temu.com/s/H8Oyv5KVSqH54p
301 Moved Permanently 166 B URL HTTP/1.1 temu.com/s/H8Oyv5KVSqH54p
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3ea1c8d079b38532a6e01a96216ba5e2
598d3ff91d3e252f1e13df8cf0348b270ff2da3f
87a9323ac85ce28867d5d7ce590c8f29b8d1a999961fca71bb33adef48683691
GET /s/H8Oyv5KVSqH54p HTTP/1.1
Host: temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: Nginx
Date: Thu, 23 Mar 2023 23:41:28 GMT
Content-Type: text/html
Content-Length: 166
Connection: keep-alive
Location: https://temu.com/s/H8Oyv5KVSqH54p
x-yak-request-id: 1679614888762-f9a4dda777c98b5698b92ff03a2f09dd
strict-transport-security: max-age=2592000
Set-Cookie: api_uid=CmyYh2Qc46icUwCpI9lVAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=temu.com; path=/
cip: 91.90.42.154
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bea3185dd820a31c1981317f37c3456d
1a548a5d27270fc11df9011837a7149571cedd78
469b97bf9f57401b3c9571039483589f2815f4794212b75c7c85cfefe0ae71e9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "469B97BF9F57401B3C9571039483589F2815F4794212B75C7C85CFEFE0AE71E9"
Last-Modified: Wed, 22 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8379
Expires: Fri, 24 Mar 2023 02:01:07 GMT
Date: Thu, 23 Mar 2023 23:41:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 65fc860bc043f3fb83bdc3debdcd322d
418010755deae099ef1284e402813c5837a10f42
d93d50c523c7f735987aba09db628259441eb75efe713a2df3c214e1fb8b5171
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D93D50C523C7F735987ABA09DB628259441EB75EFE713A2DF3C214E1FB8B5171"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4706
Expires: Fri, 24 Mar 2023 00:59:54 GMT
Date: Thu, 23 Mar 2023 23:41:28 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 84db75194692d4afe13196bda6f22da8
4c1f49bc973a4917f146d93c8d598344edc021f6
a3bec66f95b3bdf1d310c726e8ed05f7b06c1901c62381a94582d581844d2c23
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Alert, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 23 Mar 2023 23:27:37 GMT
content-type: application/json
age: 831
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dc2752d83fbed82852248898a132467a
b27a6b4af2e07663a58cafb641513f7224c7a7c3
ea7838393d83805a7b8a2b01bd09e4423617c4da285b983a11e9ba36266810d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EA7838393D83805A7B8A2B01BD09E4423617C4DA285B983A11E9BA36266810D5"
Last-Modified: Wed, 22 Mar 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10645
Expires: Fri, 24 Mar 2023 02:38:53 GMT
Date: Thu, 23 Mar 2023 23:41:28 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 5DLPvyIULTtfH9APjpIc/rjYTsgrH/gSI9xHrM1yQf5lbtIGJuw5rpmVlaH6XSg5Me1MWaYAegc=
x-amz-request-id: 0MRZXWCET9E7JAKA
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 23 Mar 2023 22:54:13 GMT
age: 2836
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 23 Mar 2023 23:41:29 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash de8dc00290fbdd93ae200dba9eca286a
b77c440254370a9311a14b0577a335cc960019f7
5a940dd4ff8211aa96c3cd971121ce02e2e66ac770e1a006adbc0353bab6c1f1
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Thu, 23 Mar 2023 23:41:29 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 15036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 23 Mar 2023 18:39:00 GMT
Expires: Fri, 24 Mar 2023 18:39:00 GMT
ETag: "b77c440254370a9311a14b0577a335cc960019f7"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d85a0c5dbdd6105d70f3de5fb5411b68
4f87ba7fb164aca63645b6a4a7fe7e18c4376b0a
41a73fd656a518110f66e2023fc8cb71be5676366710fe2b718d65c1caa58a8c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "41A73FD656A518110F66E2023FC8CB71BE5676366710FE2B718D65C1CAA58A8C"
Last-Modified: Wed, 22 Mar 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3679
Expires: Fri, 24 Mar 2023 00:42:48 GMT
Date: Thu, 23 Mar 2023 23:41:29 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, ETag, Content-Type, Cache-Control, Pragma, Alert, Last-Modified, Retry-After, Backoff, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 23 Mar 2023 23:14:33 GMT
age: 1616
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
temu.com/s/H8Oyv5KVSqH54p
302 Found 0 B URL HTTP/2 temu.com/s/H8Oyv5KVSqH54p
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/H8Oyv5KVSqH54p HTTP/1.1
Host: temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: Nginx
date: Thu, 23 Mar 2023 23:41:29 GMT
content-type: text/html;charset=UTF-8
content-length: 0
location: https://www.temu.com/ruby_free_goods.html?_bg_fs=1&_p_rfs=1&gs_code_way=3&outside_pool_type=1&download_page_threshold=2&progress_gray=1&landing_page_goods_id=10236050&h5_back_retention_pop=false&gs_comp_nickname=or***29&gs_comp_avatar=https%3A%2F%2Favatar-us.kwcdn.com%2Favatar%2Favatar%2Fdefault%2F7d96f863-b4c1-43d6-8f03-ebd1c4e23e25.png&gs_comp_expired=1679700351&needs_login=1&login_scene=7&_p_login_channel=activity&_x_sid=index&refer_share_id=g1KBfpZbLQ9HNg5ow6GAq0P5A3LGqVLy&refer_share_channel=copy_link&refer_share_suin=BDVXLJ4QUDOB7ZRQGAZ2EB2GHQFUL6K4GPP7VRSX2CRCO&group_sn=230323-B3C79D1AB1E745BA3170&_ex_campaign=mkt_activity&_ex_cid=mkt_activity_goods&_ex_sid=free_goods_invite&gs_invite_code=86804124&gs_og_title=Can%20you%20accept%20my%20invitation%20so%20that%20I%20can%20get%20a%20free%20gift%3F&gs_og_description=Click%20the%20link%20now%20and%20participate%20in%20this%20event.&gs_og_image=https%3A%2F%2Faimg.kwcdn.com%2Fupload_aimg%2Fdawn%2Fab83be6b-a436-4b76-b3a9-2669cc2294a0.jpg.slim.jpeg
x-yak-request-id: 1679614889352-c9a872e650f2a37a7e341f43f7fb1ddb
strict-transport-security: max-age=2592000
set-cookie: region=211; Expires=Sat, 22-Apr-23 23:41:29 GMT; Path=/
language=en; Expires=Sat, 22-Apr-23 23:41:29 GMT; Path=/
currency=USD; Expires=Sat, 22-Apr-23 23:41:29 GMT; Path=/
api_uid=CmyYh2Qc46mL6gCII45xAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=temu.com; path=/
content-security-policy-report-only: default-src *.temu.com *.kwcdn.com *.pddpic.com wss://*.temu.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.doubleclick.net *.google.com *.googlesyndication.com *.googleusercontent.com www.googleadservices.com www.google.cn www.google.com.hk www.google.co.uk www.google.ca www.google.com.au www.google.co.nz google.com connect.facebook.net www.facebook.com appleid.cdn-apple.com socialplugin.facebook.net *.cash.app *.forter.com blob: data: 'unsafe-eval' 'unsafe-inline' 'wasm-eval'; report-uri /api/sec-csp/c/sec-gif
vary: User-Agent
x-frame-options: SAMEORIGIN
cip: 91.90.42.154
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 5xsqDE23KlXXQ4kpb9lxPA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 4kSlPe5IbogG+WqId1Qrq+ZCm9E=
Date: Thu, 23 Mar 2023 23:41:29 GMT
Via: 1.1 google
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
aimg.kwcdn.com/upload_aimg/dawn/5ea8a749-5879-4749-8a81-0e69cd361303.png.slim.png
200 OK 19 kB URL HTTP/2 aimg.kwcdn.com/upload_aimg/dawn/5ea8a749-5879-4749-8a81-0e69cd361303.png.slim.png
IP
File type PNG image data, 470 x 328, 8-bit colormap, non-interlaced\012- data
Hash 5bcec11d2b497f3f16822b36489ec5b6
1823e11f2efaf6590e09e8f8178e09971f792f1b
41f753cb40c792a19a625a2434f7ded86b43376ce1813ef3bf056a7f52c6157c
GET /upload_aimg/dawn/5ea8a749-5879-4749-8a81-0e69cd361303.png.slim.png HTTP/1.1
Host: aimg.kwcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.kwcdn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Mar 2023 23:41:29 GMT
content-type: image/png
content-length: 18595
cache-control: max-age=31536000
last-modified: Fri, 09 Dec 2022 05:54:31 GMT
request-id: 80d484941c11447ed478757d3bffb391
x-content-type-options: nosniff
x-fop-destination-type: fop
x-imagine-success: true
cf-cache-status: HIT
age: 9039797
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
coloid: 83
timing-allow-origin: *
x-cip: 91.90.42.154
server: cloudflare
cf-ray: 7aca86861ae9b4ff-OSL
X-Firefox-Spdy: h2
static.kwcdn.com/m-assets/assets/js/6636_f96d4894d854d9d6832e.js
200 OK 32 kB URL HTTP/2 static.kwcdn.com/m-assets/assets/js/6636_f96d4894d854d9d6832e.js
IP
File type Unicode text, UTF-8 text, with very long lines (65507), with no line terminators
Hash 0cba9ac4bcfca795bbdba17cd84d3b83
f8c4b98b312d66b93544193706c9c06c047862cb
d8110eb025b9b8615b1f26a87e243ba7f5c8a91f433d26d3f2efb98d9be8168b
GET /m-assets/assets/js/6636_f96d4894d854d9d6832e.js HTTP/1.1
Host: static.kwcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Mar 2023 23:41:30 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: max-age=31536000
content-md5: YUPSzWpRR9FMJB3LA5R5fg==
etag: W/"6143d2cd6a5147d14c241dcb0394797e"
last-modified: Thu, 23 Mar 2023 01:59:30 GMT
x-content-type-options: nosniff
x-pos-request-id: 552f199f-a01e-0015-2833-5de2d0000000
cf-cache-status: HIT
age: 39666
access-control-allow-origin: *
coloid: 83
timing-allow-origin: *
x-cip: 91.90.42.154
server: cloudflare
cf-ray: 7aca8686bbacb4ff-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-NSR6SG3
200 OK 74 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-NSR6SG3
IP
File type ASCII text, with very long lines (7937)
Hash e15d6390d50a391b4153876374afaef4
baba1dab739da0b56a74e95ed81bf56f77d1cfe9
84b7a461e13b0ede4e45d37c34bbc140e9e00cbb754566e947536c85557a8cba
GET /gtm.js?id=GTM-NSR6SG3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 23 Mar 2023 23:41:30 GMT
expires: Thu, 23 Mar 2023 23:41:30 GMT
cache-control: private, max-age=900
last-modified: Thu, 23 Mar 2023 22:06:46 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 74059
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a563513e8fb14fb6796ff13a072cd3db
3e1d51e451b3c450c1213d3fce208e84522b1511
78ecd87f634efd2b5b6644a9d97285807cb26452571be0cef89f6d84dd3b32c0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 23:41:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.temu.com/api/phantom/xg/pfb/a3
200 OK 81 kB URL HTTP/2 www.temu.com/api/phantom/xg/pfb/a3
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 6d2f84ecb9f977282390d47a50bccc89
c2451c2d7852a05cfc3784bb10f53721bcdc9c66
