firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 04 Oct 2022 12:47:04 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: V7pZ4Fj8JsB3sQFrGXMMadGcNiBJwIpusUlwVe2Jh_c3BUcApAuZxQ==
Age: 3488
braincandy.net/
301 Moved Permanently 146 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 41b2fabc92d2dba77821d025177e6396
411f27bd9ca7dd6344c256a9f3b74a9d97ac58d6
8eb0c04292fb3acbff4b28e2bcf00d835144415bad1eac0ab8c3eb24c6990ed6
GET / HTTP/1.1
Host: braincandy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://braincandy.net/
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Tue, 04 Oct 2022 13:45:11 GMT
Content-Length: 146
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9955bda9c9ef64bc5700a14af0bae25e
8de7b7469e905af0374bdfcc3006bbb844f13e94
1f611155394fac39439b8ec8217d8cd493d6b588d372d264e0d66c03129c50c6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F611155394FAC39439B8EC8217D8CD493D6B588D372D264E0D66C03129C50C6"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12029
Expires: Tue, 04 Oct 2022 17:05:41 GMT
Date: Tue, 04 Oct 2022 13:45:12 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 74134730f642b6f6dfeca3ecc61a329e
668914cc93cceb123d199a45df13ad764704fa84
d681a4c2e20a6019c7e2d980cbfa77b34db9356899099296c3b8b4263ca5fb5f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D681A4C2E20A6019C7E2D980CBFA77B34DB9356899099296C3B8B4263CA5FB5F"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13271
Expires: Tue, 04 Oct 2022 17:26:23 GMT
Date: Tue, 04 Oct 2022 13:45:12 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: rb0JQH06fyt2W2ngb1QrSF+uP/dGjzTwg0TIfKM53kUOswaYmAfvp6LjLOObRzfM2VsENEbkzUM=
x-amz-request-id: DGPYEHXN8EWXGFM0
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 04 Oct 2022 12:51:21 GMT
age: 3231
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
etag: "6113f8408c59aebe188d6af273b90743"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 13:45:12 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 04 Oct 2022 13:29:33 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Tue, 04 Oct 2022 14:17:32 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: mRjZ6QY_GUlxVQdl7S8JN2Bmu7eqonLHesQwoLVjodfthHpgg-vkZQ==
Age: 940
braincandy.net/
200 OK 1.2 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 7a9f742ca89e1fe52ea00bcaa934b1d9
fcacac3bca83f3b3e1b667c8eba32e20c0fc34e8
4b7d3d6e88e4dcdb6015bd68ea1250872fd2a40b5bebd5412103607796356444
GET / HTTP/1.1
Host: braincandy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
cache-control: private
content-type: text/html
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
set-cookie: ASPSESSIONIDCUQSCQBC=HPLFOEGBKNNHPHGLDCNINPKP; secure; path=/
x-powered-by: ASP.NET
date: Tue, 04 Oct 2022 13:45:12 GMT
content-length: 1230
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 16ebfb2aa621547ecf581e26fc828a7d
f78993331f6f5b8af6409a9ad2fc50b77070f68a
0f81fd1d6be9ccc04b74f0348aafe642c7b9ab7dffb7e8a679b5d67cc2e5fac3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2756
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:13 GMT
Last-Modified: Tue, 04 Oct 2022 12:59:18 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
braincandy.net/js/checkfb.js
200 OK 622 B URL HTTP/2 braincandy.net/js/checkfb.js
IP
File type ASCII text, with CRLF line terminators
Hash 1922fc917840b21bcdc01ae79667612a
2d2fb807eefa36f803cb037337f04f013f6e61dd
2c8bab67a004dbe9c1304ab7731dd9931448a9616a2611f904e7e37a604a4c72
GET /js/checkfb.js HTTP/1.1
Host: braincandy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Cookie: ASPSESSIONIDCUQSCQBC=HPLFOEGBKNNHPHGLDCNINPKP
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 27 Aug 2020 05:02:33 GMT
accept-ranges: bytes
etag: "803ac7452f7cd61:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Tue, 04 Oct 2022 13:45:12 GMT
content-length: 622
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: lfvoZkxw7Mu/noTuWK48lQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: YFq4N2jGM1I0soOuJB71uq8ayV4=
braincandy.net/?6d73d7d9-trivia-template-
200 OK 11 kB URL HTTP/2 braincandy.net/?6d73d7d9-trivia-template-
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (562), with CRLF, LF line terminators
Hash 04f8d907f71eeb7944403cf9f22f5def
5c38080e86696393dc30baf909255fac1e54836d
ee1005b09e4ba77f7d9a4a3ddbb449237831c969ad07cde9951c5c1b2304d5a5
POST /?6d73d7d9-trivia-template- HTTP/1.1
Host: braincandy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 618
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Cookie: ASPSESSIONIDCUQSCQBC=HPLFOEGBKNNHPHGLDCNINPKP
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/html
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
set-cookie: ASPSESSIONIDCUQSCQBC=HAMFOEGBJFPMHJKEDHBCIHPB; secure; path=/
x-powered-by: ASP.NET
date: Tue, 04 Oct 2022 13:45:12 GMT
content-length: 10731
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9e40b2c69615f45f2bc898334ab3e343
6a569648ed10564e126d3bbf3f91352e6b3f6d4f
4f1d0982c58b9bbeaa266b99292baa1a00c9e39280f73d5a525722c851e15981
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9e40b2c69615f45f2bc898334ab3e343
6a569648ed10564e126d3bbf3f91352e6b3f6d4f
4f1d0982c58b9bbeaa266b99292baa1a00c9e39280f73d5a525722c851e15981
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9e40b2c69615f45f2bc898334ab3e343
6a569648ed10564e126d3bbf3f91352e6b3f6d4f
4f1d0982c58b9bbeaa266b99292baa1a00c9e39280f73d5a525722c851e15981
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9e40b2c69615f45f2bc898334ab3e343
6a569648ed10564e126d3bbf3f91352e6b3f6d4f
4f1d0982c58b9bbeaa266b99292baa1a00c9e39280f73d5a525722c851e15981
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9e40b2c69615f45f2bc898334ab3e343
6a569648ed10564e126d3bbf3f91352e6b3f6d4f
4f1d0982c58b9bbeaa266b99292baa1a00c9e39280f73d5a525722c851e15981
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
recirculation.spot.im/spot/sp_HQI9uHrd
302 Found 0 B URL HTTP/2 recirculation.spot.im/spot/sp_HQI9uHrd
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /spot/sp_HQI9uHrd HTTP/1.1
Host: recirculation.spot.im
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: CloudFront
date: Tue, 04 Oct 2022 13:45:14 GMT
content-length: 0
cloudfront-functions: generated-by-CloudFront-Functions
location: https://recirculation-cf.spot.im/empty.html
x-cache: FunctionGeneratedResponse from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HC8enfCta75V2m93kL-enPzuvNgFj03G6A-cc561lJ1VMttB_hErYw==
X-Firefox-Spdy: h2
braincandy.net/css/braincandy1-wide.css?1345
200 OK 6.0 kB URL HTTP/2 braincandy.net/css/braincandy1-wide.css?1345
IP
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash d19ac0f228e273066050a6e56b0a0671
d646fbe164ec5a12d72be7c96dad979b804ac2bf
4a98185bd5e5f7f76fc5b3868e43d3e51bdf0dbcccc2b0aa5f208ee8810c7b39
GET /css/braincandy1-wide.css?1345 HTTP/1.1
Host: braincandy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/?6d73d7d9-trivia-template-
Cookie: ASPSESSIONIDCUQSCQBC=HAMFOEGBJFPMHJKEDHBCIHPB
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-encoding: gzip
last-modified: Wed, 12 Feb 2020 17:52:19 GMT
accept-ranges: bytes
etag: "80cb662bcde1d51:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Tue, 04 Oct 2022 13:45:13 GMT
content-length: 6021
X-Firefox-Spdy: h2
braincandy.net/css/rrssb.css?x13
200 OK 1.5 kB URL HTTP/2 braincandy.net/css/rrssb.css?x13
IP
File type ASCII text, with CRLF line terminators
Hash 27cd24c7cc5fa8cf6f38480b7a0a5bd0
8e4239ca2df61c2f67225237908546b65dfe5637
3f69feeb2a761df92cda593ddde34403d208026327ea115ea1db5a93f9985b16
GET /css/rrssb.css?x13 HTTP/1.1
Host: braincandy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/?6d73d7d9-trivia-template-
Cookie: ASPSESSIONIDCUQSCQBC=HAMFOEGBJFPMHJKEDHBCIHPB
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-encoding: gzip
last-modified: Wed, 16 Oct 2019 03:11:00 GMT
accept-ranges: bytes
etag: "07ae755cf83d51:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Tue, 04 Oct 2022 13:45:13 GMT
content-length: 1539
X-Firefox-Spdy: h2
braincandy.net/css/signin.css?1345
200 OK 907 B URL HTTP/2 braincandy.net/css/signin.css?1345
IP
File type ASCII text, with CRLF line terminators
Hash 14663d9137d4a0c360194135fef1abd0
cc5d9bb81624820d650d76eeaadd03592046943e
80ca49a93263668128969c5c598da6e4274c46bd6a6e693a2d94f06f51196e81
GET /css/signin.css?1345 HTTP/1.1
Host: braincandy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/?6d73d7d9-trivia-template-
Cookie: ASPSESSIONIDCUQSCQBC=HAMFOEGBJFPMHJKEDHBCIHPB
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-encoding: gzip
last-modified: Wed, 16 Oct 2019 03:11:00 GMT
accept-ranges: bytes
etag: "07ae755cf83d51:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Tue, 04 Oct 2022 13:45:13 GMT
content-length: 907
X-Firefox-Spdy: h2
braincandy.net/js/checkeu.js?13
200 OK 339 B URL HTTP/2 braincandy.net/js/checkeu.js?13
IP
File type ASCII text, with CRLF line terminators
Hash 94e2dcf5f26bc2fb9be8dcc2d2791e38
7e2c53e84625304ff0333eb8e3d87822d5a89de7
89affc82244d7b3d1250729dba2e783e1c328c3415bd57450f882f2aa09ccee5
GET /js/checkeu.js?13 HTTP/1.1
Host: braincandy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/?6d73d7d9-trivia-template-
Cookie: ASPSESSIONIDCUQSCQBC=HAMFOEGBJFPMHJKEDHBCIHPB
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 16 Oct 2019 03:12:33 GMT
accept-ranges: bytes
etag: "cc25c18dcf83d51:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Tue, 04 Oct 2022 13:45:13 GMT
content-length: 339
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 53e0e5a2455fedae0d6308f91d41e445
237c2856f8a89ae3673ea909164557d65268c463
ddba9b3842f879168185b6607551069b312c44de4ec015ca4b43ad154d190bc8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
recirculation-cf.spot.im/empty.html
200 OK 421 B URL HTTP/2 recirculation-cf.spot.im/empty.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash bd8974a66ef8060b06fee632b90088a4
cde26a85de649d58ae3f8e680c494d1712987737
c27a24877447c58820f1d489773f9778d4a8cf97a1336dcc0980f6fc60821f65
GET /empty.html HTTP/1.1
Host: recirculation-cf.spot.im
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 421
last-modified: Mon, 02 Sep 2019 11:47:31 GMT
accept-ranges: bytes
server: AmazonS3
date: Tue, 04 Oct 2022 07:02:49 GMT
etag: "bd8974a66ef8060b06fee632b90088a4"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: saj_5z09Cv9nS2krV6TVKXfIaHUUEUeZq-lltPFZQoCG45yTE7RbwA==
age: 24149
X-Firefox-Spdy: h2
launcher.spot.im/spot/sp_HQI9uHrd
200 OK 69 kB URL HTTP/2 launcher.spot.im/spot/sp_HQI9uHrd
IP
File type Unicode text, UTF-8 text, with very long lines (52195)
Hash 14275e3da4c12d659ce6f5b393c2b977
0e536ce28e62ff84a46d8cc0eb73bab7600de66e
a8c1d13b16dee4d801fba780332664b6ff1d4dee281998319c1aa4e3916c368d
GET /spot/sp_HQI9uHrd HTTP/1.1
Host: launcher.spot.im
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 69334
last-modified: Tue, 04 Oct 2022 08:09:19 GMT
x-amz-server-side-encryption: AES256
content-encoding: br
x-amz-version-id: JdHepepgFKV5vNGQuEx_5r2vV2tdGNMu
accept-ranges: bytes
server: AmazonS3
date: Tue, 04 Oct 2022 13:45:14 GMT
cache-control: max-age=300
etag: "14275e3da4c12d659ce6f5b393c2b977"
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gPXWBYMPItbqy8BEj3nQXGpoFnarb45-0b5VTzz3Pnqw1IYi0qjrxA==
age: 42
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js
200 OK 33 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js
IP
File type ASCII text, with very long lines (32086)
Hash 430e927c980ad4079de727fa59dd93f2
891aaada9a55a91292999f6d50fd300439905982
e8728df8617340bd8c10bc8d27d3a725a48871a269c850e8598689938ec6e2ed
GET /ajax/libs/jquery/1.11.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33434
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 27 Sep 2022 20:55:30 GMT
expires: Wed, 27 Sep 2023 20:55:30 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 578984
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagservices.com/tag/js/gpt.js
200 OK 28 kB URL HTTP/2 www.googletagservices.com/tag/js/gpt.js
IP
File type ASCII text, with very long lines (45162)
Hash d88b0fad8d03ed8a2ca8e1f9f5879e93
5e223ef82bfc52e6217fd0e0d6dcc87bd85a4c7f
b13fa359ea5f5a48da754f205d5e432d76af61c32949de37e123972bd860400c
GET /tag/js/gpt.js HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 27731
date: Tue, 04 Oct 2022 13:45:14 GMT
expires: Tue, 04 Oct 2022 13:45:14 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1353 / 637 of 1000 / last-modified: 1664881750"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
code.jquery.com/ui/1.11.4/themes/smoothness/jquery-ui.css
200 OK 8.1 kB URL HTTP/2 code.jquery.com/ui/1.11.4/themes/smoothness/jquery-ui.css
IP
File type ASCII text, with very long lines (2363)
Hash 6c82a49e7983d483c0d8a2693d66a17b
6d6deea9c1f9d0b1ded69cc2b82b07d4e8e60952
763ce5616013ac40d27502cb40d92589c5ce9e2a8034692666734ece10671326
GET /ui/1.11.4/themes/smoothness/jquery-ui.css HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:14 GMT
content-encoding: gzip
content-length: 8056
content-type: text/css
last-modified: Wed, 16 Feb 2022 10:50:40 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd700-898c"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1664891114.dop227.sk1.t,1664891114.cds240.sk1.hn,1664891114.cds262.sk1.c
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9e40b2c69615f45f2bc898334ab3e343
6a569648ed10564e126d3bbf3f91352e6b3f6d4f
4f1d0982c58b9bbeaa266b99292baa1a00c9e39280f73d5a525722c851e15981
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9e40b2c69615f45f2bc898334ab3e343
6a569648ed10564e126d3bbf3f91352e6b3f6d4f
4f1d0982c58b9bbeaa266b99292baa1a00c9e39280f73d5a525722c851e15981
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 53e0e5a2455fedae0d6308f91d41e445
237c2856f8a89ae3673ea909164557d65268c463
ddba9b3842f879168185b6607551069b312c44de4ec015ca4b43ad154d190bc8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0ac04f7c449093fff4f846a7ae56cd4f
50aeb5664545a0dec4173920a274e906bcbcdf6f
18eff2566317aba7b70ee558e8cba42231eb4eae31e903501dc122c751d6993b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/hind/v16/5aU69_a8oxmIdGl4BA.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/hind/v16/5aU69_a8oxmIdGl4BA.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16216, version 1.0\012- data
Hash 4c5bc71b3cf6f2584725c0bb3e25d391
f051f482061dc48d09c328c45459dd04db5b5547
aca5dec430a7470ff1d8a16f9e7bb3ca30f2ff58f3bd60432cf1dddfa30c9d71
GET /s/hind/v16/5aU69_a8oxmIdGl4BA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16216
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 27 Sep 2022 17:27:03 GMT
expires: Wed, 27 Sep 2023 17:27:03 GMT
cache-control: public, max-age=31536000
age: 591491
last-modified: Tue, 26 Apr 2022 15:45:50 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/permanentmarker/v16/Fh4uPib9Iyv2ucM6pGQMWimMp004La2Cfw.woff2
200 OK 30 kB URL HTTP/2 fonts.gstatic.com/s/permanentmarker/v16/Fh4uPib9Iyv2ucM6pGQMWimMp004La2Cfw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 29564, version 1.0\012- data
Hash 1b66ccb164151a6cf698667c8b570cc6
f5617a0f087645703c874453960be6382c8a7427
4884fec2c73aa52a2461073c1b87d1ceb80f400520391b43f97ca7d3c39eeb24
GET /s/permanentmarker/v16/Fh4uPib9Iyv2ucM6pGQMWimMp004La2Cfw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 29564
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Oct 2022 04:35:17 GMT
expires: Sun, 01 Oct 2023 04:35:17 GMT
cache-control: public, max-age=31536000
age: 292197
last-modified: Tue, 19 Apr 2022 17:55:57 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/jura/v24/z7NOdRfiaC4Vd8hhoPzfb5vBTP1v7ZumR_g.woff2
200 OK 12 kB URL HTTP/2 fonts.gstatic.com/s/jura/v24/z7NOdRfiaC4Vd8hhoPzfb5vBTP1v7ZumR_g.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 12352, version 1.0\012- data
Hash 98d4eba80d0045e69a5769547770de46
8718e7db6988954c84f68cdbc5662347b49f4357
0e7d652dfec62ad3d633e84e42d02d82fe477378939481176ebc86dda527f8b6
GET /s/jura/v24/z7NOdRfiaC4Vd8hhoPzfb5vBTP1v7ZumR_g.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12352
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 29 Sep 2022 08:42:18 GMT
expires: Fri, 29 Sep 2023 08:42:18 GMT
cache-control: public, max-age=31536000
age: 450176
last-modified: Mon, 11 Jul 2022 19:14:57 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
netdna.bootstrapcdn.com/font-awesome/4.0.3/fonts/fontawesome-webfont.woff?v=4.0.3
200 OK 44 kB URL HTTP/2 netdna.bootstrapcdn.com/font-awesome/4.0.3/fonts/fontawesome-webfont.woff?v=4.0.3
IP
File type Web Open Font Format, TrueType, length 44432, version 1.0\012- data
Hash 3293616ec0c605c7c2db25829a0a509e
04c3bf56d87a0828935bd6b4aee859995f321693
0fd28fece9ebd606b8b071460ebd3fc2ed7bc7a66ef91c8834f11dfacab4a849
GET /font-awesome/4.0.3/fonts/fontawesome-webfont.woff?v=4.0.3 HTTP/1.1
Host: netdna.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://netdna.bootstrapcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:14 GMT
content-type: font/woff
content-length: 44432
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: "3293616ec0c605c7c2db25829a0a509e"
last-modified: Mon, 25 Jan 2021 22:04:53 GMT
cdn-cachedat: 08/20/2022 02:30:35
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 601
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: cbf0bec38329befe77dd6643c3dfa7dd
cdn-cache: HIT
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 754e5b58cc7ab50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0ac04f7c449093fff4f846a7ae56cd4f
50aeb5664545a0dec4173920a274e906bcbcdf6f
18eff2566317aba7b70ee558e8cba42231eb4eae31e903501dc122c751d6993b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
publisher-assets.spot.im/ad/event-tracking/pixel-ads-google-adsense.html
200 OK 0 B URL HTTP/2 publisher-assets.spot.im/ad/event-tracking/pixel-ads-google-adsense.html
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /ad/event-tracking/pixel-ads-google-adsense.html HTTP/1.1
Host: publisher-assets.spot.im
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 0
last-modified: Wed, 12 Aug 2020 13:25:53 GMT
accept-ranges: bytes
server: AmazonS3
date: Mon, 03 Oct 2022 15:40:22 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: XSd0UUW6S2Kq2dEKcYnauLG3V-7NM_7v9ygAVyJjRaI5fW6NZwQ0lQ==
age: 79528
X-Firefox-Spdy: h2
direct-events-collector.spot.im/api/v2/events?stream_name=init
204 No Content 0 B URL HTTP/2 direct-events-collector.spot.im/api/v2/events?stream_name=init
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/events?stream_name=init HTTP/1.1
Host: direct-events-collector.spot.im
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 238
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Tue, 04 Oct 2022 13:45:14 GMT
x-cache: Miss from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: yNylwMR6Y6nKd6YYlgfWbPLqDkhwgAqkwHG10YbJ8MxzmViK7FgalQ==
access-control-allow-origin: *
X-Firefox-Spdy: h2
braincandy.net/images/bcLogo2.png
200 OK 99 kB URL HTTP/2 braincandy.net/images/bcLogo2.png
IP
File type PNG image data, 500 x 177, 8-bit/color RGBA, non-interlaced\012- data
Hash dc424fc44f7738b1e15f2fa5b4eb4a78
63703b1980319670e320a67db1589b843393917a
25bfc4c32a75641ce91bc561de2f56bbf7ad94b0daf238e23473f47ec8540826
GET /images/bcLogo2.png HTTP/1.1
Host: braincandy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/?6d73d7d9-trivia-template-
Cookie: ASPSESSIONIDCUQSCQBC=HAMFOEGBJFPMHJKEDHBCIHPB
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Wed, 16 Oct 2019 03:12:32 GMT
accept-ranges: bytes
etag: "ef368dcf83d51:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Tue, 04 Oct 2022 13:45:13 GMT
content-length: 98932
X-Firefox-Spdy: h2
braincandy.net/ratio.png
200 OK 3.6 kB IP
File type PNG image data, 649 x 670, 8-bit/color RGBA, non-interlaced\012- data
Hash 816ce2a6b5fb2c80d4acce7a5e2fa67c
e8158e1140e750a0526778870039c30fb761a0d0
43a56f7425c0c4274da9f324fbf4b81d0fcc5943d83c4d7d964aa055655786cc
GET /ratio.png HTTP/1.1
Host: braincandy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/?6d73d7d9-trivia-template-
Cookie: ASPSESSIONIDCUQSCQBC=HAMFOEGBJFPMHJKEDHBCIHPB
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Wed, 16 Oct 2019 03:10:40 GMT
accept-ranges: bytes
etag: "c283534acf83d51:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Tue, 04 Oct 2022 13:45:13 GMT
content-length: 3618
X-Firefox-Spdy: h2
braincandy.net/js/rrssb.min.js
200 OK 1.9 kB URL HTTP/2 braincandy.net/js/rrssb.min.js
IP
File type ASCII text, with very long lines (5449), with no line terminators
Hash ebcac60feb85f7e12adbe39780827ef4
d7c55829848ae0a7eea3e8f091f647f5287a9b1f
b174dc78f35180abc38f025e298a7eb622c5062b57d64fe31360d555c609aa55
GET /js/rrssb.min.js HTTP/1.1
Host: braincandy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/?6d73d7d9-trivia-template-
Cookie: ASPSESSIONIDCUQSCQBC=HAMFOEGBJFPMHJKEDHBCIHPB
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 16 Oct 2019 03:12:33 GMT
accept-ranges: bytes
etag: "8026568dcf83d51:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Tue, 04 Oct 2022 13:45:13 GMT
content-length: 1925
X-Firefox-Spdy: h2
braincandy.net/js/jquery.easing.1.3.js
200 OK 1.7 kB URL HTTP/2 braincandy.net/js/jquery.easing.1.3.js
IP
File type ASCII text, with very long lines (1762), with CRLF line terminators
Hash dad05bc2d5087f6e0360153c15d74c47
ed40b4e4abcf2e65c37b4f3272f3bd7cacb8e02a
e7a10bc9ec9432805a76ab5d4ce791806b33dd1fd889fa70cdd3b4f753307cac
GET /js/jquery.easing.1.3.js HTTP/1.1
Host: braincandy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/?6d73d7d9-trivia-template-
Cookie: ASPSESSIONIDCUQSCQBC=HAMFOEGBJFPMHJKEDHBCIHPB
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 16 Oct 2019 03:12:33 GMT
accept-ranges: bytes
etag: "8026568dcf83d51:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Tue, 04 Oct 2022 13:45:13 GMT
content-length: 1698
X-Firefox-Spdy: h2
braincandy.net/js/BC.js
200 OK 859 B IP
File type ASCII text, with CRLF line terminators
Hash 8d24c87333b1cd6eb9f510fd02e451dd
998c4c98e8a3e6315029a6d2972fe251d6925aa0
8473d1f52135b43d70dc09dbb62a07645d2652e817521ca0af62bf1376eff6ab
GET /js/BC.js HTTP/1.1
Host: braincandy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/?6d73d7d9-trivia-template-
Cookie: ASPSESSIONIDCUQSCQBC=HAMFOEGBJFPMHJKEDHBCIHPB
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 16 Oct 2019 03:12:33 GMT
accept-ranges: bytes
etag: "8026568dcf83d51:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Tue, 04 Oct 2022 13:45:13 GMT
content-length: 859
X-Firefox-Spdy: h2
cloud1.braincandy.net/images/bouncearrow.gif
200 OK 4.0 kB URL HTTP/2 cloud1.braincandy.net/images/bouncearrow.gif
IP
File type GIF image data, version 89a, 60 x 50\012- data
Hash 91addbbeb2d148c67472b4c62c7666a8
a95c01489f48f1aa5328e682808dc11f2028be42
22200c292060dcd6dbba8ba1ca1f2546a32968b01a02410fc1c5545b7a25a1ad
GET /images/bouncearrow.gif HTTP/1.1
Host: cloud1.braincandy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: image/gif
last-modified: Wed, 16 Oct 2019 03:12:32 GMT
accept-ranges: bytes
etag: "a79fb8ccf83d51:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Tue, 04 Oct 2022 13:45:14 GMT
content-length: 3963
X-Firefox-Spdy: h2
braincandy.net/images/albert-signup3.png
200 OK 57 kB URL HTTP/2 braincandy.net/images/albert-signup3.png
IP
File type PNG image data, 350 x 175, 8-bit/color RGBA, non-interlaced\012- data
Hash fe65981ce1b7597049fc2558e8bc2e52
bf5070868a83d1d779b06ddff3c32877bca072a1
3910c68ffb5d3d3232bb2af0230b347ade3c3cc18cda7e12326fd93e3e8dcde8
GET /images/albert-signup3.png HTTP/1.1
Host: braincandy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/?6d73d7d9-trivia-template-
Cookie: ASPSESSIONIDCUQSCQBC=HAMFOEGBJFPMHJKEDHBCIHPB
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Wed, 16 Oct 2019 03:12:33 GMT
accept-ranges: bytes
etag: "31dd6f8dcf83d51:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Tue, 04 Oct 2022 13:45:13 GMT
content-length: 57078
X-Firefox-Spdy: h2
braincandy.net/sendEmail.asp?c=FCEC94&sw=1280&dName=&title=Can%20You%20Name%20the%20Make%20of%20These%20Classic%20Cars%20From%20the%20%2750s?
200 OK 3.3 kB URL HTTP/2 braincandy.net/sendEmail.asp?c=FCEC94&sw=1280&dName=&title=Can%20You%20Name%20the%20Make%20of%20These%20Classic%20Cars%20From%20the%20%2750s?
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash c6479b53bb998ee9cdd44702884fad94
bcb758de9ab4faca4b185465ba47c7981d57a16f
c218e843ca9c2cb8502a5abf49211cfd4653301b0a2a42c10e970797e009399d
GET /sendEmail.asp?c=FCEC94&sw=1280&dName=&title=Can%20You%20Name%20the%20Make%20of%20These%20Classic%20Cars%20From%20the%20%2750s? HTTP/1.1
Host: braincandy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/?6d73d7d9-trivia-template-
Cookie: ASPSESSIONIDCUQSCQBC=HAMFOEGBJFPMHJKEDHBCIHPB
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/html
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
set-cookie: ASPSESSIONIDCUQSCQBC=BBMFOEGBFKNLEMLLALPNAKLN; secure; path=/
x-powered-by: ASP.NET
date: Tue, 04 Oct 2022 13:45:13 GMT
content-length: 3338
X-Firefox-Spdy: h2
braincandy.net/signupx.asp?c=FCEC94&sw=1280
200 OK 4.6 kB URL HTTP/2 braincandy.net/signupx.asp?c=FCEC94&sw=1280
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (460), with CRLF line terminators
Hash 40b8b966fa8a07d56de365390e6ecc98
d1786e84ad035a2c9c36e73e88051f3377c15825
26dca5f70ffe529e6fce49cf1d02d32d0b0ac280c737ba4695aab76161791244
GET /signupx.asp?c=FCEC94&sw=1280 HTTP/1.1
Host: braincandy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/?6d73d7d9-trivia-template-
Cookie: ASPSESSIONIDCUQSCQBC=HAMFOEGBJFPMHJKEDHBCIHPB
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/html
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
set-cookie: ASPSESSIONIDCUQSCQBC=CBMFOEGBPBELINEGCFIPCLMI; secure; path=/
x-powered-by: ASP.NET
date: Tue, 04 Oct 2022 13:45:13 GMT
content-length: 4550
X-Firefox-Spdy: h2
braincandy.net/playNew.asp?id=a530ab60-276c-471e-9b34-39280b0f5b81&ia=nancyg15/6d73d7d9-trivia-template-&m=&c=FCEC94
200 OK 1.0 kB URL HTTP/2 braincandy.net/playNew.asp?id=a530ab60-276c-471e-9b34-39280b0f5b81&ia=nancyg15/6d73d7d9-trivia-template-&m=&c=FCEC94
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash d8b34e27f7c00b92d3515418a4e42559
36a299d837e182af778220e961b6146cf0cbcd3c
62b3cbe09b14055038d5787ccef91a5537d4f64365b293d501423c3dce22e2e4
GET /playNew.asp?id=a530ab60-276c-471e-9b34-39280b0f5b81&ia=nancyg15/6d73d7d9-trivia-template-&m=&c=FCEC94 HTTP/1.1
Host: braincandy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/?6d73d7d9-trivia-template-
Cookie: ASPSESSIONIDCUQSCQBC=HAMFOEGBJFPMHJKEDHBCIHPB
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/html
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
set-cookie: ASPSESSIONIDCUQSCQBC=DBMFOEGBFIIBDPEHBEHDNPDC; secure; path=/
x-powered-by: ASP.NET
date: Tue, 04 Oct 2022 13:45:13 GMT
content-length: 1021
X-Firefox-Spdy: h2
braincandy.net/images/header-bg11.png
200 OK 2.1 kB URL HTTP/2 braincandy.net/images/header-bg11.png
IP
File type PNG image data, 1610 x 130, 8-bit/color RGBA, non-interlaced\012- data
Hash 14be08a9161448e6e734bc5673aa5c96
953737943c1793a851a7c302af28c0c410dbd74a
94a06f5d67261e40bcc0bbc986b220c4cb4e94670daba28134dffb693a2d2d23
GET /images/header-bg11.png HTTP/1.1
Host: braincandy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/css/braincandy1-wide.css?1345
Cookie: ASPSESSIONIDCUQSCQBC=HAMFOEGBJFPMHJKEDHBCIHPB
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Wed, 16 Oct 2019 03:12:29 GMT
accept-ranges: bytes
etag: "a27c4b8bcf83d51:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Tue, 04 Oct 2022 13:45:13 GMT
content-length: 2059
X-Firefox-Spdy: h2
api-2-0.spot.im/v1.0.0/device-load
200 OK 36 B URL HTTP/2 api-2-0.spot.im/v1.0.0/device-load
IP
File type ASCII text, with no line terminators
Hash 3119c4c1a93203b3cd6f9ab575277811
e2a6d6ab3b7823a8cd7638d4c505ec20e7c4625a
3faf39dfd651b211118b43e6ad597beca7bf4f6cae976f5f033640ea43a123e1
GET /v1.0.0/device-load HTTP/1.1
Host: api-2-0.spot.im
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Origin: https://braincandy.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 36
date: Tue, 04 Oct 2022 13:45:14 GMT
server: fasthttp
access-control-allow-origin: https://braincandy.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: content-type,x-user-token,x-spot-id,x-post-id,x-access-token,x-openweb-token,x-spotim-page-view-id, x-spotim-device-v2, x-spotim-device-uuid, x-real-user-mode,x-auth-version,x-spotim-networkid,x-openweb-module-name,x-openweb-module-version
access-control-expose-headers: x-spotim-token, x-spotim-networkid, x-access-token, x-openweb-token, x-spotim-device-v2, x-spotim-device-uuid,x-reset-token
access-control-max-age: 86400
x-guid: 37659e0b-15f9-40e6-8fe9-62c0dd1d32b5
x-spotim-device-uuid: 37659e0b-15f9-40e6-8fe9-62c0dd1d32b5
set-cookie: device_uuid=37659e0b-15f9-40e6-8fe9-62c0dd1d32b5; expires=Wed, 04 Oct 2023 13:45:14 GMT; domain=.spot.im; path=/; secure; SameSite=None
x-cache: Miss from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0YDD9mWclK-5HcgylcBFDXqVX4eL170lJfgnswIiji03ROOYftljAw==
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 5e89969841b429e3ca44b320d17ea98a
30486a886b793ad5431b73d983d091487e5709c6
2d08365a447343168153cf1178b3b847377c2923bce06d9f6485ad08d3a06d34
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5586
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:15 GMT
Last-Modified: Tue, 04 Oct 2022 12:12:09 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
amplify.outbrain.com/cp/obtp.js
200 OK 3.2 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP
File type ASCII text, with very long lines (8072), with no line terminators
Hash 9b19340ef7db3cbb26aa923adb8dbe6e
082e699bca6e80ca6c72a43f2894f4a32e785e26
c042b8b199b2c08fa66f90753998544860e3f64c3a1f47754a66970b3b8c5b2a
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "51de2e10510f823326f9b30ea6068a2a:1655820557.452892"
Last-Modified: Tue, 21 Jun 2022 14:06:31 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Tue, 04 Oct 2022 14:05:15 GMT
Date: Tue, 04 Oct 2022 13:45:15 GMT
Content-Length: 3249
Connection: keep-alive
widgets.outbrain.com/outbrain.js
200 OK 74 kB URL HTTP/2 widgets.outbrain.com/outbrain.js
IP
File type ASCII text, with very long lines (1595)
Hash a43a55372a94e764b099dd5036febb8c
5573526bc5383c925528ff8d49a1565d6e7cd262
7b13c1f8edfc64de4926542f02468c5fd71185124b1bee23ce82245d9a2b6725
GET /outbrain.js HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
x-traceid: 7a120fbac8cafdc9903e4faa8cea0bb5
cache-control: max-age=14400
last-modified: Mon, 03 Oct 2022 06:39:34 GMT
etag: "16-oPGVMZcTZorlopHlI6Ws5gvya28"
vary: Accept-Encoding
content-encoding: gzip
content-length: 73643
date: Tue, 04 Oct 2022 13:45:15 GMT
edge-cache-tag: widget-cheetah
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
braincandy.net/css/signupMain.css?1445
200 OK 2.5 kB URL HTTP/2 braincandy.net/css/signupMain.css?1445
IP
File type ASCII text, with CRLF line terminators
Hash 113e3b4ed5f9a2316f19c05b96595edc
ecf763ec6f39949fb657d8d6cffb2f41a60bd45f
f69695442bb5b8ee758ae38ffa5032d2bfec43636e25495835155896b0824820
GET /css/signupMain.css?1445 HTTP/1.1
Host: braincandy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/signupx.asp?c=FCEC94&sw=1280
Cookie: ASPSESSIONIDCUQSCQBC=DBMFOEGBFIIBDPEHBEHDNPDC; _dd_s=logs=1&id=60aee9e4-663e-4441-81ff-994f9b605ecf&created=1664891114298&expire=1664892014298
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-encoding: gzip
last-modified: Wed, 16 Oct 2019 03:11:00 GMT
accept-ranges: bytes
etag: "07ae755cf83d51:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Tue, 04 Oct 2022 13:45:14 GMT
content-length: 2517
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 5e89969841b429e3ca44b320d17ea98a
30486a886b793ad5431b73d983d091487e5709c6
2d08365a447343168153cf1178b3b847377c2923bce06d9f6485ad08d3a06d34
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5586
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:15 GMT
Last-Modified: Tue, 04 Oct 2022 12:12:09 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash e1327a02d76346c7e23d114e4e508b30
195b8ad875ab8f7a7adf735f1f70aa02b3a2e1a3
331e67b451c6559915b12ab2df810ccdba73b3971c5301b2010b54dd6d391de2
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: 9b9hLDaYwlXMGegaCgrPyMKMi/TQfmVOwnlzz4Q5QVQxNKilqhogAcohQfeFWAXCw0IXfDSoktrQnnFeSkDxyg==
priority: u=3,i
content-length: 26840
x-fb-trip-id: 1904183273
date: Tue, 04 Oct 2022 13:45:15 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
braincandy.net/favicon.ico
200 OK 1.2 kB URL HTTP/2 braincandy.net/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 507b26d6f7d5250a75258768b8c65fe0
6ca239cc6072d55c35f1073cb5c8505f2727ab22
35fbba59ee2e24caf99fc44bc13d4dba4efc405fbda12f31da4f64aeffb6e1af
GET /favicon.ico HTTP/1.1
Host: braincandy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/?6d73d7d9-trivia-template-
Cookie: ASPSESSIONIDCUQSCQBC=DBMFOEGBFIIBDPEHBEHDNPDC; _dd_s=logs=1&id=60aee9e4-663e-4441-81ff-994f9b605ecf&created=1664891114298&expire=1664892014298
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/x-icon
last-modified: Wed, 30 Jun 2021 01:58:22 GMT
accept-ranges: bytes
etag: "0b3af67536dd71:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Tue, 04 Oct 2022 13:45:14 GMT
content-length: 1150
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 5e89969841b429e3ca44b320d17ea98a
30486a886b793ad5431b73d983d091487e5709c6
2d08365a447343168153cf1178b3b847377c2923bce06d9f6485ad08d3a06d34
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5586
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:15 GMT
Last-Modified: Tue, 04 Oct 2022 12:12:09 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5ba23234dfb31276cc3bf9a347508595
a225d0a9ecf5d7f0032816c6f3d4a5ae1f3b27a3
33558bed4856ac3f2a7267965521b316ccd3ccc669877994c6c590e2d2a1b559
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ff433c9569a3557d806b1480aeafece9
20bbd46383b85326837f45290ff87df708b3b310
e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12492
Expires: Tue, 04 Oct 2022 17:13:27 GMT
Date: Tue, 04 Oct 2022 13:45:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ff433c9569a3557d806b1480aeafece9
20bbd46383b85326837f45290ff87df708b3b310
e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12492
Expires: Tue, 04 Oct 2022 17:13:27 GMT
Date: Tue, 04 Oct 2022 13:45:15 GMT
Connection: keep-alive
connect.facebook.net/en_US/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js
IP
File type ASCII text, with very long lines (1961)
Hash 31ca78fa3d99ec6a727a34a5b0df3c68
2d6c1307e022fc8965935f0b3bbc55626eb8685f
3d9c93149d8e4f9b0f20cc166fa08b8d5455edb5288dc8a94bbc214bd1430d70
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 385c6e2b2c5b44307dba3cd6a19dbade
etag: "7b236f210fab8ab3295a207ba1e7a034"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Tue, 04 Oct 2022 13:58:47 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: Mcp4+j2Z7GpyejSlsN88aA==
x-fb-debug: c7fo08meBvZT7OQfA9DQtF9hwKi4vnrFOGjPs1xPfxxZ5r1Bqk+nUIr6aS1OMfnQ87gkTHc07TB65hORQFsWZQ==
priority: u=3,i
content-length: 1689
x-fb-trip-id: 1904183273
date: Tue, 04 Oct 2022 13:45:15 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Tue, 04 Oct 2022 12:41:09 GMT
expires: Tue, 04 Oct 2022 14:41:09 GMT
cache-control: public, max-age=7200
age: 3846
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ff433c9569a3557d806b1480aeafece9
20bbd46383b85326837f45290ff87df708b3b310
e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12492
Expires: Tue, 04 Oct 2022 17:13:27 GMT
Date: Tue, 04 Oct 2022 13:45:15 GMT
Connection: keep-alive
connect.facebook.net/en_US/all.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_US/all.js
IP
File type ASCII text, with very long lines (1961)
Hash 04f1d15c472f774beeacc64a1aa2b4a5
19861fac157dc1dd8f5b715bf79d234aa5ce8719
e1a38c5d909bde6f6ffd12175129ba7f9e6be3e87d7bae0fd5864e9a536f356c
GET /en_US/all.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 56ca82c80cefe7b8dbc5190acba60f7c
etag: "df668d1426f0f54a317739f14ff35aa5"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Tue, 04 Oct 2022 14:05:02 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: BPHRXEcvd0vurMZKGqK0pQ==
x-fb-debug: 1NChO0gbGWz7nVqvYmUziRMQxoIwzFPpicrooMs2h2N7aanBIzBwxU9PpS9HJUNkylq7e9WvBtL2uudJvrWWrQ==
content-length: 1686
x-fb-trip-id: 1904183273
date: Tue, 04 Oct 2022 13:45:15 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg
200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 206fb65e75dbadf119512f71e0b78402
58ff0bf8ce7528b303d28bab01a80ad721705569
56c8d5f3b3060ee54bf81995269b86c070855d8c33bf437161339a45b309703f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6315
x-amzn-requestid: 6aa75b16-32e4-48a7-9fb0-9e3d5528c2d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWSdsHUnIAMFXtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338cabd-742d8a436403683e0cd9368f;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 23:18:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5sAzc5Ewv4g6Wqq6JJiLylG3Jyy_nlWrr5Oteeo6ebEgq7Rvss4XaQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 04:42:53 GMT
age: 32542
etag: "58ff0bf8ce7528b303d28bab01a80ad721705569"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ff433c9569a3557d806b1480aeafece9
20bbd46383b85326837f45290ff87df708b3b310
e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12492
Expires: Tue, 04 Oct 2022 17:13:27 GMT
Date: Tue, 04 Oct 2022 13:45:15 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 5e89969841b429e3ca44b320d17ea98a
30486a886b793ad5431b73d983d091487e5709c6
2d08365a447343168153cf1178b3b847377c2923bce06d9f6485ad08d3a06d34
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5586
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:15 GMT
Last-Modified: Tue, 04 Oct 2022 12:12:09 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a61745f-0c9b-404a-ba22-0a69cf2f0383.jpeg
200 OK 4.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a61745f-0c9b-404a-ba22-0a69cf2f0383.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6779181f9c06975f2a662da743893939
585e7146fd24cdc2496b05baafea04091dc541e2
8e9a9f92fd89b7cdce77884ccd76b83ab82d28f125ebfc1cb0d371d4046b7985
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a61745f-0c9b-404a-ba22-0a69cf2f0383.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4858
x-amzn-requestid: fb21c414-2994-444a-a838-e643fd05b171
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpvTEfPoAMFfeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5661-593dd8043b0490e7301cac0d;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:38:41 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: MiSh_FjAciKCaOakY2mM_EHBN1Z6GIDYIP8mwS4ikkrToQN3Ktsv2g==
via: 1.1 773ca14e6bd4bf9244988cb69fc9dca8.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:56:46 GMT
age: 56909
etag: "585e7146fd24cdc2496b05baafea04091dc541e2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdb412b7-1bf6-4a48-b9f1-b171f540e434.jpeg
200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdb412b7-1bf6-4a48-b9f1-b171f540e434.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 24a4a122273ef9f772852031eb13114a
c20f1fac9020eb4bd6c84583f73872979639b991
8e1ffbed5f156637ed2f22e81d03f6d85eff0c28237c1639ea5f977e92ee7b70
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdb412b7-1bf6-4a48-b9f1-b171f540e434.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4151
x-amzn-requestid: f709a11e-cbea-4965-8502-94ddbd8768bb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpvSF3YIAMFdow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5661-29bfa31d51e8f60b38136dba;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:38:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 7H1QKlOtoBoVz93G5lddxHSGiTjtMnHJCZX5FhwqhNPkspslaDoFQA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:57:01 GMT
age: 56894
