firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b593eb39329cfe060d55be5e4a5405e2
78e46c1028e9f94f8569303ad2d90d7df13a059a
08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 04 Sep 2022 19:44:19 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: u4oTKnA-RwOOv5UC0siFwJNlk8qh5Sx29pnRb5GRRBmCkvRJMZImkg==
Age: 725
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d931e0142ef5ffe9cdb4c4c6bfcb9bc9
d9c4caf525e8926b042a14f38d374cc4033ed768
f610984fb0a75b3a31424faa860cbc8172c7f21804df1dc14fbb685b7c456f29
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F610984FB0A75B3A31424FAA860CBC8172C7F21804DF1DC14FBB685B7C456F29"
Last-Modified: Sat, 03 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2451
Expires: Sun, 04 Sep 2022 20:37:15 GMT
Date: Sun, 04 Sep 2022 19:56:24 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 04 Sep 2022 01:15:18 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vus831cPOVDhhpZjOq4cGBke36Y5J-BdKig6XHKrzC_DFAl1s1efYg==
age: 67267
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 19:56:24 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
cdn.fuseplatform.net/publift/tags/2/2361/fuse.js
200 OK 47 kB URL HTTP/2 cdn.fuseplatform.net/publift/tags/2/2361/fuse.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash c8d3b5b2d8a2304559a2875f677fb3ad
57c07726631bd058004cdc41a17bae8dfe9aa6ce
ae240379d6798caa31835f44d5b40ac9471c8a93d33480fcadd6a5997b16dcc3
GET /publift/tags/2/2361/fuse.js HTTP/1.1
Host: cdn.fuseplatform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "c8d3b5b2d8a2304559a2875f677fb3ad:1661485351.516058"
last-modified: Fri, 26 Aug 2022 03:42:31 GMT
server: AkamaiNetStorage
content-length: 47392
content-encoding: gzip
cache-control: max-age=1800
expires: Sun, 04 Sep 2022 20:26:25 GMT
date: Sun, 04 Sep 2022 19:56:25 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 194d72d26ddeaa8a8a266839eb707300
86427a0db92a3b4bd2690ad361109559c7212992
ab77f42ccfa0c649217777139f0d14a6742039596ee37a045c5fe96e7ca32338
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:56:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-WNS8JR4
200 OK 60 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-WNS8JR4
IP
Hash 0b5744bc5f14e6f6fddcef084cefc5dc
3828181b305dc339d4cc4d909f6b9264e3a08142
33fb216440b7cb9fc862d169cfa4c903bd0a87ed16aad7b0d56a1b6df38cbe99
GET /gtm.js?id=GTM-WNS8JR4 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 04 Sep 2022 19:56:25 GMT
expires: Sun, 04 Sep 2022 19:56:25 GMT
cache-control: private, max-age=900
last-modified: Sun, 04 Sep 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42039
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash cbbea4e9e40df76e57191620e01b79f8
da4d4ed8b34a7185273ba7293c06db95acf5ae5a
45a39a4e8b89f7601ff56d7d10e5520be1236dc5fe10000bd3308a75df90f2ea
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Sun, 04 Sep 2022 19:56:25 GMT
Server: ECS (dcb/7EEA)
X-Cache: Miss from cloudfront
Via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: BMIypq_DcU2WQ2R00_GmgFbu6cl5kaS5vprVoiVsFHa5oqLL85Cusg==
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Sun, 04 Sep 2022 19:38:16 GMT
Expires: Sun, 04 Sep 2022 20:06:12 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ib0QRkFAB7gDlYdu2SubRW8Hizh59LykghYGn5iiQnINupeynEdIBQ==
Age: 1089
cdn.fuseplatform.net/prebid/prebid-8fdb6e27182e91d9a1f45bbd4265a02f.js
200 OK 74 kB URL HTTP/2 cdn.fuseplatform.net/prebid/prebid-8fdb6e27182e91d9a1f45bbd4265a02f.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65423)
Hash dbefad12d04f2752270052c8b22d3a4c
e3ae3d1622012549fdf9d48690efa888bdb8c4c0
0590f56c5e58b59c359aa271fe979dda42f6bde078a37ccf990aabaf3f3d6017
GET /prebid/prebid-8fdb6e27182e91d9a1f45bbd4265a02f.js HTTP/1.1
Host: cdn.fuseplatform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "dbefad12d04f2752270052c8b22d3a4c:1661485351.581595"
last-modified: Fri, 26 Aug 2022 03:42:31 GMT
server: AkamaiNetStorage
content-length: 73833
content-encoding: gzip
cache-control: max-age=86400000
expires: Sat, 31 May 2025 19:56:25 GMT
date: Sun, 04 Sep 2022 19:56:25 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.fuseplatform.net/telemetry/noconsent?v=1&ttm=1662321381659&cookie=true&res=1280x1024&device=desktop&browser=firefox&fuuid=496d396b-9ec9-5397-a99e-f0273ae303a5&fid=2361&pubid=5&url=https%3A%2F%2Fwordcounter.icu%2FRalph1&sid=7faec0487066c667ff8d&srate=100&adserver=gpt&etm=1022&e=fuse-load
200 OK 1 B URL HTTP/2 cdn.fuseplatform.net/telemetry/noconsent?v=1&ttm=1662321381659&cookie=true&res=1280x1024&device=desktop&browser=firefox&fuuid=496d396b-9ec9-5397-a99e-f0273ae303a5&fid=2361&pubid=5&url=https%3A%2F%2Fwordcounter.icu%2FRalph1&sid=7faec0487066c667ff8d&srate=100&adserver=gpt&etm=1022&e=fuse-load
IP
ASN #20940 Akamai International B.V.
File type very short file (no magic)
Hash 9dd4e461268c8034f5c8564e155c67a6
11f6ad8ec52a2984abaafd7c3b516503785c2072
2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881
GET /telemetry/noconsent?v=1&ttm=1662321381659&cookie=true&res=1280x1024&device=desktop&browser=firefox&fuuid=496d396b-9ec9-5397-a99e-f0273ae303a5&fid=2361&pubid=5&url=https%3A%2F%2Fwordcounter.icu%2FRalph1&sid=7faec0487066c667ff8d&srate=100&adserver=gpt&etm=1022&e=fuse-load HTTP/1.1
Host: cdn.fuseplatform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-length: 1
content-type: text/plain
etag: "9dd4e461268c8034f5c8564e155c67a6:1660131111.248793"
last-modified: Wed, 10 Aug 2022 11:31:51 GMT
server: AkamaiNetStorage
cache-control: max-age=1800
expires: Sun, 04 Sep 2022 20:26:25 GMT
date: Sun, 04 Sep 2022 19:56:25 GMT
access-control-allow-origin: https://wordcounter.icu
vary: Origin
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 77d035f38a45e8a1ec30d5fe9611880b
01cf34de95257da64dac90edf5a86203f1160271
7dc687d6bb1679ba5567e58b4f8c1e78766e7ee36273ba7f62068c595d57f7f3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 663
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:56:25 GMT
Last-Modified: Sun, 04 Sep 2022 19:45:23 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash cc6ea3e01d1d6b8c4b28ff64d3b795a7
017457c6f5a63157102485a956c667aad36d33ef
e6fe903f67363d3e92b929e274f0de7c2f6a15b6df1806198199440ed0fe221e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:56:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cmp.quantcast.com/choice/PRrmquD1Ggcb1/wordcounter.icu/choice.js?tag_version=V2
200 OK 5.1 kB URL HTTP/2 cmp.quantcast.com/choice/PRrmquD1Ggcb1/wordcounter.icu/choice.js?tag_version=V2
IP
Hash aae84cfa829002a9475c3ca06160037f
4adbba2988c3f93a3689713b1229cecaae479567
015003d87fe9d1709e88307caa17d9712ff13c32c93ea18c1400a08f7a567ca6
GET /choice/PRrmquD1Ggcb1/wordcounter.icu/choice.js?tag_version=V2 HTTP/1.1
Host: cmp.quantcast.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: https://wordcounter.icu
access-control-allow-methods: GET
access-control-max-age: 3000
access-control-allow-credentials: true
last-modified: Fri, 15 Jul 2022 05:27:59 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
content-encoding: gzip
date: Sun, 04 Sep 2022 19:56:25 GMT
cache-control: max-age=900
etag: W/"d543dbae27e0fbc2490048ba8f5c5417"
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: molGiLDto6rCZMj1fqi7vAJkrH1bGdoII1Kseu4X6P-Y5-sKM_Ypdw==
age: 17
X-Firefox-Spdy: h2
nc.pubpowerplatform.io/w/328a11e1-4aee-44c2-a744-020c0f0f2d12.js
200 OK 2.3 kB URL HTTP/2 nc.pubpowerplatform.io/w/328a11e1-4aee-44c2-a744-020c0f0f2d12.js
IP
File type ASCII text, with very long lines (4003), with no line terminators
Hash 32031c4313eaa65fe5b15ba3651022db
9ae1aef11f91075c7bece905f9c2d086cd480ad2
295b93987dee85f9ea071621c3643983d096dd9bd29c93a7c25ff0586ac9109d
GET /w/328a11e1-4aee-44c2-a744-020c0f0f2d12.js HTTP/1.1
Host: nc.pubpowerplatform.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:56:25 GMT
content-type: application/javascript
vary: Accept-Encoding
server: cloudflare
cf-ray: 745949d1a9630b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: hg9Uw4R9sfxCId3XI4Sw4g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: daoNUWKW8DTJPu74XDbGPClG4L4=
stickervillain.com/f4b1ca9d58a479bcfd46c3e000d1beb0/invoke.js
200 OK 499 B URL HTTP/1.1 stickervillain.com/f4b1ca9d58a479bcfd46c3e000d1beb0/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (1014), with no line terminators
Hash 40126707daa97f872165cc45d6b74a53
267a54a815f41f6d86b4ecb9f54a7c40aac899ee
23dedb7e34b1880b29d9ffa8bbd7c741f5d798f4ac2009e0b1099ff7551396d8
GET /f4b1ca9d58a479bcfd46c3e000d1beb0/invoke.js HTTP/1.1
Host: stickervillain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sun, 04 Sep 2022 19:56:25 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6598ccf0317f671f15a1ef23701cf98f
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 86175f387b509e6ca6a3ff8556281e24
c0c0dfa1aaf19def080126b7af80e85cbe6d6a9e
75e2c4e2498af0a856ea82ccdb5f4e6f23afc45ffdb18a2141dbeea7b892d87e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:56:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/r/collect?v=1&_v=j83&a=260733335&t=pageview&_s=1&dl=https%3A%2F%2Fwordcounter.icu%2FRalph1&ul=en-us&de=UTF-8&dt=Word%20Counter%20-%20Count%20Words&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IEBAAEAB~&jid=1467718473&gjid=463942143&cid=1996612751.1662321382&tid=UA-96442335-5&_gid=441099641.1662321382&_r=1&z=1105952646
200 OK 35 B URL HTTP/2 www.google-analytics.com/r/collect?v=1&_v=j83&a=260733335&t=pageview&_s=1&dl=https%3A%2F%2Fwordcounter.icu%2FRalph1&ul=en-us&de=UTF-8&dt=Word%20Counter%20-%20Count%20Words&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IEBAAEAB~&jid=1467718473&gjid=463942143&cid=1996612751.1662321382&tid=UA-96442335-5&_gid=441099641.1662321382&_r=1&z=1105952646
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /r/collect?v=1&_v=j83&a=260733335&t=pageview&_s=1&dl=https%3A%2F%2Fwordcounter.icu%2FRalph1&ul=en-us&de=UTF-8&dt=Word%20Counter%20-%20Count%20Words&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IEBAAEAB~&jid=1467718473&gjid=463942143&cid=1996612751.1662321382&tid=UA-96442335-5&_gid=441099641.1662321382&_r=1&z=1105952646 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
date: Sun, 04 Sep 2022 19:56:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
x-content-type-options: nosniff
content-type: image/gif
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3f5b4e778429d4ba70b497cc9fbb1127
db17f774a14f160caa77eb0222152767a364bba7
64da763bf84ec2d6284a112f50392f15a8b11122f3875317c52bd6c5e8e8d894
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:56:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3f5b4e778429d4ba70b497cc9fbb1127
db17f774a14f160caa77eb0222152767a364bba7