bdf80299af03a43a8d2a30b30afb5ea798eb8adb29ced313f809e77cc51b19fc
GET /api/phantom/xg/pfb/a3 HTTP/1.1
Host: www.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/ruby_free_goods.html?_bg_fs=1&_p_rfs=1&gs_code_way=3&outside_pool_type=1&download_page_threshold=2&progress_gray=1&landing_page_goods_id=10236050&h5_back_retention_pop=false&gs_comp_nickname=or***29&gs_comp_avatar=https%3A%2F%2Favatar-us.kwcdn.com%2Favatar%2Favatar%2Fdefault%2F7d96f863-b4c1-43d6-8f03-ebd1c4e23e25.png&gs_comp_expired=1679700351&needs_login=1&login_scene=7&_p_login_channel=activity&_x_sid=index&refer_share_id=g1KBfpZbLQ9HNg5ow6GAq0P5A3LGqVLy&refer_share_channel=copy_link&refer_share_suin=BDVXLJ4QUDOB7ZRQGAZ2EB2GHQFUL6K4GPP7VRSX2CRCO&group_sn=230323-B3C79D1AB1E745BA3170&_ex_campaign=mkt_activity&_ex_cid=mkt_activity_goods&_ex_sid=free_goods_invite&gs_invite_code=86804124&gs_og_title=Can%20you%20accept%20my%20invitation%20so%20that%20I%20can%20get%20a%20free%20gift%3F&gs_og_description=Click%20the%20link%20now%20and%20participate%20in%20this%20event.&gs_og_image=https%3A%2F%2Faimg.kwcdn.com%2Fupload_aimg%2Fdawn%2Fab83be6b-a436-4b76-b3a9-2669cc2294a0.jpg.slim.jpeg
Cookie: api_uid=CmyYh2Qc46mL6gCII45xAg==; region=211; language=en; currency=USD; timezone=UTC; webp=1; _nano_fp=XpE8lpEan0CblpXaXC_lL5q0cL7BLbX6AObsH5wB
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Nginx
date: Thu, 23 Mar 2023 23:41:30 GMT
content-type: application/json;charset=UTF-8
content-encoding: gzip
vary: Accept-Encoding
x-yak-request-id: 1679614890371-6926287f682438809cf86a2fba2e4d24
strict-transport-security: max-age=2592000
content-security-policy-report-only: default-src 'none';script-src 'report-sample';report-uri /api/sec-csp/c-api/sec-gif
yak-timeinfo: 1679614890371|1
cip: 91.90.42.154
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash a173b3896deb97e3e6503dce57a9eeff
5bcd8d96e92e8008b0b9cbc13f52282cea87e5da
79718470efde097902729804b012d7b7a31d6f6922ad93b5e01fdee7f404578d
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Thu, 23 Mar 2023 23:41:30 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 15036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 23 Mar 2023 20:56:29 GMT
Expires: Fri, 24 Mar 2023 20:56:29 GMT
ETag: "5bcd8d96e92e8008b0b9cbc13f52282cea87e5da"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
www.temu.com/api/sec-csp/c/sec-gif
200 OK 0 B URL HTTP/2 www.temu.com/api/sec-csp/c/sec-gif
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/sec-csp/c/sec-gif HTTP/1.1
Host: www.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 2193
Origin: https://www.temu.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Nginx
date: Thu, 23 Mar 2023 23:41:30 GMT
content-length: 0
x-yak-request-id: 1679614890688-cf6858aa8747d3140caeef0be75923b0
access-control-allow-origin: https://www.temu.com
vary: Origin
access-control-allow-headers: Origin, X-Requested-With, Content-Type, X_Requested_With, Accept, X-HTTP-Method-Override, Cookie, AccessToken, PASSID, VerifyAuthToken, Anti-Content
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
strict-transport-security: max-age=2592000
content-security-policy-report-only: default-src 'none';script-src 'report-sample';report-uri /api/sec-csp/c-api/sec-gif
yak-timeinfo: 1679614890688|1
set-cookie: api_uid=CmzeT2Qc46oS/QEZWqSuAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.temu.com; path=/
cip: 91.90.42.154
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash ce4d4c1c5ab3c6ace7a8b5f950fd55d1
83b33298d1d36cf8188fe3b976e31f6ff4cf1520
05dee4ee19108cff7df972cee0c80df655b1bd2cd7cef1d212bb731cb8a5874d
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Thu, 23 Mar 2023 23:41:30 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 15036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 23 Mar 2023 21:37:13 GMT
Expires: Fri, 24 Mar 2023 21:37:13 GMT
ETag: "83b33298d1d36cf8188fe3b976e31f6ff4cf1520"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
www.temu.com/api/server/_stm
200 OK 553 B URL HTTP/2 www.temu.com/api/server/_stm
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d57331df815c43536b61de4e9fac66e2
2371c2d18c940cafdb0624b7e1152ff58dca7ec1
b79cf3b2a2cc8d28fffc01f7cf165e326d91a75c96cbbed0db69bd356481071b
GET /api/server/_stm HTTP/1.1
Host: www.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/ruby_free_goods.html?_bg_fs=1&_p_rfs=1&gs_code_way=3&outside_pool_type=1&download_page_threshold=2&progress_gray=1&landing_page_goods_id=10236050&h5_back_retention_pop=false&gs_comp_nickname=or***29&gs_comp_avatar=https%3A%2F%2Favatar-us.kwcdn.com%2Favatar%2Favatar%2Fdefault%2F7d96f863-b4c1-43d6-8f03-ebd1c4e23e25.png&gs_comp_expired=1679700351&needs_login=1&login_scene=7&_p_login_channel=activity&_x_sid=index&refer_share_id=g1KBfpZbLQ9HNg5ow6GAq0P5A3LGqVLy&refer_share_channel=copy_link&refer_share_suin=BDVXLJ4QUDOB7ZRQGAZ2EB2GHQFUL6K4GPP7VRSX2CRCO&group_sn=230323-B3C79D1AB1E745BA3170&_ex_campaign=mkt_activity&_ex_cid=mkt_activity_goods&_ex_sid=free_goods_invite&gs_invite_code=86804124&gs_og_title=Can%20you%20accept%20my%20invitation%20so%20that%20I%20can%20get%20a%20free%20gift%3F&gs_og_description=Click%20the%20link%20now%20and%20participate%20in%20this%20event.&gs_og_image=https%3A%2F%2Faimg.kwcdn.com%2Fupload_aimg%2Fdawn%2Fab83be6b-a436-4b76-b3a9-2669cc2294a0.jpg.slim.jpeg
Cookie: api_uid=CmyYh2Qc46mL6gCII45xAg==; region=211; language=en; currency=USD; timezone=UTC; webp=1; _nano_fp=XpE8lpEan0CblpXaXC_lL5q0cL7BLbX6AObsH5wB
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Nginx
date: Thu, 23 Mar 2023 23:41:30 GMT
content-type: application/json
vary: Accept-Encoding
cip: 91.90.42.154
cache-control: no-cache, no-store
content-encoding: gzip
X-Firefox-Spdy: h2
www.temu.com/api/phantom/xg/pfb/l1
200 OK 618 B URL HTTP/2 www.temu.com/api/phantom/xg/pfb/l1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash af9f3b384b4d4422469fb2b92cb05637
d835b52e3ed020a97f7ea11650abf4ad7c20e1c5
d65cf2e6969e9e18945b263ac2ec03375104b8176e90916cb0814182fce11265
GET /api/phantom/xg/pfb/l1 HTTP/1.1
Host: www.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/ruby_free_goods.html?_bg_fs=1&_p_rfs=1&gs_code_way=3&outside_pool_type=1&download_page_threshold=2&progress_gray=1&landing_page_goods_id=10236050&h5_back_retention_pop=false&gs_comp_nickname=or***29&gs_comp_avatar=https%3A%2F%2Favatar-us.kwcdn.com%2Favatar%2Favatar%2Fdefault%2F7d96f863-b4c1-43d6-8f03-ebd1c4e23e25.png&gs_comp_expired=1679700351&needs_login=1&login_scene=7&_p_login_channel=activity&_x_sid=index&refer_share_id=g1KBfpZbLQ9HNg5ow6GAq0P5A3LGqVLy&refer_share_channel=copy_link&refer_share_suin=BDVXLJ4QUDOB7ZRQGAZ2EB2GHQFUL6K4GPP7VRSX2CRCO&group_sn=230323-B3C79D1AB1E745BA3170&_ex_campaign=mkt_activity&_ex_cid=mkt_activity_goods&_ex_sid=free_goods_invite&gs_invite_code=86804124&gs_og_title=Can%20you%20accept%20my%20invitation%20so%20that%20I%20can%20get%20a%20free%20gift%3F&gs_og_description=Click%20the%20link%20now%20and%20participate%20in%20this%20event.&gs_og_image=https%3A%2F%2Faimg.kwcdn.com%2Fupload_aimg%2Fdawn%2Fab83be6b-a436-4b76-b3a9-2669cc2294a0.jpg.slim.jpeg
Cookie: api_uid=CmyYh2Qc46mL6gCII45xAg==; region=211; language=en; currency=USD; timezone=UTC; webp=1; _nano_fp=XpE8lpEan0CblpXaXC_lL5q0cL7BLbX6AObsH5wB
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Nginx
date: Thu, 23 Mar 2023 23:41:30 GMT
content-type: application/json;charset=UTF-8
content-encoding: gzip
vary: Accept-Encoding
x-yak-request-id: 1679614890455-6d0c70dd49524e5b864feb2e80c73648
strict-transport-security: max-age=2592000
content-security-policy-report-only: default-src 'none';script-src 'report-sample';report-uri /api/sec-csp/c-api/sec-gif
yak-timeinfo: 1679614890455|1
cip: 91.90.42.154
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83b68a72-4db6-4e13-ab9e-7af99c1275e5.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83b68a72-4db6-4e13-ab9e-7af99c1275e5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5483f1e55bfb1dd7ee50d5c993ce2c43
713be5af68f68936358ad6dc6c2e292ff63fb209
723ee03be195bc93706981369e3df3cbe711f04278f20b02a4da912932896a62
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83b68a72-4db6-4e13-ab9e-7af99c1275e5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5593
x-amzn-requestid: 951fbc92-bdf3-4af4-ad5d-20d68add7218
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CQP4PEX9IAMFiTw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641cc69a-01309cc42208ab5272768fce;Sampled=0
x-amzn-remapped-date: Thu, 23 Mar 2023 21:37:30 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: sZ4KMGCKfdrOi6s0dlGdpxcj689G5WU3CDEC_eNJ2crz0DTsj9UMGA==
via: 1.1 185f4b03b711932fc7e735c08fdc5abe.cloudfront.net (CloudFront), 1.1 b48dedcc55e63f14261aa92cf2d61522.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 22:01:17 GMT
age: 6014
etag: "713be5af68f68936358ad6dc6c2e292ff63fb209"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.temu.com/api/phantom/xg/pfb/a4
200 OK 669 B URL HTTP/2 www.temu.com/api/phantom/xg/pfb/a4
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 0f310fb2258fb0439f6093373f29f267
977bcc46140c1a4de5a65e159b7422b3269b1011
14cd68a95a675c6a3c0316925c3bd071b0eb82f5da788f02e1193f08bf138530
POST /api/phantom/xg/pfb/a4 HTTP/1.1
Host: www.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=UTF-8
Content-Length: 1508
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/ruby_free_goods.html?_bg_fs=1&_p_rfs=1&gs_code_way=3&outside_pool_type=1&download_page_threshold=2&progress_gray=1&landing_page_goods_id=10236050&h5_back_retention_pop=false&gs_comp_nickname=or***29&gs_comp_avatar=https%3A%2F%2Favatar-us.kwcdn.com%2Favatar%2Favatar%2Fdefault%2F7d96f863-b4c1-43d6-8f03-ebd1c4e23e25.png&gs_comp_expired=1679700351&needs_login=1&login_scene=7&_p_login_channel=activity&_x_sid=index&refer_share_id=g1KBfpZbLQ9HNg5ow6GAq0P5A3LGqVLy&refer_share_channel=copy_link&refer_share_suin=BDVXLJ4QUDOB7ZRQGAZ2EB2GHQFUL6K4GPP7VRSX2CRCO&group_sn=230323-B3C79D1AB1E745BA3170&_ex_campaign=mkt_activity&_ex_cid=mkt_activity_goods&_ex_sid=free_goods_invite&gs_invite_code=86804124&gs_og_title=Can%20you%20accept%20my%20invitation%20so%20that%20I%20can%20get%20a%20free%20gift%3F&gs_og_description=Click%20the%20link%20now%20and%20participate%20in%20this%20event.&gs_og_image=https%3A%2F%2Faimg.kwcdn.com%2Fupload_aimg%2Fdawn%2Fab83be6b-a436-4b76-b3a9-2669cc2294a0.jpg.slim.jpeg
