wwads.xyz/clk/S3FrWFhwWmtKR1hDZGVhU1Q3NFdoR2RJdDdKek51b2xvbEFaS3lCblh2YU5SRHB3WklUUFMrM1RmaUUyZHZxQUdRZjZMSEdLclk5S3dEZjVDNXJTbnlMNXE0dU9wdENIa0duZDhmbE1YbVNDTDNxeVJSZ0JrMi94ZzV1NEUrYkhVZzlDL1FFdmQwN0QyUFlhN3V1MFlkSlJHWHNYYmdRTUIvZ3dueGtOUjBqemZEcWtJS3R2eU1xbmV3bnJhcGN4MmVSRzhiZ28rcER2ZFlZSVdJbCtSQVdvV2QxU2IzWldaNDNtWnltWGorNUVXU25tOTJRWWxRbnBwaXdmaEovdzRkOE5ZSE8yV2dSZzg5dEZXbXZQTU1tSC9kYmFCckVIdi9lT094Ky9nY0FCWmZCMDVVRkR0K2hzOUhscyt3QmY
301 Moved Permanently 0 B URL HTTP/1.1 wwads.xyz/clk/S3FrWFhwWmtKR1hDZGVhU1Q3NFdoR2RJdDdKek51b2xvbEFaS3lCblh2YU5SRHB3WklUUFMrM1RmaUUyZHZxQUdRZjZMSEdLclk5S3dEZjVDNXJTbnlMNXE0dU9wdENIa0duZDhmbE1YbVNDTDNxeVJSZ0JrMi94ZzV1NEUrYkhVZzlDL1FFdmQwN0QyUFlhN3V1MFlkSlJHWHNYYmdRTUIvZ3dueGtOUjBqemZEcWtJS3R2eU1xbmV3bnJhcGN4MmVSRzhiZ28rcER2ZFlZSVdJbCtSQVdvV2QxU2IzWldaNDNtWnltWGorNUVXU25tOTJRWWxRbnBwaXdmaEovdzRkOE5ZSE8yV2dSZzg5dEZXbXZQTU1tSC9kYmFCckVIdi9lT094Ky9nY0FCWmZCMDVVRkR0K2hzOUhscyt3QmY
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /clk/S3FrWFhwWmtKR1hDZGVhU1Q3NFdoR2RJdDdKek51b2xvbEFaS3lCblh2YU5SRHB3WklUUFMrM1RmaUUyZHZxQUdRZjZMSEdLclk5S3dEZjVDNXJTbnlMNXE0dU9wdENIa0duZDhmbE1YbVNDTDNxeVJSZ0JrMi94ZzV1NEUrYkhVZzlDL1FFdmQwN0QyUFlhN3V1MFlkSlJHWHNYYmdRTUIvZ3dueGtOUjBqemZEcWtJS3R2eU1xbmV3bnJhcGN4MmVSRzhiZ28rcER2ZFlZSVdJbCtSQVdvV2QxU2IzWldaNDNtWnltWGorNUVXU25tOTJRWWxRbnBwaXdmaEovdzRkOE5ZSE8yV2dSZzg5dEZXbXZQTU1tSC9kYmFCckVIdi9lT094Ky9nY0FCWmZCMDVVRkR0K2hzOUhscyt3QmY HTTP/1.1
Host: wwads.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Mon, 12 Sep 2022 23:17:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 13 Sep 2022 00:17:02 GMT
Location: https://wwads.xyz/clk/S3FrWFhwWmtKR1hDZGVhU1Q3NFdoR2RJdDdKek51b2xvbEFaS3lCblh2YU5SRHB3WklUUFMrM1RmaUUyZHZxQUdRZjZMSEdLclk5S3dEZjVDNXJTbnlMNXE0dU9wdENIa0duZDhmbE1YbVNDTDNxeVJSZ0JrMi94ZzV1NEUrYkhVZzlDL1FFdmQwN0QyUFlhN3V1MFlkSlJHWHNYYmdRTUIvZ3dueGtOUjBqemZEcWtJS3R2eU1xbmV3bnJhcGN4MmVSRzhiZ28rcER2ZFlZSVdJbCtSQVdvV2QxU2IzWldaNDNtWnltWGorNUVXU25tOTJRWWxRbnBwaXdmaEovdzRkOE5ZSE8yV2dSZzg5dEZXbXZQTU1tSC9kYmFCckVIdi9lT094Ky9nY0FCWmZCMDVVRkR0K2hzOUhscyt3QmY
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=atttuZkVnh5gzoyp1qO6JbkiyCS4XnCcegYpREzpDZmbA%2FK1s5SUDkhY%2B7H6TVKcv3wnsOAPSETPnyN1CsWgWyEfU22u1kmR%2F5TvMbuLdBGpk9%2BzUBXQ9XI3LEg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 749c5ab00c60b4ee-OSL
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 12 Sep 2022 22:30:02 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 9ehAlR4ij8gbVlW3pPAcUegeAIWXNq1O9U3gbAA_q13pHJyoqdT9IQ==
Age: 2820
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 76d5eb597558e3dee0d99719d17e71e0
f3a0f3932fa8059f27dc9422d523b938fa9a7d09
d16de6cc9eb0e1297f53dc1137bb764bf5c21a7727be32ad05afebd1fe9501ed
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D16DE6CC9EB0E1297F53DC1137BB764BF5C21A7727BE32AD05AFEBD1FE9501ED"
Last-Modified: Sat, 10 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5479
Expires: Tue, 13 Sep 2022 00:48:21 GMT
Date: Mon, 12 Sep 2022 23:17:02 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 12 Sep 2022 07:17:13 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mqz4g-WhzlSi6yz66evRE-dj4wEFYUMF5K6yEGQEApGfnqPLNLbJrw==
age: 57590
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 12 Sep 2022 23:17:02 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Mon, 12 Sep 2022 22:56:07 GMT
Cache-Control: max-age=3600
Expires: Mon, 12 Sep 2022 23:54:31 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: GCOWcJdeKwZJbLUXf1sZNIjjvpaMmCbPko6DuOSBbaoRRlspszpDqw==
Age: 1255
ocsp.digicert.com/
200 OK 471 B IP
Hash cb674936db4af4be99c3c397eff8c6ae
de79d76bac3fae5799b0ff35ecc19360595dfb06
992b884b64f9f6fdb76a6ba91c48fed329325b95b99d8003b282879a52093c08
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4218
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 23:17:03 GMT
Last-Modified: Mon, 12 Sep 2022 22:06:45 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: N+lHcG0PyqppIrQ1eUZU/w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: vo+bfL/7vfF0FHKwRPdaH7xewy4=
ocsp.sectigo.com/
200 OK 471 B IP
Hash 3f85ffb01dc0ff6a14373b13812e8ff0
ff77c50c03241ef7580abea36a4b2862076307dd
4d5ea56120dbcb5995fde57d5bf6f54ec82f575b2518d0377c340e6d62efded1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 23:17:04 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 08 Sep 2022 14:56:43 GMT
Expires: Thu, 15 Sep 2022 14:56:42 GMT
Etag: "ff77c50c03241ef7580abea36a4b2862076307dd"
Cache-Control: max-age=228577,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 749c5abbace7b51e-OSL
cold.dailynox.com/625fcab5e79ecf00014334d4?pubid=60338f6279fcbe00012195b3&ref_id=20091230_31_2_19bd_6b2392_f28_160_631fbdef_5b5a2a9a_672231_0_0_64_64_0_2_2_0_0&source=19bd:672231
302 Found 374 B URL HTTP/1.1 cold.dailynox.com/625fcab5e79ecf00014334d4?pubid=60338f6279fcbe00012195b3&ref_id=20091230_31_2_19bd_6b2392_f28_160_631fbdef_5b5a2a9a_672231_0_0_64_64_0_2_2_0_0&source=19bd:672231
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document, ASCII text, with very long lines (372)
Hash e4991596ffe1566444d9d06e206a8fa6
9380d57e1d1fbe60d77e9e582b7e2fa59938babe
e645cbc9eeaec28941126259b4d5c1af2a1079bc539e6d31a2f412f1cef7d119
GET /625fcab5e79ecf00014334d4?pubid=60338f6279fcbe00012195b3&ref_id=20091230_31_2_19bd_6b2392_f28_160_631fbdef_5b5a2a9a_672231_0_0_64_64_0_2_2_0_0&source=19bd:672231 HTTP/1.1
Host: cold.dailynox.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://specialdeals.cyou/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Mon, 12 Sep 2022 23:17:04 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 374
Connection: keep-alive
Location: https://monitordecade.com/no/887219/18/?pubid=aff-no&pob=3&click_id=631fbdf0bda7ae0001ce0eb6&subid=RT-60338f6279fcbe00012195b3-19bd:672231&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=e017f90f3f1f40675c0d42c90c69ecac.1663024924&tp=
Set-Cookie: redhash=NjMxZmJkZjBiZGE3YWUwMDAxY2UwZWI2fDB8NjI1ZmNhYjVlNzllY2YwMDAxNDMzNGQ0fHw5NDNjZTdhZS1iZTRhLTQ0YjItOTcxYy1iMzRjZTYxZjhlYjN8MTY2MzAyNDYyNA==; Path=/; Domain=cold.dailynox.com; Expires=Tue, 12 Sep 2023 23:17:04 GMT; Secure; SameSite=None
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6776
Expires: Tue, 13 Sep 2022 01:10:00 GMT
Date: Mon, 12 Sep 2022 23:17:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6776
Expires: Tue, 13 Sep 2022 01:10:00 GMT
Date: Mon, 12 Sep 2022 23:17:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6776
Expires: Tue, 13 Sep 2022 01:10:00 GMT
Date: Mon, 12 Sep 2022 23:17:04 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F898fa8c6-1f06-4fa4-88d0-333a32c1a7a8.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F898fa8c6-1f06-4fa4-88d0-333a32c1a7a8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 019416755742a78ddf35671ba5eaccc7
ec2e96359ef3a236514cab21af80ea5b9420e9c3
a6b0e0ec56c2ce2f94dae8032e0deb297236c35f7a8928a14a254e3fdb2a255a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F898fa8c6-1f06-4fa4-88d0-333a32c1a7a8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10245
x-amzn-requestid: 25331636-a1cd-4ceb-84cc-fd85cfd8a861
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG23AGLIoAMFjFw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631904f9-6fbb23ec3dc9d55e344bc6d7;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 20:54:17 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UkNBQ0iwXl3OWeO5PDgT_DgkaU5q6jqSorpyircPEtEW2f--bWHqlg==
via: 1.1 536063cb28bfc05fcb7a78183dd89b72.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 22:17:40 GMT
age: 3564
etag: "ec2e96359ef3a236514cab21af80ea5b9420e9c3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77296a12-991a-4ab6-9ce0-05b3a82d6664.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77296a12-991a-4ab6-9ce0-05b3a82d6664.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8c1314c7778ea0d32e8c69dae0c38b6d
c4772b9b182f9f905fead84f3761fe296073ca65
5fc8dc23f9b4d150b834aa69b358edd9f9f5f449607df07d579df66098d8aac6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77296a12-991a-4ab6-9ce0-05b3a82d6664.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10366
x-amzn-requestid: c66a0e06-d45c-4d16-ba0c-bf6a2368cfc2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YVQPkH2RoAMFX2w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631ec730-5174741f2d86d3ea018e452f;Sampled=0
x-amzn-remapped-date: Mon, 12 Sep 2022 05:44:16 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 0ieBLVDdyIQuPO5pdM8wzjY2XwaMhLJhJWAUtsLfgiWTKVBTOws1tQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 21:58:04 GMT
etag: "c4772b9b182f9f905fead84f3761fe296073ca65"
content-type: image/jpeg
age: 4740
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2830e2cb-8887-441e-8c0c-906b8fbb2366.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2830e2cb-8887-441e-8c0c-906b8fbb2366.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c9ab2ec10c79b91d15edb1d1e3dc763c
