023 09:25:54 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
AN-X-Request-Uuid: 4e2e8c58-4dcc-41e8-b2b0-ea6a83e2fcfe
Set-Cookie: uuid2=7765328011640698300; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 29-Apr-2023 09:25:54 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 868.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
x.bidswitch.net/ul_cb/sync?ssp=themediagrid
200 OK 43 B URL HTTP/2 x.bidswitch.net/ul_cb/sync?ssp=themediagrid
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/sync?ssp=themediagrid HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.popdust.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:54 GMT
content-type: image/gif
content-length: 43
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
200 OK 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://acdn.adnxs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 29 Jan 2023 09:25:54 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: ea2155f2-c333-4362-b3ff-59a7e369048c
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 868.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash f39fed47c9e15c13d36c2677493c8ff7
923d4b44601940a489ad3b0904030621f908ca6d
5a80076018671c5dd0067f5141874a4664cc76129482a897dc35f65108f792a2
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=167044
Date: Sun, 29 Jan 2023 09:25:54 GMT
Etag: "63d60e57-1d7"
Expires: Tue, 31 Jan 2023 07:49:58 GMT
Last-Modified: Sun, 29 Jan 2023 06:12:39 GMT
Server: ECS (bsa/EB17)
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: o2I0aar8cSErPnDK3qJpBZ5NPXKbtVC_nAthpd7ODpAPeGa9ARVMWw==
Age: 5840
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash f39fed47c9e15c13d36c2677493c8ff7
923d4b44601940a489ad3b0904030621f908ca6d
5a80076018671c5dd0067f5141874a4664cc76129482a897dc35f65108f792a2
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=167358
Date: Sun, 29 Jan 2023 09:25:54 GMT
Etag: "63d60e57-1d7"
Expires: Tue, 31 Jan 2023 07:55:12 GMT
Last-Modified: Sun, 29 Jan 2023 06:12:39 GMT
Server: ECS (bsa/EB22)
X-Cache: Miss from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: kYXc5c6CYZDyq2wTzJb8vboq8qM4EJSi8j5sSOc2VEKae5dVgzUCSA==
Age: 6153
image6.pubmatic.com/AdServer/UCookieSetPug?oid=2&cb=PubMatic._uidCB
200 OK 60 B URL HTTP/2 image6.pubmatic.com/AdServer/UCookieSetPug?oid=2&cb=PubMatic._uidCB
IP
File type ASCII text, with no line terminators
Hash 4bc5255a7d3755fe1b30ae5c8de71175
11b74743c333d928d78fb6513e907b0344eb095f
57fdcb33ef2f9612a1c3d8554a54da36a227656d8c349338a2155bf4c11163b3
GET /AdServer/UCookieSetPug?oid=2&cb=PubMatic._uidCB HTTP/1.1
Host: image6.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.pubmatic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
cache-control: private
content-type: text/html; charset=UTF-8
expires: Sat, 29 Apr 2023 01:55:39 GMT
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
date: Sun, 29 Jan 2023 09:25:53 GMT
content-length: 60
X-Firefox-Spdy: h2
ads.yieldmo.com/pbsync?gdpr=&gdpr_consent=&us_privacy=&redirectUri=https%3A%2F%2Fs2s.t13.io%2Fsetuid%3Fbidder%3Dyieldmo%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26f%3Di%26uid%3D%24UID
302 Found 0 B URL HTTP/2 ads.yieldmo.com/pbsync?gdpr=&gdpr_consent=&us_privacy=&redirectUri=https%3A%2F%2Fs2s.t13.io%2Fsetuid%3Fbidder%3Dyieldmo%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26f%3Di%26uid%3D%24UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pbsync?gdpr=&gdpr_consent=&us_privacy=&redirectUri=https%3A%2F%2Fs2s.t13.io%2Fsetuid%3Fbidder%3Dyieldmo%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26f%3Di%26uid%3D%24UID HTTP/1.1
Host: ads.yieldmo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 29 Jan 2023 09:25:54 GMT
content-type: application/json;charset=utf-8
content-length: 0
location: https://s2s.t13.io/setuid?bidder=yieldmo&f=i&uid=g27ce85474ff1070591e&gdpr=&gdpr_consent=&us_privacy=
set-cookie: yieldmo_id=g27ce85474ff1070591e%7C1674984354697%7C0%7C; Domain=.yieldmo.com; Expires=Mon, 29-Jan-2024 09:25:54 GMT; Path=/; Secure; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-headers: Cache-Control, Pragma, *
access-control-allow-methods: POST, GET, OPTIONS
pragma: no-cache
X-Firefox-Spdy: h2
hal90006.redintelligence.net/viewability?s=13036300057646304438062012219006&a=0bb4ea72&vb=v
200 OK 0 B URL HTTP/1.1 hal90006.redintelligence.net/viewability?s=13036300057646304438062012219006&a=0bb4ea72&vb=v
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /viewability?s=13036300057646304438062012219006&a=0bb4ea72&vb=v HTTP/1.1
Host: hal90006.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hal90006.redintelligence.net/request_content.php?s=13036300057646304438062012219006&a=58e07517
Cookie: 8lcfmzhxc8d6_uid=05e573af85dcf424
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 09:25:54 GMT
Server: Apache
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8
cm.g.doubleclick.net/pixel?google_nid=yieldmo_dbm&google_hm=ZzIzYThiNjIxOTQyMTI5NGZmYWY=
302 Found 312 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=yieldmo_dbm&google_hm=ZzIzYThiNjIxOTQyMTI5NGZmYWY=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash d41e4c1456ab0726d89441bef02064cd