Cookie: api_uid=CmyYh2Qc46mL6gCII45xAg==; region=211; language=en; currency=USD; timezone=UTC; webp=1; _nano_fp=XpE8lpEan0CblpXaXC_lL5q0cL7BLbX6AObsH5wB
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Nginx
date: Thu, 23 Mar 2023 23:41:30 GMT
content-type: application/json;charset=UTF-8
set-cookie: _bee=4MAFGNnWKifogVhTSNiQqyxPfyICQapW; Max-Age=31536000; Expires=Fri, 22 Mar 2024 23:41:30 GMT; Path=/; Domain=.temu.com
njrpl=4MAFGNnWKifogVhTSNiQqyxPfyICQapW; Max-Age=31536000; Expires=Fri, 22 Mar 2024 23:41:30 GMT; Path=/; Domain=.temu.com
dilx=iDdX6LWVljvdf0UrFqi48; Max-Age=31536000; Expires=Fri, 22 Mar 2024 23:41:30 GMT; Path=/; Domain=.temu.com
content-encoding: gzip
x-yak-request-id: 1679614890458-b8c475a2f059b2f4972c747f5338f322
access-control-allow-origin: https://www.temu.com
vary: Accept-Encoding, Origin
access-control-allow-headers: Origin, X-Requested-With, Content-Type, X_Requested_With, Accept, X-HTTP-Method-Override, Cookie, AccessToken, PASSID, VerifyAuthToken, Anti-Content
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
strict-transport-security: max-age=2592000
content-security-policy-report-only: default-src 'none';script-src 'report-sample';report-uri /api/sec-csp/c-api/sec-gif
yak-timeinfo: 1679614890458|83
cip: 91.90.42.154
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49e3bd59-44bb-4c85-81cb-08614cf98777.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49e3bd59-44bb-4c85-81cb-08614cf98777.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 89cd024b8021bb2873b0b8972c77cb47
9aea167a3ebf62d91e705433f13b9fb0194daad4
454e0b9e6e12f7a8a1a87913fb7f539358bbfdb1371e30abd472c897082c2a38
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49e3bd59-44bb-4c85-81cb-08614cf98777.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8490
x-amzn-requestid: 7444a745-87e0-4424-92fd-630bf7cacc0a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CQP4QFRxoAMF3Yg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641cc69a-112bec36430d78e3733e6e12;Sampled=0
x-amzn-remapped-date: Thu, 23 Mar 2023 21:37:31 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: 7bujxVYzIuSbb0k7QTtODPpARYVNjAExwSJwNlRWNwR1u_oGeDZqow==
via: 1.1 626ad4a6bf529166d2aad94a2957694c.cloudfront.net (CloudFront), 1.1 d90109c5a0c30f43223e0db85921c5c2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 22:13:47 GMT
age: 5264
etag: "9aea167a3ebf62d91e705433f13b9fb0194daad4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd357d16d-d40f-4b91-81cc-69aeb80f25fe.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd357d16d-d40f-4b91-81cc-69aeb80f25fe.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 68798f0963b37143bcbec5c6e08f2efe
00bb4ca04f3e52c8d9eacec7449a9cf49f6c312a
7c54bbd23a76d8b4c15e352b92e33c7164916899a5af71ba34a7af884b8a0944
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd357d16d-d40f-4b91-81cc-69aeb80f25fe.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6403
x-amzn-requestid: aab6628c-f612-4b57-9ae1-0017714e19c9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CQPHyEIkIAMF4JA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641cc564-2110e0d35561ab794e44e966;Sampled=0
x-amzn-remapped-date: Thu, 23 Mar 2023 21:32:20 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: seF5M3gxStTgmzA24jiDR8-LA-xy80ZQX2JGk9Ok4ndBoyMpNcrY7A==
via: 1.1 02f1a759e4ec9fab6fc17c080dd851dc.cloudfront.net (CloudFront), 1.1 ec2a2c75c16156e4d43504606c118b90.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 21:40:49 GMT
age: 7242
etag: "00bb4ca04f3e52c8d9eacec7449a9cf49f6c312a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6bfe713-dd17-46d3-afa9-f5f78836b408.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6bfe713-dd17-46d3-afa9-f5f78836b408.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1e1c698a6ed426668efaac9f8a907b2f
f529e2fd710f48f8b176fdaa3c3f66446b930d58
6e7e0803f34264257884908e16a1a9d1aa15b96fba2f513a8ab2c57add34dc5f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6bfe713-dd17-46d3-afa9-f5f78836b408.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8852
x-amzn-requestid: c001b294-0a71-4389-9060-b31536c4a6e1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CQPt5EQ-IAMF5Ug=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641cc658-373a1f13254871d145a18579;Sampled=0
x-amzn-remapped-date: Thu, 23 Mar 2023 21:36:24 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Q7tdTNfKBU2LAoNGw-3DLxUAMIRyihjBuNpmUnZhjVR9-UyZywRADA==
via: 1.1 17d76c2aee343249585a570f2d36d2ee.cloudfront.net (CloudFront), 1.1 fec77e486350d1bd33f526a760d8b5a4.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 21:42:31 GMT
age: 7140
etag: "f529e2fd710f48f8b176fdaa3c3f66446b930d58"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6bf7d96-8563-4612-89c2-6d00db18f9f6.jpeg
200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6bf7d96-8563-4612-89c2-6d00db18f9f6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d733019c5326d4617096c74ae22fdffd
72bc0b2a19ca257ac974460f81af47fcfa2fee24
6746fcedbf4aad5c94582162e343d160fdc7d127bae807d1a97a9d7a231c9a70
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6bf7d96-8563-4612-89c2-6d00db18f9f6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6721
x-amzn-requestid: bf32e1c8-cac1-4f04-abe6-fba2e9e824f3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CK89vHbyoAMFc7Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641aa857-5d84ed861375c4ba04a2ae30;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 07:03:51 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: fmwyq7CNN4Eof4DzXfjQtGIsOaoyLH23RMTYdUyFoxdUWe2EFnMCMg==
via: 1.1 59456abf79b201034ab5c9cfef7355e2.cloudfront.net (CloudFront), 1.1 b48dedcc55e63f14261aa92cf2d61522.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 07:13:29 GMT
age: 59282
etag: "72bc0b2a19ca257ac974460f81af47fcfa2fee24"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ac1765-db6c-42e3-99bf-d857d27a34b9.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ac1765-db6c-42e3-99bf-d857d27a34b9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c831201ad81f55c63c1b101ce854a810
0e9b952f6489f0a5f4862d3bea2fbe0ecdd379e5
c854489720d2ca4a95eef00addda0fcdaf481402d044df7725282654a97eb54a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ac1765-db6c-42e3-99bf-d857d27a34b9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5556
x-amzn-requestid: 6b050645-14aa-47f7-b4a5-2e27abbe5115
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM69eHE3IAMF0Yw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b71ef-6ab2948e2bf2578f29798372;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:23:59 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: CgU9j02Bnw0UdIwQ3sRCDvJoPitHIAUTRDhLH_PMXYlAPoAwSbv6Iw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 4d8620b80ebe37d366388e117039aa8e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 06:24:31 GMT
age: 62220
etag: "0e9b952f6489f0a5f4862d3bea2fbe0ecdd379e5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a6cad75209fdd6f267646b8382348c4b
35d993c683277cba55a4a86e15afa0c378d9a1d8
f3490031d4088f3580570dd096c1daf3780b76da85039fa904a35a9f0d6298be
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 23:41:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 89447eb689782162ac5e4dca438e65c0
e1e8cde045a5eae9fbf1b20707fb8935b0418598
cfe3261f46a5fbe4f73fd16259b7c96480912874097ffea3b6bcb6149367a615
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 807
Cache-Control: max-age=155346
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 23:41:31 GMT
Etag: "641c9c56-1d7"
Expires: Sat, 25 Mar 2023 18:50:37 GMT
Last-Modified: Thu, 23 Mar 2023 18:37:10 GMT
Server: ECAcc (ska/F6D2)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1d3dcf9723865c5e2ed30f84aa78c473
d17e499234c5ffca6691657cda4a476b70158812
0e0a6935498a81269d453b2b2d3f953fa57e4a4bb7f21f0a0862e535f31258fe
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 23:41:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash e5f5bf796d91f271e383cf1ff3ee5af4
70ead02da19095ca752d55e89a48fcdf59d44d33
247f023e282f1556e668df0033858196d682f31f659d1b53ea6dcaeff56c401a
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: VaKP6JVY4GP30pIeGK/0oU/8POG18LZCRmcYUQKUoFLs+OCYmzAuKNVr5UAilQUYlWx3KX0y7zGrzf6Th3O/iA==
content-length: 27907
x-fb-trip-id: 1904183273
date: Thu, 23 Mar 2023 23:41:31 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.temu.com/favicon.ico
200 OK 17 kB IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel\012- data
Hash 8df985695b10c8354c73cc3cea92726d
398ca7a3ade68334b5cb2b2a7c9ff955f4d3fdf5
9a859de3d6de1de5f3c1b0663ee211c0683159c644366b371a980ae9e6fb3ddf
GET /favicon.ico HTTP/1.1
Host: www.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/ruby_free_goods.html?_bg_fs=1&_p_rfs=1&gs_code_way=3&outside_pool_type=1&download_page_threshold=2&progress_gray=1&landing_page_goods_id=10236050&h5_back_retention_pop=false&gs_comp_nickname=or***29&gs_comp_avatar=https%3A%2F%2Favatar-us.kwcdn.com%2Favatar%2Favatar%2Fdefault%2F7d96f863-b4c1-43d6-8f03-ebd1c4e23e25.png&gs_comp_expired=1679700351&needs_login=1&login_scene=7&_p_login_channel=activity&_x_sid=index&refer_share_id=g1KBfpZbLQ9HNg5ow6GAq0P5A3LGqVLy&refer_share_channel=copy_link&refer_share_suin=BDVXLJ4QUDOB7ZRQGAZ2EB2GHQFUL6K4GPP7VRSX2CRCO&group_sn=230323-B3C79D1AB1E745BA3170&_ex_campaign=mkt_activity&_ex_cid=mkt_activity_goods&_ex_sid=free_goods_invite&gs_invite_code=86804124&gs_og_title=Can%20you%20accept%20my%20invitation%20so%20that%20I%20can%20get%20a%20free%20gift%3F&gs_og_description=Click%20the%20link%20now%20and%20participate%20in%20this%20event.&gs_og_image=https%3A%2F%2Faimg.kwcdn.com%2Fupload_aimg%2Fdawn%2Fab83be6b-a436-4b76-b3a9-2669cc2294a0.jpg.slim.jpeg
