news-rajemo.cc/tds.php?p1&p2=1oki6i92re9pf&p3&sid=8048362
302 Found 0 B URL HTTP/1.1 news-rajemo.cc/tds.php?p1&p2=1oki6i92re9pf&p3&sid=8048362
IP
ASN #63023 AS-GLOBALTELEHOST
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds.php?p1&p2=1oki6i92re9pf&p3&sid=8048362 HTTP/1.1
Host: news-rajemo.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 06 Oct 2022 18:27:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
Location: https://news-jogeju.cc/lands/50/?site=8048362&sub1=&sub2=1oki6i92re9pf&sub3=&sub4=
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=259200
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 05 Oct 2022 15:47:18 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: tMslfXS7d6H-AaXcFzOrmHXdab6YPbNcRQXtRKb6kYAYo2d87F6oYA==
Age: 95988
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 282f6e1328452c1cb41f6a6272fff757
20b9ff1b5f4f81b645769bd4b4cf7bf7dfc16262
6a8070ebe51259cb11db68cca2c81f3c7408fad481d8c14cc1c38912442c63f4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A8070EBE51259CB11DB68CCA2C81F3C7408FAD481D8C14CC1C38912442C63F4"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6476
Expires: Thu, 06 Oct 2022 20:15:02 GMT
Date: Thu, 06 Oct 2022 18:27:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 94a09d62ab3057cda67a091c8d7478f5
b1c9d223a951d0bc9f17c9f3b84501266a552b58
582364f9f6014520c269f1f794e7c34027bd2697b53e5d02fad43e74a735e471
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "582364F9F6014520C269F1F794E7C34027BD2697B53E5D02FAD43E74A735E471"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6898
Expires: Thu, 06 Oct 2022 20:22:04 GMT
Date: Thu, 06 Oct 2022 18:27:06 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Peyfm44MgfX+eZ2CKWqWe2pS1liHDirK9u8xEz59+NgBMJdthoFGHhPUBuhszHy5SEhxNKiORzs=
x-amz-request-id: 87DZ6X6VKAJ275ZC
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 06 Oct 2022 17:30:52 GMT
age: 3374
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 18:27:06 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
zerossl.ocsp.sectigo.com/
200 OK 315 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash d65dbb806d92b8217451b2bee9aff29a
5c97f09a8700c71a8574d030f597d03c20dffa5c
dcdce5ec61dcfbd8fdd6a54e7bdba000fff1c822a01dd5f07354ab3001d28fc9
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 18:27:06 GMT
Content-Type: application/ocsp-response
Content-Length: 315
Connection: keep-alive
Last-Modified: Thu, 06 Oct 2022 12:25:40 GMT
Expires: Thu, 13 Oct 2022 12:25:39 GMT
Etag: "5c97f09a8700c71a8574d030f597d03c20dffa5c"
Cache-Control: max-age=582512,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 756072feade20b49-OSL
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Pragma, Content-Length, Backoff, Last-Modified, Cache-Control, Content-Type, Retry-After, ETag, Expires, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Thu, 06 Oct 2022 17:29:41 GMT
Expires: Thu, 06 Oct 2022 17:53:49 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: dezLBlzgSF8dfIzgMGnWgPF2sUH5E7ceefoWk32Jg-gqrjPRCkCe8A==
Age: 3445
news-jogeju.cc/revopush.js?v=4
200 OK 8.9 kB URL HTTP/2 news-jogeju.cc/revopush.js?v=4
IP
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (8922), with no line terminators
Hash 51014cabdb246e54c6fe1c7864225e81
04390aa362cc51c8f3aa848e5f1a11b3f9ba2751
32da65acc9ea9ff95f364751b4855731358710ebeb6b25d863a1c5d02dc73bd1
GET /revopush.js?v=4 HTTP/1.1
Host: news-jogeju.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-jogeju.cc/lands/50/?site=8048362&sub1=&sub2=1oki6i92re9pf&sub3=&sub4=
Cookie: clickdata=ODA0ODM2Mnw6fDUwfDp8fDp8MW9raTZpOTJyZTlwZnw6fHw6fA%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 18:27:07 GMT
content-type: application/javascript
content-length: 8922
last-modified: Mon, 29 Aug 2022 09:05:32 GMT
etag: "630c815c-22da"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 8be5570b9a5ca76c580da007a824b029
38840f2ac6476bdd5608121c5653e338c7ad9715
0b94e05080ef85432b1815eb3c6c7594c9613cfde1b51eeabee46d0d9fde64b2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2967
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:27:07 GMT
Last-Modified: Thu, 06 Oct 2022 17:37:40 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
news-jogeju.cc/sw.js
200 OK 4.0 kB IP
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (3964), with no line terminators
Hash 7c60cc903a18857a61023bde734a757b
d53632ffe44847e798eeb6fcaacc3b3584e4a23d
dff87b88fb2ffccdadc8d3c04ffe475d848247456fa7c5b95328ccc14e7a48ea
GET /sw.js HTTP/1.1
Host: news-jogeju.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: clickdata=ODA0ODM2Mnw6fDUwfDp8fDp8MW9raTZpOTJyZTlwZnw6fHw6fA%3D%3D
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 18:27:07 GMT
content-type: application/javascript
content-length: 3964
last-modified: Tue, 30 Aug 2022 09:40:34 GMT
etag: "630ddb12-f7c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 6RjfVFwgiJNUhEPTGnk+2A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 7GRbRIVhZ/gRUOP3z6dq9eAkKok=
1.news-jogeju.cc/revopush.js?v=4
200 OK 8.9 kB URL HTTP/2 1.news-jogeju.cc/revopush.js?v=4
IP
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (8922), with no line terminators
Hash 51014cabdb246e54c6fe1c7864225e81
04390aa362cc51c8f3aa848e5f1a11b3f9ba2751
32da65acc9ea9ff95f364751b4855731358710ebeb6b25d863a1c5d02dc73bd1
GET /revopush.js?v=4 HTTP/1.1
Host: 1.news-jogeju.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-jogeju.cc/lands/50/?site=8048362&sub1=&sub2=1oki6i92re9pf&sub3=&sub4=
Cookie: clickdata=ODA0ODM2Mnw6fDUwfDp8fDp8MW9raTZpOTJyZTlwZnw6fHw6fA%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 18:27:07 GMT
content-type: application/javascript
content-length: 8922
last-modified: Mon, 29 Aug 2022 09:05:32 GMT
etag: "630c815c-22da"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
1.news-jogeju.cc/sw.js
200 OK 4.0 kB IP
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (3964), with no line terminators
Hash 7c60cc903a18857a61023bde734a757b
d53632ffe44847e798eeb6fcaacc3b3584e4a23d
dff87b88fb2ffccdadc8d3c04ffe475d848247456fa7c5b95328ccc14e7a48ea
GET /sw.js HTTP/1.1
Host: 1.news-jogeju.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: clickdata=ODA0ODM2Mnw6fDUwfDp8fDp8MW9raTZpOTJyZTlwZnw6fHw6fA%3D%3D
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 18:27:08 GMT
content-type: application/javascript
content-length: 3964
last-modified: Tue, 30 Aug 2022 09:40:34 GMT
etag: "630ddb12-f7c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 31e440ccd993c4ee793f50511c2ac7c4
4380327d50b7001d158aee05a57c6078e57c94e4
65d8a97f6df1e110333a01d1f6dcb4982db7bb4b1c5f3f1498fafa716e250c0f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "65D8A97F6DF1E110333A01D1F6DCB4982DB7BB4B1C5F3F1498FAFA716E250C0F"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5694
Expires: Thu, 06 Oct 2022 20:02:02 GMT
Date: Thu, 06 Oct 2022 18:27:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 31e440ccd993c4ee793f50511c2ac7c4
4380327d50b7001d158aee05a57c6078e57c94e4
65d8a97f6df1e110333a01d1f6dcb4982db7bb4b1c5f3f1498fafa716e250c0f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "65D8A97F6DF1E110333A01D1F6DCB4982DB7BB4B1C5F3F1498FAFA716E250C0F"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5694
Expires: Thu, 06 Oct 2022 20:02:02 GMT
Date: Thu, 06 Oct 2022 18:27:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 31e440ccd993c4ee793f50511c2ac7c4
4380327d50b7001d158aee05a57c6078e57c94e4
65d8a97f6df1e110333a01d1f6dcb4982db7bb4b1c5f3f1498fafa716e250c0f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "65D8A97F6DF1E110333A01D1F6DCB4982DB7BB4B1C5F3F1498FAFA716E250C0F"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5694
Expires: Thu, 06 Oct 2022 20:02:02 GMT
Date: Thu, 06 Oct 2022 18:27:08 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ecef3b6-b278-4a22-86dd-6a19875e1cc1.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ecef3b6-b278-4a22-86dd-6a19875e1cc1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9e520f87cae411cfc2ed1c8a14184385
69ad212cb7ae309d4f02019552887135bfae67da
723b10bfbcde201b5811e3bd0560f02f90775e4d18b28d19e6c814899f2da71a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ecef3b6-b278-4a22-86dd-6a19875e1cc1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7511
x-amzn-requestid: 995b51dd-5484-4b4c-ad40-550f7fd85930
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjO6uG70IAMFjBw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df844-70f17f6f24dce0003d03902a;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:33:56 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: 3lKuGlFCBN2wEsp9-Oa3ysQg62py090H30jy6_bR02Ufs0KGPrVC4w==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 d8d9c12d1a621129f4bc739038e7c72e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:36:41 GMT