c00d16987717e3dfa730f31696906e52292b0b46
bf0f1886a58d45192614b49c49cc08b54e5e30c0353c975139fb25b01d328d28
GET /pixel?google_nid=yieldmo_dbm&google_hm=ZzIzYThiNjIxOTQyMTI5NGZmYWY= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.yieldmo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_nid=yieldmo_dbm&google_hm=ZzIzYThiNjIxOTQyMTI5NGZmYWY=&google_tc=
date: Sun, 29 Jan 2023 09:25:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 312
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 29-Jan-2023 09:40:54 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_nid=yieldmo_dbm&google_hm=ZzIzYThiNjIxOTQyMTI5NGZmYWY=&google_tc=
200 OK 170 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=yieldmo_dbm&google_hm=ZzIzYThiNjIxOTQyMTI5NGZmYWY=&google_tc=
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash e7673c60af825466f83d46da72ca1635
fc0fcbee0835709ba2d28798a612bfd687903fb5
0b8a20373c6dd04e091902226d922b3688143a8938afb9d283d889de7b55ceb5
GET /pixel?google_nid=yieldmo_dbm&google_hm=ZzIzYThiNjIxOTQyMTI5NGZmYWY=&google_tc= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ads.yieldmo.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
date: Sun, 29 Jan 2023 09:25:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
server: HTTP server (unknown)
content-length: 170
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 580c380d6f8d002d96ae71ae5860947a
54a9e4fb2359186af113e1a488f71cee7f82454e
fb10e684c3201177c8f902521ea611b1ebad96b31651416ba54a9dfeddc9bf94
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1717
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:54 GMT
Last-Modified: Sun, 29 Jan 2023 08:57:17 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
c1.adform.net/serving/cookie/match?party=1283
302 Found 0 B URL HTTP/2 c1.adform.net/serving/cookie/match?party=1283
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /serving/cookie/match?party=1283 HTTP/1.1
Host: c1.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.yieldmo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sun, 29 Jan 2023 09:25:54 GMT
content-length: 0
location: https://c1.adform.net/serving/cookie/match?CC=1&party=1283
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
set-cookie: C=1; expires=Tue, 28 Feb 2023 09:25:54 GMT; domain=adform.net; path=/
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 4b9daef1441313e8049ccc17fd3888a8
07b3144f3b0b2ac09da1fccb7361d39ca0c09237
b68a4ee8521686594cc7a4959813de51f39007f643cd236c8e5c62aeb262822b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=97429
Date: Sun, 29 Jan 2023 09:25:54 GMT
Etag: "63d50613-1d7"
Expires: Mon, 30 Jan 2023 12:29:43 GMT
Last-Modified: Sat, 28 Jan 2023 11:25:07 GMT
Server: ECS (nyb/1D0F)
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: qKnLgr3ZChLHCum10coeJgTNQqRK40S02A4wgymPaTUujkgli43qmw==
Age: 3876
ads.yieldmo.com/pbcas?us_privacy=&gdpr=0&gdpr_consent=&type=iframe
200 OK 358 B URL HTTP/2 ads.yieldmo.com/pbcas?us_privacy=&gdpr=0&gdpr_consent=&type=iframe
IP
File type HTML document, ASCII text
Hash b68b9fa5ca4046137c835968c223732c
748d4ddf2325bfb78c00e69e17a99bdeaf8d8581
558a17918939266abcaeb191054f0489ef9ca9c77fdf6e629498538cc05c48bb
GET /pbcas?us_privacy=&gdpr=0&gdpr_consent=&type=iframe HTTP/1.1
Host: ads.yieldmo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:54 GMT
content-type: text/html;charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Cache-Control, Pragma, *
access-control-allow-methods: POST, GET, OPTIONS
pragma: no-cache
set-cookie: yieldmo_id=g23a8b6219421294ffaf%7C1674984354693%7C0%7C; Domain=.yieldmo.com; Expires=Mon, 29-Jan-2024 09:25:54 GMT; Path=/; Secure; SameSite=None; Secure
rptr=rc%3D1164023%7Cc%3D1164023%7Cadfm%3D1164023%7Cz%3D1164023%7Cbeeswax%3D1164023; Domain=ads.yieldmo.com; Expires=Mon, 29-Jan-2024 09:25:54 GMT; Path=/; Secure; SameSite=None; Secure
vary: accept-encoding
content-encoding: gzip
X-Firefox-Spdy: h2
pixel-eu.rubiconproject.com/exchange/sync.php?p=yieldmo
204 No Content 0 B URL HTTP/1.1 pixel-eu.rubiconproject.com/exchange/sync.php?p=yieldmo
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /exchange/sync.php?p=yieldmo HTTP/1.1
Host: pixel-eu.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.yieldmo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: 17c962550296893d145ef1b8078fc6d6
Content-Type: image/gif
www.popdust.com/detroitchicago/greenoaks.gif?orig=1&ds=W3sidHlwZSI6InBhZ2V2aWV3IiwicGFnZXZpZXdfaWQiOiJlMzMwMTZhNC0zZjg5LTRkNjYtNGRlYS01ZDdiNzZjY2U4ZTMiLCJkb21haW5faWQiOiI3NjM0NSIsInRfZXBvY2giOjE2NzQ5ODQzNDYsImRhdGEiOlt7Im5hbWUiOiJ0X3VubG9hZCIsInZhbCI6IjE2NzQ5ODQzNjE2MjkifV19XQ==
204 No Content 0 B URL HTTP/2 www.popdust.com/detroitchicago/greenoaks.gif?orig=1&ds=W3sidHlwZSI6InBhZ2V2aWV3IiwicGFnZXZpZXdfaWQiOiJlMzMwMTZhNC0zZjg5LTRkNjYtNGRlYS01ZDdiNzZjY2U4ZTMiLCJkb21haW5faWQiOiI3NjM0NSIsInRfZXBvY2giOjE2NzQ5ODQzNDYsImRhdGEiOlt7Im5hbWUiOiJ0X3VubG9hZCIsInZhbCI6IjE2NzQ5ODQzNjE2MjkifV19XQ==
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /detroitchicago/greenoaks.gif?orig=1&ds=W3sidHlwZSI6InBhZ2V2aWV3IiwicGFnZXZpZXdfaWQiOiJlMzMwMTZhNC0zZjg5LTRkNjYtNGRlYS01ZDdiNzZjY2U4ZTMiLCJkb21haW5faWQiOiI3NjM0NSIsInRfZXBvY2giOjE2NzQ5ODQzNDYsImRhdGEiOlt7Im5hbWUiOiJ0X3VubG9hZCIsInZhbCI6IjE2NzQ5ODQzNjE2MjkifV19XQ== HTTP/1.1