etag: "c20f1fac9020eb4bd6c84583f73872979639b991"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
embed.playbuzz.com/sdk.js
200 OK 10 kB URL HTTP/2 embed.playbuzz.com/sdk.js
IP
File type ASCII text, with very long lines (40599)
Hash c8d3836403ed43362bd08a03d5e6d6c7
f372813a8739fad499bd2ff594fc90eb7631a320
adfc028a3a92937b1e5f952e9a3a95ee2cab42bd4b955e6ea2a994b4dab5f54a
GET /sdk.js HTTP/1.1
Host: embed.playbuzz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
server: nginx
access-control-allow-origin: *
access-control-allow-headers: Accept, Authorization, Content-Type, X-PB-Referer
access-control-allow-methods: GET, POST, PUT, DELETE
access-control-max-age: 600
etag: W/"a622-5srExjqc/LuV1yzyWw6akncUEfA"
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 04 Oct 2022 13:45:15 GMT
age: 31693
x-surrogate-key: SDK-for-external-purge
x-served-by: cache-iad-kcgs7200047-IAD, cache-bma1655-BMA
x-cache: HIT, HIT
x-cache-hits: 3128, 1
x-timer: S1664891115.205866,VS0,VE5
vary: Accept-Encoding
content-length: 10388
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ff433c9569a3557d806b1480aeafece9
20bbd46383b85326837f45290ff87df708b3b310
e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12492
Expires: Tue, 04 Oct 2022 17:13:27 GMT
Date: Tue, 04 Oct 2022 13:45:15 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8641c47a-9aff-4f73-bb07-6770cbbcc8d6.jpeg
200 OK 5.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8641c47a-9aff-4f73-bb07-6770cbbcc8d6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6c6882c60d7ca6f918c77104e3ad1d52
20ef861be49c652a938e0145e4ca3a60159367e2
861f5870990fbd2939d151ae18384cf311e87067ca9a50818efe0c2d51b83088
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8641c47a-9aff-4f73-bb07-6770cbbcc8d6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5504
x-amzn-requestid: 37405eb0-5c75-46a9-84c0-e8ed726995d8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpHvHPvoAMF3mg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5564-77fd550b58af612525e74761;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:34:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Ovm2wuk28PygH4EZNEUoPchoHQggWCyXbYHOjMV1tZmfyDrL6PjPZA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 22:29:19 GMT
age: 54956
etag: "20ef861be49c652a938e0145e4ca3a60159367e2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F545190f2-96f3-40f8-bd46-cebe7171aee7.webp
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F545190f2-96f3-40f8-bd46-cebe7171aee7.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d8c08f8066cc732de8befd6ccd629a95
22aab05208a01ae5def4d63dc145085630f57bcb
f8a560a0563518d992d0bd2655d2b5c406435a18e874ca00b51374d2ff901770
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F545190f2-96f3-40f8-bd46-cebe7171aee7.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9917
x-amzn-requestid: 2dff93d9-795d-4885-9b82-610b0d235a82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpvTGEnIAMF1zg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5661-117afa703663ada75627792c;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:38:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: p5nOqBojKO6S-c_DxIu8B3p-NK0pzRHkz0DOPeyv7PQt9h0x1jdtoQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:55:54 GMT
age: 56961
etag: "22aab05208a01ae5def4d63dc145085630f57bcb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fec31ab6c-46f2-4d77-a807-9f14bb5073bc.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fec31ab6c-46f2-4d77-a807-9f14bb5073bc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 54b3ef7aa50273b78b59c24511b0c1f9
e2ea2ef6805e391c497e62e101e76a0bdecfce64
296e8954022d5160137b3e02ab5085a15cee7c23cd6d4ca61b36880706062457
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fec31ab6c-46f2-4d77-a807-9f14bb5073bc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11955
x-amzn-requestid: ce6bbe93-95b0-4b6e-a8bc-012796485e67
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zcqb9FUtoAMF0WQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b577f-59dc0a18523f900a059aa5df;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:43:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: tJwzKfs7HnQ7dVcINwnlzxTChXiEi4JPj8jrS8p5KhurRx_o3ZVOZQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 22:10:59 GMT
etag: "e2ea2ef6805e391c497e62e101e76a0bdecfce64"
content-type: image/jpeg
age: 56056
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5ba23234dfb31276cc3bf9a347508595
a225d0a9ecf5d7f0032816c6f3d4a5ae1f3b27a3
33558bed4856ac3f2a7267965521b316ccd3ccc669877994c6c590e2d2a1b559
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
api-2-0.spot.im/v1.0.0/config/ab_test/sp_HQI9uHrd/FCEC94
200 OK 0 B URL HTTP/2 api-2-0.spot.im/v1.0.0/config/ab_test/sp_HQI9uHrd/FCEC94
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1.0.0/config/ab_test/sp_HQI9uHrd/FCEC94 HTTP/1.1
Host: api-2-0.spot.im
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type,x-spotim-device-uuid,x-spotim-page-view-id
Referer: https://braincandy.net/
Origin: https://braincandy.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 0
date: Tue, 04 Oct 2022 13:45:15 GMT
server: fasthttp
access-control-allow-origin: https://braincandy.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: content-type,x-user-token,x-spot-id,x-post-id,x-access-token,x-openweb-token,x-spotim-page-view-id, x-spotim-device-v2, x-spotim-device-uuid, x-real-user-mode,x-auth-version,x-spotim-networkid,x-openweb-module-name,x-openweb-module-version
access-control-expose-headers: x-spotim-token, x-spotim-networkid, x-access-token, x-openweb-token, x-spotim-device-v2, x-spotim-device-uuid,x-reset-token
access-control-max-age: 86400
x-cache: Miss from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xk1P8lkHKlXMyeHzKri-h2WGjA6lBCz_v-8yf5ekc123W23elSunaw==
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/html/r20220928/r20190131/zrt_lookup.html
200 OK 4.4 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/html/r20220928/r20190131/zrt_lookup.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1731)
Hash 682bf699cccbc0ff817e1fcb7b95262a
11ad3edf0008f52b733c2d6d7199e1f052318d58
bd42f773d589f85cf6884d7893746d5d4e0c082f78e1c80511cf3aefa1c69a0f
GET /pagead/html/r20220928/r20190131/zrt_lookup.html HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 4420
x-xss-protection: 0
date: Tue, 04 Oct 2022 13:35:27 GMT
expires: Tue, 18 Oct 2022 13:35:27 GMT
cache-control: public, max-age=1209600
age: 588
etag: 9671129459699598864
content-type: text/html; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.ex.co/pb-story/production/be0891ff739b78b7e3603db9f85d5ca2d0946e21-2022-09-13-14-09-51/story-viewer.js
200 OK 147 kB URL HTTP/2 static.ex.co/pb-story/production/be0891ff739b78b7e3603db9f85d5ca2d0946e21-2022-09-13-14-09-51/story-viewer.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (21998)
Size 147 kB (146813 bytes)
Hash 31b9268915de9abc5750531d69855ec4
d3b4caed7566fb9b60fea4fd0fc4017b9fe20dfc
41bf5e8c3d5c505726624ddbf15e62b8230bcbbc747e30cf185d3449c9fc0281
GET /pb-story/production/be0891ff739b78b7e3603db9f85d5ca2d0946e21-2022-09-13-14-09-51/story-viewer.js HTTP/1.1
Host: static.ex.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 13 Sep 2022 14:09:52 GMT
etag: "31b9268915de9abc5750531d69855ec4"
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
content-length: 146813
cache-control: must-revalidate, proxy-revalidate, max-age=604800, s-maxage=31536000
expires: Tue, 11 Oct 2022 13:45:15 GMT
date: Tue, 04 Oct 2022 13:45:15 GMT
vary: Accept-Encoding
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST
access-control-allow-origin: *
content-type: application/x-javascript;charset=utf-8
X-Firefox-Spdy: h2
b-code.liadm.com/sync-container.js
200 OK 5.9 kB URL HTTP/2 b-code.liadm.com/sync-container.js
IP
File type ASCII text, with very long lines (5904), with no line terminators
Hash ae5e94de938b0387eda6df8f20da811a
a12f444569d8e5a27b3af731f569b7821c39d0f9
58a07739b05fec4d319e4d5c6b1fa4ac79e2a625e08ab3f303929b77fde5bdf4
GET /sync-container.js HTTP/1.1
Host: b-code.liadm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 5904
date: Sun, 04 Sep 2022 17:05:41 GMT
last-modified: Tue, 10 May 2022 11:48:07 GMT
etag: "ae5e94de938b0387eda6df8f20da811a"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=2592000
x-amz-version-id: WIo1DFPCLgnYZuB8yv1dFIDWe1bYBj2G
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7CC6kST-fBAXn8NGtp2SCwtmPfKuu7LU3HDpUCeNbp6K5vabVKw7Aw==
age: 2579975
X-Firefox-Spdy: h2
widget-pixels.outbrain.com/widget/detect/px.gif?ch=1
200 OK 43 B URL HTTP/2 widget-pixels.outbrain.com/widget/detect/px.gif?ch=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /widget/detect/px.gif?ch=1 HTTP/1.1
Host: widget-pixels.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-length: 43
content-type: image/gif
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3:1601475749.911431"
last-modified: Wed, 30 Sep 2020 14:22:29 GMT
server: AkamaiNetStorage
cache-control: max-age=2592000
expires: Thu, 03 Nov 2022 13:45:15 GMT
date: Tue, 04 Oct 2022 13:45:15 GMT
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
connect.facebook.net/en_US/all.js?hash=9c4984a7a54bd09dd1aa652b58906bec
200 OK 88 kB URL HTTP/2 connect.facebook.net/en_US/all.js?hash=9c4984a7a54bd09dd1aa652b58906bec
IP
File type ASCII text, with very long lines (18605)
Hash 3852c5287082c5186006df35de62cb12
94fb5791a8231de4f78b8a7627e0be9d2eb9fae2
6d58c738f86b3ab1dc79d9c35516999aca5c332ba0c82289034e980db65a3a17
GET /en_US/all.js?hash=9c4984a7a54bd09dd1aa652b58906bec HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: d799f2b9c5074bf7f3fbe965ae43550d
etag: "5ec9964a10f1b9dfc8a52b1601b0041f"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Wed, 04 Oct 2023 12:34:21 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: OFLFKHCCxRhgBt813mLLEg==
x-fb-debug: HFHBSUOtj8xaiDhiJW6pFzcqjF+GFSkSZRMp9NXcqtx+o3IQnd9QKI76YugOHwjbAP55RllksWRdZXVB5/2aJA==
priority: u=3,i
content-length: 88247
x-fb-trip-id: 1904183273
date: Tue, 04 Oct 2022 13:45:15 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
embed.playbuzz.com/html?id=a530ab60-276c-471e-9b34-39280b0f5b81
200 OK 30 kB URL HTTP/2 embed.playbuzz.com/html?id=a530ab60-276c-471e-9b34-39280b0f5b81
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (63844)
Hash a6a9ccfd0a1c729dd000944248cfc2ab
08c66552fbf3ee7efaca77969bdf73fa7ee05f17
41eb907365bd80866442aab1eea2536dde50de430e1d66c2148e104588d3a4fc
GET /html?id=a530ab60-276c-471e-9b34-39280b0f5b81 HTTP/1.1
Host: embed.playbuzz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
server: nginx
access-control-allow-origin: *
access-control-allow-headers: Accept, Authorization, Content-Type, X-PB-Referer
access-control-allow-methods: GET, POST, PUT, DELETE
access-control-max-age: 600
x-pb-os: windows
x-pb-platform: desktop
x-pb-browser: firefox
etag: W/"31381-YrShiVGONJFJKk4FnMqTcp7ThF4"
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 04 Oct 2022 13:45:15 GMT
age: 0
x-surrogate-key: a530ab60-276c-471e-9b34-39280b0f5b81 story 12313cf8-5f5a-40e9-ba07-f42f8c46fb0a 098d4e5b-6fe2-4da2-9275-8682bc20faec braincandy.net playbuzz6
x-served-by: cache-iad-kcgs7200128-IAD, cache-bma1652-BMA
x-cache: HIT, MISS
x-cache-hits: 3, 0
x-timer: S1664891115.378121,VS0,VE104
vary: X-PB-Campaign,X-PB-Os,X-PB-Platform,X-PB-Browser, Accept-Encoding
content-length: 30254
X-Firefox-Spdy: h2
securepubads.g.doubleclick.net/pagead/ppub_config?ippd=braincandy.net
200 OK 107 B URL HTTP/2 securepubads.g.doubleclick.net/pagead/ppub_config?ippd=braincandy.net
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 17435e9a5929a3ab26d172978058b43f
bf7b2fb611bce62f7e33878bb20a4527365f6f60
992f0d507db8c1432ac552db67d1475f0bc701f184ed973f546b7279b396b2e9
GET /pagead/ppub_config?ippd=braincandy.net HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
date: Tue, 04 Oct 2022 13:45:15 GMT
expires: Tue, 04 Oct 2022 13:45:15 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 107
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 04-Oct-2022 14:00:15 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tcheck.outbrainimg.com/tcheck/check/YnJhaW5jYW5keS5uZXQ=
200 OK 16 B URL HTTP/1.1 tcheck.outbrainimg.com/tcheck/check/YnJhaW5jYW5keS5uZXQ=
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash ce08a60aa308225db15c98edf4ae2447
bacf25489bad0312aa2f37fc735fa7e57b2d7306
929701ed632814943e3df803ddd9e3f179ccf889c0ad7b7f3392bd8d109b174f
GET /tcheck/check/YnJhaW5jYW5keS5uZXQ= HTTP/1.1
Host: tcheck.outbrainimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
Content-Length: 16
X-TraceId: 8c94d11942ec18ad7795b958d85fadaa
ETag: W/"10-us8lSJutAxKqLzf8c1+n5XstcwY"
Cache-Control: max-age=15920
Expires: Tue, 04 Oct 2022 18:10:35 GMT
Date: Tue, 04 Oct 2022 13:45:15 GMT
Connection: keep-alive
Access-Control-Max-Age: 43200
Access-Control-Allow-Credentials: false
Access-Control-Allow-Methods: GET,POST
Access-Control-Allow-Origin: *
securepubads.g.doubleclick.net/gpt/pubads_impl_2022092801.js?cb=31070024
200 OK 131 kB URL HTTP/2 securepubads.g.doubleclick.net/gpt/pubads_impl_2022092801.js?cb=31070024
IP
File type ASCII text, with very long lines (65439)
Size 131 kB (130694 bytes)
Hash 9d25851cd9c5a310810bedb8595743de
af17794471dbe4c15882c3b96eeaeb08a544c925
82016341989e5af631c47700daacdc9fb8566baf5fcf56c847a5699570f28175
GET /gpt/pubads_impl_2022092801.js?cb=31070024 HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 130694
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Oct 2022 16:00:22 GMT
expires: Sun, 01 Oct 2023 16:00:22 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Wed, 28 Sep 2022 08:38:16 GMT
content-type: text/javascript
age: 251093
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash 93f4e1861d5d16b8181d9a11e6d88a53
f556635f5409767fefb92c926e75d9191632fd9a
d942f2b00e9de83e0facffcd895b1f81de7e476ae8c0362d68fcf168f43ef0b0
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4732
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:15 GMT
Last-Modified: Tue, 04 Oct 2022 12:26:23 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
status.thawte.com/
200 OK 471 B IP
Hash 93f4e1861d5d16b8181d9a11e6d88a53
f556635f5409767fefb92c926e75d9191632fd9a
d942f2b00e9de83e0facffcd895b1f81de7e476ae8c0362d68fcf168f43ef0b0
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4732
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:15 GMT
Last-Modified: Tue, 04 Oct 2022 12:26:23 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
status.thawte.com/
200 OK 471 B IP
Hash 93f4e1861d5d16b8181d9a11e6d88a53
f556635f5409767fefb92c926e75d9191632fd9a
d942f2b00e9de83e0facffcd895b1f81de7e476ae8c0362d68fcf168f43ef0b0
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5711
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:15 GMT
Last-Modified: Tue, 04 Oct 2022 12:10:04 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
status.thawte.com/
200 OK 471 B IP
Hash 93f4e1861d5d16b8181d9a11e6d88a53
f556635f5409767fefb92c926e75d9191632fd9a
d942f2b00e9de83e0facffcd895b1f81de7e476ae8c0362d68fcf168f43ef0b0
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2103
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:15 GMT
Last-Modified: Tue, 04 Oct 2022 13:10:12 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 6ca435d044417745e0882b61ffc35008
0dbf43ac240a457662472f5fbf76b6b85db909e7
76799e0a5e5d1e0bc15bb633ed35ec3a3bd6f57b6f82ed5a412b243d7cae2f3b
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 04 Oct 2022 13:45:15 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 04 Oct 2022 04:51:04 GMT
Expires: Wed, 05 Oct 2022 04:51:04 GMT
ETag: "0dbf43ac240a457662472f5fbf76b6b85db909e7"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
www.facebook.com/tr/?id=136604453636163&ev=PageView&dl=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&rl=https%3A%2F%2Fbraincandy.net%2F&if=false&ts=1664891115128&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.1.1664891115128.1357938427&it=1664891114728&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=136604453636163&ev=PageView&dl=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&rl=https%3A%2F%2Fbraincandy.net%2F&if=false&ts=1664891115128&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.1.1664891115128.1357938427&it=1664891114728&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=136604453636163&ev=PageView&dl=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&rl=https%3A%2F%2Fbraincandy.net%2F&if=false&ts=1664891115128&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.1.1664891115128.1357938427&it=1664891114728&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
date: Tue, 04 Oct 2022 13:45:15 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c8ba09e28963a711c7b2ce6c91a3a3a3
7cc64a4bf1691002ed65627d8f5bccd7d742721e
e029fc044883da7fbfd828a7c98822fa3bc814ff7e75abf7a7bcbaa64cb395ba
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e13df37c7a0102aa69d97512e4f3bad4
2c3019bef2f4bc34b3f3dc212b30d4fad04f8b37
cfbc8bfd83a8eb63bf5d189e398e1373222f1d1bde223fba70e3c7b560c708aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 129fe858bf2aa7291fd2c6dd4cf9d226
e3e048b964b851ebbdcfb5bd80ebdbad13720cf6
addc7e4ddab73c8c7ee50f6d33fc1e4ff73b71cc014e481049a393c3b87b0924
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
partner.googleadservices.com/gampad/cookie.js?domain=braincandy.net&callback=_gfp_s_&client=ca-pub-3297660157133908
200 OK 201 B URL HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=braincandy.net&callback=_gfp_s_&client=ca-pub-3297660157133908
IP
File type ASCII text, with no line terminators
Hash dfc76b24f0c7faa9c178fc599fccce07
dc0ef43f9df31d971388f575ba13274bcddc408d
c917ec910032587672886c33d2518007b8db62eb2a4fd2718e8221f27605d779
GET /gampad/cookie.js?domain=braincandy.net&callback=_gfp_s_&client=ca-pub-3297660157133908 HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 04 Oct 2022 13:45:15 GMT
server: cafe
cache-control: private
content-length: 201
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
prd-collector-platform.ex.co/main/events
200 OK 0 B URL HTTP/2 prd-collector-platform.ex.co/main/events
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /main/events HTTP/1.1
Host: prd-collector-platform.ex.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain;charset=UTF-8
Content-Length: 331
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:15 GMT
content-type: text/plain; charset=utf-8
content-length: 0
vary: Origin
access-control-allow-origin: https://braincandy.net
access-control-allow-credentials: true
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=braincandy.net
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=braincandy.net
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=braincandy.net HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 04 Oct 2022 13:45:15 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=braincandy.net
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=braincandy.net
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=braincandy.net HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 04 Oct 2022 13:45:15 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tr.outbrain.com/unifiedPixel?marketerId=007f266ee8a5533b1005bf996bff48b066&obApiVersion=1.1&obtpVersion=1.8.2&name=PAGE_VIEW&dl=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&optOut=false&bust=09846550936869911&referrer=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-
200 OK 60 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?marketerId=007f266ee8a5533b1005bf996bff48b066&obApiVersion=1.1&obtpVersion=1.8.2&name=PAGE_VIEW&dl=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&optOut=false&bust=09846550936869911&referrer=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb0fc5c090282e372b8bf8ff13ae3ee2
2de3834253ece606ce4d2a6f10a59654b6fa378b
90a8ffa59ad6227daafa10083d4cff2e9b295c9c82135b5f5cedd65b2e7c8ceb
GET /unifiedPixel?marketerId=007f266ee8a5533b1005bf996bff48b066&obApiVersion=1.1&obtpVersion=1.8.2&name=PAGE_VIEW&dl=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&optOut=false&bust=09846550936869911&referrer=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template- HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 13:45:15 GMT
Content-Type: image/gif;
Content-Length: 60
Cache-Control: no-cache
X-TraceId: f9e126ace19a0377284c1075652aef49
content-encoding: gzip
tr.outbrain.com/cachedClickId?marketerId=007f266ee8a5533b1005bf996bff48b066
200 OK 56 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=007f266ee8a5533b1005bf996bff48b066
IP
File type ASCII text, with no line terminators
Hash 77fbe8ab311fa20557d95906363035ed
5806df80f09a37e070d5f37c49f19797c2763fd0
4fa9f4ca5bfa56b9f8467324e3654f4a717dcd40b70c05b538092d8a101b0599
GET /cachedClickId?marketerId=007f266ee8a5533b1005bf996bff48b066 HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 13:45:15 GMT
Content-Type: application/javascript
Content-Length: 56
X-TraceId: 62137f31ad101dabc493e9a2614e7a7d
content-encoding: gzip
tr.outbrain.com/unifiedPixel?marketerId=007f266ee8a5533b1005bf996bff48b066&obApiVersion=1.1&obtpVersion=1.8.2&name=PAGE_VIEW&dl=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&optOut=false&bust=05459853371857875&referrer=https%3A%2F%2Fbraincandy.net%2F
200 OK 60 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?marketerId=007f266ee8a5533b1005bf996bff48b066&obApiVersion=1.1&obtpVersion=1.8.2&name=PAGE_VIEW&dl=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&optOut=false&bust=05459853371857875&referrer=https%3A%2F%2Fbraincandy.net%2F
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb0fc5c090282e372b8bf8ff13ae3ee2
2de3834253ece606ce4d2a6f10a59654b6fa378b
90a8ffa59ad6227daafa10083d4cff2e9b295c9c82135b5f5cedd65b2e7c8ceb
GET /unifiedPixel?marketerId=007f266ee8a5533b1005bf996bff48b066&obApiVersion=1.1&obtpVersion=1.8.2&name=PAGE_VIEW&dl=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&optOut=false&bust=05459853371857875&referrer=https%3A%2F%2Fbraincandy.net%2F HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 13:45:15 GMT
Content-Type: image/gif;
Content-Length: 60
Cache-Control: no-cache
X-TraceId: 9be81d37b47c61083e9ab67a21dc9742
content-encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c8ba09e28963a711c7b2ce6c91a3a3a3
7cc64a4bf1691002ed65627d8f5bccd7d742721e
e029fc044883da7fbfd828a7c98822fa3bc814ff7e75abf7a7bcbaa64cb395ba
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e13df37c7a0102aa69d97512e4f3bad4
2c3019bef2f4bc34b3f3dc212b30d4fad04f8b37
cfbc8bfd83a8eb63bf5d189e398e1373222f1d1bde223fba70e3c7b560c708aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 129fe858bf2aa7291fd2c6dd4cf9d226
e3e048b964b851ebbdcfb5bd80ebdbad13720cf6
addc7e4ddab73c8c7ee50f6d33fc1e4ff73b71cc014e481049a393c3b87b0924
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tr.outbrain.com/cachedClickId?marketerId=007f266ee8a5533b1005bf996bff48b066
200 OK 56 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=007f266ee8a5533b1005bf996bff48b066
IP
File type ASCII text, with no line terminators
Hash 77fbe8ab311fa20557d95906363035ed
5806df80f09a37e070d5f37c49f19797c2763fd0
4fa9f4ca5bfa56b9f8467324e3654f4a717dcd40b70c05b538092d8a101b0599
GET /cachedClickId?marketerId=007f266ee8a5533b1005bf996bff48b066 HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 13:45:15 GMT
Content-Type: application/javascript
Content-Length: 56
X-TraceId: 89b80520d855ff2bebdb0c77e7312bf7
content-encoding: gzip
htlb.casalemedia.com/openrtb/pbjs?s=292737&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%22172ef42585e07348%22%2C%22site%22%3A%7B%22ref%22%3A%22https%3A%2F%2Fbraincandy.net%2F%22%2C%22page%22%3A%22https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22msd%22%3A0%2C%22msi%22%3A0%2C%22mfu%22%3A0%2C%22bu%22%3A1%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A1%2C%22ren%22%3Afalse%2C%22version%22%3A%226.29.3%22%2C%22userIds%22%3A%5B%5D%2C%22url%22%3A%22https%3A%2F%2Fbraincandy.net%2F%22%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%2218852b00202813d8%22%2C%22banner%22%3A%7B%22topframe%22%3A1%2C%22format%22%3A%5B%7B%22w%22%3A300%2C%22h%22%3A600%2C%22ext%22%3A%7B%22siteID%22%3A%22292737%22%2C%22sid%22%3A%22300x600%22%7D%7D%5D%7D%2C%22ext%22%3A%7B%22dfp_ad_unit_code%22%3A%22%2F151404300%2Fbraincandy_desktop_skyscraper%22%2C%22gpid%22%3A%22%2F151404300%2Fbraincandy_desktop_skyscraper%22%7D%7D%5D%2C%22at%22%3A1%7D
200 OK 38 B URL HTTP/2 htlb.casalemedia.com/openrtb/pbjs?s=292737&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%22172ef42585e07348%22%2C%22site%22%3A%7B%22ref%22%3A%22https%3A%2F%2Fbraincandy.net%2F%22%2C%22page%22%3A%22https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22msd%22%3A0%2C%22msi%22%3A0%2C%22mfu%22%3A0%2C%22bu%22%3A1%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A1%2C%22ren%22%3Afalse%2C%22version%22%3A%226.29.3%22%2C%22userIds%22%3A%5B%5D%2C%22url%22%3A%22https%3A%2F%2Fbraincandy.net%2F%22%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%2218852b00202813d8%22%2C%22banner%22%3A%7B%22topframe%22%3A1%2C%22format%22%3A%5B%7B%22w%22%3A300%2C%22h%22%3A600%2C%22ext%22%3A%7B%22siteID%22%3A%22292737%22%2C%22sid%22%3A%22300x600%22%7D%7D%5D%7D%2C%22ext%22%3A%7B%22dfp_ad_unit_code%22%3A%22%2F151404300%2Fbraincandy_desktop_skyscraper%22%2C%22gpid%22%3A%22%2F151404300%2Fbraincandy_desktop_skyscraper%22%7D%7D%5D%2C%22at%22%3A1%7D
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 31d2a5c74279589772f07e9dd9d6eb05
7dbb36d8b61561b7ead701d29699f084ba58a0f4
be8e961784fe2563c0e5489b258fc3a7642f9acf39216dc781b4c505af4249c0
GET /openrtb/pbjs?s=292737&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%22172ef42585e07348%22%2C%22site%22%3A%7B%22ref%22%3A%22https%3A%2F%2Fbraincandy.net%2F%22%2C%22page%22%3A%22https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22msd%22%3A0%2C%22msi%22%3A0%2C%22mfu%22%3A0%2C%22bu%22%3A1%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A1%2C%22ren%22%3Afalse%2C%22version%22%3A%226.29.3%22%2C%22userIds%22%3A%5B%5D%2C%22url%22%3A%22https%3A%2F%2Fbraincandy.net%2F%22%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%2218852b00202813d8%22%2C%22banner%22%3A%7B%22topframe%22%3A1%2C%22format%22%3A%5B%7B%22w%22%3A300%2C%22h%22%3A600%2C%22ext%22%3A%7B%22siteID%22%3A%22292737%22%2C%22sid%22%3A%22300x600%22%7D%7D%5D%7D%2C%22ext%22%3A%7B%22dfp_ad_unit_code%22%3A%22%2F151404300%2Fbraincandy_desktop_skyscraper%22%2C%22gpid%22%3A%22%2F151404300%2Fbraincandy_desktop_skyscraper%22%7D%7D%5D%2C%22at%22%3A1%7D HTTP/1.1
Host: htlb.casalemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:15 GMT
content-type: application/json
content-length: 38
cf-ray: 754e5b623afe0b55-OSL
access-control-allow-origin: https://braincandy.net
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
access-control-allow-credentials: true
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KWIowlSXsptFA5zBE2DbXvjFw1QpuhI%2FW7pYGnrZS12%2BbjuAV62GEwjVv4KaQZFrMYJUUkBx3%2BZ8FXp2kaKul58rb674656mB9jLK%2BCYmVnzX954yfkTtud3k5XABAVYF8d24N5i"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
htlb.casalemedia.com/openrtb/pbjs?s=292736&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%2277b4e12b2a50228%22%2C%22site%22%3A%7B%22ref%22%3A%22https%3A%2F%2Fbraincandy.net%2F%22%2C%22page%22%3A%22https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22msd%22%3A0%2C%22msi%22%3A0%2C%22mfu%22%3A0%2C%22bu%22%3A1%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A1%2C%22ren%22%3Afalse%2C%22version%22%3A%226.29.3%22%2C%22userIds%22%3A%5B%5D%2C%22url%22%3A%22https%3A%2F%2Fbraincandy.net%2F%22%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%228bed7ab79ba018%22%2C%22banner%22%3A%7B%22topframe%22%3A1%2C%22format%22%3A%5B%7B%22w%22%3A728%2C%22h%22%3A90%2C%22ext%22%3A%7B%22siteID%22%3A%22292736%22%2C%22sid%22%3A%22728x90%22%7D%7D%5D%7D%2C%22ext%22%3A%7B%22dfp_ad_unit_code%22%3A%22%2F151404300%2Fbraincandy_desktop_leaderboard_top%22%2C%22gpid%22%3A%22%2F151404300%2Fbraincandy_desktop_leaderboard_top%22%7D%7D%5D%2C%22at%22%3A1%7D
200 OK 37 B URL HTTP/2 htlb.casalemedia.com/openrtb/pbjs?s=292736&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%2277b4e12b2a50228%22%2C%22site%22%3A%7B%22ref%22%3A%22https%3A%2F%2Fbraincandy.net%2F%22%2C%22page%22%3A%22https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22msd%22%3A0%2C%22msi%22%3A0%2C%22mfu%22%3A0%2C%22bu%22%3A1%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A1%2C%22ren%22%3Afalse%2C%22version%22%3A%226.29.3%22%2C%22userIds%22%3A%5B%5D%2C%22url%22%3A%22https%3A%2F%2Fbraincandy.net%2F%22%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%228bed7ab79ba018%22%2C%22banner%22%3A%7B%22topframe%22%3A1%2C%22format%22%3A%5B%7B%22w%22%3A728%2C%22h%22%3A90%2C%22ext%22%3A%7B%22siteID%22%3A%22292736%22%2C%22sid%22%3A%22728x90%22%7D%7D%5D%7D%2C%22ext%22%3A%7B%22dfp_ad_unit_code%22%3A%22%2F151404300%2Fbraincandy_desktop_leaderboard_top%22%2C%22gpid%22%3A%22%2F151404300%2Fbraincandy_desktop_leaderboard_top%22%7D%7D%5D%2C%22at%22%3A1%7D
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 376e861c5f1361f23c8c67d9a5ecdbcb
b409cd889c15845d0ab339446ced6f5dde2add2a
47cf83b3880903d150a164f55f8dd2289c9bb5014db473dfd62a82bfa735a7de
GET /openrtb/pbjs?s=292736&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%2277b4e12b2a50228%22%2C%22site%22%3A%7B%22ref%22%3A%22https%3A%2F%2Fbraincandy.net%2F%22%2C%22page%22%3A%22https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22msd%22%3A0%2C%22msi%22%3A0%2C%22mfu%22%3A0%2C%22bu%22%3A1%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A1%2C%22ren%22%3Afalse%2C%22version%22%3A%226.29.3%22%2C%22userIds%22%3A%5B%5D%2C%22url%22%3A%22https%3A%2F%2Fbraincandy.net%2F%22%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%228bed7ab79ba018%22%2C%22banner%22%3A%7B%22topframe%22%3A1%2C%22format%22%3A%5B%7B%22w%22%3A728%2C%22h%22%3A90%2C%22ext%22%3A%7B%22siteID%22%3A%22292736%22%2C%22sid%22%3A%22728x90%22%7D%7D%5D%7D%2C%22ext%22%3A%7B%22dfp_ad_unit_code%22%3A%22%2F151404300%2Fbraincandy_desktop_leaderboard_top%22%2C%22gpid%22%3A%22%2F151404300%2Fbraincandy_desktop_leaderboard_top%22%7D%7D%5D%2C%22at%22%3A1%7D HTTP/1.1
Host: htlb.casalemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:15 GMT
content-type: application/json
content-length: 37
cf-ray: 754e5b621ade0b55-OSL
access-control-allow-origin: https://braincandy.net
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
access-control-allow-credentials: true
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Vo0dBakQw3%2Fbq6O9voDEZ0uU7dimu6vpmnxqIb3ZJqfYN94OhoxB8Sm69iO9S5gTTag%2FSZXtoxV2adLiMojfm9OAVWg0dAddGu8GLUNtYu88t8bIwh%2Bk5nIsjJlJgZjMt8jD%2FZw4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
htlb.casalemedia.com/openrtb/pbjs?s=292741&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%2213e2c863edc47898%22%2C%22site%22%3A%7B%22ref%22%3A%22https%3A%2F%2Fbraincandy.net%2F%22%2C%22page%22%3A%22https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22msd%22%3A0%2C%22msi%22%3A0%2C%22mfu%22%3A0%2C%22bu%22%3A1%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A1%2C%22ren%22%3Afalse%2C%22version%22%3A%226.29.3%22%2C%22userIds%22%3A%5B%5D%2C%22url%22%3A%22https%3A%2F%2Fbraincandy.net%2F%22%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%2214dc9642acb3dc3%22%2C%22banner%22%3A%7B%22topframe%22%3A1%2C%22format%22%3A%5B%7B%22w%22%3A728%2C%22h%22%3A90%2C%22ext%22%3A%7B%22siteID%22%3A%22292741%22%2C%22sid%22%3A%22728x90%22%7D%7D%5D%7D%2C%22ext%22%3A%7B%22dfp_ad_unit_code%22%3A%22%2F151404300%2Fbraincandy_desktop_leaderboard_bottom%22%2C%22gpid%22%3A%22%2F151404300%2Fbraincandy_desktop_leaderboard_bottom%22%7D%7D%5D%2C%22at%22%3A1%7D
200 OK 38 B URL HTTP/2 htlb.casalemedia.com/openrtb/pbjs?s=292741&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%2213e2c863edc47898%22%2C%22site%22%3A%7B%22ref%22%3A%22https%3A%2F%2Fbraincandy.net%2F%22%2C%22page%22%3A%22https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22msd%22%3A0%2C%22msi%22%3A0%2C%22mfu%22%3A0%2C%22bu%22%3A1%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A1%2C%22ren%22%3Afalse%2C%22version%22%3A%226.29.3%22%2C%22userIds%22%3A%5B%5D%2C%22url%22%3A%22https%3A%2F%2Fbraincandy.net%2F%22%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%2214dc9642acb3dc3%22%2C%22banner%22%3A%7B%22topframe%22%3A1%2C%22format%22%3A%5B%7B%22w%22%3A728%2C%22h%22%3A90%2C%22ext%22%3A%7B%22siteID%22%3A%22292741%22%2C%22sid%22%3A%22728x90%22%7D%7D%5D%7D%2C%22ext%22%3A%7B%22dfp_ad_unit_code%22%3A%22%2F151404300%2Fbraincandy_desktop_leaderboard_bottom%22%2C%22gpid%22%3A%22%2F151404300%2Fbraincandy_desktop_leaderboard_bottom%22%7D%7D%5D%2C%22at%22%3A1%7D
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 204fa90b3dede4f8acbbdc963778001e
78b6e7a4abd27dce15269150f1d3abfc9be8261d
ce48a6a66e20ef3ecc2caf5cb909fdaad4a987f075725bb4ad8b94261037e24a
GET /openrtb/pbjs?s=292741&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%2213e2c863edc47898%22%2C%22site%22%3A%7B%22ref%22%3A%22https%3A%2F%2Fbraincandy.net%2F%22%2C%22page%22%3A%22https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22msd%22%3A0%2C%22msi%22%3A0%2C%22mfu%22%3A0%2C%22bu%22%3A1%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A1%2C%22ren%22%3Afalse%2C%22version%22%3A%226.29.3%22%2C%22userIds%22%3A%5B%5D%2C%22url%22%3A%22https%3A%2F%2Fbraincandy.net%2F%22%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%2214dc9642acb3dc3%22%2C%22banner%22%3A%7B%22topframe%22%3A1%2C%22format%22%3A%5B%7B%22w%22%3A728%2C%22h%22%3A90%2C%22ext%22%3A%7B%22siteID%22%3A%22292741%22%2C%22sid%22%3A%22728x90%22%7D%7D%5D%7D%2C%22ext%22%3A%7B%22dfp_ad_unit_code%22%3A%22%2F151404300%2Fbraincandy_desktop_leaderboard_bottom%22%2C%22gpid%22%3A%22%2F151404300%2Fbraincandy_desktop_leaderboard_bottom%22%7D%7D%5D%2C%22at%22%3A1%7D HTTP/1.1
Host: htlb.casalemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:15 GMT
content-type: application/json
content-length: 38
cf-ray: 754e5b623b030b55-OSL
access-control-allow-origin: https://braincandy.net
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
access-control-allow-credentials: true
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6dDWX1md2FMOcQ%2BsBnHIu6tfW84BAWDSyVtdGQ1hyeChV7KnxnR%2FXte4o4JYFOLalyYr5zQMufFYKQe28cciq1aYvtHrYyg4Vrx6W%2F0miUIBbd8lx1YnFwttI5xdrNc0VR6ecKC6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
htlb.casalemedia.com/openrtb/pbjs?s=292741&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%22290067a144f17b48%22%2C%22site%22%3A%7B%22ref%22%3A%22https%3A%2F%2Fbraincandy.net%2F%22%2C%22page%22%3A%22https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22msd%22%3A0%2C%22msi%22%3A0%2C%22mfu%22%3A0%2C%22bu%22%3A1%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A1%2C%22ren%22%3Afalse%2C%22version%22%3A%226.29.3%22%2C%22userIds%22%3A%5B%5D%2C%22url%22%3A%22https%3A%2F%2Fbraincandy.net%2F%22%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%2230cda8c462165fd8%22%2C%22banner%22%3A%7B%22topframe%22%3A1%2C%22format%22%3A%5B%7B%22w%22%3A970%2C%22h%22%3A250%2C%22ext%22%3A%7B%22siteID%22%3A%22292741%22%2C%22sid%22%3A%22970x250%22%7D%7D%5D%7D%2C%22ext%22%3A%7B%22dfp_ad_unit_code%22%3A%22%2F151404300%2Fbraincandy_bottom_responsive%22%2C%22gpid%22%3A%22%2F151404300%2Fbraincandy_bottom_responsive%22%7D%7D%5D%2C%22at%22%3A1%7D
200 OK 38 B URL HTTP/2 htlb.casalemedia.com/openrtb/pbjs?s=292741&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%22290067a144f17b48%22%2C%22site%22%3A%7B%22ref%22%3A%22https%3A%2F%2Fbraincandy.net%2F%22%2C%22page%22%3A%22https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22msd%22%3A0%2C%22msi%22%3A0%2C%22mfu%22%3A0%2C%22bu%22%3A1%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A1%2C%22ren%22%3Afalse%2C%22version%22%3A%226.29.3%22%2C%22userIds%22%3A%5B%5D%2C%22url%22%3A%22https%3A%2F%2Fbraincandy.net%2F%22%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%2230cda8c462165fd8%22%2C%22banner%22%3A%7B%22topframe%22%3A1%2C%22format%22%3A%5B%7B%22w%22%3A970%2C%22h%22%3A250%2C%22ext%22%3A%7B%22siteID%22%3A%22292741%22%2C%22sid%22%3A%22970x250%22%7D%7D%5D%7D%2C%22ext%22%3A%7B%22dfp_ad_unit_code%22%3A%22%2F151404300%2Fbraincandy_bottom_responsive%22%2C%22gpid%22%3A%22%2F151404300%2Fbraincandy_bottom_responsive%22%7D%7D%5D%2C%22at%22%3A1%7D
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 56c6e16e6008fa094d042849af3119e8
dc20692ad48c00fe28de858bfab802961525191f
a1ad735c8957f178a740c2c3cae7d3f0a06dc819fdd55555b1b963290325c930
GET /openrtb/pbjs?s=292741&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%22290067a144f17b48%22%2C%22site%22%3A%7B%22ref%22%3A%22https%3A%2F%2Fbraincandy.net%2F%22%2C%22page%22%3A%22https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22msd%22%3A0%2C%22msi%22%3A0%2C%22mfu%22%3A0%2C%22bu%22%3A1%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A1%2C%22ren%22%3Afalse%2C%22version%22%3A%226.29.3%22%2C%22userIds%22%3A%5B%5D%2C%22url%22%3A%22https%3A%2F%2Fbraincandy.net%2F%22%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%2230cda8c462165fd8%22%2C%22banner%22%3A%7B%22topframe%22%3A1%2C%22format%22%3A%5B%7B%22w%22%3A970%2C%22h%22%3A250%2C%22ext%22%3A%7B%22siteID%22%3A%22292741%22%2C%22sid%22%3A%22970x250%22%7D%7D%5D%7D%2C%22ext%22%3A%7B%22dfp_ad_unit_code%22%3A%22%2F151404300%2Fbraincandy_bottom_responsive%22%2C%22gpid%22%3A%22%2F151404300%2Fbraincandy_bottom_responsive%22%7D%7D%5D%2C%22at%22%3A1%7D HTTP/1.1
Host: htlb.casalemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:15 GMT
content-type: application/json
content-length: 38
cf-ray: 754e5b621adf0b55-OSL
access-control-allow-origin: https://braincandy.net
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
access-control-allow-credentials: true
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dHZXBxdHDm0PKxt0A0ajdWcUgiRZeQ5kHP4Q8lwC%2FFfslrP8VYciodQcxYGFbTi%2FVyw62LLHH61SFqWei7PPaa%2Bs0TJpFtrd4MdTM6t6QaPUTv7HSYK4zX4GkS1A96gav2V17aNW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a711c1dd7cf5fdf092ab6739a1b17f07
2948d61228ce27f80f2dad432e91daf878ef18b5
02c8f4e2ea5c6afad77470331ec9faf56437e36f08939a508023f26d42471bc4
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 544
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 13:45:15 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://braincandy.net
AN-X-Request-Uuid: 84be675c-c58f-46a8-a53a-d4afb5790229
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 536.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 7827d64b4efcb7fff82cc5da5eddb322
5c09f522a1e38b9dcec331adbf652a3b8b6057c1
644a3571043b679eb7ae5533e70970c5233fba58bf80616983f7b476236baa40
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 04 Oct 2022 13:45:15 GMT
Last-Modified: Tue, 04 Oct 2022 12:04:59 GMT
Server: ECS (nyb/1D20)
X-Cache: Miss from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: B9ga_asr_fFZTxdqhn7HIlkE9iT7evreXMiidfz285iqtEYHAcE7zA==
Age: 6016
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 7827d64b4efcb7fff82cc5da5eddb322
5c09f522a1e38b9dcec331adbf652a3b8b6057c1
644a3571043b679eb7ae5533e70970c5233fba58bf80616983f7b476236baa40
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=169927
Date: Tue, 04 Oct 2022 13:45:15 GMT
Etag: "633c2075-1d7"
Expires: Thu, 06 Oct 2022 12:57:22 GMT
Last-Modified: Tue, 04 Oct 2022 12:00:53 GMT
Server: ECS (nyb/1D0C)
X-Cache: Miss from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: VXLInh1zuuMx_pD89WkqYtjfaa31d4Nta70LOnDbuAB0HEizbtxzmw==
Age: 3389
static.ex.co/cdn/content/monetization/pixel-sdk/production/a88826e11b78e8002b69a8313adc7a38bf1f2e18/pixel-sdk.min.js
200 OK 3.0 kB URL HTTP/2 static.ex.co/cdn/content/monetization/pixel-sdk/production/a88826e11b78e8002b69a8313adc7a38bf1f2e18/pixel-sdk.min.js
IP
ASN #20940 Akamai International B.V.