Cookie: api_uid=CmyYh2Qc46mL6gCII45xAg==; region=211; language=en; currency=USD
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Nginx
date: Thu, 23 Mar 2023 23:41:29 GMT
content-type: image/x-icon
cache-control: max-age=3600
x-yak-request-id: 1679614889994-9b705a952baf8651bc8da1d49e2bcebe
strict-transport-security: max-age=2592000
content-security-policy-report-only: default-src *.temu.com *.kwcdn.com *.pddpic.com wss://*.temu.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.doubleclick.net *.google.com *.googlesyndication.com *.googleusercontent.com www.googleadservices.com www.google.cn www.google.com.hk www.google.co.uk www.google.ca www.google.com.au www.google.co.nz google.com connect.facebook.net www.facebook.com appleid.cdn-apple.com socialplugin.facebook.net *.cash.app *.forter.com blob: data: 'unsafe-eval' 'unsafe-inline' 'wasm-eval'; report-uri /api/sec-csp/c/sec-gif
vary: User-Agent
x-frame-options: SAMEORIGIN
cip: 91.90.42.154
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/10974797857/?random=1679614899595&cv=11&fst=1679614899595&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.temu.com%2Fruby_free_goods.html%3F_bg_fs%3D1%26_p_rfs%3D1%26gs_code_way%3D3%26outside_pool_type%3D1%26download_page_threshold%3D2%26progress_gray%3D1%26landing_page_goods_id%3D10236050%26h5_back_retention_pop%3Dfalse%26gs_comp_nickname%3Dor***29%26gs_comp_avatar%3Dhttps%253A%252F%252Favatar-us.kwcdn.com%252Favatar%252Favatar%252Fdefault%252F7d96f863-b4c1-43d6-8f03-ebd1c4e23e25.png%26gs_comp_expired%3D1679700351%26needs_login%3D1%26login_scene%3D7%26_p_login_channel%3Dactivity%26_x_sid%3Dindex%26refer_share_id%3Dg1KBfpZbLQ9HNg5ow6GAq0P5A3LGqVLy%26refer_share_channel%3Dcopy_link%26&hn=www.googleadservices.com&frm=0&tiba=Get%20Free%20Gifts&auid=1570275214.1679614900&data=event%3Dpage_view&rfmt=3&fmt=4
200 OK 1.5 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/10974797857/?random=1679614899595&cv=11&fst=1679614899595&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.temu.com%2Fruby_free_goods.html%3F_bg_fs%3D1%26_p_rfs%3D1%26gs_code_way%3D3%26outside_pool_type%3D1%26download_page_threshold%3D2%26progress_gray%3D1%26landing_page_goods_id%3D10236050%26h5_back_retention_pop%3Dfalse%26gs_comp_nickname%3Dor***29%26gs_comp_avatar%3Dhttps%253A%252F%252Favatar-us.kwcdn.com%252Favatar%252Favatar%252Fdefault%252F7d96f863-b4c1-43d6-8f03-ebd1c4e23e25.png%26gs_comp_expired%3D1679700351%26needs_login%3D1%26login_scene%3D7%26_p_login_channel%3Dactivity%26_x_sid%3Dindex%26refer_share_id%3Dg1KBfpZbLQ9HNg5ow6GAq0P5A3LGqVLy%26refer_share_channel%3Dcopy_link%26&hn=www.googleadservices.com&frm=0&tiba=Get%20Free%20Gifts&auid=1570275214.1679614900&data=event%3Dpage_view&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (3661), with no line terminators
Hash f7c50d0ed67adf4f0959b10575570b21
26786560f69ffb6d3aa6efd36d6d6016a7a36144
63fca4bda70e18028f296fa7d600d3a84cfd55d2c799d4c372d282950f70ace0
GET /pagead/viewthroughconversion/10974797857/?random=1679614899595&cv=11&fst=1679614899595&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.temu.com%2Fruby_free_goods.html%3F_bg_fs%3D1%26_p_rfs%3D1%26gs_code_way%3D3%26outside_pool_type%3D1%26download_page_threshold%3D2%26progress_gray%3D1%26landing_page_goods_id%3D10236050%26h5_back_retention_pop%3Dfalse%26gs_comp_nickname%3Dor***29%26gs_comp_avatar%3Dhttps%253A%252F%252Favatar-us.kwcdn.com%252Favatar%252Favatar%252Fdefault%252F7d96f863-b4c1-43d6-8f03-ebd1c4e23e25.png%26gs_comp_expired%3D1679700351%26needs_login%3D1%26login_scene%3D7%26_p_login_channel%3Dactivity%26_x_sid%3Dindex%26refer_share_id%3Dg1KBfpZbLQ9HNg5ow6GAq0P5A3LGqVLy%26refer_share_channel%3Dcopy_link%26&hn=www.googleadservices.com&frm=0&tiba=Get%20Free%20Gifts&auid=1570275214.1679614900&data=event%3Dpage_view&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 23:41:31 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1523
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 23-Mar-2023 23:56:31 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 89447eb689782162ac5e4dca438e65c0
e1e8cde045a5eae9fbf1b20707fb8935b0418598
cfe3261f46a5fbe4f73fd16259b7c96480912874097ffea3b6bcb6149367a615
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 807
Cache-Control: max-age=155346
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 23:41:31 GMT
Etag: "641c9c56-1d7"
Expires: Sat, 25 Mar 2023 18:50:37 GMT
Last-Modified: Thu, 23 Mar 2023 18:37:10 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 471
us.matk.temu.com/web/wtm
200 OK 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /web/wtm HTTP/1.1
Host: us.matk.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1515
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Cookie: api_uid=CmyYh2Qc46mL6gCII45xAg==; _gcl_au=1.1.1570275214.1679614900; _bee=SgnwRVPngbWM8DqBIu8RksKmilB2dapf; njrpl=SgnwRVPngbWM8DqBIu8RksKmilB2dapf; dilx=iDdX6LWVljvdf0UrFqi48; _ga_R8YHFZCMMX=GS1.1.1679614899.1.0.1679614899.60.0.0; _ga=GA1.1.605948326.1679614900
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
cache-control: no-cache,private, no-cache, no-store, must-revalidate, proxy-revalidate, no-transform, max-age=0
content-type: application/octet-stream
expires: Thu, 23 Mar 2023 23:41:30 GMT
vary: Accept-Encoding
access-control-allow-origin: https://www.temu.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-HTTP-Method-Override, Cookie, AccessToken
x-cache: CONFIG_NOCACHE
x-azure-ref: 0quMcZAAAAAB/a4x9iWziQ45NFyi3OlJlU1ZHMjBFREdFMDUxNwBhMDc1YzM2Zi1iMDVjLTQ3NDktYjMyNS1iMWJmNmJlNzVjODM=
date: Thu, 23 Mar 2023 23:41:30 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a6cad75209fdd6f267646b8382348c4b
35d993c683277cba55a4a86e15afa0c378d9a1d8
f3490031d4088f3580570dd096c1daf3780b76da85039fa904a35a9f0d6298be
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 23:41:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
us.matk.temu.com/web/wtm
200 OK 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /web/wtm HTTP/1.1
Host: us.matk.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1499
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Cookie: api_uid=CmyYh2Qc46mL6gCII45xAg==; _gcl_au=1.1.1570275214.1679614900
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
cache-control: no-cache,private, no-cache, no-store, must-revalidate, proxy-revalidate, no-transform, max-age=0
content-type: application/octet-stream
expires: Thu, 23 Mar 2023 23:41:30 GMT
vary: Accept-Encoding
access-control-allow-origin: https://www.temu.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-HTTP-Method-Override, Cookie, AccessToken
x-cache: CONFIG_NOCACHE
x-azure-ref: 0quMcZAAAAAB68dHfrmrTQ7aWbxQxMz8IU1ZHMjBFREdFMDUxNwBhMDc1YzM2Zi1iMDVjLTQ3NDktYjMyNS1iMWJmNmJlNzVjODM=
date: Thu, 23 Mar 2023 23:41:30 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1d3dcf9723865c5e2ed30f84aa78c473
d17e499234c5ffca6691657cda4a476b70158812
0e0a6935498a81269d453b2b2d3f953fa57e4a4bb7f21f0a0862e535f31258fe
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 23:41:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.analytics.google.com/g/collect?v=2&tid=G-R8YHFZCMMX>m=45je33m0&_p=280924950&_gaz=1&cid=605948326.1679614900&ul=en-us&sr=1280x1024&_s=1&sid=1679614899&sct=1&seg=0&dl=https%3A%2F%2Fwww.temu.com%2Fruby_free_goods.html%3F_bg_fs%3D1%26_p_rfs%3D1%26gs_code_way%3D3%26outside_pool_type%3D1%26download_page_threshold%3D2%26progress_gray%3D1%26landing_page_goods_id%3D10236050%26h5_back_retention_pop%3Dfalse%26gs_comp_nickname%3Dor***29%26gs_comp_avatar%3Dhttps%253A%252F%252Favatar-us.kwcdn.com%252Favatar%252Favatar%252Fdefault%252F7d96f863-b4c1-43d6-8f03-ebd1c4e23e25.png%26gs_comp_expired%3D1679700351%26needs_login%3D1%26login_scene%3D7%26_p_login_channel%3Dactivity%26_x_sid%3Dindex%26refer_share_id%3Dg1KBfpZbLQ9HNg5ow6GAq0P5A3LGqVLy%26refer_share_channel%3Dcopy_link%26refer_share_suin%3DBDVXLJ4QUDOB7ZRQGAZ2EB2GHQFUL6K4GPP7VRSX2CRCO%26group_sn%3D230323-B3C79D1AB1E745BA3170%26_ex_campaign%3Dmkt_activity%26_ex_cid%3Dmkt_activity_goods%26_ex_sid%3Dfree_goods_invite%26gs_invite_code%3D86804124%26gs_og_title%3DCan%2520you%2520accept%2520my%2520invitation%2520so%2520that%2520I%2520can%2520get%2520a%2520free%2520gift%253F%26gs_og_description%3DClick%2520the%2520link%2520now%2520and%2520participate%2520in%2520this%2520event.%26gs_og_image%3Dhttps%253A%252F%252Faimg.kwcdn.com%252Fupload_aimg%252Fdawn%252Fab83be6b-a436-4b76-b3a9-2669cc2294a0.jpg.slim.jpeg&dt=Get%20Free%20Gifts&en=page_view&_fv=1&_nsi=1&_ss=2&ep.transport=beacon
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-R8YHFZCMMX>m=45je33m0&_p=280924950&_gaz=1&cid=605948326.1679614900&ul=en-us&sr=1280x1024&_s=1&sid=1679614899&sct=1&seg=0&dl=https%3A%2F%2Fwww.temu.com%2Fruby_free_goods.html%3F_bg_fs%3D1%26_p_rfs%3D1%26gs_code_way%3D3%26outside_pool_type%3D1%26download_page_threshold%3D2%26progress_gray%3D1%26landing_page_goods_id%3D10236050%26h5_back_retention_pop%3Dfalse%26gs_comp_nickname%3Dor***29%26gs_comp_avatar%3Dhttps%253A%252F%252Favatar-us.kwcdn.com%252Favatar%252Favatar%252Fdefault%252F7d96f863-b4c1-43d6-8f03-ebd1c4e23e25.png%26gs_comp_expired%3D1679700351%26needs_login%3D1%26login_scene%3D7%26_p_login_channel%3Dactivity%26_x_sid%3Dindex%26refer_share_id%3Dg1KBfpZbLQ9HNg5ow6GAq0P5A3LGqVLy%26refer_share_channel%3Dcopy_link%26refer_share_suin%3DBDVXLJ4QUDOB7ZRQGAZ2EB2GHQFUL6K4GPP7VRSX2CRCO%26group_sn%3D230323-B3C79D1AB1E745BA3170%26_ex_campaign%3Dmkt_activity%26_ex_cid%3Dmkt_activity_goods%26_ex_sid%3Dfree_goods_invite%26gs_invite_code%3D86804124%26gs_og_title%3DCan%2520you%2520accept%2520my%2520invitation%2520so%2520that%2520I%2520can%2520get%2520a%2520free%2520gift%253F%26gs_og_description%3DClick%2520the%2520link%2520now%2520and%2520participate%2520in%2520this%2520event.%26gs_og_image%3Dhttps%253A%252F%252Faimg.kwcdn.com%252Fupload_aimg%252Fdawn%252Fab83be6b-a436-4b76-b3a9-2669cc2294a0.jpg.slim.jpeg&dt=Get%20Free%20Gifts&en=page_view&_fv=1&_nsi=1&_ss=2&ep.transport=beacon
