| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashcf14baed0842431a08367ed54f2346ca d943be8835b7e4470e3d6fbe09ac39c5464be434 a45fbc8cdddc9f43c0c3c7d73cbb2cdf3cf4c4cd2df20802925b795da5048aa4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A45FBC8CDDDC9F43C0C3C7D73CBB2CDF3CF4C4CD2DF20802925B795DA5048AA4"
Last-Modified: Sun, 05 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9972
Expires: Tue, 07 Mar 2023 17:50:47 GMT
Date: Tue, 07 Mar 2023 15:04:35 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash0f2c901fe04f9e3d18e9c3387b076780 3f0115cd05d7857a8119eff0479f5812df155d3d 84518fa2565f7f63933d3c552e1dc07f84c71f4a3df5d2821484c371ef57b924
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "84518FA2565F7F63933D3C552E1DC07F84C71F4A3DF5D2821484C371EF57B924"
Last-Modified: Tue, 07 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4658
Expires: Tue, 07 Mar 2023 16:22:13 GMT
Date: Tue, 07 Mar 2023 15:04:35 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash5034bcceb9691ad6244be6045742ab53 51e77cdc92833432cd26b13f28875791a187c63c 540637d0d69c1201dcb2dd813b40e64cd07c5bd7685d46a7bad4d437a4e7aeea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "540637D0D69C1201DCB2DD813B40E64CD07C5BD7685D46A7BAD4D437A4E7AEEA"
Last-Modified: Sun, 05 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13010
Expires: Tue, 07 Mar 2023 18:41:25 GMT
Date: Tue, 07 Mar 2023 15:04:35 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashbc86ef2a0cee04915bc360f5821adc8f 3658f9028cce204d38f7f48fcfaa2a8e4f54383a aeecd718d03811322457de4f20828bdba86b277e7e0e328cae9c0a8075638454
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Type, Retry-After, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 07 Mar 2023 14:08:40 GMT
content-type: application/json
age: 3355
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| go.bluelinknow.com/t/clk?id=3xHayepcEVcRKc2&s1=4p1iCFBWrZ5xe9nRjv31ub&s2=1280&s7=831&s8=game-unpacking-(53619).rar | 18.235.88.63 | 302 Found | 0 B |
URL HTTP/1.1go.bluelinknow.com/t/clk?id=3xHayepcEVcRKc2&s1=4p1iCFBWrZ5xe9nRjv31ub&s2=1280&s7=831&s8=game-unpacking-(53619).rar IP18.235.88.63:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t/clk?id=3xHayepcEVcRKc2&s1=4p1iCFBWrZ5xe9nRjv31ub&s2=1280&s7=831&s8=game-unpacking-(53619).rar HTTP/1.1
Host: go.bluelinknow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Tue, 07 Mar 2023 15:04:35 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Server: nginx/1.14.2
Location: https://go.greenlinknow.com/t/clk?id=bLH31paiwvfLruQ&s1=4p1iCFBWrZ5xe9nRjv31ub&s2=1280&s7=831&s8=game-unpacking-(53619).rar&rl=EjK&redirect-from=3xHayepcEVcRKc2&rcode=R02&rseq=R02
Cache-Control: no-transform
X-Frame-Options: SAMEORIGIN
Vary: Cookie, Origin
Set-Cookie: ydt_a31a0322edef4efaa328c3e667d70925="[]:1pZYrj:-dfsj5j-GJlIPyihfju6Zt5BPsU"; expires=Thu, 06 Apr 2023 16:04:35 GMT; Max-Age=2595600; Path=/; SameSite=None; Secure
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hashb5ba6334e73496995e3e3a9ecd0eb323 ad80d3b7718c28364e8c2004fb38a13a1747e462 aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 3+ukFwjGsb0vQgVcR7obCRbVVTKtxcWQNKKzx6DPFtJtLjqeGJFvTi4Fcrba8/NhEOZ7ds3TLks=
x-amz-request-id: 15A3H5TATX9G69EC
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 07 Mar 2023 14:17:36 GMT
age: 2819
last-modified: Sat, 18 Feb 2023 20:28:27 GMT
etag: "b5ba6334e73496995e3e3a9ecd0eb323"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 07 Mar 2023 15:04:35 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.r2m01.amazontrust.com/ | 54.230.80.227 | 200 OK | 471 B |
URL HTTP/1.1ocsp.r2m01.amazontrust.com/ IP54.230.80.227:0
Hash21303254dca5a1980aa3c21411ea2a31 aca899bb848f49758b2ad8005924534286512157 fb1666041a3f65616ddb613bbcbd078a56475025eca5099cfadd9cd06e5f5422
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 07 Mar 2023 15:04:36 GMT
Last-Modified: Tue, 07 Mar 2023 14:06:41 GMT
Server: ECAcc (bsa/EB6C)
X-Cache: Miss from cloudfront
Via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: NM-Tm2PaSFfN0t9CfbyaiUmHvAkYhds4x9HlgDYW7a7mSjhn8yWPKA==
Age: 3475
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Cache-Control, Expires, Alert, Content-Type, Pragma, Retry-After, Last-Modified, Backoff, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 07 Mar 2023 15:03:41 GMT
age: 55
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashbc9a86b8d3035b57b58750f8896202e8 1485042fff689cadbf0c7a540f430993f23d45e3 b06e4961e184d51008f4adb9c8fe571f08b21b4728e5eac0bb4795861e03aa2f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B06E4961E184D51008F4ADB9C8FE571F08B21B4728E5EAC0BB4795861E03AA2F"
Last-Modified: Tue, 07 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8017
Expires: Tue, 07 Mar 2023 17:18:13 GMT
Date: Tue, 07 Mar 2023 15:04:36 GMT
Connection: keep-alive
|
|
| go.greenlinknow.com/t/clk?id=bLH31paiwvfLruQ&s1=4p1iCFBWrZ5xe9nRjv31ub&s2=1280&s7=831&s8=game-unpacking-(53619).rar&rl=EjK&redirect-from=3xHayepcEVcRKc2&rcode=R02&rseq=R02 | 3.218.6.70 | 302 Found | 0 B |
URL HTTP/2go.greenlinknow.com/t/clk?id=bLH31paiwvfLruQ&s1=4p1iCFBWrZ5xe9nRjv31ub&s2=1280&s7=831&s8=game-unpacking-(53619).rar&rl=EjK&redirect-from=3xHayepcEVcRKc2&rcode=R02&rseq=R02 IP3.218.6.70:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t/clk?id=bLH31paiwvfLruQ&s1=4p1iCFBWrZ5xe9nRjv31ub&s2=1280&s7=831&s8=game-unpacking-(53619).rar&rl=EjK&redirect-from=3xHayepcEVcRKc2&rcode=R02&rseq=R02 HTTP/1.1
Host: go.greenlinknow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Tue, 07 Mar 2023 15:04:36 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: https://forever-stream.com/nb_no/streaming-club?subid=a9930e5e-0b9f-4676-856e-4b8f4e746bee&networkid=200274&publisher=1280&isNewTr=1&stream=game-unpacking-(53619).rar
server: nginx/1.14.2
cache-control: no-transform
x-frame-options: SAMEORIGIN
vary: Cookie, Origin
set-cookie: uip="[\"SpkA8dm2\"\054 {\"pRB\": \"Wk6gBgR\"}]:1pZYrk:Ew3YSoEQq9AsxAeILrxEM5FFjFY"; expires=Thu, 06 Apr 2023 15:04:36 GMT; Max-Age=2592000; Path=/
ydt_a31a0322edef4efaa328c3e667d70925="[\"a9930e5e-0b9f-4676-856e-4b8f4e746bee\"]:1pZYrk:O3F5m9nowvaqVYD1wTHzSIha1n8"; expires=Thu, 06 Apr 2023 16:04:36 GMT; Max-Age=2595600; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 52.40.48.115 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP52.40.48.115:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: c0oy5utIISMZnsyu/GjvTw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ka6neooinNCwhA5IidSg0SYO5yU=
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash6a978ac8c366c3cdf5cac7d419da1a7a 171eb20796df2bca7bce102943c1899a93c8f5d1 5cdc16c95770061422fb14c5d5d687bc5c8e2f3b250c481f688a36d4ec7b6aa5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Mar 2023 15:04:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.digicert.com/ | 192.229.221.95 | 200 OK | 279 B |