File type HTML document, ASCII text, with very long lines (8232), with no line terminators
Hash c1e834ba9e137083fcb25e378b5d9bf1
fab4978cee3ff2e1ba2de4b010ec9e68b6422805
0d9cfadccf82f7904114d4bdd45ca3a7b762d3be253991a3cbe543bf3469ca91
GET /cdn/content/monetization/pixel-sdk/production/a88826e11b78e8002b69a8313adc7a38bf1f2e18/pixel-sdk.min.js HTTP/1.1
Host: static.ex.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 30 Mar 2022 16:45:20 GMT
etag: "c1e834ba9e137083fcb25e378b5d9bf1"
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
content-length: 2969
cache-control: must-revalidate, proxy-revalidate, max-age=604800, s-maxage=31536000
expires: Tue, 11 Oct 2022 13:45:16 GMT
date: Tue, 04 Oct 2022 13:45:16 GMT
vary: Accept-Encoding
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST
access-control-allow-origin: *
content-type: application/javascript
X-Firefox-Spdy: h2
static-cdn.spot.im/production/launcher/tags/v2.86.0/launcher/ec24cb303220fcfc94f8.svg
200 OK 24 kB URL HTTP/2 static-cdn.spot.im/production/launcher/tags/v2.86.0/launcher/ec24cb303220fcfc94f8.svg
IP
File type Unicode text, UTF-8 text, with very long lines (65400)
Hash 1640d216dbab9f485fce9dc1b650ab91
6427fdcb0e2e91012b04e590289bd42a16e18568
00e62461daccb5a91c414cbe1076eae1baa13532c65e0c1840505a3c59d906c9
GET /production/launcher/tags/v2.86.0/launcher/ec24cb303220fcfc94f8.svg HTTP/1.1
Host: static-cdn.spot.im
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Cookie: device_uuid=37659e0b-15f9-40e6-8fe9-62c0dd1d32b5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 549
date: Sun, 11 Sep 2022 20:42:04 GMT
last-modified: Wed, 07 Sep 2022 07:58:15 GMT
etag: "2fb4c511e325b1064ff9babf599fbcee"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
content-encoding: br
x-amz-version-id: .yUevMqaAGN90fewGBxHEr1MxaGoZtEF
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kAki3PA9C0QERrI0_JbsrjNgHjYIL-p0toOmu5bDocuekOk8az6WzQ==
age: 1962193
vary: Origin
X-Firefox-Spdy: h2
cdn2.triviatoday.com/geoIP/api/ipinfo/91.90.42.154
200 OK 192 B URL HTTP/1.1 cdn2.triviatoday.com/geoIP/api/ipinfo/91.90.42.154
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 229a89907f508d25681227b555f2eb4c
07e11b079b17994e87f24b8d6ae9e662968e7366
7a2219b9f8ac2f2b77b296d4c92bae5cbb62da7ae5751e17630ff4285f60c83b
GET /geoIP/api/ipinfo/91.90.42.154 HTTP/1.1
Host: cdn2.triviatoday.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Transfer-Encoding: chunked
Content-Type: text/plain; charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
Server: Kestrel
Access-Control-Allow-Origin: *
Date: Tue, 04 Oct 2022 13:45:15 GMT
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 7827d64b4efcb7fff82cc5da5eddb322
5c09f522a1e38b9dcec331adbf652a3b8b6057c1
644a3571043b679eb7ae5533e70970c5233fba58bf80616983f7b476236baa40
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 04 Oct 2022 13:45:16 GMT
Last-Modified: Tue, 04 Oct 2022 12:46:53 GMT
Server: ECS (nyb/1D27)
X-Cache: Miss from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: lzg4NFuPjqKgT-QYU3KKbpWV2GdrDQder4de9DOcDxAQZyqsrWkYMw==
Age: 3503
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 7827d64b4efcb7fff82cc5da5eddb322
5c09f522a1e38b9dcec331adbf652a3b8b6057c1
644a3571043b679eb7ae5533e70970c5233fba58bf80616983f7b476236baa40
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 04 Oct 2022 13:45:16 GMT
Last-Modified: Tue, 04 Oct 2022 12:36:58 GMT
Server: ECS (bsa/EB22)
X-Cache: Miss from cloudfront
Via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ilZsq4LQKZHN5BGzV633lu9cx-o_dqQQKM9R4FI5V5SnLg-h07Nk8A==
Age: 4098
prd-collector-platform.ex.co/main/events
200 OK 0 B URL HTTP/2 prd-collector-platform.ex.co/main/events
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /main/events HTTP/1.1
Host: prd-collector-platform.ex.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 150
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:16 GMT
content-type: text/plain; charset=utf-8
content-length: 0
vary: Origin
access-control-allow-origin: https://braincandy.net
access-control-allow-credentials: true
X-Firefox-Spdy: h2
tlx.3lift.com/header/auction?lib=prebid&v=6.29.3&referrer=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&tmax=2500
200 OK 19 B URL HTTP/2 tlx.3lift.com/header/auction?lib=prebid&v=6.29.3&referrer=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&tmax=2500
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a548f7b55db665b1df71a33a2bee47a7
4f88e5b6a18226d7207f1458b0b83e428dbf9898
0535c3bb3a17e4ac0fb7d29214d2181275662129dc2bdd2a89c35934e9fc5ba5
POST /header/auction?lib=prebid&v=6.29.3&referrer=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&tmax=2500 HTTP/1.1
Host: tlx.3lift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 317
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:16 GMT
content-type: application/json; charset=utf-8
content-length: 19
cache-control: no-cache, no-store, must-revalidate
expires: Thu, 15 Oct 1992 20:10:00 GMT
pragma: no-cache
x-xss-protection: 0
accept-ch: sec-ch-width,sec-ch-ect,user-agent,sec-ch-downlink,sec-ch-ua-mobile,sec-ch-save-data,sec-ch-device-memory,sec-ch-dpr,sec-ch-ua-full-version,sec-ch-ua-model,sec-ch-ua-platform-version,sec-ch-viewport-width,sec-ch-ua-platform,sec-ch-viewport-height,sec-ch-rtt,sec-ch-ua-arch,sec-ch-ua,sec-ch-ua-bitness,sec-ch-prefers-color-scheme
access-control-allow-origin: https://braincandy.net
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 78eba68843218edfb11756ecc8685fc3
63131975e9f05ca0b7aaff72724ef799eb6867b9
4ca9fb7595990866a0330881ce9463b557fe741c725dd284bb05170d55835e65
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 540
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 13:45:16 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://braincandy.net
AN-X-Request-Uuid: 4be7fe9b-acfb-4f2d-9496-b41989a47977
Set-Cookie: icu=ChgIgPBZEAoYASABKAEw7PHwmQY4AUABSAEQ7PHwmQYYAA..; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 02-Jan-2023 13:45:16 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=4049398972407755343; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 02-Jan-2023 13:45:16 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 536.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
odb.outbrain.com/utils/get?url=https%3A%2F%2Fbraincandy.net%2F%3Fc%3DFCEC94&idx=0&rand=2500&key=NANOWDGT01&widgetJSId=AR_2&va=true&et=true&format=html&adblck=false&abwl=false&px=139&py=1511&vpd=572&activeTab=true&darkMode=false&ab=0&wl=0&settings=true&recs=true&version=2000905&sig=2gIDeN7H&apv=false&false&osLang=en-US&winW=1268&winH=939&scrW=1280&scrH=1024&dpr=1&secured=true&cmpStat=0&ccpaStat=0&ref=https%3A%2F%2Fbraincandy.net%2F&ogn=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-
200 OK 3.7 kB URL HTTP/2 odb.outbrain.com/utils/get?url=https%3A%2F%2Fbraincandy.net%2F%3Fc%3DFCEC94&idx=0&rand=2500&key=NANOWDGT01&widgetJSId=AR_2&va=true&et=true&format=html&adblck=false&abwl=false&px=139&py=1511&vpd=572&activeTab=true&darkMode=false&ab=0&wl=0&settings=true&recs=true&version=2000905&sig=2gIDeN7H&apv=false&false&osLang=en-US&winW=1268&winH=939&scrW=1280&scrH=1024&dpr=1&secured=true&cmpStat=0&ccpaStat=0&ref=https%3A%2F%2Fbraincandy.net%2F&ogn=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-
IP
File type Unicode text, UTF-8 text, with very long lines (11969), with no line terminators
Hash 3f6bf0e1e4c82c347023fafdced97f5b
35bde1eada8ac50f2d9c6a65a529a8ea66e969f1
f64d39e31e205ded743091470c4f5003526a09147f9d9208be926221f1e0afa1
GET /utils/get?url=https%3A%2F%2Fbraincandy.net%2F%3Fc%3DFCEC94&idx=0&rand=2500&key=NANOWDGT01&widgetJSId=AR_2&va=true&et=true&format=html&adblck=false&abwl=false&px=139&py=1511&vpd=572&activeTab=true&darkMode=false&ab=0&wl=0&settings=true&recs=true&version=2000905&sig=2gIDeN7H&apv=false&false&osLang=en-US&winW=1268&winH=939&scrW=1280&scrH=1024&dpr=1&secured=true&cmpStat=0&ccpaStat=0&ref=https%3A%2F%2Fbraincandy.net%2F&ogn=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template- HTTP/1.1
Host: odb.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
expires: Thu, 01 Jan 1970 00:00:00 GMT
x-traceid: c1bb57565fd22ee00aecf4a3c8d8b994
content-encoding: gzip
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
date: Tue, 04 Oct 2022 13:45:16 GMT
x-served-by: cache-lga21944-LGA, cache-bma1683-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1664891116.022746,VS0,VE109
vary: Accept-Encoding, User-Agent
traffic-path: NYDC1, LGA, BMA, Europe1
content-length: 3669
X-Firefox-Spdy: h2
tlx.3lift.com/header/auction?lib=prebid&v=6.29.3&referrer=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&tmax=2500
200 OK 19 B URL HTTP/2 tlx.3lift.com/header/auction?lib=prebid&v=6.29.3&referrer=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&tmax=2500
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a548f7b55db665b1df71a33a2bee47a7
4f88e5b6a18226d7207f1458b0b83e428dbf9898
0535c3bb3a17e4ac0fb7d29214d2181275662129dc2bdd2a89c35934e9fc5ba5
POST /header/auction?lib=prebid&v=6.29.3&referrer=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&tmax=2500 HTTP/1.1
Host: tlx.3lift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 340
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:16 GMT
content-type: application/json; charset=utf-8
content-length: 19
cache-control: no-cache, no-store, must-revalidate
expires: Thu, 15 Oct 1992 20:10:00 GMT
pragma: no-cache
x-xss-protection: 0
accept-ch: sec-ch-prefers-color-scheme,sec-ch-width,sec-ch-ect,user-agent,sec-ch-downlink,sec-ch-ua-mobile,sec-ch-save-data,sec-ch-device-memory,sec-ch-dpr,sec-ch-ua-full-version,sec-ch-ua-model,sec-ch-ua-platform-version,sec-ch-viewport-width,sec-ch-ua-platform,sec-ch-viewport-height,sec-ch-rtt,sec-ch-ua-arch,sec-ch-ua,sec-ch-ua-bitness
access-control-allow-origin: https://braincandy.net
access-control-allow-credentials: true
X-Firefox-Spdy: h2
rp.liadm.com/j?dtstmp=1664891114813&aid=a-01lm&se=e30&duid=caf62bed74b7--01gehkwn3gdsjea12jcpzdx1je&tna=v2.5.0&pu=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&wpn=lc-bundle&refr=https%3A%2F%2Fbraincandy.net%2F&c=PHRpdGxlPkJyYWluIENhbmR5PC90aXRsZT48aDE-MTU8L2gxPg
302 Found 0 B URL HTTP/2 rp.liadm.com/j?dtstmp=1664891114813&aid=a-01lm&se=e30&duid=caf62bed74b7--01gehkwn3gdsjea12jcpzdx1je&tna=v2.5.0&pu=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&wpn=lc-bundle&refr=https%3A%2F%2Fbraincandy.net%2F&c=PHRpdGxlPkJyYWluIENhbmR5PC90aXRsZT48aDE-MTU8L2gxPg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j?dtstmp=1664891114813&aid=a-01lm&se=e30&duid=caf62bed74b7--01gehkwn3gdsjea12jcpzdx1je&tna=v2.5.0&pu=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&wpn=lc-bundle&refr=https%3A%2F%2Fbraincandy.net%2F&c=PHRpdGxlPkJyYWluIENhbmR5PC90aXRsZT48aDE-MTU8L2gxPg HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 04 Oct 2022 13:45:16 GMT
content-length: 0
trace-id: a2e8c000beb32ded
vary: Origin
location: /j?dtstmp=1664891114813&aid=a-01lm&se=e30&duid=caf62bed74b7--01gehkwn3gdsjea12jcpzdx1je&tna=v2.5.0&pu=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&wpn=lc-bundle&refr=https%3A%2F%2Fbraincandy.net%2F&c=PHRpdGxlPkJyYWluIENhbmR5PC90aXRsZT48aDE-MTU8L2gxPg&n3pc=true
set-cookie: lidid=586cbd3e-4d53-45b7-8767-584234bbbac9; Max-Age=63072000; Expires=Thu, 03 Oct 2024 13:45:16 GMT; SameSite=None; Path=/; Domain=.liadm.com; Secure; HTTPOnly
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://braincandy.net
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
tlx.3lift.com/header/auction?lib=prebid&v=6.29.3&referrer=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&tmax=2500
200 OK 19 B URL HTTP/2 tlx.3lift.com/header/auction?lib=prebid&v=6.29.3&referrer=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&tmax=2500
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a548f7b55db665b1df71a33a2bee47a7
4f88e5b6a18226d7207f1458b0b83e428dbf9898
0535c3bb3a17e4ac0fb7d29214d2181275662129dc2bdd2a89c35934e9fc5ba5
POST /header/auction?lib=prebid&v=6.29.3&referrer=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&tmax=2500 HTTP/1.1
Host: tlx.3lift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 314
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:16 GMT
content-type: application/json; charset=utf-8
content-length: 19
cache-control: no-cache, no-store, must-revalidate
expires: Thu, 15 Oct 1992 20:10:00 GMT
pragma: no-cache
x-xss-protection: 0
accept-ch: sec-ch-ua-platform,sec-ch-viewport-width,sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-dpr,sec-ch-device-memory,sec-ch-save-data,sec-ch-ua-mobile,sec-ch-downlink,user-agent,sec-ch-ect,sec-ch-width,sec-ch-prefers-color-scheme,sec-ch-ua-bitness,sec-ch-ua,sec-ch-ua-arch,sec-ch-rtt,sec-ch-viewport-height
access-control-allow-origin: https://braincandy.net
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 60723a312e656459a8cff44973fc0e84
6006e2aa8be214da76f1df713150391931db9ae5
b2a15fed5e70e69a167aef940106c533167cd6b0f207049a797d736c47f04675
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 541
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 13:45:16 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://braincandy.net
AN-X-Request-Uuid: 23aa5bd3-5a4f-4267-96eb-03222d5e9df0
Set-Cookie: icu=ChgIgPBZEAoYASABKAEw7PHwmQY4AUABSAEQ7PHwmQYYAA..; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 02-Jan-2023 13:45:16 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=8176688267728267550; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 02-Jan-2023 13:45:16 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 536.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
tlx.3lift.com/header/auction?lib=prebid&v=6.29.3&referrer=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&tmax=2500
200 OK 19 B URL HTTP/2 tlx.3lift.com/header/auction?lib=prebid&v=6.29.3&referrer=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&tmax=2500
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a548f7b55db665b1df71a33a2bee47a7
4f88e5b6a18226d7207f1458b0b83e428dbf9898
0535c3bb3a17e4ac0fb7d29214d2181275662129dc2bdd2a89c35934e9fc5ba5
POST /header/auction?lib=prebid&v=6.29.3&referrer=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&tmax=2500 HTTP/1.1
Host: tlx.3lift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 336
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:16 GMT
content-type: application/json; charset=utf-8
content-length: 19
cache-control: no-cache, no-store, must-revalidate
expires: Thu, 15 Oct 1992 20:10:00 GMT
pragma: no-cache
x-xss-protection: 0
accept-ch: sec-ch-rtt,sec-ch-ua-arch,sec-ch-ua,sec-ch-ua-bitness,sec-ch-prefers-color-scheme,sec-ch-width,sec-ch-ect,user-agent,sec-ch-downlink,sec-ch-ua-mobile,sec-ch-save-data,sec-ch-device-memory,sec-ch-dpr,sec-ch-ua-full-version,sec-ch-ua-model,sec-ch-ua-platform-version,sec-ch-viewport-width,sec-ch-ua-platform,sec-ch-viewport-height
access-control-allow-origin: https://braincandy.net
access-control-allow-credentials: true
X-Firefox-Spdy: h2
pixel.ex.co/v1/playbuzz-network/
200 OK 2 B URL HTTP/2 pixel.ex.co/v1/playbuzz-network/
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
GET /v1/playbuzz-network/ HTTP/1.1
Host: pixel.ex.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
server: nginx
access-control-allow-origin: *
access-control-allow-headers: Accept, Authorization, Content-Type
access-control-allow-methods: GET, POST, PUT, DELETE
access-control-max-age: 600
etag: W/"2-l9Fw4VUO7kr8CvBlt4zaMCqXZ0w"
accept-ranges: bytes
date: Tue, 04 Oct 2022 13:45:16 GMT
via: 1.1 varnish
age: 2084
x-served-by: cache-bma1683-BMA
x-cache: HIT
x-cache-hits: 79
x-timer: S1664891116.211336,VS0,VE0
content-length: 2
X-Firefox-Spdy: h2
pixel.ex.co/v1/item/a530ab60-276c-471e-9b34-39280b0f5b81
200 OK 458 B URL HTTP/2 pixel.ex.co/v1/item/a530ab60-276c-471e-9b34-39280b0f5b81
IP
File type JSON data\012- HTML document, ASCII text, with very long lines (1478), with no line terminators
Hash ce746f5a1a46b431deeddc2316594399
457184ec3da91afe05acfa4d0203638325323bb8
504041a97253053f5113829a3019df7cb225fdbfee61f8277826bc2ae52bc3fa
GET /v1/item/a530ab60-276c-471e-9b34-39280b0f5b81 HTTP/1.1
Host: pixel.ex.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
server: nginx
access-control-allow-origin: *
access-control-allow-headers: Accept, Authorization, Content-Type
access-control-allow-methods: GET, POST, PUT, DELETE
access-control-max-age: 600
etag: W/"5c6-O3zrPZgNio3Vn+SHXFpF671qpQI"
content-encoding: gzip
accept-ranges: bytes
date: Tue, 04 Oct 2022 13:45:16 GMT
via: 1.1 varnish
age: 635
x-served-by: cache-bma1683-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1664891116.211274,VS0,VE10
vary: Accept-Encoding
content-length: 458
X-Firefox-Spdy: h2
static.ex.co/pb-story/trivia/production/348ad4f6ad6f9e0359ce997b77e83ce2e7aaae4f-2022-09-14-12-35-50/trivia-viewer.js
200 OK 21 kB URL HTTP/2 static.ex.co/pb-story/trivia/production/348ad4f6ad6f9e0359ce997b77e83ce2e7aaae4f-2022-09-14-12-35-50/trivia-viewer.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (52916)
Hash 85c9ecb2d91df0a5ef764d90b9f682e2
92bcec4baa52eb38ca112355714de71456b7d89d
8dc1abd2be71df8cf82665d3bf78d5207fd26158e6a4bfa31666cfe502257a3a
GET /pb-story/trivia/production/348ad4f6ad6f9e0359ce997b77e83ce2e7aaae4f-2022-09-14-12-35-50/trivia-viewer.js HTTP/1.1
Host: static.ex.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 14 Sep 2022 12:35:51 GMT
etag: "85c9ecb2d91df0a5ef764d90b9f682e2"
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
content-length: 20766
cache-control: must-revalidate, proxy-revalidate, max-age=604800, s-maxage=31536000
expires: Tue, 11 Oct 2022 13:45:16 GMT
date: Tue, 04 Oct 2022 13:45:16 GMT
vary: Accept-Encoding
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST
access-control-allow-origin: *
content-type: application/javascript
X-Firefox-Spdy: h2
static.ex.co/pb-story/trivia/production/348ad4f6ad6f9e0359ce997b77e83ce2e7aaae4f-2022-09-14-12-35-50/trivia-viewer-svg.js
200 OK 949 B URL HTTP/2 static.ex.co/pb-story/trivia/production/348ad4f6ad6f9e0359ce997b77e83ce2e7aaae4f-2022-09-14-12-35-50/trivia-viewer-svg.js
IP
ASN #20940 Akamai International B.V.
File type SVG XML document\012- SVG XML document\012- exported SGML document, ASCII text, with very long lines (1914), with no line terminators
Hash a9ca78bb79229c50198616b18ae01a81
552872225e2939154ecd11cbce82e2e64a88d3bc
d487a362ce22fa887fa73dfda04a354b640b6012373015f180cf6c2bc4eae5bf
GET /pb-story/trivia/production/348ad4f6ad6f9e0359ce997b77e83ce2e7aaae4f-2022-09-14-12-35-50/trivia-viewer-svg.js HTTP/1.1
Host: static.ex.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 14 Sep 2022 12:35:51 GMT
etag: "a9ca78bb79229c50198616b18ae01a81"
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
content-length: 949
cache-control: must-revalidate, proxy-revalidate, max-age=604800, s-maxage=31536000
expires: Tue, 11 Oct 2022 13:45:16 GMT
date: Tue, 04 Oct 2022 13:45:16 GMT
vary: Accept-Encoding
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST
access-control-allow-origin: *
content-type: application/javascript
X-Firefox-Spdy: h2
api-2-0.spot.im/v1.0.0/owa-gw/spot/sp_HQI9uHrd/v2
200 OK 0 B URL HTTP/2 api-2-0.spot.im/v1.0.0/owa-gw/spot/sp_HQI9uHrd/v2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1.0.0/owa-gw/spot/sp_HQI9uHrd/v2 HTTP/1.1
Host: api-2-0.spot.im
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-access-token,x-guid,x-post-id,x-spot-id,x-spotim-page-view-id
Referer: https://braincandy.net/
Origin: https://braincandy.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 0
date: Tue, 04 Oct 2022 13:45:16 GMT
server: fasthttp
access-control-allow-origin: https://braincandy.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: x-spot-id,x-post-id,x-guid,x-spotim-page-view-id,x-access-token
access-control-expose-headers:
access-control-max-age: 86400
x-cache: Miss from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HPG0Nh95_qZv3E7tibdibkAujOIs-vjF42ZgvVhbDDTl2-q_jObgjA==
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash 904a0d87402d9eecfec00481cdb28d62
6b37e41d4321718433996e4c1f4eed2f8f1727fc
e0884556a581a67e0e212887e97ca7f4438ef644fea7a0efd10175902f5e77e5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1985
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:16 GMT
Last-Modified: Tue, 04 Oct 2022 13:12:11 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 314
ocsp.digicert.com/
200 OK 314 B IP
Hash 904a0d87402d9eecfec00481cdb28d62
6b37e41d4321718433996e4c1f4eed2f8f1727fc
e0884556a581a67e0e212887e97ca7f4438ef644fea7a0efd10175902f5e77e5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1985
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:16 GMT
Last-Modified: Tue, 04 Oct 2022 13:12:11 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 314
ocsp.digicert.com/
200 OK 314 B IP
Hash 904a0d87402d9eecfec00481cdb28d62
6b37e41d4321718433996e4c1f4eed2f8f1727fc
e0884556a581a67e0e212887e97ca7f4438ef644fea7a0efd10175902f5e77e5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1959
Cache-Control: max-age=133189
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:16 GMT
Etag: "633b968a-13a"
Expires: Thu, 06 Oct 2022 02:45:05 GMT
Last-Modified: Tue, 04 Oct 2022 02:12:26 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 314
widgets.outbrain.com/images/widgetIcons/ob_logo.svg
200 OK 12 kB URL HTTP/2 widgets.outbrain.com/images/widgetIcons/ob_logo.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (4302)
Hash 65df986ae65cffdf92a926e7c42a25a8
9f8d0d9b734805286d9259abe2eb3f8c6196b0dc
02b5318a75e50e48ccddd6eac9eef067a275adc244f3c3f6186ed6b382d3f971
GET /images/widgetIcons/ob_logo.svg HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/svg+xml
etag: "65df986ae65cffdf92a926e7c42a25a8:1662969047.139727"
last-modified: Mon, 12 Sep 2022 07:37:47 GMT
server: AkamaiNetStorage
content-length: 12268
cache-control: max-age=2592000
expires: Thu, 03 Nov 2022 13:45:16 GMT
date: Tue, 04 Oct 2022 13:45:16 GMT
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
widgets.outbrain.com/images/widgetIcons/achoice.svg
200 OK 2.7 kB URL HTTP/2 widgets.outbrain.com/images/widgetIcons/achoice.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2290)
Hash 9d26fa4e7238ed94f1d0d92afb453b3e
ae18efe7d09337bf2f580b3f5bc912284aad7821
2c87952cc1c23627496c7874271042bdb6af21efdf7cbf36ec4d98e6cec34d04
GET /images/widgetIcons/achoice.svg HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/svg+xml
etag: "9d26fa4e7238ed94f1d0d92afb453b3e:1662969032.874716"
last-modified: Mon, 12 Sep 2022 07:37:47 GMT
server: AkamaiNetStorage
content-length: 2735
cache-control: max-age=2592000
expires: Thu, 03 Nov 2022 13:45:16 GMT
date: Tue, 04 Oct 2022 13:45:16 GMT
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
widgets.outbrain.com/nanoWidget/2000905/module/streamFeed.js?e=1
200 OK 14 kB URL HTTP/2 widgets.outbrain.com/nanoWidget/2000905/module/streamFeed.js?e=1
IP
File type ASCII text, with very long lines (1562)
Hash b46563b7a3f01362ae12582ae3d937e3
b97a5b22f52f394ca60df239cbbd8a399234f0d3
d8e2f9217e4a6a77d3e51d62445d6b2f75359163ac05d1b7933c02d9a571080d
GET /nanoWidget/2000905/module/streamFeed.js?e=1 HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "25ed062a6ccaee3b00a98aefaa455745:1664781097.291041"
last-modified: Mon, 03 Oct 2022 06:37:35 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
expires: Tue, 04 Oct 2022 17:45:16 GMT
date: Tue, 04 Oct 2022 13:45:16 GMT
content-length: 14265
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash 904a0d87402d9eecfec00481cdb28d62
6b37e41d4321718433996e4c1f4eed2f8f1727fc
e0884556a581a67e0e212887e97ca7f4438ef644fea7a0efd10175902f5e77e5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1985
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:16 GMT
Last-Modified: Tue, 04 Oct 2022 13:12:11 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 314
ocsp.digicert.com/
200 OK 471 B IP
Hash 68071da35afe4576f9ede2ec2956c942
04f9a6692d25392db0acfeecf130c6147d41f651
69f2840c7c7f1a2d540848f912a80ea8e76336f2163a2b2e1aa2d696e2044bc1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 43
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:16 GMT
Last-Modified: Tue, 04 Oct 2022 13:44:33 GMT
Server: ECS (amb/6BC1)
X-Cache: HIT
Content-Length: 471
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.29.3&cb=49829509703
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.29.3&cb=49829509703
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.29.3&cb=49829509703 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 477
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:15 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://braincandy.net
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.29.3&cb=34817042569
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.29.3&cb=34817042569
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.29.3&cb=34817042569 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 508
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:15 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://braincandy.net
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.29.3&cb=44736378611
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.29.3&cb=44736378611
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.29.3&cb=44736378611 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 496
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:15 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://braincandy.net
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
img.ex.co/image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664747835/ko9dl025l2ti1spu751w.png
200 OK 6.1 kB URL HTTP/2 img.ex.co/image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664747835/ko9dl025l2ti1spu751w.png
IP
ASN #20940 Akamai International B.V.
File type RIFF (little-endian) data, Web/P image\012- data
Hash dba6ad95ca0efa941271430ca0fb5e1d
6fe827b2f0d9a80cf1d8ee561ca97f083878c808
a9d98017f73c7acef700795f8c282bce664ccadd42a4052527d20310859f5d0d
GET /image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664747835/ko9dl025l2ti1spu751w.png HTTP/1.1
Host: img.ex.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: oshqp+71LzmGD/t/HMu7aMIOsaWN50boC1PVkN3cm3bVeuJggKLRAvNsayH9NzWAmYGuEhLjR0I=
x-amz-request-id: 2H7QTBWHF63EBMDW
last-modified: Tue, 04 Oct 2022 09:20:35 GMT
etag: "dba6ad95ca0efa941271430ca0fb5e1d"
x-amz-meta-cld-original-filename: 2
x-amz-meta-cld-surrogate-reporting: width=640,height=360,owidth=1500,oheight=844,obytes=31075
content-disposition: inline; filename="ko9dl025l2ti1spu751w.webp"
x-amz-meta-cld-transformation-id: 6866701122103641798
x-amz-meta-cld-version: 1664747835
x-amz-meta-cld-surrogate-key: 469313487173276039071387399525338624101 477155845018327866005814631001553777703
accept-ranges: bytes
content-type: image/webp
server: AmazonS3
content-length: 6082
cache-control: public, private, max-age=31530765
expires: Wed, 04 Oct 2023 12:18:01 GMT
date: Tue, 04 Oct 2022 13:45:16 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
img.ex.co/image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664747923/dlaewzrslfyyiyb1nuog.png
200 OK 5.2 kB URL HTTP/2 img.ex.co/image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664747923/dlaewzrslfyyiyb1nuog.png
IP
ASN #20940 Akamai International B.V.
File type RIFF (little-endian) data, Web/P image\012- data
Hash eab3d0c6e5862097a8d7545df525284d
672c3099ef6788434995688ab47cfc6cfd91ea61
2b57708baa16c55b62041e0bb7137b5dc06be28209a7aeb4b287ce1be68270a2
GET /image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664747923/dlaewzrslfyyiyb1nuog.png HTTP/1.1
Host: img.ex.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: drcOoog/WmnVCRLtM98X7QxINld8BTk+jk5viKTAz3a6x26AuvCo223syMU+afFBULlWcFPsn80=
x-amz-request-id: 2H7XHKGFVV7PMVZ8
last-modified: Tue, 04 Oct 2022 09:20:35 GMT
etag: "eab3d0c6e5862097a8d7545df525284d"
x-amz-meta-cld-original-filename: 6
x-amz-meta-cld-surrogate-reporting: width=640,height=360,owidth=1500,oheight=844,obytes=26403
content-disposition: inline; filename="dlaewzrslfyyiyb1nuog.webp"
x-amz-meta-cld-transformation-id: 6866701122103641798
x-amz-meta-cld-version: 1664747923
x-amz-meta-cld-surrogate-key: 217691603576653316979266431792085966027 477155845018327866005814631001553777703
accept-ranges: bytes
content-type: image/webp
server: AmazonS3
content-length: 5190
cache-control: public, private, max-age=31530672
expires: Wed, 04 Oct 2023 12:16:28 GMT
date: Tue, 04 Oct 2022 13:45:16 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
img.ex.co/image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664747967/kaqlvswfv9jxhyitsnbc.png
200 OK 5.2 kB URL HTTP/2 img.ex.co/image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664747967/kaqlvswfv9jxhyitsnbc.png
IP
ASN #20940 Akamai International B.V.
File type RIFF (little-endian) data, Web/P image\012- data
Hash cc36a44bea7eb26c0f857ba70b69493d
0e1328cfc53743a5cb2939d50636ead0a91bec7f
6f78e951a73785d4db50a38cba2471406b43738ad368c58c2cfc426ec1d47082
GET /image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664747967/kaqlvswfv9jxhyitsnbc.png HTTP/1.1
Host: img.ex.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: Xsgl/mibdan2EFC7aWqUzj+wUtFa1NyrTwvMV7eMTAPjV2S0hKPQ4eNV/h13CBeEmD1lvNSY3yg=
x-amz-request-id: 2H7QC7QJPP9VN9S6
last-modified: Tue, 04 Oct 2022 09:20:35 GMT
etag: "cc36a44bea7eb26c0f857ba70b69493d"
x-amz-meta-cld-original-filename: 9
x-amz-meta-cld-surrogate-reporting: width=640,height=360,owidth=1500,oheight=844,obytes=26445
content-disposition: inline; filename="kaqlvswfv9jxhyitsnbc.webp"
x-amz-meta-cld-transformation-id: 6866701122103641798
x-amz-meta-cld-version: 1664747967
x-amz-meta-cld-surrogate-key: 178501373854873168930185707534271502727 477155845018327866005814631001553777703
accept-ranges: bytes
content-type: image/webp
server: AmazonS3
content-length: 5170
cache-control: public, private, max-age=31530732
expires: Wed, 04 Oct 2023 12:17:28 GMT
date: Tue, 04 Oct 2022 13:45:16 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
img.ex.co/image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664747954/iiz9cew5trrrlefqrmb7.png
200 OK 8.0 kB URL HTTP/2 img.ex.co/image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664747954/iiz9cew5trrrlefqrmb7.png
IP
ASN #20940 Akamai International B.V.
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2edf8d4c76e9362732d13f55b6327411
d06ecc6174fde0a0d5e73bfabe4a75d78050aaa7
6a52f1486eff48e0e50bad9dc9131c3c99f61c3b72a37126f3011cd2b5b5af9d
GET /image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664747954/iiz9cew5trrrlefqrmb7.png HTTP/1.1
Host: img.ex.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: uo98dhGIl0vxOnB6JmCO9BpV2d4qS9zMyUCjrvCr2EQb+FkcSH+hobeVkmWNV1N8GmLalX4S0Jw=
x-amz-request-id: 2H7Q85MWW85JC8ZG
last-modified: Tue, 04 Oct 2022 09:20:35 GMT
etag: "2edf8d4c76e9362732d13f55b6327411"
x-amz-meta-cld-original-filename: 8
x-amz-meta-cld-surrogate-reporting: width=640,height=360,owidth=1500,oheight=844,obytes=38716
content-disposition: inline; filename="iiz9cew5trrrlefqrmb7.webp"
x-amz-meta-cld-transformation-id: 6866701122103641798
x-amz-meta-cld-version: 1664747954
x-amz-meta-cld-surrogate-key: 333401922212614075504146854649731061754 477155845018327866005814631001553777703
accept-ranges: bytes
content-type: image/webp
server: AmazonS3
content-length: 7978
cache-control: public, private, max-age=31530689
expires: Wed, 04 Oct 2023 12:16:45 GMT
date: Tue, 04 Oct 2022 13:45:16 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
img.ex.co/image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664747859/npn1e0vkokmm9gzkdpjd.png
200 OK 5.4 kB URL HTTP/2 img.ex.co/image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664747859/npn1e0vkokmm9gzkdpjd.png
IP
ASN #20940 Akamai International B.V.
File type RIFF (little-endian) data, Web/P image\012- data
Hash db9d7dbfbfc7574477d879ad316923cd
924cd686c4530e87df7a230751a395b995911548
8b8e901e06ac1c41dc56d0300c76a50ce0563dcde177a88a6fa5ab1410ebf55e
GET /image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664747859/npn1e0vkokmm9gzkdpjd.png HTTP/1.1
Host: img.ex.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 2LFAjCsJYQ0APqGEdDv94VqLOA8dEne/Qmrfr0d4RHi6heDGxC+/PZ0nc/NOg9Z0w/4sSNL49ik=
x-amz-request-id: 2H7H58K7RPY0N1X3
last-modified: Tue, 04 Oct 2022 09:20:35 GMT
etag: "db9d7dbfbfc7574477d879ad316923cd"
x-amz-meta-cld-original-filename: 3
x-amz-meta-cld-surrogate-reporting: width=640,height=360,owidth=1500,oheight=844,obytes=27415
content-disposition: inline; filename="npn1e0vkokmm9gzkdpjd.webp"
x-amz-meta-cld-transformation-id: 6866701122103641798
x-amz-meta-cld-version: 1664747859
x-amz-meta-cld-surrogate-key: 352244186372644608282492401963477440998 477155845018327866005814631001553777703
accept-ranges: bytes
content-type: image/webp
server: AmazonS3
content-length: 5380
cache-control: public, private, max-age=31530762
expires: Wed, 04 Oct 2023 12:17:58 GMT
date: Tue, 04 Oct 2022 13:45:16 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
img.ex.co/image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664823474/xw2xbqn433lfzohjauzy.png
200 OK 5.4 kB URL HTTP/2 img.ex.co/image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664823474/xw2xbqn433lfzohjauzy.png
IP
ASN #20940 Akamai International B.V.
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8e5c7e0b21a851231848e377b231ce12
4e90c01a9b79015afa7987089951c5d2d4ff9d1b
ba64fcceae1598782bb7df8b0a7fa10926a159ac34e4d703acb4392a53daa602
GET /image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664823474/xw2xbqn433lfzohjauzy.png HTTP/1.1
Host: img.ex.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: bsSGXToc8I6NrAEPZVro2qPuGVewcy4F7XIVy5zYH/Uer2WwG2w1G0+swlW26zk5GQEKeglPFIg=
x-amz-request-id: 2H7Q8R1Q1MJQF256
last-modified: Tue, 04 Oct 2022 09:20:35 GMT
etag: "8e5c7e0b21a851231848e377b231ce12"
x-amz-meta-cld-original-filename: 9
x-amz-meta-cld-surrogate-reporting: width=640,height=360,owidth=1500,oheight=844,obytes=28410
content-disposition: inline; filename="xw2xbqn433lfzohjauzy.webp"
x-amz-meta-cld-transformation-id: 6866701122103641798
x-amz-meta-cld-version: 1664823474
x-amz-meta-cld-surrogate-key: 301703311327921558522270998224439591242 477155845018327866005814631001553777703
accept-ranges: bytes
content-type: image/webp
server: AmazonS3
content-length: 5386
cache-control: public, private, max-age=31530685
expires: Wed, 04 Oct 2023 12:16:41 GMT
date: Tue, 04 Oct 2022 13:45:16 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.29.3&cb=550474684
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.29.3&cb=550474684
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.29.3&cb=550474684 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 461
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:16 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://braincandy.net
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
img.ex.co/image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664747908/ksldtijb8frehoqewtjh.png
200 OK 7.6 kB URL HTTP/2 img.ex.co/image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664747908/ksldtijb8frehoqewtjh.png
IP
ASN #20940 Akamai International B.V.
File type RIFF (little-endian) data, Web/P image\012- data
Hash ab7a8c0e0f3f9230737d729c8b8a9ce1
c9331ec8f9bb242f7bf9d94a1656b8a9a5935615
f64a1763124b208a99e511b86740d3fc3dc73dc6a29f52b1f9dffc7c586ce02c
GET /image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664747908/ksldtijb8frehoqewtjh.png HTTP/1.1
Host: img.ex.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 8dstMYIRm7jo7XXL2xXP9nDdNBT9uXTuDLrLmHhdZ1Fu+zT0CAF/TzyRnO97c/rxIYHkD6WVgs8=
x-amz-request-id: 2H7MFKN1SSG01PBK
last-modified: Tue, 04 Oct 2022 09:20:36 GMT
etag: "ab7a8c0e0f3f9230737d729c8b8a9ce1"
x-amz-meta-cld-original-filename: 5
x-amz-meta-cld-surrogate-reporting: width=640,height=360,owidth=1500,oheight=844,obytes=34322
content-disposition: inline; filename="ksldtijb8frehoqewtjh.webp"
x-amz-meta-cld-transformation-id: 6866701122103641798
x-amz-meta-cld-version: 1664747908
x-amz-meta-cld-surrogate-key: 202913948636013216005703407279976906664 477155845018327866005814631001553777703
accept-ranges: bytes
content-type: image/webp
server: AmazonS3
content-length: 7592
cache-control: public, private, max-age=31530689
expires: Wed, 04 Oct 2023 12:16:45 GMT
date: Tue, 04 Oct 2022 13:45:16 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
img.ex.co/image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664748025/k55prvil1fgre8iwhiav.png
200 OK 6.0 kB URL HTTP/2 img.ex.co/image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664748025/k55prvil1fgre8iwhiav.png
IP
ASN #20940 Akamai International B.V.
File type RIFF (little-endian) data, Web/P image\012- data
Hash 35d40c7bed760bad71ee2866ec28b765
c8d46801934423a99be8e2aeca3c9d9591a91a56
c92501e5898f5dee001ce14da86d736fd8135d3252720aac62b741b20bff9f02
GET /image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664748025/k55prvil1fgre8iwhiav.png HTTP/1.1
Host: img.ex.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: O6RM2jEShOpTo8hnixhsGp8ATkXBUaEgdJ6qDGFdxO3gWst8Kkh+f0JIt6N71nTTdi64upFMy28=
x-amz-request-id: 2H7ZE1SP6BEFBRWK
last-modified: Tue, 04 Oct 2022 09:20:35 GMT
etag: "35d40c7bed760bad71ee2866ec28b765"
x-amz-meta-cld-original-filename: 13
x-amz-meta-cld-surrogate-reporting: width=640,height=360,owidth=1500,oheight=844,obytes=30502
content-disposition: inline; filename="k55prvil1fgre8iwhiav.webp"
x-amz-meta-cld-transformation-id: 6866701122103641798
x-amz-meta-cld-version: 1664748025
x-amz-meta-cld-surrogate-key: 398904906914299796743732593210651714976 477155845018327866005814631001553777703
accept-ranges: bytes
content-type: image/webp
server: AmazonS3
content-length: 6002
cache-control: public, private, max-age=31530742
expires: Wed, 04 Oct 2023 12:17:38 GMT
date: Tue, 04 Oct 2022 13:45:16 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
img.ex.co/image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664747997/faukw1pdr3szwcfxe0jq.png
200 OK 7.4 kB URL HTTP/2 img.ex.co/image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664747997/faukw1pdr3szwcfxe0jq.png
IP
ASN #20940 Akamai International B.V.
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0ebb121c37b2a8648a856cc24dba35fe
c7972c043f6c00b94eff48bd5935182fb5d3d74b
69614a17fcdfb6386f4f25e58fb91523ccf1d1f181b3e62ace1b09de344a5e36
GET /image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664747997/faukw1pdr3szwcfxe0jq.png HTTP/1.1
Host: img.ex.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: Q8QB+dymf/IvV3ztFHALCdjzdbioN+fpWcdoLYXidYTPnU/aPcGxN4Cd0ghwuBNEUtwm4xgPVJM=
x-amz-request-id: 2H7YPN0SN7XF5PYG
last-modified: Tue, 04 Oct 2022 09:20:35 GMT
etag: "0ebb121c37b2a8648a856cc24dba35fe"
x-amz-meta-cld-original-filename: 11
x-amz-meta-cld-surrogate-reporting: width=640,height=360,owidth=1500,oheight=844,obytes=37048
content-disposition: inline; filename="faukw1pdr3szwcfxe0jq.webp"
x-amz-meta-cld-transformation-id: 6866701122103641798
x-amz-meta-cld-version: 1664747997
x-amz-meta-cld-surrogate-key: 189628652778518116272118859527355420101 477155845018327866005814631001553777703
accept-ranges: bytes
content-type: image/webp
server: AmazonS3
content-length: 7442
cache-control: public, private, max-age=31530801
expires: Wed, 04 Oct 2023 12:18:37 GMT
date: Tue, 04 Oct 2022 13:45:16 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
img.ex.co/image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664747812/qppuzvzp4y2moxmfnygv.png
200 OK 7.1 kB URL HTTP/2 img.ex.co/image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664747812/qppuzvzp4y2moxmfnygv.png
IP
ASN #20940 Akamai International B.V.
File type RIFF (little-endian) data, Web/P image\012- data
Hash ac3b4e6c9ef8940c108f1bab9143bb4e
4aa6013936e10b7ad18254ac3a1479d590955bbf
a55fc08026bf63d32866323c88dcc394f6531a7c050946b0425ff3a4921f4b83
GET /image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664747812/qppuzvzp4y2moxmfnygv.png HTTP/1.1
Host: img.ex.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: pDoQWJZx7IoxMhOZMyyjvmiQQRGZQ3+cDGQQf1QKUDigpfAVSESQFmbYLKf4aeeZTMAVKd222Qw=
x-amz-request-id: 2H7WNPSAYAKF3D11
last-modified: Tue, 04 Oct 2022 09:20:35 GMT
etag: "ac3b4e6c9ef8940c108f1bab9143bb4e"
x-amz-meta-cld-original-filename: 1
x-amz-meta-cld-surrogate-reporting: width=640,height=360,owidth=1500,oheight=844,obytes=33452
content-disposition: inline; filename="qppuzvzp4y2moxmfnygv.webp"
x-amz-meta-cld-transformation-id: 6866701122103641798
x-amz-meta-cld-version: 1664747812
x-amz-meta-cld-surrogate-key: 198156961526536263840056411087153834729 477155845018327866005814631001553777703
accept-ranges: bytes
content-type: image/webp
server: AmazonS3
content-length: 7054
cache-control: public, private, max-age=31530764
expires: Wed, 04 Oct 2023 12:18:00 GMT
date: Tue, 04 Oct 2022 13:45:16 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
img.ex.co/image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664823752/oxk1smudx7nnwb5a9dbd.png
200 OK 6.5 kB URL HTTP/2 img.ex.co/image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664823752/oxk1smudx7nnwb5a9dbd.png
IP
ASN #20940 Akamai International B.V.
File type RIFF (little-endian) data, Web/P image\012- data
Hash 75ad2b0831be1dadc4d725718b78392c
405720e1e4e0ad17a750063b3ae7f005e07a4514
c238091cad727a43f4eb8d47bc33c40a4dcc572b53459105fb2f8e36d86e1bdc
GET /image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664823752/oxk1smudx7nnwb5a9dbd.png HTTP/1.1
Host: img.ex.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: jfRs5WKV2LS4dkWqhBzKojl5OrOZbTfJHABANF8N0HTIIzEih8Vsv21iWDDugun+nYqpCHDpKE0=
x-amz-request-id: 2H7S09F6C3S3QW71
last-modified: Tue, 04 Oct 2022 09:20:35 GMT
etag: "75ad2b0831be1dadc4d725718b78392c"
x-amz-meta-cld-original-filename: 23
x-amz-meta-cld-surrogate-reporting: width=640,height=360,owidth=1500,oheight=844,obytes=32621
content-disposition: inline; filename="oxk1smudx7nnwb5a9dbd.webp"
x-amz-meta-cld-transformation-id: 6866701122103641798
x-amz-meta-cld-version: 1664823752
x-amz-meta-cld-surrogate-key: 372774712532565058226898003952030125251 477155845018327866005814631001553777703
accept-ranges: bytes
content-type: image/webp
content-length: 6532
server: AmazonS3
cache-control: public, private, max-age=31530690
expires: Wed, 04 Oct 2023 12:16:46 GMT
date: Tue, 04 Oct 2022 13:45:16 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
rp.liadm.com/j?dtstmp=1664891114813&aid=a-01lm&se=e30&duid=caf62bed74b7--01gehkwn3gdsjea12jcpzdx1je&tna=v2.5.0&pu=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&wpn=lc-bundle&refr=https%3A%2F%2Fbraincandy.net%2F&c=PHRpdGxlPkJyYWluIENhbmR5PC90aXRsZT48aDE-MTU8L2gxPg&n3pc=true
200 OK 47 B URL HTTP/2 rp.liadm.com/j?dtstmp=1664891114813&aid=a-01lm&se=e30&duid=caf62bed74b7--01gehkwn3gdsjea12jcpzdx1je&tna=v2.5.0&pu=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&wpn=lc-bundle&refr=https%3A%2F%2Fbraincandy.net%2F&c=PHRpdGxlPkJyYWluIENhbmR5PC90aXRsZT48aDE-MTU8L2gxPg&n3pc=true
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f88b83b479e9b28787d368c3349520b4
de1dd32b2ae982d00af68f5cc828622b2c46fec3
d0155673a6ca77fd823260e3e3a2a34c3a93acb4b0c5740a3d24a877c7f4cda4
GET /j?dtstmp=1664891114813&aid=a-01lm&se=e30&duid=caf62bed74b7--01gehkwn3gdsjea12jcpzdx1je&tna=v2.5.0&pu=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&wpn=lc-bundle&refr=https%3A%2F%2Fbraincandy.net%2F&c=PHRpdGxlPkJyYWluIENhbmR5PC90aXRsZT48aDE-MTU8L2gxPg&n3pc=true HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://braincandy.net
Referer: https://braincandy.net/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:16 GMT
content-type: application/json
content-length: 47
trace-id: d37d3082a7a0cbe4
vary: Origin
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-pixel-event-id: 86e8026d-997f-4bcc-8699-974447c6a05c
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://braincandy.net
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
embed.ex.co/xdomain_cookie.html
200 OK 1.2 kB URL HTTP/2 embed.ex.co/xdomain_cookie.html
IP
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2706)
Hash e906c6241103840f733582af79388eb1
c1aedf183248573ce8b8db155f5ca07da3fd566e
635c7a72b28175c4ffbcb2c23a09f2a0740df1738a106b2ce3d161b9241e3316
GET /xdomain_cookie.html HTTP/1.1
Host: embed.ex.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
server: nginx
access-control-allow-origin: *
access-control-allow-headers: Accept, Authorization, Content-Type, X-PB-Referer
access-control-allow-methods: GET, POST, PUT, DELETE
access-control-max-age: 600
cache-control: public, max-age=0
last-modified: Mon, 15 Aug 2022 10:51:40 GMT
etag: W/"a93-182a1217260"
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 04 Oct 2022 13:45:16 GMT
age: 4395
x-served-by: cache-iad-kiad7000082-IAD, cache-bma1653-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 1
x-timer: S1664891116.327209,VS0,VE99
vary: Accept-Encoding
content-length: 1228
X-Firefox-Spdy: h2
img.ex.co/image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664747938/pzmievoreihko6rjaydl.png
200 OK 6.1 kB URL HTTP/2 img.ex.co/image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664747938/pzmievoreihko6rjaydl.png
IP
ASN #20940 Akamai International B.V.
File type RIFF (little-endian) data, Web/P image\012- data
Hash 530e179ce7b254cde27b5c598330fa01
20a7b40449dc3a68f5ff98ae3981f827fe46b693
a818a189140a497038014c959c187bd73da70d9ecb3ae22605699fb8aef39a66
GET /image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664747938/pzmievoreihko6rjaydl.png HTTP/1.1
Host: img.ex.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: llfUUhW6NcyiKEEZLTbB9i+Wq+Nu12dVh2BPP2tsh/4vy+wheyU+wN4qW9a7WpOsKqNZCyR9qKc=
x-amz-request-id: 2H7Y45EFAS9J8ECE
last-modified: Tue, 04 Oct 2022 09:20:35 GMT
etag: "530e179ce7b254cde27b5c598330fa01"
x-amz-meta-cld-original-filename: 7
x-amz-meta-cld-surrogate-reporting: width=640,height=360,owidth=1500,oheight=844,obytes=28353
content-disposition: inline; filename="pzmievoreihko6rjaydl.webp"
x-amz-meta-cld-transformation-id: 6866701122103641798
x-amz-meta-cld-version: 1664747938
x-amz-meta-cld-surrogate-key: 206484277326853598010041919774081812189 477155845018327866005814631001553777703
accept-ranges: bytes
content-type: image/webp
server: AmazonS3
content-length: 6110
cache-control: public, private, max-age=31530739
expires: Wed, 04 Oct 2023 12:17:35 GMT
date: Tue, 04 Oct 2022 13:45:16 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
log.outbrainimg.com/loggerServices/dwce_cheq_events?timestamp=1664891115392&sessionId=c5f8224f-ff93-676c-97aa-e17bbaa3c4de&url=braincandy.net&cheqSource=1&cheqEvent=3&responseTime=680
200 OK 4 B URL HTTP/1.1 log.outbrainimg.com/loggerServices/dwce_cheq_events?timestamp=1664891115392&sessionId=c5f8224f-ff93-676c-97aa-e17bbaa3c4de&url=braincandy.net&cheqSource=1&cheqEvent=3&responseTime=680
IP
File type ASCII text, with no line terminators
Hash b326b5062b2f0e69046810717534cb09
5ffe533b830f08a0326348a9160afafc8ada44db
b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b
GET /loggerServices/dwce_cheq_events?timestamp=1664891115392&sessionId=c5f8224f-ff93-676c-97aa-e17bbaa3c4de&url=braincandy.net&cheqSource=1&cheqEvent=3&responseTime=680 HTTP/1.1
Host: log.outbrainimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 13:45:16 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 4
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST
X-TraceId: e93ad3e85a89a068fb275dd4cdec46fb
adservice.google.no/adsid/integrator.js?domain=braincandy.net
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=braincandy.net
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=braincandy.net HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 04 Oct 2022 13:45:16 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
200 OK 7.9 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data
Hash 9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Oct 2022 04:06:12 GMT
expires: Sun, 01 Oct 2023 04:06:12 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Apr 2022 17:03:52 GMT
content-type: font/woff2
age: 293944
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=braincandy.net
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=braincandy.net
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=braincandy.net HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 04 Oct 2022 13:45:16 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mcdp-nydc1.outbrain.com/l?token=a8db6c608a8e587459879256539622b3_27801_1664891116077&tm=948&eT=0&widgetWidth=446&widgetHeight=28&widgetX=139&widgetY=1889&wRV=2000905&pVis=0&lsd=-1&eIdx=&cnsnt=no_consent&cheq=0&rtt=295&oo=true&ab=0&wl=0
200 OK 28 B URL HTTP/1.1 mcdp-nydc1.outbrain.com/l?token=a8db6c608a8e587459879256539622b3_27801_1664891116077&tm=948&eT=0&widgetWidth=446&widgetHeight=28&widgetX=139&widgetY=1889&wRV=2000905&pVis=0&lsd=-1&eIdx=&cnsnt=no_consent&cheq=0&rtt=295&oo=true&ab=0&wl=0
IP
File type ASCII text, with no line terminators
Hash 377f144d3bb0cf9cf32318e02c9a0a27
cca7d87df98ec713fcb21cdaf937116d3cc00b1f
e11e6d8b2de0c0b8de968c82c7d56316e4ea02e1e8ad112e2a53e078b4f36e01
GET /l?token=a8db6c608a8e587459879256539622b3_27801_1664891116077&tm=948&eT=0&widgetWidth=446&widgetHeight=28&widgetX=139&widgetY=1889&wRV=2000905&pVis=0&lsd=-1&eIdx=&cnsnt=no_consent&cheq=0&rtt=295&oo=true&ab=0&wl=0 HTTP/1.1
Host: mcdp-nydc1.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Origin: https://braincandy.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 13:45:16 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 28
X-TraceId: 76bb46f40cad849b2cb2b532fa449cf3
access-control-allow-origin: *
access-control-expose-headers: content-range
content-encoding: gzip
sli.braincandy.net/baker?dtstmp=1664891116055
200 OK 19 B URL HTTP/1.1 sli.braincandy.net/baker?dtstmp=1664891116055
IP
ASN #20940 Akamai International B.V.