age: 75027
etag: "69ad212cb7ae309d4f02019552887135bfae67da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4fc2ddd86450d64d3fb659ab4e78be58
bbe71936b78a8c34d03ab87948dc840b35c6948f
84a760397a5912bd05f61bc8a953c13a88a677e2d17fbbf74bdf7d7ff4d3942f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10158
x-amzn-requestid: def1fc7e-8008-466f-9271-20fa1ab0fa5a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZaqZCH7doAMFcPQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a8aa0-7fd2fb1249366f2277d719d6;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 07:09:20 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: szhtD9f4RuQaDKXe7LElSR0yOKo9cYa1i2YMeG3eSpBXP8ePcdzQig==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 03:56:07 GMT
age: 52261
etag: "bbe71936b78a8c34d03ab87948dc840b35c6948f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F913c841b-40a5-4fa4-bc55-0e9d1369640e.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F913c841b-40a5-4fa4-bc55-0e9d1369640e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a508ac9cd743bec987b2a24454418265
8c7ecefe6908387e2128dc849a6ba857991ba0ab
afb2c2b51f2ce445ada599068901551beee594b15c152ed7551ab7a8835dde6d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F913c841b-40a5-4fa4-bc55-0e9d1369640e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10809
x-amzn-requestid: db4d1d2a-05b8-403e-a7ca-8b8a6a0a4087
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjQb-HrTIAMFtNg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633dfab2-74f184406a48e42c0ecc4ec9;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:44:18 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: tv80OXQUu13gDuuFESnEnXMuFdNBmGc1y592euL7QnfZW5PwJym9-g==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 de8fc80b494d3d381f7e006918dcc588.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:53:39 GMT
age: 74009
etag: "8c7ecefe6908387e2128dc849a6ba857991ba0ab"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ce3d070-3bf1-47cd-bdd7-2bda7b826976.jpeg
200 OK 4.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ce3d070-3bf1-47cd-bdd7-2bda7b826976.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dbba56f647bf5989ca51863632bbebfc
26694f34166345ee5693653e0101db6b910e68ba
ec5cc38f2a77e8e655aeeb7a376cf882ccb7163e4ef9d1ce4633ab4754e48765
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ce3d070-3bf1-47cd-bdd7-2bda7b826976.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4140
x-amzn-requestid: 13fcd792-1fcc-44b5-aa9e-d2773a60fe77
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjO6uHrbIAMFbqg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df844-5b5f5d781b9d651b68c04f2e;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:33:56 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: wfnbRpTKni8hbAmJXO9vdisV6ZPoRP-eBb3wP4RzPS7MlXvp7282dw==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 6a63e853422f3197776fb098fab5a416.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:36:41 GMT
age: 75027
etag: "26694f34166345ee5693653e0101db6b910e68ba"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7fac259b-7a22-4aa2-ba3f-682cb749091c.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7fac259b-7a22-4aa2-ba3f-682cb749091c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2277f8f2d93b4bc3b05d348343177892
531d9e4ec9078cd2d7376a19fcb287084af36c82
62907648de4a2ed390232a71ab7dce49f1e9c3363cde6a2f30ecae10ab67f93a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7fac259b-7a22-4aa2-ba3f-682cb749091c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11080
x-amzn-requestid: 8fa4d19d-87a5-46c5-96c5-4aec793daad9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjO7xE5eoAMFQLw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df84b-5c422c7a168c014f57559037;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:34:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: TlEKsCdhNhlKmA2Yhz8FarEUG18gQZMKGRD6SnzCnUMiKyGS9-UeOQ==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 73b60e9a9fd08eae9e034cedba707280.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:38:04 GMT
etag: "531d9e4ec9078cd2d7376a19fcb287084af36c82"
content-type: image/jpeg
age: 74944
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd38ec9d6-fb69-4c6e-aae2-136fd254ae50.jpeg
200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd38ec9d6-fb69-4c6e-aae2-136fd254ae50.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e238ccaa3b9fa88476a8514855e8232f
447cbf348ef10d0136a1811e843c46937defbba1
43dce3c1eb388dfaddca4176acb6eb32f76fc4c03fca18e7a315c9ddb43d2b02
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd38ec9d6-fb69-4c6e-aae2-136fd254ae50.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7270
x-amzn-requestid: f2f15f43-6054-40f5-943a-530671e772dd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjOZjF3aIAMFW9Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df770-5e2253791a927c8c40a0ff0d;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:30:24 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: xRuMce_9OkP3R2DqHjZI34GwkDezdfGKsgntCMTZG2c6SJUcyv0Ckg==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 583992e175976bd59a21b4416890271e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:56:40 GMT
etag: "447cbf348ef10d0136a1811e843c46937defbba1"
content-type: image/jpeg
age: 73828
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
2.news-jogeju.cc/revopush.js?v=4
200 OK 8.9 kB URL HTTP/2 2.news-jogeju.cc/revopush.js?v=4
IP
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (8922), with no line terminators
Hash 51014cabdb246e54c6fe1c7864225e81
04390aa362cc51c8f3aa848e5f1a11b3f9ba2751
32da65acc9ea9ff95f364751b4855731358710ebeb6b25d863a1c5d02dc73bd1
GET /revopush.js?v=4 HTTP/1.1
Host: 2.news-jogeju.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2.news-jogeju.cc/lands/50/?site=8048362&sub1=&sub2=1oki6i92re9pf&sub3=&sub4=
Cookie: clickdata=ODA0ODM2Mnw6fDUwfDp8fDp8MW9raTZpOTJyZTlwZnw6fHw6fA%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 18:27:08 GMT
content-type: application/javascript
content-length: 8922
last-modified: Mon, 29 Aug 2022 09:05:32 GMT
etag: "630c815c-22da"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
2.news-jogeju.cc/sw.js
200 OK 4.0 kB IP
ASN #61003 GlobalTeleHost Corp.
File type ASCII text, with very long lines (3964), with no line terminators
Hash 7c60cc903a18857a61023bde734a757b
d53632ffe44847e798eeb6fcaacc3b3584e4a23d
dff87b88fb2ffccdadc8d3c04ffe475d848247456fa7c5b95328ccc14e7a48ea
GET /sw.js HTTP/1.1
Host: 2.news-jogeju.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: clickdata=ODA0ODM2Mnw6fDUwfDp8fDp8MW9raTZpOTJyZTlwZnw6fHw6fA%3D%3D
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 18:27:09 GMT
content-type: application/javascript
content-length: 3964
last-modified: Tue, 30 Aug 2022 09:40:34 GMT
etag: "630ddb12-f7c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 97831c1ca9dbc14f157e77f537d7e07a
6a5a22de46a2eb9ce6c1299b21e3507e2afc7c1b
34cfdc9d1d74e24680d0a79596cbe71bbfe70cd078dcf8f22c5549764eb8e42e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "34CFDC9D1D74E24680D0A79596CBE71BBFE70CD078DCF8F22C5549764EB8E42E"
Last-Modified: Thu, 06 Oct 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21500
Expires: Fri, 07 Oct 2022 00:25:29 GMT
Date: Thu, 06 Oct 2022 18:27:09 GMT
Connection: keep-alive
2.news-jogeju.cc/lands/50/?site=8048362&sub1=&sub2=1oki6i92re9pf&sub3=&sub4=
200 OK 53 kB URL HTTP/2 2.news-jogeju.cc/lands/50/?site=8048362&sub1=&sub2=1oki6i92re9pf&sub3=&sub4=
IP
ASN #61003 GlobalTeleHost Corp.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (63385)
Hash 82e0c55f8c747e4011874e417a7d49ca
6f17a6871a073a678bf732818034c809a1b4db4a
dd85336c80bcfeb781ce20e92fe95c85dd278fdbe8870757e884c2cfe59eca86
GET /lands/50/?site=8048362&sub1=&sub2=1oki6i92re9pf&sub3=&sub4= HTTP/1.1
Host: 2.news-jogeju.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-jogeju.cc/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 18:27:08 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, must-revalidate
pragma: no-cache
set-cookie: clickdata=ODA0ODM2Mnw6fDUwfDp8fDp8MW9raTZpOTJyZTlwZnw6fHw6fA%3D%3D; expires=Thu, 06-Oct-2022 19:27:08 GMT; Max-Age=3600; path=/
content-encoding: gzip
X-Firefox-Spdy: h2
news-jogeju.cc/traffback.php?site=8048362&sub1=&sub2=1oki6i92re9pf&sub3=&sub4=&land=50
200 OK 599 B URL HTTP/2 news-jogeju.cc/traffback.php?site=8048362&sub1=&sub2=1oki6i92re9pf&sub3=&sub4=&land=50
IP
ASN #61003 GlobalTeleHost Corp.