744fee4a0baa22ba3aa352d60620a916972b47dd
f7bb66f5bb572d73f936fc74823f51ede1f2c4e309a939b39d9529ff8f757fbe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2830e2cb-8887-441e-8c0c-906b8fbb2366.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9945
x-amzn-requestid: a347749f-a63a-4533-a274-7151b9f235ff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YXcX8HAKoAMF5EQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631fa765-56cff18515b2a5b3397231df;Sampled=0
x-amzn-remapped-date: Mon, 12 Sep 2022 21:40:53 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: lZ3FmD1gM8YBgZNt97kuYSol1kj0GQqRjyLT_7715VtH9GR1WpMDxA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 21:42:20 GMT
age: 5684
etag: "744fee4a0baa22ba3aa352d60620a916972b47dd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb4acf448-2a96-49a3-8257-7743a38525f5.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb4acf448-2a96-49a3-8257-7743a38525f5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ae7d16fad4da4300a1953a916fb59688
488c58f73c81bb4d45e496c458fe3197a0884c26
4d4946932d53caad6e97bcc66527bd9cad658c0cf6f4215d01943b8a9e832959
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb4acf448-2a96-49a3-8257-7743a38525f5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7720
x-amzn-requestid: 7670a969-cb9c-4583-8455-10f7512ee9c6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YT9YJG__oAMF4YA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631e429a-674ef5a4727826ab0d60529e;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 20:18:34 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: OOCryyfLht-3ebVn-5aWtQI_JnVkWxMGggv07cUoomDlgb5ogru7vg==
via: 1.1 d16c3f15bd14953a9d4109eaaa991de2.cloudfront.net (CloudFront), 1.1 ead78c395f4bede3ec6cd7ea180e3d3a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 22:01:55 GMT
age: 32317
etag: "488c58f73c81bb4d45e496c458fe3197a0884c26"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0afb7a6-50b1-4622-b497-1cd872b91e83.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0afb7a6-50b1-4622-b497-1cd872b91e83.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1b3f38b1294f2f10537cba5a856ed04a
2a6c1f297d97f4248d77eba6736b4d937bda582b
9c8de94c3cb87a1a2c967b010c715387bbc09fa92dd67bab988d367603a0cece
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0afb7a6-50b1-4622-b497-1cd872b91e83.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12838
x-amzn-requestid: ad4ebca9-e16d-4fce-ab16-b3b3477c8c06
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X3rT7H86IAMF1kA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6312f27f-5bf5c45d6c2be4973f0f946a;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 06:21:51 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 0y9HXQIrrRjMoaTo3_00lFQMJ5eIywY_22cbVXml0RZjpvfQVctKTg==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 14:00:55 GMT
age: 33369
etag: "2a6c1f297d97f4248d77eba6736b4d937bda582b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5bb76515-eb77-4f38-aae2-75a885833991.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5bb76515-eb77-4f38-aae2-75a885833991.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 557695ec8ffeebb0272c099542a14ace
ad627b434e1c3b693d8636675bcea0f8794e0dc2
4d79c7830caa73b921d6abaa97771ab1f4dc8fd709597f01ba04c268c03b6157
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5bb76515-eb77-4f38-aae2-75a885833991.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10407
x-amzn-requestid: 85df5ad9-f229-4d33-90b9-5dd28c77578a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YH396F2SIAMFnGA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63196d25-3ee08f1e27cd37e96dba0f40;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 04:18:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Oep2UJdadBnTBuCy7CexUcezT0cCvm_9hroZnV-UrC9lQQxwUc4rkw==
via: 1.1 07c02ae6c53d85283eb15380264d9998.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 05:35:24 GMT
age: 63700
etag: "ad627b434e1c3b693d8636675bcea0f8794e0dc2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 1.3 kB IP
Hash 298cc68c1e1671c625afe80f16339a68
8bf5fb2cda7a3b3603fcb3544ae57b17a765d17a
82a6290a304da90de685c9b35ff09145fbf34f97b3ca6bec864d321ebb3b2262
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 23:17:04 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 10 Sep 2022 07:19:12 GMT
Expires: Sat, 17 Sep 2022 07:19:11 GMT
Etag: "98d09dec8e607b2c62d64e5c9b8d84c0c4596aa5"
Cache-Control: max-age=373926,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 749c5abdbe38b51e-OSL
monitordecade.com/no/887219/18/?pubid=aff-no&pob=3&click_id=631fbdf0bda7ae0001ce0eb6&subid=RT-60338f6279fcbe00012195b3-19bd:672231&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=e017f90f3f1f40675c0d42c90c69ecac.1663024924&tp=
200 OK 27 kB URL HTTP/1.1 monitordecade.com/no/887219/18/?pubid=aff-no&pob=3&click_id=631fbdf0bda7ae0001ce0eb6&subid=RT-60338f6279fcbe00012195b3-19bd:672231&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=e017f90f3f1f40675c0d42c90c69ecac.1663024924&tp=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (743)
Hash 14d47eba6723321bf0e95f3e1143f81d
28e5cc59b6f754c87b6cdec862f537cc73b317e8
d7fa9e593c8af6b134428fe2b9d8f4323e71e9acc0b7cbccd0abc522916523cc
GET /no/887219/18/?pubid=aff-no&pob=3&click_id=631fbdf0bda7ae0001ce0eb6&subid=RT-60338f6279fcbe00012195b3-19bd:672231&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=e017f90f3f1f40675c0d42c90c69ecac.1663024924&tp= HTTP/1.1
Host: monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://specialdeals.cyou/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 23:17:04 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
X-Powered-By: PHP/7.2.34
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
monitordecade.com/no/887219/18/assets/bootstrap/css/bootstrap.min.css
200 OK 161 kB URL HTTP/1.1 monitordecade.com/no/887219/18/assets/bootstrap/css/bootstrap.min.css
IP
File type ASCII text, with very long lines (65326)
Size 161 kB (161364 bytes)
Hash 3b3bcd00c478e36affb10ade5ad7083e
b0a7f2136184bdf441d8f9d6d77a396847e35a57
355391583f29e8e4c3cbba984916f2ec70744cb6ea475b2591549229799121e1
GET /no/887219/18/assets/bootstrap/css/bootstrap.min.css HTTP/1.1
Host: monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/no/887219/18/?pubid=aff-no&pob=3&click_id=631fbdf0bda7ae0001ce0eb6&subid=RT-60338f6279fcbe00012195b3-19bd:672231&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=e017f90f3f1f40675c0d42c90c69ecac.1663024924&tp=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 23:17:04 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:12:00 GMT
ETag: "27654-5dbd15bf1789c"
Accept-Ranges: bytes
Content-Length: 161364
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6526c70eb74c821b7a95487ad9a4e13d
0b8c610a7755437ab815b845f52cbb27e6c95008
059d15ca6ac7cb1830286ae635731e03b56c01d7d050291dabe2b3f3db866c9a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 23:17:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
monitordecade.com/no/887219/18/assets/bootstrap/js/bootstrap.min.js
200 OK 84 kB URL HTTP/1.1 monitordecade.com/no/887219/18/assets/bootstrap/js/bootstrap.min.js
IP
File type ASCII text, with very long lines (65299)
Hash f81d0a1705048649befc8b595e455a94
aec551e4d573463088fca7d14fb644eb389f1839
b0212543cc5a4a0a31c1b5a9d1e8973261992116b4cfde3e7dfcf33b4e81a97b
GET /no/887219/18/assets/bootstrap/js/bootstrap.min.js HTTP/1.1
Host: monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/no/887219/18/?pubid=aff-no&pob=3&click_id=631fbdf0bda7ae0001ce0eb6&subid=RT-60338f6279fcbe00012195b3-19bd:672231&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=e017f90f3f1f40675c0d42c90c69ecac.1663024924&tp=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 23:17:04 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:12:00 GMT
ETag: "1499a-5dbd15bedf62a"
Accept-Ranges: bytes
Content-Length: 84378
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6526c70eb74c821b7a95487ad9a4e13d
0b8c610a7755437ab815b845f52cbb27e6c95008
059d15ca6ac7cb1830286ae635731e03b56c01d7d050291dabe2b3f3db866c9a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 23:17:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
monitordecade.com/no/887219/18/assets/css/Features-Boxed.css
200 OK 1.4 kB URL HTTP/1.1 monitordecade.com/no/887219/18/assets/css/Features-Boxed.css
IP
Hash bca73cd8a0ba61c5b234e25f8d15dc60
a5be1b131e62a9369420bdf9bfa944f1a962a0ab
0adf29bc7f36349628fc07f09349bd0a7ed8ccf3cb10b98e5ec8d96618a47454
GET /no/887219/18/assets/css/Features-Boxed.css HTTP/1.1