Host: www.popdust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.popdust.com/nutrisystem-weight-loss-program-2658232706.html?&gdpid=63d63b9a9517950225184a5d
Origin: https://www.popdust.com
Connection: keep-alive
Cookie: ezoadgid_76345=-1; ezoref_76345=; ezosuibasgeneris-1=1a2deee5-c477-43ef-5cc5-92f5a801e8c6; ezoab_76345=mod1; lp_76345=https://www.popdust.com/nutrisystem-weight-loss-program-2658232706.html?gdpid=63d63b9a9517950225184a5d; ezovuuidtime_76345=1674984346; ezovuuid_76345=59cd4e71-42e0-420b-4b5e-cfef861ab757; ezopvc_76345=1; ezovab_76345=vmod1-c; fs.bot.check=true; _ga_VWQCYNNMD2=GS1.1.1674984354.1.0.1674984354.60.0.0; _ga=GA1.2.1431532804.1674984355; exco-uid=fkb6omqrzpvh4u1h; _gid=GA1.2.847625689.1674984355; _gat_gtag_UA_19669260_1=1; fs.session.id=b3f27972-31f6-4b4d-83f4-e071f22b76a3; _fbp=fb.1.1674984355640.59557481; __qca=P0-1813112332-1674984355413; __gads=ID=eca85bdc8ac77c99:T=1674984349:S=ALNI_MapipCphw1752hF6bxBjKTLvweymA; __gpi=UID=00000baba5c238df:T=1674984349:RT=1674984349:S=ALNI_MZlYS1t5jSXOXoNeY_pgB_rNEOL_g; _pbjs_userid_consent_data=3524755945110770; cookie=886172c0-440b-4dd7-aa75-fda26cce8054; _lr_retry_request=true; _lr_env_src_ats=false; cto_bundle=4chU5V9jYUxVVjBsMCUyQlVKc0dRcUtZbHBJWG9LSDF3ZmkyU3dVTGNHSDlST052VGw3QXFYRGVMVEJHNlNyM2J0RmFVaXNGdks2bzY2S1glMkZaWElqY0EyeFZBZUM4WHhRd1R5djE3TTN0SWZtZDc2UTB2Q3oxSWN6S2JjTENOUTYlMkZBOVJ5YQ; cto_bidid=VkIHvV9ESnFOJTJGd2V5ZzZ0NmR6cXpOU0pUJTJGb0slMkZ4RmVrOTVGMWcwcUthbzFETDdzVU9uTGRTdDBza1dGOGs0Rm5YaENRNGt5b1pYdWVhOUpCRkJsdiUyQmJnMHRnJTNEJTNE; ntvSession={"id":1348708,"placementID":1123600,"lastInteraction":1674984358320,"sessionStart":1674984358320,"sessionEndDate":1675036800000,"experiment":""}; _gat_UA-193582401-1=1; _hjSessionUser_2399092=eyJpZCI6IjA4YzcyOGQxLWJjYjgtNTc4MC04NTJmLWM2N2QyODAyYTMyMCIsImNyZWF0ZWQiOjE2NzQ5ODQzNTgxNjksImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_2399092=eyJpZCI6IjY5ZTU0NWNlLThlZTktNGJkNC04NGFlLTAwNzMxNDU0NWUyYiIsImNyZWF0ZWQiOjE2NzQ5ODQzNTgxODIsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; outbrain_cid_fetch=true; ezux_et_76345=0; ezux_tos_76345=7
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: https://www.popdust.com
cache-control: private, max-age=0, must-revalidate, no-cache, no-store
date: Sun, 29 Jan 2023 09:25:55 GMT
expires: Sat, 28 Jan 2023 09:25:55 GMT
vary: Accept-Encoding
x-middleton-display: ezp_sol
X-Firefox-Spdy: h2
match.prod.bidr.io/cookie-sync/mo?
303 See Other 0 B URL HTTP/1.1 match.prod.bidr.io/cookie-sync/mo?
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cookie-sync/mo? HTTP/1.1
Host: match.prod.bidr.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.yieldmo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 303 See Other
Date: Sun, 29 Jan 2023 09:25:54 GMT
location: https://match.prod.bidr.io/cookie-sync/mo?_bee_ppp=1
Server: gunicorn
set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Sun, 29 Jan 2023 09:35:54 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=2592000; includeSubDomains
Content-Length: 0
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 33c70933b0cd866a9f4fe4d8329fbb28
d775c612f4422bb2cb80ba48441d2d065bbc3d97
2ac64bbd3905b2c4519990ea9c02f7451d1049f6e39728db0389b89d9f6167aa
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3329
Cache-Control: max-age=150536
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 09:25:55 GMT
Etag: "63d5d7aa-1d7"
Expires: Tue, 31 Jan 2023 03:14:51 GMT
Last-Modified: Sun, 29 Jan 2023 02:19:22 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
www.popdust.com/detroitchicago/greenoaks.gif?orig=1&ds=W3sidHlwZSI6InBhZ2V2aWV3IiwicGFnZXZpZXdfaWQiOiJlMzMwMTZhNC0zZjg5LTRkNjYtNGRlYS01ZDdiNzZjY2U4ZTMiLCJkb21haW5faWQiOiI3NjM0NSIsInRfZXBvY2giOjE2NzQ5ODQzNDYsImRhdGEiOlt7Im5hbWUiOiJmaWRfdmFsdWUiLCJ2YWwiOiIzIn1dfV0=
204 No Content 0 B URL HTTP/2 www.popdust.com/detroitchicago/greenoaks.gif?orig=1&ds=W3sidHlwZSI6InBhZ2V2aWV3IiwicGFnZXZpZXdfaWQiOiJlMzMwMTZhNC0zZjg5LTRkNjYtNGRlYS01ZDdiNzZjY2U4ZTMiLCJkb21haW5faWQiOiI3NjM0NSIsInRfZXBvY2giOjE2NzQ5ODQzNDYsImRhdGEiOlt7Im5hbWUiOiJmaWRfdmFsdWUiLCJ2YWwiOiIzIn1dfV0=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /detroitchicago/greenoaks.gif?orig=1&ds=W3sidHlwZSI6InBhZ2V2aWV3IiwicGFnZXZpZXdfaWQiOiJlMzMwMTZhNC0zZjg5LTRkNjYtNGRlYS01ZDdiNzZjY2U4ZTMiLCJkb21haW5faWQiOiI3NjM0NSIsInRfZXBvY2giOjE2NzQ5ODQzNDYsImRhdGEiOlt7Im5hbWUiOiJmaWRfdmFsdWUiLCJ2YWwiOiIzIn1dfV0= HTTP/1.1
Host: www.popdust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.popdust.com/nutrisystem-weight-loss-program-2658232706.html?&gdpid=63d63b9a9517950225184a5d
Origin: https://www.popdust.com
Connection: keep-alive