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-R8YHFZCMMX>m=45je33m0&_p=280924950&_gaz=1&cid=605948326.1679614900&ul=en-us&sr=1280x1024&_s=1&sid=1679614899&sct=1&seg=0&dl=https%3A%2F%2Fwww.temu.com%2Fruby_free_goods.html%3F_bg_fs%3D1%26_p_rfs%3D1%26gs_code_way%3D3%26outside_pool_type%3D1%26download_page_threshold%3D2%26progress_gray%3D1%26landing_page_goods_id%3D10236050%26h5_back_retention_pop%3Dfalse%26gs_comp_nickname%3Dor***29%26gs_comp_avatar%3Dhttps%253A%252F%252Favatar-us.kwcdn.com%252Favatar%252Favatar%252Fdefault%252F7d96f863-b4c1-43d6-8f03-ebd1c4e23e25.png%26gs_comp_expired%3D1679700351%26needs_login%3D1%26login_scene%3D7%26_p_login_channel%3Dactivity%26_x_sid%3Dindex%26refer_share_id%3Dg1KBfpZbLQ9HNg5ow6GAq0P5A3LGqVLy%26refer_share_channel%3Dcopy_link%26refer_share_suin%3DBDVXLJ4QUDOB7ZRQGAZ2EB2GHQFUL6K4GPP7VRSX2CRCO%26group_sn%3D230323-B3C79D1AB1E745BA3170%26_ex_campaign%3Dmkt_activity%26_ex_cid%3Dmkt_activity_goods%26_ex_sid%3Dfree_goods_invite%26gs_invite_code%3D86804124%26gs_og_title%3DCan%2520you%2520accept%2520my%2520invitation%2520so%2520that%2520I%2520can%2520get%2520a%2520free%2520gift%253F%26gs_og_description%3DClick%2520the%2520link%2520now%2520and%2520participate%2520in%2520this%2520event.%26gs_og_image%3Dhttps%253A%252F%252Faimg.kwcdn.com%252Fupload_aimg%252Fdawn%252Fab83be6b-a436-4b76-b3a9-2669cc2294a0.jpg.slim.jpeg&dt=Get%20Free%20Gifts&en=page_view&_fv=1&_nsi=1&_ss=2&ep.transport=beacon HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.temu.com
date: Thu, 23 Mar 2023 23:41:31 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash af767a0f38aa932dc23106c403e9b5f3
5a5662e147f43d1561ba78517738f6be86eb2cde
359fea0fbdd5740a613795d4491c534ebf14e2ffb55edf78c80dc0dde78c42e4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 23:41:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.analytics.google.com/g/collect?v=2&tid=G-R8YHFZCMMX>m=45je33m0&_p=280924950&cid=605948326.1679614900&ul=en-us&sr=1280x1024&_eu=AEA&_s=2&sid=1679614899&sct=1&seg=0&dl=https%3A%2F%2Fwww.temu.com%2Fruby_free_goods.html%3F_bg_fs%3D1%26_p_rfs%3D1%26gs_code_way%3D3%26outside_pool_type%3D1%26download_page_threshold%3D2%26progress_gray%3D1%26landing_page_goods_id%3D10236050%26h5_back_retention_pop%3Dfalse%26gs_comp_nickname%3Dor***29%26gs_comp_avatar%3Dhttps%253A%252F%252Favatar-us.kwcdn.com%252Favatar%252Favatar%252Fdefault%252F7d96f863-b4c1-43d6-8f03-ebd1c4e23e25.png%26gs_comp_expired%3D1679700351%26needs_login%3D1%26login_scene%3D7%26_p_login_channel%3Dactivity%26_x_sid%3Dindex%26refer_share_id%3Dg1KBfpZbLQ9HNg5ow6GAq0P5A3LGqVLy%26refer_share_channel%3Dcopy_link%26refer_share_suin%3DBDVXLJ4QUDOB7ZRQGAZ2EB2GHQFUL6K4GPP7VRSX2CRCO%26group_sn%3D230323-B3C79D1AB1E745BA3170%26_ex_campaign%3Dmkt_activity%26_ex_cid%3Dmkt_activity_goods%26_ex_sid%3Dfree_goods_invite%26gs_invite_code%3D86804124%26gs_og_title%3DCan%2520you%2520accept%2520my%2520invitation%2520so%2520that%2520I%2520can%2520get%2520a%2520free%2520gift%253F%26gs_og_description%3DClick%2520the%2520link%2520now%2520and%2520participate%2520in%2520this%2520event.%26gs_og_image%3Dhttps%253A%252F%252Faimg.kwcdn.com%252Fupload_aimg%252Fdawn%252Fab83be6b-a436-4b76-b3a9-2669cc2294a0.jpg.slim.jpeg&dt=Get%20Free%20Gifts&en=scroll&epn.percent_scrolled=90&_et=9
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-R8YHFZCMMX>m=45je33m0&_p=280924950&cid=605948326.1679614900&ul=en-us&sr=1280x1024&_eu=AEA&_s=2&sid=1679614899&sct=1&seg=0&dl=https%3A%2F%2Fwww.temu.com%2Fruby_free_goods.html%3F_bg_fs%3D1%26_p_rfs%3D1%26gs_code_way%3D3%26outside_pool_type%3D1%26download_page_threshold%3D2%26progress_gray%3D1%26landing_page_goods_id%3D10236050%26h5_back_retention_pop%3Dfalse%26gs_comp_nickname%3Dor***29%26gs_comp_avatar%3Dhttps%253A%252F%252Favatar-us.kwcdn.com%252Favatar%252Favatar%252Fdefault%252F7d96f863-b4c1-43d6-8f03-ebd1c4e23e25.png%26gs_comp_expired%3D1679700351%26needs_login%3D1%26login_scene%3D7%26_p_login_channel%3Dactivity%26_x_sid%3Dindex%26refer_share_id%3Dg1KBfpZbLQ9HNg5ow6GAq0P5A3LGqVLy%26refer_share_channel%3Dcopy_link%26refer_share_suin%3DBDVXLJ4QUDOB7ZRQGAZ2EB2GHQFUL6K4GPP7VRSX2CRCO%26group_sn%3D230323-B3C79D1AB1E745BA3170%26_ex_campaign%3Dmkt_activity%26_ex_cid%3Dmkt_activity_goods%26_ex_sid%3Dfree_goods_invite%26gs_invite_code%3D86804124%26gs_og_title%3DCan%2520you%2520accept%2520my%2520invitation%2520so%2520that%2520I%2520can%2520get%2520a%2520free%2520gift%253F%26gs_og_description%3DClick%2520the%2520link%2520now%2520and%2520participate%2520in%2520this%2520event.%26gs_og_image%3Dhttps%253A%252F%252Faimg.kwcdn.com%252Fupload_aimg%252Fdawn%252Fab83be6b-a436-4b76-b3a9-2669cc2294a0.jpg.slim.jpeg&dt=Get%20Free%20Gifts&en=scroll&epn.percent_scrolled=90&_et=9
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-R8YHFZCMMX>m=45je33m0&_p=280924950&cid=605948326.1679614900&ul=en-us&sr=1280x1024&_eu=AEA&_s=2&sid=1679614899&sct=1&seg=0&dl=https%3A%2F%2Fwww.temu.com%2Fruby_free_goods.html%3F_bg_fs%3D1%26_p_rfs%3D1%26gs_code_way%3D3%26outside_pool_type%3D1%26download_page_threshold%3D2%26progress_gray%3D1%26landing_page_goods_id%3D10236050%26h5_back_retention_pop%3Dfalse%26gs_comp_nickname%3Dor***29%26gs_comp_avatar%3Dhttps%253A%252F%252Favatar-us.kwcdn.com%252Favatar%252Favatar%252Fdefault%252F7d96f863-b4c1-43d6-8f03-ebd1c4e23e25.png%26gs_comp_expired%3D1679700351%26needs_login%3D1%26login_scene%3D7%26_p_login_channel%3Dactivity%26_x_sid%3Dindex%26refer_share_id%3Dg1KBfpZbLQ9HNg5ow6GAq0P5A3LGqVLy%26refer_share_channel%3Dcopy_link%26refer_share_suin%3DBDVXLJ4QUDOB7ZRQGAZ2EB2GHQFUL6K4GPP7VRSX2CRCO%26group_sn%3D230323-B3C79D1AB1E745BA3170%26_ex_campaign%3Dmkt_activity%26_ex_cid%3Dmkt_activity_goods%26_ex_sid%3Dfree_goods_invite%26gs_invite_code%3D86804124%26gs_og_title%3DCan%2520you%2520accept%2520my%2520invitation%2520so%2520that%2520I%2520can%2520get%2520a%2520free%2520gift%253F%26gs_og_description%3DClick%2520the%2520link%2520now%2520and%2520participate%2520in%2520this%2520event.%26gs_og_image%3Dhttps%253A%252F%252Faimg.kwcdn.com%252Fupload_aimg%252Fdawn%252Fab83be6b-a436-4b76-b3a9-2669cc2294a0.jpg.slim.jpeg&dt=Get%20Free%20Gifts&en=scroll&epn.percent_scrolled=90&_et=9 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: https://www.temu.com
date: Thu, 23 Mar 2023 23:41:31 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.temu.com/api/sec-csp/c/sec-gif
200 OK 0 B URL HTTP/2 www.temu.com/api/sec-csp/c/sec-gif
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/sec-csp/c/sec-gif HTTP/1.1
Host: www.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 3754
Origin: https://www.temu.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Nginx
date: Thu, 23 Mar 2023 23:41:31 GMT
content-length: 0
x-yak-request-id: 1679614891230-bd9e4efbe7624c5c74593d2606a885b5
access-control-allow-origin: https://www.temu.com
vary: Origin
access-control-allow-headers: Origin, X-Requested-With, Content-Type, X_Requested_With, Accept, X-HTTP-Method-Override, Cookie, AccessToken, PASSID, VerifyAuthToken, Anti-Content
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
strict-transport-security: max-age=2592000
content-security-policy-report-only: default-src 'none';script-src 'report-sample';report-uri /api/sec-csp/c-api/sec-gif
yak-timeinfo: 1679614891230|2
set-cookie: api_uid=Cm3AwWQc46tCCAD3WYybAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.temu.com; path=/
cip: 91.90.42.154
X-Firefox-Spdy: h2
stats.g.doubleclick.net/g/collect?v=2&tid=G-R8YHFZCMMX&cid=605948326.1679614900>m=45je33m0&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-R8YHFZCMMX&cid=605948326.1679614900>m=45je33m0&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-R8YHFZCMMX&cid=605948326.1679614900>m=45je33m0&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.temu.com
date: Thu, 23 Mar 2023 23:41:31 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a37ccb2b0d2b6bd75ea76a9535478b74
282cdfc85b1bc6e7b8741fb82ea37844ba831a53
6f9eded96973ad739947a784fddd57298bd3bc8abb3d71eff5c5492826cf254a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 23:41:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash af767a0f38aa932dc23106c403e9b5f3
5a5662e147f43d1561ba78517738f6be86eb2cde
359fea0fbdd5740a613795d4491c534ebf14e2ffb55edf78c80dc0dde78c42e4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 23:41:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/1p-user-list/10974797857/?random=1679614899595&cv=11&fst=1679612400000&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.temu.com%2Fruby_free_goods.html%3F_bg_fs%3D1%26_p_rfs%3D1%26gs_code_way%3D3%26outside_pool_type%3D1%26download_page_threshold%3D2%26progress_gray%3D1%26landing_page_goods_id%3D10236050%26h5_back_retention_pop%3Dfalse%26gs_comp_nickname%3Dor***29%26gs_comp_avatar%3Dhttps%253A%252F%252Favatar-us.kwcdn.com%252Favatar%252Favatar%252Fdefault%252F7d96f863-b4c1-43d6-8f03-ebd1c4e23e25.png%26gs_comp_expired%3D1679700351%26needs_login%3D1%26login_scene%3D7%26_p_login_channel%3Dactivity%26_x_sid%3Dindex%26refer_share_id%3Dg1KBfpZbLQ9HNg5ow6GAq0P5A3LGqVLy%26refer_share_channel%3Dcopy_link%26&frm=0&tiba=Get%20Free%20Gifts&data=event%3Dpage_view&fmt=3&is_vtc=1&random=3415137887&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/10974797857/?random=1679614899595&cv=11&fst=1679612400000&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.temu.com%2Fruby_free_goods.html%3F_bg_fs%3D1%26_p_rfs%3D1%26gs_code_way%3D3%26outside_pool_type%3D1%26download_page_threshold%3D2%26progress_gray%3D1%26landing_page_goods_id%3D10236050%26h5_back_retention_pop%3Dfalse%26gs_comp_nickname%3Dor***29%26gs_comp_avatar%3Dhttps%253A%252F%252Favatar-us.kwcdn.com%252Favatar%252Favatar%252Fdefault%252F7d96f863-b4c1-43d6-8f03-ebd1c4e23e25.png%26gs_comp_expired%3D1679700351%26needs_login%3D1%26login_scene%3D7%26_p_login_channel%3Dactivity%26_x_sid%3Dindex%26refer_share_id%3Dg1KBfpZbLQ9HNg5ow6GAq0P5A3LGqVLy%26refer_share_channel%3Dcopy_link%26&frm=0&tiba=Get%20Free%20Gifts&data=event%3Dpage_view&fmt=3&is_vtc=1&random=3415137887&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/10974797857/?random=1679614899595&cv=11&fst=1679612400000&bg=ffffff&guid=ON&async=1>m=45He33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.temu.com%2Fruby_free_goods.html%3F_bg_fs%3D1%26_p_rfs%3D1%26gs_code_way%3D3%26outside_pool_type%3D1%26download_page_threshold%3D2%26progress_gray%3D1%26landing_page_goods_id%3D10236050%26h5_back_retention_pop%3Dfalse%26gs_comp_nickname%3Dor***29%26gs_comp_avatar%3Dhttps%253A%252F%252Favatar-us.kwcdn.com%252Favatar%252Favatar%252Fdefault%252F7d96f863-b4c1-43d6-8f03-ebd1c4e23e25.png%26gs_comp_expired%3D1679700351%26needs_login%3D1%26login_scene%3D7%26_p_login_channel%3Dactivity%26_x_sid%3Dindex%26refer_share_id%3Dg1KBfpZbLQ9HNg5ow6GAq0P5A3LGqVLy%26refer_share_channel%3Dcopy_link%26&frm=0&tiba=Get%20Free%20Gifts&data=event%3Dpage_view&fmt=3&is_vtc=1&random=3415137887&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 23 Mar 2023 23:41:31 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c1bec9941c82e2a75f433a9989ff131d