Hash c494f6058ed7455d87cda442c0ce21fb
1e68c24f9f008cffc576478da67756c4c436bc45
a1ad682fa019056f26b9a40a9d775ac34223c04e4b8a9bbab933e4ebf1af8069
GET /traffback.php?site=8048362&sub1=&sub2=1oki6i92re9pf&sub3=&sub4=&land=50 HTTP/1.1
Host: news-jogeju.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-jogeju.cc/lands/50/?site=8048362&sub1=&sub2=1oki6i92re9pf&sub3=&sub4=
Cookie: clickdata=ODA0ODM2Mnw6fDUwfDp8fDp8MW9raTZpOTJyZTlwZnw6fHw6fA%3D%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 18:27:07 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, must-revalidate
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
f480.video-loading.amazingcontent.site/assets/scripts/metrika.js
200 OK 812 B URL HTTP/2 f480.video-loading.amazingcontent.site/assets/scripts/metrika.js
IP
ASN #14061 DIGITALOCEAN-ASN
Hash 8e7e846fb872fccf040a58f6eaa0b328
2d3a982513add999281b716d46803d5e13e252b4
efad158e7ff866e12aef7cee3e1a97c78fbd12dde3c6c6187d8842906ecff302
GET /assets/scripts/metrika.js HTTP/1.1
Host: f480.video-loading.amazingcontent.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f480.video-loading.amazingcontent.site/?tag_id=44685&cl=5&bu=https%3A%2F%2Ftopdatinglove.com%2FkmN6KY&eu=https%3A%2F%2Ftopdatinglove.com%2FkmN6KY
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 06 Oct 2022 18:27:10 GMT
content-type: application/javascript
last-modified: Fri, 30 Sep 2022 12:27:46 GMT
etag: W/"6336e0c2-1b8"
content-encoding: gzip
X-Firefox-Spdy: h2
f480.video-loading.amazingcontent.site/favicon.ico
200 OK 20 kB URL HTTP/2 f480.video-loading.amazingcontent.site/favicon.ico
IP
ASN #14061 DIGITALOCEAN-ASN
Hash e4ec69c70054e0635e8c36d61e57634d
c8e5466aa759f748d7bd4b94ee4e9fb343bea8d8
e6b661b7ad1d07621e8630f6fa89c64329e1d21a96d17479c6ef40a15ed4447c
GET /favicon.ico HTTP/1.1
Host: f480.video-loading.amazingcontent.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f480.video-loading.amazingcontent.site/?tag_id=44685&cl=5&bu=https%3A%2F%2Ftopdatinglove.com%2FkmN6KY&eu=https%3A%2F%2Ftopdatinglove.com%2FkmN6KY
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 06 Oct 2022 18:27:10 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.32
content-encoding: gzip
X-Firefox-Spdy: h2
1.news-jogeju.cc/lands/50/?site=8048362&sub1=&sub2=1oki6i92re9pf&sub3=&sub4=
200 OK 126 kB URL HTTP/2 1.news-jogeju.cc/lands/50/?site=8048362&sub1=&sub2=1oki6i92re9pf&sub3=&sub4=
IP
ASN #61003 GlobalTeleHost Corp.
Size 126 kB (126238 bytes)
Hash 8072f591070707b5fc0037a5c521804f
028f1746c56535a2edf82c499a9f3c7df93c0d68
72c669c2255fdaff053e093bd19529710cf192096ca7f2cfbe5a5ee3076df205
GET /lands/50/?site=8048362&sub1=&sub2=1oki6i92re9pf&sub3=&sub4= HTTP/1.1
Host: 1.news-jogeju.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://news-jogeju.cc/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 18:27:07 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, must-revalidate
pragma: no-cache
set-cookie: clickdata=ODA0ODM2Mnw6fDUwfDp8fDp8MW9raTZpOTJyZTlwZnw6fHw6fA%3D%3D; expires=Thu, 06-Oct-2022 19:27:07 GMT; Max-Age=3600; path=/
content-encoding: gzip
X-Firefox-Spdy: h2
mc.yandex.ru/watch/73444708/1?wmode=7&page-url=https%3A%2F%2Ff480.video-loading.amazingcontent.site%2F%3Ftag_id%3D44685%26cl%3D5%26bu%3Dhttps%253A%252F%252Ftopdatinglove.com%252FkmN6KY%26eu%3Dhttps%253A%252F%252Ftopdatinglove.com%252FkmN6KY&page-ref=https%3A%2F%2F2.news-jogeju.cc%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A1126%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A894117060%3Ahid%3A902659556%3Az%3A0%3Ai%3A20221006182711%3Aet%3A1665080831%3Ac%3A1%3Arn%3A385734034%3Arqn%3A1%3Au%3A1665080831781832058%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C34%2C1%2C784%2C0%2C%2C114%2C0%2C%2C%2C%2C1144%3Ans%3A1665080829603%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665080831%3At%3AStreaming%20and%20downloading%20are%20available&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
200 OK 400 B URL HTTP/2 mc.yandex.ru/watch/73444708/1?wmode=7&page-url=https%3A%2F%2Ff480.video-loading.amazingcontent.site%2F%3Ftag_id%3D44685%26cl%3D5%26bu%3Dhttps%253A%252F%252Ftopdatinglove.com%252FkmN6KY%26eu%3Dhttps%253A%252F%252Ftopdatinglove.com%252FkmN6KY&page-ref=https%3A%2F%2F2.news-jogeju.cc%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A1126%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A894117060%3Ahid%3A902659556%3Az%3A0%3Ai%3A20221006182711%3Aet%3A1665080831%3Ac%3A1%3Arn%3A385734034%3Arqn%3A1%3Au%3A1665080831781832058%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C34%2C1%2C784%2C0%2C%2C114%2C0%2C%2C%2C%2C1144%3Ans%3A1665080829603%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665080831%3At%3AStreaming%20and%20downloading%20are%20available&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash e4567b60b85a53d837b6ae5ea295310c
915d01f38996b0d58cafc0bc2edfeac0aab8135a
e6435ad10a7e6db7236215e5756ea2343fa9b6f1f471fccc532637febb427df1
GET /watch/73444708/1?wmode=7&page-url=https%3A%2F%2Ff480.video-loading.amazingcontent.site%2F%3Ftag_id%3D44685%26cl%3D5%26bu%3Dhttps%253A%252F%252Ftopdatinglove.com%252FkmN6KY%26eu%3Dhttps%253A%252F%252Ftopdatinglove.com%252FkmN6KY&page-ref=https%3A%2F%2F2.news-jogeju.cc%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A1126%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A894117060%3Ahid%3A902659556%3Az%3A0%3Ai%3A20221006182711%3Aet%3A1665080831%3Ac%3A1%3Arn%3A385734034%3Arqn%3A1%3Au%3A1665080831781832058%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C34%2C1%2C784%2C0%2C%2C114%2C0%2C%2C%2C%2C1144%3Ans%3A1665080829603%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665080831%3At%3AStreaming%20and%20downloading%20are%20available&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://f480.video-loading.amazingcontent.site
Referer: https://f480.video-loading.amazingcontent.site/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Thu, 06 Oct 2022 18:27:11 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://f480.video-loading.amazingcontent.site
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 06-Oct-2022 18:27:11 GMT
last-modified: Thu, 06-Oct-2022 18:27:11 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7a9edba7b8ef3939bcf408dde9b662a4
0a253c5153b9dfc626acb4b42b413f8514e6e913
8c66c65c2f3b946286fb0b92650bdcb2395cf12cc7c3423e4a942a112995cd6b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8C66C65C2F3B946286FB0B92650BDCB2395CF12CC7C3423E4A942A112995CD6B"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16504
Expires: Thu, 06 Oct 2022 23:02:15 GMT
Date: Thu, 06 Oct 2022 18:27:11 GMT
Connection: keep-alive
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f480.video-loading.amazingcontent.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 06 Oct 2022 18:27:11 GMT
access-control-allow-origin: *
etag: "633be002-2b"
expires: Thu, 06 Oct 2022 19:27:11 GMT
accept-ranges: bytes
last-modified: Tue, 04 Oct 2022 10:25:54 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8728860bb92516fa5131f96755cbcec7
04e8a149642fca06882fd1e957491615933865e1
ab141a5f171ddeb2154cf93f7b086b6615558b61f01d88bc0004ac862051564d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AB141A5F171DDEB2154CF93F7B086B6615558B61F01D88BC0004AC862051564D"
Last-Modified: Wed, 05 Oct 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11220
Expires: Thu, 06 Oct 2022 21:34:11 GMT
Date: Thu, 06 Oct 2022 18:27:11 GMT
Connection: keep-alive
na.nawpush.com/tags/44685
200 OK 507 B URL HTTP/2 na.nawpush.com/tags/44685
IP
ASN #39572 DataWeb Global Group B.V.