IP192.229.221.95:0
Hash4a0a6a8310eff212c0ddcb11a463ee93 74bbb95bf7e64e810293be1e596bcb5655ee3f0b 404d066c4887dbc7a5f9af88d07c51712fb2bd3bd194a669112f710a6ac4f481
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2027
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 07 Mar 2023 15:04:37 GMT
Last-Modified: Tue, 07 Mar 2023 14:30:50 GMT
Server: ECAcc (amb/6B0A)
X-Cache: HIT
Content-Length: 279
|
|
| ocsp.digicert.com/ | 192.229.221.95 | 200 OK | 279 B |
IP192.229.221.95:0
Hash4a0a6a8310eff212c0ddcb11a463ee93 74bbb95bf7e64e810293be1e596bcb5655ee3f0b 404d066c4887dbc7a5f9af88d07c51712fb2bd3bd194a669112f710a6ac4f481
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3192
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 07 Mar 2023 15:04:37 GMT
Last-Modified: Tue, 07 Mar 2023 14:11:25 GMT
Server: ECAcc (amb/6B09)
X-Cache: HIT
Content-Length: 279
|
|
| ocsp.digicert.com/ | 192.229.221.95 | 200 OK | 279 B |
IP192.229.221.95:0
Hash4a0a6a8310eff212c0ddcb11a463ee93 74bbb95bf7e64e810293be1e596bcb5655ee3f0b 404d066c4887dbc7a5f9af88d07c51712fb2bd3bd194a669112f710a6ac4f481
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2825
Cache-Control: max-age=103788
Content-Type: application/ocsp-response
Date: Tue, 07 Mar 2023 15:04:37 GMT
Etag: "640639e8-117"
Expires: Wed, 08 Mar 2023 19:54:25 GMT
Last-Modified: Mon, 06 Mar 2023 19:07:20 GMT
Server: ECAcc (amb/6B35)
X-Cache: HIT
Content-Length: 279
|
|
| ocsp.digicert.com/ | 192.229.221.95 | 200 OK | 279 B |
IP192.229.221.95:0
Hash4a0a6a8310eff212c0ddcb11a463ee93 74bbb95bf7e64e810293be1e596bcb5655ee3f0b 404d066c4887dbc7a5f9af88d07c51712fb2bd3bd194a669112f710a6ac4f481
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2027
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 07 Mar 2023 15:04:37 GMT
Last-Modified: Tue, 07 Mar 2023 14:30:50 GMT
Server: ECAcc (amb/6B0A)
X-Cache: HIT
Content-Length: 279
|
|
| www.googletagmanager.com/gtag/js?id=UA-195162716-3 | 142.250.74.168 | 200 OK | 45 kB |
URL HTTP/2www.googletagmanager.com/gtag/js?id=UA-195162716-3 IP142.250.74.168:0
File typeASCII text, with very long lines (2206) Hashd27a15201e337419b9b6c779d7b60764 a6c3a0ae8ed8ad41b369f80fcafb71fb3d82620f 35e2e8aa860108b5cd3d84cbee376048b08f244bc7a1c7551a3a9a431a228b9d
GET /gtag/js?id=UA-195162716-3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 Mar 2023 15:04:37 GMT
expires: Tue, 07 Mar 2023 15:04:37 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44768
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 192.229.221.95 | 200 OK | 279 B |
IP192.229.221.95:0
Hash4a0a6a8310eff212c0ddcb11a463ee93 74bbb95bf7e64e810293be1e596bcb5655ee3f0b 404d066c4887dbc7a5f9af88d07c51712fb2bd3bd194a669112f710a6ac4f481
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3555
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 07 Mar 2023 15:04:37 GMT
Last-Modified: Tue, 07 Mar 2023 14:05:22 GMT
Server: ECAcc (amb/6B67)
X-Cache: HIT
Content-Length: 279
|
|
| cdn.content-loads.com/prod/landings/assets/layoutCinema3/layoutCinema3/images/common/card-declined-img.png | 104.26.8.128 | 200 OK | 5.6 kB |
URL HTTP/2cdn.content-loads.com/prod/landings/assets/layoutCinema3/layoutCinema3/images/common/card-declined-img.png IP104.26.8.128:0
File typePNG image data, 225 x 155, 8-bit/color RGBA, non-interlaced\012- data Hash78b2d1575168ed90d031a3dca86563ca b1b24b07ae83ec93b2e0f224973053abaa8c7acc a8b45a0089c9ee6f6e4afd93b2468f0e2b6e970d02745747ebc93440e6baacc1
GET /prod/landings/assets/layoutCinema3/layoutCinema3/images/common/card-declined-img.png HTTP/1.1
Host: cdn.content-loads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Mar 2023 15:04:37 GMT
content-type: image/png
content-length: 5580
last-modified: Thu, 23 Feb 2023 11:13:46 GMT
etag: "63f74a6a-15cc"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=faoaCGMztRLjor5skUJAhFyVMrH%2Ffw2KnV1eRoLp38nlXq71SIdGgcchEjVSsoINB3%2B7mOo3vtFdnTbVLtIk06yHCu9WcL0oUi0Fs%2FWjff8IQMRzAxi6OXPcg3LHQdCrEiUyYEITnA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a43bb6109eb0b61-OSL
X-Firefox-Spdy: h2
|
|
| cdn.content-loads.com/prod/landings/nb_no/streaming-club/images/b920f29788a7e8b6409fbec70f7fe663.png | 104.26.8.128 | 200 OK | 2.0 kB |
URL HTTP/2cdn.content-loads.com/prod/landings/nb_no/streaming-club/images/b920f29788a7e8b6409fbec70f7fe663.png IP104.26.8.128:0
File typePNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced\012- data Hashb920f29788a7e8b6409fbec70f7fe663 7976b54ec9a7857ed3d78df626ae76702ff20eb7 dda69d5f9b2dce7d4b18d451548e35e9486f93f22e76d0bffdf4cda0e9813756
GET /prod/landings/nb_no/streaming-club/images/b920f29788a7e8b6409fbec70f7fe663.png HTTP/1.1
Host: cdn.content-loads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Mar 2023 15:04:37 GMT
content-type: image/png
content-length: 1969
last-modified: Tue, 22 Nov 2022 09:52:10 GMT
etag: "637c9bca-7b1"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SiKdHBgMvJ6G%2BOXBdrVVB86UckMVD7DA7z1Bxu1RJINn5heC1%2B098J7w3WvyAL%2FwsmhcPGDL9AuKWiYAlmUYj10LoGLnjr8tfCOGOXIfTkmRhF2MXe9UfVElKyRtTco4Wo28wqmudQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a43bb6109df0b61-OSL
X-Firefox-Spdy: h2
|
|
| cdn.content-loads.com/prod/landings/assets/layoutCinema3/layoutCinema3/images/common/email-existed-img.png | 104.26.8.128 | 200 OK | 6.0 kB |
URL HTTP/2cdn.content-loads.com/prod/landings/assets/layoutCinema3/layoutCinema3/images/common/email-existed-img.png IP104.26.8.128:0
File typePNG image data, 225 x 155, 8-bit/color RGBA, non-interlaced\012- data Hash51655898e6c2520a08a65e0eef729ea5 d05f1470dca9a5ef27bfa1f78db4b8ec569d9047 8f1ad81b346d3ee6d36229c7542e9bbd051e58de0c434b7f97cd01bddcd9d678
GET /prod/landings/assets/layoutCinema3/layoutCinema3/images/common/email-existed-img.png HTTP/1.1
Host: cdn.content-loads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Mar 2023 15:04:37 GMT
content-type: image/png
content-length: 6014
last-modified: Thu, 23 Feb 2023 11:13:46 GMT
etag: "63f74a6a-177e"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4W2X5pSF%2Fx6wmhXBw9q7PYNHYG68w1sh%2BiaLozKm8B2edUB5bAdCOBWGaThl7%2FstgUTd8yalBdwTWEqTpPszoqONR2ZnyhTiejRabdrHNSIhoaeyUTfJch9cqco6IJohx%2BUk4Hvv6A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a43bb6109ec0b61-OSL
X-Firefox-Spdy: h2
|
|
| cdn.content-loads.com/prod/landings/assets/layoutCinema3/layoutCinema3/images/common/card-success-img.png | 104.26.8.128 | 200 OK | 5.5 kB |
URL HTTP/2cdn.content-loads.com/prod/landings/assets/layoutCinema3/layoutCinema3/images/common/card-success-img.png IP104.26.8.128:0
File typePNG image data, 225 x 155, 8-bit/color RGBA, non-interlaced\012- data Hashd4e9852797d8344d7cf548f0e995b3f9 24d735802263b5a4e213808f063768c2cab64526 df5b88dcdde24064831192cf91da1261929edd43ccd2109c9f48a657b6347dca