64da763bf84ec2d6284a112f50392f15a8b11122f3875317c52bd6c5e8e8d894
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:56:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.recaptcha.net/recaptcha/api.js?onload=onloadRecaptchaCallback&render=explicit
200 OK 584 B URL HTTP/2 www.recaptcha.net/recaptcha/api.js?onload=onloadRecaptchaCallback&render=explicit
IP
File type ASCII text, with very long lines (921), with no line terminators
Hash 07e9beb2b26c91b000671bb9a28c4010
d849c3f03345cf22dec1bdaf601aa0372be98eda
cf19284220294fba13b459cedcbd45382a2818617c5f8c6e00cb9dba2034f180
GET /recaptcha/api.js?onload=onloadRecaptchaCallback&render=explicit HTTP/1.1
Host: www.recaptcha.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Sun, 04 Sep 2022 19:56:26 GMT
date: Sun, 04 Sep 2022 19:56:26 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 584
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 156d7d83d2899889ec3b3a297affd8fa
79aed08f4a4cde43e6ae986d17fc4fd378b72c27
20de311d8c7424285f0b7890d40ea46352e66fba0844e0f4fda134c8ef8eea50
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:56:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
securepubads.g.doubleclick.net/tag/js/gpt.js
200 OK 28 kB URL HTTP/2 securepubads.g.doubleclick.net/tag/js/gpt.js
IP
File type ASCII text, with very long lines (44995)
Hash 8c51a1a49346223e341cc809c273fb7b
2865ca9fb08d3ac9339858eb4787ff524072bf20
5d0cb9144ff0b0ce48082caba0a48c18cd77aacef144f0ddcec85cb2f3daf7e6
GET /tag/js/gpt.js HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 28504
date: Sun, 04 Sep 2022 19:56:26 GMT
expires: Sun, 04 Sep 2022 19:56:26 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1324 / 623 of 1000 / last-modified: 1662156516"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3f5b4e778429d4ba70b497cc9fbb1127
db17f774a14f160caa77eb0222152767a364bba7
64da763bf84ec2d6284a112f50392f15a8b11122f3875317c52bd6c5e8e8d894
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:56:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fwordcounter.icu&pubid=8b48e249-e9e6-4a52-8b48-396ea93403e8
204 No Content 0 B URL HTTP/2 c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fwordcounter.icu&pubid=8b48e249-e9e6-4a52-8b48-396ea93403e8
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn/prod/config?src=600&u=https%3A%2F%2Fwordcounter.icu&pubid=8b48e249-e9e6-4a52-8b48-396ea93403e8 HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: https://wordcounter.icu
access-control-allow-credentials: true
cache-control: max-age=21550, s-maxage=21600
date: Sun, 04 Sep 2022 19:34:18 GMT
server: Server
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jGWF7c30aBwTQ2FXXSZfcqxTEtfHnXxulTGC6a8Xupa1yCLJdAZp0Q==
age: 1328
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 98125354dbaa891018a9429a7aae3ea1
a692cc9a073c9666971db41444342fc9d7dab2e2
771b96e4fb485d1ef041ee20fc060bb5b4b521043ec7a51ceaccefcbe837bd4f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:56:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
disploot.com/r/p.html?f=nfenmo&e=1184250294462
200 OK 2.8 kB URL HTTP/2 disploot.com/r/p.html?f=nfenmo&e=1184250294462
IP
Hash c01ae465057079a5755a9324e5a670ae
341522ebbc7bcd08a28c6ff6b13637947ba78cd7
4d19e688878378cc023d85fe34273c15a04ff2e6fd4146484867000fcfa0adb3
GET /r/p.html?f=nfenmo&e=1184250294462 HTTP/1.1
Host: disploot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Sun, 04 Sep 2022 04:14:44 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: XJ5hEHrzT96_aEM4LiFLPaGvWp9VyROGoqUstfVSORq69yJPfmg3wQ==
age: 58365
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/duyHVVR9Brf6N2GewjkPRfsA/recaptcha__en.js
200 OK 158 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/duyHVVR9Brf6N2GewjkPRfsA/recaptcha__en.js
IP
File type HTML document, ASCII text, with very long lines (579)
Size 158 kB (158056 bytes)
Hash d63a69f898e1d00cfc7c871744ded8c4
e166540eccb571c95c8c1135c2168cf5df306991
ed7892ca1498d6dfc0ff8b354ab8c409eed81b1fa77b427467815d0c7f45021c
GET /recaptcha/releases/duyHVVR9Brf6N2GewjkPRfsA/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 158056
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Sep 2022 21:31:14 GMT
expires: Sat, 02 Sep 2023 21:31:14 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 02 Sep 2022 18:40:58 GMT
content-type: text/javascript
age: 167112
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
disploot.com/r/p.html?f=tmieqrp&e=1184250294462
200 OK 2.8 kB URL HTTP/2 disploot.com/r/p.html?f=tmieqrp&e=1184250294462
IP
Hash 739a2f064c59ddfca27a6c0abce0d199
11b9e3c8f93ecf06bbe279898bbc6236363dd258
68f472010968ea2c2400fd5b9fb783dd6608f35d151379dd0cff6f70276d4bfb
GET /r/p.html?f=tmieqrp&e=1184250294462 HTTP/1.1
Host: disploot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Sun, 04 Sep 2022 04:14:44 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: nUKY1Hl_0Lw6gLKRD-y3JYTCY1DKNf_Mhns6kBIOMoQajorTsB2H4Q==
age: 58365
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
disploot.com/r/p.html?f=rkcpnsuq&e=1184250294462
200 OK 134 kB URL HTTP/2 disploot.com/r/p.html?f=rkcpnsuq&e=1184250294462
IP
File type HTML document, ASCII text, with very long lines (55822)
Size 134 kB (134276 bytes)
Hash 1c3c9f1a0f8ea9280ef8aefd33ed5906
c396a1e3cc3e8b99bc809bb8a952cfbb182d42e9
4a3d5a22ef133ba64ca1370cdc30f66e966202711735b7e8adc60079950349d2
GET /r/p.html?f=rkcpnsuq&e=1184250294462 HTTP/1.1
Host: disploot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Sun, 04 Sep 2022 04:14:44 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: DHkZ0TaPH5-smPWUC3MR93Bo9HcYNA-3go9HhOdwGEnFHkWMYcxWBw==
age: 58365
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
200 OK 89 kB URL HTTP/2 c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
IP
Hash 4f59a28b21ff186f29284ca39283aebe
3f37f1fa52c9ecaa9fd40d44561b5ffb05c3f7c6
5571668db066df782f60bd1bb696166e8df4239d4677bc458265adbe60dd153d
GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 24 Aug 2022 19:06:24 GMT
x-amz-version-id: tKimXuvhjexkvOlm5D.ynBWfUtiJgbbH
server: AmazonS3
content-encoding: gzip
date: Sun, 04 Sep 2022 19:56:26 GMT
cache-control: public, max-age=86400
etag: W/"a4d296427fc806b21335359e398c025c"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WEhbLqi8G5te8uRAc_4fkPglBcf1xMt4zSnNFYVbYzYh9IQ0lZu75w==
age: 60611
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 3243dfc012e2a0d78449f18d6e790214
29c974ac4a38dd9a282f45d3d22f585d3b9f3189
8f01731fc64f40a78777e348140b2a731483469c48503fc0428522a5a716f387
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3617
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:56:26 GMT
Last-Modified: Sun, 04 Sep 2022 18:56:09 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
status.geotrust.com/
200 OK 471 B IP
Hash 9283c03bdf0da8a468e12a6a9019440e
90edd0ffb17ee1e30ee5b1ee2f35214d297962bc
b4402cf88a711a9b0edd14304b5b102bf58a2a69de2af6fdbef015342213dfb0
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4024
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:56:26 GMT
Last-Modified: Sun, 04 Sep 2022 18:49:22 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 3243dfc012e2a0d78449f18d6e790214
29c974ac4a38dd9a282f45d3d22f585d3b9f3189
8f01731fc64f40a78777e348140b2a731483469c48503fc0428522a5a716f387
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3617
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:56:26 GMT
Last-Modified: Sun, 04 Sep 2022 18:56:09 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
adpone-d.openx.net/w/1.0/arj?ju=https%3A%2F%2Fwordcounter.icu%2FRalph1&ch=UTF-8&res=1280x1024x24&ifr=true&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=c8d33d54-0000-40ef-bf70-009cda37f268&nocache=1662321382762&schain=1.0%2C1!adpone.com%2Cf40bd5618606f2326096f40bd5618606f2326096%2C1%2C%2C%2C&aus=300x250&divids=%252F21671350435%252C22654422242%252F300x250-wordcounter.icu&aucs=%252F21671350435%252C22654422242%252F300x250-wordcounter.icu&auid=544045495
200 OK 79 B URL HTTP/2 adpone-d.openx.net/w/1.0/arj?ju=https%3A%2F%2Fwordcounter.icu%2FRalph1&ch=UTF-8&res=1280x1024x24&ifr=true&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=c8d33d54-0000-40ef-bf70-009cda37f268&nocache=1662321382762&schain=1.0%2C1!adpone.com%2Cf40bd5618606f2326096f40bd5618606f2326096%2C1%2C%2C%2C&aus=300x250&divids=%252F21671350435%252C22654422242%252F300x250-wordcounter.icu&aucs=%252F21671350435%252C22654422242%252F300x250-wordcounter.icu&auid=544045495
IP
File type JSON data\012- , ASCII text
Hash 266cb20ecb008ed30a9f5760fe3fb366
09b6fc9ba1640294a5294d0ba5e7ec90df97d06a
5bcbf9e2218f7da16ac7f6b8e3d28807a5326e33f5f31d57a009e50323cb0329
GET /w/1.0/arj?ju=https%3A%2F%2Fwordcounter.icu%2FRalph1&ch=UTF-8&res=1280x1024x24&ifr=true&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=c8d33d54-0000-40ef-bf70-009cda37f268&nocache=1662321382762&schain=1.0%2C1!adpone.com%2Cf40bd5618606f2326096f40bd5618606f2326096%2C1%2C%2C%2C&aus=300x250&divids=%252F21671350435%252C22654422242%252F300x250-wordcounter.icu&aucs=%252F21671350435%252C22654422242%252F300x250-wordcounter.icu&auid=544045495 HTTP/1.1
Host: adpone-d.openx.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept, Accept-Encoding
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Sun, 04 Sep 2022 19:56:26 GMT
content-type: application/json
content-length: 79
content-encoding: gzip
cache-control: private, max-age=0, no-cache
access-control-allow-origin: https://wordcounter.icu
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 5412d65519ee785a59d6bfc7b0be9a2c
6f07fd9e8f825f2f6c95a593bf6a59d5e53ecd76
abf1b5b9246447b5cb9f8105d7aa1273b56119ee281bdb90ff9384e2dca81ce4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6540
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:56:26 GMT
Last-Modified: Sun, 04 Sep 2022 18:07:26 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 312 B IP
Hash 5afbd55da1c83d7e38e047a14ed0538f
f4bfb537c06a3aad6028ef941cb738239daf5d1c
c565cc60832e201324e5c16582789f4fd6e205d99176a45a38a5c2d01b69b923
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4482
Cache-Control: max-age=159172
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:56:26 GMT
Etag: "6314bc2c-138"
Expires: Tue, 06 Sep 2022 16:09:18 GMT
Last-Modified: Sun, 04 Sep 2022 14:54:36 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 312
disploot.com/r/p.html?f=vmbpixvr&e=1184250294462
200 OK 2.5 kB URL HTTP/2 disploot.com/r/p.html?f=vmbpixvr&e=1184250294462
IP
Hash 6fd52994fa0a5f82773a3c1333281de0
7715170496863b7ab2316da6891458cbae2ac2f1
d17ecc6e4035b701db3a60284a0b95ae3ac6550bc491beb6aea8e735edd51c73
GET /r/p.html?f=vmbpixvr&e=1184250294462 HTTP/1.1