File type JSON data\012- , ASCII text, with very long lines (507), with no line terminators
Hash b363764fe183bc8da118bdb9c6c6fdfb
19aa7f6862fab3f2632f791fd12ea23191b124e3
d8d845df42fcee3afb9fa9dcc5c9cb0df6f534237ea61ae88268ecf18d19e555
GET /tags/44685 HTTP/1.1
Host: na.nawpush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://f480.video-loading.amazingcontent.site/
Origin: https://f480.video-loading.amazingcontent.site
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:27:11 GMT
content-type: application/json
content-length: 507
server: nginx/1.18.0
cache-control: max-age=300, public
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=1968732393&pid=0&site=2&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=f480.video-loading.amazingcontent.site&hostname=auc-banner-hz-0&site_id=0&spot_id=0&utm_source=tcban_i&utm_medium=2&utm_campaign=10340&utm_content=&expirationTimestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=44&ml=&tag_ab=&ttl=&space_id=1696&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D0%26source%3D0%26idzone%3D3830819%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D2%26utm1%3Dtcban_i%26utm2%3D2%26utm3%3D10340%26utm4%3D%26ad_tags%3D%26spot_id%3D0%26p%3Dhttps%253A%252F%252Ff480.video-loading.amazingcontent.site%252F%26katds_labels%3D%26btype%3D0%26score%3D44&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=&stratagem=&ssp=0
302 Found 0 B URL HTTP/2 rtbrennab.com/banner/in/show/?mid=1968732393&pid=0&site=2&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=f480.video-loading.amazingcontent.site&hostname=auc-banner-hz-0&site_id=0&spot_id=0&utm_source=tcban_i&utm_medium=2&utm_campaign=10340&utm_content=&expirationTimestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=44&ml=&tag_ab=&ttl=&space_id=1696&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D0%26source%3D0%26idzone%3D3830819%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D2%26utm1%3Dtcban_i%26utm2%3D2%26utm3%3D10340%26utm4%3D%26ad_tags%3D%26spot_id%3D0%26p%3Dhttps%253A%252F%252Ff480.video-loading.amazingcontent.site%252F%26katds_labels%3D%26btype%3D0%26score%3D44&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=&stratagem=&ssp=0
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=1968732393&pid=0&site=2&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=f480.video-loading.amazingcontent.site&hostname=auc-banner-hz-0&site_id=0&spot_id=0&utm_source=tcban_i&utm_medium=2&utm_campaign=10340&utm_content=&expirationTimestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=44&ml=&tag_ab=&ttl=&space_id=1696&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D0%26source%3D0%26idzone%3D3830819%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D2%26utm1%3Dtcban_i%26utm2%3D2%26utm3%3D10340%26utm4%3D%26ad_tags%3D%26spot_id%3D0%26p%3Dhttps%253A%252F%252Ff480.video-loading.amazingcontent.site%252F%26katds_labels%3D%26btype%3D0%26score%3D44&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=&stratagem=&ssp=0 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rtbbnr.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Thu, 06 Oct 2022 18:27:11 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://btds.zog.link/in/912/?sid=0&source=0&idzone=3830819&w=300&h=250&mo=&ve=&site_id=2&utm1=tcban_i&utm2=2&utm3=10340&utm4=&ad_tags=&spot_id=0&p=https%3A%2F%2Ff480.video-loading.amazingcontent.site%2F&katds_labels=&btype=0&score=44
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b10e85da66c14e17b0b6ab34aedab9e3
80cc37943ee8a91ede01076eded169f379b2ce02
dfcd5187dc9d1fb547b6bfdb7000a7a967b89f5e4f2f6a06a0d3fb8549e567c4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DFCD5187DC9D1FB547B6BFDB7000A7A967B89F5E4F2F6A06A0D3FB8549E567C4"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5889
Expires: Thu, 06 Oct 2022 20:05:20 GMT
Date: Thu, 06 Oct 2022 18:27:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0e888c8c1ee4bf5d21991f5137098f94
998301cfe032576985995ffcdab1e8b5a4cab94c
57980ac8ba59f72127e6c401d928c21461cdceb30cce2c5f82665d8d091d0e04
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "57980AC8BA59F72127E6C401D928C21461CDCEB30CCE2C5F82665D8D091D0E04"
Last-Modified: Tue, 04 Oct 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11070
Expires: Thu, 06 Oct 2022 21:31:41 GMT
Date: Thu, 06 Oct 2022 18:27:11 GMT
Connection: keep-alive
btds.zog.link/in/912/?sid=0&source=0&idzone=3830819&w=300&h=250&mo=&ve=&site_id=2&utm1=tcban_i&utm2=2&utm3=10340&utm4=&ad_tags=&spot_id=0&p=https%3A%2F%2Ff480.video-loading.amazingcontent.site%2F&katds_labels=&btype=0&score=44
302 Found 0 B URL HTTP/2 btds.zog.link/in/912/?sid=0&source=0&idzone=3830819&w=300&h=250&mo=&ve=&site_id=2&utm1=tcban_i&utm2=2&utm3=10340&utm4=&ad_tags=&spot_id=0&p=https%3A%2F%2Ff480.video-loading.amazingcontent.site%2F&katds_labels=&btype=0&score=44
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/912/?sid=0&source=0&idzone=3830819&w=300&h=250&mo=&ve=&site_id=2&utm1=tcban_i&utm2=2&utm3=10340&utm4=&ad_tags=&spot_id=0&p=https%3A%2F%2Ff480.video-loading.amazingcontent.site%2F&katds_labels=&btype=0&score=44 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbbnr.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.20.1
date: Thu, 06 Oct 2022 18:27:10 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://tsyndicate.com/iframes2/00394b71264946e5bf58746cefe5435f.html?subid=0&categories={{ad_tags}}
pragma: no-cache
vary: *
cache-control: no-cache, no-store, must-revalidate
set-cookie: 912.0=1; expires=Fri, 07 Oct 2022 18:27:10 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
js.wpadmngr.com/static/adManager.m.js
200 OK 34 kB URL HTTP/2 js.wpadmngr.com/static/adManager.m.js
IP
ASN #39572 DataWeb Global Group B.V.
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash eb8fca8969ac496533cecba9baea1048
e0525c12f0188cd50d1ac7e69cbd66d976bc50c2
04539e3a839e7fc69bf47c8f0b3632d33186b4de61800037346ada74035d7446
GET /static/adManager.m.js HTTP/1.1
Host: js.wpadmngr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f480.video-loading.amazingcontent.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:27:11 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Wed, 05 Oct 2022 14:02:01 GMT
etag: W/"633d8e59-16685"
content-encoding: gzip
expires: Thu, 06 Oct 2022 18:32:11 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c8d1da1b4e2a2a9753976d626023aaba
7fc855956e23fc708e84031868d99e0dfe6699c6
cab163b7ee6ae1b34ecb4e875a1ac22dbe2839caf9b1e648e9f178371e76af53
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CAB163B7EE6AE1B34ECB4E875A1AC22DBE2839CAF9B1E648E9F178371E76AF53"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7530
Expires: Thu, 06 Oct 2022 20:32:41 GMT
Date: Thu, 06 Oct 2022 18:27:11 GMT
Connection: keep-alive