GET /prod/landings/assets/layoutCinema3/layoutCinema3/images/common/card-success-img.png HTTP/1.1
Host: cdn.content-loads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Mar 2023 15:04:37 GMT
content-type: image/png
content-length: 5532
last-modified: Thu, 23 Feb 2023 11:13:46 GMT
etag: "63f74a6a-159c"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vvDcs40ayjKNfPfr7fWw%2BqR3lS55yNjwQKTff8SFOt6meMthkMmHHR38TI%2F4CY8ncmNLVkb1SHJqYPdZNa8U%2BZq281RR3c%2BJ9yWLJS4YXjkV0TvS2QQLbCY3bA7GqZw71jSdBhEgiw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a43bb6109e90b61-OSL
X-Firefox-Spdy: h2
|
|
| cdn.content-loads.com/prod/landings/nb_no/streaming-club/images/413852d4d0db5ee63859f79b9cedfdec.png | 104.26.8.128 | 200 OK | 14 kB |
URL HTTP/2cdn.content-loads.com/prod/landings/nb_no/streaming-club/images/413852d4d0db5ee63859f79b9cedfdec.png IP104.26.8.128:0
File typePNG image data, 646 x 116, 8-bit/color RGBA, non-interlaced\012- data Hash413852d4d0db5ee63859f79b9cedfdec 9f0a2a5a312b69a72271ca6fe758f2a839322bfe 21831d109348705d9d45c4948b4ed44e59f271f7fe1e77c7ac9763fc11bdf9f9
GET /prod/landings/nb_no/streaming-club/images/413852d4d0db5ee63859f79b9cedfdec.png HTTP/1.1
Host: cdn.content-loads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Mar 2023 15:04:37 GMT
content-type: image/png
content-length: 14461
last-modified: Tue, 22 Nov 2022 09:52:10 GMT
etag: "637c9bca-387d"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HKBn94g0do8eWoodVAHNJ25u5dWfGDsg3vVmclDAf%2BcOu0IrIuyvmGidCOVPBuD66gqG5KNaVat0ssTxX5CfYtiLRcely6ArP%2Bgsyt%2FouaXmTviJpbW1DRcvL851paCLBm0wiQjumA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a43bb6109dc0b61-OSL
X-Firefox-Spdy: h2
|
|
| cdn.content-loads.com/prod/landings/nb_no/streaming-club/images/12e2bcc7cae9c2211a695df886e28e9b.png | 104.26.8.128 | 200 OK | 4.8 kB |
URL HTTP/2cdn.content-loads.com/prod/landings/nb_no/streaming-club/images/12e2bcc7cae9c2211a695df886e28e9b.png IP104.26.8.128:0
File typePNG image data, 190 x 108, 8-bit/color RGBA, non-interlaced\012- data Hash12e2bcc7cae9c2211a695df886e28e9b 0e31a94632d7efa8ca00b3d84b90f3e61fcc7322 cdebbfd2ef3531023cb60b657445e188a0e76824338edc4ada292ac7ab1e164f
GET /prod/landings/nb_no/streaming-club/images/12e2bcc7cae9c2211a695df886e28e9b.png HTTP/1.1
Host: cdn.content-loads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Mar 2023 15:04:37 GMT
content-type: image/png
content-length: 4792
last-modified: Tue, 22 Nov 2022 09:52:10 GMT
etag: "637c9bca-12b8"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6ok%2BaVTMGgYq8EKRvDh%2B83WD6CuUZhpkd4fsMspLMU%2FNz3%2B81i5iKt8G335sIBWJzxK5pMoukLfjoNAC1CSbR337KJugwai8jV5FYQpfE2XB7hfLYdyCO32KN%2F47Z8X46VCDBeaHvQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a43bb6109dd0b61-OSL
X-Firefox-Spdy: h2
|
|
| cdn.content-loads.com/prod/landings/nb_no/streaming-club/images/f5126485b8c58b637b6d45a27ba9b778.png | 104.26.8.128 | 200 OK | 1.4 kB |
URL HTTP/2cdn.content-loads.com/prod/landings/nb_no/streaming-club/images/f5126485b8c58b637b6d45a27ba9b778.png IP104.26.8.128:0
File typePNG image data, 71 x 58, 8-bit/color RGBA, non-interlaced\012- data Hashf5126485b8c58b637b6d45a27ba9b778 af7dfa4ba95e7fc20176765845e7d07ea676a7ba dd90005ded6279e7929a5d1efd9f36d5a46b926f6be6651f5ed22c1af29d45f0
GET /prod/landings/nb_no/streaming-club/images/f5126485b8c58b637b6d45a27ba9b778.png HTTP/1.1
Host: cdn.content-loads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Mar 2023 15:04:37 GMT
content-type: image/png
content-length: 1381
last-modified: Tue, 22 Nov 2022 09:52:10 GMT
etag: "637c9bca-565"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zKoMV6ug755Hw59Ex7CPOPcw%2FyoHD25CTeDcC%2BnrR8Z32imPtmdd5suGejp1ycoYOYNJlXYMyaf257vomH%2FgIvhNIjlkRHh5%2B5HjIw7c94E92TUuJYrObj65Zd%2BLKo711PIN3YGW1Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a43bb6109de0b61-OSL
X-Firefox-Spdy: h2
|
|
| cdn.content-loads.com/prod/landings/nb_no/streaming-club/images/04494c4a6602480fefaf124f65418998.png | 104.26.8.128 | 200 OK | 389 kB |
URL HTTP/2cdn.content-loads.com/prod/landings/nb_no/streaming-club/images/04494c4a6602480fefaf124f65418998.png IP104.26.8.128:0
File typePNG image data, 993 x 546, 8-bit/color RGBA, non-interlaced\012- data Size389 kB (388843 bytes) Hash04494c4a6602480fefaf124f65418998 a95d910d586099b2782e99fc8fa3af9f4c0b5326 51b11c64952b4fb9c0363b63465ffd70cc2db6e07698b9f4025d4dabd3fd682a
GET /prod/landings/nb_no/streaming-club/images/04494c4a6602480fefaf124f65418998.png HTTP/1.1
Host: cdn.content-loads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Mar 2023 15:04:37 GMT
content-type: image/png
content-length: 388843
last-modified: Tue, 22 Nov 2022 09:52:10 GMT
etag: "637c9bca-5eeeb"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gDROpnf2%2FzERah5Rl1tgnRFESm%2B0jc5adETCu8aoB4IC%2BHSdSozyun9sGYxhuBxBxwEFNoDWWKqiChYbPRmlshXX9sSo2nR1JGTVafvV3iQf8r50okcQcmqPLEPZPoUJDyEeY3aFAg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a43bb6109e40b61-OSL
X-Firefox-Spdy: h2
|
|
| cdn.content-loads.com/prod/landings/assets/common/common/dist/vendors.js | 104.26.8.128 | 200 OK | 130 kB |
URL HTTP/2cdn.content-loads.com/prod/landings/assets/common/common/dist/vendors.js IP104.26.8.128:0
File typeASCII text, with very long lines (65536), with no line terminators Size130 kB (130067 bytes) Hash0d23134e8ca0fbd4069d36e1344c81e5 780dc9c3136d81e25679bafeb54d757aa5141c4f cc34cac41c3f61a8e2e69c1a9d0a1fde42508273e6cbaa3f91645b516b3545cd
GET /prod/landings/assets/common/common/dist/vendors.js HTTP/1.1
Host: cdn.content-loads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Mar 2023 15:04:37 GMT
content-type: application/javascript
access-control-allow-origin: *
cf-bgj: minify
cf-polished: origSize=519858
etag: W/"64072ccb-7eeb2"
last-modified: Tue, 07 Mar 2023 12:23:39 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1356
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yAaaHrGvVvniyeuvO%2FxwsVZVsvCMHah255UrdhP%2Fn5echm8hGAiUWVYDx34Xc8hrAClca2eG63yOA11e4tnIkQOCpEJsEh%2FXyiiITLT2YQ%2BRwp%2FaaHR6DQHPlR8pfOt5dwuyz%2BAldw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a43bb60f9d90b61-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cdn.content-loads.com/prod/landings/nb_no/streaming-club/images/1f0552bb42b6e8a10f842f4c0226c4ad.png | 104.26.8.128 | 200 OK | 560 B |
URL HTTP/2cdn.content-loads.com/prod/landings/nb_no/streaming-club/images/1f0552bb42b6e8a10f842f4c0226c4ad.png IP104.26.8.128:0
File typePNG image data, 72 x 48, 8-bit/color RGBA, non-interlaced\012- data Hash1f0552bb42b6e8a10f842f4c0226c4ad ff31aa175ee8740b152c0b5f0f3ecf379efd9fd6 93ee307825a50567726e8fb9464052deb229f7b12b8797301fc1eda3d4d51f1b
GET /prod/landings/nb_no/streaming-club/images/1f0552bb42b6e8a10f842f4c0226c4ad.png HTTP/1.1