File type GIF image data, version 89a, 257 x 1057\012- data
Hash a13d28efebc1a996346c058d7e099d93
c75cea464ecb32876267eca0de33f0afb8f622d0
2d199b9d8dc7886837cbfd12c9e8ddae7e28f5c375d564b31bf732a320921435
GET /baker?dtstmp=1664891116055 HTTP/1.1
Host: sli.braincandy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Cookie: _li_dcdm_c=.braincandy.net; _lc2_fpi=caf62bed74b7--01gehkwn3gdsjea12jcpzdx1je; _ga=GA1.2.1654291140.1664891115; _gid=GA1.2.293583492.1664891115; _gat=1; _fbp=fb.1.1664891115128.1357938427; __gads=ID=0f7ffb1dba654606-223036b33ace0086:T=1664891115:RT=1664891115:S=ALNI_MY2inD3KpL88kFOO5oW39V5fFxNig; spotim_visitId={%22visitId%22:%2237659e0b-15f9-40e6-8fe9-62c0dd1d32b5%22%2C%22creationDate%22:%222022-10-04T13:45:15.382Z%22%2C%22duration%22:0}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 19
Expires: Tue, 04 Oct 2022 13:45:16 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 04 Oct 2022 13:45:16 GMT
Connection: keep-alive
Set-Cookie: _lc2_fpi=caf62bed74b7--01gehkwn3gdsjea12jcpzdx1je; Max-Age=63072000; Domain=.braincandy.net; SameSite=Lax
adservice.google.no/adsid/integrator.js?domain=braincandy.net
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=braincandy.net
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=braincandy.net HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 04 Oct 2022 13:45:16 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
5ffa1a6957027639c1192d0c90007b72.safeframe.googlesyndication.com/safeframe/1-0-38/html/container.html
200 OK 3.1 kB URL HTTP/2 5ffa1a6957027639c1192d0c90007b72.safeframe.googlesyndication.com/safeframe/1-0-38/html/container.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5835)
Hash 3fa5e95a358d660ddb3c45769ae1357f
5f6164fbaf8cfbccfd061b00ae48dedfc16bbcd9
d32f4b680031c0e11222eb17385aa9d3b11d2903b05bff34c3d4eb6292631137
GET /safeframe/1-0-38/html/container.html HTTP/1.1
Host: 5ffa1a6957027639c1192d0c90007b72.safeframe.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 3108
date: Tue, 04 Oct 2022 13:45:16 GMT
expires: Wed, 04 Oct 2023 13:45:16 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Tue, 02 Mar 2021 20:17:03 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash b4972932e9ece8efe7bffdfc4997c004
d684d594a0de485d24e9d64a9a552244c3169711
1a0d9a01dc1ec3ab655d8b5008ad3a36b03c4f1368732d4cb634a6ad489db6b4
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 04 Oct 2022 13:45:16 GMT
Last-Modified: Tue, 04 Oct 2022 12:53:10 GMT
Server: ECS (bsa/EB24)
X-Cache: Miss from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 6Cc0ya9nLiJcOv_YTAUhypPqsWXoLsyUJtbh0pmJbJrnkwAqEVp1_Q==
Age: 3126
ocsp.pki.goog/gts1c3
200 OK 1.1 kB IP
File type gzip compressed data, max compression\012- data
Hash 25b62d6fa40c856075c3b7f7fd52db9a
7350a9c7f56cda2ea9e31830a84312ae1a0c8d6a
1339792c3c69a026194bfe50c3fc420f363acc090414667ea5860595c759fa69
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f968b1f629e404e82ff3f3580560fd45
8cb3f06b18a86140f812bf76773b79f4093e4ec5
03ca1d4bc0b331a082a2e8a0886832ec158cb26f3e1bdc77c34747b49aa474eb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
api-2-0.spot.im/v1.0.0/owa-gw/spot/sp_HQI9uHrd/v2
200 OK 14 kB URL HTTP/2 api-2-0.spot.im/v1.0.0/owa-gw/spot/sp_HQI9uHrd/v2
IP
File type JSON data\012- , ASCII text, with very long lines (46460)
Hash 9d443abe1df928dfdc16d51e6101482f
bc3835e6b7d27f101d9b17c76759e592e6dee4fc
6f4f9563a2c55f24110b73893ecf18448097c6637d0cf6f77d2d28b758d7ca69
GET /v1.0.0/owa-gw/spot/sp_HQI9uHrd/v2 HTTP/1.1
Host: api-2-0.spot.im
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
x-guid: 37659e0b-15f9-40e6-8fe9-62c0dd1d32b5
x-spot-id: sp_HQI9uHrd
x-post-id: FCEC94
x-spotim-page-view-id: 1d3c604f-ba28-4429-8bea-d232bcf7b23f
x-access-token: null
Origin: https://braincandy.net
Connection: keep-alive
Cookie: device_uuid=37659e0b-15f9-40e6-8fe9-62c0dd1d32b5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
date: Tue, 04 Oct 2022 13:45:16 GMT
vary: Accept-Encoding
server: fasthttp
access-control-allow-origin: https://braincandy.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: x-spot-id,x-post-id,x-guid,x-spotim-page-view-id,x-access-token
access-control-expose-headers:
access-control-max-age: 86400
x-request-id: c74bffb0-43ea-11ed-9729-e6528a872c98
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lBF4BTpoumeJCIKXLHJjL2FgfGOAbwhnaT66gfBRkUoXXmMgi-YgYg==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f968b1f629e404e82ff3f3580560fd45
8cb3f06b18a86140f812bf76773b79f4093e4ec5
03ca1d4bc0b331a082a2e8a0886832ec158cb26f3e1bdc77c34747b49aa474eb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/pagead/js/r20220928/r20110914/client/qs_click_protection_fy2021.js
200 OK 7.6 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220928/r20110914/client/qs_click_protection_fy2021.js
IP
File type ASCII text, with very long lines (1494)
Hash 126f036451fe7f2fc91dd1114d8daef7
9510b9439d0169421dd29b6493bd15fd21816c5e
76548fed45d196bae3076488e40b3fa7347a25f7d076922ba4d53db5263ce9b2
GET /pagead/js/r20220928/r20110914/client/qs_click_protection_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 7559
x-xss-protection: 0
date: Tue, 04 Oct 2022 12:54:26 GMT
expires: Tue, 18 Oct 2022 12:54:26 GMT
cache-control: public, max-age=1209600
etag: 15289875785628835784
content-type: text/javascript; charset=UTF-8
age: 3050
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20220928/r20110914/elements/html/interstitial_ad_frame_fy2021.js
200 OK 8.2 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220928/r20110914/elements/html/interstitial_ad_frame_fy2021.js
IP
File type ASCII text, with very long lines (1831)
Hash 74b8f2ac76ee6aae516e5353ae9855c1
b6ae86c39deea3a34540b6f74cdcef7e0f3d0feb
3ff1db35135818a016c3f5fec0df10a7032b6795013b14cebab7123d34881962
GET /pagead/js/r20220928/r20110914/elements/html/interstitial_ad_frame_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 8224
x-xss-protection: 0
date: Tue, 04 Oct 2022 12:48:56 GMT
expires: Tue, 18 Oct 2022 12:48:56 GMT
cache-control: public, max-age=1209600
etag: 17584738254627026664
content-type: text/javascript; charset=UTF-8
age: 3380
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
i.liadm.com/s/c/a-01lm?s=&cim=&ps=true&ls=true&duid=caf62bed74b7--01gehkwn3gdsjea12jcpzdx1je&ppid=0&euns=0&ci=0&version=sc-v0.2.0&nosync=false&monitorExternalSyncs=false&
200 OK 606 B URL HTTP/1.1 i.liadm.com/s/c/a-01lm?s=&cim=&ps=true&ls=true&duid=caf62bed74b7--01gehkwn3gdsjea12jcpzdx1je&ppid=0&euns=0&ci=0&version=sc-v0.2.0&nosync=false&monitorExternalSyncs=false&
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (788)
Hash bdc25f79c10716c03f0f0a9d2a2804ad
58889495597e907e8c151049a7ab3fc6bdf2b180
cf38490722e1d822f5f903817bac116b00656dda51c538ab7f765ee854bc11c4
GET /s/c/a-01lm?s=&cim=&ps=true&ls=true&duid=caf62bed74b7--01gehkwn3gdsjea12jcpzdx1je&ppid=0&euns=0&ci=0&version=sc-v0.2.0&nosync=false&monitorExternalSyncs=false& HTTP/1.1
Host: i.liadm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 13:45:16 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 606
Connection: keep-alive
ETag: 1.61803398874
Vary: Accept-Encoding
Set-Cookie: _li_ss=MgUICRCzEw; Max-Age=2592000; Expires=Thu, 03 Nov 2022 13:45:16 GMT; SameSite=None; Path=/s; Secure
Request-Time: 6
Cache-Control: private, no-cache, max-age=0
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000; includeSubDomains
www.gstatic.com/images/icons/material/system/2x/feedback_grey600_24dp.png
200 OK 205 B URL HTTP/2 www.gstatic.com/images/icons/material/system/2x/feedback_grey600_24dp.png
IP
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced\012- data
Hash 4087858e2c9db9aa8f6a840aedcfb533
d1ffe861da6bd0e95fd1a365b0c3d3ceb6cd58a3
4d45982f2dc34f36c9045ee46a75a1943666bb7fd64e103cac8c7429e7012840
GET /images/icons/material/system/2x/feedback_grey600_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 205
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Oct 2022 02:17:31 GMT
expires: Sun, 01 Oct 2023 02:17:31 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 22 Oct 2019 18:15:00 GMT
content-type: image/png
age: 300466
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.gstatic.com/mysidia/270cb447f650f22be90b4349b85576c2.js?tag=mysidia_one_click_handler_one_afma_2019
200 OK 14 kB URL HTTP/2 www.gstatic.com/mysidia/270cb447f650f22be90b4349b85576c2.js?tag=mysidia_one_click_handler_one_afma_2019
IP
File type C++ source, ASCII text, with very long lines (1792)
Hash 10e6f3bdb6fae70ad38bdf5dbf63ec92
9bc2aed43500f7a96923397c67624983f7593c77
07cfe15791ca91426412f72bbd4300bb7b19b5fd976285a9071861dc3c90e779
GET /mysidia/270cb447f650f22be90b4349b85576c2.js?tag=mysidia_one_click_handler_one_afma_2019 HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/mysidia
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="mysidia"
report-to: {"group":"mysidia","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/mysidia"}]}
content-length: 13677
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Oct 2022 09:05:39 GMT
expires: Fri, 30 Dec 2022 09:05:39 GMT
cache-control: public, max-age=7776000
last-modified: Tue, 27 Sep 2022 00:52:44 GMT
content-type: text/javascript
age: 275978
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.gstatic.com/images/icons/material/system/2x/settings_grey600_24dp.png
200 OK 604 B URL HTTP/2 www.gstatic.com/images/icons/material/system/2x/settings_grey600_24dp.png
IP
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced\012- data
Hash 7bd42e5a35b5fb3ff852d6ea9191ca83
8a141eb392a05a2dea3dcd83b97940ef70a81ebc
5c4a713ee4250851232be9f9f68d41586be39b299528cfc7266e0b0e7e582e1b
GET /images/icons/material/system/2x/settings_grey600_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 604
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 03 Oct 2022 19:24:02 GMT
expires: Tue, 03 Oct 2023 19:24:02 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 22 Oct 2019 18:15:00 GMT
content-type: image/png
age: 66075
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b45b15bb651cc185ea82d91a51f06b5a
44987727be72bb12b4e4fc4fac50145835512750
f0b61426de169cf2efde87ac98d5123ea785004ad05c05932a099b644b2fdf64
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/ads/measurement/l?ebcid=ALh7CaTUtkIrRg_dBFY45rMJxwejlQrH4laUgWCcPqKzKIGxr3_iDNDDaDxHMVKCahbThLlvmL5vit8xfrKz8bM8FX5Y9S_yDg
204 No Content 0 B URL HTTP/2 www.google.com/ads/measurement/l?ebcid=ALh7CaTUtkIrRg_dBFY45rMJxwejlQrH4laUgWCcPqKzKIGxr3_iDNDDaDxHMVKCahbThLlvmL5vit8xfrKz8bM8FX5Y9S_yDg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ads/measurement/l?ebcid=ALh7CaTUtkIrRg_dBFY45rMJxwejlQrH4laUgWCcPqKzKIGxr3_iDNDDaDxHMVKCahbThLlvmL5vit8xfrKz8bM8FX5Y9S_yDg HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Tue, 04 Oct 2022 13:45:17 GMT
server: jumble_frontend_server
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 5a6c6d6439fbfee3e4de4bf7fc22969d
b106eec378c5e9e38243dd2e979cfe0e83de6367
850cad230b5952f1d3dc8b852d95bfa506f8447554957fb28c106f49aa87bb37
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3618
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:17 GMT
Last-Modified: Tue, 04 Oct 2022 12:44:59 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 4f29a94868f6d0a7a84cd912c8a99c08
bb4ca4e214536af4be7fe395a87257659b513898
f5114e177bbd9349e213abcb7dd36510ccf32f061d3e80b5ac49fe4493e42050
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 13:45:17 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Sat, 08 Oct 2022 10:12:55 GMT
ETag: "bb4ca4e214536af4be7fe395a87257659b513898"
Last-Modified: Tue, 04 Oct 2022 10:12:56 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 698
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 754e5b6aad7ab4f7-OSL
ocsp.digicert.com/
200 OK 471 B IP
Hash ac1663a4dd8e722bc37c2861b9658e34
62ec0c390704bf7fed9d460d78e091be8536b4e9
ffd36942aaf2c5589c71e8ca6402f48ced53c59b78235da60fa89d49ae6e480d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5189
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:17 GMT
Last-Modified: Tue, 04 Oct 2022 12:18:48 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
dpm.demdex.net/ibs:dpid=127444&dpuuid=&redir=https%3A%2F%2Fi.liadm.com%2Fs%2Fe%2Fa-01lm%2F0%2Fcab47f6bc71d435f944054cdba0934fb%3Fmpid%3D82775%26muid%3D%24%7BDD_UUID%7D
302 Found 0 B URL HTTP/1.1 dpm.demdex.net/ibs:dpid=127444&dpuuid=&redir=https%3A%2F%2Fi.liadm.com%2Fs%2Fe%2Fa-01lm%2F0%2Fcab47f6bc71d435f944054cdba0934fb%3Fmpid%3D82775%26muid%3D%24%7BDD_UUID%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ibs:dpid=127444&dpuuid=&redir=https%3A%2F%2Fi.liadm.com%2Fs%2Fe%2Fa-01lm%2F0%2Fcab47f6bc71d435f944054cdba0934fb%3Fmpid%3D82775%26muid%3D%24%7BDD_UUID%7D HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://i.liadm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-1-v044-01c2009f5.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=127444&dpuuid=&redir=https%3A%2F%2Fi.liadm.com%2Fs%2Fe%2Fa-01lm%2F0%2Fcab47f6bc71d435f944054cdba0934fb%3Fmpid%3D82775%26muid%3D%24%7BDD_UUID%7D
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=91767069123385950351695727185029344401; Max-Age=15552000; Expires=Sun, 02 Apr 2023 13:45:17 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: r3rDfIfTSX8=
Content-Length: 0
Connection: keep-alive
match.adsrvr.org/track/cmf/generic?ttd_pid=liveintent&ttd_tpi=1&gdpr=0
200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?ttd_pid=liveintent&ttd_tpi=1&gdpr=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?ttd_pid=liveintent&ttd_tpi=1&gdpr=0 HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://i.liadm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:17 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
pixel-sync.sitescout.com/dmp/pixelSync?nid=12&rurl=https%3A%2F%2Fi.liadm.com%2Fs%2F35758%3Fbidder_id%3D2380%26bidder_uuid%3D%7BuserId%7D
302 Found 0 B URL HTTP/2 pixel-sync.sitescout.com/dmp/pixelSync?nid=12&rurl=https%3A%2F%2Fi.liadm.com%2Fs%2F35758%3Fbidder_id%3D2380%26bidder_uuid%3D%7BuserId%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dmp/pixelSync?nid=12&rurl=https%3A%2F%2Fi.liadm.com%2Fs%2F35758%3Fbidder_id%3D2380%26bidder_uuid%3D%7BuserId%7D HTTP/1.1
Host: pixel-sync.sitescout.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://i.liadm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
set-cookie: ssi=fd102cd6-68f1-477d-a359-f20169d2ea1a#1664891117287; Domain=.sitescout.com; Expires=Wed, 04-Oct-2023 13:45:17 GMT; Path=/; Secure; SameSite=None
location: https://pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=12&rurl=https%3A%2F%2Fi.liadm.com%2Fs%2F35758%3Fbidder_id%3D2380%26bidder_uuid%3D%7BuserId%7D
content-length: 0
date: Tue, 04 Oct 2022 13:45:16 GMT
server: AC1.1
X-Firefox-Spdy: h2
x.dlx.addthis.com/e/live_intent_sync?na_exid=
302 Found 0 B URL HTTP/2 x.dlx.addthis.com/e/live_intent_sync?na_exid=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /e/live_intent_sync?na_exid= HTTP/1.1
Host: x.dlx.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://i.liadm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-length: 0
location: https://x.dlx.addthis.com/e/live_intent_sync?na_exid=&rd=Y
expires: Tue, 04 Oct 2022 13:45:17 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 04 Oct 2022 13:45:17 GMT
set-cookie: na_id=2022100413451700020526385376; Path=/; Domain=addthis.com; Max-Age=34214400; Secure; SameSite=None
na_tc=Y; Path=/; Domain=addthis.com; Max-Age=34214400; Secure; SameSite=None
uid=633c38ed917d7180; Path=/; Domain=addthis.com; Max-Age=34214400; Secure; SameSite=None
ouid=633c38ed000125f2dc1d7b5e0110b2fe4c7bb91c44d1e1e0e67d; Path=/; Domain=addthis.com; Max-Age=34214400; Secure; SameSite=None
strict-transport-security: max-age=2628000
X-Firefox-Spdy: h2
prd-collector-platform.ex.co/main/events
200 OK 0 B URL HTTP/2 prd-collector-platform.ex.co/main/events
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /main/events HTTP/1.1
Host: prd-collector-platform.ex.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Content-Type: text/plain;charset=UTF-8
Origin: https://braincandy.net
Content-Length: 2068
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:17 GMT
content-type: text/plain; charset=utf-8
content-length: 0
vary: Origin
access-control-allow-origin: https://braincandy.net
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash cb1079205bedc4afc2910af1e4ad1bd3
229b183105babe70df16737b33f160b05760618e
ec46869bf856afd841123a001f7a5be40ca612aa2675622ece183a29f93958b6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6279
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:17 GMT
Last-Modified: Tue, 04 Oct 2022 12:00:38 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
ocsp.entrust.net/
200 OK 1.6 kB IP
Hash 53d5160e8abccaffda34b59a5ad4e67d
243e1baa4d1bd93c2e724aa5acdcd88ec7fb9096
76e7ebc0950a63019763f2988af907394fc1429b901c218d33f2731e59569244
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "76E7EBC0950A63019763F2988AF907394FC1429B901C218D33F2731E59569244"
Last-Modified: Tue, 04 Oct 2022 06:00:00 UTC
Content-Length: 1586
Cache-Control: public, no-transform, must-revalidate, max-age=3521
Expires: Tue, 04 Oct 2022 14:43:58 GMT
Date: Tue, 04 Oct 2022 13:45:17 GMT
Connection: keep-alive
dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=127444&dpuuid=&redir=https%3A%2F%2Fi.liadm.com%2Fs%2Fe%2Fa-01lm%2F0%2Fcab47f6bc71d435f944054cdba0934fb%3Fmpid%3D82775%26muid%3D%24%7BDD_UUID%7D
200 OK 59 B URL HTTP/1.1 dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=127444&dpuuid=&redir=https%3A%2F%2Fi.liadm.com%2Fs%2Fe%2Fa-01lm%2F0%2Fcab47f6bc71d435f944054cdba0934fb%3Fmpid%3D82775%26muid%3D%24%7BDD_UUID%7D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 1251cd5e5c2def4c046309375f87c1c1
e02d6b0c6a5c495c15985e2832e335eda8528c80
4e7010cc46fa361c88e57e3346d27421cf3b8a8bf5f39b43fc45997c60cb1c13
GET /demconf.jpg?et:ibs%7cdata:dpid=127444&dpuuid=&redir=https%3A%2F%2Fi.liadm.com%2Fs%2Fe%2Fa-01lm%2F0%2Fcab47f6bc71d435f944054cdba0934fb%3Fmpid%3D82775%26muid%3D%24%7BDD_UUID%7D HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://i.liadm.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: image/gif
DCS: dcs-prod-irl1-1-v044-025937753.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-TID: 9G8EjwlsQA8=
Content-Length: 59
Connection: keep-alive
pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=12&rurl=https%3A%2F%2Fi.liadm.com%2Fs%2F35758%3Fbidder_id%3D2380%26bidder_uuid%3D%7BuserId%7D
204 No Content 0 B URL HTTP/2 pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=12&rurl=https%3A%2F%2Fi.liadm.com%2Fs%2F35758%3Fbidder_id%3D2380%26bidder_uuid%3D%7BuserId%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dmp/pixelSync?cookieQ=1&nid=12&rurl=https%3A%2F%2Fi.liadm.com%2Fs%2F35758%3Fbidder_id%3D2380%26bidder_uuid%3D%7BuserId%7D HTTP/1.1
Host: pixel-sync.sitescout.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://i.liadm.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: max-age=0,no-cache,no-store
pragma: no-cache
expires: Tue, 11 Oct 1977 12:34:56 GMT
p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml"
date: Tue, 04 Oct 2022 13:45:16 GMT
server: AC1.1
X-Firefox-Spdy: h2
img.ex.co/image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664823348/bf0xo1zv0qeaz1bomjnf.png
200 OK 50 kB URL HTTP/2 img.ex.co/image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664823348/bf0xo1zv0qeaz1bomjnf.png
IP
ASN #20940 Akamai International B.V.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ee1a159f9ee3604a625501a4bf0360b3
b7567fd1886f59005c55302ce98fb6bf81ce756a
46b6817636f0562b12020eddbb9bea6e6b26f23e85a416950021d43eada3b402
GET /image/upload/ar_1.7777777777777777,c_crop/q_auto:best,f_auto,fl_lossy,w_640,c_limit,dpr_1/v1664823348/bf0xo1zv0qeaz1bomjnf.png HTTP/1.1
Host: img.ex.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: HyuS48cIpswdlZx5a3f9L/IAxt0A73XYsG6NZevMBAkIP6xOf6s2bMRu7XWGyusANGQDDutiH+8=
x-amz-request-id: A2SB68S30J11W8TC
last-modified: Tue, 04 Oct 2022 09:20:36 GMT
etag: "ee1a159f9ee3604a625501a4bf0360b3"
x-amz-meta-cld-original-filename: 2
x-amz-meta-cld-surrogate-reporting: width=640,height=360,owidth=1500,oheight=844,obytes=1239380
content-disposition: inline; filename="bf0xo1zv0qeaz1bomjnf.webp"
x-amz-meta-cld-transformation-id: 6866701122103641798
x-amz-meta-cld-version: 1664823348
x-amz-meta-cld-surrogate-key: 329426366276678512460706730820205578878 477155845018327866005814631001553777703
accept-ranges: bytes
content-type: image/webp
server: AmazonS3
content-length: 49518
cache-control: public, private, max-age=31530733
expires: Wed, 04 Oct 2023 12:17:30 GMT
date: Tue, 04 Oct 2022 13:45:17 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=braincandy.net
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=braincandy.net
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=braincandy.net HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 04 Oct 2022 13:45:17 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
x.dlx.addthis.com/e/live_intent_sync?na_exid=&rd=Y
200 OK 43 B URL HTTP/2 x.dlx.addthis.com/e/live_intent_sync?na_exid=&rd=Y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /e/live_intent_sync?na_exid=&rd=Y HTTP/1.1
Host: x.dlx.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://i.liadm.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 43
expires: Tue, 04 Oct 2022 13:45:17 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 04 Oct 2022 13:45:17 GMT
strict-transport-security: max-age=2628000
X-Firefox-Spdy: h2
mid.rkdms.com/bct?pid=bcccb40a-06d2-44fe-bdd2-a91ef4a5bfd0&&puid=&liid=&_ct=im
302 Found 0 B URL HTTP/2 mid.rkdms.com/bct?pid=bcccb40a-06d2-44fe-bdd2-a91ef4a5bfd0&&puid=&liid=&_ct=im
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bct?pid=bcccb40a-06d2-44fe-bdd2-a91ef4a5bfd0&&puid=&liid=&_ct=im HTTP/1.1
Host: mid.rkdms.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://i.liadm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 04 Oct 2022 13:45:17 GMT
content-length: 0
server: nginx
location: /restricted
X-Firefox-Spdy: h2
b1sync.zemanta.com/usersync/liveintent/?cb=%2F%2Fi.liadm.com%2Fs%2F35004%3Fbidder_id%3D98254%26bidder_uuid%3D__ZUID__
302 Found 77 B URL HTTP/1.1 b1sync.zemanta.com/usersync/liveintent/?cb=%2F%2Fi.liadm.com%2Fs%2F35004%3Fbidder_id%3D98254%26bidder_uuid%3D__ZUID__
IP
File type HTML document, ASCII text
Hash 7c1e5b67fd3722647b69f39a0022a1cd
c1a820d190419dca7cfc1630d2250bc268c9bb77
90538321da699789e61c931d3d59855aee2b2511c4cc2bd86700410ee01f204f
GET /usersync/liveintent/?cb=%2F%2Fi.liadm.com%2Fs%2F35004%3Fbidder_id%3D98254%26bidder_uuid%3D__ZUID__ HTTP/1.1
Host: b1sync.zemanta.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://i.liadm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Content-Length: 77
Cache-Control: no-cache, no-store, must-revalidate
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Location: //i.liadm.com/s/35004?bidder_id=98254&bidder_uuid=
Pragma: no-cache
Date: Tue, 04 Oct 2022 13:45:17 GMT
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b0d53c2572a93a8db2df12363bee8216
674b8f55e58a53b2d91a092dc47bb6633071db0d
c261ee39febce4c1c60d1f8716b7471c97a602a5cd48f319fdea22052873b3b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b0d53c2572a93a8db2df12363bee8216
674b8f55e58a53b2d91a092dc47bb6633071db0d
c261ee39febce4c1c60d1f8716b7471c97a602a5cd48f319fdea22052873b3b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b0d53c2572a93a8db2df12363bee8216
674b8f55e58a53b2d91a092dc47bb6633071db0d
c261ee39febce4c1c60d1f8716b7471c97a602a5cd48f319fdea22052873b3b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b0d53c2572a93a8db2df12363bee8216
674b8f55e58a53b2d91a092dc47bb6633071db0d
c261ee39febce4c1c60d1f8716b7471c97a602a5cd48f319fdea22052873b3b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 1.3 kB IP
File type gzip compressed data, max compression\012- data
Hash 3f345a951694248e82abd2160f5e50af
c439e75176a13bd2a1b5b9215ac59f0f08e2d7bb
7191981c3fa4780c1117f877e9091e6f1ded28354e7db8c4ede00ba933a3ad6f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mv.outbrain.com/Multivac/api/get?url=https%3A%2F%2Fbraincandy.net%2F%3Fc%3DFCEC94&settings=true&recs=true&widgetJSId=AR_2&key=NANOWDGT01&version=2000905&apv=false&sig=2gIDeN7H&format=html&rand=50326&osLang=en-US&va=true&et=true&cmpStat=0&ccpaStat=0&scrW=1280&scrH=1024&t=YThkYjZjNjA4YThlNTg3NDU5ODc5MjU2NTM5NjIyYjM=&winW=1268&winH=939&adblck=false&abwl=false&secured=true&feedIdx=0&lastIdx=0&lastCardIdx=0&fAB=11984-83686&layeredTestInfo=11984-83686-&dpr=1&cw=446&darkMode=false&activeTab=true&ref=https%3A%2F%2Fbraincandy.net%2F&ogn=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-
200 OK 60 kB URL HTTP/2 mv.outbrain.com/Multivac/api/get?url=https%3A%2F%2Fbraincandy.net%2F%3Fc%3DFCEC94&settings=true&recs=true&widgetJSId=AR_2&key=NANOWDGT01&version=2000905&apv=false&sig=2gIDeN7H&format=html&rand=50326&osLang=en-US&va=true&et=true&cmpStat=0&ccpaStat=0&scrW=1280&scrH=1024&t=YThkYjZjNjA4YThlNTg3NDU5ODc5MjU2NTM5NjIyYjM=&winW=1268&winH=939&adblck=false&abwl=false&secured=true&feedIdx=0&lastIdx=0&lastCardIdx=0&fAB=11984-83686&layeredTestInfo=11984-83686-&dpr=1&cw=446&darkMode=false&activeTab=true&ref=https%3A%2F%2Fbraincandy.net%2F&ogn=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-
IP
File type Unicode text, UTF-8 text, with very long lines (65526), with no line terminators
Hash 93751f32385e801b07f34b80f6a295b4
ed682033e0bd47fdb7316b486e118b8e80eb0c2f
8263ae7162d92fb60c9d80f1d4691cc51993c165285300a131ff948e751915b8
GET /Multivac/api/get?url=https%3A%2F%2Fbraincandy.net%2F%3Fc%3DFCEC94&settings=true&recs=true&widgetJSId=AR_2&key=NANOWDGT01&version=2000905&apv=false&sig=2gIDeN7H&format=html&rand=50326&osLang=en-US&va=true&et=true&cmpStat=0&ccpaStat=0&scrW=1280&scrH=1024&t=YThkYjZjNjA4YThlNTg3NDU5ODc5MjU2NTM5NjIyYjM=&winW=1268&winH=939&adblck=false&abwl=false&secured=true&feedIdx=0&lastIdx=0&lastCardIdx=0&fAB=11984-83686&layeredTestInfo=11984-83686-&dpr=1&cw=446&darkMode=false&activeTab=true&ref=https%3A%2F%2Fbraincandy.net%2F&ogn=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template- HTTP/1.1
Host: mv.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
expires: Thu, 01 Jan 1970 00:00:00 GMT
x-traceid: 99a04f63cd7528532626a5a6b2ff0587
content-encoding: gzip
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
date: Tue, 04 Oct 2022 13:45:17 GMT
x-served-by: cache-lga13620-LGA, cache-bma1683-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1664891117.507181,VS0,VE1069
vary: Accept-Encoding, User-Agent
traffic-path: NYDC1, LGA, BMA, Europe1
content-length: 60055
X-Firefox-Spdy: h2
cdn.ampproject.org/rtv/012209142312000/amp4ads-v0.mjs
200 OK 62 kB URL HTTP/2 cdn.ampproject.org/rtv/012209142312000/amp4ads-v0.mjs
IP
File type Unicode text, UTF-8 text, with very long lines (65008)
Hash 2d25ebafd048009ce60257daa0c5e344
1c3ff52ad08dd6972825cbfc58b73fd540346d15
cd9aae70e3403a11f6d834f749a184fb53e189fd71955e959084c2feff9cb280
GET /rtv/012209142312000/amp4ads-v0.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 61591
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 03 Oct 2022 17:07:16 GMT
expires: Tue, 03 Oct 2023 17:07:16 GMT
cache-control: public, max-age=31536000
etag: "e54f9754f7fcb5b6"
content-type: text/javascript; charset=UTF-8
age: 74281
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.ampproject.org/rtv/012209142312000/v0/amp-analytics-0.1.mjs
200 OK 29 kB URL HTTP/2 cdn.ampproject.org/rtv/012209142312000/v0/amp-analytics-0.1.mjs
IP
File type ASCII text, with very long lines (65534)
Hash 5ec6f97604e85f5f119e04c1d9d7d91e
2598379c4181c916687767e7a53cd829846c26ca
a9365e4d3830939e7cb45a383e3595321929f3d3bacb6e014832714394a62dca
GET /rtv/012209142312000/v0/amp-analytics-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 28888
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 30 Sep 2022 23:16:20 GMT
expires: Sat, 30 Sep 2023 23:16:20 GMT
cache-control: public, max-age=31536000
etag: "e2dd099ef3a2ca02"
content-type: text/javascript; charset=UTF-8
age: 311337
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.ampproject.org/rtv/012209142312000/v0/amp-ad-exit-0.1.mjs
200 OK 5.2 kB URL HTTP/2 cdn.ampproject.org/rtv/012209142312000/v0/amp-ad-exit-0.1.mjs
IP
File type ASCII text, with very long lines (14666)
Hash 90d4680ee61ac8b66c304c8d49aa64ef
d6db51233a195dca2727e0d19637201136dd07a6
ab981b5994dd3b1ca1d201d109c1a912abc03b59a8698d3093cf03b04488f8c1
GET /rtv/012209142312000/v0/amp-ad-exit-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 5187
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 30 Sep 2022 23:20:13 GMT
expires: Sat, 30 Sep 2023 23:20:13 GMT
cache-control: public, max-age=31536000
etag: "59737ceedde8bf1d"
content-type: text/javascript; charset=UTF-8
age: 311104
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.ampproject.org/rtv/012209142312000/v0/amp-fit-text-0.1.mjs
200 OK 1.9 kB URL HTTP/2 cdn.ampproject.org/rtv/012209142312000/v0/amp-fit-text-0.1.mjs
IP
File type ASCII text, with very long lines (5021)
Hash 79215171fa8f548ee980e89779b09d03
2b5586a06385889b91620131d3e59ca61516aece
0b07c60649c345bc28cb92d49ed8819a916f2d59846dc6e1740f5f6d782df790
GET /rtv/012209142312000/v0/amp-fit-text-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 1900
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 30 Sep 2022 23:20:13 GMT
expires: Sat, 30 Sep 2023 23:20:13 GMT
cache-control: public, max-age=31536000
etag: "01e154329648e832"
content-type: text/javascript; charset=UTF-8
age: 311104
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
i.liadm.com/s/35004?bidder_id=98254&bidder_uuid=
303 See Other 0 B URL HTTP/1.1 i.liadm.com/s/35004?bidder_id=98254&bidder_uuid=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/35004?bidder_id=98254&bidder_uuid= HTTP/1.1
Host: i.liadm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://i.liadm.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 303 See Other
Date: Tue, 04 Oct 2022 13:45:17 GMT
Content-Length: 0
Connection: keep-alive
Location: /s/35004?bidder_id=98254&bidder_uuid=&_li_chk=true&previous_uuid=738dd0be7394441eb65202de70da4d90
Set-Cookie: lidid=738dd0be-7394-441e-b652-02de70da4d90; Max-Age=63072000; Expires=Thu, 03 Oct 2024 13:45:17 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure
Request-Time: 1
Strict-Transport-Security: max-age=31536000; includeSubDomains
cdn.ampproject.org/rtv/012209142312000/v0/amp-form-0.1.mjs
200 OK 13 kB URL HTTP/2 cdn.ampproject.org/rtv/012209142312000/v0/amp-form-0.1.mjs
IP
File type Unicode text, UTF-8 text, with very long lines (41068)
Hash 6a04b9d802504933132be4bab3195d81
49eba5e68937a7bbf2cf2fdf1054e01c78eabae6
06133b44c9ebb5d365064a0b37a197e9f007eaa5a14aec26617fca0aac277091
GET /rtv/012209142312000/v0/amp-form-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 12955
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 30 Sep 2022 23:16:20 GMT
expires: Sat, 30 Sep 2023 23:16:20 GMT
cache-control: public, max-age=31536000
etag: "45d7f146b93052d9"
content-type: text/javascript; charset=UTF-8
age: 311337
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ads.pubmatic.com/AdServer/js/user_sync.html?p=156758&userIdMacro=PM_UID&predirect=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D281178%26extuid%3DPM_UID
200 OK 5.5 kB URL HTTP/2 ads.pubmatic.com/AdServer/js/user_sync.html?p=156758&userIdMacro=PM_UID&predirect=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D281178%26extuid%3DPM_UID
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (15844), with no line terminators
Hash 7725e8e949141c8ded449d86975d4c04
8cd8c314a2002cc26f821d331ab9512f52a551a2
a0c49aacf6f552bce544eb8516404f696918253cd934a6404ebeafd71f8780ae
GET /AdServer/js/user_sync.html?p=156758&userIdMacro=PM_UID&predirect=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D281178%26extuid%3DPM_UID HTTP/1.1
Host: ads.pubmatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 01 Feb 2022 06:38:00 GMT
etag: "1300708-3de4-5d6ef246ef4cf"
server: Apache
accept-ranges: bytes
content-encoding: gzip
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC", CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
content-length: 5549
content-type: text/html; charset=UTF-8
cache-control: max-age=44488
expires: Wed, 05 Oct 2022 02:06:45 GMT
date: Tue, 04 Oct 2022 13:45:17 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
fonts.gstatic.com/s/googlesans/v45/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
200 OK 28 kB URL HTTP/2 fonts.gstatic.com/s/googlesans/v45/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 28288, version 1.0\012- data
Hash 53b5e785dfdca21fa7adf7119fa1f8cc
a3a86dfd216ad29183ba5493ae39d45b62f9d8b8
4a6fab14bfe7b33fe5dc5349a2bb3720037e0ed7ebe621b352340f9514d83c08
GET /s/googlesans/v45/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 28288
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Oct 2022 07:37:25 GMT
expires: Sun, 01 Oct 2023 07:37:25 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 Jun 2022 19:05:56 GMT
content-type: font/woff2
age: 281272
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b0d53c2572a93a8db2df12363bee8216
674b8f55e58a53b2d91a092dc47bb6633071db0d
c261ee39febce4c1c60d1f8716b7471c97a602a5cd48f319fdea22052873b3b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
publisher-assets.spot.im/yad/ad-choises.png
200 OK 4.6 kB URL HTTP/2 publisher-assets.spot.im/yad/ad-choises.png
IP
File type PNG image data, 225 x 236, 8-bit/color RGBA, non-interlaced\012- data
Hash 643378ef8a85df26380de21f9beb58ba
c386214b3f391175a8c22853dff3220f4522ca70
f27b4cdbd821100765224a52c7c8d544fa9fdd6d0aba21015eb66c11735e0989
GET /yad/ad-choises.png HTTP/1.1
Host: publisher-assets.spot.im
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Cookie: device_uuid=37659e0b-15f9-40e6-8fe9-62c0dd1d32b5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 4550
last-modified: Mon, 02 Jul 2018 15:08:43 GMT
accept-ranges: bytes
server: AmazonS3
date: Tue, 04 Oct 2022 06:32:29 GMT
etag: "643378ef8a85df26380de21f9beb58ba"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: lMbMPc_D4VEaLXrgNvXFfcDyKPsdg7ojwARlf5ZrJC9Y3l8cJDrcEQ==
age: 30683
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 4073f46804888dc516735202de488923
229281ce989e7c370590fa5c45c8d27d403b8373
cc8bc367b3c8a36f255fd79e30e4011d569bca90379088ec1a680b082656d172
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5485
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:17 GMT
Last-Modified: Tue, 04 Oct 2022 12:13:52 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
rock.defybrick.com/placement_invocation?id=65349&idx=0
200 OK 18 kB URL HTTP/2 rock.defybrick.com/placement_invocation?id=65349&idx=0
IP
File type ASCII text, with very long lines (49039), with no line terminators
Hash 449a423abeac702cfd7368c5a1ba9822
06ebb32e04680d68e383016ff6b6eb6e326a0a61
4a2f633ca7a84b09da778fcb97cb91163af9ca231efdb0cda7875398c472b040
GET /placement_invocation?id=65349&idx=0 HTTP/1.1
Host: rock.defybrick.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 18460
content-encoding: gzip
server: Caddy
date: Tue, 04 Oct 2022 03:03:22 GMT
cache-control: max-age=43200
expires: Tue, 04 Oct 2022 15:03:20 GMT
etag: "bf8f-sbLSqLgrhMmD0M6HbtAQ/QtX6WE"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zvFlxpto_fUxxaXijgzFRreAJ4cas88W1cFWLd2MWaofY9Ru9mW9TA==
age: 38517
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash f92d4a820a7cad6a2a5a6d949cbf6056
4f7de474168ff6b13ef72ddb9717e6977848f8f1
1a67f264dade73839f56671dd600bf7d9add025e53d87ff6b2fc0b68eaa62e55
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6004
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:17 GMT
Last-Modified: Tue, 04 Oct 2022 12:05:13 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
status.geotrust.com/
200 OK 471 B IP
Hash f92d4a820a7cad6a2a5a6d949cbf6056
4f7de474168ff6b13ef72ddb9717e6977848f8f1
1a67f264dade73839f56671dd600bf7d9add025e53d87ff6b2fc0b68eaa62e55
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2699
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:17 GMT
Last-Modified: Tue, 04 Oct 2022 13:00:18 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
pixel.advertising.com/ups/58196/sync?&gdpr=&gdpr_consent=&redir=true
302 Found 0 B URL HTTP/2 pixel.advertising.com/ups/58196/sync?&gdpr=&gdpr_consent=&redir=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58196/sync?&gdpr=&gdpr_consent=&redir=true HTTP/1.1
Host: pixel.advertising.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 04 Oct 2022 13:45:17 GMT
content-length: 0
location: https://ups.analytics.yahoo.com/ups/58196/sync?&gdpr=&gdpr_consent=&redir=true
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash d0cccf4ce8253fd53286a85fef0716e8
12094e4f75e6d03415180d178cfc097ef2aeffd6
83f2b3c3564f374e97a8104b9d2dd8e731b17d886bdbe2d003f36179c0271890
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 13:45:17 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 02 Oct 2022 01:42:55 GMT
Expires: Sun, 09 Oct 2022 01:42:54 GMT
Etag: "12094e4f75e6d03415180d178cfc097ef2aeffd6"
Cache-Control: max-age=388056,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 754e5b6e4fd50b39-OSL
images.outbrainimg.com/transform/v3/eyJpdSI6IjFmZGE5ZGVkODU4MWRiN2MzMDVhZmM4MWE0YzZkNDVhMDNhYjE3NWZlYzQ5YWUwNjZlOGRjODQ4NjgzNGQwYzIiLCJ3IjozMDAsImgiOjIwMCwiZCI6MS41LCJjcyI6MiwiZiI6NX0.mp4
200 OK 48 kB URL HTTP/2 images.outbrainimg.com/transform/v3/eyJpdSI6IjFmZGE5ZGVkODU4MWRiN2MzMDVhZmM4MWE0YzZkNDVhMDNhYjE3NWZlYzQ5YWUwNjZlOGRjODQ4NjgzNGQwYzIiLCJ3IjozMDAsImgiOjIwMCwiZCI6MS41LCJjcyI6MiwiZiI6NX0.mp4
IP
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash 9cacd1f67ebfe5833917bc7903fa4f69
b830be69b0018e940d42b0171aec2e7613ee93b4
d91fbb4900937cc149fc8e67989684fd2ade693fb4c0fe3a08e553e2b71606a6
GET /transform/v3/eyJpdSI6IjFmZGE5ZGVkODU4MWRiN2MzMDVhZmM4MWE0YzZkNDVhMDNhYjE3NWZlYzQ5YWUwNjZlOGRjODQ4NjgzNGQwYzIiLCJ3IjozMDAsImgiOjIwMCwiZCI6MS41LCJjcyI6MiwiZiI6NX0.mp4 HTTP/1.1
Host: images.outbrainimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: video/mp4
content-length: 48488
last-modified: Wed, 24 Aug 2022 10:04:59 GMT
x-traceid: 514bb78395854e1db228fb2918e7daa2
cache-control: max-age=1147952
date: Tue, 04 Oct 2022 13:45:17 GMT
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
timing-allow-origin: *, *
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?adv_id=8721&redir=https%3A%2F%2Fsync.spotim.market%2Fcsync%2F%3Ft%3Da%26ep%3D301276%26extuid%3D%24SPOTX_USER_ID%20
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=8721&redir=https%3A%2F%2Fsync.spotim.market%2Fcsync%2F%3Ft%3Da%26ep%3D301276%26extuid%3D%24SPOTX_USER_ID%20
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?adv_id=8721&redir=https%3A%2F%2Fsync.spotim.market%2Fcsync%2F%3Ft%3Da%26ep%3D301276%26extuid%3D%24SPOTX_USER_ID%20 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 04 Oct 2022 13:45:17 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=c8378335-43ea-11ed-8efc-1ce730eb0506; expires=Tue, 01-Nov-2022 13:45:17 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?adv_id=8721&redir=https%3A%2F%2Fsync.spotim.market%2Fcsync%2F%3Ft%3Da%26ep%3D301276%26extuid%3D%24SPOTX_USER_ID%20&__user_check__=1&sync_id=c8378378-43ea-11ed-8efc-1ce730eb0506
X-fe: 140
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?source=211945
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?source=211945
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?source=211945 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 04 Oct 2022 13:45:17 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=c835cf04-43ea-11ed-a2ed-125b01370106; expires=Tue, 01-Nov-2022 13:45:17 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?source=211945&__user_check__=1&sync_id=c835cf4b-43ea-11ed-a2ed-125b01370106
X-fe: 93
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
widgets.outbrain.com/nanoWidget/2000905/module/clip.js?e=1
200 OK 701 B URL HTTP/2 widgets.outbrain.com/nanoWidget/2000905/module/clip.js?e=1
IP
File type ASCII text, with very long lines (518)
Hash c396875378b88f80f18638f687e52f7d
fc61a24e492835cf6cb7a115896c2a8a9d610f25
7187d1e2aa692ce90f409c16e6671a1704b0573a9ec0a50b4c3a601a3e966d3d
GET /nanoWidget/2000905/module/clip.js?e=1 HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "62adef128c371734c7b1daf9ef30b47d:1664781070.009272"
last-modified: Mon, 03 Oct 2022 06:37:35 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
expires: Tue, 04 Oct 2022 17:45:17 GMT
date: Tue, 04 Oct 2022 13:45:17 GMT
content-length: 701
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
widgets.outbrain.com/nanoWidget/2000905/module/singleAnimationOnFeed.js?e=1
200 OK 503 B URL HTTP/2 widgets.outbrain.com/nanoWidget/2000905/module/singleAnimationOnFeed.js?e=1
IP
File type ASCII text, with very long lines (502)
Hash daeca26f2c71246ef07abcc2649eab7e
be1bf568a00b5249545b75035ab05080b6b2a9b8
c9d8597abef64f35dbbb03e2998e3256b9d93ea34967bf385615eb4f72653abe
GET /nanoWidget/2000905/module/singleAnimationOnFeed.js?e=1 HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "daeca26f2c71246ef07abcc2649eab7e:1664781092.363825"
last-modified: Mon, 03 Oct 2022 06:37:35 GMT
server: AkamaiNetStorage
content-length: 503
cache-control: max-age=14400
expires: Tue, 04 Oct 2022 17:45:17 GMT
date: Tue, 04 Oct 2022 13:45:17 GMT
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
di.rlcdn.com/710530.gif
451 Unavailable For Legal Reasons 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /710530.gif HTTP/1.1
Host: di.rlcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 451 Unavailable For Legal Reasons
date: Tue, 04 Oct 2022 13:45:17 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
images.outbrainimg.com/transform/v3/eyJpdSI6ImM5ZDA0NjM0MDRiZGFhN2M5ZWVlNTUxM2EwNWQzYmY4NDMyYTZkYjI5YzYwMzljOWE3NzhjZmM1ZTU3NDcyYWMiLCJ3IjozMDAsImgiOjIwMCwiZCI6MS41LCJjcyI6MCwiZiI6MH0.jpg
200 OK 24 kB URL HTTP/2 images.outbrainimg.com/transform/v3/eyJpdSI6ImM5ZDA0NjM0MDRiZGFhN2M5ZWVlNTUxM2EwNWQzYmY4NDMyYTZkYjI5YzYwMzljOWE3NzhjZmM1ZTU3NDcyYWMiLCJ3IjozMDAsImgiOjIwMCwiZCI6MS41LCJjcyI6MCwiZiI6MH0.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x300, components 3\012- data
Hash abb8be6d709f57c28cb695bab6879046
636ba723b2275f8f5e7fcf033c1a1fc51cc2264e
48e678ec8bf130c502e29de90473c203de5171e8487cad9183033c02a8ad9fc4
GET /transform/v3/eyJpdSI6ImM5ZDA0NjM0MDRiZGFhN2M5ZWVlNTUxM2EwNWQzYmY4NDMyYTZkYjI5YzYwMzljOWE3NzhjZmM1ZTU3NDcyYWMiLCJ3IjozMDAsImgiOjIwMCwiZCI6MS41LCJjcyI6MCwiZiI6MH0.jpg HTTP/1.1
Host: images.outbrainimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 23767
last-modified: Fri, 05 Aug 2022 06:24:45 GMT
x-traceid: 9b21dedcd818cddc6a8de5653ec374bc
cache-control: max-age=1203943
date: Tue, 04 Oct 2022 13:45:17 GMT
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
timing-allow-origin: *, *
X-Firefox-Spdy: h2
images.outbrainimg.com/transform/v3/eyJpdSI6IjYyYzA0ZTIzZjcwZWMxNDY2NTVjZGIxODg3N2E0OTJjMWExNDQ0ZjM2YjdiNjYxYWZlZWE3MGRjZWY5YjY0M2EiLCJ3IjozMDAsImgiOjIwMCwiZCI6MS41LCJjcyI6MCwiZiI6MH0.jpg
200 OK 21 kB URL HTTP/2 images.outbrainimg.com/transform/v3/eyJpdSI6IjYyYzA0ZTIzZjcwZWMxNDY2NTVjZGIxODg3N2E0OTJjMWExNDQ0ZjM2YjdiNjYxYWZlZWE3MGRjZWY5YjY0M2EiLCJ3IjozMDAsImgiOjIwMCwiZCI6MS41LCJjcyI6MCwiZiI6MH0.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x300, components 3\012- data
Hash f7bc3f14283ca7604b4654c1a1ef18c7
70a6eace84581003d074ceffb17e1e81d1fb8f72
6ec0251e0a446392757c4edab46c63e88da2dd4b91a64ffc3bae0836373afffd
GET /transform/v3/eyJpdSI6IjYyYzA0ZTIzZjcwZWMxNDY2NTVjZGIxODg3N2E0OTJjMWExNDQ0ZjM2YjdiNjYxYWZlZWE3MGRjZWY5YjY0M2EiLCJ3IjozMDAsImgiOjIwMCwiZCI6MS41LCJjcyI6MCwiZiI6MH0.jpg HTTP/1.1
Host: images.outbrainimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 21314
last-modified: Thu, 28 Jul 2022 09:12:37 GMT
x-traceid: c97dd9b5d06bc7a6558f7d5f42040cf5
cache-control: max-age=1548957
date: Tue, 04 Oct 2022 13:45:17 GMT
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
timing-allow-origin: *, *
X-Firefox-Spdy: h2
mcdp-nydc1.outbrain.com/l?token=b077215e31c843384348628e8e53eeae_27801_1664891116671&tm=2548&eT=0&widgetWidth=999&widgetHeight=294&widgetX=142&widgetY=1467&wRV=2000905&pVis=1&lsd=-1&eIdx=&cnsnt=no_consent&rtt=1252&oo=true&ab=0&wl=0
200 OK 28 B URL HTTP/1.1 mcdp-nydc1.outbrain.com/l?token=b077215e31c843384348628e8e53eeae_27801_1664891116671&tm=2548&eT=0&widgetWidth=999&widgetHeight=294&widgetX=142&widgetY=1467&wRV=2000905&pVis=1&lsd=-1&eIdx=&cnsnt=no_consent&rtt=1252&oo=true&ab=0&wl=0
IP
File type ASCII text, with no line terminators
Hash 377f144d3bb0cf9cf32318e02c9a0a27
cca7d87df98ec713fcb21cdaf937116d3cc00b1f