Host: monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/no/887219/18/?pubid=aff-no&pob=3&click_id=631fbdf0bda7ae0001ce0eb6&subid=RT-60338f6279fcbe00012195b3-19bd:672231&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=e017f90f3f1f40675c0d42c90c69ecac.1663024924&tp=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 23:17:04 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:11:32 GMT
ETag: "547-5dbd15a4002fb"
Accept-Ranges: bytes
Content-Length: 1351
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
monitordecade.com/no/887219/18/assets/css/Registration-Form-with-Photo.css
200 OK 1.5 kB URL HTTP/1.1 monitordecade.com/no/887219/18/assets/css/Registration-Form-with-Photo.css
IP
Hash 41db4b60b519edd1a4204aaef6e0ae82
c45a01c3e3d7f0523f035e8efebaec4e4c3c33b3
ca5b0e60d8aab8ce5ebf327a24bc5d209ac94d0c051614bc5893f3d0b958bf6f
GET /no/887219/18/assets/css/Registration-Form-with-Photo.css HTTP/1.1
Host: monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/no/887219/18/?pubid=aff-no&pob=3&click_id=631fbdf0bda7ae0001ce0eb6&subid=RT-60338f6279fcbe00012195b3-19bd:672231&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=e017f90f3f1f40675c0d42c90c69ecac.1663024924&tp=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 23:17:04 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:11:32 GMT
ETag: "5e9-5dbd15a4492f5"
Accept-Ranges: bytes
Content-Length: 1513
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
monitordecade.com/no/887219/18/assets/css/Header-Blue.css
200 OK 4.5 kB URL HTTP/1.1 monitordecade.com/no/887219/18/assets/css/Header-Blue.css
IP
Hash 08e4586a051ce4259282ed835fb549cb
a5c4c4eb5f170743ec854de67713cf536dcde317
3da104d1e5c7a203fe3e4d882303b4a1c01fbbf97c3324cb94f9abb45f1778e4
GET /no/887219/18/assets/css/Header-Blue.css HTTP/1.1
Host: monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/no/887219/18/?pubid=aff-no&pob=3&click_id=631fbdf0bda7ae0001ce0eb6&subid=RT-60338f6279fcbe00012195b3-19bd:672231&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=e017f90f3f1f40675c0d42c90c69ecac.1663024924&tp=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 23:17:04 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:11:31 GMT
ETag: "1165-5dbd15a34858e"
Accept-Ranges: bytes
Content-Length: 4453
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
monitordecade.com/no/887219/18/assets/css/styles.css
200 OK 1.3 kB URL HTTP/1.1 monitordecade.com/no/887219/18/assets/css/styles.css
IP
Hash 1b73e06fd57a16be72bdcbe4db928111
8fa7e8ebba058e2e313ead4d60d9f75e082e35da
ad800a02b58f7f60a74021de5cb75c736a7d47d65196583e11d98351a27631d3
GET /no/887219/18/assets/css/styles.css HTTP/1.1
Host: monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/no/887219/18/?pubid=aff-no&pob=3&click_id=631fbdf0bda7ae0001ce0eb6&subid=RT-60338f6279fcbe00012195b3-19bd:672231&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=e017f90f3f1f40675c0d42c90c69ecac.1663024924&tp=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 23:17:04 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:11:31 GMT
ETag: "541-5dbd15a30e3dc"
Accept-Ranges: bytes
Content-Length: 1345
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6526c70eb74c821b7a95487ad9a4e13d
0b8c610a7755437ab815b845f52cbb27e6c95008
059d15ca6ac7cb1830286ae635731e03b56c01d7d050291dabe2b3f3db866c9a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 23:17:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6526c70eb74c821b7a95487ad9a4e13d
0b8c610a7755437ab815b845f52cbb27e6c95008
059d15ca6ac7cb1830286ae635731e03b56c01d7d050291dabe2b3f3db866c9a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 23:17:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
monitordecade.com/no/887219/18/assets/js/custom.js
404 Not Found 230 B URL HTTP/1.1 monitordecade.com/no/887219/18/assets/js/custom.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 8bcaf8004bb86ae76dc5c8f050c523bf
c9afdabaf20280b772eb6b67c29fbab82be4acb7
580e0d13a8bfe21449d88f8d4a2cd0003e827d36e9dca69a91343435bc9cf83f
GET /no/887219/18/assets/js/custom.js HTTP/1.1
Host: monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/no/887219/18/?pubid=aff-no&pob=3&click_id=631fbdf0bda7ae0001ce0eb6&subid=RT-60338f6279fcbe00012195b3-19bd:672231&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=e017f90f3f1f40675c0d42c90c69ecac.1663024924&tp=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Mon, 12 Sep 2022 23:17:04 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Content-Length: 230
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ad439cab56126bcc402ee9f92365a209
a4b48a9a733c53cbc7020e190b8c787e1f80f55a
d0e2e52b66a8dec8c57092ec332f452a7348941d778d7b4686ca32696aabd065
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 23:17:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6526c70eb74c821b7a95487ad9a4e13d
0b8c610a7755437ab815b845f52cbb27e6c95008
059d15ca6ac7cb1830286ae635731e03b56c01d7d050291dabe2b3f3db866c9a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 23:17:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
monitordecade.com/no/887219/18/assets/js/jquery.min.js
200 OK 90 kB URL HTTP/1.1 monitordecade.com/no/887219/18/assets/js/jquery.min.js
IP
File type ASCII text, with very long lines (65451)
Hash 12b69d0ae6c6f0c42942ae6da2896e84
d2cc8d43ce1c854b1172e42b1209502ad563db83
6150a35c0f486c46cadf0e230e2aa159c7c23ecfbb5611b64ee3f25fcbff341f
GET /no/887219/18/assets/js/jquery.min.js HTTP/1.1
Host: monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/no/887219/18/?pubid=aff-no&pob=3&click_id=631fbdf0bda7ae0001ce0eb6&subid=RT-60338f6279fcbe00012195b3-19bd:672231&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=e017f90f3f1f40675c0d42c90c69ecac.1663024924&tp=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 23:17:04 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:11:38 GMT
ETag: "15d83-5dbd15a9a9e75"
Accept-Ranges: bytes
Content-Length: 89475
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6526c70eb74c821b7a95487ad9a4e13d
0b8c610a7755437ab815b845f52cbb27e6c95008
059d15ca6ac7cb1830286ae635731e03b56c01d7d050291dabe2b3f3db866c9a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 23:17:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
monitordecade.com/no/887219/18/assets/img/t18-airpods-testi-profile-1.png
200 OK 8.0 kB URL HTTP/1.1 monitordecade.com/no/887219/18/assets/img/t18-airpods-testi-profile-1.png
IP
File type PNG image data, 136 x 137, 8-bit colormap, non-interlaced\012- data
Hash 698ca5d31e0067412a476ed920e80000
92fff82450ffcfddcb9ce1f7ff3a944a24a6f66c
e4108d60373a47f7aeea61eac2f45ea0114bcc48ba165bbbd68526bc6f3091c7
GET /no/887219/18/assets/img/t18-airpods-testi-profile-1.png HTTP/1.1
Host: monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/no/887219/18/?pubid=aff-no&pob=3&click_id=631fbdf0bda7ae0001ce0eb6&subid=RT-60338f6279fcbe00012195b3-19bd:672231&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=e017f90f3f1f40675c0d42c90c69ecac.1663024924&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 23:17:04 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:11:40 GMT
ETag: "1f1a-5dbd15ac344c8"
Accept-Ranges: bytes
Content-Length: 7962
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
monitordecade.com/no/887219/18/assets/img/t18-airpods-testi-4-stars.png
200 OK 638 B URL HTTP/1.1 monitordecade.com/no/887219/18/assets/img/t18-airpods-testi-4-stars.png
IP
File type PNG image data, 135 x 33, 8-bit colormap, non-interlaced\012- data
Hash 4917699c62ac8395be8cfd1356a6ca1e
da464e68f6635280fb11a3bf81ff8a7f44c24e67
0f780e24aeacba722a837421d65b47ce4bb374294d771d250ee892d193042998
GET /no/887219/18/assets/img/t18-airpods-testi-4-stars.png HTTP/1.1
Host: monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/no/887219/18/?pubid=aff-no&pob=3&click_id=631fbdf0bda7ae0001ce0eb6&subid=RT-60338f6279fcbe00012195b3-19bd:672231&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=e017f90f3f1f40675c0d42c90c69ecac.1663024924&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 23:17:04 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:11:43 GMT
ETag: "27e-5dbd15ae73028"
Accept-Ranges: bytes
Content-Length: 638
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
monitordecade.com/no/887219/18/assets/img/t18-airpods-top-fi-flag.png
200 OK 1.9 kB URL HTTP/1.1 monitordecade.com/no/887219/18/assets/img/t18-airpods-top-fi-flag.png
IP
File type PNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced\012- data
Hash 8199d970a52dbcc125af18d57ed26f6e
eaaf8c57b51e26f1a89246e9adcd88f626f0f0bb
46abac93d04e5d13aef0a6acbd10396397d86af5d3a4531ee89cca3053c7d42c
GET /no/887219/18/assets/img/t18-airpods-top-fi-flag.png HTTP/1.1
Host: monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/no/887219/18/?pubid=aff-no&pob=3&click_id=631fbdf0bda7ae0001ce0eb6&subid=RT-60338f6279fcbe00012195b3-19bd:672231&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=e017f90f3f1f40675c0d42c90c69ecac.1663024924&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 23:17:04 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:11:52 GMT