Host: cdn.content-loads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Mar 2023 15:04:37 GMT
content-type: image/png
content-length: 560
last-modified: Tue, 22 Nov 2022 09:52:10 GMT
etag: "637c9bca-230"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eqr3REryN84bCzj%2B2huSr4QTIk7zsfYylJCkxC%2Fx5r%2Fhv9I%2BbqPXvNetN0BIzGpGmYrtWGTu%2F%2Bs4AllLY4NrjB60bgKtQXxNtSj6Zd58GmZuferLp%2FRkXJELDgw1ZiprDFezlmpq5w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a43bb6109e10b61-OSL
X-Firefox-Spdy: h2
|
|
| cdn.content-loads.com/prod/landings/nb_no/streaming-club/images/b3789fe0d07477dd3f93661429202d5f.png | 104.26.8.128 | 200 OK | 2.3 kB |
URL HTTP/2cdn.content-loads.com/prod/landings/nb_no/streaming-club/images/b3789fe0d07477dd3f93661429202d5f.png IP104.26.8.128:0
File typePNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced\012- data Hashb3789fe0d07477dd3f93661429202d5f 73c0edfdb5043be37f7833a14c3665b72aaa6e19 1c3213862fcbb73db74dd52f6802d4c8b0cb00062bc6169cc93c110720821f0b
GET /prod/landings/nb_no/streaming-club/images/b3789fe0d07477dd3f93661429202d5f.png HTTP/1.1
Host: cdn.content-loads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Mar 2023 15:04:37 GMT
content-type: image/png
content-length: 2274
last-modified: Tue, 22 Nov 2022 09:52:10 GMT
etag: "637c9bca-8e2"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ScgiIbJDwaOUvC4MHgPGrDicjjdZeXLuZzgTonw0vD0VlETkDLWXDCp4Pl%2Ffj9g3n9NnIS3M1UVgcXmYhqZ7TdVluIfaVa0kheN3tZnVhtO8ZEy13Dy8Asrby7vVFh8Y6aRvli1pjg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a43bb6109e20b61-OSL
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash587b1cd8e3fa518a1784d2ccc0139a36 e1a4d4576e95660cc149c60b3655a278e6ac967b 8339b116073dcfe2280c5d98bdac9e9d15214589f0292cc9c399656f887dc628
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Mar 2023 15:04:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash587b1cd8e3fa518a1784d2ccc0139a36 e1a4d4576e95660cc149c60b3655a278e6ac967b 8339b116073dcfe2280c5d98bdac9e9d15214589f0292cc9c399656f887dc628
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Mar 2023 15:04:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| cdn.content-loads.com/prod/landings/assets/layoutCinema3/layoutCinema3/fonts/lato/lato-700.woff2 | 104.26.8.128 | 200 OK | 23 kB |
URL HTTP/2cdn.content-loads.com/prod/landings/assets/layoutCinema3/layoutCinema3/fonts/lato/lato-700.woff2 IP104.26.8.128:0
File typeWeb Open Font Format (Version 2), TrueType, length 22992, version 1.0\012- data Hash1efbd38aa76ddae2580fedf378276333 8a49976f2470ba2a1db6144245355d3b889312e4 8d3ca80fa271e94b0c36cf3053b0f806b7a42bb3395b424c99dc0bd218f0ac20
GET /prod/landings/assets/layoutCinema3/layoutCinema3/fonts/lato/lato-700.woff2 HTTP/1.1
Host: cdn.content-loads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://forever-stream.com
Connection: keep-alive
Referer: https://cdn.content-loads.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Mar 2023 15:04:37 GMT
content-type: application/octet-stream
content-length: 22992
last-modified: Thu, 23 Feb 2023 11:13:46 GMT
etag: "63f74a6a-59d0"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iq7pQfOaiTve9IGPQPK0O%2Bn%2FCnDwoJl8ytTVO9ucvWY1iQheEnsZJpbEFIhIJyXdtqsOesjQ19S8Z97DhE%2FDnRRiovM9LRkn2amFo9%2FA%2B1VpdTwbKLuG2csZ5tSld3xMHSW8%2FUVL%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a43bb62abec0b61-OSL
X-Firefox-Spdy: h2
|
|
| cdn.content-loads.com/prod/landings/assets/layoutCinema3/layoutCinema3/images/common/stamp-bg@2x.png | 104.26.8.128 | 200 OK | 132 kB |
URL HTTP/2cdn.content-loads.com/prod/landings/assets/layoutCinema3/layoutCinema3/images/common/stamp-bg@2x.png IP104.26.8.128:0
File typePNG image data, 490 x 310, 8-bit/color RGBA, non-interlaced\012- data Size132 kB (132079 bytes) Hash663a088b73ce519c38adbad79e82d659 39ef28b09af2fdcf7f683c58efc18a43bd9e121f 28a0afe680833c1a10601e37f8a86a59b13f0e10aa03b9f5a5c53848639f77ac
GET /prod/landings/assets/layoutCinema3/layoutCinema3/images/common/stamp-bg@2x.png HTTP/1.1
Host: cdn.content-loads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.content-loads.com/prod/landings/assets/layoutCinema3/layoutCinema3/styles/layout/layout.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Mar 2023 15:04:37 GMT
content-type: image/png
content-length: 132079
last-modified: Thu, 23 Feb 2023 11:13:46 GMT
etag: "63f74a6a-203ef"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YaDMmMC3mCZG7a186RwRUzKKFLFrmakE36yHpiQf0LGEfggbb3F%2BVJp%2B54xsLAp5AO7yObc3GyxjGPdQfSI3FEL64%2BZOo0mchGugHcsXsgMUMwQL%2Fpjr3EgM%2Bh0qHXJxgsiDTSxYdg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a43bb629be30b61-OSL
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto:300,400,500,700 | 142.250.74.74 | 200 OK | 18 kB |
URL HTTP/2fonts.googleapis.com/css?family=Roboto:300,400,500,700 IP142.250.74.74:0
Hash1b639edd78efcc3df486487511166166 e1047249dd8c3450bb84ac8300727d4c41092dc7 951161464aa71acb2ae005b24ea9fc6fdc628218f5588b6298bea323383d7f68
GET /css?family=Roboto:300,400,500,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.content-loads.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 07 Mar 2023 15:04:37 GMT
date: Tue, 07 Mar 2023 15:04:37 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdn.content-loads.com/prod/landings/assets/layoutCinema3/layoutCinema3/js/scripts.js | 104.26.8.128 | 200 OK | 24 kB |
URL HTTP/2cdn.content-loads.com/prod/landings/assets/layoutCinema3/layoutCinema3/js/scripts.js IP104.26.8.128:0
Hashf77c93d7cdddebe4e38444bebaf4f837 b3fb18cabb3dc633edc3c8a3caf56012f3a74b28 ae4a00e57e7118488d6b934272e90272ad10993ec43669e58a561d157a81c130
GET /prod/landings/assets/layoutCinema3/layoutCinema3/js/scripts.js HTTP/1.1
Host: cdn.content-loads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Mar 2023 15:04:37 GMT
content-type: application/javascript
access-control-allow-origin: *
cf-bgj: minify
cf-polished: origSize=279
etag: W/"63f74a6a-117"
last-modified: Thu, 23 Feb 2023 11:13:46 GMT
cache-control: max-age=14400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h56TwjxbmXhk5KhvORzFQI0ogqcKgzLTMFSiEg9eCeEot8%2FXrjtOTV0r0%2ByAiBMyLtwuTqSLR1%2FT9oiIPzk1BasW%2BOVKQZLN%2Bw7xkWVbBI9o0TyLzqljZL%2BtaPmV5BdDzYUiKYVzFg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a43bb613a280b61-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cdn.content-loads.com/prod/landings/assets/layoutCinema3/layoutCinema3/fonts/mulish/mulish-800italic.woff2 | 104.26.8.128 | 200 OK | 17 kB |
URL HTTP/2cdn.content-loads.com/prod/landings/assets/layoutCinema3/layoutCinema3/fonts/mulish/mulish-800italic.woff2 IP104.26.8.128:0
File typeWeb Open Font Format (Version 2), TrueType, length 17372, version 1.0\012- data Hashc02fb7419b8629666bf2ccc0a5177e3d b70b21a3e6e55fbcbae137a3cbb4e05371c2bab6 70789bd70be9b6d68acd51063e499d6fe5e7fe53a654dab4fb00a8cf5bfe3637