Host: disploot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Sun, 04 Sep 2022 04:14:44 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: asJYhEYxUlS_gzjr3QJwL-6QrIsF4OTKLifWzlXGpgDdP04CF3YrqA==
age: 58365
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
htlb.casalemedia.com/cygnus?s=806701&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%2278b537dc5c58238%22%2C%22site%22%3A%7B%22page%22%3A%22https%3A%2F%2Fwordcounter.icu%2FRalph1%22%2C%22ref%22%3A%22https%3A%2F%2Fwordcounter.icu%2FRalph1%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22msd%22%3A0%2C%22msi%22%3A0%2C%22mfu%22%3A0%2C%22bu%22%3A1%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A1%2C%22ren%22%3Afalse%2C%22version%22%3A%226.15.0%22%2C%22userIds%22%3A%5B%5D%2C%22fpd%22%3Atrue%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%22877bf08c1bcf31%22%2C%22banner%22%3A%7B%22topframe%22%3A0%2C%22format%22%3A%5B%7B%22w%22%3A300%2C%22h%22%3A250%2C%22ext%22%3A%7B%22siteID%22%3A%22806701%22%2C%22sid%22%3A%22300x250%22%7D%7D%5D%7D%7D%5D%2C%22at%22%3A1%2C%22source%22%3A%7B%22ext%22%3A%7B%22schain%22%3A%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22adpone.com%22%2C%22sid%22%3A%22f40bd5618606f2326096f40bd5618606f2326096%22%2C%22hp%22%3A1%7D%5D%7D%7D%7D%2C%22user%22%3A%7B%7D%7D
200 OK 37 B URL HTTP/2 htlb.casalemedia.com/cygnus?s=806701&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%2278b537dc5c58238%22%2C%22site%22%3A%7B%22page%22%3A%22https%3A%2F%2Fwordcounter.icu%2FRalph1%22%2C%22ref%22%3A%22https%3A%2F%2Fwordcounter.icu%2FRalph1%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22msd%22%3A0%2C%22msi%22%3A0%2C%22mfu%22%3A0%2C%22bu%22%3A1%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A1%2C%22ren%22%3Afalse%2C%22version%22%3A%226.15.0%22%2C%22userIds%22%3A%5B%5D%2C%22fpd%22%3Atrue%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%22877bf08c1bcf31%22%2C%22banner%22%3A%7B%22topframe%22%3A0%2C%22format%22%3A%5B%7B%22w%22%3A300%2C%22h%22%3A250%2C%22ext%22%3A%7B%22siteID%22%3A%22806701%22%2C%22sid%22%3A%22300x250%22%7D%7D%5D%7D%7D%5D%2C%22at%22%3A1%2C%22source%22%3A%7B%22ext%22%3A%7B%22schain%22%3A%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22adpone.com%22%2C%22sid%22%3A%22f40bd5618606f2326096f40bd5618606f2326096%22%2C%22hp%22%3A1%7D%5D%7D%7D%7D%2C%22user%22%3A%7B%7D%7D
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 6bb71c26308a8a99521f9d2ac4452c58
ab5842d7ec682e2854f45dc5bf9aa43d65f663f7
fbfc5437afed3b936ef04ee95fba42e73e4bcf611faf5d281d6f742770ab3a9b
GET /cygnus?s=806701&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%2278b537dc5c58238%22%2C%22site%22%3A%7B%22page%22%3A%22https%3A%2F%2Fwordcounter.icu%2FRalph1%22%2C%22ref%22%3A%22https%3A%2F%2Fwordcounter.icu%2FRalph1%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22msd%22%3A0%2C%22msi%22%3A0%2C%22mfu%22%3A0%2C%22bu%22%3A1%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A1%2C%22ren%22%3Afalse%2C%22version%22%3A%226.15.0%22%2C%22userIds%22%3A%5B%5D%2C%22fpd%22%3Atrue%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%22877bf08c1bcf31%22%2C%22banner%22%3A%7B%22topframe%22%3A0%2C%22format%22%3A%5B%7B%22w%22%3A300%2C%22h%22%3A250%2C%22ext%22%3A%7B%22siteID%22%3A%22806701%22%2C%22sid%22%3A%22300x250%22%7D%7D%5D%7D%7D%5D%2C%22at%22%3A1%2C%22source%22%3A%7B%22ext%22%3A%7B%22schain%22%3A%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22adpone.com%22%2C%22sid%22%3A%22f40bd5618606f2326096f40bd5618606f2326096%22%2C%22hp%22%3A1%7D%5D%7D%7D%7D%2C%22user%22%3A%7B%7D%7D HTTP/1.1
Host: htlb.casalemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:56:26 GMT
content-type: application/json
content-length: 37
cf-ray: 745949d9ec2eb503-OSL
access-control-allow-origin: https://wordcounter.icu
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
access-control-allow-credentials: true
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=teiDT0IYwpgwvZFP%2F8P6Z4kPCDsW2lQV9BF2ERyzncoHY46Q%2BRsiz84XTPP7BEK0VyHsGbw50em9w3E%2Bp%2Fn%2BvFCew8qS7tCuF5sS%2BW5qmEWRLeFBrbdVxJcNDYdpMKHbAbekRhXd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash 9283c03bdf0da8a468e12a6a9019440e
90edd0ffb17ee1e30ee5b1ee2f35214d297962bc
b4402cf88a711a9b0edd14304b5b102bf58a2a69de2af6fdbef015342213dfb0
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3982
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:56:26 GMT
Last-Modified: Sun, 04 Sep 2022 18:50:04 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
hb.adpone.com/prebid6.15.0.js
200 OK 105 kB URL HTTP/2 hb.adpone.com/prebid6.15.0.js
IP
File type ASCII text, with very long lines (65492)
Size 105 kB (105098 bytes)
Hash 5874c99647b7f532e8d5988f027946fc
3a048671bd1993670224a0ebdf948435eac08349
6f06b0533348e4315b6dce6700e7a82436d65320e69e7a6cd93495cd388befa9
GET /prebid6.15.0.js HTTP/1.1
Host: hb.adpone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:56:26 GMT
content-type: application/javascript
x-amz-id-2: A0VTHS/zewNM63KgZx0PmP4uGNMo0c2vn1qK9hVgDIe6uV2NCGbM8RVwVK+jZyCw9s1DAEeSxFs=
x-amz-request-id: VM1TYMZFSZX14TWX
last-modified: Wed, 30 Mar 2022 09:13:54 GMT
etag: W/"ead6e8c23bf835688215d35a6b357336"
x-amz-version-id: xeKiFDHa4caZh3hM.m43HLu9jNtrHamp
cache-control: max-age=14400
cf-cache-status: HIT
age: 654
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uwC7IRvc4Ft4gNthNhslCXzOLtDRxhk%2FAllU274X8lpgQFVjPKHahIsG5MimRArxJ%2F7sNnK2QkVUById038cEmoRdiKdM424Tk68X1kwS%2Fm5YlNmx6gFEdfOl3Firoc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 745949d7af5ab506-OSL
content-encoding: br
X-Firefox-Spdy: h2
disploot.com/r/p.html?f=upgjuwpu&e=1184250294462
200 OK 2.3 kB URL HTTP/2 disploot.com/r/p.html?f=upgjuwpu&e=1184250294462
IP
File type HTML document, ASCII text
Hash 3e9dc5835cc02ac10d91e55627135d98
7ff281f2512cd98257185aa4852f946f7eba5040
2bd241ca39e1df1db5ab5ed3f1ab6a9b3622e664c4367c94580a8ca9bb81f754
GET /r/p.html?f=upgjuwpu&e=1184250294462 HTTP/1.1
Host: disploot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Sun, 04 Sep 2022 04:14:44 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: PdCXtnNPNaUuxZ9ad5vM4hZzcQUM0dzCM8YHfQiGjejKkf0aJ_crKg==
age: 58365
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
platform.pubfuture.com/v1/unit/62e25c1df58e070028dfa2cf.js?v=2
200 OK 1.2 kB URL HTTP/2 platform.pubfuture.com/v1/unit/62e25c1df58e070028dfa2cf.js?v=2
IP
File type ASCII text, with very long lines (2641), with no line terminators
Hash 7428b896dec7e87a1f908d2be933aa9c
168aab3f5a7e868b302863b32ce3e121528a97f7
7f55d8b2e4a9313817eb3fd35b676fb236db76139e87ad103e5743a3a2c68259
GET /v1/unit/62e25c1df58e070028dfa2cf.js?v=2 HTTP/1.1
Host: platform.pubfuture.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 19:56:25 GMT
content-type: application/javascript; charset=utf-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
access-control-allow-origin: *
cache-control: public, max-age=7200
etag: W/"a3f-Ny7wzAy1/EKTi0xfvD6//cJtR88"
vary: Accept-Encoding
content-encoding: gzip
x-frame-options: SAMEORIGIN, SAMEORIGIN
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 3d8cb397d49867bb647c5a74c07e4aea
3ef5e33b9a3c584e2c80e3b7fe819b2b291c31de
27ef36e96c8a8ea4e0b51991532c014a3efc67f43cb340a99091664989024223
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 04 Sep 2022 19:56:27 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 03 Sep 2022 22:03:43 GMT
Expires: Sun, 04 Sep 2022 22:03:43 GMT
ETag: "3ef5e33b9a3c584e2c80e3b7fe819b2b291c31de"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
cdn.jsdelivr.net/gh/prebid/currency-file@1/latest.json
200 OK 920 B URL HTTP/2 cdn.jsdelivr.net/gh/prebid/currency-file@1/latest.json
IP
File type JSON data\012- , ASCII text, with very long lines (1640), with no line terminators
Hash eb267c9de574d6345b529f354c103ded
985cc3a359c11847e5198a96ef605adc031594a4
a08969c6e4d7974df2b8d34b241ae30c00a34d380f421eac1044a528444eb134
GET /gh/prebid/currency-file@1/latest.json HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/json; charset=utf-8
x-jsd-version: 1.0.1453
x-jsd-version-type: version
etag: W/"668-FRDafBWrTRZUbUMSSNVN3B7Ympk"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 04 Sep 2022 19:56:26 GMT
age: 17730
x-served-by: cache-fra19139-FRA, cache-bma1677-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 920
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
Hash b90e75bddf1530e5023eb1b984c0fb0f
5e8d96aac3496d194c5b469e21ff809f3a92b83b
f2ea7ca5f2b9da9a1d9540bcde9ff933d239e653f19756a07477af5f78495b43
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 19:56:26 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "FF2894701C015CDDE867FF636FD0375BE0ED6D85"
Expires: Mon, 05 Sep 2022 06:00:00 GMT
Last-Modified: Sun, 04 Sep 2022 18:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2720
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 745949db8d891c12-OSL
perryvolleyball.com/03/30/1f/03301f093675f77c84729c5993ceb7c8.js
200 OK 29 kB URL HTTP/1.1 perryvolleyball.com/03/30/1f/03301f093675f77c84729c5993ceb7c8.js
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65536), with no line terminators
Hash b7a1f36328d112cacbc445f387db3374
4b75bafb3a0b45d5cff1f383e50cb2bfbe743be5
a1d8d6e948974344a8e4c49a332686c5350e0f31f289ef7d26fbaefd58d24da5
Analyzer Verdict Alert quad9 Sinkholed
GET /03/30/1f/03301f093675f77c84729c5993ceb7c8.js HTTP/1.1
Host: perryvolleyball.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 04 Sep 2022 19:56:26 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: dc89121bbee3c9a849d28c2c5d03a53f
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
zerossl.ocsp.sectigo.com/
200 OK 316 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash e0bf886cb502e47683148261fe23ef28
008802b699fbc13fba86847765ae5a7a9881836f
04fda9f4b6e26f4fda6657f5de3546679a23b603cf5c5fb16a532f2e1a524bdb
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 19:56:26 GMT
Content-Type: application/ocsp-response
Content-Length: 316
Connection: keep-alive
Last-Modified: Fri, 02 Sep 2022 01:07:31 GMT
Expires: Fri, 09 Sep 2022 01:07:30 GMT
Etag: "008802b699fbc13fba86847765ae5a7a9881836f"
Cache-Control: max-age=363663,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 745949db88c4b4f9-OSL
disploot.com/r/p.html?f=fuwttug&e=1184250294462
200 OK 2.4 kB URL HTTP/2 disploot.com/r/p.html?f=fuwttug&e=1184250294462
IP
File type HTML document, ASCII text
Hash cfc02687ce55987788e7fa7179b4b2ae
5aa7cd19e940af56af0d24eef5cbc956e9449797
9a223ddcdfeee62dcea3096e683abb56e5d6de847247f8794603e70e30523b6d
GET /r/p.html?f=fuwttug&e=1184250294462 HTTP/1.1