f362aafde39e53e6c85aed88514e7d9272d8b099
693fe25761b15b3f663bb491a3cad382f1bb0a60083375b6aec21af2fdddb58e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 23:41:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.facebook.com/tr/?id=1117165839153461&ev=PageView&dl=https%3A%2F%2Fwww.temu.com%2Fruby_free_goods.html%3F_bg_fs%3D1%26_p_rfs%3D1%26gs_code_way%3D3%26outside_pool_type%3D1%26download_page_threshold%3D2%26progress_gray%3D1%26landing_page_goods_id%3D10236050%26h5_back_retention_pop%3Dfalse%26gs_comp_nickname%3Dor***29%26gs_comp_avatar%3Dhttps%253A%252F%252Favatar-us.kwcdn.com%252Favatar%252Favatar%252Fdefault%252F7d96f863-b4c1-43d6-8f03-ebd1c4e23e25.png%26gs_comp_expired%3D1679700351%26needs_login%3D1%26login_scene%3D7%26_p_login_channel%3Dactivity%26_x_sid%3Dindex%26refer_share_id%3Dg1KBfpZbLQ9HNg5ow6GAq0P5A3LGqVLy%26refer_share_channel%3Dcopy_link%26refer_share_suin%3DBDVXLJ4QUDOB7ZRQGAZ2EB2GHQFUL6K4GPP7VRSX2CRCO%26group_sn%3D230323-B3C79D1AB1E745BA3170%26_ex_campaign%3Dmkt_activity%26_ex_cid%3Dmkt_activity_goods%26_ex_sid%3Dfree_goods_invite%26gs_invite_code%3D86804124%26gs_og_title%3DCan%2520you%2520accept%2520my%2520invitation%2520so%2520that%2520I%2520can%2520get%2520a%2520free%2520gift%253F%26gs_og_description%3DClick%2520the%2520link%2520now%2520and%2520participate%2520in%2520this%2520event.%26gs_og_image%3Dhttps%253A%252F%252Faimg.kwcdn.com%252Fupload_aimg%252Fdawn%252Fab83be6b-a436-4b76-b3a9-2669cc2294a0.jpg.slim.jpeg&rl=&if=false&ts=1679614900528&sw=1280&sh=1024&v=2.9.99&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&cs_est=true&fbp=fb.1.1679614900527.762769912&it=1679614900305&coo=false&tm=1&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1117165839153461&ev=PageView&dl=https%3A%2F%2Fwww.temu.com%2Fruby_free_goods.html%3F_bg_fs%3D1%26_p_rfs%3D1%26gs_code_way%3D3%26outside_pool_type%3D1%26download_page_threshold%3D2%26progress_gray%3D1%26landing_page_goods_id%3D10236050%26h5_back_retention_pop%3Dfalse%26gs_comp_nickname%3Dor***29%26gs_comp_avatar%3Dhttps%253A%252F%252Favatar-us.kwcdn.com%252Favatar%252Favatar%252Fdefault%252F7d96f863-b4c1-43d6-8f03-ebd1c4e23e25.png%26gs_comp_expired%3D1679700351%26needs_login%3D1%26login_scene%3D7%26_p_login_channel%3Dactivity%26_x_sid%3Dindex%26refer_share_id%3Dg1KBfpZbLQ9HNg5ow6GAq0P5A3LGqVLy%26refer_share_channel%3Dcopy_link%26refer_share_suin%3DBDVXLJ4QUDOB7ZRQGAZ2EB2GHQFUL6K4GPP7VRSX2CRCO%26group_sn%3D230323-B3C79D1AB1E745BA3170%26_ex_campaign%3Dmkt_activity%26_ex_cid%3Dmkt_activity_goods%26_ex_sid%3Dfree_goods_invite%26gs_invite_code%3D86804124%26gs_og_title%3DCan%2520you%2520accept%2520my%2520invitation%2520so%2520that%2520I%2520can%2520get%2520a%2520free%2520gift%253F%26gs_og_description%3DClick%2520the%2520link%2520now%2520and%2520participate%2520in%2520this%2520event.%26gs_og_image%3Dhttps%253A%252F%252Faimg.kwcdn.com%252Fupload_aimg%252Fdawn%252Fab83be6b-a436-4b76-b3a9-2669cc2294a0.jpg.slim.jpeg&rl=&if=false&ts=1679614900528&sw=1280&sh=1024&v=2.9.99&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&cs_est=true&fbp=fb.1.1679614900527.762769912&it=1679614900305&coo=false&tm=1&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1117165839153461&ev=PageView&dl=https%3A%2F%2Fwww.temu.com%2Fruby_free_goods.html%3F_bg_fs%3D1%26_p_rfs%3D1%26gs_code_way%3D3%26outside_pool_type%3D1%26download_page_threshold%3D2%26progress_gray%3D1%26landing_page_goods_id%3D10236050%26h5_back_retention_pop%3Dfalse%26gs_comp_nickname%3Dor***29%26gs_comp_avatar%3Dhttps%253A%252F%252Favatar-us.kwcdn.com%252Favatar%252Favatar%252Fdefault%252F7d96f863-b4c1-43d6-8f03-ebd1c4e23e25.png%26gs_comp_expired%3D1679700351%26needs_login%3D1%26login_scene%3D7%26_p_login_channel%3Dactivity%26_x_sid%3Dindex%26refer_share_id%3Dg1KBfpZbLQ9HNg5ow6GAq0P5A3LGqVLy%26refer_share_channel%3Dcopy_link%26refer_share_suin%3DBDVXLJ4QUDOB7ZRQGAZ2EB2GHQFUL6K4GPP7VRSX2CRCO%26group_sn%3D230323-B3C79D1AB1E745BA3170%26_ex_campaign%3Dmkt_activity%26_ex_cid%3Dmkt_activity_goods%26_ex_sid%3Dfree_goods_invite%26gs_invite_code%3D86804124%26gs_og_title%3DCan%2520you%2520accept%2520my%2520invitation%2520so%2520that%2520I%2520can%2520get%2520a%2520free%2520gift%253F%26gs_og_description%3DClick%2520the%2520link%2520now%2520and%2520participate%2520in%2520this%2520event.%26gs_og_image%3Dhttps%253A%252F%252Faimg.kwcdn.com%252Fupload_aimg%252Fdawn%252Fab83be6b-a436-4b76-b3a9-2669cc2294a0.jpg.slim.jpeg&rl=&if=false&ts=1679614900528&sw=1280&sh=1024&v=2.9.99&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&cs_est=true&fbp=fb.1.1679614900527.762769912&it=1679614900305&coo=false&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Thu, 23 Mar 2023 23:41:31 GMT
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash a173b3896deb97e3e6503dce57a9eeff
5bcd8d96e92e8008b0b9cbc13f52282cea87e5da
79718470efde097902729804b012d7b7a31d6f6922ad93b5e01fdee7f404578d
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Thu, 23 Mar 2023 23:41:32 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 15036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 23 Mar 2023 20:56:29 GMT
Expires: Fri, 24 Mar 2023 20:56:29 GMT
ETag: "5bcd8d96e92e8008b0b9cbc13f52282cea87e5da"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash a173b3896deb97e3e6503dce57a9eeff
5bcd8d96e92e8008b0b9cbc13f52282cea87e5da
79718470efde097902729804b012d7b7a31d6f6922ad93b5e01fdee7f404578d
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Thu, 23 Mar 2023 23:41:32 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 15036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 23 Mar 2023 20:56:29 GMT
Expires: Fri, 24 Mar 2023 20:56:29 GMT
ETag: "5bcd8d96e92e8008b0b9cbc13f52282cea87e5da"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
static.kwcdn.com/m-assets/assets/js/react_webpack_runtime_cb6fb6dbc9c21cd9ac09.js
200 OK 0 B URL HTTP/2 static.kwcdn.com/m-assets/assets/js/react_webpack_runtime_cb6fb6dbc9c21cd9ac09.js
IP
GET /m-assets/assets/js/react_webpack_runtime_cb6fb6dbc9c21cd9ac09.js HTTP/1.1
Host: static.kwcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 23 Mar 2023 23:41:29 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: max-age=31536000
content-md5: wkBWNjhkv9149PaVOD4Igw==
etag: W/"c24056363864bfdd78f4f695383e0883"
last-modified: Thu, 23 Mar 2023 12:00:56 GMT
x-content-type-options: nosniff
x-pos-request-id: a60918c2-001e-001f-127f-5decc5000000
cf-cache-status: HIT
age: 39666
access-control-allow-origin: *
coloid: 83
timing-allow-origin: *
x-cip: 91.90.42.154
server: cloudflare
cf-ray: 7aca8684f93ab4f4-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.kwcdn.com/m-assets/assets/js/5153_05eeaa1934b04dde4039.js
200 OK 0 B URL HTTP/2 static.kwcdn.com/m-assets/assets/js/5153_05eeaa1934b04dde4039.js
IP
GET /m-assets/assets/js/5153_05eeaa1934b04dde4039.js HTTP/1.1
Host: static.kwcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Mar 2023 23:41:29 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: max-age=31536000
content-md5: d13VIZjy8FJT25plnK0mBA==
etag: W/"775dd52198f2f05253db9a659cad2604"
last-modified: Thu, 23 Mar 2023 12:00:58 GMT
x-content-type-options: nosniff
x-pos-request-id: 3b1f8073-801e-003b-2f7f-5dd1fe000000
cf-cache-status: HIT
age: 39666
access-control-allow-origin: *
coloid: 83
timing-allow-origin: *
x-cip: 91.90.42.154
server: cloudflare
cf-ray: 7aca8684f92bb4f4-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.kwcdn.com/m-assets/assets/js/biz_vendors_a53d351557e5394ba10e.js
200 OK 0 B URL HTTP/2 static.kwcdn.com/m-assets/assets/js/biz_vendors_a53d351557e5394ba10e.js
IP
GET /m-assets/assets/js/biz_vendors_a53d351557e5394ba10e.js HTTP/1.1
Host: static.kwcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 23 Mar 2023 23:41:29 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: max-age=31536000
content-md5: yLg7ZrnQKgJAyTpJ03rFzg==
etag: W/"c8b83b66b9d02a0240c93a49d37ac5ce"
last-modified: Thu, 23 Mar 2023 12:00:57 GMT
x-content-type-options: nosniff
x-pos-request-id: 9afec163-501e-0046-747f-5dfce5000000
cf-cache-status: HIT
age: 39666
access-control-allow-origin: *
coloid: 83
timing-allow-origin: *
x-cip: 91.90.42.154
server: cloudflare
cf-ray: 7aca8684f940b4f4-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.kwcdn.com/m-assets/assets/js/risk-finger-h5_05624d9679dc868511b4.js
200 OK 0 B URL HTTP/2 static.kwcdn.com/m-assets/assets/js/risk-finger-h5_05624d9679dc868511b4.js
IP
GET /m-assets/assets/js/risk-finger-h5_05624d9679dc868511b4.js HTTP/1.1
Host: static.kwcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Mar 2023 23:41:30 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: max-age=31536000
content-md5: C4sX6U2e6irvbSgiuHAXdQ==
etag: W/"0b8b17e94d9eea2aef6d2822b8701775"