GET /prod/landings/assets/layoutCinema3/layoutCinema3/fonts/mulish/mulish-800italic.woff2 HTTP/1.1
Host: cdn.content-loads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://forever-stream.com
Connection: keep-alive
Referer: https://cdn.content-loads.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Mar 2023 15:04:37 GMT
content-type: application/octet-stream
content-length: 17372
last-modified: Thu, 23 Feb 2023 11:13:46 GMT
etag: "63f74a6a-43dc"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HDWXr7hHn2tdWFsN1bKsN44lqdqIohxR%2BzwqaFXih4VF0SkiMd%2BNTAKIGXMKKxH8Jd%2F1YZ7FbYMqV1EVVcrdzCqG040ChzSFPPk4VmavCta3Yg5zewmw3MG83bU7ykg5YOvS%2FYm%2BfQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a43bb62abf20b61-OSL
X-Firefox-Spdy: h2
|
|
| cdn.content-loads.com/prod/landings/nb_no/streaming-club/images/cbc4798f289304647bdf758ea189b176.jpg | 104.26.8.128 | 200 OK | 1.5 MB |
URL HTTP/2cdn.content-loads.com/prod/landings/nb_no/streaming-club/images/cbc4798f289304647bdf758ea189b176.jpg IP104.26.8.128:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], progressive, precision 8, 1920x1258, components 3\012- data Size1.5 MB (1485691 bytes) Hashcbc4798f289304647bdf758ea189b176 62d53e8027b42ed2c5e11ed1686cc049949ae7c5 68ca5fdb676eb5b7f6a7c9542c5629377abd184fc9022853acc152f127f5117f
GET /prod/landings/nb_no/streaming-club/images/cbc4798f289304647bdf758ea189b176.jpg HTTP/1.1
Host: cdn.content-loads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Mar 2023 15:04:37 GMT
content-type: image/jpeg
content-length: 1485691
last-modified: Tue, 22 Nov 2022 09:52:10 GMT
etag: "637c9bca-16ab7b"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U5yVEvPptf1zaGAuTTqIR3sHZS5bOzx56pw84mftO6ZQaCumpZcAUIOZSoCQDxEtPumcEhbJBwnNOieDEOVAtW4uzKxR2EIAnX3Kw6Ijye0YqGr5An4QLRkJFLUyGvfB8z1RVpIzVQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a43bb629be10b61-OSL
X-Firefox-Spdy: h2
|
|
| cdn.content-loads.com/prod/landings/nb_no/streaming-club/images/ae126dcdf8581afd4f5287e47a865c4b.png | 104.26.8.128 | 200 OK | 917 B |
URL HTTP/2cdn.content-loads.com/prod/landings/nb_no/streaming-club/images/ae126dcdf8581afd4f5287e47a865c4b.png IP104.26.8.128:0
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data Hashae126dcdf8581afd4f5287e47a865c4b 467a70ace4e8ba22c6d060de9a51041158c93d0f 584e53768bb90991e7b60eb7ecc2c5d9c26dd9a4f782a104030348c9b82cf473
GET /prod/landings/nb_no/streaming-club/images/ae126dcdf8581afd4f5287e47a865c4b.png HTTP/1.1
Host: cdn.content-loads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Mar 2023 15:04:37 GMT
content-type: image/png
content-length: 917
last-modified: Tue, 22 Nov 2022 09:52:10 GMT
etag: "637c9bca-395"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R03xZ3vR7jykPKIFVWZsyBMOl6OsUByi0y8hKEJJyBAlNaJ9Daj8NhGLdo%2BT3zMxuaA%2F1LW4fuKdpmqx8wkCb1DD%2FV4xBhnglb1ZJWr01tTnk%2FRDtTaFuFtUCuWViLdEIo%2BU3RfTxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a43bb63bd480b61-OSL
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/analytics.js | 142.250.74.46 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.46:0
Hash78e1619c01f6f0caf3821f5437281223 c05686ad5fa7fe09f67e0eb0bd9fd90ddc5101ce 7ed8e9013ccd7d42383dee86560f929fb87dfddad9f3350c0e2d1d2ee47a13a8
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Tue, 07 Mar 2023 14:12:30 GMT
expires: Tue, 07 Mar 2023 16:12:30 GMT
cache-control: public, max-age=7200
age: 3127
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| script.hotjar.com/modules.7b2e1757f92981c931bc.js | 143.204.55.40 | 200 OK | 69 kB |
URL HTTP/2script.hotjar.com/modules.7b2e1757f92981c931bc.js IP143.204.55.40:0
File typeUnicode text, UTF-8 text, with very long lines (48829) Hash807e7ba96937b9d3444a04e81edfd519 738421c8b7488c5734f311244648409b803ad365 54432875f06b58ac8000a340ce09f86d1a6e19b01a8ca923138f676236cc2108
GET /modules.7b2e1757f92981c931bc.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 68735
date: Tue, 07 Mar 2023 14:14:07 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "807e7ba96937b9d3444a04e81edfd519"
last-modified: Tue, 07 Mar 2023 14:13:48 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vvX5QNVSB20I7aDVokKe1cOpiDBupoE4PkmmhafhQQN9VdCTwSDaBw==
age: 3030
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash5a5ffd15937290b01c6440b1c62e0521 cfc46cb33cd50e11dedfbfe641713413bc0b6749 1f4515613d7a23a0f6572298f97291e7220f99e4f83fd9f22a7654d4a228caa2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F4515613D7A23A0F6572298F97291E7220F99E4F83FD9F22A7654D4A228CAA2"
Last-Modified: Sun, 05 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5653
Expires: Tue, 07 Mar 2023 16:38:50 GMT
Date: Tue, 07 Mar 2023 15:04:37 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash5a5ffd15937290b01c6440b1c62e0521 cfc46cb33cd50e11dedfbfe641713413bc0b6749 1f4515613d7a23a0f6572298f97291e7220f99e4f83fd9f22a7654d4a228caa2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F4515613D7A23A0F6572298F97291E7220F99E4F83FD9F22A7654D4A228CAA2"
Last-Modified: Sun, 05 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5653
Expires: Tue, 07 Mar 2023 16:38:50 GMT
Date: Tue, 07 Mar 2023 15:04:37 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash5a5ffd15937290b01c6440b1c62e0521 cfc46cb33cd50e11dedfbfe641713413bc0b6749 1f4515613d7a23a0f6572298f97291e7220f99e4f83fd9f22a7654d4a228caa2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F4515613D7A23A0F6572298F97291E7220F99E4F83FD9F22A7654D4A228CAA2"
Last-Modified: Sun, 05 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5653
Expires: Tue, 07 Mar 2023 16:38:50 GMT
Date: Tue, 07 Mar 2023 15:04:37 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash5a5ffd15937290b01c6440b1c62e0521 cfc46cb33cd50e11dedfbfe641713413bc0b6749 1f4515613d7a23a0f6572298f97291e7220f99e4f83fd9f22a7654d4a228caa2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F4515613D7A23A0F6572298F97291E7220F99E4F83FD9F22A7654D4A228CAA2"
Last-Modified: Sun, 05 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5653
Expires: Tue, 07 Mar 2023 16:38:50 GMT
Date: Tue, 07 Mar 2023 15:04:37 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash5a5ffd15937290b01c6440b1c62e0521 cfc46cb33cd50e11dedfbfe641713413bc0b6749 1f4515613d7a23a0f6572298f97291e7220f99e4f83fd9f22a7654d4a228caa2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F4515613D7A23A0F6572298F97291E7220F99E4F83FD9F22A7654D4A228CAA2"
Last-Modified: Sun, 05 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5653
Expires: Tue, 07 Mar 2023 16:38:50 GMT