Cookie: ezoadgid_76345=-1; ezoref_76345=; ezosuibasgeneris-1=1a2deee5-c477-43ef-5cc5-92f5a801e8c6; ezoab_76345=mod1; lp_76345=https://www.popdust.com/nutrisystem-weight-loss-program-2658232706.html?gdpid=63d63b9a9517950225184a5d; ezovuuidtime_76345=1674984346; ezovuuid_76345=59cd4e71-42e0-420b-4b5e-cfef861ab757; ezopvc_76345=1; ezovab_76345=vmod1-c; fs.bot.check=true; _ga_VWQCYNNMD2=GS1.1.1674984354.1.0.1674984361.53.0.0; _ga=GA1.2.1431532804.1674984355; exco-uid=fkb6omqrzpvh4u1h; _gid=GA1.2.847625689.1674984355; _gat_gtag_UA_19669260_1=1; fs.session.id=b3f27972-31f6-4b4d-83f4-e071f22b76a3; _fbp=fb.1.1674984355640.59557481; __qca=P0-1813112332-1674984355413; __gads=ID=eca85bdc8ac77c99:T=1674984349:S=ALNI_MapipCphw1752hF6bxBjKTLvweymA; __gpi=UID=00000baba5c238df:T=1674984349:RT=1674984349:S=ALNI_MZlYS1t5jSXOXoNeY_pgB_rNEOL_g; _pbjs_userid_consent_data=3524755945110770; cookie=886172c0-440b-4dd7-aa75-fda26cce8054; _lr_retry_request=true; _lr_env_src_ats=false; cto_bundle=4chU5V9jYUxVVjBsMCUyQlVKc0dRcUtZbHBJWG9LSDF3ZmkyU3dVTGNHSDlST052VGw3QXFYRGVMVEJHNlNyM2J0RmFVaXNGdks2bzY2S1glMkZaWElqY0EyeFZBZUM4WHhRd1R5djE3TTN0SWZtZDc2UTB2Q3oxSWN6S2JjTENOUTYlMkZBOVJ5YQ; cto_bidid=VkIHvV9ESnFOJTJGd2V5ZzZ0NmR6cXpOU0pUJTJGb0slMkZ4RmVrOTVGMWcwcUthbzFETDdzVU9uTGRTdDBza1dGOGs0Rm5YaENRNGt5b1pYdWVhOUpCRkJsdiUyQmJnMHRnJTNEJTNE; ntvSession={"id":1348708,"placementID":1123600,"lastInteraction":1674984358320,"sessionStart":1674984358320,"sessionEndDate":1675036800000,"experiment":""}; _gat_UA-193582401-1=1; _hjSessionUser_2399092=eyJpZCI6IjA4YzcyOGQxLWJjYjgtNTc4MC04NTJmLWM2N2QyODAyYTMyMCIsImNyZWF0ZWQiOjE2NzQ5ODQzNTgxNjksImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_2399092=eyJpZCI6IjY5ZTU0NWNlLThlZTktNGJkNC04NGFlLTAwNzMxNDU0NWUyYiIsImNyZWF0ZWQiOjE2NzQ5ODQzNTgxODIsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; outbrain_cid_fetch=true; ezux_et_76345=0; ezux_tos_76345=7
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: https://www.popdust.com
cache-control: private, max-age=0, must-revalidate, no-cache, no-store
date: Sun, 29 Jan 2023 09:25:55 GMT
expires: Sat, 28 Jan 2023 09:25:55 GMT
vary: Accept-Encoding
x-middleton-display: ezp_sol
X-Firefox-Spdy: h2
ads.pubmatic.com/AdServer/js/cl_partner.html?pid=2&gdpr=0&gdpr_consent=&rdu=https%3A%2F%2Fsimage4.pubmatic.com%2FAdServer%2FSPug%3Fo%3D3%26u%3DA5E469A6-4358-4211-AB1C-4A6CA027D89C%26vcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD00MzIwMA%3D%3D%26piggybackCookie%3Duid%3A%23%23P_UID
200 OK 953 B URL HTTP/2 ads.pubmatic.com/AdServer/js/cl_partner.html?pid=2&gdpr=0&gdpr_consent=&rdu=https%3A%2F%2Fsimage4.pubmatic.com%2FAdServer%2FSPug%3Fo%3D3%26u%3DA5E469A6-4358-4211-AB1C-4A6CA027D89C%26vcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD00MzIwMA%3D%3D%26piggybackCookie%3Duid%3A%23%23P_UID
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (1720), with no line terminators
Hash 499546dec064c08e4c7c354bab138f7f
f155d071d071e4e7c1d45e22943915df9d9f2b75
1a9219bc3962479cfa6ff0ca64e2f810aab8b816ae4f937b252d0ca044d693b4
GET /AdServer/js/cl_partner.html?pid=2&gdpr=0&gdpr_consent=&rdu=https%3A%2F%2Fsimage4.pubmatic.com%2FAdServer%2FSPug%3Fo%3D3%26u%3DA5E469A6-4358-4211-AB1C-4A6CA027D89C%26vcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD00MzIwMA%3D%3D%26piggybackCookie%3Duid%3A%23%23P_UID HTTP/1.1
Host: ads.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://simage4.pubmatic.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 17 Aug 2016 09:36:32 GMT
etag: "fa18f0-6b8-53a413358bd01"
server: Apache
accept-ranges: bytes
content-encoding: gzip
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC", CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
content-length: 953
content-type: text/html; charset=UTF-8
cache-control: max-age=59918
expires: Mon, 30 Jan 2023 02:04:33 GMT
date: Sun, 29 Jan 2023 09:25:55 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
id.hadron.ad.gt/v1/hadron.json?_it=prebid&partner_id=474&sync=0&domain=www.popdust.com&url=
200 OK 0 B URL HTTP/2 id.hadron.ad.gt/v1/hadron.json?_it=prebid&partner_id=474&sync=0&domain=www.popdust.com&url=
IP
OPTIONS /v1/hadron.json?_it=prebid&partner_id=474&sync=0&domain=www.popdust.com&url= HTTP/1.1
Host: id.hadron.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.popdust.com/
Origin: https://www.popdust.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:50 GMT
content-type: application/json
cache-control: public,max-age=30
access-control-allow-origin: https://www.popdust.com
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT
vary: Origin
content-encoding: gzip
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7910ec3d1f630b06-OSL
X-Firefox-Spdy: h2
static.criteo.net/js/ld/publishertag.prebid.130.js
200 OK 0 B URL HTTP/2 static.criteo.net/js/ld/publishertag.prebid.130.js
IP
GET /js/ld/publishertag.prebid.130.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 09:25:51 GMT
content-type: text/javascript
last-modified: Sat, 17 Sep 2022 19:59:55 GMT
etag: W/"6326273b-16120"
expires: Mon, 30 Jan 2023 09:25:51 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
c1.adform.net/serving/cookie/match?CC=1&party=1283
200 OK 0 B URL HTTP/2 c1.adform.net/serving/cookie/match?CC=1&party=1283
IP
GET /serving/cookie/match?CC=1&party=1283 HTTP/1.1
Host: c1.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ads.yieldmo.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 09:25:54 GMT
content-type: image/gif
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
www.popdust.com/static/dist/social-ux/runtime.0b41149dbc4992e5203f.bundle.mjs