last-modified: Wed, 08 Feb 2023 06:09:49 GMT
x-content-type-options: nosniff
x-pos-request-id: d25fc30b-e01e-0069-2786-3be4c9000000
cf-cache-status: HIT
age: 3757396
access-control-allow-origin: *
coloid: 83
timing-allow-origin: *
x-cip: 91.90.42.154
server: cloudflare
cf-ray: 7aca8687cc90b4ff-OSL
content-encoding: br
X-Firefox-Spdy: h2
us.thtk.temu.com/c/th.gif
200 OK 0 B URL HTTP/2 us.thtk.temu.com/c/th.gif
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
POST /c/th.gif HTTP/1.1
Host: us.thtk.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 627
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Cookie: api_uid=CmyYh2Qc46mL6gCII45xAg==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Thu, 23 Mar 2023 23:41:31 GMT
content-type: image/gif
expires: Thu, 23 Mar 2023 23:41:30 GMT
cache-control: no-cache
access-control-allow-origin: https://www.temu.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-HTTP-Method-Override, Cookie, AccessToken, Anti-Content
X-Firefox-Spdy: h2
static.kwcdn.com/m-assets/assets/js/ruby_free_goods_4333cb018d5d07f5ec76.js
200 OK 0 B URL HTTP/2 static.kwcdn.com/m-assets/assets/js/ruby_free_goods_4333cb018d5d07f5ec76.js
IP
GET /m-assets/assets/js/ruby_free_goods_4333cb018d5d07f5ec76.js HTTP/1.1
Host: static.kwcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 23 Mar 2023 23:41:29 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: max-age=31536000
content-md5: mV1lIEMm0CICokQFkG2/cA==
etag: W/"995d65204326d02202a24405906dbf70"
last-modified: Thu, 23 Mar 2023 12:00:55 GMT
x-content-type-options: nosniff
x-pos-request-id: 3b1f806c-801e-003b-287f-5dd1fe000000
cf-cache-status: HIT
age: 39666
access-control-allow-origin: *
coloid: 83
timing-allow-origin: *
x-cip: 91.90.42.154
server: cloudflare
cf-ray: 7aca8684f931b4f4-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.kwcdn.com/m-assets/assets/js/408_c72ee5df1cf80634b5f4.js
200 OK 0 B URL HTTP/2 static.kwcdn.com/m-assets/assets/js/408_c72ee5df1cf80634b5f4.js
IP
GET /m-assets/assets/js/408_c72ee5df1cf80634b5f4.js HTTP/1.1
Host: static.kwcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 23 Mar 2023 23:41:29 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: max-age=31536000
content-md5: pHlKubNYGj/IrsJ6uTLTFQ==
etag: W/"a4794ab9b3581a3fc8aec27ab932d315"
last-modified: Thu, 23 Mar 2023 06:32:15 GMT
x-content-type-options: nosniff
x-pos-request-id: 95409a18-f01e-0034-0551-5d58e1000000
cf-cache-status: HIT
age: 39666
access-control-allow-origin: *
coloid: 83
timing-allow-origin: *
x-cip: 91.90.42.154
server: cloudflare
cf-ray: 7aca8684f932b4f4-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.kwcdn.com/m-assets/assets/css/5153_a1a979e06d689e8a2824.css
200 OK 0 B URL HTTP/2 static.kwcdn.com/m-assets/assets/css/5153_a1a979e06d689e8a2824.css
IP
GET /m-assets/assets/css/5153_a1a979e06d689e8a2824.css HTTP/1.1
Host: static.kwcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 23 Mar 2023 23:41:29 GMT
content-type: text/css
vary: Accept-Encoding
cache-control: max-age=31536000
content-md5: /LuZeghH/8L0BgumgLm38A==
etag: W/"fcbb997a0847ffc2f4060ba680b9b7f0"
last-modified: Thu, 23 Mar 2023 12:00:57 GMT
x-content-type-options: nosniff
x-pos-request-id: a609186c-001e-001f-447f-5decc5000000
cf-cache-status: HIT
age: 39666
access-control-allow-origin: *
coloid: 83
timing-allow-origin: *
x-cip: 91.90.42.154
server: cloudflare
cf-ray: 7aca8684f9f1b4ff-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.kwcdn.com/m-assets/assets/js/dawn_common_popup_sku_2aff7a8c2fcb65b0c0b9.js
200 OK 0 B URL HTTP/2 static.kwcdn.com/m-assets/assets/js/dawn_common_popup_sku_2aff7a8c2fcb65b0c0b9.js
IP
GET /m-assets/assets/js/dawn_common_popup_sku_2aff7a8c2fcb65b0c0b9.js HTTP/1.1
Host: static.kwcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 23 Mar 2023 23:41:29 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: max-age=31536000
content-md5: ErTNpDyLvlsh5/2iKVCy7A==
etag: W/"12b4cda43c8bbe5b21e7fda22950b2ec"
last-modified: Thu, 23 Mar 2023 12:00:57 GMT
x-content-type-options: nosniff
x-pos-request-id: 49f4c551-501e-007a-407f-5d29ed000000
cf-cache-status: HIT
age: 39666
access-control-allow-origin: *
coloid: 83
timing-allow-origin: *
x-cip: 91.90.42.154
server: cloudflare
cf-ray: 7aca8684f92ab4f4-OSL
content-encoding: br
X-Firefox-Spdy: h2
us.thtk.temu.com/c/th.gif
200 OK 0 B URL HTTP/2 us.thtk.temu.com/c/th.gif
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
POST /c/th.gif HTTP/1.1
Host: us.thtk.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1899
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Cookie: api_uid=CmyYh2Qc46mL6gCII45xAg==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Thu, 23 Mar 2023 23:41:31 GMT
content-type: image/gif
expires: Thu, 23 Mar 2023 23:41:30 GMT
cache-control: no-cache
access-control-allow-origin: https://www.temu.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-HTTP-Method-Override, Cookie, AccessToken, Anti-Content
X-Firefox-Spdy: h2
static.kwcdn.com/m-assets/assets/js/vendors_7b18f31158ae24935be7.js
200 OK 0 B URL HTTP/2 static.kwcdn.com/m-assets/assets/js/vendors_7b18f31158ae24935be7.js
IP
GET /m-assets/assets/js/vendors_7b18f31158ae24935be7.js HTTP/1.1
Host: static.kwcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 23 Mar 2023 23:41:29 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: max-age=31536000
content-md5: 6b2m6FO09+cR99TmbnCBag==
etag: W/"e9bda6e853b4f7e711f7d4e66e70816a"
last-modified: Sun, 12 Mar 2023 12:27:19 GMT
x-content-type-options: nosniff
x-pos-request-id: e5147075-a01e-0005-14de-5452f2000000
cf-cache-status: HIT
age: 988218
access-control-allow-origin: *
coloid: 83
timing-allow-origin: *
x-cip: 91.90.42.154
server: cloudflare
cf-ray: 7aca8684f93eb4f4-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.temu.com/api/phantom/xg/pfb/l1
200 OK 0 B URL HTTP/2 www.temu.com/api/phantom/xg/pfb/l1
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /api/phantom/xg/pfb/l1 HTTP/1.1
Host: www.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/ruby_free_goods.html?_bg_fs=1&_p_rfs=1&gs_code_way=3&outside_pool_type=1&download_page_threshold=2&progress_gray=1&landing_page_goods_id=10236050&h5_back_retention_pop=false&gs_comp_nickname=or***29&gs_comp_avatar=https%3A%2F%2Favatar-us.kwcdn.com%2Favatar%2Favatar%2Fdefault%2F7d96f863-b4c1-43d6-8f03-ebd1c4e23e25.png&gs_comp_expired=1679700351&needs_login=1&login_scene=7&_p_login_channel=activity&_x_sid=index&refer_share_id=g1KBfpZbLQ9HNg5ow6GAq0P5A3LGqVLy&refer_share_channel=copy_link&refer_share_suin=BDVXLJ4QUDOB7ZRQGAZ2EB2GHQFUL6K4GPP7VRSX2CRCO&group_sn=230323-B3C79D1AB1E745BA3170&_ex_campaign=mkt_activity&_ex_cid=mkt_activity_goods&_ex_sid=free_goods_invite&gs_invite_code=86804124&gs_og_title=Can%20you%20accept%20my%20invitation%20so%20that%20I%20can%20get%20a%20free%20gift%3F&gs_og_description=Click%20the%20link%20now%20and%20participate%20in%20this%20event.&gs_og_image=https%3A%2F%2Faimg.kwcdn.com%2Fupload_aimg%2Fdawn%2Fab83be6b-a436-4b76-b3a9-2669cc2294a0.jpg.slim.jpeg
Cookie: api_uid=CmyYh2Qc46mL6gCII45xAg==; region=211; language=en; currency=USD; timezone=UTC; webp=1; _nano_fp=XpE8lpEan0CblpXaXC_lL5q0cL7BLbX6AObsH5wB
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Nginx
date: Thu, 23 Mar 2023 23:41:30 GMT
content-type: application/json;charset=UTF-8
content-encoding: gzip
vary: Accept-Encoding
x-yak-request-id: 1679614890459-0b506f667d04f4d3e3882be080e1b894
strict-transport-security: max-age=2592000
content-security-policy-report-only: default-src 'none';script-src 'report-sample';report-uri /api/sec-csp/c-api/sec-gif
yak-timeinfo: 1679614890459|1
cip: 91.90.42.154
X-Firefox-Spdy: h2
locale.temu.com/api/bg/huygens/region/locate
200 OK 0 B URL HTTP/2 locale.temu.com/api/bg/huygens/region/locate
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
OPTIONS /api/bg/huygens/region/locate HTTP/1.1
Host: locale.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.temu.com/
Origin: https://www.temu.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: Nginx
date: Thu, 23 Mar 2023 23:41:30 GMT
content-type: application/octet-stream
x-yak-request-id: 1679614890516-0d7ee63fb0e434150faca131b02b8564
access-control-allow-origin: https://www.temu.com
vary: Accept-Encoding, Origin
access-control-allow-headers: Origin, X-Requested-With, Content-Type, X_Requested_With, Accept, X-HTTP-Method-Override, Cookie, AccessToken, PASSID, VerifyAuthToken, Anti-Content
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
strict-transport-security: max-age=2592000
yak-timeinfo: 1679614890516|0
set-cookie: api_uid=Cm3AwWQc46o8bADpV/tHAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.temu.com; path=/
content-encoding: gzip
cip: 91.90.42.154
X-Firefox-Spdy: h2
www.temu.com/api/phantom/xg/pfb/a4
200 OK 0 B URL HTTP/2 www.temu.com/api/phantom/xg/pfb/a4
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
POST /api/phantom/xg/pfb/a4 HTTP/1.1
Host: www.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=UTF-8
Content-Length: 1507
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/ruby_free_goods.html?_bg_fs=1&_p_rfs=1&gs_code_way=3&outside_pool_type=1&download_page_threshold=2&progress_gray=1&landing_page_goods_id=10236050&h5_back_retention_pop=false&gs_comp_nickname=or***29&gs_comp_avatar=https%3A%2F%2Favatar-us.kwcdn.com%2Favatar%2Favatar%2Fdefault%2F7d96f863-b4c1-43d6-8f03-ebd1c4e23e25.png&gs_comp_expired=1679700351&needs_login=1&login_scene=7&_p_login_channel=activity&_x_sid=index&refer_share_id=g1KBfpZbLQ9HNg5ow6GAq0P5A3LGqVLy&refer_share_channel=copy_link&refer_share_suin=BDVXLJ4QUDOB7ZRQGAZ2EB2GHQFUL6K4GPP7VRSX2CRCO&group_sn=230323-B3C79D1AB1E745BA3170&_ex_campaign=mkt_activity&_ex_cid=mkt_activity_goods&_ex_sid=free_goods_invite&gs_invite_code=86804124&gs_og_title=Can%20you%20accept%20my%20invitation%20so%20that%20I%20can%20get%20a%20free%20gift%3F&gs_og_description=Click%20the%20link%20now%20and%20participate%20in%20this%20event.&gs_og_image=https%3A%2F%2Faimg.kwcdn.com%2Fupload_aimg%2Fdawn%2Fab83be6b-a436-4b76-b3a9-2669cc2294a0.jpg.slim.jpeg