ETag: "755-5dbd15b799114"
Accept-Ranges: bytes
Content-Length: 1877
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
monitordecade.com/no/887219/18/assets/img/t18-airpods-testi-5-stars.png
200 OK 600 B URL HTTP/1.1 monitordecade.com/no/887219/18/assets/img/t18-airpods-testi-5-stars.png
IP
File type PNG image data, 136 x 33, 8-bit colormap, non-interlaced\012- data
Hash f94b5ab95081aab8457010108abf1214
255b186650d1663657f19b248885af6f09f69973
5ddf9b69385b4567de37a7dfa7945a10bddf942a7d27f9e4e6282879152167e7
GET /no/887219/18/assets/img/t18-airpods-testi-5-stars.png HTTP/1.1
Host: monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/no/887219/18/?pubid=aff-no&pob=3&click_id=631fbdf0bda7ae0001ce0eb6&subid=RT-60338f6279fcbe00012195b3-19bd:672231&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=e017f90f3f1f40675c0d42c90c69ecac.1663024924&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 23:17:04 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:11:49 GMT
ETag: "258-5dbd15b473a45"
Accept-Ranges: bytes
Content-Length: 600
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
monitordecade.com/no/887219/18/assets/img/t18-airpods-top-diamond-icn-3.png
200 OK 418 B URL HTTP/1.1 monitordecade.com/no/887219/18/assets/img/t18-airpods-top-diamond-icn-3.png
IP
File type PNG image data, 24 x 24, 8-bit colormap, non-interlaced\012- data
Hash 8ce1c6cb0caa70e2ae674e7fb833d152
344dd3a3a28d67edf858a30df7dc44f596ccc57f
a9c1b89f57ac1df5479ccd84e9db50b75ba4d0b98c6a053653ef7129b774a71d
GET /no/887219/18/assets/img/t18-airpods-top-diamond-icn-3.png HTTP/1.1
Host: monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/no/887219/18/?pubid=aff-no&pob=3&click_id=631fbdf0bda7ae0001ce0eb6&subid=RT-60338f6279fcbe00012195b3-19bd:672231&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=e017f90f3f1f40675c0d42c90c69ecac.1663024924&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 23:17:04 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:11:51 GMT
ETag: "1a2-5dbd15b673da4"
Accept-Ranges: bytes
Content-Length: 418
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
monitordecade.com/no/887219/18/assets/img/payment-method.png
200 OK 45 kB URL HTTP/1.1 monitordecade.com/no/887219/18/assets/img/payment-method.png
IP
File type PNG image data, 984 x 82, 8-bit/color RGBA, non-interlaced\012- data
Hash 145fa1666ad8eed7c972634ea8b74f6e
711dbb19f924a85d275dc23d89fb66046cbdd039
545bf3b9626b5f2d72950cf8cbc3ad3c606e89b07878c255d036eea0a0143233
GET /no/887219/18/assets/img/payment-method.png HTTP/1.1
Host: monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/no/887219/18/?pubid=aff-no&pob=3&click_id=631fbdf0bda7ae0001ce0eb6&subid=RT-60338f6279fcbe00012195b3-19bd:672231&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=e017f90f3f1f40675c0d42c90c69ecac.1663024924&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 23:17:04 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:11:42 GMT
ETag: "af01-5dbd15ad5f5f8"
Accept-Ranges: bytes
Content-Length: 44801
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
monitordecade.com/no/887219/18/assets/img/t18-airpods-testi-profile-2.png
200 OK 5.6 kB URL HTTP/1.1 monitordecade.com/no/887219/18/assets/img/t18-airpods-testi-profile-2.png
IP
File type PNG image data, 136 x 137, 8-bit colormap, non-interlaced\012- data
Hash 3b2a478d9163c86ec20102362cbe52c5
35bc955c6c89b93cb95266a3bbb66bddbcdb05a4
84a75dbd8975201a6a4e3deb48ac5b082b710a5024ceae4be81f6f92b8164b84
GET /no/887219/18/assets/img/t18-airpods-testi-profile-2.png HTTP/1.1
Host: monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/no/887219/18/?pubid=aff-no&pob=3&click_id=631fbdf0bda7ae0001ce0eb6&subid=RT-60338f6279fcbe00012195b3-19bd:672231&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=e017f90f3f1f40675c0d42c90c69ecac.1663024924&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 23:17:04 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:11:37 GMT
ETag: "15e6-5dbd15a8d0dc7"
Accept-Ranges: bytes
Content-Length: 5606
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
monitordecade.com/no/887219/18/assets/img/t18-airpods-body-heart-icn-4.png
200 OK 616 B URL HTTP/1.1 monitordecade.com/no/887219/18/assets/img/t18-airpods-body-heart-icn-4.png
IP
File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced\012- data
Hash d4047c6cac10e707ff2af69840130fa6
0d4774253d02f17451dd53b47907540f957829e3
32522055274e1ea9147704cc700ba38d492f55a0d22fc0ec7c342108facf5c0a
GET /no/887219/18/assets/img/t18-airpods-body-heart-icn-4.png HTTP/1.1
Host: monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/no/887219/18/?pubid=aff-no&pob=3&click_id=631fbdf0bda7ae0001ce0eb6&subid=RT-60338f6279fcbe00012195b3-19bd:672231&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=e017f90f3f1f40675c0d42c90c69ecac.1663024924&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 23:17:04 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:11:44 GMT
ETag: "268-5dbd15af593c7"
Accept-Ranges: bytes
Content-Length: 616
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
monitordecade.com/no/887219/18/assets/img/t18-airpods-top-cart-icn.png
200 OK 316 B URL HTTP/1.1 monitordecade.com/no/887219/18/assets/img/t18-airpods-top-cart-icn.png
IP
File type PNG image data, 23 x 23, 8-bit colormap, non-interlaced\012- data
Hash f8ab20b1d04db37d2c3883f835e28760
f6976805d9c590725b560abe4d10ff3acee4bfae
9191befdd6709eb03c8f3e3ff7e75db942065826434927bac3afafbfbc8439f0
GET /no/887219/18/assets/img/t18-airpods-top-cart-icn.png HTTP/1.1
Host: monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/no/887219/18/?pubid=aff-no&pob=3&click_id=631fbdf0bda7ae0001ce0eb6&subid=RT-60338f6279fcbe00012195b3-19bd:672231&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=e017f90f3f1f40675c0d42c90c69ecac.1663024924&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 23:17:04 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:11:53 GMT
ETag: "13c-5dbd15b8a3ea4"
Accept-Ranges: bytes
Content-Length: 316
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/png
monitordecade.com/no/887219/18/assets/img/t18-airpods-top-payment-logo.png
200 OK 600 B URL HTTP/1.1 monitordecade.com/no/887219/18/assets/img/t18-airpods-top-payment-logo.png
IP
File type PNG image data, 100 x 45, 8-bit colormap, non-interlaced\012- data
Hash 4ad917a0041c9e31dc1dd4bab8914c7e
3fdb56a9264361615552fb6f7c0fd40671ae7380
23c3c585e185ab2cc60bea3a4010dc53ef04db18e62f2157e16f8e58671b2bb3
GET /no/887219/18/assets/img/t18-airpods-top-payment-logo.png HTTP/1.1
Host: monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/no/887219/18/?pubid=aff-no&pob=3&click_id=631fbdf0bda7ae0001ce0eb6&subid=RT-60338f6279fcbe00012195b3-19bd:672231&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=e017f90f3f1f40675c0d42c90c69ecac.1663024924&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 23:17:04 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:11:45 GMT
ETag: "258-5dbd15b0412be"
Accept-Ranges: bytes
Content-Length: 600
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
monitordecade.com/no/887219/18/assets/img/t18-airpods-testi-profile-3.png
200 OK 6.8 kB URL HTTP/1.1 monitordecade.com/no/887219/18/assets/img/t18-airpods-testi-profile-3.png
IP
File type PNG image data, 136 x 137, 8-bit colormap, non-interlaced\012- data
Hash 30afea9d91a7ad157e61166bba7f6145
56890347f505e59cd6c6ce9278c019a6ad02f7ed
98cbaaf99cd58ceede06bf0efa33066d184f3d387c95910f13c1fda694366a69
GET /no/887219/18/assets/img/t18-airpods-testi-profile-3.png HTTP/1.1
Host: monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/no/887219/18/?pubid=aff-no&pob=3&click_id=631fbdf0bda7ae0001ce0eb6&subid=RT-60338f6279fcbe00012195b3-19bd:672231&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=e017f90f3f1f40675c0d42c90c69ecac.1663024924&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 23:17:04 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:11:39 GMT
ETag: "1aa1-5dbd15aa967a4"
Accept-Ranges: bytes
Content-Length: 6817
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
monitordecade.com/no/887219/18/assets/img/t18-airpods-main-img.png
200 OK 22 kB URL HTTP/1.1 monitordecade.com/no/887219/18/assets/img/t18-airpods-main-img.png
IP
File type PNG image data, 444 x 497, 8-bit colormap, non-interlaced\012- data
Hash 276dc65ce272ea59aceb0e0783023b82
a61fa8ff263b18cf3b944190af9a4cf20da58a37
d7ceb979b0795c1b2ff80ab79d8fa3bf0cdbe3e9504ee480de18027ee73086ac
GET /no/887219/18/assets/img/t18-airpods-main-img.png HTTP/1.1
Host: monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/no/887219/18/?pubid=aff-no&pob=3&click_id=631fbdf0bda7ae0001ce0eb6&subid=RT-60338f6279fcbe00012195b3-19bd:672231&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=e017f90f3f1f40675c0d42c90c69ecac.1663024924&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 23:17:04 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:11:48 GMT