e11e6d8b2de0c0b8de968c82c7d56316e4ea02e1e8ad112e2a53e078b4f36e01
GET /l?token=b077215e31c843384348628e8e53eeae_27801_1664891116671&tm=2548&eT=0&widgetWidth=999&widgetHeight=294&widgetX=142&widgetY=1467&wRV=2000905&pVis=1&lsd=-1&eIdx=&cnsnt=no_consent&rtt=1252&oo=true&ab=0&wl=0 HTTP/1.1
Host: mcdp-nydc1.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Origin: https://braincandy.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 13:45:17 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 28
X-TraceId: 0627f10e957174db3dbd328a68175ffb
access-control-allow-origin: *
access-control-expose-headers: content-range
content-encoding: gzip
ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fsync.spotim.market%252Fcsync%253Ft%253Da%2526ep%253D271858%2526extuid%253D%2524UID
302 Found 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fsync.spotim.market%252Fcsync%253Ft%253Da%2526ep%253D271858%2526extuid%253D%2524UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fsync.spotim.market%252Fcsync%253Ft%253Da%2526ep%253D271858%2526extuid%253D%2524UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 13:45:18 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://sync.spotim.market/csync?t=a&ep=271858&extuid=0
AN-X-Request-Uuid: 3a0125b4-6417-40ce-89b1-3f09f2880c2f
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 536.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ocsp.sectigo.com/
200 OK 471 B IP
Hash d0cccf4ce8253fd53286a85fef0716e8
12094e4f75e6d03415180d178cfc097ef2aeffd6
83f2b3c3564f374e97a8104b9d2dd8e731b17d886bdbe2d003f36179c0271890
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 13:45:18 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 02 Oct 2022 01:42:55 GMT
Expires: Sun, 09 Oct 2022 01:42:54 GMT
Etag: "12094e4f75e6d03415180d178cfc097ef2aeffd6"
Cache-Control: max-age=388055,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 754e5b6f89300b39-OSL
i.liadm.com/s/35004?bidder_id=98254&bidder_uuid=&_li_chk=true&previous_uuid=738dd0be7394441eb65202de70da4d90
303 See Other 0 B URL HTTP/1.1 i.liadm.com/s/35004?bidder_id=98254&bidder_uuid=&_li_chk=true&previous_uuid=738dd0be7394441eb65202de70da4d90
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/35004?bidder_id=98254&bidder_uuid=&_li_chk=true&previous_uuid=738dd0be7394441eb65202de70da4d90 HTTP/1.1
Host: i.liadm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://i.liadm.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 303 See Other
Date: Tue, 04 Oct 2022 13:45:18 GMT
Content-Length: 0
Connection: keep-alive
Location: https://i6.liadm.com/s/35004?bidder_id=98254&bidder_uuid=
Set-Cookie: _li_ss=MgkI_____wcQsxM; Max-Age=2592000; Expires=Thu, 03 Nov 2022 13:45:18 GMT; SameSite=None; Path=/s; Secure
lidid=8bc80de1-3485-44f3-8f96-04ddd4fc9f5b; Max-Age=63072000; Expires=Thu, 03 Oct 2024 13:45:18 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure
Request-Time: 3
Strict-Transport-Security: max-age=31536000; includeSubDomains
mcdp-nydc1.outbrain.com/l?token=7bccf80b1c71af3ef63a8ed79a48fefd_27801_1664891116831&tm=2572&eT=0&widgetWidth=999&widgetHeight=270&widgetX=142&widgetY=1785&wRV=2000905&pVis=0&lsd=-1&eIdx=&cnsnt=no_consent&rtt=1252&oo=true&ab=0&wl=0
200 OK 28 B URL HTTP/1.1 mcdp-nydc1.outbrain.com/l?token=7bccf80b1c71af3ef63a8ed79a48fefd_27801_1664891116831&tm=2572&eT=0&widgetWidth=999&widgetHeight=270&widgetX=142&widgetY=1785&wRV=2000905&pVis=0&lsd=-1&eIdx=&cnsnt=no_consent&rtt=1252&oo=true&ab=0&wl=0
IP
File type ASCII text, with no line terminators
Hash 377f144d3bb0cf9cf32318e02c9a0a27
cca7d87df98ec713fcb21cdaf937116d3cc00b1f
e11e6d8b2de0c0b8de968c82c7d56316e4ea02e1e8ad112e2a53e078b4f36e01
GET /l?token=7bccf80b1c71af3ef63a8ed79a48fefd_27801_1664891116831&tm=2572&eT=0&widgetWidth=999&widgetHeight=270&widgetX=142&widgetY=1785&wRV=2000905&pVis=0&lsd=-1&eIdx=&cnsnt=no_consent&rtt=1252&oo=true&ab=0&wl=0 HTTP/1.1
Host: mcdp-nydc1.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Origin: https://braincandy.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 13:45:18 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 28
X-TraceId: c6839ef82a11917b270a7afc431d134a
access-control-allow-origin: *
access-control-expose-headers: content-range
content-encoding: gzip
widgets.outbrain.com/widgetMonitor/monitor.html?name=obm-ClipError&env=1&message=Error%20loading%20as%20video%3A%20https%3A%2F%2Fimages.outbrainimg.com%2Ftransform%2Fv3%2FeyJpdSI6IjFmZGE5ZGVkODU4MWRiN2MzMDVhZmM4MWE0YzZkNDVhMDNhYjE3NWZlYzQ5YWUwNjZlOGRjODQ4NjgzNGQwYzIiLCJ3IjozMDAsImgiOjIwMCwiZCI6MS41LCJjcyI6MiwiZiI6NX0.mp4&stack=undefined&ver=2000905&errorEleUrl=https%3A%2F%2Fimages.outbrainimg.com%2Ftransform%2Fv3%2FeyJpdSI6IjFmZGE5ZGVkODU4MWRiN2MzMDVhZmM4MWE0YzZkNDVhMDNhYjE3NWZlYzQ5YWUwNjZlOGRjODQ4NjgzNGQwYzIiLCJ3IjozMDAsImgiOjIwMCwiZCI6MS41LCJjcyI6MiwiZiI6NX0.mp4&sId=6144817&dId=4793763539&pId=27801
200 OK 1.6 kB URL HTTP/2 widgets.outbrain.com/widgetMonitor/monitor.html?name=obm-ClipError&env=1&message=Error%20loading%20as%20video%3A%20https%3A%2F%2Fimages.outbrainimg.com%2Ftransform%2Fv3%2FeyJpdSI6IjFmZGE5ZGVkODU4MWRiN2MzMDVhZmM4MWE0YzZkNDVhMDNhYjE3NWZlYzQ5YWUwNjZlOGRjODQ4NjgzNGQwYzIiLCJ3IjozMDAsImgiOjIwMCwiZCI6MS41LCJjcyI6MiwiZiI6NX0.mp4&stack=undefined&ver=2000905&errorEleUrl=https%3A%2F%2Fimages.outbrainimg.com%2Ftransform%2Fv3%2FeyJpdSI6IjFmZGE5ZGVkODU4MWRiN2MzMDVhZmM4MWE0YzZkNDVhMDNhYjE3NWZlYzQ5YWUwNjZlOGRjODQ4NjgzNGQwYzIiLCJ3IjozMDAsImgiOjIwMCwiZCI6MS41LCJjcyI6MiwiZiI6NX0.mp4&sId=6144817&dId=4793763539&pId=27801
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3599), with no line terminators
Hash 272b28d051411ad1166530ade5d7a836
42b6a8411abea1519ba86aa1077a508d7c03f2d2
5f2e4281a1d67ac435cf8e18cfd45f08bcba2a069dc0714013dbc419eaefc248
GET /widgetMonitor/monitor.html?name=obm-ClipError&env=1&message=Error%20loading%20as%20video%3A%20https%3A%2F%2Fimages.outbrainimg.com%2Ftransform%2Fv3%2FeyJpdSI6IjFmZGE5ZGVkODU4MWRiN2MzMDVhZmM4MWE0YzZkNDVhMDNhYjE3NWZlYzQ5YWUwNjZlOGRjODQ4NjgzNGQwYzIiLCJ3IjozMDAsImgiOjIwMCwiZCI6MS41LCJjcyI6MiwiZiI6NX0.mp4&stack=undefined&ver=2000905&errorEleUrl=https%3A%2F%2Fimages.outbrainimg.com%2Ftransform%2Fv3%2FeyJpdSI6IjFmZGE5ZGVkODU4MWRiN2MzMDVhZmM4MWE0YzZkNDVhMDNhYjE3NWZlYzQ5YWUwNjZlOGRjODQ4NjgzNGQwYzIiLCJ3IjozMDAsImgiOjIwMCwiZCI6MS41LCJjcyI6MiwiZiI6NX0.mp4&sId=6144817&dId=4793763539&pId=27801 HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: text/html
etag: "9e7d58ad34c85761770fc947d9bee792:1617096471.391057"
last-modified: Tue, 30 Mar 2021 09:27:46 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=604800
expires: Tue, 11 Oct 2022 13:45:18 GMT
date: Tue, 04 Oct 2022 13:45:18 GMT
content-length: 1602
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
mcdp-nydc1.outbrain.com/l?token=7b3e6882713360a2046806e513f13bd6_27801_1664891117083&tm=2577&eT=0&widgetWidth=999&widgetHeight=260&widgetX=142&widgetY=2419&wRV=2000905&pVis=1&lsd=-1&eIdx=&cnsnt=no_consent&rtt=1252&oo=true&ab=0&wl=0
200 OK 28 B URL HTTP/1.1 mcdp-nydc1.outbrain.com/l?token=7b3e6882713360a2046806e513f13bd6_27801_1664891117083&tm=2577&eT=0&widgetWidth=999&widgetHeight=260&widgetX=142&widgetY=2419&wRV=2000905&pVis=1&lsd=-1&eIdx=&cnsnt=no_consent&rtt=1252&oo=true&ab=0&wl=0
IP
File type ASCII text, with no line terminators
Hash 377f144d3bb0cf9cf32318e02c9a0a27
cca7d87df98ec713fcb21cdaf937116d3cc00b1f
e11e6d8b2de0c0b8de968c82c7d56316e4ea02e1e8ad112e2a53e078b4f36e01
GET /l?token=7b3e6882713360a2046806e513f13bd6_27801_1664891117083&tm=2577&eT=0&widgetWidth=999&widgetHeight=260&widgetX=142&widgetY=2419&wRV=2000905&pVis=1&lsd=-1&eIdx=&cnsnt=no_consent&rtt=1252&oo=true&ab=0&wl=0 HTTP/1.1
Host: mcdp-nydc1.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Origin: https://braincandy.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 13:45:18 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 28
X-TraceId: aad14fd97f17f192d81fb772dec69357
access-control-allow-origin: *
access-control-expose-headers: content-range
content-encoding: gzip
mcdp-nydc1.outbrain.com/l?token=eb83f2bd51efe64d01dfd2aee51c6722_27801_1664891116957&tm=2574&eT=0&widgetWidth=999&widgetHeight=316&widgetX=142&widgetY=2079&wRV=2000905&pVis=1&lsd=-1&eIdx=&cnsnt=no_consent&rtt=1252&oo=true&ab=0&wl=0
200 OK 28 B URL HTTP/1.1 mcdp-nydc1.outbrain.com/l?token=eb83f2bd51efe64d01dfd2aee51c6722_27801_1664891116957&tm=2574&eT=0&widgetWidth=999&widgetHeight=316&widgetX=142&widgetY=2079&wRV=2000905&pVis=1&lsd=-1&eIdx=&cnsnt=no_consent&rtt=1252&oo=true&ab=0&wl=0
IP
File type ASCII text, with no line terminators
Hash 377f144d3bb0cf9cf32318e02c9a0a27
cca7d87df98ec713fcb21cdaf937116d3cc00b1f
e11e6d8b2de0c0b8de968c82c7d56316e4ea02e1e8ad112e2a53e078b4f36e01
GET /l?token=eb83f2bd51efe64d01dfd2aee51c6722_27801_1664891116957&tm=2574&eT=0&widgetWidth=999&widgetHeight=316&widgetX=142&widgetY=2079&wRV=2000905&pVis=1&lsd=-1&eIdx=&cnsnt=no_consent&rtt=1252&oo=true&ab=0&wl=0 HTTP/1.1
Host: mcdp-nydc1.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Origin: https://braincandy.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 13:45:18 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 28
X-TraceId: 0fde2d87e5ddeb902be53fa0e3868914
access-control-allow-origin: *
access-control-expose-headers: content-range
content-encoding: gzip
mcdp-nydc1.outbrain.com/l?token=a46b3d73e1da02e1abbd4259a8db5cbf_27801_1664891117505&tm=2578&eT=0&widgetWidth=999&widgetHeight=361&widgetX=142&widgetY=2703&wRV=2000905&pVis=0&lsd=-1&eIdx=&cnsnt=no_consent&rtt=1252&oo=true&ab=0&wl=0
200 OK 28 B URL HTTP/1.1 mcdp-nydc1.outbrain.com/l?token=a46b3d73e1da02e1abbd4259a8db5cbf_27801_1664891117505&tm=2578&eT=0&widgetWidth=999&widgetHeight=361&widgetX=142&widgetY=2703&wRV=2000905&pVis=0&lsd=-1&eIdx=&cnsnt=no_consent&rtt=1252&oo=true&ab=0&wl=0
IP
File type ASCII text, with no line terminators
Hash 377f144d3bb0cf9cf32318e02c9a0a27
cca7d87df98ec713fcb21cdaf937116d3cc00b1f
e11e6d8b2de0c0b8de968c82c7d56316e4ea02e1e8ad112e2a53e078b4f36e01
GET /l?token=a46b3d73e1da02e1abbd4259a8db5cbf_27801_1664891117505&tm=2578&eT=0&widgetWidth=999&widgetHeight=361&widgetX=142&widgetY=2703&wRV=2000905&pVis=0&lsd=-1&eIdx=&cnsnt=no_consent&rtt=1252&oo=true&ab=0&wl=0 HTTP/1.1
Host: mcdp-nydc1.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Origin: https://braincandy.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 13:45:18 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 28
X-TraceId: 26a4aaf1377a837e1369795f36ded13b
access-control-allow-origin: *
access-control-expose-headers: content-range
content-encoding: gzip
sync.search.spotxchange.com/partner?adv_id=8721&redir=https%3A%2F%2Fsync.spotim.market%2Fcsync%2F%3Ft%3Da%26ep%3D301276%26extuid%3D%24SPOTX_USER_ID%20&__user_check__=1&sync_id=c8378378-43ea-11ed-8efc-1ce730eb0506
200 OK 43 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=8721&redir=https%3A%2F%2Fsync.spotim.market%2Fcsync%2F%3Ft%3Da%26ep%3D301276%26extuid%3D%24SPOTX_USER_ID%20&__user_check__=1&sync_id=c8378378-43ea-11ed-8efc-1ce730eb0506
IP
ASN #35220 SpotXchange, INC
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55fade2068e7503eae8d7ddf5eb6bd09
317496a096d6c86486a71d4521994bcd171a6bb3
e586a84d8523747f42e510d78e141015b6424cf67d612854e892a7bcedc8ec9e
GET /partner?adv_id=8721&redir=https%3A%2F%2Fsync.spotim.market%2Fcsync%2F%3Ft%3Da%26ep%3D301276%26extuid%3D%24SPOTX_USER_ID%20&__user_check__=1&sync_id=c8378378-43ea-11ed-8efc-1ce730eb0506 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 04 Oct 2022 13:45:18 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Set-Cookie: audience=c87834f6-43ea-11ed-b4e8-1131174c0306; expires=Tue, 01-Nov-2022 13:45:18 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 86
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?source=211945&__user_check__=1&sync_id=c835cf4b-43ea-11ed-a2ed-125b01370106
200 OK 43 B URL HTTP/1.1 sync.search.spotxchange.com/partner?source=211945&__user_check__=1&sync_id=c835cf4b-43ea-11ed-a2ed-125b01370106
IP
ASN #35220 SpotXchange, INC
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55fade2068e7503eae8d7ddf5eb6bd09
317496a096d6c86486a71d4521994bcd171a6bb3
e586a84d8523747f42e510d78e141015b6424cf67d612854e892a7bcedc8ec9e
GET /partner?source=211945&__user_check__=1&sync_id=c835cf4b-43ea-11ed-a2ed-125b01370106 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 04 Oct 2022 13:45:18 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Set-Cookie: audience=c878aca5-43ea-11ed-9877-14e583300306; expires=Tue, 01-Nov-2022 13:45:18 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 116
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 28 Sep 2022 19:34:08 GMT
expires: Thu, 28 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 497470
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data
Hash b9c29351c46f3e8c8631c4002457f48a
e57e59c5780995ff2937ab2b511a769212974a87
f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 28 Sep 2022 19:34:21 GMT
expires: Thu, 28 Sep 2023 19:34:21 GMT
cache-control: public, max-age=31536000
age: 497457
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 28 Sep 2022 19:34:08 GMT
expires: Thu, 28 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 497470
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 123c2efbf06cb624b76690d8bb59f94d
76c1a7b36c78c6b8d53b54073111004da6891fe8
e69513023b03f7bc982ede0b8b4d255ea087bed95cb97d3a46aadef19f627897
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5149
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:18 GMT
Last-Modified: Tue, 04 Oct 2022 12:19:29 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
image6.pubmatic.com/AdServer/UCookieSetPug?oid=2&cb=PubMatic._uidCB
200 OK 60 B URL HTTP/2 image6.pubmatic.com/AdServer/UCookieSetPug?oid=2&cb=PubMatic._uidCB
IP
File type ASCII text, with no line terminators
Hash e32b098399525a8e579db6e63a860552
9d06159864b9f21f3a25ebd1fa935621e6c8e536
ea189b9638445fda582c9de277727c12b1ec3aa239022f20f589167e7424a846
GET /AdServer/UCookieSetPug?oid=2&cb=PubMatic._uidCB HTTP/1.1
Host: image6.pubmatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.pubmatic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
cache-control: private
content-type: text/html; charset=UTF-8
expires: Mon, 2 Jan 2023 04:53:06 GMT
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
date: Tue, 04 Oct 2022 13:45:18 GMT
content-length: 60
X-Firefox-Spdy: h2
flint.defybrick.com/show_pla?id=65349&url=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&sf=0&k=&idx=0&ch=&ext=&np=linux%20x86_64&nv=&rand=03719271170262201218960985929502622810721862952007201022812191618926&nc=0&tsf=0&tsfmi=&pv=0&cb=1664891117554&ref=https%3A%2F%2Fbraincandy.net%2F&pit=1&hl=2&op=0&fs=1280x939&ss=1280x1024&pre=0&jsonp=OBR.extern.onCheqResponse&mr=&ag=718972423&at=&bid=e30%3D&di=W1siZWYiLDQ0MzhdLFsxMiwie1wiZVwiOjAsXCJ3Z2xcIjoxfSJdLFstMSwiTGludXggeDg2XzY0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%0D%0ALSJdLFsiYm5jaCIsNzldXQ%3D%3D&tsfu=&fst=1280x939&dep=0&cpos=%5B%7B%22x%22%3A139%2C%22y%22%3A8936%2C%22w%22%3A1005%2C%22h%22%3A1637%7D%2C%7B%22w%22%3A1280%2C%22h%22%3A939%7D%5D&ver=41&cri=UiQ2p7xt7M&sdd=%7B%7D&pto=4351
200 OK 1.2 kB URL HTTP/2 flint.defybrick.com/show_pla?id=65349&url=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&sf=0&k=&idx=0&ch=&ext=&np=linux%20x86_64&nv=&rand=03719271170262201218960985929502622810721862952007201022812191618926&nc=0&tsf=0&tsfmi=&pv=0&cb=1664891117554&ref=https%3A%2F%2Fbraincandy.net%2F&pit=1&hl=2&op=0&fs=1280x939&ss=1280x1024&pre=0&jsonp=OBR.extern.onCheqResponse&mr=&ag=718972423&at=&bid=e30%3D&di=W1siZWYiLDQ0MzhdLFsxMiwie1wiZVwiOjAsXCJ3Z2xcIjoxfSJdLFstMSwiTGludXggeDg2XzY0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%0D%0ALSJdLFsiYm5jaCIsNzldXQ%3D%3D&tsfu=&fst=1280x939&dep=0&cpos=%5B%7B%22x%22%3A139%2C%22y%22%3A8936%2C%22w%22%3A1005%2C%22h%22%3A1637%7D%2C%7B%22w%22%3A1280%2C%22h%22%3A939%7D%5D&ver=41&cri=UiQ2p7xt7M&sdd=%7B%7D&pto=4351
IP
File type ASCII text, with very long lines (1961), with no line terminators
Hash c670256ea0d916b6531d6354889ce561
68592119f4367268fb316dbf295125122591d53a
74a0a7cd4f17ad040e097ee2d5d77fbf889c8dbc93277eced68058a9644cd995
GET /show_pla?id=65349&url=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&sf=0&k=&idx=0&ch=&ext=&np=linux%20x86_64&nv=&rand=03719271170262201218960985929502622810721862952007201022812191618926&nc=0&tsf=0&tsfmi=&pv=0&cb=1664891117554&ref=https%3A%2F%2Fbraincandy.net%2F&pit=1&hl=2&op=0&fs=1280x939&ss=1280x1024&pre=0&jsonp=OBR.extern.onCheqResponse&mr=&ag=718972423&at=&bid=e30%3D&di=W1siZWYiLDQ0MzhdLFsxMiwie1wiZVwiOjAsXCJ3Z2xcIjoxfSJdLFstMSwiTGludXggeDg2XzY0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%0D%0ALSJdLFsiYm5jaCIsNzldXQ%3D%3D&tsfu=&fst=1280x939&dep=0&cpos=%5B%7B%22x%22%3A139%2C%22y%22%3A8936%2C%22w%22%3A1005%2C%22h%22%3A1637%7D%2C%7B%22w%22%3A1280%2C%22h%22%3A939%7D%5D&ver=41&cri=UiQ2p7xt7M&sdd=%7B%7D&pto=4351 HTTP/1.1
Host: flint.defybrick.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/javascript
date: Tue, 04 Oct 2022 13:45:18 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 1203
X-Firefox-Spdy: h2
rumcdn.geoedge.be/191e27c7-e539-4da7-98e5-2d3c626338be/grumi.js
200 OK 314 kB URL HTTP/2 rumcdn.geoedge.be/191e27c7-e539-4da7-98e5-2d3c626338be/grumi.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 314 kB (314378 bytes)
Hash eae96231e9b565360dfbc221797247de
fe93ebb47fd07d13e572cc5a951bbe23907fe178
de08cfe41afbde67a10e9165a215175c4091f4cd6742969560b5854bd417234a
GET /191e27c7-e539-4da7-98e5-2d3c626338be/grumi.js HTTP/1.1
Host: rumcdn.geoedge.be
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
date: Tue, 04 Oct 2022 13:38:04 GMT
last-modified: Tue, 04 Oct 2022 12:57:00 GMT
etag: W/"973636ba65ea2f37c24c72b460764935"
cache-control: public,max-age=3600,stale-while-revalidate=3600,immutable,must-revalidate
x-amz-version-id: g22.MCZZCEu3sotIvWNxKYTk_7nGaNIL
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Vak61RFywjP5TFhXsh4kw9O9JSXDWujZ-z1MFTAzv6VQx44u1darYA==
age: 435
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d5505527a872a3c129885fad39497bdb
b1ff47a3f2216b4afc84b62d5e06f748ae51403c
14b2ea761ab8d2fdfb4afc4a6bc68a28e75741e56ca77adb6f8fda866c1a7b88
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "14B2EA761AB8D2FDFB4AFC4A6BC68A28E75741E56CA77ADB6F8FDA866C1A7B88"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3645
Expires: Tue, 04 Oct 2022 14:46:03 GMT
Date: Tue, 04 Oct 2022 13:45:18 GMT
Connection: keep-alive
zerossl.ocsp.sectigo.com/
200 OK 317 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash bb1ef26518365700dfda20025abc2c04
633a7e3f21cc35a5df95ef846866cb94b2419d72
635daa6416a139b0247e91d2255b762b5662289456419651c707fa28920b0087
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 13:45:18 GMT
Content-Type: application/ocsp-response
Content-Length: 317
Connection: keep-alive
Last-Modified: Tue, 04 Oct 2022 07:07:56 GMT
Expires: Tue, 11 Oct 2022 07:07:55 GMT
Etag: "633a7e3f21cc35a5df95ef846866cb94b2419d72"
Cache-Control: max-age=580356,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 754e5b737de20b3d-OSL
flint.defybrick.com/tracker/imp.gif?e=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&cb=1664891118066&cri=UiQ2p7xt7M
200 OK 43 B URL HTTP/2 flint.defybrick.com/tracker/imp.gif?e=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&cb=1664891118066&cri=UiQ2p7xt7M
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /tracker/imp.gif?e=37dfbd8ee84e00136ceacf3ceb468b959225c24f567d51c5c30f41b0254384cfa532ff1a285aa40e98d022e0b44dc87ea4a36fde4c1b8c682309094d0ba0bfea9475489e91da563e351aff717718956a8b70cd0130003f8101424d3f065cc3bf775d36fa26e877cb55e2cc7ce2586fb01f6f3903d053f054abd1c5d52fe87547ed62d2f1157f841638426f4d99c80666eb73aae2c4ff5f0afe1ccde66ebd7f9e79ce42f85a6af77159a80b431a2cdb5146a7deb7e41bb623a84ecc5bfb481e75bddc273b7d7050837b898409875166a3ccae204d7b22d6872e219bf6055c7f122e4f14ae8832606f1bb6b81c389ea1e72d93e208701c2af8f2f4909070b7dade59e807ca503a34ceba9db2a36099dbe1798b214b94a09d3e120483180cd9e268119ac5fe7c8e00ac15b48110914ace9d2ccd6a639fcc73d962c1d0bcfbddefe34b7ea53daaa9bf6b0d26b6c131d2e51bed16175f831444db85958581b2c536cf6a88cdfbc868e97f6a39883873c5dad15e2990b04afa4fa8c01dc339e02910191a8367eb5be389ee7ef8df78eb31a7c19cdb27d6090a2dea5d540b2d073ed6ab73a042c4ed8a33a9886ef1956c8294f9e97ac1f0f64d2626daf6&cb=1664891118066&cri=UiQ2p7xt7M HTTP/1.1
Host: flint.defybrick.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Tue, 04 Oct 2022 13:45:18 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2
static-cdn.spot.im/production/ads/tags/v21.6.2/ads/main-chunk.css
200 OK 735 B URL HTTP/2 static-cdn.spot.im/production/ads/tags/v21.6.2/ads/main-chunk.css
IP
File type ASCII text, with very long lines (337)
Hash 23616dc03eda7319212b393d9b352280
ca521e703d8fd3350a23e6cf34a237d8b0bbee5a
9129b704e7d878812ae91f2fa172fc0c06b1e603e8acd2f50c39b18637089494
GET /production/ads/tags/v21.6.2/ads/main-chunk.css HTTP/1.1
Host: static-cdn.spot.im
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Cookie: device_uuid=37659e0b-15f9-40e6-8fe9-62c0dd1d32b5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 735
last-modified: Thu, 15 Sep 2022 10:26:30 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: lAIE8zSW2_sY7imawiMH5cw5pTcRVv9H
accept-ranges: bytes
server: AmazonS3
date: Tue, 04 Oct 2022 01:39:56 GMT
etag: "23616dc03eda7319212b393d9b352280"
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YPPXCdwiD7LFJm2CadI7zeUVkVX92mjSiMmFdMTsKnglDnYwxb7h6Q==
age: 43523
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 1d8d9b9d274270d7a62493a235350977
5d2a14d44529ea82687a56c366a48a142b8a7579
33ac6bc12a8d3868dffb9d5f8d53cd254a16686857ccbccaa2a74306b19e121d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6401
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:18 GMT
Last-Modified: Tue, 04 Oct 2022 11:58:37 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
ups.analytics.yahoo.com/ups/58196/sync?&gdpr=&gdpr_consent=&redir=true
302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58196/sync?&gdpr=&gdpr_consent=&redir=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58196/sync?&gdpr=&gdpr_consent=&redir=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 04 Oct 2022 13:45:18 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/58196/sync?&gdpr=&gdpr_consent=&redir=true&verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBO44PGMCEJDJYu3mPdr6FZvnOuQZX_kFEgEBAQGKPWNGYwAAAAAA_eMAAA&S=AQAAAmOqSU6QVTe9HnS2tbHlIJw; Expires=Wed, 4 Oct 2023 19:45:18 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
sync.spotim.market/csync?t=a&ep=271858&extuid=0
200 OK 43 B URL HTTP/1.1 sync.spotim.market/csync?t=a&ep=271858&extuid=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /csync?t=a&ep=271858&extuid=0 HTTP/1.1
Host: sync.spotim.market
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Adtelligent
Date: Tue, 04 Oct 2022 13:45:18 GMT
Content-Type: image/gif
Content-Length: 43
Etag: 68e2ebbaaebe1c43
Set-Cookie: vmuid=68e2ebbaaebe1c43; expires=Mon, 05 Dec 2022 13:45:18 GMT; domain=.spotim.market; path=/; secure; SameSite=None
i6.liadm.com/s/35004?bidder_id=98254&bidder_uuid=
200 OK 43 B URL HTTP/1.1 i6.liadm.com/s/35004?bidder_id=98254&bidder_uuid=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb02f374b8f73825415db1bccd4bd76d
b103aa629cacdd90b39538a7561da7f8e49ad73f
caa849b179befa2645a8e2c474d2e82a76777a3305315ece911013e8ee9a916c
GET /s/35004?bidder_id=98254&bidder_uuid= HTTP/1.1
Host: i6.liadm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://i.liadm.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 13:45:18 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Request-Time: 0
Cache-Control: no-store
Strict-Transport-Security: max-age=31536000; includeSubDomains
widgetmonitor.outbrain.com/WidgetErrorMonitor/api/report?name=obm-ClipError&version=2000905&message=Error%20loading%20as%20video%3A%20https%3A%2F%2Fimages.outbrainimg.com%2Ftransform%2Fv3%2FeyJpdSI6IjFmZGE5ZGVkODU4MWRiN2MzMDVhZmM4MWE0YzZkNDVhMDNhYjE3NWZlYzQ5YWUwNjZlOGRjODQ4NjgzNGQwYzIiLCJ3IjozMDAsImgiOjIwMCwiZCI6MS41LCJjcyI6MiwiZiI6NX0.mp4&env=1&url=https%3A%2F%2Fbraincandy.net%2F&referrer=&agent=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0&stack=undefined&errorEleUrl=https%3A%2F%2Fimages.outbrainimg.com%2Ftransform%2Fv3%2FeyJpdSI6IjFmZGE5ZGVkODU4MWRiN2MzMDVhZmM4MWE0YzZkNDVhMDNhYjE3NWZlYzQ5YWUwNjZlOGRjODQ4NjgzNGQwYzIiLCJ3IjozMDAsImgiOjIwMCwiZCI6MS41LCJjcyI6MiwiZiI6NX0.mp4&pId=27801&sId=6144817&dId=4793763539
200 OK 2 B URL HTTP/1.1 widgetmonitor.outbrain.com/WidgetErrorMonitor/api/report?name=obm-ClipError&version=2000905&message=Error%20loading%20as%20video%3A%20https%3A%2F%2Fimages.outbrainimg.com%2Ftransform%2Fv3%2FeyJpdSI6IjFmZGE5ZGVkODU4MWRiN2MzMDVhZmM4MWE0YzZkNDVhMDNhYjE3NWZlYzQ5YWUwNjZlOGRjODQ4NjgzNGQwYzIiLCJ3IjozMDAsImgiOjIwMCwiZCI6MS41LCJjcyI6MiwiZiI6NX0.mp4&env=1&url=https%3A%2F%2Fbraincandy.net%2F&referrer=&agent=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0&stack=undefined&errorEleUrl=https%3A%2F%2Fimages.outbrainimg.com%2Ftransform%2Fv3%2FeyJpdSI6IjFmZGE5ZGVkODU4MWRiN2MzMDVhZmM4MWE0YzZkNDVhMDNhYjE3NWZlYzQ5YWUwNjZlOGRjODQ4NjgzNGQwYzIiLCJ3IjozMDAsImgiOjIwMCwiZCI6MS41LCJjcyI6MiwiZiI6NX0.mp4&pId=27801&sId=6144817&dId=4793763539
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /WidgetErrorMonitor/api/report?name=obm-ClipError&version=2000905&message=Error%20loading%20as%20video%3A%20https%3A%2F%2Fimages.outbrainimg.com%2Ftransform%2Fv3%2FeyJpdSI6IjFmZGE5ZGVkODU4MWRiN2MzMDVhZmM4MWE0YzZkNDVhMDNhYjE3NWZlYzQ5YWUwNjZlOGRjODQ4NjgzNGQwYzIiLCJ3IjozMDAsImgiOjIwMCwiZCI6MS41LCJjcyI6MiwiZiI6NX0.mp4&env=1&url=https%3A%2F%2Fbraincandy.net%2F&referrer=&agent=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0&stack=undefined&errorEleUrl=https%3A%2F%2Fimages.outbrainimg.com%2Ftransform%2Fv3%2FeyJpdSI6IjFmZGE5ZGVkODU4MWRiN2MzMDVhZmM4MWE0YzZkNDVhMDNhYjE3NWZlYzQ5YWUwNjZlOGRjODQ4NjgzNGQwYzIiLCJ3IjozMDAsImgiOjIwMCwiZCI6MS41LCJjcyI6MiwiZiI6NX0.mp4&pId=27801&sId=6144817&dId=4793763539 HTTP/1.1
Host: widgetmonitor.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://widgets.outbrain.com
Connection: keep-alive
Referer: https://widgets.outbrain.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 13:45:18 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 2
Connection: close
Access-Control-Allow-Origin: *
X-TraceId: 463f77dc2918e3f818139c9430ae2050
ETag: W/"2-vyGp6PvFo4RvsFtPoIWeCReyIC8"
sync.spotim.market/csync?t=a&ep=281178&extuid=PM_UID
200 OK 0 B URL HTTP/1.1 sync.spotim.market/csync?t=a&ep=281178&extuid=PM_UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /csync?t=a&ep=281178&extuid=PM_UID HTTP/1.1
Host: sync.spotim.market
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ads.pubmatic.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Adtelligent
Date: Tue, 04 Oct 2022 13:45:18 GMT
Content-Length: 0
Etag: e349d358cb6f5968
Set-Cookie: vmuid=e349d358cb6f5968; expires=Mon, 05 Dec 2022 13:45:18 GMT; domain=.spotim.market; path=/; secure; SameSite=None
a281178=PM_UID; expires=Mon, 05 Dec 2022 13:45:18 GMT; domain=.spotim.market; path=/; secure; SameSite=None
ocsp.digicert.com/
200 OK 312 B IP
Hash ef27eb94f2489d96839bfddd63d9ccff
e3e5a62cb080c2ad2302318a781836993f43f32b
58a4231e4ceb454db999f8b5a6be71a765c411e37188ad6ed51053efc4f13f05
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5380
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:18 GMT
Last-Modified: Tue, 04 Oct 2022 12:15:38 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 312
player.aniview.com/script/6.1/player.js?v=1&type=s&pid=5e0e296628a061270b21ccab
200 OK 9.9 kB URL HTTP/2 player.aniview.com/script/6.1/player.js?v=1&type=s&pid=5e0e296628a061270b21ccab
IP
File type ASCII text, with very long lines (28241)
Hash de20f370225e2e3bcaeeef5692b13b2f
30d26b10ba21aa94e0660ca6de6dfd3f896ec3c8
238b96c60a056e37c9075a3599cc39872c2642de728b41e084280c651f29c1d9
GET /script/6.1/player.js?v=1&type=s&pid=5e0e296628a061270b21ccab HTTP/1.1
Host: player.aniview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtu6yjI4LZwtNQBg1xlehiOF9UzRLhKMptpcOBQ8JtcJx87xkzbqrmgSqRZxQthxVxrhYZ53yKG8kZjNx5NKyxNeBe9ZUM0
last-modified: Thu, 22 Sep 2022 10:35:02 GMT
etag: "de20f370225e2e3bcaeeef5692b13b2f"
x-goog-generation: 1663842902023514
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 9907
content-type: application/javascript
content-encoding: gzip
x-goog-hash: crc32c=uoVztw==, md5=3iDzcCJeLjvK7u9WkrE7Lw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 9907
access-control-allow-origin: *
access-control-expose-headers: Content-Type
server: UploadServer
cache-control: public, max-age=300
expires: Tue, 04 Oct 2022 13:50:19 GMT
date: Tue, 04 Oct 2022 13:45:19 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
static.criteo.net/js/ld/publishertag.prebid.123.js
200 OK 29 kB URL HTTP/2 static.criteo.net/js/ld/publishertag.prebid.123.js
IP
File type ASCII text, with very long lines (65354)
Hash 20ac2c4462879de5e87bb093a87877fb
0f5424e096ba541b4789ed910e7257493be343cd
cd064793ed5ae178ceaee41fc363174391f70a5813e33124c8483ecf68c0268b
GET /js/ld/publishertag.prebid.123.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 13:45:18 GMT
content-type: text/javascript
last-modified: Tue, 03 May 2022 11:21:03 GMT
etag: W/"6271101f-15b58"
expires: Wed, 05 Oct 2022 13:45:18 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
player.aniview.com/script/6.1/AVmanager.js?v=1.0&type=s&pid=5e0e296628a061270b21ccab
200 OK 112 kB URL HTTP/2 player.aniview.com/script/6.1/AVmanager.js?v=1.0&type=s&pid=5e0e296628a061270b21ccab
IP
File type Unicode text, UTF-8 text, with very long lines (46154), with LF, NEL line terminators
Size 112 kB (112390 bytes)
Hash 338e56b1f4ce4f7715f277f4b2749547
600797536339e354a9ad5d1d23a10b2db113a34a
7e96fafa3b612256fa5fe692da8f6d55d1fe3e23fe677ecc5c6dd54dff8aabb1
GET /script/6.1/AVmanager.js?v=1.0&type=s&pid=5e0e296628a061270b21ccab HTTP/1.1
Host: player.aniview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsdObmA8mb9WOhe-IjVLKKlAaIfwGqzQ776G7sR5J3z6kwNOGrLg4sRXNh3gw_uMdK0sDZnWsbkLmY_jqjWTkhysg
last-modified: Thu, 22 Sep 2022 10:35:01 GMT
etag: "338e56b1f4ce4f7715f277f4b2749547"
x-goog-generation: 1663842901832027
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 112390
content-type: application/javascript
content-encoding: gzip
x-goog-hash: crc32c=61SVsA==, md5=M45WsfTOT3cV8nf0snSVRw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 112390
access-control-allow-origin: *
access-control-expose-headers: Content-Type
server: UploadServer
cache-control: public, max-age=300
expires: Tue, 04 Oct 2022 13:50:19 GMT
date: Tue, 04 Oct 2022 13:45:19 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 19aa0e271005850db8ce75577deba4d1
d53215b3006ecd35d70ed9297cf8f3c9c81f8689
15052de79c8c9a576a62b7d2be8ade22f6432b9abd2e951cb33033bc470b11ac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "15052DE79C8C9A576A62B7D2BE8ADE22F6432B9ABD2E951CB33033BC470B11AC"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10673
Expires: Tue, 04 Oct 2022 16:43:12 GMT
Date: Tue, 04 Oct 2022 13:45:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash af268504890620cc315ec3510f589c53
e38f807ef51a0747e9c56e3b7189453b63be7a0a
0aced2273714320e7ba44a4b38408fd2b7947d427389b2371985ca21f4eb1cb4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0ACED2273714320E7BA44A4B38408FD2B7947D427389B2371985CA21F4EB1CB4"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17786
Expires: Tue, 04 Oct 2022 18:41:45 GMT
Date: Tue, 04 Oct 2022 13:45:19 GMT
Connection: keep-alive
zerossl.ocsp.sectigo.com/
200 OK 317 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash 3630414a9b8d14eb2a611d04cf8ca3ea
533aabb09a1a1f20322bc8ee95371a43f18b4271
393c6e07161827b07fb8a210c3c59a083bd9c89431683c40196ad15c0ea4c810
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 13:45:19 GMT
Content-Type: application/ocsp-response
Content-Length: 317
Connection: keep-alive
Last-Modified: Mon, 03 Oct 2022 23:43:28 GMT
Expires: Mon, 10 Oct 2022 23:43:27 GMT
Etag: "533aabb09a1a1f20322bc8ee95371a43f18b4271"
Cache-Control: max-age=553687,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 754e5b76d9de0b3d-OSL
zerossl.ocsp.sectigo.com/
200 OK 317 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash 3630414a9b8d14eb2a611d04cf8ca3ea
533aabb09a1a1f20322bc8ee95371a43f18b4271
393c6e07161827b07fb8a210c3c59a083bd9c89431683c40196ad15c0ea4c810
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 13:45:19 GMT
Content-Type: application/ocsp-response
Content-Length: 317
Connection: keep-alive
Last-Modified: Mon, 03 Oct 2022 23:43:28 GMT
Expires: Mon, 10 Oct 2022 23:43:27 GMT
Etag: "533aabb09a1a1f20322bc8ee95371a43f18b4271"
Cache-Control: max-age=553687,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 754e5b76f9bab503-OSL
ghb.spotim.market/adunit/tracking?event=11&type=0&client_id=270443&site_id=960&full_page_url=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&adid=u96ol0.sz&features=81952&vpbv=N087&lifecycle_tte=1405
200 OK 43 B URL HTTP/1.1 ghb.spotim.market/adunit/tracking?event=11&type=0&client_id=270443&site_id=960&full_page_url=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&adid=u96ol0.sz&features=81952&vpbv=N087&lifecycle_tte=1405
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /adunit/tracking?event=11&type=0&client_id=270443&site_id=960&full_page_url=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&adid=u96ol0.sz&features=81952&vpbv=N087&lifecycle_tte=1405 HTTP/1.1
Host: ghb.spotim.market
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Cookie: vmuid=e349d358cb6f5968; a281178=PM_UID
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Adtelligent
Date: Tue, 04 Oct 2022 13:45:18 GMT
Content-Type: image/gif
Content-Length: 43
Access-Control-Allow-Origin: https://braincandy.net
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
ghb.spotim.market/geo/
200 OK 154 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash ec65f841b5dcd74e7fbf6d72c39f8be4
a870e91242dd88bff2656674e85a819bab155c86
b5766bf1a0d74789f005f8935e4a0c88abe930f2f6df469ffe397038d955df54
GET /geo/ HTTP/1.1
Host: ghb.spotim.market
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Adtelligent
Date: Tue, 04 Oct 2022 13:45:18 GMT
Content-Type: application/json
Content-Length: 154
Access-Control-Allow-Origin: https://braincandy.net
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 5cd3a42ad956e4d37670134f452362d9
ae10871fa5516c10333f6f4e938864a624aa760d
fdc20cbf3553939097709c69872c498100cf067d3549a8b96fd8510c129e62d4
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 04 Oct 2022 13:45:19 GMT
Last-Modified: Tue, 04 Oct 2022 12:52:19 GMT
Server: ECS (bsa/EB1C)
X-Cache: Miss from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: oPFnjIjj87dJ51rlkI3QW6L6V634dsnEvMCVUPDAd-ALY5IPhxYRsg==
Age: 3180
ghb.spotim.market/csyncs?aid1=524901&aid2=537181&aid3=623328&aid4=654586&aid5=730717&aid6=744459&aid7=767137&aid8=767587&aid9=779828
200 OK 923 B URL HTTP/1.1 ghb.spotim.market/csyncs?aid1=524901&aid2=537181&aid3=623328&aid4=654586&aid5=730717&aid6=744459&aid7=767137&aid8=767587&aid9=779828
IP
File type JSON data\012- , ASCII text, with very long lines (1149)
Hash c71a7a563ed85f1b7e2647d050c34add
78c74e9bbc93700680575bad2a86c028a23f5207
c9773d6ae6212210f350a29f943b62e08efd0d50c274b4bf77d57bc96f163775
GET /csyncs?aid1=524901&aid2=537181&aid3=623328&aid4=654586&aid5=730717&aid6=744459&aid7=767137&aid8=767587&aid9=779828 HTTP/1.1
Host: ghb.spotim.market
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Cookie: vmuid=e349d358cb6f5968; a281178=PM_UID
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Adtelligent
Date: Tue, 04 Oct 2022 13:45:19 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 923
Access-Control-Allow-Origin: https://braincandy.net
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
Content-Encoding: gzip
player.spotim.market/prebidlink/462469/wrapper_hb_270443_960.js
200 OK 831 B URL HTTP/2 player.spotim.market/prebidlink/462469/wrapper_hb_270443_960.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (1758)
Hash 3950e6568f8fd62fb12d4856cd9b8fa7
8aaaf132463b13412e2cf8bab34dd179665c66ac
1d7244046ac360e5abd1228d364dfb50c0d2bb8158d3e8253f0061849c9308f0
GET /prebidlink/462469/wrapper_hb_270443_960.js HTTP/1.1
Host: player.spotim.market
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:18 GMT
content-type: application/javascript; charset=utf-8
server: nginx
last-modified: Mon, 03 Oct 2022 10:55:11 GMT
etag: W/"633abf8f-6df"
cache-control: max-age=172800
content-encoding: gzip
expires: Thu, 06 Oct 2022 13:45:18 GMT
access-control-allow-origin: *
x-proxy-cache: HIT
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.25.1-c&cb=13056815859
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.25.1-c&cb=13056815859
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=6.25.1-c&cb=13056815859 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 945
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 04 Oct 2022 13:45:18 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://braincandy.net
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 362 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with very long lines (362), with no line terminators
Hash c4bd8b9309353ad66cd60ab15c6a3d96
d9cdcae0044ebafad1f2a0900c3382f3ece31fbb
707ff9a9994739395041f8d53a92febea32d45751ae911689f4d86ad0c588365
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 2174
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 13:45:19 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 362
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://braincandy.net
AN-X-Request-Uuid: a0fab3b6-6925-40ef-bf02-61b782f29a0d
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 536.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.25.1-c&cb=21261680495
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.25.1-c&cb=21261680495
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=6.25.1-c&cb=21261680495 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 585
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 04 Oct 2022 13:45:19 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://braincandy.net
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
zerossl.ocsp.sectigo.com/
200 OK 316 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash fccf3526fe064d6293bab46fadf4dfa8
c01d35e431d6008f7cd3da9b1ad85132c8cc0a6a
b11c2f118beccac72205a3d247bdff96ff14150c270a66dda69aca625babb353
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 13:45:19 GMT
Content-Type: application/ocsp-response
Content-Length: 316
Connection: keep-alive
Last-Modified: Mon, 03 Oct 2022 13:07:32 GMT
Expires: Mon, 10 Oct 2022 13:07:31 GMT
Etag: "c01d35e431d6008f7cd3da9b1ad85132c8cc0a6a"
Cache-Control: max-age=515531,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 754e5b787c170b3d-OSL
zerossl.ocsp.sectigo.com/
200 OK 316 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash fccf3526fe064d6293bab46fadf4dfa8
c01d35e431d6008f7cd3da9b1ad85132c8cc0a6a
b11c2f118beccac72205a3d247bdff96ff14150c270a66dda69aca625babb353
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 13:45:19 GMT
Content-Type: application/ocsp-response
Content-Length: 316
Connection: keep-alive
Last-Modified: Mon, 03 Oct 2022 13:07:32 GMT
Expires: Mon, 10 Oct 2022 13:07:31 GMT
Etag: "c01d35e431d6008f7cd3da9b1ad85132c8cc0a6a"
Cache-Control: max-age=515531,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 754e5b787c47b503-OSL
aax-dtb-cf.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&pr=https%3A%2F%2Fbraincandy.net%2F&pid=r98je2g7MAHvJ&cb=0&ws=336x280&v=22.9.81452&t=1900&slots=%5B%7B%22sd%22%3A%22div-gpt-ad-1655390427309-0%22%2C%22s%22%3A%5B%22300x250%22%2C%22320x250%22%2C%22336x280%22%5D%2C%22sn%22%3A%22%2F39694909%2C151404300%2FDBV%2FDBV_BrainCandy-HA_TEST%22%7D%5D&schain=1.0%2C1!spotim.market%2Csp_HQI9uHrd%2C1%2C%2C%2C&pubid=9eaf46de-e1bd-41c9-8a11-f5862f62cd8e&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
200 OK 155 B URL HTTP/2 aax-dtb-cf.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&pr=https%3A%2F%2Fbraincandy.net%2F&pid=r98je2g7MAHvJ&cb=0&ws=336x280&v=22.9.81452&t=1900&slots=%5B%7B%22sd%22%3A%22div-gpt-ad-1655390427309-0%22%2C%22s%22%3A%5B%22300x250%22%2C%22320x250%22%2C%22336x280%22%5D%2C%22sn%22%3A%22%2F39694909%2C151404300%2FDBV%2FDBV_BrainCandy-HA_TEST%22%7D%5D&schain=1.0%2C1!spotim.market%2Csp_HQI9uHrd%2C1%2C%2C%2C&pubid=9eaf46de-e1bd-41c9-8a11-f5862f62cd8e&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
IP
File type ASCII text, with no line terminators
Hash f132db90f5c2e068f20b8b383c9acc79
37aeaf028ab037f6b44e8722ba95c24e8e0afa11
bdc3d272d01a85ab7f0860bcd9af64702705bb00dc41b2a26f5508af77c037d3
GET /e/dtb/bid?src=600&u=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&pr=https%3A%2F%2Fbraincandy.net%2F&pid=r98je2g7MAHvJ&cb=0&ws=336x280&v=22.9.81452&t=1900&slots=%5B%7B%22sd%22%3A%22div-gpt-ad-1655390427309-0%22%2C%22s%22%3A%5B%22300x250%22%2C%22320x250%22%2C%22336x280%22%5D%2C%22sn%22%3A%22%2F39694909%2C151404300%2FDBV%2FDBV_BrainCandy-HA_TEST%22%7D%5D&schain=1.0%2C1!spotim.market%2Csp_HQI9uHrd%2C1%2C%2C%2C&pubid=9eaf46de-e1bd-41c9-8a11-f5862f62cd8e&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1
Host: aax-dtb-cf.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
content-length: 155
server: Server
date: Tue, 04 Oct 2022 13:45:19 GMT
x-amz-rid: XGCK3G97K6ZNFJTSEJR3
access-control-allow-origin: https://braincandy.net
access-control-allow-credentials: true
timing-allow-origin: *
strict-transport-security: max-age=47474747; includeSubDomains; preload
vary: Accept-Encoding,User-Agent
x-cache: Miss from cloudfront
via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: YKmEiiZwaxrAWZGc3YQHut26zqoVX0YDkUH99KEJ5vHEyO-K15XnaA==
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.25.1-c&cb=10545482512
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.25.1-c&cb=10545482512
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=6.25.1-c&cb=10545482512 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 321
Origin: https://p.ftoutreach.com
Connection: keep-alive
Referer: https://p.ftoutreach.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 04 Oct 2022 13:45:18 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://p.ftoutreach.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ghb.adtelligent.com/geo/
200 OK 154 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash ec65f841b5dcd74e7fbf6d72c39f8be4
a870e91242dd88bff2656674e85a819bab155c86
b5766bf1a0d74789f005f8935e4a0c88abe930f2f6df469ffe397038d955df54
GET /geo/ HTTP/1.1
Host: ghb.adtelligent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://p.ftoutreach.com
Connection: keep-alive
Referer: https://p.ftoutreach.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Adtelligent
Date: Tue, 04 Oct 2022 13:45:19 GMT
Content-Type: application/json
Content-Length: 154
Access-Control-Allow-Origin: https://p.ftoutreach.com
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
ghb.adtelligent.com/adunit/tracking?event=11&type=0&client_id=307825&site_id=12914&full_page_url=https%3A%2F%2Fbraincandy.net%2F&adid=u96oyj.wa&features=16416&vpbv=N087&lifecycle_tte=327
200 OK 43 B URL HTTP/1.1 ghb.adtelligent.com/adunit/tracking?event=11&type=0&client_id=307825&site_id=12914&full_page_url=https%3A%2F%2Fbraincandy.net%2F&adid=u96oyj.wa&features=16416&vpbv=N087&lifecycle_tte=327
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /adunit/tracking?event=11&type=0&client_id=307825&site_id=12914&full_page_url=https%3A%2F%2Fbraincandy.net%2F&adid=u96oyj.wa&features=16416&vpbv=N087&lifecycle_tte=327 HTTP/1.1
Host: ghb.adtelligent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://p.ftoutreach.com
Connection: keep-alive
Referer: https://p.ftoutreach.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Adtelligent
Date: Tue, 04 Oct 2022 13:45:19 GMT
Content-Type: image/gif
Content-Length: 43
Access-Control-Allow-Origin: https://p.ftoutreach.com
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
Set-Cookie: vmuid=a0e17b0943146ba1; expires=Thu, 05 Jan 2023 13:45:19 GMT; domain=.adtelligent.com; path=/; secure; SameSite
ocsp.digicert.com/
200 OK 471 B IP
Hash 9fde55b4ba25a0ca5fbf39c50615b2e0
6210374d3f3c48ce99086cf1be4dc7f12d378959
de0b8be4552817341f225c840c3ae5788ce0a21fb09a14f6d0332965b3973cba
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3435
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:19 GMT
Last-Modified: Tue, 04 Oct 2022 12:48:04 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
ib.adnxs.com/getuid?https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D271858%26extuid%3D%24UID