Host: disploot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Sun, 04 Sep 2022 04:14:44 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: FYNGPeusBCvxz9ejkedutJFvL_ZsG4Eak-iCXAp5Nr-oRtxG_pYReA==
age: 58365
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
ghb.adtelligent.com/geo
200 OK 154 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash ec65f841b5dcd74e7fbf6d72c39f8be4
a870e91242dd88bff2656674e85a819bab155c86
b5766bf1a0d74789f005f8935e4a0c88abe930f2f6df469ffe397038d955df54
GET /geo HTTP/1.1
Host: ghb.adtelligent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Adtelligent
Date: Sun, 04 Sep 2022 19:56:26 GMT
Content-Type: application/json
Content-Length: 154
Access-Control-Allow-Origin: https://wordcounter.icu
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
e1.o.lencr.org/
200 OK 1.4 kB IP
ASN #20940 Akamai International B.V.
File type gzip compressed data, from Unix\012- data
Hash 66aaffc4975457d86bcb0317a7363d5c
5591c8c398c654a5e1c1ef29de1e0d9a8828e570
b3444a0a1483909f4f46ebfbab0ab20aabb5996a256080039619b5c8933bae6b
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "C6EDCB641CB643133EB1AA66D52742EE22817B88899DE4EDBEA6053E317E2AC8"
Last-Modified: Fri, 02 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12897
Expires: Sun, 04 Sep 2022 23:31:23 GMT
Date: Sun, 04 Sep 2022 19:56:26 GMT
Connection: keep-alive
ib.adnxs.com/ut/v3/prebid
200 OK 263 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with very long lines (696), with no line terminators
Hash 4f4a85158521e6134c1b5ca3f8f51e93
883c16b28a141fdaec79480919dd702faea38cc2
08e55ae356e6d59480632dd2e8d3529a3e03f42cfa6421610fa613b4eeea895c
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1964
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 04 Sep 2022 19:56:27 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://wordcounter.icu
AN-X-Request-Uuid: ac9374aa-2750-4b7e-9f1f-231fbc4c8a32
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
Content-Encoding: gzip
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash b9feb46fa45798097db51399f15aeb3c
448fb06f3908b0e0356a3e23afe7df3d57596e71
633010155901ded18b89a1a20f7fd665aadc6ae09bcf0660967a33c836d2b76d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 04 Sep 2022 19:56:26 GMT
Last-Modified: Sun, 04 Sep 2022 18:09:05 GMT
Server: ECS (nyb/1D2C)
X-Cache: Miss from cloudfront
Via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Lhy7P0MYmTQLlbk-1or_AocCGVd9U0t1hk1M_dHQQy2HF8Wo1Q85Sg==
Age: 6441
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f287fae81381c8817d104d553a12dfb8
4782d8a7359acb88b3f33c49202d235254f68cf7
ff17da2da24e7c2ca74e576a8320633aa3cd72655adbf95f67d7889b8a93fd73
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FF17DA2DA24E7C2CA74E576A8320633AA3CD72655ADBF95F67D7889B8A93FD73"
Last-Modified: Fri, 02 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13911
Expires: Sun, 04 Sep 2022 23:48:18 GMT
Date: Sun, 04 Sep 2022 19:56:27 GMT
Connection: keep-alive
mp.4dex.io/prebid
200 OK 631 B IP
Hash 61a0c1803ac45490c31b4c97da3aa49a
e910d4098ea1aa5ec47bc2da3e073c8c2433ddbc
0bec2bf034b2f4184d228507830c7fb50e0a0052c02dcb7411896f70e3f6c01c
POST /prebid HTTP/1.1
Host: mp.4dex.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 8265
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:56:27 GMT
content-type: application/json; charset=utf-8
access-control-allow-credentials: true
access-control-allow-origin: https://wordcounter.icu
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
set-cookie: uids=; Path=/; Domain=4dex.io; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Secure; SameSite=None
vary: Origin, Accept-Encoding
x-err: Shapings: no adunits with size and seat and mapping
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 745949dcea1b1c0a-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.recaptcha.net
Connection: keep-alive
Referer: https://www.recaptcha.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Sep 2022 12:31:58 GMT
expires: Sun, 03 Sep 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 113069
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
script.4dex.io/adagio.js
200 OK 23 kB IP
File type ASCII text, with very long lines (65354)
Hash 9871a08a09f755d903b5869340340697
a3d037e7b68cf90cd18b4a4882795628d8600cad
18679b8d30bf6fc9e3cf0b27b732971081675c50aa6ea012f4e7132439351cd4
GET /adagio.js HTTP/1.1
Host: script.4dex.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wordcounter.icu/
Origin: https://wordcounter.icu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:56:26 GMT
content-type: application/javascript
access-control-allow-headers: Authorization
access-control-max-age: 3000
x-amz-id-2: tx2d471d5dcdf24ddeb6d94-00629f4c03
access-control-allow-credentials: true
x-amz-request-id: tx2d471d5dcdf24ddeb6d94-00629f4c03
last-modified: Tue, 10 May 2022 09:57:31 GMT
etag: W/"2430496689c00115831347992a974246"
cache-control: public, max-age=1800
x-amz-version-id: 1652176651393042
access-control-allow-methods: GET
access-control-allow-origin: *
cf-cache-status: HIT
age: 2344400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kpaDNB9FEXE%2BPJiwQybaVqYSL4myxxdu6UMbZ7GE6013JbjMslaP3MUdYQNjNrWCh%2BjN1CF%2FEwOTD7SGtlohrLw3UYa4iMp0SnEdN2A27GOSns9lWgHUR6qZ379OFpVg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 745949dbbce6b4fa-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.recaptcha.net
Connection: keep-alive
Referer: https://www.recaptcha.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Sep 2022 00:48:31 GMT
expires: Sat, 02 Sep 2023 00:48:31 GMT
cache-control: public, max-age=31536000
age: 241676
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
prebid.a-mo.net/a/c
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 2359
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://wordcounter.icu
cache-control: max-age=0, private, must-revalidate
date: Sun, 04 Sep 2022 19:56:26 GMT
server: envoy
vary: origin, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 1
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash 5313eb708fafeb07ac42894472fd7b7c
76ffa7e6d5e12dbb7182a6971ed2330a7b711d2f
ee3e36f7e8ae5a5c5c0e2c464b572345db46c2f5e9b957b1ba7084ba7e27edcf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5409
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:56:27 GMT
Last-Modified: Sun, 04 Sep 2022 18:26:18 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 312
ads.us.e-planning.net/pbjs/1/2a0ae/1/wordcounter.icu/ROS?rnd=0.7407091171203296&e=300x250_0%3A300x250%2B300x250_1%3A300x250%2C728x90%2C970x250%2C970x90%2B300x250_2%3A300x250%2C728x90%2C970x250%2C970x90%2B300x250_3%3A300x250%2C728x90%2C970x250%2C970x90%2B728x90_0%3A728x90%2B728x90_1%3A728x90&ur=https%3A%2F%2Fwordcounter.icu%2FRalph1&pbv=4.43.4&ncb=1&vs=FFFFFF&crs=UTF-8&fr=https%3A%2F%2Fwordcounter.icu%2FRalph1&e_pubcid=0fb6a1de-a123-421d-ab2f-3c4b6f4900b1
200 OK 151 B URL HTTP/2 ads.us.e-planning.net/pbjs/1/2a0ae/1/wordcounter.icu/ROS?rnd=0.7407091171203296&e=300x250_0%3A300x250%2B300x250_1%3A300x250%2C728x90%2C970x250%2C970x90%2B300x250_2%3A300x250%2C728x90%2C970x250%2C970x90%2B300x250_3%3A300x250%2C728x90%2C970x250%2C970x90%2B728x90_0%3A728x90%2B728x90_1%3A728x90&ur=https%3A%2F%2Fwordcounter.icu%2FRalph1&pbv=4.43.4&ncb=1&vs=FFFFFF&crs=UTF-8&fr=https%3A%2F%2Fwordcounter.icu%2FRalph1&e_pubcid=0fb6a1de-a123-421d-ab2f-3c4b6f4900b1
IP
ASN #50673 Serverius Holding B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash 61d65d8062b11c6c1f7a96ea6bc1226f
b1ef9c02c3f3038ba6ae3f14385f63f3462bc6cf
cecfd975bf91ddd3eb9b036edc3a96b262f45709eac48a5fbae2cf1fb65cdbfb
GET /pbjs/1/2a0ae/1/wordcounter.icu/ROS?rnd=0.7407091171203296&e=300x250_0%3A300x250%2B300x250_1%3A300x250%2C728x90%2C970x250%2C970x90%2B300x250_2%3A300x250%2C728x90%2C970x250%2C970x90%2B300x250_3%3A300x250%2C728x90%2C970x250%2C970x90%2B728x90_0%3A728x90%2B728x90_1%3A728x90&ur=https%3A%2F%2Fwordcounter.icu%2FRalph1&pbv=4.43.4&ncb=1&vs=FFFFFF&crs=UTF-8&fr=https%3A%2F%2Fwordcounter.icu%2FRalph1&e_pubcid=0fb6a1de-a123-421d-ab2f-3c4b6f4900b1 HTTP/1.1
Host: ads.us.e-planning.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Sun, 04 Sep 2022 19:56:27 GMT
content-type: application/json
access-control-allow-origin: https://wordcounter.icu
cache-control: max-age=0, no-cache
access-control-allow-credentials: true
p3p: policyref="http://ads.us.e-planning.net/p3p/eplanning.p3p", CP="NOI DSP COR NID CURa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV"
expires: Sun, 04 Sep 2022 19:56:27 GMT
content-length: 151
x-sid: AMS-605
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash ce8cea2f2f024a4eee0401aac681c7bd
97f6e25c4054d46f61b1a183cf7efcdbf4982298
c6edcb641cb643133eb1aa66d52742ee22817b88899de4edbea6053e317e2ac8
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "C6EDCB641CB643133EB1AA66D52742EE22817B88899DE4EDBEA6053E317E2AC8"
Last-Modified: Fri, 02 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12896
Expires: Sun, 04 Sep 2022 23:31:23 GMT
Date: Sun, 04 Sep 2022 19:56:27 GMT
Connection: keep-alive
onetag-sys.com/prebid-request
200 OK 41 B URL HTTP/2 onetag-sys.com/prebid-request
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 1c15203d1319c02fe2a06d78bc45eccf
40386992654bdda331c8f6eb21ac79de396119ee
cc81a9c5e7147dba347b0ffd34f64e9a7c40f25782569fec5c3fc68b4017badb
POST /prebid-request HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 2709
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://wordcounter.icu
access-control-allow-headers: content-type, origin, referer, user-agent
access-control-allow-credentials: true
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
cache-control: no-transform, no-cache
content-type: application/json
content-encoding: gzip
content-length: 41
strict-transport-security: max-age=15552000
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash cb5ba42a28922136e0f6a1bea2401f17
39524fa545bc6d1aafa7f91e2366037f8174fcea
48170b31183246ad34618f7a67f3dcc0d4c30e074caefc8ce178099e20191ec3
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 04 Sep 2022 19:56:27 GMT
Last-Modified: Sun, 04 Sep 2022 18:15:53 GMT
Server: ECS (nyb/1D0E)
X-Cache: Miss from cloudfront
Via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: tozUk0a87NCydIXk1YT9jpj5DjxC-ebWI4F3UtQwjOz61DTq39Kr_A==
Age: 6034
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0391c6fc1b3d2ef9b2db123e6fc86459
9d4c47c79e09faadc6ca3cfd625c0517903be494
3fc463a767d70dc0fba916934f750e903d17ab069330397ce5dc9380b55e8ac9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3FC463A767D70DC0FBA916934F750E903D17AB069330397CE5DC9380B55E8AC9"
Last-Modified: Fri, 02 Sep 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2596
Expires: Sun, 04 Sep 2022 20:39:43 GMT