mc.yandex.ru/watch/73444708?wmode=7&page-url=https%3A%2F%2Ff480.video-loading.amazingcontent.site%2F%3Ftag_id%3D44685%26cl%3D5%26bu%3Dhttps%253A%252F%252Ftopdatinglove.com%252FkmN6KY%26eu%3Dhttps%253A%252F%252Ftopdatinglove.com%252FkmN6KY&page-ref=https%3A%2F%2F2.news-jogeju.cc%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A1126%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A894117060%3Ahid%3A902659556%3Az%3A0%3Ai%3A20221006182711%3Aet%3A1665080831%3Ac%3A1%3Arn%3A385734034%3Arqn%3A1%3Au%3A1665080831781832058%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C34%2C1%2C784%2C0%2C%2C114%2C0%2C%2C%2C%2C1144%3Ans%3A1665080829603%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665080831%3At%3AStreaming%20and%20downloading%20are%20available&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
302 Found 503 B URL HTTP/2 mc.yandex.ru/watch/73444708?wmode=7&page-url=https%3A%2F%2Ff480.video-loading.amazingcontent.site%2F%3Ftag_id%3D44685%26cl%3D5%26bu%3Dhttps%253A%252F%252Ftopdatinglove.com%252FkmN6KY%26eu%3Dhttps%253A%252F%252Ftopdatinglove.com%252FkmN6KY&page-ref=https%3A%2F%2F2.news-jogeju.cc%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A1126%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A894117060%3Ahid%3A902659556%3Az%3A0%3Ai%3A20221006182711%3Aet%3A1665080831%3Ac%3A1%3Arn%3A385734034%3Arqn%3A1%3Au%3A1665080831781832058%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C34%2C1%2C784%2C0%2C%2C114%2C0%2C%2C%2C%2C1144%3Ans%3A1665080829603%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665080831%3At%3AStreaming%20and%20downloading%20are%20available&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
IP
Hash 3f4b071dca844edd880967e40f1c9c7f
a3bb86478a8b8e5f4596a2442cd3a3fdf2e39675
6303ce74c328d1c8852ad9444b9cb2d02bda884d21002af9f01b453f35f020b8
GET /watch/73444708?wmode=7&page-url=https%3A%2F%2Ff480.video-loading.amazingcontent.site%2F%3Ftag_id%3D44685%26cl%3D5%26bu%3Dhttps%253A%252F%252Ftopdatinglove.com%252FkmN6KY%26eu%3Dhttps%253A%252F%252Ftopdatinglove.com%252FkmN6KY&page-ref=https%3A%2F%2F2.news-jogeju.cc%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A1126%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A894117060%3Ahid%3A902659556%3Az%3A0%3Ai%3A20221006182711%3Aet%3A1665080831%3Ac%3A1%3Arn%3A385734034%3Arqn%3A1%3Au%3A1665080831781832058%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C34%2C1%2C784%2C0%2C%2C114%2C0%2C%2C%2C%2C1144%3Ans%3A1665080829603%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665080831%3At%3AStreaming%20and%20downloading%20are%20available&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://f480.video-loading.amazingcontent.site
Connection: keep-alive
Referer: https://f480.video-loading.amazingcontent.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/73444708/1?wmode=7&page-url=https%3A%2F%2Ff480.video-loading.amazingcontent.site%2F%3Ftag_id%3D44685%26cl%3D5%26bu%3Dhttps%253A%252F%252Ftopdatinglove.com%252FkmN6KY%26eu%3Dhttps%253A%252F%252Ftopdatinglove.com%252FkmN6KY&page-ref=https%3A%2F%2F2.news-jogeju.cc%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A1126%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A894117060%3Ahid%3A902659556%3Az%3A0%3Ai%3A20221006182711%3Aet%3A1665080831%3Ac%3A1%3Arn%3A385734034%3Arqn%3A1%3Au%3A1665080831781832058%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C34%2C1%2C784%2C0%2C%2C114%2C0%2C%2C%2C%2C1144%3Ans%3A1665080829603%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665080831%3At%3AStreaming%20and%20downloading%20are%20available&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
date: Thu, 06 Oct 2022 18:27:11 GMT
access-control-allow-origin: https://f480.video-loading.amazingcontent.site
set-cookie: yandexuid=2441179381665080831; Expires=Fri, 06-Oct-2023 18:27:11 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=2441179381665080831; Expires=Fri, 06-Oct-2023 18:27:11 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=1405038341665080831; Path=/; SameSite=None; Secure
i=5hmk0+PlwYnjARg+bMG9UDNKMS77unwEo/jBGMnA0BlvLMLRmM0fIvaOwrvF+Urkb3hZaFIe8fm2c8QAD3mgPI2VyBo=; Expires=Sun, 03-Oct-2032 18:27:09 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1696616831.yrts.1665080831#1696616831.yrtsi.1665080831; Expires=Fri, 06-Oct-2023 18:27:11 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 06-Oct-2022 18:27:11 GMT
last-modified: Thu, 06-Oct-2022 18:27:11 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
a3630f0132.9be814e81e.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI2MTczMTgwMjE0OTA0NjU2MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTIuMSIsInRhZ19pZCI6NDQ2ODUsInNjcmVlbl9yZXNvbHV0aW9uIjoiMTI4MHgxMDI0IiwiYWRibG9jayI6MCwidGltZXpvbmVfb2xzb24iOiJVVEMiLCJ1dG1fc291cmNlIjoiIiwidXRtX21lZGl1bSI6IiIsInV0bV9jYW1wYWlnbiI6IiIsInV0bV9jb250ZW50IjoiIiwibW0iOjAsImluaXRfc3RhcnRfbGF0ZW5jeSI6MC4xMiwiaXNfdjIiOjAsImlzX3YyX2VtcHR5IjowLCJ1c2VyX2tleXdvcmRzIjoiU3RyZWFtaW5nJTJDYW5kJTJDZG93bmxvYWRpbmclMkNhcmUlMkNhdmFpbGFibGUlMjAifQ==
200 OK 0 B URL HTTP/2 a3630f0132.9be814e81e.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI2MTczMTgwMjE0OTA0NjU2MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTIuMSIsInRhZ19pZCI6NDQ2ODUsInNjcmVlbl9yZXNvbHV0aW9uIjoiMTI4MHgxMDI0IiwiYWRibG9jayI6MCwidGltZXpvbmVfb2xzb24iOiJVVEMiLCJ1dG1fc291cmNlIjoiIiwidXRtX21lZGl1bSI6IiIsInV0bV9jYW1wYWlnbiI6IiIsInV0bV9jb250ZW50IjoiIiwibW0iOjAsImluaXRfc3RhcnRfbGF0ZW5jeSI6MC4xMiwiaXNfdjIiOjAsImlzX3YyX2VtcHR5IjowLCJ1c2VyX2tleXdvcmRzIjoiU3RyZWFtaW5nJTJDYW5kJTJDZG93bmxvYWRpbmclMkNhcmUlMkNhdmFpbGFibGUlMjAifQ==
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI2MTczMTgwMjE0OTA0NjU2MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTIuMSIsInRhZ19pZCI6NDQ2ODUsInNjcmVlbl9yZXNvbHV0aW9uIjoiMTI4MHgxMDI0IiwiYWRibG9jayI6MCwidGltZXpvbmVfb2xzb24iOiJVVEMiLCJ1dG1fc291cmNlIjoiIiwidXRtX21lZGl1bSI6IiIsInV0bV9jYW1wYWlnbiI6IiIsInV0bV9jb250ZW50IjoiIiwibW0iOjAsImluaXRfc3RhcnRfbGF0ZW5jeSI6MC4xMiwiaXNfdjIiOjAsImlzX3YyX2VtcHR5IjowLCJ1c2VyX2tleXdvcmRzIjoiU3RyZWFtaW5nJTJDYW5kJTJDZG93bmxvYWRpbmclMkNhcmUlMkNhdmFpbGFibGUlMjAifQ== HTTP/1.1
Host: a3630f0132.9be814e81e.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://f480.video-loading.amazingcontent.site
Connection: keep-alive
Referer: https://f480.video-loading.amazingcontent.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:27:11 GMT
content-length: 0
server: nginx/1.18.0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
js.wpshsdk.com/npc/sdk/push.m.js?v=1
200 OK 26 kB URL HTTP/2 js.wpshsdk.com/npc/sdk/push.m.js?v=1
IP
ASN #39572 DataWeb Global Group B.V.
File type Unicode text, UTF-8 text, with very long lines (61695), with no line terminators
Hash 1041199054f54b453e7047bc2acbcfbf
7530606c953df651e86d32d45f3387aa8f57c040
cbebffdefdac2d68d56d444bb19f1b95bd4ca1ffa8beba1f5da8e3788c76b21e
GET /npc/sdk/push.m.js?v=1 HTTP/1.1
Host: js.wpshsdk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f480.video-loading.amazingcontent.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:27:11 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 04 Oct 2022 13:40:10 GMT
etag: W/"633c37ba-f1b6"
content-encoding: gzip
expires: Thu, 06 Oct 2022 18:32:11 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
js.wpshsdk.com/npc/sdk/push/styles.css