200 OK 0 B URL HTTP/2 www.popdust.com/static/dist/social-ux/runtime.0b41149dbc4992e5203f.bundle.mjs
IP
GET /static/dist/social-ux/runtime.0b41149dbc4992e5203f.bundle.mjs HTTP/1.1
Host: www.popdust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.popdust.com/nutrisystem-weight-loss-program-2658232706.html?&gdpid=63d63b9a9517950225184a5d
Connection: keep-alive
Cookie: ezoadgid_76345=-1; ezoref_76345=; ezosuibasgeneris-1=1a2deee5-c477-43ef-5cc5-92f5a801e8c6; ezoab_76345=mod1; lp_76345=https://www.popdust.com/nutrisystem-weight-loss-program-2658232706.html?gdpid=63d63b9a9517950225184a5d; ezovuuidtime_76345=1674984346; ezovuuid_76345=59cd4e71-42e0-420b-4b5e-cfef861ab757; ezopvc_76345=1; ezovab_76345=vmod1-c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
age: 0
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cache-control: max-age=31536000
content-encoding: br
content-type: application/javascript
date: Sun, 29 Jan 2023 09:25:47 UTC
display: staticcontent_sol, orig_site_sol
etag: "0186829720e0e20e976948d4296bca24-gzip"
fastly-request-backend: fastly
fastly-sie: 86400.000
fastly-swr: 2592000.000
last-modified: Tue, 24 Jan 2023 19:08:54 GMT
response: 200
server: Apache/2.4.39 (Ubuntu)
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding,User-Agent,Origin
via: 1.1 F_wfe_production, 1.1 varnish, 1.1 varnish
x-amz-id-2: wZ2/g4oRkCfhPQx8hCyd6ATUlAw5Vyv84URzDUnxNzqHYcpofWzLn77OSIyXvaE6CIpkdP8UyhQ=
x-amz-request-id: 9MHAHJMA8Q9HHAP3
x-amz-version-id: G7HktHaBQeaw6sZeqsqb7LSCXlpM0Vj9
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-ezoic-cdn: Hit ds;mm;2eadf59f1d7b97d2db327d33b21b7aa1;2-76345-22;1b9c618c-33da-4de2-455e-81f6d7061655
x-middleton-display: staticcontent_sol, orig_site_sol
x-middleton-response: 200
x-origin-cache-control: max-age=31536000
x-rebelmouse-layouts-key: www.popdust.com,(null)
x-request-id: b481c256-2536-4285-afe2-3631da2b647c
x-served-by: cache-iad-kcgs7200065-IAD, cache-fra-eddf8230025-FRA
x-sol: orig
x-timer: S1671009405.845280,VS0,VE128
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Lato:300,400,700|Roboto:300,400,700|Ibarra%20Real%20Nova:300,400,700|Open%20Sans:300,400,700|Nanum%20Myeongjo:300,400,700|Amiri:300,400,700|DM%20Serif%20Text:300,400,700|PT%20Serif:300,400,700|playfair%20display:300,400,700|bebas%20neue%20:300,400,700&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Lato:300,400,700|Roboto:300,400,700|Ibarra%20Real%20Nova:300,400,700|Open%20Sans:300,400,700|Nanum%20Myeongjo:300,400,700|Amiri:300,400,700|DM%20Serif%20Text:300,400,700|PT%20Serif:300,400,700|playfair%20display:300,400,700|bebas%20neue%20:300,400,700&display=swap
IP
GET /css?family=Lato:300,400,700|Roboto:300,400,700|Ibarra%20Real%20Nova:300,400,700|Open%20Sans:300,400,700|Nanum%20Myeongjo:300,400,700|Amiri:300,400,700|DM%20Serif%20Text:300,400,700|PT%20Serif:300,400,700|playfair%20display:300,400,700|bebas%20neue%20:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 29 Jan 2023 09:25:47 GMT
date: Sun, 29 Jan 2023 09:25:47 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
a.pub.network/core/pubfig/cls.css
200 OK 0 B URL HTTP/2 a.pub.network/core/pubfig/cls.css
IP
GET /core/pubfig/cls.css HTTP/1.1
Host: a.pub.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:47 GMT
content-type: text/css
x-guploader-uploadid: ADPycdvIOI1QPJlxWXQy5E5GN4-byfSiMjO1LU0xfxOzAjDFhjGV_SdZj_SV0DE_qEvloyUBTXUhUoUMjQBGTyY3AEgy_A
x-goog-generation: 1666967770269941
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 2096
x-goog-hash: crc32c=4G+Zdg==, md5=gWeDFGs5B+Y00OgiynWYZA==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: *
expires: Sun, 29 Jan 2023 10:25:47 GMT
cache-control: public, max-age=3600
last-modified: Fri, 28 Oct 2022 14:36:10 GMT
etag: W/"816783146b3907e634d0e822ca759864"
cf-cache-status: HIT
age: 2898
vary: Accept-Encoding
server: cloudflare
cf-ray: 7910ec2a1d28b517-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
a.ad.gt/api/v1/u/matches/474?_it=prebid
200 OK 0 B URL HTTP/2 a.ad.gt/api/v1/u/matches/474?_it=prebid
IP
GET /api/v1/u/matches/474?_it=prebid HTTP/1.1
Host: a.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:50 GMT
content-type: application/javascript
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 100
last-modified: Sun, 29 Jan 2023 09:24:10 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 7910ec407a531c02-OSL
X-Firefox-Spdy: h2
main.pubexchange.com/loader.min.js
200 OK 0 B URL HTTP/2 main.pubexchange.com/loader.min.js
IP
GET /loader.min.js HTTP/1.1
Host: main.pubexchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:49 GMT
content-type: application/x-javascript
last-modified: Mon, 03 Aug 2020 16:06:21 GMT
etag: W/"540449acb8c6aef7ee397ca8050b3341"
cache-control: public, max-age=432000
x-amz-meta-cb-modifiedtime: Mon, 03 Aug 2020 15:54:59 GMT
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6hx3JhseOr-CRvkqWwZ7jczs1jbtrUgtfVr2h0uBHYExO0726Qakng==
age: 5803
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bHRzYFh9ztbXCCaSZ7jUEQO8FdbAF0ChWI9B8%2Bqn7fgKEMGOGS7%2FH6Ob0C7QB05nRk4n3lqtPQvnY%2FCPq%2B7kPIpdFKI6nEg7P4NDCiphYLF8LSj%2FJTuvNL7LG07mj6UkKmBNSq13"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7910ec3abc90b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.popdust.com/static/fonts/fontawesome/fontawesome-mini.woff