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/getuid?https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D271858%26extuid%3D%24UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D271858%26extuid%3D%24UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 13:45:19 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fsync.spotim.market%252Fcsync%253Ft%253Da%2526ep%253D271858%2526extuid%253D%2524UID
AN-X-Request-Uuid: dadf1882-7495-4318-8ffd-f06c15caed37
Set-Cookie: uuid2=3154402033204260289; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 02-Jan-2023 13:45:19 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 536.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ib.adnxs.com/ut/v3/prebid
200 OK 144 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 8b8fd292dcacad471ca32b26f11110bf
01d61825f7e5e999aa9f148981031e423eb6a20a
a4f9a0a2c33cfa4cc8a548c8edebb19f8300ccc4b3686ea0a6dd9c3398284a84
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 569
Origin: https://p.ftoutreach.com
Connection: keep-alive
Referer: https://p.ftoutreach.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 13:45:19 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 144
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://p.ftoutreach.com
AN-X-Request-Uuid: 36bd26d6-1293-4ab5-9b20-c35506e7b294
Set-Cookie: icu=ChgI4axaEAoYASABKAEw7_HwmQY4AUABSAEQ7_HwmQYYAA..; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 02-Jan-2023 13:45:19 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=3497949040164408910; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 02-Jan-2023 13:45:19 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 536.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
track1.aniview.com/track?r=braincandy.net&sn=&cd1=sp_HQI9uHrd&cd2=Desktop&cd3=pitc&cd4=1d3c604f-ba28-4429-8bea-d232bcf7b23f&cd5=Onkl4-PubCcpAr0KXW2XzkxbQfKAqueEWdIPyziUCjxHB362grRG-xD5zYCY14Os&cd6=stable&cd7=row1-column1&cd9=151404300&cd10=v21.6.2&ic=0&tgt=0&app=&wi=400&he=300&test=1&d36=6.2.56&apppkg=&fv=3&proto=https&clsid=edcd2071-b66e-4c22-840b-5573c4c1b12d&rando=30&pid=5e0e296628a061270b21ccab&cid=6284bbbc3726a040dd745676&stagid=&stplid=&e=inventory&vi=0&cb=1664891118724
200 OK 0 B URL HTTP/2 track1.aniview.com/track?r=braincandy.net&sn=&cd1=sp_HQI9uHrd&cd2=Desktop&cd3=pitc&cd4=1d3c604f-ba28-4429-8bea-d232bcf7b23f&cd5=Onkl4-PubCcpAr0KXW2XzkxbQfKAqueEWdIPyziUCjxHB362grRG-xD5zYCY14Os&cd6=stable&cd7=row1-column1&cd9=151404300&cd10=v21.6.2&ic=0&tgt=0&app=&wi=400&he=300&test=1&d36=6.2.56&apppkg=&fv=3&proto=https&clsid=edcd2071-b66e-4c22-840b-5573c4c1b12d&rando=30&pid=5e0e296628a061270b21ccab&cid=6284bbbc3726a040dd745676&stagid=&stplid=&e=inventory&vi=0&cb=1664891118724
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track?r=braincandy.net&sn=&cd1=sp_HQI9uHrd&cd2=Desktop&cd3=pitc&cd4=1d3c604f-ba28-4429-8bea-d232bcf7b23f&cd5=Onkl4-PubCcpAr0KXW2XzkxbQfKAqueEWdIPyziUCjxHB362grRG-xD5zYCY14Os&cd6=stable&cd7=row1-column1&cd9=151404300&cd10=v21.6.2&ic=0&tgt=0&app=&wi=400&he=300&test=1&d36=6.2.56&apppkg=&fv=3&proto=https&clsid=edcd2071-b66e-4c22-840b-5573c4c1b12d&rando=30&pid=5e0e296628a061270b21ccab&cid=6284bbbc3726a040dd745676&stagid=&stplid=&e=inventory&vi=0&cb=1664891118724 HTTP/1.1
Host: track1.aniview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:19 GMT
content-length: 0
cache-control: max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fsync.spotim.market%252Fcsync%253Ft%253Da%2526ep%253D271858%2526extuid%253D%2524UID
302 Found 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fsync.spotim.market%252Fcsync%253Ft%253Da%2526ep%253D271858%2526extuid%253D%2524UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fsync.spotim.market%252Fcsync%253Ft%253Da%2526ep%253D271858%2526extuid%253D%2524UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 13:45:19 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://sync.spotim.market/csync?t=a&ep=271858&extuid=0
AN-X-Request-Uuid: c2eb7f03-d1e6-44f3-9a6e-f4bf3f0d5829
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 536.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
status.geotrust.com/
200 OK 471 B IP
Hash a5358101ee9b2c2034556a787bbcd975
9c3a82dc6dff651d19513fc15861b96f124fe86c
c1ab7a663829eb3e1d98fb6748fb672996ce9b46b0af05d81d178b01c94adf47
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2414
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:19 GMT
Last-Modified: Tue, 04 Oct 2022 13:05:05 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ads.pubmatic.com/AdServer/js/pwt/156758/3746/pwt.js
200 OK 74 kB URL HTTP/2 ads.pubmatic.com/AdServer/js/pwt/156758/3746/pwt.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 64982545a1fd5ff786f4ee5160bf3142
096969728bb14f8a4056d307c1918310aa393a44
653f8a73479f9119c61da3832aaf10a008b7828dc8e45754fa728a5199362c43
GET /AdServer/js/pwt/156758/3746/pwt.js HTTP/1.1
Host: ads.pubmatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Sep 2022 18:02:06 GMT
server: Apache
accept-ranges: bytes
content-encoding: gzip
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC", CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
content-type: application/javascript
content-length: 73912
cache-control: max-age=136734
expires: Thu, 06 Oct 2022 03:44:13 GMT
date: Tue, 04 Oct 2022 13:45:19 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
ads.pubmatic.com/AdServer/js/user_sync.html?p=156758&gdpr=1&gdpr_consent=&predirect=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1664891119694-916065978846-008711-011-004108%26biddername%3D1%26key%3D
200 OK 5.5 kB URL HTTP/2 ads.pubmatic.com/AdServer/js/user_sync.html?p=156758&gdpr=1&gdpr_consent=&predirect=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1664891119694-916065978846-008711-011-004108%26biddername%3D1%26key%3D
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (15844), with no line terminators
Hash 7725e8e949141c8ded449d86975d4c04
8cd8c314a2002cc26f821d331ab9512f52a551a2
a0c49aacf6f552bce544eb8516404f696918253cd934a6404ebeafd71f8780ae
GET /AdServer/js/user_sync.html?p=156758&gdpr=1&gdpr_consent=&predirect=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1664891119694-916065978846-008711-011-004108%26biddername%3D1%26key%3D HTTP/1.1
Host: ads.pubmatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 01 Feb 2022 06:38:00 GMT
etag: "1300708-3de4-5d6ef246ef4cf"
server: Apache
accept-ranges: bytes
content-encoding: gzip
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC", CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
content-length: 5549
content-type: text/html; charset=UTF-8
cache-control: max-age=44486
expires: Wed, 05 Oct 2022 02:06:45 GMT
date: Tue, 04 Oct 2022 13:45:19 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17184&site_id=163630&zone_id=785062&size_id=15&alt_size_ids=16%2C159&rp_schain=1.0,1!spotim.market,sp_HQI9uHrd,1,,,&eid_pubcid.org=99d9a52b-ccf1-4c14-bba4-5a197c105928%5E1&eid_spotim.market=37659e0b-15f9-40e6-8fe9-62c0dd1d32b5%5E1&rf=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&tg_i.pbadslot=%2F39694909%2C151404300%2FDBV%2FDBV_BrainCandy-HA_TEST%23div-gpt-ad-1655390427309-0&tk_flint=pbjs_lite_v6.25.1-c&x_source.tid=daa84d69-6a0a-481d-a1b6-df25f3dd9833&l_pb_bid_id=2b335ae35a3b96&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F39694909%2C151404300%2FDBV%2FDBV_BrainCandy-HA_TEST%23div-gpt-ad-1655390427309-0&slots=1&rand=0.6409255177759736
200 OK 360 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17184&site_id=163630&zone_id=785062&size_id=15&alt_size_ids=16%2C159&rp_schain=1.0,1!spotim.market,sp_HQI9uHrd,1,,,&eid_pubcid.org=99d9a52b-ccf1-4c14-bba4-5a197c105928%5E1&eid_spotim.market=37659e0b-15f9-40e6-8fe9-62c0dd1d32b5%5E1&rf=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&tg_i.pbadslot=%2F39694909%2C151404300%2FDBV%2FDBV_BrainCandy-HA_TEST%23div-gpt-ad-1655390427309-0&tk_flint=pbjs_lite_v6.25.1-c&x_source.tid=daa84d69-6a0a-481d-a1b6-df25f3dd9833&l_pb_bid_id=2b335ae35a3b96&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F39694909%2C151404300%2FDBV%2FDBV_BrainCandy-HA_TEST%23div-gpt-ad-1655390427309-0&slots=1&rand=0.6409255177759736
IP
File type JSON data\012- , ASCII text, with very long lines (360), with no line terminators
Hash 534d0f570eee1046029ac4741d9cb9b9
e3a9d6c49889de13f079653fa4be0d600faddde8
a7e17712022ef78aadc91ac9aae8344e293919b50616871946bd31db512e5c8d
GET /a/api/fastlane.json?account_id=17184&site_id=163630&zone_id=785062&size_id=15&alt_size_ids=16%2C159&rp_schain=1.0,1!spotim.market,sp_HQI9uHrd,1,,,&eid_pubcid.org=99d9a52b-ccf1-4c14-bba4-5a197c105928%5E1&eid_spotim.market=37659e0b-15f9-40e6-8fe9-62c0dd1d32b5%5E1&rf=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&tg_i.pbadslot=%2F39694909%2C151404300%2FDBV%2FDBV_BrainCandy-HA_TEST%23div-gpt-ad-1655390427309-0&tk_flint=pbjs_lite_v6.25.1-c&x_source.tid=daa84d69-6a0a-481d-a1b6-df25f3dd9833&l_pb_bid_id=2b335ae35a3b96&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F39694909%2C151404300%2FDBV%2FDBV_BrainCandy-HA_TEST%23div-gpt-ad-1655390427309-0&slots=1&rand=0.6409255177759736 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Tue, 04 Oct 2022 13:45:19 GMT
Content-Type: application/json
Content-Length: 360
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://braincandy.net
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8U96POZ-5-91KR; Domain=.rubiconproject.com; Path=/; Expires=Wed, 04-Oct-2023 13:45:19 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qr30YRTKZHyge9DtVM30fCg5AuOp81iN6JrEDLruxTBrfSDY8FUdDZuDd0b8Q6zCeqoQRmqZ/LPod/LAaxiSsiA; Domain=.rubiconproject.com; Path=/; Expires=Wed, 04-Oct-2023 13:45:19 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
player.aniview.com/script/6.1/libs/prebid/avpb7.12.0a0.js
200 OK 24 kB URL HTTP/2 player.aniview.com/script/6.1/libs/prebid/avpb7.12.0a0.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash b45baf218cc998a9875aeed985913ffc
59a25cdd608b0f828c1a3354511041dbb7845ee0
1648074209149822a0ace8b5eade7c5002433692ac9831e2f716b8badb23a346
GET /script/6.1/libs/prebid/avpb7.12.0a0.js HTTP/1.1
Host: player.aniview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Cookie: aniC=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtuzkklMORlC27S5ZZS2C8Vf2t2R4MxFl2WvFEFi7U_zKgFUOtULBVK6ggg63-ue99V1G2FGMsWW2cOiB77RKXGuVfL5P8u
last-modified: Thu, 22 Sep 2022 10:35:02 GMT
etag: "b45baf218cc998a9875aeed985913ffc"
x-goog-generation: 1663842902483554
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 23786
content-type: application/javascript
content-encoding: gzip
x-goog-hash: crc32c=FyjiGw==, md5=tFuvIYzJmKmHWu7ZhZE//A==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 23786
access-control-allow-origin: *
access-control-expose-headers: Content-Type
server: UploadServer
cache-control: public, max-age=300
expires: Tue, 04 Oct 2022 13:50:19 GMT
date: Tue, 04 Oct 2022 13:45:19 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
pixel-sync.sitescout.com/dmp/pixelSync?nid=117&gdpr=1&gdpr_consent=&redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1664891119694-916065978846-008711-011-004108%26biddername%3D72%26pid%3D5e0e296628a061270b21ccab%26key%3D%7BuserId%7D
204 No Content 0 B URL HTTP/2 pixel-sync.sitescout.com/dmp/pixelSync?nid=117&gdpr=1&gdpr_consent=&redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1664891119694-916065978846-008711-011-004108%26biddername%3D72%26pid%3D5e0e296628a061270b21ccab%26key%3D%7BuserId%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dmp/pixelSync?nid=117&gdpr=1&gdpr_consent=&redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1664891119694-916065978846-008711-011-004108%26biddername%3D72%26pid%3D5e0e296628a061270b21ccab%26key%3D%7BuserId%7D HTTP/1.1
Host: pixel-sync.sitescout.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: max-age=0,no-cache,no-store
pragma: no-cache
expires: Tue, 11 Oct 1977 12:34:56 GMT
p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml"
date: Tue, 04 Oct 2022 13:45:19 GMT
server: AC1.1
X-Firefox-Spdy: h2
sync.spotim.market/csync?t=a&ep=271858&extuid=0
200 OK 43 B URL HTTP/1.1 sync.spotim.market/csync?t=a&ep=271858&extuid=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /csync?t=a&ep=271858&extuid=0 HTTP/1.1
Host: sync.spotim.market
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Connection: keep-alive
Cookie: vmuid=e349d358cb6f5968; a281178=PM_UID
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
If-None-Match: 68e2ebbaaebe1c43
HTTP/1.1 200 OK
Server: Adtelligent
Date: Tue, 04 Oct 2022 13:45:19 GMT
Content-Type: image/gif
Content-Length: 43
Etag: e349d358cb6f5968
Set-Cookie: vmuid=e349d358cb6f5968; expires=Mon, 05 Dec 2022 13:45:19 GMT; domain=.spotim.market; path=/; secure; SameSite=None
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17184&site_id=163630&zone_id=2418378&size_id=15&alt_size_ids=16%2C159&rp_schain=1.0,1!spotim.market,sp_HQI9uHrd,1,,,&eid_pubcid.org=99d9a52b-ccf1-4c14-bba4-5a197c105928%5E1&eid_spotim.market=37659e0b-15f9-40e6-8fe9-62c0dd1d32b5%5E1&rf=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&tg_i.pbadslot=%2F39694909%2C151404300%2FDBV%2FDBV_BrainCandy-HA_TEST%23div-gpt-ad-1655390427309-0&tk_flint=pbjs_lite_v6.25.1-c&x_source.tid=daa84d69-6a0a-481d-a1b6-df25f3dd9833&l_pb_bid_id=4bbba9d268e214&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F39694909%2C151404300%2FDBV%2FDBV_BrainCandy-HA_TEST%23div-gpt-ad-1655390427309-0&slots=1&rand=0.28533944456625915
200 OK 361 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17184&site_id=163630&zone_id=2418378&size_id=15&alt_size_ids=16%2C159&rp_schain=1.0,1!spotim.market,sp_HQI9uHrd,1,,,&eid_pubcid.org=99d9a52b-ccf1-4c14-bba4-5a197c105928%5E1&eid_spotim.market=37659e0b-15f9-40e6-8fe9-62c0dd1d32b5%5E1&rf=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&tg_i.pbadslot=%2F39694909%2C151404300%2FDBV%2FDBV_BrainCandy-HA_TEST%23div-gpt-ad-1655390427309-0&tk_flint=pbjs_lite_v6.25.1-c&x_source.tid=daa84d69-6a0a-481d-a1b6-df25f3dd9833&l_pb_bid_id=4bbba9d268e214&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F39694909%2C151404300%2FDBV%2FDBV_BrainCandy-HA_TEST%23div-gpt-ad-1655390427309-0&slots=1&rand=0.28533944456625915
IP
File type JSON data\012- , ASCII text, with very long lines (361), with no line terminators
Hash d84c3bb7b0cf7c4647da17c78296fd54
5449246a1b27dc1c66e42ac3cb5974e8e54feb85
2315e499d4b704c0965653e4a8d2a99177a35841232c3b4d17f10c95199e58c8
GET /a/api/fastlane.json?account_id=17184&site_id=163630&zone_id=2418378&size_id=15&alt_size_ids=16%2C159&rp_schain=1.0,1!spotim.market,sp_HQI9uHrd,1,,,&eid_pubcid.org=99d9a52b-ccf1-4c14-bba4-5a197c105928%5E1&eid_spotim.market=37659e0b-15f9-40e6-8fe9-62c0dd1d32b5%5E1&rf=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&tg_i.pbadslot=%2F39694909%2C151404300%2FDBV%2FDBV_BrainCandy-HA_TEST%23div-gpt-ad-1655390427309-0&tk_flint=pbjs_lite_v6.25.1-c&x_source.tid=daa84d69-6a0a-481d-a1b6-df25f3dd9833&l_pb_bid_id=4bbba9d268e214&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F39694909%2C151404300%2FDBV%2FDBV_BrainCandy-HA_TEST%23div-gpt-ad-1655390427309-0&slots=1&rand=0.28533944456625915 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Tue, 04 Oct 2022 13:45:19 GMT
Content-Type: application/json
Content-Length: 361
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://braincandy.net
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8U96PP9-R-GA7E; Domain=.rubiconproject.com; Path=/; Expires=Wed, 04-Oct-2023 13:45:19 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qqxpZfthfyKiO9DtVM30fCg5AuOp81iN6JrEDLruxTBrfSDY8FUdDZuDd0b8Q6zCeqoQRmqZ/LPod/LAaxiSsiA; Domain=.rubiconproject.com; Path=/; Expires=Wed, 04-Oct-2023 13:45:19 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
player.spotim.market/prebidlink/x462469/hbw_master_270443_960.js
200 OK 40 kB URL HTTP/2 player.spotim.market/prebidlink/x462469/hbw_master_270443_960.js
IP
ASN #39572 DataWeb Global Group B.V.
Hash ad7b91c42130757f78efb4808af1f6c8
736fe1032239833327b46b7ac6553667a74d3464
9d2743a56d21f46973abd4e0e2a3ef6c60edab7df61fb5c997e698f9ca6a0d43
GET /prebidlink/x462469/hbw_master_270443_960.js HTTP/1.1
Host: player.spotim.market
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:18 GMT
content-type: application/javascript; charset=utf-8
server: nginx
last-modified: Mon, 03 Oct 2022 10:55:11 GMT
etag: W/"633abf8f-377a7"
cache-control: max-age=172800
content-encoding: gzip
expires: Thu, 06 Oct 2022 13:45:18 GMT
access-control-allow-origin: *
x-proxy-cache: HIT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 38ea1e4d24ca95b2f1da26f24df03559
bd5d4ca979822e0bc5b3e8d5e4a4617f276057e0
82123bf409adc45c0a830654ad76d954f44e4a8aae01ecebbfe769259096cdf3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4614
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:19 GMT
Last-Modified: Tue, 04 Oct 2022 12:28:25 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 9fde55b4ba25a0ca5fbf39c50615b2e0
6210374d3f3c48ce99086cf1be4dc7f12d378959
de0b8be4552817341f225c840c3ae5788ce0a21fb09a14f6d0332965b3973cba
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3435
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:19 GMT
Last-Modified: Tue, 04 Oct 2022 12:48:04 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 313 B IP
Hash 6f10918d9645b035ff76e06d4af9a9be
f1d88b0490cd708d3f5bbc4ef9523c2789f5aaac
ba7280febee0c1b00a51e2107053b32b2cc388fa21527c4f7f24d4f0f449c7c6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5129
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:19 GMT
Last-Modified: Tue, 04 Oct 2022 12:19:50 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 313
ghb.adtelligent.com/v2/auction/
200 OK 276 B URL HTTP/1.1 ghb.adtelligent.com/v2/auction/
IP
File type JSON data\012- , ASCII text, with very long lines (429), with no line terminators
Hash 32f575cde39c26b7671a4d6544af4f28
2e113bebc2a498cf0997321b8c9c2b1a12370077
fddd7e24ed0f28cf2b174b23d0512d0134e385c0b3aebe214c918e87ebe9fe4d
POST /v2/auction/ HTTP/1.1
Host: ghb.adtelligent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 686
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Adtelligent
Date: Tue, 04 Oct 2022 13:45:19 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 276
Access-Control-Allow-Origin: https://braincandy.net
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
Content-Encoding: gzip
spot-im-d.openx.net/w/1.0/arj?ju=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&ch=UTF-8&res=1280x1024x24&ifr=true&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=daa84d69-6a0a-481d-a1b6-df25f3dd9833%2Cdaa84d69-6a0a-481d-a1b6-df25f3dd9833%2Cdaa84d69-6a0a-481d-a1b6-df25f3dd9833%2Cdaa84d69-6a0a-481d-a1b6-df25f3dd9833&nocache=1664891118949&pubcid=99d9a52b-ccf1-4c14-bba4-5a197c105928&schain=1.0%2C1!spotim.market%2Csp_HQI9uHrd%2C1%2C%2C%2C&aus=300x250%2C320x250%2C336x280%7C300x250%2C320x250%2C336x280%7C300x250%2C320x250%2C336x280%7C300x250%2C320x250%2C336x280&divids=div-gpt-ad-1655390427309-0%2Cdiv-gpt-ad-1655390427309-0%2Cdiv-gpt-ad-1655390427309-0%2Cdiv-gpt-ad-1655390427309-0&aucs=%252F39694909%252C151404300%252FDBV%252FDBV_BrainCandy-HA_TEST%2523div-gpt-ad-1655390427309-0%2C%252F39694909%252C151404300%252FDBV%252FDBV_BrainCandy-HA_TEST%2523div-gpt-ad-1655390427309-0%2C%252F39694909%252C151404300%252FDBV%252FDBV_BrainCandy-HA_TEST%2523div-gpt-ad-1655390427309-0%2C%252F39694909%252C151404300%252FDBV%252FDBV_BrainCandy-HA_TEST%2523div-gpt-ad-1655390427309-0&auid=540254226%2C540934835%2C541192057%2C543856208
200 OK 79 B URL HTTP/2 spot-im-d.openx.net/w/1.0/arj?ju=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&ch=UTF-8&res=1280x1024x24&ifr=true&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=daa84d69-6a0a-481d-a1b6-df25f3dd9833%2Cdaa84d69-6a0a-481d-a1b6-df25f3dd9833%2Cdaa84d69-6a0a-481d-a1b6-df25f3dd9833%2Cdaa84d69-6a0a-481d-a1b6-df25f3dd9833&nocache=1664891118949&pubcid=99d9a52b-ccf1-4c14-bba4-5a197c105928&schain=1.0%2C1!spotim.market%2Csp_HQI9uHrd%2C1%2C%2C%2C&aus=300x250%2C320x250%2C336x280%7C300x250%2C320x250%2C336x280%7C300x250%2C320x250%2C336x280%7C300x250%2C320x250%2C336x280&divids=div-gpt-ad-1655390427309-0%2Cdiv-gpt-ad-1655390427309-0%2Cdiv-gpt-ad-1655390427309-0%2Cdiv-gpt-ad-1655390427309-0&aucs=%252F39694909%252C151404300%252FDBV%252FDBV_BrainCandy-HA_TEST%2523div-gpt-ad-1655390427309-0%2C%252F39694909%252C151404300%252FDBV%252FDBV_BrainCandy-HA_TEST%2523div-gpt-ad-1655390427309-0%2C%252F39694909%252C151404300%252FDBV%252FDBV_BrainCandy-HA_TEST%2523div-gpt-ad-1655390427309-0%2C%252F39694909%252C151404300%252FDBV%252FDBV_BrainCandy-HA_TEST%2523div-gpt-ad-1655390427309-0&auid=540254226%2C540934835%2C541192057%2C543856208
IP
File type JSON data\012- , ASCII text
Hash cb0457964893c518a5084f077f32b426
7c487b0134f65e52c8438defbba73c548adde99c
427ef2379d42e95dd9ba76c4377ed66205899c9962f52c83493aa4557d2fd138
GET /w/1.0/arj?ju=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&ch=UTF-8&res=1280x1024x24&ifr=true&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=daa84d69-6a0a-481d-a1b6-df25f3dd9833%2Cdaa84d69-6a0a-481d-a1b6-df25f3dd9833%2Cdaa84d69-6a0a-481d-a1b6-df25f3dd9833%2Cdaa84d69-6a0a-481d-a1b6-df25f3dd9833&nocache=1664891118949&pubcid=99d9a52b-ccf1-4c14-bba4-5a197c105928&schain=1.0%2C1!spotim.market%2Csp_HQI9uHrd%2C1%2C%2C%2C&aus=300x250%2C320x250%2C336x280%7C300x250%2C320x250%2C336x280%7C300x250%2C320x250%2C336x280%7C300x250%2C320x250%2C336x280&divids=div-gpt-ad-1655390427309-0%2Cdiv-gpt-ad-1655390427309-0%2Cdiv-gpt-ad-1655390427309-0%2Cdiv-gpt-ad-1655390427309-0&aucs=%252F39694909%252C151404300%252FDBV%252FDBV_BrainCandy-HA_TEST%2523div-gpt-ad-1655390427309-0%2C%252F39694909%252C151404300%252FDBV%252FDBV_BrainCandy-HA_TEST%2523div-gpt-ad-1655390427309-0%2C%252F39694909%252C151404300%252FDBV%252FDBV_BrainCandy-HA_TEST%2523div-gpt-ad-1655390427309-0%2C%252F39694909%252C151404300%252FDBV%252FDBV_BrainCandy-HA_TEST%2523div-gpt-ad-1655390427309-0&auid=540254226%2C540934835%2C541192057%2C543856208 HTTP/1.1
Host: spot-im-d.openx.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept, Accept-Encoding
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Tue, 04 Oct 2022 13:45:19 GMT
content-type: application/json
content-length: 79
content-encoding: gzip
cache-control: private, max-age=0, no-cache
access-control-allow-origin: https://braincandy.net
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 9fde55b4ba25a0ca5fbf39c50615b2e0
6210374d3f3c48ce99086cf1be4dc7f12d378959
de0b8be4552817341f225c840c3ae5788ce0a21fb09a14f6d0332965b3973cba
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4959
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:19 GMT
Last-Modified: Tue, 04 Oct 2022 12:22:40 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
track1.aniview.com/track?d=Firefox&cou=NO&cos=Linux&r=braincandy.net&rs=braincandy.net&sid=6306&t=1664891119&cip=91.90.42.154&sn=&tgt=0&osv=&bv=96.0&brn=Firefox&wi=400&he=300&app=&AV_PUBLISHERID=5e0e296628a061270b21ccab&test=1&aafaid=&proto=https&uid=1664891119694-916065978846-008711-011-004108&cha=0.7&stagid=&stplid=&d35=&d36=6.2.56&cb=26563782547&d39=&d65=&apppkg=&cd9=151404300&cd10=v21.6.2&cd1=sp_HQI9uHrd&cd2=Desktop&cd3=pitc&cd4=1d3c604f-ba28-4429-8bea-d232bcf7b23f&cd5=Onkl4-PubCcpAr0KXW2XzkxbQfKAqueEWdIPyziUCjxHB362grRG-xD5zYCY14Os&cd6=stable&cd7=row1-column1&d9=1000&d37=realtime&AV_WIDTH=400&AV_HEIGHT=300&nid=5e0e296628a061270b21ccab&ncid=6284bbbc3726a040dd745676&e=request&cb=1664891119265&asid=62d7f0e827f8e64e1b266f94&ofpr=1.1&fpo=
200 OK 0 B URL HTTP/2 track1.aniview.com/track?d=Firefox&cou=NO&cos=Linux&r=braincandy.net&rs=braincandy.net&sid=6306&t=1664891119&cip=91.90.42.154&sn=&tgt=0&osv=&bv=96.0&brn=Firefox&wi=400&he=300&app=&AV_PUBLISHERID=5e0e296628a061270b21ccab&test=1&aafaid=&proto=https&uid=1664891119694-916065978846-008711-011-004108&cha=0.7&stagid=&stplid=&d35=&d36=6.2.56&cb=26563782547&d39=&d65=&apppkg=&cd9=151404300&cd10=v21.6.2&cd1=sp_HQI9uHrd&cd2=Desktop&cd3=pitc&cd4=1d3c604f-ba28-4429-8bea-d232bcf7b23f&cd5=Onkl4-PubCcpAr0KXW2XzkxbQfKAqueEWdIPyziUCjxHB362grRG-xD5zYCY14Os&cd6=stable&cd7=row1-column1&d9=1000&d37=realtime&AV_WIDTH=400&AV_HEIGHT=300&nid=5e0e296628a061270b21ccab&ncid=6284bbbc3726a040dd745676&e=request&cb=1664891119265&asid=62d7f0e827f8e64e1b266f94&ofpr=1.1&fpo=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track?d=Firefox&cou=NO&cos=Linux&r=braincandy.net&rs=braincandy.net&sid=6306&t=1664891119&cip=91.90.42.154&sn=&tgt=0&osv=&bv=96.0&brn=Firefox&wi=400&he=300&app=&AV_PUBLISHERID=5e0e296628a061270b21ccab&test=1&aafaid=&proto=https&uid=1664891119694-916065978846-008711-011-004108&cha=0.7&stagid=&stplid=&d35=&d36=6.2.56&cb=26563782547&d39=&d65=&apppkg=&cd9=151404300&cd10=v21.6.2&cd1=sp_HQI9uHrd&cd2=Desktop&cd3=pitc&cd4=1d3c604f-ba28-4429-8bea-d232bcf7b23f&cd5=Onkl4-PubCcpAr0KXW2XzkxbQfKAqueEWdIPyziUCjxHB362grRG-xD5zYCY14Os&cd6=stable&cd7=row1-column1&d9=1000&d37=realtime&AV_WIDTH=400&AV_HEIGHT=300&nid=5e0e296628a061270b21ccab&ncid=6284bbbc3726a040dd745676&e=request&cb=1664891119265&asid=62d7f0e827f8e64e1b266f94&ofpr=1.1&fpo= HTTP/1.1
Host: track1.aniview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Cookie: aniC=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:19 GMT
content-length: 0
cache-control: max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
prebid-eu.creativecdn.com/bidder/prebid/bids
204 No Content 0 B URL HTTP/2 prebid-eu.creativecdn.com/bidder/prebid/bids
IP
ASN #204995 Rtb House S.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bidder/prebid/bids HTTP/1.1
Host: prebid-eu.creativecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 972
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Tue, 04 Oct 2022 13:45:19 GMT
access-control-allow-origin: https://braincandy.net
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-max-age: 3600
vary: Origin
X-Firefox-Spdy: h2
onetag-sys.com/prebid-request
200 OK 41 B URL HTTP/2 onetag-sys.com/prebid-request
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 1c15203d1319c02fe2a06d78bc45eccf
40386992654bdda331c8f6eb21ac79de396119ee
cc81a9c5e7147dba347b0ffd34f64e9a7c40f25782569fec5c3fc68b4017badb
POST /prebid-request HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1129
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://braincandy.net
access-control-allow-headers: content-type, origin, referer, user-agent
access-control-allow-credentials: true
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
cache-control: no-transform, no-cache
content-type: application/json
content-encoding: gzip
content-length: 41
strict-transport-security: max-age=15552000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 9f576881190e4ebb027ac4117021877d
b20178fcaf5e0a064312a98b39ef6c1cb73b2570
97fb5deb4ede5bde82a93816602f66f52fd94fc7ba4321d2ce56d56c7af7bb84
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 13:45:19 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 03 Oct 2022 11:23:21 GMT
Expires: Mon, 10 Oct 2022 11:23:20 GMT
Etag: "b20178fcaf5e0a064312a98b39ef6c1cb73b2570"
Cache-Control: max-age=509280,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 754e5b7b6f860b39-OSL
player.adtelligent.com/exchange_rates/279896/config.json?cb=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-
200 OK 1.5 kB URL HTTP/2 player.adtelligent.com/exchange_rates/279896/config.json?cb=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-
IP
ASN #39572 DataWeb Global Group B.V.
Hash 09d17c779fece54c46649cfca9c534a6
57fcdf01c9eb0d5370e4765595b0718a0566a7d8
f6395a6bbdfa1e9978d57b0b51d0f76bf92391737d3cfd290a603ae5fbb29f1a
GET /exchange_rates/279896/config.json?cb=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template- HTTP/1.1
Host: player.adtelligent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:19 GMT
content-type: application/json
server: nginx
last-modified: Mon, 03 Oct 2022 12:01:07 GMT
etag: W/"633acf03-84b"
cache-control: max-age=172800
content-encoding: gzip
expires: Thu, 06 Oct 2022 13:45:19 GMT
access-control-allow-origin: https://braincandy.net
x-proxy-cache: HIT
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 1a6e85c7607eca88cf1b00d59b832687
824880c701f5059bec4048201e2666ac4d3263f9
2b250477d4bc4af108f1ca760869eb903a52bb52eee7d0d1908b74080e5203c6
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 769
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 13:45:19 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://braincandy.net
AN-X-Request-Uuid: 295e69e1-0f89-403f-a3b0-42a8b1c6ba40
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 536.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
sync.search.spotxchange.com/partner?adv_id=8721&redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1664891119694-916065978846-008711-011-004108%26biddername%3D2%26key%3D%24SPOTX_USER_ID
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=8721&redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1664891119694-916065978846-008711-011-004108%26biddername%3D2%26key%3D%24SPOTX_USER_ID
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?adv_id=8721&redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1664891119694-916065978846-008711-011-004108%26biddername%3D2%26key%3D%24SPOTX_USER_ID HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 04 Oct 2022 13:45:19 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=c972b87d-43ea-11ed-b5d6-1093d7b30506; expires=Tue, 01-Nov-2022 13:45:19 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?adv_id=8721&redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1664891119694-916065978846-008711-011-004108%26biddername%3D2%26key%3D%24SPOTX_USER_ID&__user_check__=1&sync_id=c972b8ef-43ea-11ed-b5d6-1093d7b30506
X-fe: 7
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17184&site_id=163630&zone_id=2418298&size_id=15&alt_size_ids=16%2C159&rp_schain=1.0,1!spotim.market,sp_HQI9uHrd,1,,,&eid_pubcid.org=99d9a52b-ccf1-4c14-bba4-5a197c105928%5E1&eid_spotim.market=37659e0b-15f9-40e6-8fe9-62c0dd1d32b5%5E1&rf=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&tg_i.pbadslot=%2F39694909%2C151404300%2FDBV%2FDBV_BrainCandy-HA_TEST%23div-gpt-ad-1655390427309-0&tk_flint=pbjs_lite_v6.25.1-c&x_source.tid=daa84d69-6a0a-481d-a1b6-df25f3dd9833&l_pb_bid_id=3817c32f3d540d8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F39694909%2C151404300%2FDBV%2FDBV_BrainCandy-HA_TEST%23div-gpt-ad-1655390427309-0&slots=1&rand=0.287464845446309
200 OK 361 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17184&site_id=163630&zone_id=2418298&size_id=15&alt_size_ids=16%2C159&rp_schain=1.0,1!spotim.market,sp_HQI9uHrd,1,,,&eid_pubcid.org=99d9a52b-ccf1-4c14-bba4-5a197c105928%5E1&eid_spotim.market=37659e0b-15f9-40e6-8fe9-62c0dd1d32b5%5E1&rf=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&tg_i.pbadslot=%2F39694909%2C151404300%2FDBV%2FDBV_BrainCandy-HA_TEST%23div-gpt-ad-1655390427309-0&tk_flint=pbjs_lite_v6.25.1-c&x_source.tid=daa84d69-6a0a-481d-a1b6-df25f3dd9833&l_pb_bid_id=3817c32f3d540d8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F39694909%2C151404300%2FDBV%2FDBV_BrainCandy-HA_TEST%23div-gpt-ad-1655390427309-0&slots=1&rand=0.287464845446309
IP
File type JSON data\012- , ASCII text, with very long lines (361), with no line terminators
Hash ba8ac7d3857cac9b25088279d2ec997b
65d24e37a9fba97f7c0ceac369e6af3c8b31b508
48f0d2dd0852c161dc70a01b0172d00e5c8386b51d7b1b0e5cb084f98f17bb2a
GET /a/api/fastlane.json?account_id=17184&site_id=163630&zone_id=2418298&size_id=15&alt_size_ids=16%2C159&rp_schain=1.0,1!spotim.market,sp_HQI9uHrd,1,,,&eid_pubcid.org=99d9a52b-ccf1-4c14-bba4-5a197c105928%5E1&eid_spotim.market=37659e0b-15f9-40e6-8fe9-62c0dd1d32b5%5E1&rf=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&tg_i.pbadslot=%2F39694909%2C151404300%2FDBV%2FDBV_BrainCandy-HA_TEST%23div-gpt-ad-1655390427309-0&tk_flint=pbjs_lite_v6.25.1-c&x_source.tid=daa84d69-6a0a-481d-a1b6-df25f3dd9833&l_pb_bid_id=3817c32f3d540d8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&p_gpid=%2F39694909%2C151404300%2FDBV%2FDBV_BrainCandy-HA_TEST%23div-gpt-ad-1655390427309-0&slots=1&rand=0.287464845446309 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Tue, 04 Oct 2022 13:45:19 GMT
Content-Type: application/json
Content-Length: 361
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://braincandy.net
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8U96PTQ-1I-DM8W; Domain=.rubiconproject.com; Path=/; Expires=Wed, 04-Oct-2023 13:45:19 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qpnLi13WCVxe+9DtVM30fCg5AuOp81iN6JrEDLruxTBrfSDY8FUdDZuDd0b8Q6zCeqoQRmqZ/LPod/LAaxiSsiA; Domain=.rubiconproject.com; Path=/; Expires=Wed, 04-Oct-2023 13:45:19 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
targeting.unrulymedia.com/unruly_prebid
204 No Content 0 B URL HTTP/2 targeting.unrulymedia.com/unruly_prebid
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /unruly_prebid HTTP/1.1
Host: targeting.unrulymedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://braincandy.net/
Origin: https://braincandy.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Tue, 04 Oct 2022 13:45:19 GMT
access-control-allow-origin: https://braincandy.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Accept-Encoding,Origin,Accept-Language,X-CSRF-Token,x-unruly-override
access-control-max-age: 1728000
content-type: text/plain charset=UTF-8
content-length: 0
X-Firefox-Spdy: h2
sync.spotim.market/csync?t=a&ep=734125&extuid=$UID
200 OK 0 B URL HTTP/1.1 sync.spotim.market/csync?t=a&ep=734125&extuid=$UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /csync?t=a&ep=734125&extuid=$UID HTTP/1.1
Host: sync.spotim.market
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Cookie: vmuid=e349d358cb6f5968; a281178=PM_UID
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Adtelligent
Date: Tue, 04 Oct 2022 13:45:19 GMT
Content-Length: 0
Etag: e349d358cb6f5968
Set-Cookie: vmuid=e349d358cb6f5968; expires=Mon, 05 Dec 2022 13:45:19 GMT; domain=.spotim.market; path=/; secure; SameSite=None
a734125=$UID; expires=Mon, 05 Dec 2022 13:45:19 GMT; domain=.spotim.market; path=/; secure; SameSite=None
p.ftoutreach.com/prebidlink/y19269/hbw_master_307825_12914.js
200 OK 116 kB URL HTTP/2 p.ftoutreach.com/prebidlink/y19269/hbw_master_307825_12914.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Size 116 kB (116398 bytes)
Hash 4984a5a829608611de459ea6f375102e
e65c178ddaad545e5ac82064d7ed33acd6a0ce87
bc14f209d78cf299dc28500954db2b4fbb12ecd38f4e1e135d1778bbd8ef915e
GET /prebidlink/y19269/hbw_master_307825_12914.js HTTP/1.1
Host: p.ftoutreach.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://p.ftoutreach.com/prebidlink/19269/j.html?i=12914
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:19 GMT
content-type: application/javascript; charset=utf-8
server: nginx
last-modified: Fri, 30 Sep 2022 14:26:45 GMT
etag: W/"6336fca5-13cda"
cache-control: max-age=172800
content-encoding: gzip
expires: Thu, 06 Oct 2022 13:45:19 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
rp.liadm.com/j?wpn=prebid&pu=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&refr=https%3A%2F%2Fbraincandy.net%2F&duid=caf62bed74b7--01gehkwn3gdsjea12jcpzdx1je&se=e30&dtstmp=1664891119390
302 Found 0 B URL HTTP/2 rp.liadm.com/j?wpn=prebid&pu=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&refr=https%3A%2F%2Fbraincandy.net%2F&duid=caf62bed74b7--01gehkwn3gdsjea12jcpzdx1je&se=e30&dtstmp=1664891119390
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j?wpn=prebid&pu=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&refr=https%3A%2F%2Fbraincandy.net%2F&duid=caf62bed74b7--01gehkwn3gdsjea12jcpzdx1je&se=e30&dtstmp=1664891119390 HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 04 Oct 2022 13:45:19 GMT
content-length: 0
trace-id: 94a1d16ef8f2af22
vary: Origin
location: /j?wpn=prebid&pu=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&refr=https%3A%2F%2Fbraincandy.net%2F&duid=caf62bed74b7--01gehkwn3gdsjea12jcpzdx1je&se=e30&dtstmp=1664891119390&n3pc=true
set-cookie: lidid=378def79-a27b-41fd-a6f8-fc6786482465; Max-Age=63072000; Expires=Thu, 03 Oct 2024 13:45:19 GMT; SameSite=None; Path=/; Domain=.liadm.com; Secure; HTTPOnly
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://braincandy.net
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash cf59736799a40b2d45b35b11fd45fc44
7aaf9a9fd5cdbf0fec4475e143b22097d5a3fd87
a07c4624ec444cd5bbeda9343407a3bc18b3a9650407df464f0bb0b5d5f1ccaf
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 04 Oct 2022 13:45:19 GMT
Last-Modified: Tue, 04 Oct 2022 12:20:00 GMT
Server: ECS (bsa/EB22)
X-Cache: Miss from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 8F2o5GFMDs8LiLWpS9EbDKp6m-9DJSIsN3TH_xyIlaNtzkJ60NL0YQ==
Age: 5119
sync.search.spotxchange.com/partner?adv_id=8721&redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1664891119694-916065978846-008711-011-004108%26biddername%3D2%26key%3D%24SPOTX_USER_ID&__user_check__=1&sync_id=c972b8ef-43ea-11ed-b5d6-1093d7b30506
200 OK 43 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=8721&redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1664891119694-916065978846-008711-011-004108%26biddername%3D2%26key%3D%24SPOTX_USER_ID&__user_check__=1&sync_id=c972b8ef-43ea-11ed-b5d6-1093d7b30506
IP
ASN #35220 SpotXchange, INC
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55fade2068e7503eae8d7ddf5eb6bd09
317496a096d6c86486a71d4521994bcd171a6bb3
e586a84d8523747f42e510d78e141015b6424cf67d612854e892a7bcedc8ec9e
GET /partner?adv_id=8721&redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1664891119694-916065978846-008711-011-004108%26biddername%3D2%26key%3D%24SPOTX_USER_ID&__user_check__=1&sync_id=c972b8ef-43ea-11ed-b5d6-1093d7b30506 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 04 Oct 2022 13:45:20 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Set-Cookie: audience=c97c4404-43ea-11ed-992b-107c10e90406; expires=Tue, 01-Nov-2022 13:45:20 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 85
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0db68565982084f9703125251d58f07c
ba58da0a997d527f2b8cd301b534fc5083f16216
9e30aa8546d92761c1a29018be3ec007c75a7a66e572e0b6920757284f68b9b6
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 770
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 13:45:20 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://braincandy.net
AN-X-Request-Uuid: 5dd8c65b-4673-4793-b002-39ade0fc7a4d
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 536.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
zerossl.ocsp.sectigo.com/
200 OK 315 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash 0ea539ed97df8b2a5ac353b57ac43ae6
998610efec592a7baefc6096e567ebeaf7eca36c
b2716b9d93c372bec4e94dc206868aaf1c9bf7015a7cda855a910b05c25127f3
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 13:45:20 GMT
Content-Type: application/ocsp-response
Content-Length: 315
Connection: keep-alive
Last-Modified: Sun, 02 Oct 2022 22:47:47 GMT
Expires: Sun, 09 Oct 2022 22:47:46 GMT
Etag: "998610efec592a7baefc6096e567ebeaf7eca36c"
Cache-Control: max-age=463945,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 754e5b7c095ab503-OSL
track1.aniview.com/track?d=Firefox&cou=NO&cos=Linux&r=braincandy.net&rs=braincandy.net&sid=6306&t=1664891119&cip=91.90.42.154&sn=&tgt=0&osv=&bv=96.0&brn=Firefox&wi=400&he=300&app=&AV_PUBLISHERID=5e0e296628a061270b21ccab&test=1&aafaid=&proto=https&uid=1664891119694-916065978846-008711-011-004108&cha=0.7&stagid=&stplid=&d35=&d36=6.2.56&cb=26563782547&d39=&d65=&apppkg=&cd9=151404300&cd10=v21.6.2&cd1=sp_HQI9uHrd&cd2=Desktop&cd3=pitc&cd4=1d3c604f-ba28-4429-8bea-d232bcf7b23f&cd5=Onkl4-PubCcpAr0KXW2XzkxbQfKAqueEWdIPyziUCjxHB362grRG-xD5zYCY14Os&cd6=stable&cd7=row1-column1&d9=1000&d37=realtime&AV_WIDTH=400&AV_HEIGHT=300&nid=5e0e296628a061270b21ccab&ncid=6284bbbc3726a040dd745676&e=request&cb=1664891119461&asid=62d7f0e827f8e64e1b266f94&ofpr=1.1&fpo=
200 OK 0 B URL HTTP/2 track1.aniview.com/track?d=Firefox&cou=NO&cos=Linux&r=braincandy.net&rs=braincandy.net&sid=6306&t=1664891119&cip=91.90.42.154&sn=&tgt=0&osv=&bv=96.0&brn=Firefox&wi=400&he=300&app=&AV_PUBLISHERID=5e0e296628a061270b21ccab&test=1&aafaid=&proto=https&uid=1664891119694-916065978846-008711-011-004108&cha=0.7&stagid=&stplid=&d35=&d36=6.2.56&cb=26563782547&d39=&d65=&apppkg=&cd9=151404300&cd10=v21.6.2&cd1=sp_HQI9uHrd&cd2=Desktop&cd3=pitc&cd4=1d3c604f-ba28-4429-8bea-d232bcf7b23f&cd5=Onkl4-PubCcpAr0KXW2XzkxbQfKAqueEWdIPyziUCjxHB362grRG-xD5zYCY14Os&cd6=stable&cd7=row1-column1&d9=1000&d37=realtime&AV_WIDTH=400&AV_HEIGHT=300&nid=5e0e296628a061270b21ccab&ncid=6284bbbc3726a040dd745676&e=request&cb=1664891119461&asid=62d7f0e827f8e64e1b266f94&ofpr=1.1&fpo=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track?d=Firefox&cou=NO&cos=Linux&r=braincandy.net&rs=braincandy.net&sid=6306&t=1664891119&cip=91.90.42.154&sn=&tgt=0&osv=&bv=96.0&brn=Firefox&wi=400&he=300&app=&AV_PUBLISHERID=5e0e296628a061270b21ccab&test=1&aafaid=&proto=https&uid=1664891119694-916065978846-008711-011-004108&cha=0.7&stagid=&stplid=&d35=&d36=6.2.56&cb=26563782547&d39=&d65=&apppkg=&cd9=151404300&cd10=v21.6.2&cd1=sp_HQI9uHrd&cd2=Desktop&cd3=pitc&cd4=1d3c604f-ba28-4429-8bea-d232bcf7b23f&cd5=Onkl4-PubCcpAr0KXW2XzkxbQfKAqueEWdIPyziUCjxHB362grRG-xD5zYCY14Os&cd6=stable&cd7=row1-column1&d9=1000&d37=realtime&AV_WIDTH=400&AV_HEIGHT=300&nid=5e0e296628a061270b21ccab&ncid=6284bbbc3726a040dd745676&e=request&cb=1664891119461&asid=62d7f0e827f8e64e1b266f94&ofpr=1.1&fpo= HTTP/1.1
Host: track1.aniview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Cookie: aniC=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:20 GMT
content-length: 0
cache-control: max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
p.ftoutreach.com/prebidlink/19269/j.html?i=12914
200 OK 667 B URL HTTP/2 p.ftoutreach.com/prebidlink/19269/j.html?i=12914
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1083)
Hash 4b42371ef8548cee32c9eab622e34368
36dc42b568fecbba910198b9d14ca782caec2678
5da6b402cfb19d37d86cd9ce5b9db6b166fb48e8a07004e0dc6e99f42304326b
GET /prebidlink/19269/j.html?i=12914 HTTP/1.1
Host: p.ftoutreach.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:19 GMT
content-type: text/html; charset=utf-8
server: nginx
last-modified: Tue, 15 Feb 2022 18:17:37 GMT
etag: W/"620bee41-43d"
cache-control: max-age=172800
content-encoding: gzip
expires: Thu, 06 Oct 2022 13:45:19 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
trends.revcontent.com/rtb?apiKey=d1ca204723a06b3dd2c8ce63c6a6616c8432b534&userId=158948
200 OK 0 B URL HTTP/2 trends.revcontent.com/rtb?apiKey=d1ca204723a06b3dd2c8ce63c6a6616c8432b534&userId=158948
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /rtb?apiKey=d1ca204723a06b3dd2c8ce63c6a6616c8432b534&userId=158948 HTTP/1.1
Host: trends.revcontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://braincandy.net/
Origin: https://braincandy.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:20 GMT
content-length: 0
server: openresty
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-origin: https://braincandy.net
access-control-allow-methods: GET,HEAD,POST
access-control-allow-headers: content-type
access-control-allow-credentials: true
access-control-max-age: 1800
x-envoy-upstream-service-time: 1
X-Firefox-Spdy: h2
acdn.adnxs.com/dmp/async_usersync.html
200 OK 17 kB URL HTTP/1.1 acdn.adnxs.com/dmp/async_usersync.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (52990)
Hash 9c6b5ce6b3452e98573e6409c34dd73c
de607fadef62e36945a409a838eb8fc36d819b42
cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
GET /dmp/async_usersync.html HTTP/1.1
Host: acdn.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Fri, 25 Mar 2022 16:06:02 GMT
ETag: "623de86a-cf34"
Server: nginx/1.18.0 (Ubuntu)
Access-Control-Allow-Origin: *
Content-Type: text/html
Content-Encoding: gzip
Content-Length: 17053
Cache-Control: max-age=86402
Expires: Wed, 05 Oct 2022 13:45:22 GMT
Date: Tue, 04 Oct 2022 13:45:20 GMT
Connection: keep-alive
Vary: Accept-Encoding
acdn.adnxs.com/dmp/async_usersync.html
200 OK 17 kB URL HTTP/1.1 acdn.adnxs.com/dmp/async_usersync.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (52990)
Hash 9c6b5ce6b3452e98573e6409c34dd73c
de607fadef62e36945a409a838eb8fc36d819b42
cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
GET /dmp/async_usersync.html HTTP/1.1
Host: acdn.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Fri, 25 Mar 2022 16:06:02 GMT
ETag: "623de86a-cf34"
Server: nginx/1.18.0 (Ubuntu)
Access-Control-Allow-Origin: *
Content-Type: text/html
Content-Encoding: gzip
Content-Length: 17053
Cache-Control: max-age=86402
Expires: Wed, 05 Oct 2022 13:45:22 GMT
Date: Tue, 04 Oct 2022 13:45:20 GMT
Connection: keep-alive
Vary: Accept-Encoding
eb2.3lift.com/sync?