Date: Sun, 04 Sep 2022 19:56:27 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash e9cdc7ea472599b65b0177508b3f2c80
eb2cc719e48d6468789cdf4ad48ef9d908b5554f
0c562935e7f4183d9dc4597003d6a2bb781d4d588c9b9bd9b6a3841634498d4f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6593
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:56:27 GMT
Last-Modified: Sun, 04 Sep 2022 18:06:35 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
ocsp.sectigo.com/
200 OK 471 B IP
Hash 3006d7c4cdd72e1b344c6b4db1506a21
81e8ff1e8e2dab3d6107a85e47cebe2ce4a1a046
5d8c58a3a8b8a52ef0625b22d25e42dc8532813f96263c40848db5c83700e438
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 19:56:27 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 03 Sep 2022 15:11:53 GMT
Expires: Sat, 10 Sep 2022 15:11:52 GMT
Etag: "81e8ff1e8e2dab3d6107a85e47cebe2ce4a1a046"
Cache-Control: max-age=500724,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 745949ddabfbfac0-OSL
hb-api.omnitagjs.com/hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fwordcounter.icu%2FRalph1&PublisherDomain=https%3A%2F%2Fwordcounter.icu
200 OK 165 B URL HTTP/2 hb-api.omnitagjs.com/hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fwordcounter.icu%2FRalph1&PublisherDomain=https%3A%2F%2Fwordcounter.icu
IP
ASN #200271 Iguane Solutions SAS
File type JSON data\012- , ASCII text
Hash ac7972e65ab2bce2f61bf7076fe62a00
8bcd0ff8d6991e6fb370c5a386a14b411d3a322c
7ad2084ae08c3b0b1b1dc2826a4cd1f8a47912dd4af45bd6cc9bbc1abb4e5483
POST /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fwordcounter.icu%2FRalph1&PublisherDomain=https%3A%2F%2Fwordcounter.icu HTTP/1.1
Host: hb-api.omnitagjs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1167
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Accept-Encoding, Content-Type
access-control-allow-methods: OPTIONS, POST
access-control-allow-origin: https://wordcounter.icu
access-control-max-age: 3600
cache-control: no-cache, no-store, must-revalidate
content-type: application/json; charset=utf-8
expires: 0
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=7c4a34cac11cc3bec409d87ef6e8e890; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:56:27 GMT
content-length: 165
x-envoy-upstream-service-time: 5
server: ayl-lb-fra02
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4611
Expires: Sun, 04 Sep 2022 21:13:18 GMT
Date: Sun, 04 Sep 2022 19:56:27 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4611
Expires: Sun, 04 Sep 2022 21:13:18 GMT
Date: Sun, 04 Sep 2022 19:56:27 GMT
Connection: keep-alive
id.sharedid.org/id
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /id HTTP/1.1
Host: id.sharedid.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sun, 04 Sep 2022 19:56:27 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://wordcounter.icu
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
pragma: no-cache
cache-control: no-cache,no-store,must-revalidate
expires: 0
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd43481e-3c33-4c05-9216-2cc734e840b4.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd43481e-3c33-4c05-9216-2cc734e840b4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1bdfdf7e36f78f2f0e4d7ede9fdb76a8
babb88202741bbf2d4fd25e0731a4a7a6fcc28f8
949ea108642789e1014150909060f11d99608f082760d0e868a90282f2768d43
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd43481e-3c33-4c05-9216-2cc734e840b4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9690
x-amzn-requestid: 614c99f8-116a-4603-bcde-3fbd5bfa14d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wx1HInIAMFiYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c80b-25c09c3227d72395408782f0;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:32:59 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 5_jCLvdAC-XR-ax3RUbbx9275KPwACOPtAMxSbmv-aP-Lra4sC5zvw==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:51:26 GMT
age: 79501
etag: "babb88202741bbf2d4fd25e0731a4a7a6fcc28f8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cmp.quantcast.com/choice/e92MKjc__gVe1/wordcounter.icu/choice.js?tag_version=V2
200 OK 12 kB URL HTTP/2 cmp.quantcast.com/choice/e92MKjc__gVe1/wordcounter.icu/choice.js?tag_version=V2
IP
File type ASCII text, with very long lines (1596)
Hash e234a2af40fa304a16d0e47e348e2b54
7873be9660b50ced0befcc2dcf6eb49c094f9016
b9e3aafacc19dd9bc9af2d4391cb5d1c13150aef848d97fb497a7879dc2bcda6
GET /choice/e92MKjc__gVe1/wordcounter.icu/choice.js?tag_version=V2 HTTP/1.1
Host: cmp.quantcast.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 21 Jul 2022 15:20:35 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
content-encoding: br
date: Sun, 04 Sep 2022 19:56:25 GMT
cache-control: max-age=900
etag: W/"4b552d504f800efab9247a18e185c71e"
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 4-jMinUK7HtEd8zFB_uYvrrolQcto8jN0siTQ5eQuRECpnPkn6iFXA==
age: 19
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7142280-0dbd-4c8e-a960-d357c9143af6.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7142280-0dbd-4c8e-a960-d357c9143af6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 10318189f33f071dda64249ab9c8c5bb
e5b5b649a243e5c004d9923d19d4421d1ea96d23
3e775a1990e4d185024faf2fdff7a5eb9063f7ee19784f32fb4f7f10643c8102
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7142280-0dbd-4c8e-a960-d357c9143af6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5652
x-amzn-requestid: 05fffcb2-43c0-4acf-81b2-1b914459e1e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wwHErUIAMFmNw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c800-47fe166763992ab271a87aa4;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:32:48 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: uz2NbcE4AmOvFQkhJALSpXCGizilya0TuFcczfEwtV09cGXtgVNlpQ==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 22:04:35 GMT
etag: "e5b5b649a243e5c004d9923d19d4421d1ea96d23"
content-type: image/jpeg
age: 78712
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c475e9b-fa82-4942-8a4a-d6d3f5061558.webp
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c475e9b-fa82-4942-8a4a-d6d3f5061558.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8cdd0826b7d8be62cc2ed532e04e137b
383a0661fa09d9b48745b507389d0505303b6182
f2d04cf1ee9b5a885c246060c1036b21af4ecd3e51e5d05a529dbe0d63f7c2ac
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c475e9b-fa82-4942-8a4a-d6d3f5061558.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10713
x-amzn-requestid: d546a12c-c549-4ad3-80ad-6bad452927d3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5winGzHIAMFTPw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c7aa-2060c6611eb4abb777cc17a8;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:31:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: FRD_E3IP_SmjPQuoVEijMnLszBb5bhc_1PxJXOlmdyufLKzx33joTw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:48:07 GMT
age: 79700
etag: "383a0661fa09d9b48745b507389d0505303b6182"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F514b7fbd-ae99-4219-bd03-50e907f92b7b.jpeg
200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F514b7fbd-ae99-4219-bd03-50e907f92b7b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ca50f9c56ff869b0b63ca71b1a9f8170
13b16ca74113dfd52ccf23e6bb39307fc713f984
76b85dd7e018ab4b3d4b2610f90dbca61d0f05d38a3b905fee789af131ae7538
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F514b7fbd-ae99-4219-bd03-50e907f92b7b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14855
x-amzn-requestid: 65cf850b-227a-4318-a00e-d7cd4ef81489
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wjuGtpoAMFvvA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c7b1-54bc36741984491b0509d173;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:31:29 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: M9Y8U9vqVs1ATiPP9jLPybTJ-xwC--5oiRUpj9-imTWfh6_rmtL5Kw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:58:42 GMT
age: 79065
etag: "13b16ca74113dfd52ccf23e6bb39307fc713f984"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa54e2726-407f-4a8a-8d19-21de249844f5.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa54e2726-407f-4a8a-8d19-21de249844f5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fc4ceb10dd9fcaab21ae58dcf10c401f
6ce530af682094dc5413db9de02565691fab4da7
84ad58e126cce2ab6b1568ffe89a116bc1de0310bb72d4530eead2fb8191572c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa54e2726-407f-4a8a-8d19-21de249844f5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11380
x-amzn-requestid: 61f37e21-33a8-49e6-b384-4ca1fcfbffa5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xz8TLFA3oAMFQjg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63117414-42de5c4128eb9e011d848356;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 03:10:12 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: sywGj-wLtW091vZYhx1AbRAgljYQWe6LuffDjwTDhEebqVzxpQuzEQ==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 03:48:58 GMT
age: 58049
etag: "6ce530af682094dc5413db9de02565691fab4da7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
b1h.zemanta.com/api/bidder/prebid/bid/
204 No Content 0 B URL HTTP/1.1 b1h.zemanta.com/api/bidder/prebid/bid/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/bidder/prebid/bid/ HTTP/1.1
Host: b1h.zemanta.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 813
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://wordcounter.icu
reasonablelandmark.com/pixel/purst?dl=0&th=0&sc=0&rs=2494&rd=2494&fd=808&bv=22.8.v.2&tmpl=136
200 OK 0 B URL HTTP/1.1 reasonablelandmark.com/pixel/purst?dl=0&th=0&sc=0&rs=2494&rd=2494&fd=808&bv=22.8.v.2&tmpl=136
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=2494&rd=2494&fd=808&bv=22.8.v.2&tmpl=136 HTTP/1.1
Host: reasonablelandmark.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sun, 04 Sep 2022 19:56:27 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
rules.quantcount.com/rules-p-e92MKjc__gVe1.js
200 OK 209 B URL HTTP/2 rules.quantcount.com/rules-p-e92MKjc__gVe1.js
IP
Hash 5886ec19c6f8de529fdd18054a12a2d0
a72fdbea31f2d0298e33e1037af54e1f90331816
82b23eeb32b6a9c2aa80f0a9f1d6d9b22c9bd9a506527de4ff1db434a0c32618
GET /rules-p-e92MKjc__gVe1.js HTTP/1.1
Host: rules.quantcount.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 209
last-modified: Fri, 26 Aug 2022 15:01:58 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
date: Sun, 04 Sep 2022 19:52:48 GMT
cache-control: max-age=3600
etag: "5886ec19c6f8de529fdd18054a12a2d0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xyEqYa3iWaM9VVF2_I044YbV5fZDGsed4gPI4qaCfqGP08IGZUPQaQ==
age: 220
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 9349e55d61a321aac4bbcfabcb712c82