ETag: "557f-5dbd15b320873"
Accept-Ranges: bytes
Content-Length: 21887
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
monitordecade.com/no/887219/18/assets/img/t18-airpods-body-lock-icn-1.png
200 OK 513 B URL HTTP/1.1 monitordecade.com/no/887219/18/assets/img/t18-airpods-body-lock-icn-1.png
IP
File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced\012- data
Hash f42480aeef8ff0ec1df097b6f1c64488
18ca86f1bc9365b88efd3a2f3dbac31a4a8a5f99
f1ca89decdc81844738bc0ce5ea3617ec22cf18048295747a2c75c9a31cf34b5
GET /no/887219/18/assets/img/t18-airpods-body-lock-icn-1.png HTTP/1.1
Host: monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/no/887219/18/?pubid=aff-no&pob=3&click_id=631fbdf0bda7ae0001ce0eb6&subid=RT-60338f6279fcbe00012195b3-19bd:672231&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=e017f90f3f1f40675c0d42c90c69ecac.1663024924&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 23:17:04 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:11:43 GMT
ETag: "201-5dbd15af038ac"
Accept-Ranges: bytes
Content-Length: 513
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
monitordecade.com/no/887219/18/assets/img/t18-airpods-top-delivery-icn-4.png
200 OK 320 B URL HTTP/1.1 monitordecade.com/no/887219/18/assets/img/t18-airpods-top-delivery-icn-4.png
IP
File type PNG image data, 23 x 23, 8-bit colormap, non-interlaced\012- data
Hash b7d2da0e6aa65d901e61a0c7334209b9
d21deb8fac67e7208123e05f499a87c42637bc7d
18ecb7cba0652b2afb02d367a82303850ed9ad78ee42040002454dfd44cf3b4d
GET /no/887219/18/assets/img/t18-airpods-top-delivery-icn-4.png HTTP/1.1
Host: monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/no/887219/18/?pubid=aff-no&pob=3&click_id=631fbdf0bda7ae0001ce0eb6&subid=RT-60338f6279fcbe00012195b3-19bd:672231&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=e017f90f3f1f40675c0d42c90c69ecac.1663024924&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 23:17:04 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:11:48 GMT
ETag: "140-5dbd15b37fbe6"
Accept-Ranges: bytes
Content-Length: 320
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/png
monitordecade.com/no/887219/18/assets/img/t18-airpods-top-heart-icn-1.png
200 OK 310 B URL HTTP/1.1 monitordecade.com/no/887219/18/assets/img/t18-airpods-top-heart-icn-1.png
IP
File type PNG image data, 24 x 24, 8-bit colormap, non-interlaced\012- data
Hash af8cd1f0211e5206e5fd0cb323933bb9
c642ed184d00ab1aa108cbdcc8243790915b77e7
961d2c94341df80a967404dcf383b4e39b26bf34c997c850c57aaa3c503049da
GET /no/887219/18/assets/img/t18-airpods-top-heart-icn-1.png HTTP/1.1
Host: monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/no/887219/18/?pubid=aff-no&pob=3&click_id=631fbdf0bda7ae0001ce0eb6&subid=RT-60338f6279fcbe00012195b3-19bd:672231&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=e017f90f3f1f40675c0d42c90c69ecac.1663024924&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 23:17:04 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:11:52 GMT
ETag: "136-5dbd15b78e91c"
Accept-Ranges: bytes
Content-Length: 310
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
monitordecade.com/no/887219/18/assets/img/t18-airpods-top-lock-icn-2.png
200 OK 310 B URL HTTP/1.1 monitordecade.com/no/887219/18/assets/img/t18-airpods-top-lock-icn-2.png
IP
File type PNG image data, 23 x 23, 8-bit colormap, non-interlaced\012- data
Hash 17d0fb6a014e12e0caf324d3e031e6ba
8c227ffd9b5c1dc27058bc001fd3a4baf438ec87
0d511befb8a50e0d1b5a5a24dd7c32e175714d00ac6118396d4e077dd65d9c56
GET /no/887219/18/assets/img/t18-airpods-top-lock-icn-2.png HTTP/1.1
Host: monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/no/887219/18/?pubid=aff-no&pob=3&click_id=631fbdf0bda7ae0001ce0eb6&subid=RT-60338f6279fcbe00012195b3-19bd:672231&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=e017f90f3f1f40675c0d42c90c69ecac.1663024924&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 23:17:04 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:11:44 GMT
ETag: "136-5dbd15afdf453"
Accept-Ranges: bytes
Content-Length: 310
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
monitordecade.com/no/887219/18/assets/img/t18-airpods-body-magnify-icn-2.png
200 OK 713 B URL HTTP/1.1 monitordecade.com/no/887219/18/assets/img/t18-airpods-body-magnify-icn-2.png
IP
File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced\012- data
Hash 087fd6309c6f900caa6180129655ab95
28fd8f50ccbc6916b2a57bb1c48a56d75d81ac95
adf170a1899237407afe1929faab73b750cf76d136e73f4533f99423ee81cc74
GET /no/887219/18/assets/img/t18-airpods-body-magnify-icn-2.png HTTP/1.1
Host: monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/no/887219/18/?pubid=aff-no&pob=3&click_id=631fbdf0bda7ae0001ce0eb6&subid=RT-60338f6279fcbe00012195b3-19bd:672231&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=e017f90f3f1f40675c0d42c90c69ecac.1663024924&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 23:17:04 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:11:49 GMT
ETag: "2c9-5dbd15b40682a"
Accept-Ranges: bytes
Content-Length: 713
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
www.youtube.com/s/player/92f199c8/www-player.css
200 OK 49 kB URL HTTP/2 www.youtube.com/s/player/92f199c8/www-player.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 3b787171826ae09bca74be6372fb2169
9ab390fc525b855dd8e966e1d5e44cad49d35fde
4729a1530f2a9237957ba1c490a7566dd8c3670e1444de435646bfa147e9e2bb
GET /s/player/92f199c8/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/dEBM7szD9Kg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 49311
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 Sep 2022 14:48:09 GMT
expires: Tue, 12 Sep 2023 14:48:09 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 12 Sep 2022 00:15:49 GMT
content-type: text/css
age: 30535
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
monitordecade.com/no/887219/18/assets/img/t18-airpods-body-message-icn-3.png
200 OK 607 B URL HTTP/1.1 monitordecade.com/no/887219/18/assets/img/t18-airpods-body-message-icn-3.png
IP
File type PNG image data, 60 x 60, 8-bit colormap, non-interlaced\012- data
Hash 4bd8007a65e43b87aeba0a1eb80a1e99
5f4c1738866cecbe014f4adf691205b50eebac7c
0ba347c9cf4318c2d72f8281ac8d7bdded92e34093cc79272078853b5e79ec79
GET /no/887219/18/assets/img/t18-airpods-body-message-icn-3.png HTTP/1.1
Host: monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/no/887219/18/?pubid=aff-no&pob=3&click_id=631fbdf0bda7ae0001ce0eb6&subid=RT-60338f6279fcbe00012195b3-19bd:672231&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=e017f90f3f1f40675c0d42c90c69ecac.1663024924&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 23:17:04 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:11:50 GMT
ETag: "25f-5dbd15b5714e4"
Accept-Ranges: bytes
Content-Length: 607
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/png
www.youtube.com/s/player/92f199c8/www-embed-player.vflset/www-embed-player.js
200 OK 98 kB URL HTTP/2 www.youtube.com/s/player/92f199c8/www-embed-player.vflset/www-embed-player.js
IP
File type ASCII text, with very long lines (570)
Hash 46fa5c9f0d80bc8cadcfe2872588312a
a72e7fed4dde7b443c7ed3724673626c0dd13177
5e6d4f73393b48c6383b598e590bfbba3c31dee3e74c86019aedb93ec8b16254
GET /s/player/92f199c8/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/dEBM7szD9Kg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 97877
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 Sep 2022 14:49:12 GMT
expires: Tue, 12 Sep 2023 14:49:12 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 12 Sep 2022 00:15:49 GMT
content-type: text/javascript
age: 30472
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/s/player/92f199c8/fetch-polyfill.vflset/fetch-polyfill.js
200 OK 2.8 kB URL HTTP/2 www.youtube.com/s/player/92f199c8/fetch-polyfill.vflset/fetch-polyfill.js
IP
File type Algol 68 source text\012- Pascal source, ASCII text, with very long lines (555)
Hash 80fe2d229007996c8397073b00755dc7
121f82c77bcf2a297a1085e3b092415c463fcafe
033dfa8941482c82d4f1aaa4a9172fb379b9e46a02d5b36297c5476bbbfdea2c
GET /s/player/92f199c8/fetch-polyfill.vflset/fetch-polyfill.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/dEBM7szD9Kg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 2786
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 Sep 2022 14:49:12 GMT
expires: Tue, 12 Sep 2023 14:49:12 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 12 Sep 2022 00:15:49 GMT
content-type: text/javascript
age: 30472
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 265dd1a74131f2ce927090ab81a8d8ae
0de8770403e4357900058847771b44c34717fa38
bc0257339dc5c6568a83667a09f1b41221587c704c51a7937c27a88319bf4485