200 OK 37 B IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /sync? HTTP/1.1
Host: eb2.3lift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:20 GMT
content-type: image/gif
content-length: 37
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
acdn.adnxs.com/dmp/async_usersync.html
200 OK 17 kB URL HTTP/1.1 acdn.adnxs.com/dmp/async_usersync.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (52990)
Hash 9c6b5ce6b3452e98573e6409c34dd73c
de607fadef62e36945a409a838eb8fc36d819b42
cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
GET /dmp/async_usersync.html HTTP/1.1
Host: acdn.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Fri, 25 Mar 2022 16:06:02 GMT
ETag: "623de86a-cf34"
Server: nginx/1.18.0 (Ubuntu)
Access-Control-Allow-Origin: *
Content-Type: text/html
Content-Encoding: gzip
Content-Length: 17053
Cache-Control: max-age=86402
Expires: Wed, 05 Oct 2022 13:45:22 GMT
Date: Tue, 04 Oct 2022 13:45:20 GMT
Connection: keep-alive
Vary: Accept-Encoding
zerossl.ocsp.sectigo.com/
200 OK 316 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash cd35251b4c79db966b74d7a9789d3cbf
8e17b82d3318307d25373e8061e1fd1afd603d51
3befc5a4ce148e286cb4c8b48e7a4cb035bd9448f6753125a1654037f2048dce
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 13:45:20 GMT
Content-Type: application/ocsp-response
Content-Length: 316
Connection: keep-alive
Last-Modified: Sat, 01 Oct 2022 06:05:39 GMT
Expires: Sat, 08 Oct 2022 06:05:38 GMT
Etag: "8e17b82d3318307d25373e8061e1fd1afd603d51"
Cache-Control: max-age=317417,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 754e5b7c9a3db503-OSL
acdn.adnxs.com/dmp/async_usersync.html
200 OK 17 kB URL HTTP/1.1 acdn.adnxs.com/dmp/async_usersync.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (52990)
Hash 9c6b5ce6b3452e98573e6409c34dd73c
de607fadef62e36945a409a838eb8fc36d819b42
cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
GET /dmp/async_usersync.html HTTP/1.1
Host: acdn.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Fri, 25 Mar 2022 16:06:02 GMT
ETag: "623de86a-cf34"
Server: nginx/1.18.0 (Ubuntu)
Access-Control-Allow-Origin: *
Content-Type: text/html
Content-Encoding: gzip
Content-Length: 17053
Cache-Control: max-age=86402
Expires: Wed, 05 Oct 2022 13:45:22 GMT
Date: Tue, 04 Oct 2022 13:45:20 GMT
Connection: keep-alive
Vary: Accept-Encoding
ocsp.sectigo.com/
200 OK 472 B IP
Hash ae0efc29f0d40a94a95f64a803bc76c0
b39ad352376f3eaf9ce45861973c0bb12ed244e9
bcf8148bb52154c4108d397f48b957af136b5b7f72a506e22876d2d26605174e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 13:45:20 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 01 Oct 2022 07:45:26 GMT
Expires: Sat, 08 Oct 2022 07:45:25 GMT
Etag: "b39ad352376f3eaf9ce45861973c0bb12ed244e9"
Cache-Control: max-age=323404,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 754e5b7bcff10b39-OSL
eb2.3lift.com/sync?
200 OK 37 B IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /sync? HTTP/1.1
Host: eb2.3lift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:20 GMT
content-type: image/gif
content-length: 37
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
eb2.3lift.com/sync?
200 OK 37 B IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /sync? HTTP/1.1
Host: eb2.3lift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:20 GMT
content-type: image/gif
content-length: 37
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
eb2.3lift.com/sync?
200 OK 37 B IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /sync? HTTP/1.1
Host: eb2.3lift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:20 GMT
content-type: image/gif
content-length: 37
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
rp.liadm.com/j?wpn=prebid&pu=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&refr=https%3A%2F%2Fbraincandy.net%2F&duid=caf62bed74b7--01gehkwn3gdsjea12jcpzdx1je&se=e30&dtstmp=1664891119390&n3pc=true
200 OK 47 B URL HTTP/2 rp.liadm.com/j?wpn=prebid&pu=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&refr=https%3A%2F%2Fbraincandy.net%2F&duid=caf62bed74b7--01gehkwn3gdsjea12jcpzdx1je&se=e30&dtstmp=1664891119390&n3pc=true
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f88b83b479e9b28787d368c3349520b4
de1dd32b2ae982d00af68f5cc828622b2c46fec3
d0155673a6ca77fd823260e3e3a2a34c3a93acb4b0c5740a3d24a877c7f4cda4
GET /j?wpn=prebid&pu=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&refr=https%3A%2F%2Fbraincandy.net%2F&duid=caf62bed74b7--01gehkwn3gdsjea12jcpzdx1je&se=e30&dtstmp=1664891119390&n3pc=true HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://braincandy.net
Content-Type: text/plain
Referer: https://braincandy.net/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:20 GMT
content-type: application/json
content-length: 47
trace-id: c0c0f3694ca988d2
vary: Origin
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-pixel-event-id: 5db76c7a-34b5-4b62-9770-0eef4a352224
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://braincandy.net
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
ib.adnxs.com/async_usersync?cbfn=queuePixels
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/async_usersync?cbfn=queuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /async_usersync?cbfn=queuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acdn.adnxs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 13:45:20 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: https://ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
AN-X-Request-Uuid: f1058e57-7cfb-45fe-b8f1-9450914c88f9
Set-Cookie: uuid2=1962551815651187920; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 02-Jan-2023 13:45:20 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 536.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e4097a83a36625b2cf1954aa2c463fe1
8d7f766f0a35549bee49960c17659b71bce37a90
5629cf68c738546366fe6a12fd68c9ef378d3e6957a4f579a193e6fb5cec1b05
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5629CF68C738546366FE6A12FD68C9EF378D3E6957A4F579A193E6FB5CEC1B05"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2277
Expires: Tue, 04 Oct 2022 14:23:17 GMT
Date: Tue, 04 Oct 2022 13:45:20 GMT
Connection: keep-alive
ssum-sec.casalemedia.com/usermatchredir?s=189529&cb=https%3A%2F%2Fsync.adtelligent.com%2Fcsync%3Ft%3Da%26ep%3D323546%26extuid%3D
302 Found 0 B URL HTTP/2 ssum-sec.casalemedia.com/usermatchredir?s=189529&cb=https%3A%2F%2Fsync.adtelligent.com%2Fcsync%3Ft%3Da%26ep%3D323546%26extuid%3D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatchredir?s=189529&cb=https%3A%2F%2Fsync.adtelligent.com%2Fcsync%3Ft%3Da%26ep%3D323546%26extuid%3D HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 04 Oct 2022 13:45:20 GMT
content-length: 0
location: /usermatchredir?cb=https%3A%2F%2Fsync.adtelligent.com%2Fcsync%3Ft%3Da%26ep%3D323546%26extuid%3D&s=189529&C=1
cf-ray: 754e5b7cda150b61-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
pragma: no-cache
set-cookie: CMID=Yzw48H3vmfAS6Yuh.IP9IAAA; Path=/; Domain=casalemedia.com; Expires=Wed, 04 Oct 2023 13:45:20 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=4541; Path=/; Domain=casalemedia.com; Expires=Mon, 02 Jan 2023 13:45:20 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=4541; Path=/; Domain=casalemedia.com; Expires=Mon, 02 Jan 2023 13:45:20 GMT; Max-Age=7776000; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dP6yBmAFgvWzBVPC4UuyIlZXyb6EF%2BR2LQgCI7H2mYrwpB099de2T39wk6gbI0IXMzHnhkjHKHmGi%2BJ7v%2BQZL5k%2FfLcqCuMmVjUNMUP5MXitlUl4Rd22zajuJyu08S1xb2fJCOb1qsBQKQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash a5a42f6eb3c564f6586a24d323b35f20
07a7a363695bf0f956704418be1176fb3deaa06a
a435850c49b915b250087f894836536b2f7aef0c561f421f850bdbcba9f1f474
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 13:45:20 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 01 Oct 2022 15:11:54 GMT
Expires: Sat, 08 Oct 2022 15:11:53 GMT
Etag: "07a7a363695bf0f956704418be1176fb3deaa06a"
Cache-Control: max-age=350192,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 754e5b7bed84b4f3-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 89b33de2b290f4127f40970dd3384c65
73f6ca6d826e90a832c9939e2a9c07393d22a5c3
1a7caff6c83fd2917f5545e934088311e57cb33bae7e2ca6550a0a20c45d4af4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1A7CAFF6C83FD2917F5545E934088311E57CB33BAE7E2CA6550A0A20C45D4AF4"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9170
Expires: Tue, 04 Oct 2022 16:18:10 GMT
Date: Tue, 04 Oct 2022 13:45:20 GMT
Connection: keep-alive
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 384bf1f7593b2697de2a49db7c753662
b0a7da2851144d96d7da820ca38bd46a1a71a9d3
216654d6249933b3d2aeef9cb14685c192c539c9197f1ae3dcf78283f267d7e6
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 04 Oct 2022 13:45:20 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 03 Oct 2022 23:16:14 GMT
Expires: Tue, 04 Oct 2022 23:16:14 GMT
ETag: "b0a7da2851144d96d7da820ca38bd46a1a71a9d3"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
zerossl.ocsp.sectigo.com/
200 OK 316 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash cd35251b4c79db966b74d7a9789d3cbf
8e17b82d3318307d25373e8061e1fd1afd603d51
3befc5a4ce148e286cb4c8b48e7a4cb035bd9448f6753125a1654037f2048dce
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 13:45:20 GMT
Content-Type: application/ocsp-response
Content-Length: 316
Connection: keep-alive
Last-Modified: Sat, 01 Oct 2022 06:05:39 GMT
Expires: Sat, 08 Oct 2022 06:05:38 GMT
Etag: "8e17b82d3318307d25373e8061e1fd1afd603d51"
Cache-Control: max-age=317417,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 754e5b7be8ad0b3d-OSL
ghb1.adtelligent.com/v2/auction/
200 OK 1.1 kB URL HTTP/1.1 ghb1.adtelligent.com/v2/auction/
IP
File type JSON data\012- , ASCII text, with very long lines (4552), with no line terminators
Hash 6b9cafa97e1fa41a0106ae2edaac60b0
a1c1cac3359bea66675ddb66b57b8aaaccb29b76
b6d66bcb0f54a6f7e955f064836752fc3eabfd0913a074e5ef679e533b6d30ef
POST /v2/auction/ HTTP/1.1
Host: ghb1.adtelligent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 2971
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Adtelligent
Date: Tue, 04 Oct 2022 13:45:19 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 1118
Access-Control-Allow-Origin: https://braincandy.net
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
Content-Encoding: gzip
pbjs.e-planning.net/pbjs/1/2e43c/1/braincandy.net/ROS?rnd=0.4853402895326605&e=300x250_0%3A300x250%2C320x250%2C336x280&ur=https%3A%2F%2Fbraincandy.net%2F&pbv=6.25.1-c&ncb=1&vs=F&crs=UTF-8&fr=https%3A%2F%2Fbraincandy.net%2F
200 OK 404 B URL HTTP/2 pbjs.e-planning.net/pbjs/1/2e43c/1/braincandy.net/ROS?rnd=0.4853402895326605&e=300x250_0%3A300x250%2C320x250%2C336x280&ur=https%3A%2F%2Fbraincandy.net%2F&pbv=6.25.1-c&ncb=1&vs=F&crs=UTF-8&fr=https%3A%2F%2Fbraincandy.net%2F
IP
ASN #49981 WorldStream B.V.
File type JSON data\012- , ASCII text, with very long lines (404), with no line terminators
Hash 91266e208139a5bd42a9119b331db97d
7fd9fb5fd3c94a4017fae7472debcc403792115f
a1f0cd9d254af40dc90716a04c761790f5b4371f60ab4f8ae83670f5002eda8a
GET /pbjs/1/2e43c/1/braincandy.net/ROS?rnd=0.4853402895326605&e=300x250_0%3A300x250%2C320x250%2C336x280&ur=https%3A%2F%2Fbraincandy.net%2F&pbv=6.25.1-c&ncb=1&vs=F&crs=UTF-8&fr=https%3A%2F%2Fbraincandy.net%2F HTTP/1.1
Host: pbjs.e-planning.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://p.ftoutreach.com
Connection: keep-alive
Referer: https://p.ftoutreach.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Tue, 04 Oct 2022 13:45:20 GMT
content-type: text/plain
access-control-allow-origin: https://p.ftoutreach.com
content-length: 404
access-control-allow-credentials: true
x-sid: AMS-928
X-Firefox-Spdy: h2
prebid.a-mo.net/a/c
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 645
Origin: https://p.ftoutreach.com
Connection: keep-alive
Referer: https://p.ftoutreach.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://p.ftoutreach.com
cache-control: max-age=0, private, must-revalidate
date: Tue, 04 Oct 2022 13:45:19 GMT
server: envoy
vary: origin, Accept-Encoding
set-cookie: __amc=1_1664891120_1664891120; path=/; domain=prebid.a-mo.net; expires=Wed, 04 Oct 2023 13:45:20 GMT; max-age=31536000; secure; HttpOnly; SameSite=None
x-envoy-upstream-service-time: 1
X-Firefox-Spdy: h2
hb-api.omnitagjs.com/hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&SafeFrame=true&PublisherDomain=https%3A%2F%2Fbraincandy.net
200 OK 359 B URL HTTP/2 hb-api.omnitagjs.com/hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&SafeFrame=true&PublisherDomain=https%3A%2F%2Fbraincandy.net
IP
ASN #200271 Iguane Solutions SAS
File type JSON data\012- , ASCII text, with very long lines (358)
Hash 86223770db00dc638e4f9af3adc33c51
d2fe078753eecce0d1472987f4c211501bb0088e
84e95c92b6c1eeee21e0f84292b2835426a6882f64368f9f32251dd6d1fa57e3
POST /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&SafeFrame=true&PublisherDomain=https%3A%2F%2Fbraincandy.net HTTP/1.1
Host: hb-api.omnitagjs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 626
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Accept-Encoding, Content-Type
access-control-allow-methods: OPTIONS, POST
access-control-allow-origin: https://braincandy.net
access-control-max-age: 3600
cache-control: no-cache, no-store, must-revalidate
content-type: application/json; charset=utf-8
expires: 0
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=74d0dad4c0126fb58341eb79f048a724; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Tue, 04 Oct 2022 13:45:20 GMT
content-length: 359
x-envoy-upstream-service-time: 16
server: ayl-lb-fra02
X-Firefox-Spdy: h2
prebid-eu.creativecdn.com/bidder/prebid/bids
204 No Content 0 B URL HTTP/2 prebid-eu.creativecdn.com/bidder/prebid/bids
IP
ASN #204995 Rtb House S.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bidder/prebid/bids HTTP/1.1
Host: prebid-eu.creativecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 480
Origin: https://p.ftoutreach.com
Connection: keep-alive
Referer: https://p.ftoutreach.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Tue, 04 Oct 2022 13:45:20 GMT
access-control-allow-origin: https://p.ftoutreach.com
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-max-age: 3600
vary: Origin
X-Firefox-Spdy: h2
eb2.3lift.com/getuid?redir=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D644680%26extuid%3D%24UID
200 OK 37 B URL HTTP/2 eb2.3lift.com/getuid?redir=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D644680%26extuid%3D%24UID
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /getuid?redir=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D644680%26extuid%3D%24UID HTTP/1.1
Host: eb2.3lift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:20 GMT
content-type: image/gif
content-length: 37
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
ssum-sec.casalemedia.com/usermatchredir?cb=https%3A%2F%2Fsync.adtelligent.com%2Fcsync%3Ft%3Da%26ep%3D323546%26extuid%3D&s=189529&C=1
302 Found 0 B URL HTTP/2 ssum-sec.casalemedia.com/usermatchredir?cb=https%3A%2F%2Fsync.adtelligent.com%2Fcsync%3Ft%3Da%26ep%3D323546%26extuid%3D&s=189529&C=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatchredir?cb=https%3A%2F%2Fsync.adtelligent.com%2Fcsync%3Ft%3Da%26ep%3D323546%26extuid%3D&s=189529&C=1 HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 04 Oct 2022 13:45:20 GMT
content-length: 0
location: https://sync.adtelligent.com/csync?t=a&ep=323546&extuid=0
cf-ray: 754e5b7d5aac0b61-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=doEsRv6LUVSJ8ixlR%2B4YXNO8bJ0ZotFVv7lAVsu5izOYI79YIBbAuDC8zUQGujHoBe9h7GD3RgEeEr7H7Ms5ClLBmngfmpXP395nr%2B6S%2B0p9noygTMnsPlyNamnLGTpoIBpgPxVc8C78zw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ib.adnxs.com/async_usersync?cbfn=queuePixels
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/async_usersync?cbfn=queuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /async_usersync?cbfn=queuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acdn.adnxs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 13:45:20 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: https://ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
AN-X-Request-Uuid: 3177871f-f0d9-434b-b1f3-51e50a68af5d
Set-Cookie: uuid2=6051615243686128897; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 02-Jan-2023 13:45:20 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 536.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ib.adnxs.com/async_usersync?cbfn=queuePixels
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/async_usersync?cbfn=queuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /async_usersync?cbfn=queuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acdn.adnxs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 13:45:20 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: https://ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
AN-X-Request-Uuid: 72a45f64-7457-4136-966b-0865904134b2
Set-Cookie: uuid2=396749819772550252; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 02-Jan-2023 13:45:20 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 536.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
200 OK 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://acdn.adnxs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 13:45:20 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: ed1cfd62-5afb-410f-89d4-55ec70b25564
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 536.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ib.adnxs.com/async_usersync?cbfn=queuePixels
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/async_usersync?cbfn=queuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /async_usersync?cbfn=queuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acdn.adnxs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 13:45:20 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: https://ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
AN-X-Request-Uuid: 7fc1a973-0844-4e70-8c4c-8cb01565a8bd
Set-Cookie: uuid2=7800451151996240732; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 02-Jan-2023 13:45:20 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 536.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
sli.braincandy.net/baker?dtstmp=1664891119727
200 OK 19 B URL HTTP/1.1 sli.braincandy.net/baker?dtstmp=1664891119727
IP
ASN #20940 Akamai International B.V.
File type GIF image data, version 89a, 257 x 1057\012- data
Hash a13d28efebc1a996346c058d7e099d93
c75cea464ecb32876267eca0de33f0afb8f622d0
2d199b9d8dc7886837cbfd12c9e8ddae7e28f5c375d564b31bf732a320921435
GET /baker?dtstmp=1664891119727 HTTP/1.1
Host: sli.braincandy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Cookie: _li_dcdm_c=.braincandy.net; _lc2_fpi=caf62bed74b7--01gehkwn3gdsjea12jcpzdx1je; _ga=GA1.2.1654291140.1664891115; _gid=GA1.2.293583492.1664891115; _gat=1; _fbp=fb.1.1664891115128.1357938427; __gads=ID=0f7ffb1dba654606-223036b33ace0086:T=1664891115:S=ALNI_MY2inD3KpL88kFOO5oW39V5fFxNig; spotim_visitId={%22visitId%22:%2237659e0b-15f9-40e6-8fe9-62c0dd1d32b5%22%2C%22creationDate%22:%222022-10-04T13:45:15.382Z%22%2C%22duration%22:2}; _pubcid=99d9a52b-ccf1-4c14-bba4-5a197c105928
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 19
Expires: Tue, 04 Oct 2022 13:45:20 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 04 Oct 2022 13:45:20 GMT
Connection: keep-alive
Set-Cookie: _lc2_fpi=caf62bed74b7--01gehkwn3gdsjea12jcpzdx1je; Max-Age=63072000; Domain=.braincandy.net; SameSite=Lax
status.geotrust.com/
200 OK 471 B IP
Hash a5358101ee9b2c2034556a787bbcd975
9c3a82dc6dff651d19513fc15861b96f124fe86c
c1ab7a663829eb3e1d98fb6748fb672996ce9b46b0af05d81d178b01c94adf47
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4818
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:20 GMT
Last-Modified: Tue, 04 Oct 2022 12:25:02 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
onetag-sys.com/usync/?pubId=75a1922f904cc20
204 No Content 0 B URL HTTP/2 onetag-sys.com/usync/?pubId=75a1922f904cc20
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/?pubId=75a1922f904cc20 HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
cache-control: no-store
strict-transport-security: max-age=15552000
X-Firefox-Spdy: h2
secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=17184-d
301 Moved Permanently 0 B URL HTTP/2 secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=17184-d
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utils/xapi/multi-sync.html?p=17184-d HTTP/1.1
Host: secure-assets.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: AkamaiGHost
content-length: 0
location: https://eus.rubiconproject.com/usync.html?p=17184-d
date: Tue, 04 Oct 2022 13:45:20 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
prebid.a-mo.net/isyn?gdpr={gdpr}&gdpr_consent={gdpr_consent}&us_privacy={us_privacy}&cb=%20https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D696268%26extuid%3D
204 No Content 0 B URL HTTP/2 prebid.a-mo.net/isyn?gdpr={gdpr}&gdpr_consent={gdpr_consent}&us_privacy={us_privacy}&cb=%20https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D696268%26extuid%3D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /isyn?gdpr={gdpr}&gdpr_consent={gdpr_consent}&us_privacy={us_privacy}&cb=%20https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D696268%26extuid%3D HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
cache-control: max-age=0, private, must-revalidate
date: Tue, 04 Oct 2022 13:45:19 GMT
server: envoy
x-envoy-upstream-service-time: 4
vary: Accept-Encoding
X-Firefox-Spdy: h2
js-sec.indexww.com/um/ixmatch.html
200 OK 1.4 kB URL HTTP/1.1 js-sec.indexww.com/um/ixmatch.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2920), with no line terminators
Hash d41805aed22c3b9731d56a19244e6b8a
7e5da0bdf4db3f38f1590b5020750a93d1a174b5
46aa57bbee28a5fa9e4352e856a1d3a0485613234232d0b3de27adc74d8fac26
GET /um/ixmatch.html HTTP/1.1
Host: js-sec.indexww.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache
Last-Modified: Mon, 25 Jul 2022 19:18:30 GMT
ETag: "e20015-b68-5e4a60c97afb7"
Accept-Ranges: bytes
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Content-Type: text/html; charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1387
Date: Tue, 04 Oct 2022 13:45:20 GMT
Connection: keep-alive
prebid.a-mo.net/isyn?gdpr={gdpr}&gdpr_consent={gdpr_consent}&us_privacy={us_privacy}&cb=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D696268%26extuid%3D
204 No Content 0 B URL HTTP/2 prebid.a-mo.net/isyn?gdpr={gdpr}&gdpr_consent={gdpr_consent}&us_privacy={us_privacy}&cb=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D696268%26extuid%3D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /isyn?gdpr={gdpr}&gdpr_consent={gdpr_consent}&us_privacy={us_privacy}&cb=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D696268%26extuid%3D HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
cache-control: max-age=0, private, must-revalidate
date: Tue, 04 Oct 2022 13:45:19 GMT
server: envoy
x-envoy-upstream-service-time: 1
vary: Accept-Encoding
X-Firefox-Spdy: h2
targeting.unrulymedia.com/unruly_prebid
204 No Content 0 B URL HTTP/2 targeting.unrulymedia.com/unruly_prebid
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /unruly_prebid HTTP/1.1
Host: targeting.unrulymedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 1862
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Tue, 04 Oct 2022 13:45:20 GMT
access-control-allow-origin: https://braincandy.net
access-control-allow-credentials: true
pragma: no-cache
cache-control: private, max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash e1864a4b36e5395c23ec15af047d92b2
6089fc57803cdeb3fbca3cc01c3aeb7392b19878
0492f8fbcfca2a0c604c1766ce5f61cad89421af6c9112a59849ac422e9b9522
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 04 Oct 2022 13:45:20 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 03 Oct 2022 22:22:25 GMT
Expires: Tue, 04 Oct 2022 22:22:25 GMT
ETag: "6089fc57803cdeb3fbca3cc01c3aeb7392b19878"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.sectigo.com/
200 OK 472 B IP
Hash 0ee7cd4b84abd598584bc2b563212f89
209763b03185e92cb57d08b63ed6cccffcadd5d1
62b104071f2ac593ec38eff57a596ab6361d21e2d1f753b8dbffc80617be9dac
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 13:45:20 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 01 Oct 2022 13:55:55 GMT
Expires: Sat, 08 Oct 2022 13:55:54 GMT
Etag: "209763b03185e92cb57d08b63ed6cccffcadd5d1"
Cache-Control: max-age=345633,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 754e5b7dda530b39-OSL
s.adtelligent.com/sync.html?aid=654586
200 OK 597 B URL HTTP/1.1 s.adtelligent.com/sync.html?aid=654586
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1167), with no line terminators
Hash 731d58b69576dfc52733cab75538ec95
591a1ffba88677e3dc5e463649966abed0322cb8
109a88349fe12c8845466bc6eaeb6d18c13fb3dade274830aa1b9b488a0acc2d
GET /sync.html?aid=654586 HTTP/1.1
Host: s.adtelligent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Adtelligent
Date: Tue, 04 Oct 2022 13:45:19 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 597
Access-Control-Allow-Origin: https://braincandy.net
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
Content-Encoding: gzip
eus.rubiconproject.com/usync.html?p=17184&endpoint=us-east
200 OK 233 B URL HTTP/1.1 eus.rubiconproject.com/usync.html?p=17184&endpoint=us-east
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 6220919f0a2b24a12a281ea8b891ecf6
759111c360edc6df73ed10aaaa212cb22c47ce0d
030c6e199782fb1908f6f89d3cd41950fd3ae0830c5020ba9ed617111bacd180
GET /usync.html?p=17184&endpoint=us-east HTTP/1.1
Host: eus.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache/2.2.15 (CentOS)
Last-Modified: Tue, 14 Dec 2021 23:07:59 GMT
ETag: "40014-119-5d32342a551c0"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 233
Content-Type: text/html; charset=UTF-8
Date: Tue, 04 Oct 2022 13:45:20 GMT
Connection: keep-alive
Vary: Accept-Encoding
secure.adnxs.com/getuid?https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1664891119694-916065978846-008711-011-004108%26biddername%3D55%26key%3D%24UID
307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/getuid?https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1664891119694-916065978846-008711-011-004108%26biddername%3D55%26key%3D%24UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1664891119694-916065978846-008711-011-004108%26biddername%3D55%26key%3D%24UID HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 13:45:20 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fsync.aniview.com%252Fcookiesyncendpoint%253Fauid%253D1664891119694-916065978846-008711-011-004108%2526biddername%253D55%2526key%253D%2524UID
AN-X-Request-Uuid: b7352273-fee5-4409-8a5a-9d103f0cca08
Set-Cookie: uuid2=4219875646826512933; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 02-Jan-2023 13:45:20 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 984.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
js-sec.indexww.com/um/ixmatch.html
200 OK 1.4 kB URL HTTP/1.1 js-sec.indexww.com/um/ixmatch.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2920), with no line terminators
Hash d41805aed22c3b9731d56a19244e6b8a
7e5da0bdf4db3f38f1590b5020750a93d1a174b5
46aa57bbee28a5fa9e4352e856a1d3a0485613234232d0b3de27adc74d8fac26
GET /um/ixmatch.html HTTP/1.1
Host: js-sec.indexww.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache
Last-Modified: Mon, 25 Jul 2022 19:18:30 GMT
ETag: "e20015-b68-5e4a60c97afb7"
Accept-Ranges: bytes
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Content-Type: text/html; charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1387
Date: Tue, 04 Oct 2022 13:45:20 GMT
Connection: keep-alive
aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_n-onetag_smrt_cnv_n-nativo_an-db5_sovrn_3lift
302 Found 0 B URL HTTP/1.1 aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_n-onetag_smrt_cnv_n-nativo_an-db5_sovrn_3lift
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_n-onetag_smrt_cnv_n-nativo_an-db5_sovrn_3lift HTTP/1.1
Host: aax-eu.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: Server
Date: Tue, 04 Oct 2022 13:45:20 GMT
Content-Length: 0
Connection: keep-alive
x-amz-rid: 0TDCHQS13F3ER4HTGHMV
Set-Cookie: ad-id=A5PCzQjOlUyRrvwVYYjf1iY|t; Domain=.amazon-adsystem.com; Expires=Sat, 01-Jul-2023 13:45:20 GMT; Path=/; Secure; HttpOnly; SameSite=None
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Location: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_n-onetag_smrt_cnv_n-nativo_an-db5_sovrn_3lift&dcc=t
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
200 OK 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://acdn.adnxs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 13:45:20 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: c6594b12-e437-4c30-ad8f-f8d681ab5f3e
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 536.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
200 OK 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://acdn.adnxs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 13:45:20 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 70d7ae1e-d5fc-4d55-af48-2b2fe30262a0
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 536.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
200 OK 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://acdn.adnxs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 13:45:20 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 747424c0-2134-4e48-912a-9bdf1f574484
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 536.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
trends.revcontent.com/rtb?apiKey=d1ca204723a06b3dd2c8ce63c6a6616c8432b534&userId=158948
204 No Content 0 B URL HTTP/2 trends.revcontent.com/rtb?apiKey=d1ca204723a06b3dd2c8ce63c6a6616c8432b534&userId=158948
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /rtb?apiKey=d1ca204723a06b3dd2c8ce63c6a6616c8432b534&userId=158948 HTTP/1.1
Host: trends.revcontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 589
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Tue, 04 Oct 2022 13:45:20 GMT
server: openresty
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-origin: https://braincandy.net
access-control-allow-credentials: true
x-envoy-upstream-service-time: 1
X-Firefox-Spdy: h2
ssum.casalemedia.com/usermatch?s=190025&cb=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1664891119694-916065978846-008711-011-004108%26biddername%3D42%26key%3D
302 Found 0 B URL HTTP/2 ssum.casalemedia.com/usermatch?s=190025&cb=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1664891119694-916065978846-008711-011-004108%26biddername%3D42%26key%3D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatch?s=190025&cb=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1664891119694-916065978846-008711-011-004108%26biddername%3D42%26key%3D HTTP/1.1
Host: ssum.casalemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 04 Oct 2022 13:45:20 GMT
content-length: 0
location: /usermatch?cb=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1664891119694-916065978846-008711-011-004108%26biddername%3D42%26key%3D&s=190025&C=1
cf-ray: 754e5b7e2bafb506-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
pragma: no-cache
set-cookie: CMID=Yzw48Gy388gU3MlWRsB7jwAA; Path=/; Domain=casalemedia.com; Expires=Wed, 04 Oct 2023 13:45:20 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=4514; Path=/; Domain=casalemedia.com; Expires=Mon, 02 Jan 2023 13:45:20 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=4514; Path=/; Domain=casalemedia.com; Expires=Mon, 02 Jan 2023 13:45:20 GMT; Max-Age=7776000; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7qn5eRlDe1ZW3nflMtQeb2POYnwwwR%2Fkt6zoYYMmsv9SUleL%2FYCTogbViTREw61fPKvzP49W%2Bc%2F5yEswl0RvPorXfmSrgtfaMDFU7DQetbVtsv99Qy0TshVxTqIHMfMozSquya5v"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
eus.rubiconproject.com/usync.html?p=17184-d
200 OK 233 B URL HTTP/1.1 eus.rubiconproject.com/usync.html?p=17184-d
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 6220919f0a2b24a12a281ea8b891ecf6
759111c360edc6df73ed10aaaa212cb22c47ce0d
030c6e199782fb1908f6f89d3cd41950fd3ae0830c5020ba9ed617111bacd180
GET /usync.html?p=17184-d HTTP/1.1
Host: eus.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache/2.2.15 (CentOS)
Last-Modified: Tue, 14 Dec 2021 23:07:59 GMT
ETag: "40014-119-5d32342a551c0"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 233
Content-Type: text/html; charset=UTF-8
Date: Tue, 04 Oct 2022 13:45:20 GMT
Connection: keep-alive
Vary: Accept-Encoding
js-sec.indexww.com/um/ixmatch.html
200 OK 1.4 kB URL HTTP/1.1 js-sec.indexww.com/um/ixmatch.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2920), with no line terminators
Hash d41805aed22c3b9731d56a19244e6b8a
7e5da0bdf4db3f38f1590b5020750a93d1a174b5
46aa57bbee28a5fa9e4352e856a1d3a0485613234232d0b3de27adc74d8fac26
GET /um/ixmatch.html HTTP/1.1
Host: js-sec.indexww.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache
Last-Modified: Mon, 25 Jul 2022 19:18:30 GMT
ETag: "e20015-b68-5e4a60c97afb7"
Accept-Ranges: bytes
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Content-Type: text/html; charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1387
Date: Tue, 04 Oct 2022 13:45:20 GMT
Connection: keep-alive
js-sec.indexww.com/um/ixmatch.html
200 OK 1.4 kB URL HTTP/1.1 js-sec.indexww.com/um/ixmatch.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2920), with no line terminators
Hash d41805aed22c3b9731d56a19244e6b8a
7e5da0bdf4db3f38f1590b5020750a93d1a174b5
46aa57bbee28a5fa9e4352e856a1d3a0485613234232d0b3de27adc74d8fac26
GET /um/ixmatch.html HTTP/1.1
Host: js-sec.indexww.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache
Last-Modified: Mon, 25 Jul 2022 19:18:30 GMT
ETag: "e20015-b68-5e4a60c97afb7"
Accept-Ranges: bytes
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Content-Type: text/html; charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1387
Date: Tue, 04 Oct 2022 13:45:20 GMT
Connection: keep-alive
prebid.deepintent.com/prebid
200 OK 0 B URL HTTP/2 prebid.deepintent.com/prebid
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /prebid HTTP/1.1
Host: prebid.deepintent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://braincandy.net/
Origin: https://braincandy.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://braincandy.net
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-max-age: 3600
access-control-allow-credentials: true
access-control-allow-methods: POST, GET, OPTIONS, DELETE
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-CSRF-TOKEN
allow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH
content-length: 0
date: Tue, 04 Oct 2022 13:45:19 GMT
server: b
X-Firefox-Spdy: h2
b1h.zemanta.com/api/bidder/prebid/bid/
204 No Content 0 B URL HTTP/1.1 b1h.zemanta.com/api/bidder/prebid/bid/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/bidder/prebid/bid/ HTTP/1.1
Host: b1h.zemanta.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 845
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://braincandy.net
secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fsync.aniview.com%252Fcookiesyncendpoint%253Fauid%253D1664891119694-916065978846-008711-011-004108%2526biddername%253D55%2526key%253D%2524UID
302 Found 0 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fsync.aniview.com%252Fcookiesyncendpoint%253Fauid%253D1664891119694-916065978846-008711-011-004108%2526biddername%253D55%2526key%253D%2524UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fsync.aniview.com%252Fcookiesyncendpoint%253Fauid%253D1664891119694-916065978846-008711-011-004108%2526biddername%253D55%2526key%253D%2524UID HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 13:45:20 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://sync.aniview.com/cookiesyncendpoint?auid=1664891119694-916065978846-008711-011-004108&biddername=55&key=0
AN-X-Request-Uuid: 2dcfa97c-95d0-4b5b-b37a-bf3c339c09d0
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 984.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
s.adtelligent.com/sync.html?aid=730717
200 OK 697 B URL HTTP/1.1 s.adtelligent.com/sync.html?aid=730717
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1358), with no line terminators
Hash 917cbc01930dffb8ba3bc59b0d656529
9271b6c0a681b47f81c2bcc1e013958b20d8c4d9
34e4d887675a3660ad03052a65a784971063c073c3b262c4f79a82710a0f1da3
GET /sync.html?aid=730717 HTTP/1.1
Host: s.adtelligent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Adtelligent
Date: Tue, 04 Oct 2022 13:45:19 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 697
Access-Control-Allow-Origin: https://braincandy.net
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
Content-Encoding: gzip
eus.rubiconproject.com/usync.js
200 OK 9.4 kB URL HTTP/1.1 eus.rubiconproject.com/usync.js
IP
File type ASCII text, with very long lines (17962)
Hash 0352c3497804064264dcff5c0d310872
3fdbb25ba9ff0632c3cffa08bc58645f65b6ee64
4ef0280235b06e0d55b0b376734460c5916ca0d0b6d17d4fa49d41aed5b96827
GET /usync.js HTTP/1.1
Host: eus.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://eus.rubiconproject.com/usync.html?p=17184&endpoint=us-east
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Apache/2.2.15 (CentOS)
X-Powered-By: PHP/5.3.3
p3p: CP="NOI CURa ADMa DEVa TAIa OUR # BUS IND UNI COM NAV INT"
Last-Modified: Thu, 15 Sep 2022 22:38:47 GMT
Content-Encoding: gzip
Content-Length: 9422
Content-Type: text/html; charset=UTF-8
Cache-Control: max-age=19971
Expires: Tue, 04 Oct 2022 19:18:11 GMT
Date: Tue, 04 Oct 2022 13:45:20 GMT
Connection: keep-alive
Vary: Accept-Encoding
aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_n-onetag_smrt_cnv_n-nativo_an-db5_sovrn_3lift&dcc=t
200 OK 64 B URL HTTP/1.1 aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_n-onetag_smrt_cnv_n-nativo_an-db5_sovrn_3lift&dcc=t
IP
File type HTML document, ASCII text
Hash be99f9f8ced5e5eb1f9721d861712f89
4291ee98f7ce20471796ec89961abb1acb2af1d8
f17fe415b91a13ea86b93344389e18c996384323ca3c2f4267b18c96b8314a12
GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_n-onetag_smrt_cnv_n-nativo_an-db5_sovrn_3lift&dcc=t HTTP/1.1
Host: aax-eu.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Server
Date: Tue, 04 Oct 2022 13:45:20 GMT
Content-Type: text/html;charset=ISO-8859-1
Content-Length: 64
Connection: keep-alive
x-amz-rid: 4ZYJTM792FGH6ENAXYN0
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
ap.lijit.com/rtb/bid?src=prebid_prebid_6.25.1-c
200 OK 24 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_6.25.1-c
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash b3889005881fa602cd3972d51f8fd45c
372bffcd690b2d67822b8879941d695e6dc147a2
c282a7db7fa5e362853d130e1932da75e4cb9fe6397369d885c006dc3582892d
POST /rtb/bid?src=prebid_prebid_6.25.1-c HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 2092
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Tue, 04 Oct 2022 13:45:20 GMT
set-cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljtrtb=;Version=1;Domain=.lijit.com;Path=/;Max-Age=0;Secure;Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=None;
content-type: application/json
access-control-allow-origin: https://braincandy.net
access-control-allow-methods: GET, POST, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
vary: Accept-Encoding, User-Agent
content-length: 24
pod: X-Sovrn-Pod: ad_ap3dca1
ghb.spotim.market/adunit/multitracking
204 No Content 0 B URL HTTP/1.1 ghb.spotim.market/adunit/multitracking
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adunit/multitracking HTTP/1.1
Host: ghb.spotim.market
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 8829
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: Adtelligent
Date: Tue, 04 Oct 2022 13:45:20 GMT
Access-Control-Allow-Origin: https://braincandy.net
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
pixel-sync.sitescout.com/dmp/pixelSync?nid=117&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D309017%26extuid%3D%7BuserId%7D%26gdpr%3D%240%26gdpr_consent%3D%24
302 Found 0 B URL HTTP/2 pixel-sync.sitescout.com/dmp/pixelSync?nid=117&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D309017%26extuid%3D%7BuserId%7D%26gdpr%3D%240%26gdpr_consent%3D%24
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dmp/pixelSync?nid=117&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D309017%26extuid%3D%7BuserId%7D%26gdpr%3D%240%26gdpr_consent%3D%24 HTTP/1.1
Host: pixel-sync.sitescout.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s.adtelligent.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
set-cookie: ssi=e1d7b3cb-c3e9-4f44-aaf8-a1ba9b4d1961#1664891120603; Domain=.sitescout.com; Expires=Wed, 04-Oct-2023 13:45:20 GMT; Path=/; Secure; SameSite=None
location: https://pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=117&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D309017%26extuid%3D%7BuserId%7D%26gdpr%3D%240%26gdpr_consent%3D%24
content-length: 0
date: Tue, 04 Oct 2022 13:45:20 GMT
server: AC1.1
X-Firefox-Spdy: h2
sync.spotim.market/csync?t=a&ep=734125&extuid=$UID
200 OK 0 B URL HTTP/1.1 sync.spotim.market/csync?t=a&ep=734125&extuid=$UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /csync?t=a&ep=734125&extuid=$UID HTTP/1.1
Host: sync.spotim.market
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s.adtelligent.com/
Cookie: vmuid=e349d358cb6f5968; a281178=PM_UID; a734125=$UID
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
If-None-Match: e349d358cb6f5968
HTTP/1.1 200 OK
Server: Adtelligent
Date: Tue, 04 Oct 2022 13:45:20 GMT
Content-Length: 0
Etag: e349d358cb6f5968
Set-Cookie: vmuid=e349d358cb6f5968; expires=Mon, 05 Dec 2022 13:45:20 GMT; domain=.spotim.market; path=/; secure; SameSite=None
a734125=$UID; expires=Mon, 05 Dec 2022 13:45:20 GMT; domain=.spotim.market; path=/; secure; SameSite=None
ib.adnxs.com/async_usersync?cbfn=queuePixels
307 Redirection 155 B URL HTTP/1.1 ib.adnxs.com/async_usersync?cbfn=queuePixels
IP
Hash ba7a626702760cd1605bb2b1a5f93b73
424b7145725f9d4d0ec69458ee58ff9cc6d20c85
d553a23256782f95acb8eacfc22e264dc34a91a09badb01c6e6b075fb006c6df
GET /async_usersync?cbfn=queuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acdn.adnxs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 13:45:20 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: https://ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
AN-X-Request-Uuid: 7945d610-67c8-4511-910e-9b63feb36e81
Set-Cookie: uuid2=5259142724329439044; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 02-Jan-2023 13:45:20 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 536.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ib.adnxs.com/async_usersync?cbfn=queuePixels
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/async_usersync?cbfn=queuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /async_usersync?cbfn=queuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acdn.adnxs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 13:45:20 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: https://ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
AN-X-Request-Uuid: 30fde2c3-af26-4837-8de0-dbf25a9ae86d
Set-Cookie: uuid2=5054542645300230523; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 02-Jan-2023 13:45:20 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 536.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ghb.adtelligent.com/adunit/mut