a3b6bcdcda7589974ef882dd657f6b5798d6bb34
79c4f08b62cd04fefcc09a9090d76751b77c3dbdf8179c986e0c8454260afc52
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Cookie: uid_id2=90d6bbf5-9ee6-4ff0-8c77-4d5bacd8c9b5:1:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:56:27 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://wordcounter.icu
access-control-allow-credentials: true
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 0 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 377
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-length: 0
content-type: application/json; charset=UTF-8
date: Sun, 04 Sep 2022 19:56:27 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://disploot.com
cache-control: no-cache,no-store
pragma: no-cache
vary: Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=89520951579
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=89520951579
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=89520951579 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 488
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:56:27 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://disploot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 532
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 04 Sep 2022 19:56:27 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://disploot.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
200 OK 99 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 73e2ad2bf9194445f95ff5faf90269fa
034f4f265ceda6c741995bd8060d2c84021d7537
4bea01c4b07d3934b612c2dc259930b7545f851d449a83b15dafaf9169f02d07
POST /rtb/bid?src=prebid_prebid_6.15.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 489
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sun, 04 Sep 2022 19:56:27 GMT
set-cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljtrtb=;Version=1;Domain=.lijit.com;Path=/;Max-Age=0;Secure;Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=None;
content-type: application/json
access-control-allow-origin: https://disploot.com
access-control-allow-methods: GET, POST, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
vary: Accept-Encoding, User-Agent
content-encoding: gzip
content-length: 99
pod: X-Sovrn-Pod: ad_ap7ams1
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c7fcb317bfa4c32b0f157f2737826ec6
cb7e28eac22e4943412cfadcb29d1cb8947d2a23
d2590f095aec18bd0c3a5ea5c863567e204033e2b2753780853bb9512c0a3a62
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 667
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 04 Sep 2022 19:56:28 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://disploot.com
AN-X-Request-Uuid: 337ff761-2f4f-4d22-a816-6b996f958dcb
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prg.smartadserver.com/prebid/v1
200 OK 0 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 376
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-length: 0
content-type: application/json; charset=UTF-8
date: Sun, 04 Sep 2022 19:56:28 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://disploot.com
cache-control: no-cache,no-store
pragma: no-cache
vary: Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash d951bf4c58f933dce8443273cc768a1a
2113a6eb17657d43db261778ea6b83f66cbe1e61
c88d67396c68584bcc4447ca8bc33f11b3539148677c3e5e6d395b54ff630d81
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 19:56:28 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Thu, 08 Sep 2022 16:49:07 GMT
ETag: "2113a6eb17657d43db261778ea6b83f66cbe1e61"
Last-Modified: Sun, 04 Sep 2022 16:49:08 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 745949e61e310b3d-OSL
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=64380710407
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=64380710407
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=64380710407 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 488
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:56:27 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://disploot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 73535844165668fa794cda408863d357
e9cf504d0a5611d6aa82277a7daeafbce7230308
3cf8a69f2ba38e6cf387ba57fe125ac1fe5b857e960c8574661b0ea9b13d7a84
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 668
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 04 Sep 2022 19:56:28 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://disploot.com
AN-X-Request-Uuid: 42a27e30-38ed-4c64-bfaf-bb74e27dd0b5
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 532
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 04 Sep 2022 19:56:28 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://disploot.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=32363899901
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=32363899901
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=32363899901 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 488
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:56:28 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://disploot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
cdn.viqeo.tv/js/vq_starter.js
302 Found 70 B URL HTTP/2 cdn.viqeo.tv/js/vq_starter.js
IP
ASN #204720 CDNetworks LLC
File type ASCII text, with no line terminators
Hash cca91ed969d10dc3306aa59fbec1c192
93b7c7aceda999279b73e6c8a2d7ae31978eb8a0
5ebca4f8bed635b3cb36e253a7b4c96ac899b4a97a683fd4b126b7dcc4e135b6
GET /js/vq_starter.js HTTP/1.1
Host: cdn.viqeo.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sun, 04 Sep 2022 19:56:28 GMT
content-type: text/plain; charset=utf-8
content-length: 70
location: https://cdn.viqeo.tv/js/assets/459/js/vq_init.js
x-powered-by: Express
vary: Accept
expires: Sun, 04 Sep 2022 20:06:28 GMT
cache-control: max-age=600
access-control-allow-origin: *
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 639299b94ba516ad3e0073e0bd9a0ee2
2cc61550903324bd481722dea67d9beedb576370
2fe591199d87e9ccb3051dffd12c8760a179537d96d165e26f2cddb8b3ee255e
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 667
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 04 Sep 2022 19:56:28 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://disploot.com
AN-X-Request-Uuid: 62ca2386-8873-426d-8310-9d43814460ca
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=51531442664
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=51531442664
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=51531442664 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 488
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:56:28 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://disploot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 532
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 04 Sep 2022 19:56:28 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://disploot.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 532
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 04 Sep 2022 19:56:28 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://disploot.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
cmp.quantcast.com/GVL-v2/vendor-list-trimmed-v1.json
200 OK 37 B URL HTTP/2 cmp.quantcast.com/GVL-v2/vendor-list-trimmed-v1.json
IP
Hash 5e055532d67d5616a07101959bd2aa89
09c19443aca2f97108512fa2fec5bcc2104c052b
24b8d6d215598a215bd407eaecb8cd2cdff866d66b5a6f6b511c4a052d0ba24d
GET /GVL-v2/vendor-list-trimmed-v1.json HTTP/1.1
Host: cmp.quantcast.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
access-control-max-age: 3000
cache-control: max-age=172800
date: Sun, 04 Sep 2022 03:00:36 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-credentials: true
last-modified: Sun, 04 Sep 2022 03:00:33 GMT
etag: W/"e3b01197d3c5fa12af2d7fb54c4ebbc9"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: UZgKl7rOuOtoxQwExyyZchXwhIGPF31FujtKm-OW27WGo_z0ybrpdw==
age: 60952
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=24377542671
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=24377542671
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=24377542671 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 488
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:56:27 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://disploot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c31662be0b165a4f8eea3b789e28e6e4
72d5b7c30f3cd025cd900681482396bc44326bae
da3096ddc3ed66c3991789dde3c37e8ba8d41d900cc59ee213455504ea19779f
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 670
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 04 Sep 2022 19:56:28 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://disploot.com
AN-X-Request-Uuid: 5d78111d-6c47-4171-b02a-163b655dee34
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prg.smartadserver.com/prebid/v1
200 OK 521 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1079), with no line terminators
Hash dea2a122406d43e049ef0ae36e7696b2
80002f834dce81684664ea8c93095be60725f39b
27de807a5112f65fef76b53455ed47b6de530ceb56b86b1e70dd72a2c7c69686
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 376
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Sun, 04 Sep 2022 19:56:28 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://disploot.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Mon, 04 Sep 2023 19:56:28 GMT; domain=.smartadserver.com; path=/
vs=408085=5088716; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 04 Sep 2023 19:56:28 GMT; domain=.smartadserver.com; path=/
pid=9017274866125786277; expires=Mon, 04 Sep 2023 19:56:28 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=637979181885818700&o=1; expires=Mon, 05 Sep 2022 19:56:28 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Mon, 05 Sep 2022 19:56:28 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
200 OK 99 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 450c4f8606b53a74b934c47e2c4d7583
c4a2950deedca3f5524419e8629a0a6e9e429c44
cddfa61d54350931feca3c7c628b7614ed67ff7f91c91f2a6ef07662c33c47ce
POST /rtb/bid?src=prebid_prebid_6.15.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 490
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sun, 04 Sep 2022 19:56:28 GMT
set-cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljtrtb=;Version=1;Domain=.lijit.com;Path=/;Max-Age=0;Secure;Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=None;
content-type: application/json
access-control-allow-origin: https://disploot.com
access-control-allow-methods: GET, POST, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
vary: Accept-Encoding, User-Agent
content-encoding: gzip
content-length: 99
pod: X-Sovrn-Pod: ad_ap7ams1
prg.smartadserver.com/prebid/v1