Date: Tue, 07 Mar 2023 15:04:37 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3389a930-6e96-43f6-92b6-997fabeb27da.jpeg | 34.120.237.76 | 200 OK | 7.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3389a930-6e96-43f6-92b6-997fabeb27da.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashc229e9be4ad878528d3be67e4c05e7b1 03da37d1ac086a0fe3c6415cc297a6a38659db46 13927a535230f45e8fe13412b7d5a3a63f253aca91ac8e4f0c78f1dab289d4d3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3389a930-6e96-43f6-92b6-997fabeb27da.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7507
x-amzn-requestid: b14d1930-331a-4c89-8f32-13fd0107655a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BK_C1GAsIAMFqoQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64011211-67b4ba2644683bba365394d5;Sampled=0
x-amzn-remapped-date: Thu, 02 Mar 2023 21:16:01 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: Wp1rR0UWjbTknA1X_yAiAe51-osWvi2_Snv6NNgi-q9xod1I9W6Qcw==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 58b8655e3ea662bad02cac6b9d4c88ba.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Mar 2023 04:06:35 GMT
age: 39482
etag: "03da37d1ac086a0fe3c6415cc297a6a38659db46"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac192c39-be71-4b23-af6f-d0922c402521.jpeg | 34.120.237.76 | 200 OK | 6.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac192c39-be71-4b23-af6f-d0922c402521.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashe4a8d319b1ada8f22e8a1874033aba2c 3afc8111b03b662e88e61f4991a20a90d7d4f973 fca961af0737a3f0caa3a8d5762a309b871f54d0c8bd0e6ab4efdee4cf2fa462
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac192c39-be71-4b23-af6f-d0922c402521.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6282
x-amzn-requestid: 7f17d7b2-eff8-4e36-a0b6-661862d08620
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BYOHQGtNIAMFp8A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64065d61-18f0b0196b949829744dae4c;Sampled=0
x-amzn-remapped-date: Mon, 06 Mar 2023 21:38:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: 18MDurmgerNTDpqnJEoxM5SUxCRIIpv7QKiUF1qESIQ7S_myX7CIKA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 d15b6a95f7c8298444f59a99d8027cec.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Mar 2023 21:59:56 GMT
age: 61482
etag: "3afc8111b03b662e88e61f4991a20a90d7d4f973"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8e9d3719-c918-44cb-8546-6929c5bebc79.jpeg | 34.120.237.76 | 200 OK | 7.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8e9d3719-c918-44cb-8546-6929c5bebc79.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash28063b72ccbc658caa4705a87e7a4e12 35a9f5d55ffadd16548d61c99d59e426dd11ce21 a9a2c8104c6c8454eff30437c96b672e230b073623f33a67614fe4fa3ba0645d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8e9d3719-c918-44cb-8546-6929c5bebc79.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7235
x-amzn-requestid: 17b741c5-3911-46a5-b22d-17ef50381ad4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BWO15EPHIAMFx-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640591bf-58dbdf76597432b9505f5805;Sampled=0
x-amzn-remapped-date: Mon, 06 Mar 2023 07:09:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: IYw6V_NejqrqRl4UmaUhYInv69UZcaqm8ytploOryAw3Gz4jyJNbdQ==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b618c0f73dc30c968057784ed0185d7a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Mar 2023 07:18:15 GMT
age: 27983
etag: "35a9f5d55ffadd16548d61c99d59e426dd11ce21"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0e3c14e5-22bb-45cb-88ea-f02e2c9a3090.jpeg | 34.120.237.76 | 200 OK | 3.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0e3c14e5-22bb-45cb-88ea-f02e2c9a3090.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashe6edb15b0628347e7e7064affe077331 c64ec1ad9bbbed800c3560cbdbe1631fbe5f9e26 56c482b858cef1eb56a47dc54b298c31c2dd85cacdc748cea30b3d74a3cda99b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0e3c14e5-22bb-45cb-88ea-f02e2c9a3090.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3359
x-amzn-requestid: c884d077-cb85-41c5-adcb-2baac3350d4e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BYOuYHNJIAMFUig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64065e5b-74ab80fe0f96e85957d1a0f3;Sampled=0
x-amzn-remapped-date: Mon, 06 Mar 2023 21:42:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: GRGivQ_U_5e7EnFMlr0hq-lyRJBfR55XHGsDTM_nOOBWq-qq1zobTQ==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 82c2ab57bc9900898383f6b70681b9e6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Mar 2023 22:32:24 GMT
age: 59534
etag: "c64ec1ad9bbbed800c3560cbdbe1631fbe5f9e26"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F854c41b2-cfb4-4762-9ada-143a1a51438c.jpeg | 34.120.237.76 | 200 OK | 8.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F854c41b2-cfb4-4762-9ada-143a1a51438c.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash0d9e542d11eb3e8eaf08c83e0d72ea74 3113bde9c7ab14701fc4dbc39eec955b30d70150 c677d4b6fc6cf9c120e4f1844cf4605aeb6c7902fdde34ae21258fbb64d0f79b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F854c41b2-cfb4-4762-9ada-143a1a51438c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8512
x-amzn-requestid: 9f7f00c0-dfb4-4b72-a4be-1a5f3c6f2401
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BYNhZHU4oAMFTsg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64065c6f-5b1f26a475702ce913902e66;Sampled=0
x-amzn-remapped-date: Mon, 06 Mar 2023 21:34:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: 11j839pvpLCc9CuKArWhRNy_WgpH8Gf5wWGj50n1z8REpfhTqnPfFQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 ef8f66c83aecd87910ce2e1153544a20.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Mar 2023 22:11:18 GMT
etag: "3113bde9c7ab14701fc4dbc39eec955b30d70150"
content-type: image/jpeg
age: 60800
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd4d400fe-c6a9-4998-bd0c-22271ed5bede.jpeg | 34.120.237.76 | 200 OK | 9.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd4d400fe-c6a9-4998-bd0c-22271ed5bede.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash7ec4f2da6f73f59d9a2493697cbaec8c 3513d0fa932a2cf6ec0cf948cfd6e9c67e450824 cbe6ab8f36271592c0febfa90fe92c88d96dce40197e66cb7c06470bf99eccde
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd4d400fe-c6a9-4998-bd0c-22271ed5bede.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9515
x-amzn-requestid: b2c70ebf-087b-4adf-bc0d-d657586581cb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: A_J1hHdLoAMFQKA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63fc5689-632acdce4082512541dc8c1a;Sampled=0
x-amzn-remapped-date: Mon, 27 Feb 2023 07:06:49 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 9IQZWv-0fN7tGMmzg02TvepIAwFovvh_QLoCzFyGokcjHvj1YYEYhA==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 0906d4887f6625f4a4467d8d4fd268d2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Mar 2023 22:46:44 GMT
age: 58674