200 OK 1.1 kB URL HTTP/2 js.wpshsdk.com/npc/sdk/push/styles.css
IP
ASN #39572 DataWeb Global Group B.V.
Hash f220798f9194528d30779a8492838912
4048005a256eb4eeb85f7bb9faba6109b2462ec1
c5683fea72e22f62ff3c0f4dcc047cdb92a201a080ce52af25da8a4629457c6c
GET /npc/sdk/push/styles.css HTTP/1.1
Host: js.wpshsdk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f480.video-loading.amazingcontent.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:27:12 GMT
content-type: text/css
server: nginx/1.18.0
last-modified: Tue, 30 Aug 2022 09:15:33 GMT
etag: W/"630dd535-10f4"
content-encoding: gzip
expires: Thu, 06 Oct 2022 18:32:12 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
fp.metricswpsh.com/fp?tag_id=44685
204 No Content 0 B URL HTTP/1.1 fp.metricswpsh.com/fp?tag_id=44685
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fp?tag_id=44685 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://f480.video-loading.amazingcontent.site/
Origin: https://f480.video-loading.amazingcontent.site
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Thu, 06 Oct 2022 18:27:12 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: https://f480.video-loading.amazingcontent.site
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
fp.metricswpsh.com/fp?tag_id=44685
200 OK 28 B URL HTTP/1.1 fp.metricswpsh.com/fp?tag_id=44685
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text
Hash d8ded99ae3089c609f0f3dfd190a3299
aa378c43d5b8dc4887db4f93f86a319f75731b6f
f5526ab1e5df71c978b3db3ada96990b256be308611834bea29d342b88338000
POST /fp?tag_id=44685 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 22264
Origin: https://f480.video-loading.amazingcontent.site
Connection: keep-alive
Referer: https://f480.video-loading.amazingcontent.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Thu, 06 Oct 2022 18:27:12 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 28
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://f480.video-loading.amazingcontent.site
Set-Cookie: id=1721412264764379183; Expires=Fri, 06 Oct 2023 18:27:12 GMT; Secure; SameSite=None
Vary: Origin
ocsp.sectigo.com/
200 OK 472 B IP
Hash efd6d36de04e04f10b11ff438df94847
38c2a26ed01cdd68d0f27867b58b4fcd0fa9e22a
de30408d08adf82deec4a2e8f80f3885da3763d6cffac77a680e43ab08ae646a
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 18:27:12 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 03:56:18 GMT
Expires: Wed, 12 Oct 2022 03:56:17 GMT
Etag: "38c2a26ed01cdd68d0f27867b58b4fcd0fa9e22a"
Cache-Control: max-age=465544,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75607320bab21bfa-OSL
rtbbnr.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InNwb3QiOjIsImlkIjoxNjk2LCJsYWJlbHMiOiIiLCJzaXRlX2lkIjoyLCJ0eXBlIjoiYmFubmVyIiwic3BhY2VpZCI6MTY5Niwic3BvdF9pZCI6MCwiaWR6b25lIjozODMwODE5LCJ6b25lIjoidGNfcGFiXzMwMHgyNTAiLCJhZF90YWdzIjoiIiwidGl0bGUiOiIiLCJzdWJpZCI6IiIsInV0bTEiOiJ0Y2Jhbl9pIiwidXRtMiI6IjIiLCJ1dG0zIjoiMTAzNDAiLCJ1dG00IjoiIn0sImJhbm5lciI6eyJ3IjozMDAsImgiOjI1MH19XSwic2l0ZSI6eyJpZCI6IjIiLCJwYWdlIjoiaHR0cHM6Ly9mNDgwLnZpZGVvLWxvYWRpbmcuYW1hemluZ2NvbnRlbnQuc2l0ZS8ifSwiZGV2aWNlIjp7InciOjEyODAsImgiOjEwMjR9LCJ1c2VyIjp7ImlkIjoiYTdiNzBlYmY2ZmI2ZDRhMzZmZTk1YjE0NTVmYzI5ZjUifSwiZXh0Ijp7ImR0IjoxNjY1MDgwODMxMDI4fX0=
200 OK 3.8 kB URL HTTP/2 rtbbnr.com/get/?go=1&data=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
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2590)
Hash 335837dd6b4df12137e21ac7110af3eb
155e798475b0b94cf397e816a772e47031406a84
05e891f097e695858eb1835311db4b95200492ea2093675e324b3fe2c1cde5d4
GET /get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InNwb3QiOjIsImlkIjoxNjk2LCJsYWJlbHMiOiIiLCJzaXRlX2lkIjoyLCJ0eXBlIjoiYmFubmVyIiwic3BhY2VpZCI6MTY5Niwic3BvdF9pZCI6MCwiaWR6b25lIjozODMwODE5LCJ6b25lIjoidGNfcGFiXzMwMHgyNTAiLCJhZF90YWdzIjoiIiwidGl0bGUiOiIiLCJzdWJpZCI6IiIsInV0bTEiOiJ0Y2Jhbl9pIiwidXRtMiI6IjIiLCJ1dG0zIjoiMTAzNDAiLCJ1dG00IjoiIn0sImJhbm5lciI6eyJ3IjozMDAsImgiOjI1MH19XSwic2l0ZSI6eyJpZCI6IjIiLCJwYWdlIjoiaHR0cHM6Ly9mNDgwLnZpZGVvLWxvYWRpbmcuYW1hemluZ2NvbnRlbnQuc2l0ZS8ifSwiZGV2aWNlIjp7InciOjEyODAsImgiOjEwMjR9LCJ1c2VyIjp7ImlkIjoiYTdiNzBlYmY2ZmI2ZDRhMzZmZTk1YjE0NTVmYzI5ZjUifSwiZXh0Ijp7ImR0IjoxNjY1MDgwODMxMDI4fX0= HTTP/1.1
Host: rtbbnr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.tubecorp.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 06 Oct 2022 18:27:11 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash e045038dfda49ba866de8eae7e1f022d
496ddade441bb3948b3f68b9de2e3cd7e443b794
68172fc7dd8f7a5fdc0b7744db65dbff5b306f29b1d25c6c9eed21718277d3d9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1630
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:27:12 GMT
Last-Modified: Thu, 06 Oct 2022 18:00:02 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 313
hw-cdn2.adtng.com/delivery/intersection_observer/IntersectionObserver.js
200 OK 17 kB URL HTTP/1.1 hw-cdn2.adtng.com/delivery/intersection_observer/IntersectionObserver.js
IP
File type ASCII text, with very long lines (16885), with no line terminators
Hash 48c80c7c28b5b00a8b4ff94a22b72fe3
d57303c2ad2fd5cedc5cb20f264a6965a7819cee
6e9be773031b3234fb9c2d6cf3d9740db1208f4351beca325ec34f76fd38f356
GET /delivery/intersection_observer/IntersectionObserver.js HTTP/1.1
Host: hw-cdn2.adtng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a.adtng.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 18:27:12 GMT
Connection: Keep-Alive
ETag: "1649192094"
Content-Length: 16885
Content-Type: application/javascript
Last-Modified: Tue, 05 Apr 2022 20:54:54 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10684267
X-HW: 1665080832.dop211.sk1.t,1665080832.cds026.sk1.shn,1665080832.cds026.sk1.c
Access-Control-Allow-Origin: *
a.adtng.com/get/10005363?time=1592491455431&atc=423524&apb=9ps9y80hxvy0u2QfWZq9E3dHK-GgRHWV_Tu4pAk-s9VXse9NY1QAvQw46pAgeWGCKcYQP78nDsSSLsVJoPcy6sQV52dwueHtvFA7y6WIkAtR4dAEmPVMJ8Xx_gUIDRUi
200 OK 14 kB URL HTTP/2 a.adtng.com/get/10005363?time=1592491455431&atc=423524&apb=9ps9y80hxvy0u2QfWZq9E3dHK-GgRHWV_Tu4pAk-s9VXse9NY1QAvQw46pAgeWGCKcYQP78nDsSSLsVJoPcy6sQV52dwueHtvFA7y6WIkAtR4dAEmPVMJ8Xx_gUIDRUi
IP
Hash ac785212dc2668dc943ab9d8af5c73a2
0d28e1f90a84a8cf372539754d5a717c35716011
bc61608fda5eff5a14c42fccc148558dc8199e984f8f2371dbd0e0e4555e8e61
GET /get/10005363?time=1592491455431&atc=423524&apb=9ps9y80hxvy0u2QfWZq9E3dHK-GgRHWV_Tu4pAk-s9VXse9NY1QAvQw46pAgeWGCKcYQP78nDsSSLsVJoPcy6sQV52dwueHtvFA7y6WIkAtR4dAEmPVMJ8Xx_gUIDRUi HTTP/1.1
Host: a.adtng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Thu, 06 Oct 2022 18:27:12 GMT
content-type: text/html
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
content-encoding: gzip
set-cookie: adtool_guid=Ch5KHmM/HgCgJyuiy1ZbAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; path=/; Secure; HTTPOnly; SameSite=None;
RNLBSERVERID=ded7078; path=/; HttpOnly; Secure; SameSite=None
x-request-id: 633F1E00-42FE72AB01BB48EE-782BE6D
X-Firefox-Spdy: h2
hw-cdn2.ang-content.com/a7/creatives/1/49/815053/1042361/1042361_logo.png
200 OK 3.3 kB URL HTTP/1.1 hw-cdn2.ang-content.com/a7/creatives/1/49/815053/1042361/1042361_logo.png