200 OK 0 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 377
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-length: 0
content-type: application/json; charset=UTF-8
date: Sun, 04 Sep 2022 19:56:27 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://disploot.com
cache-control: no-cache,no-store
pragma: no-cache
vary: Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 679592fbf7e2d8ef855e61fe1d20d0b3
a9e1ab3f2f46b417ce70d1dc2fb396bdd70dce91
e522a456f5edc0f13deb0098334edd5f1e56159bc6b25640a27dad8369e42202
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 669
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 04 Sep 2022 19:56:28 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://disploot.com
AN-X-Request-Uuid: 78cbd2ac-52b6-4c2b-a9e1-8ba1c56c3f56
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 532
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 04 Sep 2022 19:56:28 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://disploot.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 0 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 376
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-length: 0
content-type: application/json; charset=UTF-8
date: Sun, 04 Sep 2022 19:56:28 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://disploot.com
cache-control: no-cache,no-store
pragma: no-cache
vary: Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 532
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 04 Sep 2022 19:56:28 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://disploot.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 646 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1277), with no line terminators
Hash 890be55e350f2da59f17d21a59fed2eb
9613e24f5be399fa5866f995c86f51331ec33f26
e241bcf420f85dea1e873b5d3e5ace0b26e1d241969896dee2a6bf83799a4473
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 376
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Sun, 04 Sep 2022 19:56:27 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://disploot.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Mon, 04 Sep 2023 19:56:28 GMT; domain=.smartadserver.com; path=/
vs=408085=5088716; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 04 Sep 2023 19:56:28 GMT; domain=.smartadserver.com; path=/
pid=3113891748552395956; expires=Mon, 04 Sep 2023 19:56:28 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=637979181886260989&o=1; expires=Mon, 05 Sep 2022 19:56:28 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Mon, 05 Sep 2022 19:56:28 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=13149579959
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=13149579959
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=13149579959 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 488
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:56:27 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://disploot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 140 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 6f58a5c9ecfbe0f79c11230cd1311253
1a6b65573a4dd1a5ccba6e1d0fa6866aa554016a
229dc9ebe24023e9b50cb2a173711a085961e17595fded4350a311875e75ae7f
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 668
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 04 Sep 2022 19:56:28 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 140
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://disploot.com
AN-X-Request-Uuid: b841390d-cbe6-46ad-87fb-27baceb6729a
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=87839955732
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=87839955732
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=87839955732 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 488
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:56:27 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://disploot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 0 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 378
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-length: 0
content-type: application/json; charset=UTF-8
date: Sun, 04 Sep 2022 19:56:27 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://disploot.com
cache-control: no-cache,no-store
pragma: no-cache
vary: Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
audit-tcfv2.cmp.quantcast.com/?log=%7B%22accountId%22%3A%22e92MKjc__gVe1%22%2C%22domain%22%3A%22wordcounter.icu%22%2C%22publisher%22%3A%22%22%2C%22cmpId%22%3A10%2C%22cmpVersion%22%3A%222.43%22%2C%22displayType%22%3A%22tcfui%3Amandatory%22%2C%22configurationHashCode%22%3A%22fTX8X%2B4Dx%2F97G91vlWmO6Q%22%2C%22tagVersion%22%3A%22V2%22%2C%22clientTimestamp%22%3A1662321384697%2C%22operationType%22%3A%22init%22%2C%22sessionId%22%3A%22GDPR-vmlmtwfq08aonkvby3jd%22%7D
200 OK 2 B URL HTTP/2 audit-tcfv2.cmp.quantcast.com/?log=%7B%22accountId%22%3A%22e92MKjc__gVe1%22%2C%22domain%22%3A%22wordcounter.icu%22%2C%22publisher%22%3A%22%22%2C%22cmpId%22%3A10%2C%22cmpVersion%22%3A%222.43%22%2C%22displayType%22%3A%22tcfui%3Amandatory%22%2C%22configurationHashCode%22%3A%22fTX8X%2B4Dx%2F97G91vlWmO6Q%22%2C%22tagVersion%22%3A%22V2%22%2C%22clientTimestamp%22%3A1662321384697%2C%22operationType%22%3A%22init%22%2C%22sessionId%22%3A%22GDPR-vmlmtwfq08aonkvby3jd%22%7D
IP
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /?log=%7B%22accountId%22%3A%22e92MKjc__gVe1%22%2C%22domain%22%3A%22wordcounter.icu%22%2C%22publisher%22%3A%22%22%2C%22cmpId%22%3A10%2C%22cmpVersion%22%3A%222.43%22%2C%22displayType%22%3A%22tcfui%3Amandatory%22%2C%22configurationHashCode%22%3A%22fTX8X%2B4Dx%2F97G91vlWmO6Q%22%2C%22tagVersion%22%3A%22V2%22%2C%22clientTimestamp%22%3A1662321384697%2C%22operationType%22%3A%22init%22%2C%22sessionId%22%3A%22GDPR-vmlmtwfq08aonkvby3jd%22%7D HTTP/1.1
Host: audit-tcfv2.cmp.quantcast.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:56:28 GMT
content-type: text/plain; charset=utf-8
content-length: 2
access-control-allow-origin: *
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 532
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 04 Sep 2022 19:56:28 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://disploot.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 0 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 376
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-length: 0
content-type: application/json; charset=UTF-8
date: Sun, 04 Sep 2022 19:56:28 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://disploot.com
cache-control: no-cache,no-store
pragma: no-cache
vary: Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
ib.adnxs.com/ut/v3/prebid
200 OK 140 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c744abbb759e064b44bb710ef323cc8e
14f8c1cb4149aa7f5ee0d3b2e2ca31ce6c7e00fb
48df62fb3509e5ec01f845557e698abbe46434484487493defb2fc2dacbdf71d
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 669
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 04 Sep 2022 19:56:28 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 140
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://disploot.com
AN-X-Request-Uuid: 8c24b8bd-7fd4-49c3-89e2-a397122bfeb7
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=41527719646
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=41527719646
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=41527719646 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 488
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:56:28 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://disploot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 532
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 04 Sep 2022 19:56:28 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://disploot.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 0 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 376
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-length: 0
content-type: application/json; charset=UTF-8
date: Sun, 04 Sep 2022 19:56:27 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://disploot.com
cache-control: no-cache,no-store
pragma: no-cache
vary: Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
200 OK 99 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0f55459064475f6edba7e0e4ebafb5a4
cf48d02eca615943e14bc1c8a05c6ee7add3a98c
3833aff2c85ed19c228014069b9b4c070ab07e2f9afcc47bca86b160b78bb175
POST /rtb/bid?src=prebid_prebid_6.15.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 490
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sun, 04 Sep 2022 19:56:28 GMT
set-cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljtrtb=;Version=1;Domain=.lijit.com;Path=/;Max-Age=0;Secure;Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=None;
content-type: application/json
access-control-allow-origin: https://disploot.com
access-control-allow-methods: GET, POST, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
vary: Accept-Encoding, User-Agent
content-encoding: gzip
content-length: 99
pod: X-Sovrn-Pod: ad_ap7ams1
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=98859682791
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=98859682791
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=98859682791 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 488
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:56:28 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://disploot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 015020f63ade0ddca256e7fc80829260
406968b38b262f88eb905a5af9f5309adcaca4fc
83ecc73d82793cbdbccebf7f239bba1c6e636ffbe6a8030977d7ee00479d7ece
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 670
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 04 Sep 2022 19:56:28 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://disploot.com
AN-X-Request-Uuid: c8a863af-519d-42a1-802a-5376e7b1f8d2
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 532
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 04 Sep 2022 19:56:28 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://disploot.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
200 OK 99 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c0151759714db65c34849c50f19c1ceb
5fd05c5f70c99a6d3a4ff18aa2cecc6a928ca298
a4373cb38e7f03eb2fa9e85a9f18b859a8ac52975f3741be793a89a1dcd05fde
POST /rtb/bid?src=prebid_prebid_6.15.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 492
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sun, 04 Sep 2022 19:56:28 GMT
set-cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljtrtb=;Version=1;Domain=.lijit.com;Path=/;Max-Age=0;Secure;Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=None;