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 23:17:04 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 12 Sep 2022 20:20:20 GMT
Expires: Mon, 19 Sep 2022 20:20:19 GMT
Etag: "0de8770403e4357900058847771b44c34717fa38"
Cache-Control: max-age=593594,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 749c5ac09818b51e-OSL
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bd7b5eb635d48acf1428c326eaa892a1
ba9f6c0db831a88b7d6dbdd98f19e76b4b501258
557466a3b642e90e352898073ff23f6a034c3b233e8aee0f0f69cd6ca83d49f4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 23:17:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,700
200 OK 1.1 kB URL HTTP/2 fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,700
IP
Hash 93ae6b6fdfc4431f9524e422756c728b
159c26bcdb273c0f2efefe9d5114bc70140fb6e8
3b0c00023d62c72277a8c038329526581daa301d2fe4fe6035ddc8f2d9e4463e
GET /css?family=Source+Sans+Pro:300,400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 12 Sep 2022 23:17:04 GMT
date: Mon, 12 Sep 2022 23:17:04 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
monitordecade.com/no/887219/18/assets/js/custom.js
404 Not Found 230 B URL HTTP/1.1 monitordecade.com/no/887219/18/assets/js/custom.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 8bcaf8004bb86ae76dc5c8f050c523bf
c9afdabaf20280b772eb6b67c29fbab82be4acb7
580e0d13a8bfe21449d88f8d4a2cd0003e827d36e9dca69a91343435bc9cf83f
GET /no/887219/18/assets/js/custom.js HTTP/1.1
Host: monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/no/887219/18/?pubid=aff-no&pob=3&click_id=631fbdf0bda7ae0001ce0eb6&subid=RT-60338f6279fcbe00012195b3-19bd:672231&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=e017f90f3f1f40675c0d42c90c69ecac.1663024924&tp=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Mon, 12 Sep 2022 23:17:04 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Content-Length: 230
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
monitordecade.com/no/887219/18/assets/img/t18-airpods-body-bg-img.png
200 OK 56 kB URL HTTP/1.1 monitordecade.com/no/887219/18/assets/img/t18-airpods-body-bg-img.png
IP
File type PNG image data, 758 x 152, 8-bit/color RGB, non-interlaced\012- data
Hash 81e5c3c6ea0715d4e839284810965b20
580dec338f5a86834903763c358efbce8e248525
56632f74d37c14a58ce67d840d758d630222ac065380775a8d86ddbaf96ba2e0
GET /no/887219/18/assets/img/t18-airpods-body-bg-img.png HTTP/1.1
Host: monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/no/887219/18/?pubid=aff-no&pob=3&click_id=631fbdf0bda7ae0001ce0eb6&subid=RT-60338f6279fcbe00012195b3-19bd:672231&utm_medium=mail&utm_term=airpods&terms=y&email=&fname=&lname=&fp=&address=&city=&zip=&state=&lpkeyua=e017f90f3f1f40675c0d42c90c69ecac.1663024924&tp=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 23:17:04 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
Last-Modified: Mon, 04 Apr 2022 10:11:51 GMT
ETag: "db8a-5dbd15b6760cc"
Accept-Ranges: bytes
Content-Length: 56202
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ad439cab56126bcc402ee9f92365a209
a4b48a9a733c53cbc7020e190b8c787e1f80f55a
d0e2e52b66a8dec8c57092ec332f452a7348941d778d7b4686ca32696aabd065
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 23:17:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bd7b5eb635d48acf1428c326eaa892a1
ba9f6c0db831a88b7d6dbdd98f19e76b4b501258
557466a3b642e90e352898073ff23f6a034c3b233e8aee0f0f69cd6ca83d49f4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 23:17:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
200 OK 48 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 47952, version 1.0\012- data
Hash 17b406b7b8caa297435fa358e194f5a1
e2132f0e97781af56fa966c0fabb49132f2af203
84161c46238fff2c6920ebc28f02cddd7b710cf3d1107853f540b084320f6afd
GET /s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://monitordecade.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 47952
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 Sep 2022 18:59:14 GMT
expires: Tue, 12 Sep 2023 18:59:14 GMT
cache-control: public, max-age=31536000
age: 15470
last-modified: Mon, 15 Aug 2022 18:22:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 10 Sep 2022 12:31:58 GMT
expires: Sun, 10 Sep 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 211506
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Lato:100,100i,300,300i,400,400i,700,700i,900,900i
200 OK 24 kB URL HTTP/2 fonts.googleapis.com/css?family=Lato:100,100i,300,300i,400,400i,700,700i,900,900i
IP
Hash 34360ecb5b011ddd1717b2e4aa14214b
04a8ebc28e22970bb2de63c6b9bdda7178540a59
a6dd2b77f7889eac99578487b419c8dd6d3cb79751a62675160f6b7cee741d06
GET /css?family=Lato:100,100i,300,300i,400,400i,700,700i,900,900i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 12 Sep 2022 23:17:04 GMT
date: Mon, 12 Sep 2022 23:17:04 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Satisfy
200 OK 23 kB URL HTTP/2 fonts.googleapis.com/css?family=Satisfy
IP
Hash 9102e452a6c7ea40497a9243ddc70694
5e75b2fe56b861dc36a3e5b42312e05321b31c79
ad2644df16cce84ebf9d099dd4275a516f07c92b38d879a91dc3fb17788dc3e7
GET /css?family=Satisfy HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 12 Sep 2022 23:17:04 GMT
date: Mon, 12 Sep 2022 23:17:04 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13036, version 1.0\012- data
Hash 0ad032b3d07aaf33b160ac4799dda40f
06b931e0d0bf37f5037d9e66d6feedfddd21c0ba
c124c88ca4fcb4336e97617647ef0d32441329371120c8eabaea0fea226560b0
GET /s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://monitordecade.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13036
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Sep 2022 19:26:57 GMT
expires: Thu, 07 Sep 2023 19:26:57 GMT
cache-control: public, max-age=31536000
age: 445807
last-modified: Wed, 27 Apr 2022 16:04:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
flagcdn.com/no.svg
200 OK 45 kB IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Hash 61c7fdac96cd6f88a7c53e1e9e709eb1
7e7096bbb642b792fe776852b8ab1201ba8fe730
fe937e63ba67a8c1c5d5ca1a92166a72cea61173907990a4490e548b3f616545
GET /no.svg HTTP/1.1
Host: flagcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 12 Sep 2022 23:17:04 GMT
content-type: image/svg+xml
last-modified: Thu, 19 Nov 2020 12:03:20 GMT
vary: Accept-Encoding
etag: W/"5fb65f08-123"
access-control-allow-origin: *
cache-control: public, max-age=2678400, s-maxage=2678400
cf-cache-status: HIT
age: 2482788
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NZjzYlBL19Vb67A%2FMhq4g%2F5vbbWEHpmggxUJDw7E2IcWTHnWPKHqWGdDJzOH90%2BP%2Bz3mI2AauqfJb89trEAjpQInK8wUuexpWSZ4PzstGk0Nm2afL1JKYwIy7Z0HOw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 749c5ac148cfb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Montserrat:400,400i,500,500i,600,600i,700,700i,800,800i,900,900i
200 OK 24 kB URL HTTP/2 fonts.googleapis.com/css?family=Montserrat:400,400i,500,500i,600,600i,700,700i,800,800i,900,900i
IP
Hash 16bf96d4c8faf913089cf8e05c626535
728d5528621bab94cf1dc9927d097049d603fdf2
ee945f82b3b16519b4e6ea8efcefe0d91e6e42c4c93c6fe1a7d6304d38720a87
GET /css?family=Montserrat:400,400i,500,500i,600,600i,700,700i,800,800i,900,900i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 12 Sep 2022 23:17:04 GMT
date: Mon, 12 Sep 2022 23:17:04 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bd7b5eb635d48acf1428c326eaa892a1
ba9f6c0db831a88b7d6dbdd98f19e76b4b501258
557466a3b642e90e352898073ff23f6a034c3b233e8aee0f0f69cd6ca83d49f4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 23:17:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
payments.monitordecade.com/images/compliance.png
200 OK 5.0 kB URL HTTP/2 payments.monitordecade.com/images/compliance.png
IP
File type PNG image data, 289 x 29, 8-bit/color RGBA, non-interlaced\012- data
Hash ba91e49252bac6fb2c9368b2e195be73
f3f8228e34277d291673c20ae2adeec5bda8d714
5f0f271bf2925771140a800469012b786baabc8db75c916e07ca8a089135cfe0
GET /images/compliance.png HTTP/1.1
Host: payments.monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Mon, 12 Sep 2022 23:17:05 GMT
content-type: image/png
content-length: 4956
last-modified: Thu, 17 Feb 2022 05:08:54 GMT
etag: "620dd866-135c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
payments.monitordecade.com/landing-page/log
204 No Content 0 B URL HTTP/2 payments.monitordecade.com/landing-page/log
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /landing-page/log HTTP/1.1
Host: payments.monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://monitordecade.com/
Origin: https://monitordecade.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.20.1
cache-control: no-cache, private
date: Mon, 12 Sep 2022 23:17:05 GMT
access-control-allow-origin: https://monitordecade.com
access-control-allow-methods: POST
access-control-allow-headers: CONTENT-TYPE
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