IP
File type PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash 4c992f93419cff2c1c149dfc70e710c6
ea1808199ce5bb59a63edea6fd39bbbf5e7511d7
ba89161f62c517bdd776996943f3e26ed2b92d749178f1c24da07c8db904e27c
GET /a7/creatives/1/49/815053/1042361/1042361_logo.png HTTP/1.1
Host: hw-cdn2.ang-content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a.adtng.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 18:27:12 GMT
Connection: Keep-Alive
ETag: "1663092180"
Content-Length: 3346
Content-Type: image/png
Last-Modified: Tue, 13 Sep 2022 18:03:00 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10400810
X-HW: 1665080832.dop067.sk1.t,1665080832.cds217.sk1.shn,1665080832.dop067.sk1.t,1665080832.cds015.sk1.c
Access-Control-Allow-Origin: *
sentry.infra.infrapu.sh/api/34/envelope/?sentry_key=1ccef2baa0fe4faf8b0a58c88ba4cd34&sentry_version=7
200 OK 41 B URL HTTP/2 sentry.infra.infrapu.sh/api/34/envelope/?sentry_key=1ccef2baa0fe4faf8b0a58c88ba4cd34&sentry_version=7
IP
ASN #14061 DIGITALOCEAN-ASN
File type JSON data\012- , ASCII text, with no line terminators
Hash ccd947dd565ddc25dc675cafbb13bf51
f70192d41ff24ee1217ff461d145f75129658160
04df8e9afca97f0b2e1df3bd79d1ffe4ae81b7f4d85b296021af563f24ba976a
POST /api/34/envelope/?sentry_key=1ccef2baa0fe4faf8b0a58c88ba4cd34&sentry_version=7 HTTP/1.1
Host: sentry.infra.infrapu.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://f480.video-loading.amazingcontent.site/
Content-Type: text/plain;charset=UTF-8
Origin: https://f480.video-loading.amazingcontent.site
Content-Length: 7985
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 06 Oct 2022 18:27:12 GMT
content-type: application/json
content-length: 41
access-control-allow-origin: https://f480.video-loading.amazingcontent.site
access-control-expose-headers: retry-after, x-sentry-rate-limits, x-sentry-error
vary: Origin
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XYIHNDzBgaM8y0gJHjRo4WNMyUodFCjJgaY1rUKGNyzIwxMGKEzCHi4Rwxacgo1LFFBAwRXR6GqTMmY5kYOcqMCXOjTAsbYWDYQHkjYguqMHB8HSNGRsEbNXLIIGOjJ0QydhbayGFDxkM4dcRQlFFSKRw4FKHmmOETzkQdM27Y0HnDrogxbQDroCFjRg0ZNJSSMUPxoRg3bhbKMCkDs-M2bjDqGD1j7l3UqmPQiBEDx8M6MTKioUMHzhwdL16EcWGQTmoXY960eXGmDJ0XMWBIr9F6xg86adqU6dFQLY0csmvUABmDSx3pMrDSGdODsmXM5tFjhSOmxxQzNuAgeXMGhgwsNARRhh1tTMGGHjC00AIRbixBxQ34xcDGflVsZYMeb2QBRRVzEMHGDXUgEcYRRjDRQhJuBFGFGXLc8IYcVigxgxpENPHGG0XkAQceUozxxA1WGOGGDW-YIYYNRNghRh545JEDXm4UIQUVWpCBxhJL1FHFGFPZEQccS5iBQx5DtOAGFkp8cUYVSRAhRRVpuAVHG6I99MacdYpAhnIZyUGHS27IgRyfD0112BYzxJCUCHDI0dRqMHjGmQ4wuDDdQ3LYIVltt9URpw4iiJFDDmGYZVALJoUxA0qkWoWDkVvZhMMYpM4ghhk14CCDW2lIJgJ4LuRQKWUuNESDW3J80WtGwArrArHGulVHGBnZqEcabLARxgs1WAoCCljQtgMITKThRh14gIAHDjZ8YQMN42aqA12WpgDCEVKt8cYLMuQkXXQxgGBEGnKUYcYbeLxA71GFPiqCE0-49eIXXGYEsVtsOFyEE24dZMcXBbNBUQ033IBDazhIh-kZoa2W6w0PefyFGHIshINteg74RRtvkCEauxXpKccbCxEmwhtDOdYownkslJkIBU86EG--AfeCn4AKmtxybs2RaZ9v0BEGHS-2UIcbadAh0w0ukDFGDLvG7PBBX7gNt1t00MmQDTbUEFZYiVrUxq579_33ybX5rRnIZcwBxxdjU8S33ykjrpQYh-VsxlJsTHRXxgtF-phqMPShQEA%3D&s=3523adfedfaa77f96b7be2802b5559356d93270d539f05613088e8e6c2a395111665080831&w=t&r=1&d=334&priv=false
200 OK 24 B URL HTTP/2 pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XYIHNDzBgaM8y0gJHjRo4WNMyUodFCjJgaY1rUKGNyzIwxMGKEzCHi4Rwxacgo1LFFBAwRXR6GqTMmY5kYOcqMCXOjTAsbYWDYQHkjYguqMHB8HSNGRsEbNXLIIGOjJ0QydhbayGFDxkM4dcRQlFFSKRw4FKHmmOETzkQdM27Y0HnDrogxbQDroCFjRg0ZNJSSMUPxoRg3bhbKMCkDs-M2bjDqGD1j7l3UqmPQiBEDx8M6MTKioUMHzhwdL16EcWGQTmoXY960eXGmDJ0XMWBIr9F6xg86adqU6dFQLY0csmvUABmDSx3pMrDSGdODsmXM5tFjhSOmxxQzNuAgeXMGhgwsNARRhh1tTMGGHjC00AIRbixBxQ34xcDGflVsZYMeb2QBRRVzEMHGDXUgEcYRRjDRQhJuBFGFGXLc8IYcVigxgxpENPHGG0XkAQceUozxxA1WGOGGDW-YIYYNRNghRh545JEDXm4UIQUVWpCBxhJL1FHFGFPZEQccS5iBQx5DtOAGFkp8cUYVSRAhRRVpuAVHG6I99MacdYpAhnIZyUGHS27IgRyfD0112BYzxJCUCHDI0dRqMHjGmQ4wuDDdQ3LYIVltt9URpw4iiJFDDmGYZVALJoUxA0qkWoWDkVvZhMMYpM4ghhk14CCDW2lIJgJ4LuRQKWUuNESDW3J80WtGwArrArHGulVHGBnZqEcabLARxgs1WAoCCljQtgMITKThRh14gIAHDjZ8YQMN42aqA12WpgDCEVKt8cYLMuQkXXQxgGBEGnKUYcYbeLxA71GFPiqCE0-49eIXXGYEsVtsOFyEE24dZMcXBbNBUQ033IBDazhIh-kZoa2W6w0PefyFGHIshINteg74RRtvkCEauxXpKccbCxEmwhtDOdYownkslJkIBU86EG--AfeCn4AKmtxybs2RaZ9v0BEGHS-2UIcbadAh0w0ukDFGDLvG7PBBX7gNt1t00MmQDTbUEFZYiVrUxq579_33ybX5rRnIZcwBxxdjU8S33ykjrpQYh-VsxlJsTHRXxgtF-phqMPShQEA%3D&s=3523adfedfaa77f96b7be2802b5559356d93270d539f05613088e8e6c2a395111665080831&w=t&r=1&d=334&priv=false
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 0959ba36d476b6dc1994ba3c678b07c4
d30b94da72daa02766965206a85b7e0356375f5e
897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a
GET /api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XYIHNDzBgaM8y0gJHjRo4WNMyUodFCjJgaY1rUKGNyzIwxMGKEzCHi4Rwxacgo1LFFBAwRXR6GqTMmY5kYOcqMCXOjTAsbYWDYQHkjYguqMHB8HSNGRsEbNXLIIGOjJ0QydhbayGFDxkM4dcRQlFFSKRw4FKHmmOETzkQdM27Y0HnDrogxbQDroCFjRg0ZNJSSMUPxoRg3bhbKMCkDs-M2bjDqGD1j7l3UqmPQiBEDx8M6MTKioUMHzhwdL16EcWGQTmoXY960eXGmDJ0XMWBIr9F6xg86adqU6dFQLY0csmvUABmDSx3pMrDSGdODsmXM5tFjhSOmxxQzNuAgeXMGhgwsNARRhh1tTMGGHjC00AIRbixBxQ34xcDGflVsZYMeb2QBRRVzEMHGDXUgEcYRRjDRQhJuBFGFGXLc8IYcVigxgxpENPHGG0XkAQceUozxxA1WGOGGDW-YIYYNRNghRh545JEDXm4UIQUVWpCBxhJL1FHFGFPZEQccS5iBQx5DtOAGFkp8cUYVSRAhRRVpuAVHG6I99MacdYpAhnIZyUGHS27IgRyfD0112BYzxJCUCHDI0dRqMHjGmQ4wuDDdQ3LYIVltt9URpw4iiJFDDmGYZVALJoUxA0qkWoWDkVvZhMMYpM4ghhk14CCDW2lIJgJ4LuRQKWUuNESDW3J80WtGwArrArHGulVHGBnZqEcabLARxgs1WAoCCljQtgMITKThRh14gIAHDjZ8YQMN42aqA12WpgDCEVKt8cYLMuQkXXQxgGBEGnKUYcYbeLxA71GFPiqCE0-49eIXXGYEsVtsOFyEE24dZMcXBbNBUQ033IBDazhIh-kZoa2W6w0PefyFGHIshINteg74RRtvkCEauxXpKccbCxEmwhtDOdYownkslJkIBU86EG--AfeCn4AKmtxybs2RaZ9v0BEGHS-2UIcbadAh0w0ukDFGDLvG7PBBX7gNt1t00MmQDTbUEFZYiVrUxq579_33ybX5rRnIZcwBxxdjU8S33ykjrpQYh-VsxlJsTHRXxgtF-phqMPShQEA%3D&s=3523adfedfaa77f96b7be2802b5559356d93270d539f05613088e8e6c2a395111665080831&w=t&r=1&d=334&priv=false HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=b99a2ead-79a3-49ae-8fb6-c38c9a3bf582; bfq=APeIECNCxxYZN3LIkEFDRhcWIsYU3BLjoYgyE2PYsFFD4w0ZMyr2URAQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 18:27:12 GMT
content-type: text/plain; charset=utf-8
content-length: 24
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
f480.video-loading.amazingcontent.site/assets/styles/video_loading.css
200 OK 0 B URL HTTP/2 f480.video-loading.amazingcontent.site/assets/styles/video_loading.css
IP
ASN #14061 DIGITALOCEAN-ASN
GET /assets/styles/video_loading.css HTTP/1.1
Host: f480.video-loading.amazingcontent.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f480.video-loading.amazingcontent.site/?tag_id=44685&cl=5&bu=https%3A%2F%2Ftopdatinglove.com%2FkmN6KY&eu=https%3A%2F%2Ftopdatinglove.com%2FkmN6KY
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 06 Oct 2022 18:27:10 GMT
content-type: text/css
last-modified: Fri, 30 Sep 2022 12:27:46 GMT
etag: W/"6336e0c2-5427"
content-encoding: gzip
X-Firefox-Spdy: h2
news-jogeju.cc/lands/50/?site=8048362&sub1=&sub2=1oki6i92re9pf&sub3=&sub4=
200 OK 0 B URL HTTP/2 news-jogeju.cc/lands/50/?site=8048362&sub1=&sub2=1oki6i92re9pf&sub3=&sub4=
IP
ASN #61003 GlobalTeleHost Corp.