etag: "3513d0fa932a2cf6ec0cf948cfd6e9c67e450824"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| event.secureanalytic.com/register/event_log/3mg6wlr7e1 | 172.64.104.16 | 200 OK | 0 B |
URL HTTP/2event.secureanalytic.com/register/event_log/3mg6wlr7e1 IP172.64.104.16:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /register/event_log/3mg6wlr7e1 HTTP/1.1
Host: event.secureanalytic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://forever-stream.com/
Origin: https://forever-stream.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Mar 2023 15:04:38 GMT
content-length: 0
access-control-allow-headers: content-type
access-control-expose-headers: Authorization, Link, X-Total-Count
access-control-allow-origin: https://forever-stream.com
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-max-age: 1800
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=khpXnXC8pCPhSsrc1QmKenSh70oc2ctoPQmjQDAU3%2B6cM3bjG4v%2FunPyn5CqKWoERRa%2FZ0cB1RKPInqkvj1fADEERaAVt4ZncYIgR3xIfkK9bfKtwdeMmUVWz%2Bs1maH5wQlIWuTLiSus%2B%2B8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7a43bb661c2771bc-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| event.secureanalytic.com/register/event_log/3mg6wlr7e1 | 172.64.104.16 | 200 OK | 0 B |
URL HTTP/2event.secureanalytic.com/register/event_log/3mg6wlr7e1 IP172.64.104.16:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /register/event_log/3mg6wlr7e1 HTTP/1.1
Host: event.secureanalytic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://forever-stream.com/
Origin: https://forever-stream.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Mar 2023 15:04:38 GMT
content-length: 0
access-control-allow-headers: content-type
access-control-expose-headers: Authorization, Link, X-Total-Count
access-control-allow-origin: https://forever-stream.com
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-max-age: 1800
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pY3q8%2BofiKYXJN8ns0sUFlzRKOAH8pG2BByhuXGynxueUBs1ygiB8cG1F9%2FS8qC8%2BS6YrrzTRlZbSTngKUYgzB8WnZb6XMCb1c84SGnBLxSK%2FehIT7tY1Bw26uxdVVuapp2kyiuvGMyfmyo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7a43bb662c3c71bc-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.r2m01.amazontrust.com/ | 54.230.80.227 | 200 OK | 471 B |
URL HTTP/1.1ocsp.r2m01.amazontrust.com/ IP54.230.80.227:0
Hashcf239190c167daa8d88fd5df61f7d736 c0643b99a1c1f060f2c56a209b280b8ba7cecd2f 01d910f9db3332771b199224d2b22d5ae068ee4f632d310c7130874fe24b59d8
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=88006
Date: Tue, 07 Mar 2023 15:04:38 GMT
Etag: "6405f902-1d7"
Expires: Wed, 08 Mar 2023 15:31:24 GMT
Last-Modified: Mon, 06 Mar 2023 14:30:26 GMT
Server: ECAcc (nya/1C3C)
X-Cache: Miss from cloudfront
Via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Z8uciFs_33PBIoEDMsNX8JWTn-BVNIAkhRX9HfJfkPPULrmUyiT7_A==
Age: 3658
|
|
| event.secureanalytic.com/register/event_log/3mg6wlr7e1 | 172.64.104.16 | 200 OK | 0 B |
URL HTTP/2event.secureanalytic.com/register/event_log/3mg6wlr7e1 IP172.64.104.16:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /register/event_log/3mg6wlr7e1 HTTP/1.1
Host: event.secureanalytic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://forever-stream.com/
Content-type: application/json
Origin: https://forever-stream.com
Content-Length: 109
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Mar 2023 15:04:38 GMT
content-length: 0
expires: 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
x-xss-protection: 1; mode=block
pragma: no-cache
referrer-policy: strict-origin-when-cross-origin
x-pushplatformapp-params:
content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src https://* data:; font-src 'self' data:
x-pushplatformapp-alert: pushPlatformApp.pushSubscription.deleted
x-frame-options: DENY
access-control-expose-headers: Authorization, Link, X-Total-Count
access-control-allow-origin: https://forever-stream.com
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-credentials: true
x-content-type-options: nosniff
feature-policy: geolocation 'none'; midi 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; fullscreen 'self'; payment 'none'
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jiXZKmty73as9dqyTGPmZVg7zy%2Fw1sLcKkgZFQHPhyC7DAubxxD%2BCSBssWbDTijaCrULqJ7ucM3VmSTaLOozvK5Shuo0%2BIHc%2BSi%2Bc0CmDmKg%2F1Pm%2FJM9bBdtahc%2BpjVKYR2P1noF3JdzAic%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7a43bb66dcd071bc-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| event.secureanalytic.com/register/event_log/3mg6wlr7e1 | 172.64.104.16 | 200 OK | 0 B |
URL HTTP/2event.secureanalytic.com/register/event_log/3mg6wlr7e1 IP172.64.104.16:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /register/event_log/3mg6wlr7e1 HTTP/1.1
Host: event.secureanalytic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://forever-stream.com/
Content-type: application/json
Origin: https://forever-stream.com
Content-Length: 148
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Mar 2023 15:04:38 GMT
content-length: 0
expires: 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
x-xss-protection: 1; mode=block
pragma: no-cache
referrer-policy: strict-origin-when-cross-origin
x-pushplatformapp-params:
content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src https://* data:; font-src 'self' data:
x-pushplatformapp-alert: pushPlatformApp.pushSubscription.deleted
x-frame-options: DENY
access-control-expose-headers: Authorization, Link, X-Total-Count
access-control-allow-origin: https://forever-stream.com
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-credentials: true
x-content-type-options: nosniff
feature-policy: geolocation 'none'; midi 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; fullscreen 'self'; payment 'none'
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jUCGdu1TGOf9k86ozE7dJGPDjUTU3%2FUgf0Hd6mePCn5dA6a8ES3IqUbPez3KYq%2ByAlP%2Ft3YouU8h4PC7UQB4h7JT84Ie72b1qF%2BcqILMEvF0QG%2Fyp8uQcAMr9nd%2Bzt1EdKTCsEmfEHNXts0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7a43bb66ece871bc-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| in.hotjar.com/api/v2/client/sites/1962630/visit-data?sv=6 |  176.34.148.185 | 200 OK | 0 B |
URL HTTP/2in.hotjar.com/api/v2/client/sites/1962630/visit-data?sv=6 IP176.34.148.185:0
POST /api/v2/client/sites/1962630/visit-data?sv=6 HTTP/1.1
Host: in.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 116
Origin: https://forever-stream.com
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Mar 2023 15:04:38 GMT
content-type: application/json
vary: Accept-Encoding
cache-control: no-cache, no-store
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cdn.content-loads.com/prod/landings/assets/layoutCinema3/layoutCinema3/styles/layout/layout.css | 104.26.8.128 | 200 OK | 0 B |