payments.monitordecade.com/landing-page/campaign-logs
204 No Content 0 B URL HTTP/2 payments.monitordecade.com/landing-page/campaign-logs
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /landing-page/campaign-logs HTTP/1.1
Host: payments.monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://monitordecade.com/
Origin: https://monitordecade.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.20.1
cache-control: no-cache, private
date: Mon, 12 Sep 2022 23:17:05 GMT
access-control-allow-origin: https://monitordecade.com
access-control-allow-methods: POST
access-control-allow-headers: CONTENT-TYPE
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash ee688c67bb88e5ed59778735ae22e2c5
d8198b534bb3b970b848ef0a944ba346a0ee6033
d235f31a6ad348a5e3700fb76c48788c4741521e8e1eb38dbdcb09b461199b12
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Mon, 12 Sep 2022 23:17:05 GMT
Server: ECS (dcb/7F5D)
X-Cache: Miss from cloudfront
Via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 4PhQKfnZ1Lhm0sWh9fnOFYZufCmyaRVNEK_YkrwGpT3V4Co_XJU-_g==
payments.monitordecade.com/landing-page/campaign-logs
200 OK 491 B URL HTTP/2 payments.monitordecade.com/landing-page/campaign-logs
IP
Hash 4eb722b25c31214b9ba8ebdf023b00b7
640663190119b1218177cafe4f015bc2f9376db5
51a3f823e2ed612e160ca25b4015f49aac0e8389a46650a1834587371bd453ca
POST /landing-page/campaign-logs HTTP/1.1
Host: payments.monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 913
Origin: https://monitordecade.com
Connection: keep-alive
Referer: https://monitordecade.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
date: Mon, 12 Sep 2022 23:17:05 GMT
access-control-allow-origin: https://monitordecade.com
vary: Accept-Encoding, Origin
set-cookie: XSRF-TOKEN=eyJpdiI6InV5TnRzRHFYeHdQRGFia2I4YWFIWlE9PSIsInZhbHVlIjoiZDdOZE9oSzMrTDhTeDBlOHg4S0d5b3dmcUd5b3ZyNnVuQmJvMWFZekxoaFFDSUFQOXJlOHU0SVwvYW9RZXVHNzAiLCJtYWMiOiIyZDQ0ZWViMmZjZDQzOTcyMGJhZmNkNjQzODcxMzE3NWRmMmYxZWMwNmRlMGQyYzRjZDk0MzFiMjEyNjU5MDQ1In0%3D; expires=Mon, 19-Sep-2022 23:17:05 GMT; Max-Age=604800; path=/
rk_payments_session=eyJpdiI6Ilh4OFYyc05VWnNlTHNhYXJFWkpNcFE9PSIsInZhbHVlIjoiZzF0dUluUkViQkNoN2loNGJwY0Q2eUswYStEWVh0bk9zM3ViSUVsSDlDdlJ1ME9sVGlzQ1wvdGVvOE1WUFNcLzhwIiwibWFjIjoiNzQ2MzY5YTI3ODkyZTJmYjU5YmU1MzBhMWI2OTc5OGIwNTA5NmQ4OGI2MjJlYzhlMTFjNjQ2MmFlMjc2ZDE5NiJ9; expires=Mon, 19-Sep-2022 23:17:05 GMT; Max-Age=604800; path=/; httponly
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
www.youtube.com/embed/dEBM7szD9Kg
200 OK 27 kB URL HTTP/2 www.youtube.com/embed/dEBM7szD9Kg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (60311)
Hash 62105e185e75a4a7fdc3ffbfcb0fa889
41efb39f5a3581df3ce6b5409919ce28e7b6f79e
95f17298aef53d844269bcedc5a1ecc345a793f81bba981cdd0e8576852cd916
GET /embed/dEBM7szD9Kg HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 12 Sep 2022 23:17:04 GMT
strict-transport-security: max-age=31536000
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=vBqNKy2MKsE; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=hZCLWWK2ebw; Domain=.youtube.com; Expires=Sat, 11-Mar-2023 23:17:04 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+471; expires=Wed, 11-Sep-2024 23:17:04 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7c85e22b75dd559a6c65736bae63c5bd
eb57470991666108a01b8ee0adf707e1c1dc8642
bd05cc5dfc5ddd554cc9ac5395035ce302b0b74343d199a64b2dbdcac0070944
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 23:17:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.doubleclick.net/instream/ad_status.js
200 OK 29 B URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 Sep 2022 23:14:23 GMT
expires: Mon, 12 Sep 2022 23:29:23 GMT
cache-control: public, max-age=900
age: 162
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Mon, 12 Sep 2022 23:17:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Mon, 12 Sep 2022 23:17:05 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ad7728eba10023f1bf442ce8a38fba5e
03bca124e60f6aca2bb355a3445c3943b0b0befe
795d44c48051fb28b98c9aef0e6116a2f6e9d59dcb3633f4f1fc1843d6081f20
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 23:17:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7faa6a78f896de4528c8cc9ed35bfa11
199ad87495595163d7d16b1eddb9506c8ddb4918
7effc4afbb7417799d0ecbb32fce2a94cba732e488fd4ce81ba5a77f4d7c13ca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 23:17:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 30 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash b98ef30c624d4ee5f34426f2d27f39fc
0aff6aba40c14f71122b0cfd83fed23056bf3143
2ce44c04292bafd7613d7a8f2deb58ef02d20273983f151e19d379e905b0dbcd
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Mon, 12 Sep 2022 23:17:05 GMT
server: ESF
cache-control: private
content-length: 30518
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/js/th/9e5Q9JddguzAeYJyBJt7GsINCHbvQKKYaWDK5a7IWAA.js
200 OK 14 kB URL HTTP/2 www.google.com/js/th/9e5Q9JddguzAeYJyBJt7GsINCHbvQKKYaWDK5a7IWAA.js
IP
File type ASCII text, with very long lines (35963)
Hash 0a10e1669fa5f54a96c02562d935783f
fb9c033841ed0848caeede748301a5c91de6c800
25215608c929fe6c434b08bdb327df9b9ca11355840c6408602b8612073f99f5
GET /js/th/9e5Q9JddguzAeYJyBJt7GsINCHbvQKKYaWDK5a7IWAA.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14185
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Sep 2022 05:03:42 GMT
expires: Thu, 07 Sep 2023 05:03:42 GMT
cache-control: public, max-age=31536000
age: 497603
last-modified: Mon, 29 Aug 2022 11:00:00 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7c85e22b75dd559a6c65736bae63c5bd
eb57470991666108a01b8ee0adf707e1c1dc8642
bd05cc5dfc5ddd554cc9ac5395035ce302b0b74343d199a64b2dbdcac0070944
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 23:17:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 384d10c5f8e71b42b9a567b3c4f0d5ef
965014b6edc9564c10dade6ab884e6ce50027f3e
88888eba582a27605064b27227bb7b3a83d1e0cda1a6f404453621d700201c99
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 23:17:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.ytimg.com/vi_webp/dEBM7szD9Kg/maxresdefault.webp
200 OK 10 kB URL HTTP/2 i.ytimg.com/vi_webp/dEBM7szD9Kg/maxresdefault.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9853810ed835e9d9ea08754f8a41763a
496e4000ea12b7086843404734430332b9504c04
9eeda2680b5791b5113c2b90d4fbd5ef13c99129ce6053477e253b97208c68ca
GET /vi_webp/dEBM7szD9Kg/maxresdefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 9978
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 Sep 2022 23:17:05 GMT
expires: Tue, 13 Sep 2022 01:17:05 GMT
cache-control: public, max-age=7200
etag: "1619164161"
content-type: image/webp
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 384d10c5f8e71b42b9a567b3c4f0d5ef
965014b6edc9564c10dade6ab884e6ce50027f3e
88888eba582a27605064b27227bb7b3a83d1e0cda1a6f404453621d700201c99
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 23:17:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 52bd4a25b61cd17221bcbd288aa971ef
723423f8fa25fc6dc9bcf8d95fc5000647cb96ae
93b265101da74a74b502a50d5386cebf2eca639e6a498483905ba99d4632cb53
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 23:17:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yt3.ggpht.com/ytc/AMLnZu_wFx7HYpsHz2uB8iN_pyOXoU1k_Wj4xepbGQ=s68-c-k-c0x00ffffff-no-rj
200 OK 643 B URL HTTP/2 yt3.ggpht.com/ytc/AMLnZu_wFx7HYpsHz2uB8iN_pyOXoU1k_Wj4xepbGQ=s68-c-k-c0x00ffffff-no-rj
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3\012- data
Hash e989e0541f159658bfb7bc0d7fde47d5
cdf94075516b6c51084d7103e88e1191ea6712d5
914e1f5b155441ec8660aa7cd17a2b17f05947ad68223247a96ccf301841fca5
GET /ytc/AMLnZu_wFx7HYpsHz2uB8iN_pyOXoU1k_Wj4xepbGQ=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 643
x-xss-protection: 0
date: Mon, 12 Sep 2022 19:52:23 GMT
expires: Tue, 13 Sep 2022 19:52:23 GMT
cache-control: public, max-age=86400, no-transform
content-type: image/jpeg
age: 12282
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash bcd31b1b6777ca0ef53852c0eb30eb58
f0dfc35709bee5b9628002fce6006323f13b3924
d7aff419be3f72705529e062e01e5d9505708ecb251bf5d2378e64a6fbe6d3f9
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Mon, 12 Sep 2022 23:17:05 GMT
server: ESF
cache-control: private
content-length: 30706
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 52bd4a25b61cd17221bcbd288aa971ef
723423f8fa25fc6dc9bcf8d95fc5000647cb96ae
93b265101da74a74b502a50d5386cebf2eca639e6a498483905ba99d4632cb53
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 23:17:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Mon, 12 Sep 2022 23:17:06 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Mon, 12 Sep 2022 23:17:06 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 110 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 52b60220a7e62179b38d073c8a1840ab
bc94bc408c2826e7205b0385712fa91adbcd9162