200 OK 0 B URL HTTP/2 www.popdust.com/static/fonts/fontawesome/fontawesome-mini.woff
IP
GET /static/fonts/fontawesome/fontawesome-mini.woff HTTP/1.1
Host: www.popdust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.popdust.com/static/css-build/roar/runner/social-ux-non-critical.css?v=rmxassetse8b874e39b339059e338b461576785bb
Cookie: ezoadgid_76345=-1; ezoref_76345=; ezosuibasgeneris-1=1a2deee5-c477-43ef-5cc5-92f5a801e8c6; ezoab_76345=mod1; lp_76345=https://www.popdust.com/nutrisystem-weight-loss-program-2658232706.html?gdpid=63d63b9a9517950225184a5d; ezovuuidtime_76345=1674984346; ezovuuid_76345=59cd4e71-42e0-420b-4b5e-cfef861ab757; ezopvc_76345=1; ezovab_76345=vmod1-c; fs.bot.check=true; _ga_VWQCYNNMD2=GS1.1.1674984354.1.0.1674984354.60.0.0; _ga=GA1.2.1431532804.1674984355; exco-uid=fkb6omqrzpvh4u1h; _gid=GA1.2.847625689.1674984355; _gat_gtag_UA_19669260_1=1; fs.session.id=b3f27972-31f6-4b4d-83f4-e071f22b76a3; _fbp=fb.1.1674984355640.59557481; __qca=P0-1813112332-1674984355413; __gads=ID=eca85bdc8ac77c99:T=1674984349:S=ALNI_MapipCphw1752hF6bxBjKTLvweymA; __gpi=UID=00000baba5c238df:T=1674984349:RT=1674984349:S=ALNI_MZlYS1t5jSXOXoNeY_pgB_rNEOL_g; _pbjs_userid_consent_data=3524755945110770; cookie=886172c0-440b-4dd7-aa75-fda26cce8054; _lr_retry_request=true; _lr_env_src_ats=false
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 6280
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cache-control: max-age=31536000
content-type: application/font-woff
date: Sun, 29 Jan 2023 09:25:49 UTC
display: staticcontent_sol
etag: "63297e2c-1c44-gzip"
fastly-request-backend: fastly
fastly-sie: 86400.000
fastly-swr: 2592000.000
last-modified: Tue, 24 Jan 2023 19:08:54 GMT
response: 200
server: Apache/2.4.39 (Ubuntu)
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding,User-Agent,Origin
via: 1.1 F_wfe_production, 1.1 varnish, 1.1 varnish
x-cache: HIT, MISS
x-cache-hits: 4, 0
x-ezoic-cdn: Hit ds;mm;ce5af20f5a56725241fa68728af2b60b;2-76345-22;16348fea-2624-4c1b-6c20-75f4861645e3
x-frame-options: SAMEORIGIN
x-middleton-display: staticcontent_sol
x-middleton-response: 200
x-origin-cache-control: max-age=31536000
x-request-id: 09d7b9e1-1519-4ce4-8998-f07de33a2a1d
x-served-by: cache-iad-kjyo7100040-IAD, cache-hhn4051-HHN
x-timer: S1663788775.780224,VS0,VE92
X-Firefox-Spdy: h2
simage4.pubmatic.com/AdServer/SPug?o=1&p=156696&sc=1&u=A5E469A6-4358-4211-AB1C-4A6CA027D89C&rs=3&gdpr=0&gdpr_consent=&us_privacy=
200 OK 0 B URL HTTP/2 simage4.pubmatic.com/AdServer/SPug?o=1&p=156696&sc=1&u=A5E469A6-4358-4211-AB1C-4A6CA027D89C&rs=3&gdpr=0&gdpr_consent=&us_privacy=
IP
GET /AdServer/SPug?o=1&p=156696&sc=1&u=A5E469A6-4358-4211-AB1C-4A6CA027D89C&rs=3&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1
Host: simage4.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.pubmatic.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 09:25:53 GMT
content-type: text/html; charset=utf-8
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
cache-control: no-store, no-cache, private
content-encoding: gzip
X-Firefox-Spdy: h2
connect.facebook.net/signals/config/1973203182716627?v=2.9.92&r=stable
200 OK 0 B URL HTTP/2 connect.facebook.net/signals/config/1973203182716627?v=2.9.92&r=stable
IP
GET /signals/config/1973203182716627?v=2.9.92&r=stable HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: rOxZBZKnXKsuzV88FXtUHNt6wWHHKPB1r3TvYVenYX/rLQTRjBXDr2bcZu4xY14CFKbtB5OrW4BQ7sFw479C5Q==
x-fb-trip-id: 2074150462
date: Sun, 29 Jan 2023 09:25:48 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.confiant-integrations.net/qaKtxuL1KR_2Tfmz0NmPaAudsBc/gpt_and_prebid/config.js
200 OK 0 B URL HTTP/2 cdn.confiant-integrations.net/qaKtxuL1KR_2Tfmz0NmPaAudsBc/gpt_and_prebid/config.js
IP
GET /qaKtxuL1KR_2Tfmz0NmPaAudsBc/gpt_and_prebid/config.js HTTP/1.1
Host: cdn.confiant-integrations.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:48 GMT
content-type: text/javascript
x-amz-id-2: sgSMKH2o4cnFyzPEDhPJKsScD9kCXnow6WkSYKgGnbD/mIzqiv3AF46Ddtm4uZsjCqLWTKkRS6Y=
x-amz-request-id: DR982GNTZ1CRTV64
last-modified: Sun, 29 Jan 2023 07:37:41 GMT
etag: W/"5505ee1fb0a6ea48e9189558ab35fb2f"
cache-control: public, max-age=900, stale-while-revalidate=3600
cf-cache-status: HIT
age: 147
vary: Accept-Encoding
server: cloudflare
cf-ray: 7910ec34ec020b51-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.popdust.com/static/fonts/fontawesome/4.6.3/fontawesome-webfont.woff2?v=4.6.3
200 OK 0 B URL HTTP/2 www.popdust.com/static/fonts/fontawesome/4.6.3/fontawesome-webfont.woff2?v=4.6.3
IP
GET /static/fonts/fontawesome/4.6.3/fontawesome-webfont.woff2?v=4.6.3 HTTP/1.1
Host: www.popdust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.popdust.com/static/css-build/roar/runner/social-ux-non-critical.css?v=rmxassetse8b874e39b339059e338b461576785bb