GET /lands/50/?site=8048362&sub1=&sub2=1oki6i92re9pf&sub3=&sub4= HTTP/1.1
Host: news-jogeju.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 18:27:06 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, must-revalidate
pragma: no-cache
set-cookie: clickdata=ODA0ODM2Mnw6fDUwfDp8fDp8MW9raTZpOTJyZTlwZnw6fHw6fA%3D%3D; expires=Thu, 06-Oct-2022 19:27:06 GMT; Max-Age=3600; path=/
content-encoding: gzip
X-Firefox-Spdy: h2
f480.video-loading.amazingcontent.site/dist/subscribe.js
200 OK 0 B URL HTTP/2 f480.video-loading.amazingcontent.site/dist/subscribe.js
IP
ASN #14061 DIGITALOCEAN-ASN
GET /dist/subscribe.js HTTP/1.1
Host: f480.video-loading.amazingcontent.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f480.video-loading.amazingcontent.site/?tag_id=44685&cl=5&bu=https%3A%2F%2Ftopdatinglove.com%2FkmN6KY&eu=https%3A%2F%2Ftopdatinglove.com%2FkmN6KY
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 06 Oct 2022 18:27:10 GMT
content-type: application/javascript
last-modified: Thu, 06 Oct 2022 07:13:16 GMT
etag: W/"633e800c-1d155"
content-encoding: gzip
X-Firefox-Spdy: h2
tsyndicate.com/iframes2/00394b71264946e5bf58746cefe5435f.html?subid=0&categories={{ad_tags}}
200 OK 0 B URL HTTP/2 tsyndicate.com/iframes2/00394b71264946e5bf58746cefe5435f.html?subid=0&categories={{ad_tags}}
IP
ASN #24940 Hetzner Online GmbH
GET /iframes2/00394b71264946e5bf58746cefe5435f.html?subid=0&categories={{ad_tags}} HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbbnr.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 18:27:11 GMT
content-type: text/html; charset=utf-8
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
link: <https://lcdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script
x-request-id: e284a1a706d19e3c
set-cookie: ts_uid=b99a2ead-79a3-49ae-8fb6-c38c9a3bf582; expires=Thu, 06 Apr 2023 18:27:11 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
bfq=APeIECNCxxYZN3LIkEFDRhcWIsYU3BLjoYgyE2PYsFFD4w0ZMyr2URAQ; expires=Fri, 07 Oct 2022 18:27:11 GMT; domain=.tsyndicate.com; path=/; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
mc.yandex.ru/watch/73444708?page-url=goal%3A%2F%2Ff480.video-loading.amazingcontent.site%2Fpush-offer&page-ref=https%3A%2F%2Ff480.video-loading.amazingcontent.site%2F%3Ftag_id%3D44685%26cl%3D5%26bu%3Dhttps%253A%252F%252Ftopdatinglove.com%252FkmN6KY%26eu%3Dhttps%253A%252F%252Ftopdatinglove.com%252FkmN6KY&charset=utf-8&hittoken=1665080831_29723ee6fe6b580bc3e7312bc34caa2b98cbcb0640ca7fd22152dcc7567d5d98&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A894117060%3Ahid%3A902659556%3Az%3A0%3Ai%3A20221006182712%3Aet%3A1665080832%3Ac%3A1%3Arn%3A626553225%3Arqn%3A2%3Au%3A1665080831781832058%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1512%2C1512%2C1%2C%3Aeu%3A1%3Ans%3A1665080829603%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665080832%3At%3AStreaming%20and%20downloading%20are%20available&t=gdpr(14)clc(0-0-0)aw(1)rqnt(2)ecs(1)fip(1)rqnl(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/73444708?page-url=goal%3A%2F%2Ff480.video-loading.amazingcontent.site%2Fpush-offer&page-ref=https%3A%2F%2Ff480.video-loading.amazingcontent.site%2F%3Ftag_id%3D44685%26cl%3D5%26bu%3Dhttps%253A%252F%252Ftopdatinglove.com%252FkmN6KY%26eu%3Dhttps%253A%252F%252Ftopdatinglove.com%252FkmN6KY&charset=utf-8&hittoken=1665080831_29723ee6fe6b580bc3e7312bc34caa2b98cbcb0640ca7fd22152dcc7567d5d98&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A894117060%3Ahid%3A902659556%3Az%3A0%3Ai%3A20221006182712%3Aet%3A1665080832%3Ac%3A1%3Arn%3A626553225%3Arqn%3A2%3Au%3A1665080831781832058%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1512%2C1512%2C1%2C%3Aeu%3A1%3Ans%3A1665080829603%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665080832%3At%3AStreaming%20and%20downloading%20are%20available&t=gdpr(14)clc(0-0-0)aw(1)rqnt(2)ecs(1)fip(1)rqnl(1)ti(2)
IP
GET /watch/73444708?page-url=goal%3A%2F%2Ff480.video-loading.amazingcontent.site%2Fpush-offer&page-ref=https%3A%2F%2Ff480.video-loading.amazingcontent.site%2F%3Ftag_id%3D44685%26cl%3D5%26bu%3Dhttps%253A%252F%252Ftopdatinglove.com%252FkmN6KY%26eu%3Dhttps%253A%252F%252Ftopdatinglove.com%252FkmN6KY&charset=utf-8&hittoken=1665080831_29723ee6fe6b580bc3e7312bc34caa2b98cbcb0640ca7fd22152dcc7567d5d98&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A894117060%3Ahid%3A902659556%3Az%3A0%3Ai%3A20221006182712%3Aet%3A1665080832%3Ac%3A1%3Arn%3A626553225%3Arqn%3A2%3Au%3A1665080831781832058%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1512%2C1512%2C1%2C%3Aeu%3A1%3Ans%3A1665080829603%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665080832%3At%3AStreaming%20and%20downloading%20are%20available&t=gdpr(14)clc(0-0-0)aw(1)rqnt(2)ecs(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://f480.video-loading.amazingcontent.site
Connection: keep-alive
Referer: https://f480.video-loading.amazingcontent.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/73444708/1?page-url=goal%3A%2F%2Ff480.video-loading.amazingcontent.site%2Fpush-offer&page-ref=https%3A%2F%2Ff480.video-loading.amazingcontent.site%2F%3Ftag_id%3D44685%26cl%3D5%26bu%3Dhttps%253A%252F%252Ftopdatinglove.com%252FkmN6KY%26eu%3Dhttps%253A%252F%252Ftopdatinglove.com%252FkmN6KY&charset=utf-8&hittoken=1665080831_29723ee6fe6b580bc3e7312bc34caa2b98cbcb0640ca7fd22152dcc7567d5d98&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A894117060%3Ahid%3A902659556%3Az%3A0%3Ai%3A20221006182712%3Aet%3A1665080832%3Ac%3A1%3Arn%3A626553225%3Arqn%3A2%3Au%3A1665080831781832058%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1512%2C1512%2C1%2C%3Aeu%3A1%3Ans%3A1665080829603%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665080832%3At%3AStreaming%20and%20downloading%20are%20available&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%282%29ecs%281%29fip%281%29rqnl%281%29ti%282%29
date: Thu, 06 Oct 2022 18:27:12 GMT
access-control-allow-origin: https://f480.video-loading.amazingcontent.site
set-cookie: yandexuid=7163266941665080832; Expires=Fri, 06-Oct-2023 18:27:12 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=7163266941665080832; Expires=Fri, 06-Oct-2023 18:27:12 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=877617221665080832; Path=/; SameSite=None; Secure
i=iH6ZaC8EudhJFyWmvCp8m45qNL1nZfQqlIIEGEknUWZafmv1V6+FaDFbeRw5cjnzqdTJlzXHnqko3wibHiU7o+H6v6M=; Expires=Sun, 03-Oct-2032 18:27:10 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1696616832.yrts.1665080832#1696616832.yrtsi.1665080832; Expires=Fri, 06-Oct-2023 18:27:12 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 06-Oct-2022 18:27:12 GMT
last-modified: Thu, 06-Oct-2022 18:27:12 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
video-loading.amazingcontent.site/?tag_id=44685&cl=5&bu=https%3A%2F%2Ftopdatinglove.com%2FkmN6KY&eu=https%3A%2F%2Ftopdatinglove.com%2FkmN6KY
302 Found 0 B URL HTTP/2 video-loading.amazingcontent.site/?tag_id=44685&cl=5&bu=https%3A%2F%2Ftopdatinglove.com%2FkmN6KY&eu=https%3A%2F%2Ftopdatinglove.com%2FkmN6KY
IP
ASN #14061 DIGITALOCEAN-ASN
GET /?tag_id=44685&cl=5&bu=https%3A%2F%2Ftopdatinglove.com%2FkmN6KY&eu=https%3A%2F%2Ftopdatinglove.com%2FkmN6KY HTTP/1.1
Host: video-loading.amazingcontent.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://2.news-jogeju.cc/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.18.0
date: Thu, 06 Oct 2022 18:27:10 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.32
location: https://f480.video-loading.amazingcontent.site/?tag_id=44685&cl=5&bu=https%3A%2F%2Ftopdatinglove.com%2FkmN6KY&eu=https%3A%2F%2Ftopdatinglove.com%2FkmN6KY
X-Firefox-Spdy: h2
1.news-jogeju.cc/traffback.php?site=8048362&sub1=&sub2=1oki6i92re9pf&sub3=&sub4=&land=50
200 OK 0 B URL HTTP/2 1.news-jogeju.cc/traffback.php?site=8048362&sub1=&sub2=1oki6i92re9pf&sub3=&sub4=&land=50
IP
ASN #61003 GlobalTeleHost Corp.
GET /traffback.php?site=8048362&sub1=&sub2=1oki6i92re9pf&sub3=&sub4=&land=50 HTTP/1.1
Host: 1.news-jogeju.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.news-jogeju.cc/lands/50/?site=8048362&sub1=&sub2=1oki6i92re9pf&sub3=&sub4=
Cookie: clickdata=ODA0ODM2Mnw6fDUwfDp8fDp8MW9raTZpOTJyZTlwZnw6fHw6fA%3D%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 18:27:08 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, must-revalidate
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
149.7.16.221
209.197.3.25
116.202.60.158
178.62.200.171
77.88.21.119
23.36.76.226
0.0.0.0