2c792ab659f4cb8750a178b5f2b78822bfba07c7103bed0f8b774189a954d48c
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1015
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Mon, 12 Sep 2022 23:17:06 GMT
server: ESF
cache-control: private
content-length: 110
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 110 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 1d88925bcf50c37fbe8ead6842ab84c6
80f8e276b68fd14bac61bfd5105fccf0e4ab07cc
12d7d589bd39dd4ad2bdc693cdc8134095aed52a6e198c2e2ab748cda23d492d
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 915
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Mon, 12 Sep 2022 23:17:06 GMT
server: ESF
cache-control: private
content-length: 110
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
payments.monitordecade.com/landing-page/campaign-logs
204 No Content 0 B URL HTTP/2 payments.monitordecade.com/landing-page/campaign-logs
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /landing-page/campaign-logs HTTP/1.1
Host: payments.monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://monitordecade.com/
Origin: https://monitordecade.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.20.1
cache-control: no-cache, private
date: Mon, 12 Sep 2022 23:17:10 GMT
access-control-allow-origin: https://monitordecade.com
access-control-allow-methods: POST
access-control-allow-headers: CONTENT-TYPE
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
specialdeals.cyou/clk/KzlIQW85NThWNER6Zjk1aUJDWkFUV0ZRRFd3TmkyclRNaTdzeDlLUk9zOW9GZmYyWkx4b3N4WlRvdGgwN0Z1Yw
200 OK 0 B URL HTTP/2 specialdeals.cyou/clk/KzlIQW85NThWNER6Zjk1aUJDWkFUV0ZRRFd3TmkyclRNaTdzeDlLUk9zOW9GZmYyWkx4b3N4WlRvdGgwN0Z1Yw
IP
Analyzer Verdict Alert fortinet Phishing
GET /clk/KzlIQW85NThWNER6Zjk1aUJDWkFUV0ZRRFd3TmkyclRNaTdzeDlLUk9zOW9GZmYyWkx4b3N4WlRvdGgwN0Z1Yw HTTP/1.1
Host: specialdeals.cyou
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Mon, 12 Sep 2022 23:17:03 GMT
content-type: text/html; charset=UTF-8
set-cookie: GEO_57f99085c3dd28aaa052069e25ccbf62f97f5d42=6b2392; expires=Tue, 13-Sep-2022 00:17:03 GMT; Max-Age=3600
msv-19bd-6b2392-a41e7-a0-2-0=5b5a2a9a; expires=Tue, 13-Sep-2022 23:17:03 GMT; Max-Age=86400
click-2b0-6b2392=20091230_31_2_19bd_6b2392_f28_160_631fbdef_5b5a2a9a_672231_0_0_64_64_0_2_2_0_0; expires=Sat, 11-Mar-2023 23:17:03 GMT; Max-Age=15552000; path=/conversion
charset: UTF-8
content-encoding: UTF-8
p3p: CP="NOI CURa ADMa PSA OUR NOR OTC"
pragma: no-cache
cache-control: no-cache, no-cache, must-revalidate, max-age=0
x-robots-tag: noindex, nofollow, nocache, noarchive
googlebot: noindex, nofollow, nocache, noarchive
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r%2FmM1N2BLh%2FgrE7gSrq3Uvb9uhRx9bYHTmUF1GaW0gOzG8Qrcw7KKFxFW84H4a4TBjfKqdQjjXC2o3Jg%2FAkLbD4WoUna6xI%2BWp4DnianXsD%2BOO%2FRU9Lg8gAhgsv2J%2FhP5CGjnQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 749c5ab2ab51b4fa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
payments.monitordecade.com/js/payments.js
200 OK 0 B URL HTTP/2 payments.monitordecade.com/js/payments.js
IP
GET /js/payments.js HTTP/1.1
Host: payments.monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx/1.20.1
date: Mon, 12 Sep 2022 23:17:04 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 12 Sep 2022 05:32:10 GMT
vary: Accept-Encoding
etag: W/"631ec45a-1ef8d"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
www.youtube.com/embed/dEBM7szD9Kg
200 OK 0 B URL HTTP/2 www.youtube.com/embed/dEBM7szD9Kg
IP
GET /embed/dEBM7szD9Kg HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 12 Sep 2022 23:17:04 GMT
strict-transport-security: max-age=31536000
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=SzIZcK9gda4; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=2Ukb3c1d_Jw; Domain=.youtube.com; Expires=Sat, 11-Mar-2023 23:17:04 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+810; expires=Wed, 11-Sep-2024 23:17:04 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
payments.monitordecade.com/css/landing_page.css
200 OK 0 B URL HTTP/2 payments.monitordecade.com/css/landing_page.css
IP
GET /css/landing_page.css HTTP/1.1
Host: payments.monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Mon, 12 Sep 2022 23:17:05 GMT
content-type: text/css
last-modified: Mon, 12 Sep 2022 05:32:03 GMT
vary: Accept-Encoding
etag: W/"631ec453-18248"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
www.youtube.com/s/player/92f199c8/player_ias.vflset/en_US/base.js
200 OK 0 B URL HTTP/2 www.youtube.com/s/player/92f199c8/player_ias.vflset/en_US/base.js
IP
GET /s/player/92f199c8/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/dEBM7szD9Kg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding, Origin
content-encoding: br
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 587788
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 Sep 2022 14:49:12 GMT
expires: Tue, 12 Sep 2023 14:49:12 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 12 Sep 2022 00:15:49 GMT
content-type: text/javascript
age: 30472
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
wwads.xyz/clk/S3FrWFhwWmtKR1hDZGVhU1Q3NFdoR2RJdDdKek51b2xvbEFaS3lCblh2YU5SRHB3WklUUFMrM1RmaUUyZHZxQUdRZjZMSEdLclk5S3dEZjVDNXJTbnlMNXE0dU9wdENIa0duZDhmbE1YbVNDTDNxeVJSZ0JrMi94ZzV1NEUrYkhVZzlDL1FFdmQwN0QyUFlhN3V1MFlkSlJHWHNYYmdRTUIvZ3dueGtOUjBqemZEcWtJS3R2eU1xbmV3bnJhcGN4MmVSRzhiZ28rcER2ZFlZSVdJbCtSQVdvV2QxU2IzWldaNDNtWnltWGorNUVXU25tOTJRWWxRbnBwaXdmaEovdzRkOE5ZSE8yV2dSZzg5dEZXbXZQTU1tSC9kYmFCckVIdi9lT094Ky9nY0FCWmZCMDVVRkR0K2hzOUhscyt3QmY
302 Found 0 B URL HTTP/2 wwads.xyz/clk/S3FrWFhwWmtKR1hDZGVhU1Q3NFdoR2RJdDdKek51b2xvbEFaS3lCblh2YU5SRHB3WklUUFMrM1RmaUUyZHZxQUdRZjZMSEdLclk5S3dEZjVDNXJTbnlMNXE0dU9wdENIa0duZDhmbE1YbVNDTDNxeVJSZ0JrMi94ZzV1NEUrYkhVZzlDL1FFdmQwN0QyUFlhN3V1MFlkSlJHWHNYYmdRTUIvZ3dueGtOUjBqemZEcWtJS3R2eU1xbmV3bnJhcGN4MmVSRzhiZ28rcER2ZFlZSVdJbCtSQVdvV2QxU2IzWldaNDNtWnltWGorNUVXU25tOTJRWWxRbnBwaXdmaEovdzRkOE5ZSE8yV2dSZzg5dEZXbXZQTU1tSC9kYmFCckVIdi9lT094Ky9nY0FCWmZCMDVVRkR0K2hzOUhscyt3QmY
IP
GET /clk/S3FrWFhwWmtKR1hDZGVhU1Q3NFdoR2RJdDdKek51b2xvbEFaS3lCblh2YU5SRHB3WklUUFMrM1RmaUUyZHZxQUdRZjZMSEdLclk5S3dEZjVDNXJTbnlMNXE0dU9wdENIa0duZDhmbE1YbVNDTDNxeVJSZ0JrMi94ZzV1NEUrYkhVZzlDL1FFdmQwN0QyUFlhN3V1MFlkSlJHWHNYYmdRTUIvZ3dueGtOUjBqemZEcWtJS3R2eU1xbmV3bnJhcGN4MmVSRzhiZ28rcER2ZFlZSVdJbCtSQVdvV2QxU2IzWldaNDNtWnltWGorNUVXU25tOTJRWWxRbnBwaXdmaEovdzRkOE5ZSE8yV2dSZzg5dEZXbXZQTU1tSC9kYmFCckVIdi9lT094Ky9nY0FCWmZCMDVVRkR0K2hzOUhscyt3QmY HTTP/1.1
Host: wwads.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Mon, 12 Sep 2022 23:17:02 GMT
content-type: text/html; charset=UTF-8
location: https://specialdeals.cyou/clk/KzlIQW85NThWNER6Zjk1aUJDWkFUV0ZRRFd3TmkyclRNaTdzeDlLUk9zOW9GZmYyWkx4b3N4WlRvdGgwN0Z1Yw
cache-control: no-cache, must-revalidate, max-age=0
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bbAl4Xm9AJEMNq1vTQCLYT%2Bt%2BOCOixYIfdb0j3yE7vj2%2F%2FKIzu%2F5u3mdEL620qo4bI8gqVJsDW2M8nvgxNHSVqnmP%2Brv%2BBBKZWzm91fp9qXmnSMSFESQxvGYXrw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 749c5ab1a9ce1bfe-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i,800,800i
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i,800,800i
IP
GET /css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i,800,800i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://monitordecade.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 12 Sep 2022 23:17:04 GMT
date: Mon, 12 Sep 2022 23:17:04 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
payments.monitordecade.com/landing-page/log
200 OK 0 B URL HTTP/2 payments.monitordecade.com/landing-page/log
IP
POST /landing-page/log HTTP/1.1
Host: payments.monitordecade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 583
Origin: https://monitordecade.com
Connection: keep-alive
Referer: https://monitordecade.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
content-type: application/json
cache-control: no-cache, private
date: Mon, 12 Sep 2022 23:17:05 GMT
access-control-allow-origin: https://monitordecade.com
vary: Accept-Encoding, Origin
set-cookie: XSRF-TOKEN=eyJpdiI6InNzQTVVOU9IQ2xIczVrSVFEbnR3WFE9PSIsInZhbHVlIjoiSkdib3pEV1RYTlp4WkE4SjZRNVhFZGlER05YaWErZndMbWdjb1JXVkh0VHEwUlkzT3JGV0F3OWVXbHBiNzFNMSIsIm1hYyI6ImZlZWZmZmZmYWE2MDFmNTNlNDUyMzJiOTNiMzhjZWFmNGYxYzQ4NzI2MTc4ZjM2N2MxODNiNTBiYTkyNWMyOWYifQ%3D%3D; expires=Mon, 19-Sep-2022 23:17:05 GMT; Max-Age=604800; path=/
rk_payments_session=eyJpdiI6IlJ0OGFmZjFrZitPWUN2UTlPWitVN0E9PSIsInZhbHVlIjoiZU0zZ3dMRFpFVzNzSnlod3F6VEFXVTVJelY1dllGYkYxMXU1TEJGZ09xc1Rsdk92bDMzSzRZb0N3QWtMMWlJKyIsIm1hYyI6IjZmYTdmMTI5YTYwYzYzNDU2ZWUxZDY3OTY3Y2Q2MDY1ZTRhYjg0NjNmOWM0NWQ1OTE2MDJkZGM3NTA0NDMyZTEifQ%3D%3D; expires=Mon, 19-Sep-2022 23:17:05 GMT; Max-Age=604800; path=/; httponly
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
172.67.177.131
13.40.104.160
104.21.33.58
23.33.119.27
18.194.3.144
85.17.54.17