Cookie: ezoadgid_76345=-1; ezoref_76345=; ezosuibasgeneris-1=1a2deee5-c477-43ef-5cc5-92f5a801e8c6; ezoab_76345=mod1; lp_76345=https://www.popdust.com/nutrisystem-weight-loss-program-2658232706.html?gdpid=63d63b9a9517950225184a5d; ezovuuidtime_76345=1674984346; ezovuuid_76345=59cd4e71-42e0-420b-4b5e-cfef861ab757; ezopvc_76345=1; ezovab_76345=vmod1-c; fs.bot.check=true; _ga_VWQCYNNMD2=GS1.1.1674984354.1.0.1674984354.60.0.0; _ga=GA1.2.1431532804.1674984355; exco-uid=fkb6omqrzpvh4u1h; _gid=GA1.2.847625689.1674984355; _gat_gtag_UA_19669260_1=1; fs.session.id=b3f27972-31f6-4b4d-83f4-e071f22b76a3; _fbp=fb.1.1674984355640.59557481; __qca=P0-1813112332-1674984355413; __gads=ID=eca85bdc8ac77c99:T=1674984349:S=ALNI_MapipCphw1752hF6bxBjKTLvweymA; __gpi=UID=00000baba5c238df:T=1674984349:RT=1674984349:S=ALNI_MZlYS1t5jSXOXoNeY_pgB_rNEOL_g; _pbjs_userid_consent_data=3524755945110770; cookie=886172c0-440b-4dd7-aa75-fda26cce8054; _lr_retry_request=true; _lr_env_src_ats=false
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 0
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cache-control: max-age=31536000
content-type: application/font-woff2
date: Sun, 29 Jan 2023 09:25:49 UTC
display: staticcontent_sol
etag: "63297e2c-118d8-gzip"
fastly-request-backend: fastly
fastly-sie: 86400.000
fastly-swr: 2592000.000
last-modified: Tue, 24 Jan 2023 19:08:54 GMT
response: 200
server: Apache/2.4.39 (Ubuntu)
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding,User-Agent,Origin
via: 1.1 F_wfe_production, 1.1 varnish, 1.1 varnish
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-ezoic-cdn: Hit ds;mm;8afba17b6400d0cce148ee3367e0839a;2-76345-22;0eadeae7-78f2-4cf2-58c8-ff0638cf2ebd
x-frame-options: SAMEORIGIN
x-middleton-display: staticcontent_sol
x-middleton-response: 200
x-origin-cache-control: max-age=31536000
x-request-id: 246eaa18-c419-4b9a-8602-d2ed99822d04
x-served-by: cache-iad-kiad7000070-IAD, cache-hhn4052-HHN
x-timer: S1663782313.561868,VS0,VE97
X-Firefox-Spdy: h2
static.criteo.net/js/ld/publishertag.prebid.js
200 OK 0 B URL HTTP/2 static.criteo.net/js/ld/publishertag.prebid.js
IP
GET /js/ld/publishertag.prebid.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 09:25:51 GMT
content-type: text/javascript
last-modified: Wed, 18 Jan 2023 01:20:50 GMT
etag: W/"63c74972-162fb"
expires: Mon, 30 Jan 2023 09:25:51 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
200 OK 0 B IP
ASN #203220 Yahoo! UK Services Limited
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: xeDl4iURiKYDmEZA6Nk142LUlTe7bTbchW2dwuca0V/maeQFzLzaDEFmVUIUg/X3I6Lerl2gDWw=
x-amz-request-id: WM1FNMA84GBRA500
date: Sun, 29 Jan 2023 09:25:38 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 11
content-encoding: gzip
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
cdn.hadronid.net/hadron.js?url=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&ref=&_it=freestar&partner_id=474
200 OK 0 B URL HTTP/2 cdn.hadronid.net/hadron.js?url=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&ref=&_it=freestar&partner_id=474
IP
GET /hadron.js?url=https%3A%2F%2Fwww.popdust.com%2Fnutrisystem-weight-loss-program-2658232706.html%3F%26gdpid%3D63d63b9a9517950225184a5d&ref=&_it=freestar&partner_id=474 HTTP/1.1
Host: cdn.hadronid.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:48 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"2280e2148e4ee3c06f679f8fac039778"
last-modified: Fri, 18 Nov 2022 10:57:44 GMT
x-amz-id-2: VVXSRCfn+iX3VlsEH3JPxIkNzLS6lVJG1NUOW+RC+F2OY5f3zD5nPr9+sjNuSMlIuK4KYvackFM=
x-amz-request-id: 8JRRZ9HXKGBZSDFY
cache-control: max-age=3600
cf-cache-status: HIT
age: 845
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=93Y9pX%2BWKbyMIFWYX%2FWTbVH44qdFH6iz0dUg%2F%2Fajb1sPWNnI%2BTRvjn6OnrJzfhKdWNRzNg4PiFC6Sb%2F4URDT7iFoXExZzJnZTa%2Fv4wVZDMiJ9H6rtS0TYharHcC8HKUWhzo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7910ec34eb2a1c16-OSL
content-encoding: br
X-Firefox-Spdy: h2
a.pub.network/core/pubfig/pubfig.messaging.2.38.0.2e4043c17e44abb1d7a86d7e8ef76d3b9a2955db.js
200 OK 0 B URL HTTP/2 a.pub.network/core/pubfig/pubfig.messaging.2.38.0.2e4043c17e44abb1d7a86d7e8ef76d3b9a2955db.js
IP
GET /core/pubfig/pubfig.messaging.2.38.0.2e4043c17e44abb1d7a86d7e8ef76d3b9a2955db.js HTTP/1.1
Host: a.pub.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Cookie: _fsuid=3e394998-628e-4ca0-a622-31b5d56f900b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:49 GMT
content-type: application/javascript
x-guploader-uploadid: ADPycdsHIXxGc3Ps2YOZg0iRRhdlqurRqg0_xv6fBHDY1ZoZJ77N3MbCBAhLXOjwiMC1ZdNuzN22hGbdN6g4G4Jwva1Otg
x-goog-generation: 1674581789575167
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 236086
content-language: en
x-goog-hash: crc32c=By39Zg==, md5=BQ4ts4/3/yFpCihF0v9T0A==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
expires: Sun, 29 Jan 2023 10:25:49 GMT
cache-control: public, max-age=3600
last-modified: Tue, 24 Jan 2023 17:36:29 GMT
etag: W/"050e2db38ff7ff21690a2845d2ff53d0"
cf-cache-status: HIT
age: 201312
vary: Accept-Encoding
server: cloudflare
cf-ray: 7910ec3a9bbbb517-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.popdust.com/static/dist/social-ux/main.7175263f595aad9cf896.bundle.mjs
200 OK 0 B URL HTTP/2 www.popdust.com/static/dist/social-ux/main.7175263f595aad9cf896.bundle.mjs
IP
GET /static/dist/social-ux/main.7175263f595aad9cf896.bundle.mjs HTTP/1.1