URL HTTP/2cdn.content-loads.com/prod/landings/assets/layoutCinema3/layoutCinema3/styles/layout/layout.css IP104.26.8.128:0
GET /prod/landings/assets/layoutCinema3/layoutCinema3/styles/layout/layout.css HTTP/1.1
Host: cdn.content-loads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Mar 2023 15:04:37 GMT
content-type: text/css
access-control-allow-origin: *
cf-bgj: minify
cf-polished: origSize=32605
etag: W/"63f74a6a-7f5d"
last-modified: Thu, 23 Feb 2023 11:13:46 GMT
cache-control: max-age=14400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2gh6tQmAkvtkQdBMgobL8KtvU3F2uVWwhg4UVJrqrRThnsxOPuNXa0fTrffrkSow9rHAMybY%2BMikrQo2Iw0gaycQGqqQNGmOZjVxi2y%2Bh5U08hD2%2FILoLcsuaKEz6WgcT51p%2BIMRvg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a43bb6119f80b61-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| forever-stream.com/nb_no/streaming-club?subid=a9930e5e-0b9f-4676-856e-4b8f4e746bee&networkid=200274&publisher=1280&isNewTr=1&stream=game-unpacking-(53619).rar |  104.21.48.82 | 200 OK | 0 B |
URL HTTP/2forever-stream.com/nb_no/streaming-club?subid=a9930e5e-0b9f-4676-856e-4b8f4e746bee&networkid=200274&publisher=1280&isNewTr=1&stream=game-unpacking-(53619).rar IP104.21.48.82:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /nb_no/streaming-club?subid=a9930e5e-0b9f-4676-856e-4b8f4e746bee&networkid=200274&publisher=1280&isNewTr=1&stream=game-unpacking-(53619).rar HTTP/1.1
Host: forever-stream.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Tue, 07 Mar 2023 15:04:37 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
set-cookie: product=0e3982bd1559d08e8610f056adf761fde2bcc64dca58a4af5e6a8c0c5056df52a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22product%22%3Bi%3A1%3Ba%3A1%3A%7Bs%3A9%3A%22productId%22%3Bi%3A1%3B%7D%7D; path=/; HttpOnly; SameSite=Lax
visitInfo::5308=869df38a365b68b2059f4b80d80adc6cd46d28dd254019b6b852ab46ecc73b6ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A5308%22%3Bi%3A1%3Ba%3A4%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22dc3fe70795a4c9b9b502f248ec4872a5%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200274%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221280%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22a9930e5e-0b9f-4676-856e-4b8f4e746bee%22%3B%7D%7D; path=/; HttpOnly; SameSite=Lax
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nj%2F9wCLcvYe1fmi1PrnLBFaA3w6C37Cyi0Jw0otbj42P9UNrS%2B7AeCuNFPyXFPFuXSuTzcmsU0S9H6d5Y57lTJVpwUlx%2BRXJv1Oe9LDwxLlERH4da4Ua09Ou31qtQP5YFMmVOXg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a43bb5e8e07b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| secureanalytic.com/scripts/push/script/02eyoyxdkz?url=forever-stream.com | 172.64.105.16 | 200 OK | 0 B |
URL HTTP/2secureanalytic.com/scripts/push/script/02eyoyxdkz?url=forever-stream.com IP172.64.105.16:0
GET /scripts/push/script/02eyoyxdkz?url=forever-stream.com HTTP/1.1
Host: secureanalytic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Mar 2023 15:04:37 GMT
content-type: application/javascript;charset=UTF-8
expires: 0
cache-control: max-age=14400, must-revalidate
x-xss-protection: 1; mode=block
pragma: no-cache
x-frame-options: DENY
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src https://* data:; font-src 'self' data:
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers, Accept-Encoding
x-content-type-options: nosniff
feature-policy: geolocation 'none'; midi 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; fullscreen 'self'; payment 'none'
cf-cache-status: HIT
age: 6583
last-modified: Tue, 07 Mar 2023 13:14:54 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZqJLIMZMvVmdhj1TE9%2FY60emDfUQwXMs%2BdvPK%2F3Vq59XiqzAT3sjlGOyeAz4p5yHl9vkcJiucyfG7J6P%2B4Jt3zkorWeH5eLWfS%2F0LkTAFAkEOQgrXFe7n%2FmJ5F3fqAGih5cKB9s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7a43bb638c0b23e3-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.content-loads.com/prod/landings/assets/common/common/dist/bundle.js | 104.26.8.128 | 200 OK | 0 B |
URL HTTP/2cdn.content-loads.com/prod/landings/assets/common/common/dist/bundle.js IP104.26.8.128:0
GET /prod/landings/assets/common/common/dist/bundle.js HTTP/1.1
Host: cdn.content-loads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Mar 2023 15:04:37 GMT
content-type: application/javascript
access-control-allow-origin: *
cf-bgj: minify
etag: W/"64072ccb-b01d"
last-modified: Tue, 07 Mar 2023 12:23:39 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1355
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DhbdLTz3EUXEo4VQj3J3IY8snKvHy%2BqLutYOTzFYADeV%2BrkiQLtzcpEpe7cKSWwHCJ1YdyhFdTEcwLu7Vl126M35NBpBJvGVPP09PZR6uZp4r0o3y6XiUnEw79kDyW%2F7koIUW3iQ3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a43bb6119fa0b61-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cdn.content-loads.com/prod/landings/assets/layoutCinema3/layoutCinema3/styles/brands/video.css | 104.26.8.128 | 200 OK | 0 B |
URL HTTP/2cdn.content-loads.com/prod/landings/assets/layoutCinema3/layoutCinema3/styles/brands/video.css IP104.26.8.128:0
GET /prod/landings/assets/layoutCinema3/layoutCinema3/styles/brands/video.css HTTP/1.1
Host: cdn.content-loads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Mar 2023 15:04:37 GMT
content-type: text/css
access-control-allow-origin: *
cf-bgj: minify
cf-polished: origSize=16357
etag: W/"63f74a6a-3fe5"
last-modified: Thu, 23 Feb 2023 11:13:46 GMT
cache-control: max-age=14400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z0YA8fc0pQghK8xxe4d%2FK5LBcYTucp3S6KJAUOLKzfOqVtamBhXat%2FrfrwLXEF4NuXWj9SHywa0YrPRGH2OkQhEeM5tqNsXUbfPN07gf1WO7Dmt6YNPyLINLpJgerdWN3Bej83XcHA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a43bb6119f90b61-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cdn.content-loads.com/prod/landings/assets/layoutCinema3/layoutCinema3/styles/main/styles.css | 104.26.8.128 | 200 OK | 0 B |
URL HTTP/2cdn.content-loads.com/prod/landings/assets/layoutCinema3/layoutCinema3/styles/main/styles.css IP104.26.8.128:0
GET /prod/landings/assets/layoutCinema3/layoutCinema3/styles/main/styles.css HTTP/1.1
Host: cdn.content-loads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forever-stream.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Mar 2023 15:04:37 GMT
content-type: text/css
access-control-allow-origin: *
cf-bgj: minify
cf-polished: origSize=88134
etag: W/"63f74a6a-15846"
last-modified: Thu, 23 Feb 2023 11:13:46 GMT
cache-control: max-age=14400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OURV7Uj4HaeEsNtniZVa%2FzPUrsJ3h4rb9kqSMsN%2B5xy9B1PyPn2ilHfRc8RqnzawyynHrjrCu2vTa4nWp5d20Gn3pIzs6C3yIcCniG%2FdFzsZUvIdb4zVCwQktUS%2Bi3C5Hn9m6PZ9wA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a43bb6119f20b61-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|