Cookie: api_uid=CmyYh2Qc46mL6gCII45xAg==; region=211; language=en; currency=USD; timezone=UTC; webp=1; _nano_fp=XpE8lpEan0CblpXaXC_lL5q0cL7BLbX6AObsH5wB
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Nginx
date: Thu, 23 Mar 2023 23:41:30 GMT
content-type: application/json;charset=UTF-8
set-cookie: _bee=SgnwRVPngbWM8DqBIu8RksKmilB2dapf; Max-Age=31536000; Expires=Fri, 22 Mar 2024 23:41:30 GMT; Path=/; Domain=.temu.com
njrpl=SgnwRVPngbWM8DqBIu8RksKmilB2dapf; Max-Age=31536000; Expires=Fri, 22 Mar 2024 23:41:30 GMT; Path=/; Domain=.temu.com
dilx=iDdX6LWVljvdf0UrFqi48; Max-Age=31536000; Expires=Fri, 22 Mar 2024 23:41:30 GMT; Path=/; Domain=.temu.com
content-encoding: gzip
x-yak-request-id: 1679614890456-05e5d186c92b6319fdd5c09f797a0c8c
access-control-allow-origin: https://www.temu.com
vary: Accept-Encoding, Origin
access-control-allow-headers: Origin, X-Requested-With, Content-Type, X_Requested_With, Accept, X-HTTP-Method-Override, Cookie, AccessToken, PASSID, VerifyAuthToken, Anti-Content
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
strict-transport-security: max-age=2592000
content-security-policy-report-only: default-src 'none';script-src 'report-sample';report-uri /api/sec-csp/c-api/sec-gif
yak-timeinfo: 1679614890456|88
cip: 91.90.42.154
X-Firefox-Spdy: h2
locale.temu.com/api/bg/huygens/region/locate
200 OK 0 B URL HTTP/2 locale.temu.com/api/bg/huygens/region/locate
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
POST /api/bg/huygens/region/locate HTTP/1.1
Host: locale.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=UTF-8
Content-Length: 2
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Cookie: api_uid=CmyYh2Qc46mL6gCII45xAg==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: Nginx
date: Thu, 23 Mar 2023 23:41:30 GMT
content-type: application/json;charset=UTF-8
content-encoding: gzip
x-yak-request-id: 1679614890620-d81a982490332396fc692bd5fd02b7a0
access-control-allow-origin: https://www.temu.com
vary: Accept-Encoding, Origin
access-control-allow-headers: Origin, X-Requested-With, Content-Type, X_Requested_With, Accept, X-HTTP-Method-Override, Cookie, AccessToken, PASSID, VerifyAuthToken, Anti-Content
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
strict-transport-security: max-age=2592000
yak-timeinfo: 1679614890620|1
cip: 91.90.42.154
X-Firefox-Spdy: h2
us.pftk.temu.com/pmm/api/pmm/api
200 OK 0 B URL HTTP/2 us.pftk.temu.com/pmm/api/pmm/api
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
POST /pmm/api/pmm/api HTTP/1.1
Host: us.pftk.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1809
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Cookie: api_uid=CmyYh2Qc46mL6gCII45xAg==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Thu, 23 Mar 2023 23:41:30 GMT
content-type: application/octet-stream
expires: Thu, 23 Mar 2023 23:41:29 GMT
cache-control: no-cache
access-control-allow-origin: https://www.temu.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-HTTP-Method-Override, Cookie, AccessToken, Anti-Content
X-Firefox-Spdy: h2
www.temu.com/ruby_free_goods.html?_bg_fs=1&_p_rfs=1&gs_code_way=3&outside_pool_type=1&download_page_threshold=2&progress_gray=1&landing_page_goods_id=10236050&h5_back_retention_pop=false&gs_comp_nickname=or***29&gs_comp_avatar=https%3A%2F%2Favatar-us.kwcdn.com%2Favatar%2Favatar%2Fdefault%2F7d96f863-b4c1-43d6-8f03-ebd1c4e23e25.png&gs_comp_expired=1679700351&needs_login=1&login_scene=7&_p_login_channel=activity&_x_sid=index&refer_share_id=g1KBfpZbLQ9HNg5ow6GAq0P5A3LGqVLy&refer_share_channel=copy_link&refer_share_suin=BDVXLJ4QUDOB7ZRQGAZ2EB2GHQFUL6K4GPP7VRSX2CRCO&group_sn=230323-B3C79D1AB1E745BA3170&_ex_campaign=mkt_activity&_ex_cid=mkt_activity_goods&_ex_sid=free_goods_invite&gs_invite_code=86804124&gs_og_title=Can%20you%20accept%20my%20invitation%20so%20that%20I%20can%20get%20a%20free%20gift%3F&gs_og_description=Click%20the%20link%20now%20and%20participate%20in%20this%20event.&gs_og_image=https%3A%2F%2Faimg.kwcdn.com%2Fupload_aimg%2Fdawn%2Fab83be6b-a436-4b76-b3a9-2669cc2294a0.jpg.slim.jpeg
200 OK 0 B URL HTTP/2 www.temu.com/ruby_free_goods.html?_bg_fs=1&_p_rfs=1&gs_code_way=3&outside_pool_type=1&download_page_threshold=2&progress_gray=1&landing_page_goods_id=10236050&h5_back_retention_pop=false&gs_comp_nickname=or***29&gs_comp_avatar=https%3A%2F%2Favatar-us.kwcdn.com%2Favatar%2Favatar%2Fdefault%2F7d96f863-b4c1-43d6-8f03-ebd1c4e23e25.png&gs_comp_expired=1679700351&needs_login=1&login_scene=7&_p_login_channel=activity&_x_sid=index&refer_share_id=g1KBfpZbLQ9HNg5ow6GAq0P5A3LGqVLy&refer_share_channel=copy_link&refer_share_suin=BDVXLJ4QUDOB7ZRQGAZ2EB2GHQFUL6K4GPP7VRSX2CRCO&group_sn=230323-B3C79D1AB1E745BA3170&_ex_campaign=mkt_activity&_ex_cid=mkt_activity_goods&_ex_sid=free_goods_invite&gs_invite_code=86804124&gs_og_title=Can%20you%20accept%20my%20invitation%20so%20that%20I%20can%20get%20a%20free%20gift%3F&gs_og_description=Click%20the%20link%20now%20and%20participate%20in%20this%20event.&gs_og_image=https%3A%2F%2Faimg.kwcdn.com%2Fupload_aimg%2Fdawn%2Fab83be6b-a436-4b76-b3a9-2669cc2294a0.jpg.slim.jpeg
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /ruby_free_goods.html?_bg_fs=1&_p_rfs=1&gs_code_way=3&outside_pool_type=1&download_page_threshold=2&progress_gray=1&landing_page_goods_id=10236050&h5_back_retention_pop=false&gs_comp_nickname=or***29&gs_comp_avatar=https%3A%2F%2Favatar-us.kwcdn.com%2Favatar%2Favatar%2Fdefault%2F7d96f863-b4c1-43d6-8f03-ebd1c4e23e25.png&gs_comp_expired=1679700351&needs_login=1&login_scene=7&_p_login_channel=activity&_x_sid=index&refer_share_id=g1KBfpZbLQ9HNg5ow6GAq0P5A3LGqVLy&refer_share_channel=copy_link&refer_share_suin=BDVXLJ4QUDOB7ZRQGAZ2EB2GHQFUL6K4GPP7VRSX2CRCO&group_sn=230323-B3C79D1AB1E745BA3170&_ex_campaign=mkt_activity&_ex_cid=mkt_activity_goods&_ex_sid=free_goods_invite&gs_invite_code=86804124&gs_og_title=Can%20you%20accept%20my%20invitation%20so%20that%20I%20can%20get%20a%20free%20gift%3F&gs_og_description=Click%20the%20link%20now%20and%20participate%20in%20this%20event.&gs_og_image=https%3A%2F%2Faimg.kwcdn.com%2Fupload_aimg%2Fdawn%2Fab83be6b-a436-4b76-b3a9-2669cc2294a0.jpg.slim.jpeg HTTP/1.1
Host: www.temu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: api_uid=CmyYh2Qc46mL6gCII45xAg==
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
server: Nginx
date: Thu, 23 Mar 2023 23:41:29 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding, iris-context-client-language, User-Agent
content-language: en
set-cookie: AccessToken=; Domain=.temu.com; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT
PDDAccessToken=; Domain=.temu.com; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT
user_uin=; Domain=.temu.com; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT
pdd_user_uin=; Domain=.temu.com; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT
pdd_user_id=; Domain=.temu.com; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT
region=211; Expires=Sat, 22-Apr-23 23:41:29 GMT; Path=/
language=en; Expires=Sat, 22-Apr-23 23:41:29 GMT; Path=/
currency=USD; Expires=Sat, 22-Apr-23 23:41:29 GMT; Path=/
surrogate-control: no-store
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-accel-buffering: no
content-encoding: gzip
x-yak-request-id: 1679614889483-92af57f5c77c6faf575c746490b1f085
strict-transport-security: max-age=2592000
content-security-policy-report-only: default-src *.temu.com *.kwcdn.com *.pddpic.com wss://*.temu.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.doubleclick.net *.google.com *.googlesyndication.com *.googleusercontent.com www.googleadservices.com www.google.cn www.google.com.hk www.google.co.uk www.google.ca www.google.com.au www.google.co.nz google.com connect.facebook.net www.facebook.com appleid.cdn-apple.com socialplugin.facebook.net *.cash.app *.forter.com blob: data: 'unsafe-eval' 'unsafe-inline' 'wasm-eval'; report-uri /api/sec-csp/c/sec-gif
x-frame-options: SAMEORIGIN
cip: 91.90.42.154
X-Firefox-Spdy: h2
static.kwcdn.com/m-assets/assets/js/1671_c7081295b0e3e34538bc.js
200 OK 0 B URL HTTP/2 static.kwcdn.com/m-assets/assets/js/1671_c7081295b0e3e34538bc.js
IP
GET /m-assets/assets/js/1671_c7081295b0e3e34538bc.js HTTP/1.1
Host: static.kwcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.temu.com
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 23 Mar 2023 23:41:29 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: max-age=31536000
content-md5: czNuqmSTLV8GkziDUFEXjQ==
etag: W/"73336eaa64932d5f069338835051178d"
last-modified: Mon, 20 Mar 2023 07:44:39 GMT
x-content-type-options: nosniff
x-pos-request-id: 1a314fbf-b01e-0058-5c00-5beeda000000
cf-cache-status: HIT
age: 304670
access-control-allow-origin: *
coloid: 83
timing-allow-origin: *
x-cip: 91.90.42.154
server: cloudflare
cf-ray: 7aca8684f942b4f4-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.kwcdn.com/m-assets/assets/css/dawn_common_popup_sku_99fcae5b95b0a8aefb0e.css
200 OK 0 B URL HTTP/2 static.kwcdn.com/m-assets/assets/css/dawn_common_popup_sku_99fcae5b95b0a8aefb0e.css
IP
GET /m-assets/assets/css/dawn_common_popup_sku_99fcae5b95b0a8aefb0e.css HTTP/1.1
Host: static.kwcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.temu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 23 Mar 2023 23:41:29 GMT
content-type: text/css
vary: Accept-Encoding
cache-control: max-age=31536000
content-md5: hTnayU4OHj5+yqLoyn4rTg==
etag: W/"8539dac94e0e1e3e7ecaa2e8ca7e2b4e"
last-modified: Thu, 23 Mar 2023 06:32:14 GMT
x-content-type-options: nosniff
x-pos-request-id: 2f79403e-101e-0092-7051-5d648b000000
cf-cache-status: HIT
age: 52526
access-control-allow-origin: *
coloid: 83
timing-allow-origin: *
x-cip: 91.90.42.154
server: cloudflare
cf-ray: 7aca8684f9f8b4ff-OSL
content-encoding: br
X-Firefox-Spdy: h2
20.237.30.240
31.13.72.36
104.18.29.69
23.36.77.32
62.71.2.168
77.72.169.211
212.227.67.34