204 No Content 0 B URL HTTP/1.1 ghb.adtelligent.com/adunit/mut
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adunit/mut HTTP/1.1
Host: ghb.adtelligent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1160
Origin: https://p.ftoutreach.com
Connection: keep-alive
Referer: https://p.ftoutreach.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: Adtelligent
Date: Tue, 04 Oct 2022 13:45:20 GMT
Access-Control-Allow-Origin: https://p.ftoutreach.com
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
ups.analytics.yahoo.com/ups/58558/occ
302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58558/occ
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58558/occ HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 04 Oct 2022 13:45:20 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/58558/occ?verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBPA4PGMCEEnntGZRKIg90Sd7CdN7VaQFEgEBAQGKPWNGYwAAAAAA_eMAAA&S=AQAAAl4DEnHmxr-AaPgkEj21w0A; Expires=Wed, 4 Oct 2023 19:45:20 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
pixel-sync.sitescout.com/dmp/pixelSync?nid=117&gdpr={gdpr}&gdpr_consent={gdpr_consent}&redir=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D309017%26extuid%3D%7BuserId%7D%26gdpr%3D%24%7Bgdpr%7D%26gdpr_consent%3D%24%7Bgdpr_consent%7D
302 Found 0 B URL HTTP/2 pixel-sync.sitescout.com/dmp/pixelSync?nid=117&gdpr={gdpr}&gdpr_consent={gdpr_consent}&redir=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D309017%26extuid%3D%7BuserId%7D%26gdpr%3D%24%7Bgdpr%7D%26gdpr_consent%3D%24%7Bgdpr_consent%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dmp/pixelSync?nid=117&gdpr={gdpr}&gdpr_consent={gdpr_consent}&redir=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D309017%26extuid%3D%7BuserId%7D%26gdpr%3D%24%7Bgdpr%7D%26gdpr_consent%3D%24%7Bgdpr_consent%7D HTTP/1.1
Host: pixel-sync.sitescout.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
set-cookie: ssi=9da399cc-4e82-485a-8134-a09349982aaf#1664891120689; Domain=.sitescout.com; Expires=Wed, 04-Oct-2023 13:45:20 GMT; Path=/; Secure; SameSite=None
location: https://pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=117&gdpr={gdpr}&gdpr_consent={gdpr_consent}&redir=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D309017%26extuid%3D%7BuserId%7D%26gdpr%3D%24%7Bgdpr%7D%26gdpr_consent%3D%24%7Bgdpr_consent%7D
content-length: 0
date: Tue, 04 Oct 2022 13:45:20 GMT
server: AC1.1
X-Firefox-Spdy: h2
pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=117&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D309017%26extuid%3D%7BuserId%7D%26gdpr%3D%240%26gdpr_consent%3D%24
204 No Content 0 B URL HTTP/2 pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=117&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D309017%26extuid%3D%7BuserId%7D%26gdpr%3D%240%26gdpr_consent%3D%24
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dmp/pixelSync?cookieQ=1&nid=117&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D309017%26extuid%3D%7BuserId%7D%26gdpr%3D%240%26gdpr_consent%3D%24 HTTP/1.1
Host: pixel-sync.sitescout.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.adtelligent.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: max-age=0,no-cache,no-store
pragma: no-cache
expires: Tue, 11 Oct 1977 12:34:56 GMT
p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml"
date: Tue, 04 Oct 2022 13:45:19 GMT
server: AC1.1
X-Firefox-Spdy: h2
sync.1rx.io/usersync2/rmpssp?sub=aniview&gdpr=1&gdpr_pd=0&gdpr_consent=&redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1664891119694-916065978846-008711-011-004108%26biddername%3D200%26key%3D%5BRX_UUID%5D
302 Found 0 B URL HTTP/2 sync.1rx.io/usersync2/rmpssp?sub=aniview&gdpr=1&gdpr_pd=0&gdpr_consent=&redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1664891119694-916065978846-008711-011-004108%26biddername%3D200%26key%3D%5BRX_UUID%5D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usersync2/rmpssp?sub=aniview&gdpr=1&gdpr_pd=0&gdpr_consent=&redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1664891119694-916065978846-008711-011-004108%26biddername%3D200%26key%3D%5BRX_UUID%5D HTTP/1.1
Host: sync.1rx.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 04 Oct 2022 13:45:20 GMT
content-type: text/html
cache-control: no-store, no-cache, must-revalidate
expires: 0
pragma: no-cache
location: https://sync.aniview.com/cookiesyncendpoint?auid=1664891119694-916065978846-008711-011-004108&biddername=200&key=OPTOUT
etag: OPTOUT
X-Firefox-Spdy: h2
zerossl.ocsp.sectigo.com/
200 OK 317 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash 99b1b5f1e1371cb996b901145c39c69a
c50f71268cec248d74486d52d88da126a69fda45
6fef46237a0d29577313304870ff2eac9b092c0840e95f76d8e1a40f45b67e93
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 13:45:20 GMT
Content-Type: application/ocsp-response
Content-Length: 317
Connection: keep-alive
Last-Modified: Sat, 01 Oct 2022 18:36:24 GMT
Expires: Sat, 08 Oct 2022 18:36:23 GMT
Etag: "c50f71268cec248d74486d52d88da126a69fda45"
Cache-Control: max-age=362462,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 754e5b7f4ea3b503-OSL
cdn.indexww.com/ht/htw-pixel.gif?0
200 OK 43 B URL HTTP/2 cdn.indexww.com/ht/htw-pixel.gif?0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /ht/htw-pixel.gif?0 HTTP/1.1
Host: cdn.indexww.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ssum-sec.casalemedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:20 GMT
content-type: image/gif
content-length: 43
last-modified: Tue, 24 Jan 2017 19:36:04 GMT
etag: "da1f1d-2b-546dc3a097100"
cache-control: public, max-age=14400
expires: Tue, 04 Oct 2022 17:45:20 GMT
edge-control: cache-maxage=1h
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
cf-cache-status: HIT
age: 257
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754e5b808cdfb509-OSL
X-Firefox-Spdy: h2
pixel.rubiconproject.com/exchange/sync.php?p=17184-d
204 No Content 0 B URL HTTP/1.1 pixel.rubiconproject.com/exchange/sync.php?p=17184-d
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /exchange/sync.php?p=17184-d HTTP/1.1
Host: pixel.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://eus.rubiconproject.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 204 No Content
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: d0cea2fb47f5ddedaddf61763f0aedb4
Content-Type: image/gif
rtb.openx.net/sync/prebid?gdpr={gdpr}&gdpr_consent={gdpr_consent}&r=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D482928%26extuid%3D%24%7BUID%7D
200 OK 43 B URL HTTP/2 rtb.openx.net/sync/prebid?gdpr={gdpr}&gdpr_consent={gdpr_consent}&r=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D482928%26extuid%3D%24%7BUID%7D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /sync/prebid?gdpr={gdpr}&gdpr_consent={gdpr_consent}&r=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D482928%26extuid%3D%24%7BUID%7D HTTP/1.1
Host: rtb.openx.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: null
access-control-expose-headers:
cache-control: private, max-age=0, no-cache, must-revalidate
content-length: 43
content-type: image/gif
date: Tue, 04 Oct 2022 13:45:19 GMT
p3p: CP="CUR ADM OUR NOR STA NID"
pragma: no-cache
server: Cowboy
vary: Origin
x-request-id: q4206b3gcgq26ufavdg4d70q5brsp0kb
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
prebid.deepintent.com/prebid
204 No Content 0 B URL HTTP/2 prebid.deepintent.com/prebid
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid HTTP/1.1
Host: prebid.deepintent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 993
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-origin: https://braincandy.net
vary: Origin
access-control-max-age: 3600
access-control-allow-credentials: true
access-control-allow-methods: POST, GET, OPTIONS, DELETE
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-CSRF-TOKEN
date: Tue, 04 Oct 2022 13:45:20 GMT
server: b
X-Firefox-Spdy: h2
ap.lijit.com/pixel?redir=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D323551%26extuid%3D%24UID
204 No Content 0 B URL HTTP/1.1 ap.lijit.com/pixel?redir=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D323551%26extuid%3D%24UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel?redir=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D323551%26extuid%3D%24UID HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
date: Tue, 04 Oct 2022 13:45:20 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
pod: X-Sovrn-Pod: ad_ap3dca1
sync.adtelligent.com/csync?t=a&ep=323546&extuid=0
200 OK 43 B URL HTTP/1.1 sync.adtelligent.com/csync?t=a&ep=323546&extuid=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /csync?t=a&ep=323546&extuid=0 HTTP/1.1
Host: sync.adtelligent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Adtelligent
Date: Tue, 04 Oct 2022 13:45:20 GMT
Content-Type: image/gif
Content-Length: 43
Etag: f933ebbaaeee1c43
Set-Cookie: vmuid=f933ebbaaeee1c43; expires=Mon, 05 Dec 2022 13:45:20 GMT; domain=.adtelligent.com; path=/; secure; SameSite=None
ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
200 OK 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://acdn.adnxs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 13:45:20 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 3edd2937-db06-4473-a9d8-58e1209f0dde
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 536.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ups.analytics.yahoo.com/ups/58558/occ?verify=true
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58558/occ?verify=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58558/occ?verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 04 Oct 2022 13:45:20 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBPA4PGMCELFGW6FgjpTBSmzlpCtFaQoFEgEBAQGKPWNGYwAAAAAA_eMAAA&S=AQAAAt7vZ39xZyxAEp1RT7KNEyQ; Expires=Wed, 4 Oct 2023 19:45:20 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=117&gdpr={gdpr}&gdpr_consent={gdpr_consent}&redir=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D309017%26extuid%3D%7BuserId%7D%26gdpr%3D%24%7Bgdpr%7D%26gdpr_consent%3D%24%7Bgdpr_consent%7D
204 No Content 101 B URL HTTP/2 pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=117&gdpr={gdpr}&gdpr_consent={gdpr_consent}&redir=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D309017%26extuid%3D%7BuserId%7D%26gdpr%3D%24%7Bgdpr%7D%26gdpr_consent%3D%24%7Bgdpr_consent%7D
IP
Hash 972203580e20c4793ef943dd20341589
bfd7af05ce5a986f97369b7c88bc6b03387cbf70
14f706e5c53d3418781c60274ddff1349ff65825c01553a9479a6c4a5a449d2a
GET /dmp/pixelSync?cookieQ=1&nid=117&gdpr={gdpr}&gdpr_consent={gdpr_consent}&redir=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D309017%26extuid%3D%7BuserId%7D%26gdpr%3D%24%7Bgdpr%7D%26gdpr_consent%3D%24%7Bgdpr_consent%7D HTTP/1.1
Host: pixel-sync.sitescout.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: max-age=0,no-cache,no-store
pragma: no-cache
expires: Tue, 11 Oct 1977 12:34:56 GMT
p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml"
date: Tue, 04 Oct 2022 13:45:20 GMT
server: AC1.1
X-Firefox-Spdy: h2
sync.1rx.io/usersync2/rmpssp?sub=openweb&zcc=1&cb=1664891120679
302 Found 100 B URL HTTP/2 sync.1rx.io/usersync2/rmpssp?sub=openweb&zcc=1&cb=1664891120679
IP
File type gzip compressed data, max compression\012- data
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /usersync2/rmpssp?sub=openweb&zcc=1&cb=1664891120679 HTTP/1.1
Host: sync.1rx.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 04 Oct 2022 13:45:20 GMT
content-type: text/html
cache-control: no-store, no-cache, must-revalidate
expires: 0
pragma: no-cache
location: https://sync.spotim.market/csync?t=a&ep=708476&extuid=OPTOUT
etag: OPTOUT
X-Firefox-Spdy: h2
sync.aniview.com/cookiesyncendpoint?auid=1664891119694-916065978846-008711-011-004108&biddername=200&key=OPTOUT
200 OK 0 B URL HTTP/2 sync.aniview.com/cookiesyncendpoint?auid=1664891119694-916065978846-008711-011-004108&biddername=200&key=OPTOUT
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cookiesyncendpoint?auid=1664891119694-916065978846-008711-011-004108&biddername=200&key=OPTOUT HTTP/1.1
Host: sync.aniview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Connection: keep-alive
Cookie: aniC=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:20 GMT
content-length: 0
set-cookie: 2_C_200=OPTOUT; Path=/; Domain=aniview.com; Expires=Wed, 05 Oct 2022 13:45:20 GMT; Secure; SameSite=None
2_C_200=OPTOUT; Path=/; Expires=Wed, 05 Oct 2022 13:45:20 GMT; Secure; SameSite=None
X-Firefox-Spdy: h2
sync.aniview.com/cookiesyncendpoint?auid=1664891119694-916065978846-008711-011-004108&biddername=55&key=0
200 OK 0 B URL HTTP/2 sync.aniview.com/cookiesyncendpoint?auid=1664891119694-916065978846-008711-011-004108&biddername=55&key=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cookiesyncendpoint?auid=1664891119694-916065978846-008711-011-004108&biddername=55&key=0 HTTP/1.1
Host: sync.aniview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Connection: keep-alive
Cookie: aniC=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:20 GMT
content-length: 0
set-cookie: 2_C_55=0; Path=/; Domain=aniview.com; Expires=Wed, 05 Oct 2022 13:45:20 GMT; Secure; SameSite=None
2_C_55=0; Path=/; Expires=Wed, 05 Oct 2022 13:45:20 GMT; Secure; SameSite=None
X-Firefox-Spdy: h2
sync.spotim.market/csync?t=a&ep=708476&extuid=OPTOUT
200 OK 0 B URL HTTP/1.1 sync.spotim.market/csync?t=a&ep=708476&extuid=OPTOUT
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /csync?t=a&ep=708476&extuid=OPTOUT HTTP/1.1
Host: sync.spotim.market
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Connection: keep-alive
Cookie: vmuid=e349d358cb6f5968; a281178=PM_UID; a734125=$UID
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Adtelligent
Date: Tue, 04 Oct 2022 13:45:20 GMT
Content-Length: 0
Etag: e349d358cb6f5968
Set-Cookie: vmuid=e349d358cb6f5968; expires=Mon, 05 Dec 2022 13:45:20 GMT; domain=.spotim.market; path=/; secure; SameSite=None
a708476=OPTOUT; expires=Mon, 05 Dec 2022 13:45:20 GMT; domain=.spotim.market; path=/; secure; SameSite=None
pixel-us-east.rubiconproject.com/exchange/sync.php?p=17184
204 No Content 0 B URL HTTP/1.1 pixel-us-east.rubiconproject.com/exchange/sync.php?p=17184
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /exchange/sync.php?p=17184 HTTP/1.1
Host: pixel-us-east.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://eus.rubiconproject.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 204 No Content
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: bd0f62a3fbacfef6a33ae6abaf6daf37
Content-Type: image/gif
sync.aniview.com/cookiesyncendpoint?auid=1664891119694-916065978846-008711-011-004108&biddername=42&key=0
200 OK 0 B URL HTTP/2 sync.aniview.com/cookiesyncendpoint?auid=1664891119694-916065978846-008711-011-004108&biddername=42&key=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cookiesyncendpoint?auid=1664891119694-916065978846-008711-011-004108&biddername=42&key=0 HTTP/1.1
Host: sync.aniview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ssum.casalemedia.com/
Cookie: aniC=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:21 GMT
content-length: 0
set-cookie: 2_C_42=0; Path=/; Domain=aniview.com; Expires=Wed, 05 Oct 2022 13:45:21 GMT; Secure; SameSite=None
2_C_42=0; Path=/; Expires=Wed, 05 Oct 2022 13:45:21 GMT; Secure; SameSite=None
X-Firefox-Spdy: h2
ib.adnxs.com/async_usersync?cbfn=queuePixels
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/async_usersync?cbfn=queuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /async_usersync?cbfn=queuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acdn.adnxs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 13:45:21 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: https://ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
AN-X-Request-Uuid: ba27a130-c5b2-4b1f-a686-f6166281bd28
Set-Cookie: uuid2=248126921565017088; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 02-Jan-2023 13:45:21 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 536.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ib.adnxs.com/async_usersync?cbfn=queuePixels
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/async_usersync?cbfn=queuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /async_usersync?cbfn=queuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acdn.adnxs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 13:45:21 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: https://ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
AN-X-Request-Uuid: 99542863-451e-4b13-bb48-4dd23f99ebcc
Set-Cookie: uuid2=1713956284352635147; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 02-Jan-2023 13:45:21 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 536.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
player.adtelligent.com/exchange_rates/307824/config.json?cb=https%3A%2F%2Fbraincandy.net%2F
200 OK 1.2 kB URL HTTP/2 player.adtelligent.com/exchange_rates/307824/config.json?cb=https%3A%2F%2Fbraincandy.net%2F
IP
ASN #39572 DataWeb Global Group B.V.
File type JSON data\012- , ASCII text, with very long lines (2123), with no line terminators
Hash cf715de1830e0e8d17631820ac29b8de
c3b63739c53491ff99fc0aaed232c7ba53307501
5e3beffd2c0506edfb6be7d31d590d6ecc324d84f3d5872c517f9c3ffd3adaae
GET /exchange_rates/307824/config.json?cb=https%3A%2F%2Fbraincandy.net%2F HTTP/1.1
Host: player.adtelligent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://p.ftoutreach.com
Connection: keep-alive
Referer: https://p.ftoutreach.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:19 GMT
content-type: application/json
server: nginx
last-modified: Mon, 03 Oct 2022 12:01:12 GMT
etag: W/"633acf08-84b"
cache-control: max-age=172800
content-encoding: gzip
expires: Thu, 06 Oct 2022 13:45:19 GMT
access-control-allow-origin: https://p.ftoutreach.com
x-proxy-cache: HIT
X-Firefox-Spdy: h2
ib.adnxs.com/async_usersync?cbfn=queuePixels
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/async_usersync?cbfn=queuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /async_usersync?cbfn=queuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acdn.adnxs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 13:45:21 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: https://ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
AN-X-Request-Uuid: af4c35d2-81b9-4575-bf20-703bdc9b790f
Set-Cookie: uuid2=7844701014398186289; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 02-Jan-2023 13:45:21 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 536.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
200 OK 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://acdn.adnxs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 13:45:21 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 9f0217df-e126-46ba-9f55-ef95e86bdfc9
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 536.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ocsp.digicert.com/
200 OK 314 B IP
Hash 4e5b1c18b41c244135794b09f34ef8c0
954b38d1eca6896a15c88cae2ebd5b791d32cc91
459d21039ffbad3ea5274c2d0df28e4b684bcbc6c306b0ae7d977aa782b8dffe
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1204
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:21 GMT
Last-Modified: Tue, 04 Oct 2022 13:25:17 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 314
ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
200 OK 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://acdn.adnxs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 13:45:21 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: a58228b1-d957-46a6-8533-1a29a10954a5
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 536.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
200 OK 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://acdn.adnxs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 13:45:21 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 33a47e48-6064-43dc-8ba6-59cdb98bf46d
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 536.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
gum.criteo.com/syncframe?origin=publishertag&topUrl=braincandy.net
200 OK 5.1 kB URL HTTP/2 gum.criteo.com/syncframe?origin=publishertag&topUrl=braincandy.net
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (13465)
Hash 34a6e01086616219680f16eed3737ad9
3cf3c687f443c35333b447b00c7ead84bdbc23cf
1f57aef3e44612c507607d48e746df4e859bad2a4f059389d6c7f68385cfaaf9
GET /syncframe?origin=publishertag&topUrl=braincandy.net HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:20 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=e8167fa1-897b-4924-bbe7-1a695f2d3dfb; expires=Sun, 29 Oct 2023 13:45:20 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 728859
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
200 OK 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://acdn.adnxs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 13:45:21 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 7ab53439-ae5f-4e16-ac79-b6a64b6da2ca
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 536.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ocsp.digicert.com/
200 OK 314 B IP
Hash e433fcb50acece9e71308bea3cae2176
2c0f6555dac211dede365146a74683d1e9dfd861
f857ceb2aa56ca52b06507625e2e52a4b27ff34f21fdd32a20048e9abf9a66b6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5304
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:21 GMT
Last-Modified: Tue, 04 Oct 2022 12:16:58 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 314
ocsp.digicert.com/
200 OK 314 B IP
Hash e433fcb50acece9e71308bea3cae2176
2c0f6555dac211dede365146a74683d1e9dfd861
f857ceb2aa56ca52b06507625e2e52a4b27ff34f21fdd32a20048e9abf9a66b6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5753
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 13:45:21 GMT
Last-Modified: Tue, 04 Oct 2022 12:09:28 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 314
ag.gbc.criteo.com/newidsd
200 OK 39 B URL HTTP/2 ag.gbc.criteo.com/newidsd
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9a3f3372bd977de3386d72b084968713
af2a70e0db00e0f2dc1cdb258e292bed34689875
bb6016cd887e231ffaf3a8d11c9e8ce6f8fac6fd47c0ab622a8502da2470d54e
GET /newidsd HTTP/1.1
Host: ag.gbc.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:21 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 106910
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
sync.1rx.io/usersync2/rmpssp?sub=openweb
302 Found 0 B URL HTTP/2 sync.1rx.io/usersync2/rmpssp?sub=openweb
IP
GET /usersync2/rmpssp?sub=openweb HTTP/1.1
Host: sync.1rx.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 04 Oct 2022 13:45:20 GMT
content-type: text/html
cache-control: no-store, no-cache, must-revalidate
expires: 0
pragma: no-cache
set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-2f7b8d5f-1189-43f6-b018-ef6eed006b21-003%22%2C%22zdxidn%22%3A%222069.55%22%7D; path=/; expires=Wed, 04 Oct 2023 13:45:20 GMT; domain=.1rx.io; samesite=none; secure; httponly
p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why"
location: https://sync.1rx.io/usersync2/rmpssp?sub=openweb&zcc=1&cb=1664891120679
etag: RX2f7b8d5f118943f6b018ef6eed006b21003
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Hind
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Hind
IP
GET /css?family=Hind HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 04 Oct 2022 13:45:14 GMT
date: Tue, 04 Oct 2022 13:45:14 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Jura:500
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Jura:500
IP
GET /css?family=Jura:500 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 04 Oct 2022 13:45:14 GMT
date: Tue, 04 Oct 2022 13:45:14 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Days+One
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Days+One
IP
GET /css?family=Days+One HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 04 Oct 2022 13:45:14 GMT
date: Tue, 04 Oct 2022 13:45:14 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dn0qt3r0xannq.cloudfront.net/triviatoday-8NZt8FLGX9/braincandy/prebid-load.js
200 OK 0 B URL HTTP/2 dn0qt3r0xannq.cloudfront.net/triviatoday-8NZt8FLGX9/braincandy/prebid-load.js
IP
GET /triviatoday-8NZt8FLGX9/braincandy/prebid-load.js HTTP/1.1
Host: dn0qt3r0xannq.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 03 Oct 2022 21:51:27 GMT
x-amz-version-id: 397d8loLTz.4m5iRffvDDJyEuDlWxz2G
server: AmazonS3
content-encoding: br
date: Tue, 04 Oct 2022 13:45:15 GMT
cache-control: max-age=3600
etag: W/"3e4723a7a7cc2934055a70849709754d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: G0VvyAG0Ne8PHVl-EMjWpyrXSNICOolXjS25ir8yvxTi-0-tSD8Scg==
age: 2516
X-Firefox-Spdy: h2
static-cdn.spot.im/production/ads/tags/v21.6.2/ads/ads.js
200 OK 0 B URL HTTP/2 static-cdn.spot.im/production/ads/tags/v21.6.2/ads/ads.js
IP
GET /production/ads/tags/v21.6.2/ads/ads.js HTTP/1.1
Host: static-cdn.spot.im
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Cookie: device_uuid=37659e0b-15f9-40e6-8fe9-62c0dd1d32b5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 15 Sep 2022 10:26:30 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: U2ThjUZ6mtPkCAcnF_7ieUh3p1z6W4G.
server: AmazonS3
content-encoding: br
date: Tue, 04 Oct 2022 01:39:52 GMT
etag: W/"eb1a4ac6f58707306e6393212bd005b1"
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -3LdEGIQpc0QF1wkB3I59IlMLZWimu91zVTzrkV-UDI1W5IgRaU8Tg==
age: 43525
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Audiowide
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Audiowide
IP
GET /css?family=Audiowide HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 04 Oct 2022 13:45:14 GMT
date: Tue, 04 Oct 2022 13:45:14 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static-cdn.spot.im/production/icons/sprites/sprite.svg
200 OK 0 B URL HTTP/2 static-cdn.spot.im/production/icons/sprites/sprite.svg
IP
GET /production/icons/sprites/sprite.svg HTTP/1.1
Host: static-cdn.spot.im
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://braincandy.net/
Origin: https://braincandy.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Wed, 11 May 2022 08:57:43 GMT
x-amz-version-id: gJImWiUZ43TZkUACGUvnT4BAL8Ytwpd5
server: AmazonS3
content-encoding: br
date: Tue, 04 Oct 2022 05:36:12 GMT
etag: W/"5a00ba991fdd7fb0f560fb63f2f832e0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QzVib9W_Rq9i5mzdBOM5akeRI20gOFrO8uFd1iLI2WtOLtJitk1oFg==
age: 29344
access-control-allow-origin: *
X-Firefox-Spdy: h2
rumcdn.geoedge.be/35362513-af22-4abd-a2c3-bcf6c62814c8/grumi.js
200 OK 0 B URL HTTP/2 rumcdn.geoedge.be/35362513-af22-4abd-a2c3-bcf6c62814c8/grumi.js
IP
GET /35362513-af22-4abd-a2c3-bcf6c62814c8/grumi.js HTTP/1.1
Host: rumcdn.geoedge.be
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
date: Tue, 04 Oct 2022 13:38:03 GMT
last-modified: Tue, 04 Oct 2022 12:56:28 GMT
etag: W/"b0f3ed62431a7c4284a2881d9130c1bf"
cache-control: public,max-age=3600,stale-while-revalidate=3600,immutable,must-revalidate
x-amz-version-id: SWaP_wxE1IPnVu3ta3rdS8Kevp_P7qqg
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DAcPbxREen4EvLIIHPEZAPt3FXhgZzWMwb8pr0Geo0ptBkj4v6iOLA==
age: 436
X-Firefox-Spdy: h2
gem.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:20 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 78279
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Permanent+Marker
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Permanent+Marker
IP
GET /css?family=Permanent+Marker HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 04 Oct 2022 13:45:14 GMT
date: Tue, 04 Oct 2022 13:45:14 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static-cdn.spot.im/production/ads/tags/v21.6.2/ads/main-chunk.js
200 OK 0 B URL HTTP/2 static-cdn.spot.im/production/ads/tags/v21.6.2/ads/main-chunk.js
IP
GET /production/ads/tags/v21.6.2/ads/main-chunk.js HTTP/1.1
Host: static-cdn.spot.im
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Cookie: device_uuid=37659e0b-15f9-40e6-8fe9-62c0dd1d32b5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 15 Sep 2022 10:26:30 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: GhHQCsTFkao0GeboNNTngpsbpsxAK9Ew
server: AmazonS3
content-encoding: br
date: Tue, 04 Oct 2022 07:55:00 GMT
etag: W/"eb6860ef58de1ae4e5547679fd84f1b0"
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XWM8-gyqeIFCb9J9qOUXPDPPejckJl1VoG0CKwxxvUdjjUHsApGrlA==
age: 21019
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
rumcdn.geoedge.be/f56c63ac-7a27-4063-8e9c-611b9f7b523f/grumi.js
200 OK 0 B URL HTTP/2 rumcdn.geoedge.be/f56c63ac-7a27-4063-8e9c-611b9f7b523f/grumi.js
IP
GET /f56c63ac-7a27-4063-8e9c-611b9f7b523f/grumi.js HTTP/1.1
Host: rumcdn.geoedge.be
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
date: Tue, 04 Oct 2022 13:38:04 GMT
last-modified: Tue, 04 Oct 2022 12:56:52 GMT
etag: W/"e69f82a796528d45914e97a197edb8a9"
cache-control: public,max-age=3600,stale-while-revalidate=3600,immutable,must-revalidate
x-amz-version-id: VWvITvy1atDaIot6U1CCar0xf8HLDxjG
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GKiTOt9JyPUILcEEqPD-BxJBR4qu9E9zVFzayX2b5bqy3bJQrNnmiA==
age: 435
X-Firefox-Spdy: h2
prebid.media.net/rtb/prebid?cid=8CUU04S3F
200 OK 0 B URL HTTP/2 prebid.media.net/rtb/prebid?cid=8CUU04S3F
IP
POST /rtb/prebid?cid=8CUU04S3F HTTP/1.1
Host: prebid.media.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1324
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 13:45:20 GMT
content-type: application/json;charset=UTF-8
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: https://braincandy.net
access-control-allow-credentials: true
content-encoding: gzip
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
dn0qt3r0xannq.cloudfront.net/triviatoday-8NZt8FLGX9/braincandy/prebid-library.js?v=2
200 OK 0 B URL HTTP/2 dn0qt3r0xannq.cloudfront.net/triviatoday-8NZt8FLGX9/braincandy/prebid-library.js?v=2
IP
GET /triviatoday-8NZt8FLGX9/braincandy/prebid-library.js?v=2 HTTP/1.1
Host: dn0qt3r0xannq.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 04 Oct 2022 09:29:52 GMT
last-modified: Mon, 03 Oct 2022 21:51:27 GMT
etag: W/"09186b4d182630dd281d7ff23e150b49"
cache-control: max-age=86400
x-amz-version-id: bQ2qLWQp4eoF3fg2_XBjP.MhP.U0f7C3
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Q028BsYWsEFbcptsUzEMKJbSTmEUCqqWSk-YiB3oGZrVgpLI8_4wbw==
age: 15324
X-Firefox-Spdy: h2
simage4.pubmatic.com/AdServer/SPug?o=1&p=156758&sc=1&pr=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D281178%26extuid%3DPM_UID&umc=PM_UID&u=0022F9F6-2B47-42EE-ADA9-FD080CB5A47D&rs=3&gdpr=0&gdpr_consent=&us_privacy=
302 Found 0 B URL HTTP/2 simage4.pubmatic.com/AdServer/SPug?o=1&p=156758&sc=1&pr=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D281178%26extuid%3DPM_UID&umc=PM_UID&u=0022F9F6-2B47-42EE-ADA9-FD080CB5A47D&rs=3&gdpr=0&gdpr_consent=&us_privacy=
IP
GET /AdServer/SPug?o=1&p=156758&sc=1&pr=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D281178%26extuid%3DPM_UID&umc=PM_UID&u=0022F9F6-2B47-42EE-ADA9-FD080CB5A47D&rs=3&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1
Host: simage4.pubmatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.pubmatic.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
HTTP/2 302 Found
server: nginx
date: Tue, 04 Oct 2022 13:45:17 GMT
location: https://sync.spotim.market/csync?t=a&ep=281178&extuid=PM_UID
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
cache-control: no-store, no-cache, private
X-Firefox-Spdy: h2
c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
200 OK 0 B URL HTTP/2 c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
IP
GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 03 Oct 2022 14:45:44 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 19 Sep 2022 09:37:07 GMT
etag: W/"a4d296427fc806b21335359e398c025c"
cache-control: public, max-age=86400
x-amz-version-id: I95TjGhhrR3O7F99m0mjPLrSrnJRj9o4
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: kst-dZz-tmjR2a_bHbBsgly-W-MiGz9wOuOaxn7ETxOY4Ofa_btXig==
age: 82776
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Fjalla+One
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Fjalla+One
IP
GET /css?family=Fjalla+One HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 04 Oct 2022 13:45:14 GMT
date: Tue, 04 Oct 2022 13:45:14 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dn0qt3r0xannq.cloudfront.net/triviatoday-8NZt8FLGX9/braincandy/prebid-adapters-braincandy.5d177de615af015125ee.js
200 OK 0 B URL HTTP/2 dn0qt3r0xannq.cloudfront.net/triviatoday-8NZt8FLGX9/braincandy/prebid-adapters-braincandy.5d177de615af015125ee.js
IP
GET /triviatoday-8NZt8FLGX9/braincandy/prebid-adapters-braincandy.5d177de615af015125ee.js HTTP/1.1
Host: dn0qt3r0xannq.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 03 Oct 2022 21:51:27 GMT
x-amz-version-id: .KqJtROxakMbmJ.nqJ956fifE.o.6XnI
server: AmazonS3
content-encoding: br
date: Tue, 04 Oct 2022 13:45:15 GMT
cache-control: max-age=3600
etag: W/"db905fbda069c245c340b54c60dd2d7a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: IJ6vLVCkaMV09VaX9O_tbaVRjfTi3NeS_Pv5vYTxdP1HfHqVNq5XNQ==
age: 2541
X-Firefox-Spdy: h2
static-cdn.spot.im/production/ads/tags/v21.6.2/ads/ads.css
200 OK 0 B URL HTTP/2 static-cdn.spot.im/production/ads/tags/v21.6.2/ads/ads.css
IP
GET /production/ads/tags/v21.6.2/ads/ads.css HTTP/1.1
Host: static-cdn.spot.im
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Cookie: device_uuid=37659e0b-15f9-40e6-8fe9-62c0dd1d32b5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Thu, 15 Sep 2022 10:26:30 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: CDZEpH.mVzla.eGg_lYSXDY2Q6uO1B.q
server: AmazonS3
content-encoding: br
date: Tue, 04 Oct 2022 02:53:21 GMT
etag: W/"317d67ac7b7dd95989b38e4b4ef49226"
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: I4tzwPsRl9weBk3rfqDWiWln0Ngx_qAQhaz8vfsmeDIW9DbFZaEOLQ==
age: 39121
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
player.spotim.market/prebidlink/462469/hb_270443_960.js
200 OK 0 B URL HTTP/2 player.spotim.market/prebidlink/462469/hb_270443_960.js
IP
ASN #39572 DataWeb Global Group B.V.
GET /prebidlink/462469/hb_270443_960.js HTTP/1.1
Host: player.spotim.market
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:18 GMT
content-type: application/javascript; charset=utf-8
server: nginx
last-modified: Tue, 06 Sep 2022 11:20:15 GMT
etag: W/"63172cef-68b10"
cache-control: max-age=172800
content-encoding: gzip
expires: Thu, 06 Oct 2022 13:45:18 GMT
access-control-allow-origin: *
x-proxy-cache: HIT
X-Firefox-Spdy: h2
trc.taboola.com/sg/liveintent/1/cm/
200 OK 0 B URL HTTP/2 trc.taboola.com/sg/liveintent/1/cm/
IP
GET /sg/liveintent/1/cm/ HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://i.liadm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
cache-control: no-cache, no-store
pragma: no-cache
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
date: Tue, 04 Oct 2022 13:45:17 GMT
via: 1.1 varnish
x-served-by: cache-bma1641-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1664891117.179763,VS0,VE78
x-vcl-time-ms: 78
X-Firefox-Spdy: h2
static.criteo.net/js/ld/publishertag.prebid.js
200 OK 0 B URL HTTP/2 static.criteo.net/js/ld/publishertag.prebid.js
IP
GET /js/ld/publishertag.prebid.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 13:45:19 GMT
content-type: text/javascript
last-modified: Sat, 17 Sep 2022 19:59:55 GMT
etag: W/"6326273b-16120"
expires: Wed, 05 Oct 2022 13:45:19 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
go1.aniview.com/api/adserver/tag/1/?AV_CDIM1=sp_HQI9uHrd&AV_CDIM2=Desktop&AV_CDIM3=pitc&AV_CDIM4=1d3c604f-ba28-4429-8bea-d232bcf7b23f&AV_CDIM5=Onkl4-PubCcpAr0KXW2XzkxbQfKAqueEWdIPyziUCjxHB362grRG-xD5zYCY14Os&AV_CDIM6=stable&AV_CDIM7=row1-column1&AV_CDIM9=151404300&AV_CDIM10=v21.6.2&AV_SCHAIN=1.0%2C1!spotim.market%2Csp_HQI9uHrd%2C1%2C%2C%2C&AV_SECURED=1&AV_LANGUAGE=en&AV_URL=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&AV_PUBLISHERID=5e0e296628a061270b21ccab&AV_CHANNELID=6284bbbc3726a040dd745676&tgt=0&AV_SUBID=&AV_ABT=1&pce=1&npx=1&AV_DETDOMAIN=braincandy.net&AV_DADPOS=3&AV_PLACEMENT=1&d36=6.2.56&responsive=1&sver=2&avtoken=118723&omv=1.0.1&clsid=edcd2071-b66e-4c22-840b-5573c4c1b12d&rando=30&AV_WIDTH=400&AV_HEIGHT=300&AV_DNT=0&cb=1664891118759&wfc=1
200 OK 0 B URL HTTP/2 go1.aniview.com/api/adserver/tag/1/?AV_CDIM1=sp_HQI9uHrd&AV_CDIM2=Desktop&AV_CDIM3=pitc&AV_CDIM4=1d3c604f-ba28-4429-8bea-d232bcf7b23f&AV_CDIM5=Onkl4-PubCcpAr0KXW2XzkxbQfKAqueEWdIPyziUCjxHB362grRG-xD5zYCY14Os&AV_CDIM6=stable&AV_CDIM7=row1-column1&AV_CDIM9=151404300&AV_CDIM10=v21.6.2&AV_SCHAIN=1.0%2C1!spotim.market%2Csp_HQI9uHrd%2C1%2C%2C%2C&AV_SECURED=1&AV_LANGUAGE=en&AV_URL=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&AV_PUBLISHERID=5e0e296628a061270b21ccab&AV_CHANNELID=6284bbbc3726a040dd745676&tgt=0&AV_SUBID=&AV_ABT=1&pce=1&npx=1&AV_DETDOMAIN=braincandy.net&AV_DADPOS=3&AV_PLACEMENT=1&d36=6.2.56&responsive=1&sver=2&avtoken=118723&omv=1.0.1&clsid=edcd2071-b66e-4c22-840b-5573c4c1b12d&rando=30&AV_WIDTH=400&AV_HEIGHT=300&AV_DNT=0&cb=1664891118759&wfc=1
IP
GET /api/adserver/tag/1/?AV_CDIM1=sp_HQI9uHrd&AV_CDIM2=Desktop&AV_CDIM3=pitc&AV_CDIM4=1d3c604f-ba28-4429-8bea-d232bcf7b23f&AV_CDIM5=Onkl4-PubCcpAr0KXW2XzkxbQfKAqueEWdIPyziUCjxHB362grRG-xD5zYCY14Os&AV_CDIM6=stable&AV_CDIM7=row1-column1&AV_CDIM9=151404300&AV_CDIM10=v21.6.2&AV_SCHAIN=1.0%2C1!spotim.market%2Csp_HQI9uHrd%2C1%2C%2C%2C&AV_SECURED=1&AV_LANGUAGE=en&AV_URL=https%3A%2F%2Fbraincandy.net%2F%3F6d73d7d9-trivia-template-&AV_PUBLISHERID=5e0e296628a061270b21ccab&AV_CHANNELID=6284bbbc3726a040dd745676&tgt=0&AV_SUBID=&AV_ABT=1&pce=1&npx=1&AV_DETDOMAIN=braincandy.net&AV_DADPOS=3&AV_PLACEMENT=1&d36=6.2.56&responsive=1&sver=2&avtoken=118723&omv=1.0.1&clsid=edcd2071-b66e-4c22-840b-5573c4c1b12d&rando=30&AV_WIDTH=400&AV_HEIGHT=300&AV_DNT=0&cb=1664891118759&wfc=1 HTTP/1.1
Host: go1.aniview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://braincandy.net
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:19 GMT
content-type: application/json
vary: Accept-Encoding
set-cookie: aniC=1664891119694-916065978846-008711-011-004108; Expires=Mon, 24-Oct-22 13:45:19 GMT; Max-Age=1728000; Domain=aniview.com; Path=/; Secure; HttpOnly; SameSite=None
aniC=; Expires=Mon, 24-Oct-22 13:45:19 GMT; Max-Age=1728000; Domain=aniview.com; Path=/; Secure; HttpOnly; SameSite=None
access-control-allow-credentials: true
access-control-allow-origin: https://braincandy.net
expires: Thu, 22 Sep 2022 23:58:39 GMT
cache-control: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=publishertag&domain=braincandy.net&sn=FirefoxSyncframe&so=0&topUrl=braincandy.net&info=DqpoXl80M0RITmhlJTJCZkMwOUJGQlhaMUN2czFLaHhwa291aXRhU1hZN0JUVXVkWDd2RmlsNTZFY0p3JTJGZEp6NHcxTXFlTg&idsd=-154242974,53564847&cw=1&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=publishertag&domain=braincandy.net&sn=FirefoxSyncframe&so=0&topUrl=braincandy.net&info=DqpoXl80M0RITmhlJTJCZkMwOUJGQlhaMUN2czFLaHhwa291aXRhU1hZN0JUVXVkWDd2RmlsNTZFY0p3JTJGZEp6NHcxTXFlTg&idsd=-154242974,53564847&cw=1&lsw=1
IP
GET /sid/json?origin=publishertag&domain=braincandy.net&sn=FirefoxSyncframe&so=0&topUrl=braincandy.net&info=DqpoXl80M0RITmhlJTJCZkMwOUJGQlhaMUN2czFLaHhwa291aXRhU1hZN0JUVXVkWDd2RmlsNTZFY0p3JTJGZEp6NHcxTXFlTg&idsd=-154242974,53564847&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?origin=publishertag&topUrl=braincandy.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:21 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 879942
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Cuprum:700,400
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Cuprum:700,400
IP
GET /css?family=Cuprum:700,400 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 04 Oct 2022 13:45:14 GMT
date: Tue, 04 Oct 2022 13:45:14 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
code.jquery.com/ui/1.11.4/jquery-ui.js
200 OK 0 B URL HTTP/2 code.jquery.com/ui/1.11.4/jquery-ui.js
IP
GET /ui/1.11.4/jquery-ui.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:14 GMT
content-encoding: gzip
content-length: 114093
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Feb 2022 10:50:40 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd700-72e44"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1664891114.dop227.sk1.t,1664891114.cds240.sk1.hn,1664891114.cds247.sk1.c
X-Firefox-Spdy: h2
b-code.liadm.com/a-01lm.min.js
200 OK 0 B URL HTTP/2 b-code.liadm.com/a-01lm.min.js
IP
GET /a-01lm.min.js HTTP/1.1
Host: b-code.liadm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 04 Oct 2022 12:17:51 GMT
cache-control: public, max-age=86400
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LFHC4gSqm3j3qkWL7YnyJubqzgSAhm__xMkyTNOSUoVjWGPOqTbWJQ==
age: 5244
X-Firefox-Spdy: h2
netdna.bootstrapcdn.com/font-awesome/4.0.3/css/font-awesome.css
200 OK 0 B URL HTTP/2 netdna.bootstrapcdn.com/font-awesome/4.0.3/css/font-awesome.css
IP
GET /font-awesome/4.0.3/css/font-awesome.css HTTP/1.1
Host: netdna.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:14 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
cdn-edgestorageid: 601, 617, 617
last-modified: Mon, 25 Jan 2021 22:04:53 GMT
cdn-cachedat: 2021-08-03 04:14:00
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 6358afe6e12aefed963ad27f3935d6d1
cdn-status: 200
cdn-cache: HIT
cf-cache-status: HIT
age: 10337800
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 754e5b57787fb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dn0qt3r0xannq.cloudfront.net/triviatoday-8NZt8FLGX9/braincandy/prebid-wrapper.js?v=2
200 OK 0 B URL HTTP/2 dn0qt3r0xannq.cloudfront.net/triviatoday-8NZt8FLGX9/braincandy/prebid-wrapper.js?v=2
IP
GET /triviatoday-8NZt8FLGX9/braincandy/prebid-wrapper.js?v=2 HTTP/1.1
Host: dn0qt3r0xannq.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 03 Oct 2022 21:51:27 GMT
x-amz-version-id: B6X_81whjuCVsM3BzzEFRx_8US3Y36d3
server: AmazonS3
content-encoding: br
date: Tue, 04 Oct 2022 13:45:15 GMT
cache-control: max-age=3600
etag: W/"145fd04f1ce1ffb9a65b3aa2df8e8ca5"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Y1tAPFG05yyuuIbbmi3Zq1mNJSbQ837TQpp3K_D-GAMbfNlZxKVwUQ==
age: 308
X-Firefox-Spdy: h2
rumcdn.geoedge.be/191e27c7-e539-4da7-98e5-2d3c626338be/grumi-ip.js
200 OK 0 B URL HTTP/2 rumcdn.geoedge.be/191e27c7-e539-4da7-98e5-2d3c626338be/grumi-ip.js
IP
GET /191e27c7-e539-4da7-98e5-2d3c626338be/grumi-ip.js HTTP/1.1
Host: rumcdn.geoedge.be
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://braincandy.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 04 Oct 2022 13:38:04 GMT
last-modified: Tue, 06 Sep 2022 10:54:02 GMT
etag: W/"8ad2beee52c2abad4a49b927b72d3048"
cache-control: public, max-age: 14400, stale-while-revalidate=14400, immutable
x-amz-version-id: zOexu8ImXfu9US6ZMH6htYdwGWNs1uWh
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DOjB2cneImbkY0V-eBopf26QZMoXTDP72Om_UC4A9AvkfmCZPVpNFg==
age: 435
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 0 B IP
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=RdMS8l80M0RITmhlJTJCZkMwOUJGQlhaMUN2czFLaHhwa291aXRhU1hZN0JUVXVkWDZ2b0ZrSmFvWU50M2d3TjI0UlphSXE
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 13:45:21 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=DqpoXl80M0RITmhlJTJCZkMwOUJGQlhaMUN2czFLaHhwa291aXRhU1hZN0JUVXVkWDd2RmlsNTZFY0p3JTJGZEp6NHcxTXFlTg; expires=Sun, 29 Oct 2023 13:45:21 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 210426
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
67.229.238.21
185.239.174.234
104.18.18.126
151.101.86.132
34.242.80.80
51.38.120.206
23.36.77.32
147.75.85.234
62.149.1.122
37.252.171.149