Host: www.popdust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.popdust.com/nutrisystem-weight-loss-program-2658232706.html?&gdpid=63d63b9a9517950225184a5d
Connection: keep-alive
Cookie: ezoadgid_76345=-1; ezoref_76345=; ezosuibasgeneris-1=1a2deee5-c477-43ef-5cc5-92f5a801e8c6; ezoab_76345=mod1; lp_76345=https://www.popdust.com/nutrisystem-weight-loss-program-2658232706.html?gdpid=63d63b9a9517950225184a5d; ezovuuidtime_76345=1674984346; ezovuuid_76345=59cd4e71-42e0-420b-4b5e-cfef861ab757; ezopvc_76345=1; ezovab_76345=vmod1-c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
age: 377
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cache-control: max-age=31536000
content-encoding: br
content-type: application/javascript
date: Sun, 29 Jan 2023 09:25:47 UTC
display: staticcontent_sol, orig_site_sol
etag: "25df358a6e0ce935496ce65500118788-gzip"
fastly-request-backend: fastly
fastly-sie: 86400.000
fastly-swr: 2592000.000
last-modified: Tue, 24 Jan 2023 19:08:54 GMT
response: 200
server: Apache/2.4.39 (Ubuntu)
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding,User-Agent,Origin
via: 1.1 F_wfe_production, 1.1 varnish, 1.1 varnish
x-amz-id-2: t4UdGwLRROKha2kERVO/t39fxg/PvuxINhXqpDuiuGNqAtxh5Qcz2KdF30nGeKKJUZlL6yoT11U=
x-amz-request-id: BSSYQTP31DANP7F7
x-amz-version-id: h_UkTybT_N67XduKOeHAL1ewZY6_XNmi
x-cache: HIT, MISS
x-cache-hits: 2, 0
x-ezoic-cdn: Hit ds;mm;07435f41396f9d0d69ca0e9919f646d7;2-76345-22;0cf08d7b-511f-4808-49d2-1676c158a5cd
x-middleton-display: staticcontent_sol, orig_site_sol
x-middleton-response: 200
x-origin-cache-control: max-age=31536000
x-rebelmouse-layouts-key: www.popdust.com,(null)
x-request-id: 475945f1-1cf9-425a-bffc-43b8069f9621
x-served-by: cache-iad-kjyo7100077-IAD, cache-fra-eddf8230044-FRA
x-sol: orig
x-timer: S1673376621.503125,VS0,VE278
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fwww.popdust.com%2F&domain=www.popdust.com&cw=1&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fwww.popdust.com%2F&domain=www.popdust.com&cw=1&lsw=1
IP
OPTIONS /sid/json?origin=prebid&topUrl=https%3A%2F%2Fwww.popdust.com%2F&domain=www.popdust.com&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.popdust.com/
Origin: https://www.popdust.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:49 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: GET
access-control-allow-origin: https://www.popdust.com
server-processing-duration-in-ticks: 598087
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
d.pub.network/v2/init?siteId=1990&env=PROD
200 OK 0 B URL HTTP/2 d.pub.network/v2/init?siteId=1990&env=PROD
IP
GET /v2/init?siteId=1990&env=PROD HTTP/1.1
Host: d.pub.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:48 GMT
set-cookie: _fsuid=3e394998-628e-4ca0-a622-31b5d56f900b; path=/; Domain=.pub.network; Max-Age=63113904; SameSite=None; Secure; HttpOnly=true;
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Accept-Encoding, User-Agent
access-control-allow-origin: https://www.popdust.com
access-control-allow-credentials: true
content-type: application/json
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
secure.quantserve.com/quant.js
200 OK 0 B URL HTTP/2 secure.quantserve.com/quant.js
IP
GET /quant.js HTTP/1.1
Host: secure.quantserve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:48 GMT
content-type: application/javascript
accept-ranges: bytes
cache-control: private, max-age=604800
content-encoding: gzip
etag: "OVi4z6W4qM+KoQEZlRgh5w=="
expires: Sun, 05 Feb 2023 09:25:48 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
id.hadron.ad.gt/v1/hadron.json?_it=prebid&partner_id=474&sync=0&domain=www.popdust.com&url=
200 OK 0 B URL HTTP/2 id.hadron.ad.gt/v1/hadron.json?_it=prebid&partner_id=474&sync=0&domain=www.popdust.com&url=
IP
GET /v1/hadron.json?_it=prebid&partner_id=474&sync=0&domain=www.popdust.com&url= HTTP/1.1
Host: id.hadron.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://www.popdust.com
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:50 GMT
content-type: application/json
cache-control: public,max-age=30
access-control-allow-origin: https://www.popdust.com
access-control-allow-credentials: true
vary: Origin
content-encoding: gzip
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7910ec3e486e0b06-OSL
X-Firefox-Spdy: h2
cdn.id5-sync.com/api/1.0/esp.js
200 OK 0 B URL HTTP/2 cdn.id5-sync.com/api/1.0/esp.js
IP
GET /api/1.0/esp.js HTTP/1.1
Host: cdn.id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popdust.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 09:25:51 GMT
content-type: text/javascript;charset=utf-8
x-amz-id-2: FVMlFSmcD0Wn/+rph/xJPSMD8h1xLItGxMiFojs1e+J1f7LO28QsQCtM5wu1mlkwy4pwPQtZ0SQ=
x-amz-request-id: H5PSQWN45SZ0RJ5Q
last-modified: Wed, 18 Jan 2023 10:47:58 GMT
etag: W/"854d94282c6b6d99cd8ba33bb311e621"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600
cf-cache-status: HIT
age: 1560
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
server: cloudflare
cf-ray: 7910ec476facb4f4-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
34.198.212.94
18.196.150.104
157.240.205.35
23.46.116.133
2.18.173.140
162.19.138.119
104.22.52.86
52.211.150.89
93.184.220.29
147.75.85.234
37.157.4.41