content-type: application/json
access-control-allow-origin: https://disploot.com
access-control-allow-methods: GET, POST, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
vary: Accept-Encoding, User-Agent
content-encoding: gzip
content-length: 99
pod: X-Sovrn-Pod: ad_ap7ams1
ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
200 OK 99 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f4ee6032753cdddd4783cfb06abcbb11
de76f9eaa89bcb81d733f14b81d875aec9cc7b9c
960d7ed72e036918173241cea909ae3b69c138a6f0415c3399b1637d757d0a43
POST /rtb/bid?src=prebid_prebid_6.15.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 490
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sun, 04 Sep 2022 19:56:28 GMT
set-cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljtrtb=;Version=1;Domain=.lijit.com;Path=/;Max-Age=0;Secure;Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=None;
content-type: application/json
access-control-allow-origin: https://disploot.com
access-control-allow-methods: GET, POST, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
vary: Accept-Encoding, User-Agent
content-encoding: gzip
content-length: 99
pod: X-Sovrn-Pod: ad_ap7ams1
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a7d5986b62c65d52791ac2dd97f1c5e5
308c5e38b1ed90a177e5f4dd55612e4acc00a5c8
5c4e905880190ea7a3038a5e51d8fa240ce80f7dba7489389f2113de04ac9206
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 666
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 04 Sep 2022 19:56:28 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://disploot.com
AN-X-Request-Uuid: 736b42fd-7d2d-4464-9588-a8124efaa54f
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 532
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 04 Sep 2022 19:56:28 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://disploot.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 0 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 377
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-length: 0
content-type: application/json; charset=UTF-8
date: Sun, 04 Sep 2022 19:56:28 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://disploot.com
cache-control: no-cache,no-store
pragma: no-cache
vary: Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 181b26dc08c74ce962c7b2ab8570c544
85bacf21fcd5903c8050c65b35cc42b9539f84ed
7e8ac96a7f362bffd9b0c8bbea979d05954033e9fd8f6117c8147ed6a86c7c42
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 670
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 04 Sep 2022 19:56:28 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://disploot.com
AN-X-Request-Uuid: deaa066b-8148-48ce-aa7f-c10a22204b0a
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prg.smartadserver.com/prebid/v1
200 OK 0 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 377
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-length: 0
content-type: application/json; charset=UTF-8
date: Sun, 04 Sep 2022 19:56:28 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://disploot.com
cache-control: no-cache,no-store
pragma: no-cache
vary: Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=93187579736
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=93187579736
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=93187579736 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 488
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:56:28 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://disploot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 532
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 04 Sep 2022 19:56:28 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://disploot.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=51922911898
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=51922911898
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=51922911898 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 488
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:56:27 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://disploot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
200 OK 98 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 1eb377ec5a365583d8c822f83fd46365
caf852e197dde509e1d54d8658c0092b58bf4d9e
18a344e52a931b6942b2c10cc6b7dc2109562e368e977183029cb2a3bbe97f7a
POST /rtb/bid?src=prebid_prebid_6.15.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 487
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sun, 04 Sep 2022 19:56:28 GMT
set-cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljtrtb=;Version=1;Domain=.lijit.com;Path=/;Max-Age=0;Secure;Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=None;
content-type: application/json
access-control-allow-origin: https://disploot.com
access-control-allow-methods: GET, POST, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
vary: Accept-Encoding, User-Agent
content-encoding: gzip
content-length: 98
pod: X-Sovrn-Pod: ad_ap7ams1
ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
200 OK 99 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5c51367bfab17bc0fb57da3e337db7d9
03e0f1c510a748d21638bf10adb5938a07d3815f
d5571c38bae50c398e1f518b875b2cb41b888cc0e7d5a76174c32c32bb0a90bb
POST /rtb/bid?src=prebid_prebid_6.15.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 490
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sun, 04 Sep 2022 19:56:28 GMT
set-cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljtrtb=;Version=1;Domain=.lijit.com;Path=/;Max-Age=0;Secure;Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=None;
content-type: application/json
access-control-allow-origin: https://disploot.com
access-control-allow-methods: GET, POST, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
vary: Accept-Encoding, User-Agent
content-encoding: gzip
content-length: 99
pod: X-Sovrn-Pod: ad_ap7ams1
prg.smartadserver.com/prebid/v1
200 OK 0 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 377
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-length: 0
content-type: application/json; charset=UTF-8
date: Sun, 04 Sep 2022 19:56:28 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://disploot.com
cache-control: no-cache,no-store
pragma: no-cache
vary: Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 8d4b74ec86ed55b6e0f977c3bf684174
ca8f9cceb68b485af044683eb7b297a1fdee5487
4c764786f2344df812c56f2094584ed11f1581aa9c36963e3ff22e9d531cf267
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 669
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 04 Sep 2022 19:56:28 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://disploot.com
AN-X-Request-Uuid: df0705bb-6b3a-46e4-bbd5-8e6cc439bc6b
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=33785375051
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=33785375051
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=33785375051 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 488
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:56:28 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://disploot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
200 OK 100 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash db9f7b4cde5f9747f99d924e75004e1f
dfa83dfa74369eb4ad4f3210ab799fd8cd0c1c35
f147204ed2bd5b91e9435abc5095e425dde46c9e5d0a7720d2264ebd8b690c94
POST /rtb/bid?src=prebid_prebid_6.15.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 491
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sun, 04 Sep 2022 19:56:28 GMT
set-cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljtrtb=;Version=1;Domain=.lijit.com;Path=/;Max-Age=0;Secure;Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=None;
content-type: application/json
access-control-allow-origin: https://disploot.com
access-control-allow-methods: GET, POST, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
vary: Accept-Encoding, User-Agent
content-encoding: gzip
content-length: 100
pod: X-Sovrn-Pod: ad_ap7ams1
prg.smartadserver.com/prebid/v1
200 OK 0 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 377
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-length: 0
content-type: application/json; charset=UTF-8
date: Sun, 04 Sep 2022 19:56:28 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://disploot.com
cache-control: no-cache,no-store
pragma: no-cache
vary: Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 532
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 04 Sep 2022 19:56:28 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://disploot.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
200 OK 99 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 4c02ac5026a2743cc8c2496be28bb8f2
a448cc507deba6bc122a839722dc6d8c793e0960
5c342a21b724810a94553d452bb8451abdc4ffd154cb67d8ec37c4e8a04ca2bc
POST /rtb/bid?src=prebid_prebid_6.15.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 491
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sun, 04 Sep 2022 19:56:28 GMT
set-cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljtrtb=;Version=1;Domain=.lijit.com;Path=/;Max-Age=0;Secure;Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=None;
content-type: application/json
access-control-allow-origin: https://disploot.com
access-control-allow-methods: GET, POST, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
vary: Accept-Encoding, User-Agent
content-encoding: gzip
content-length: 99
pod: X-Sovrn-Pod: ad_ap7ams1
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=14980486196
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=14980486196
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=14980486196 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 488
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:56:28 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://disploot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 3d15e6003a906a9e8df85e3ad71c51b3
774cead1015a7391d8082a57845e8846a1d5efb1
d40428da810d5ddf82ee7ca114e3cf04f6e5db0ebb83e9bbdede81e6db78ee80
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 670
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 04 Sep 2022 19:56:28 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://disploot.com
AN-X-Request-Uuid: 23c3df74-74cc-4d0c-a692-03b7f8a6b495
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 532
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 04 Sep 2022 19:56:28 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://disploot.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
200 OK 100 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0685e56d5ae1654cef168736cbdf4e5e
5c866106fd9e0d7f8af78d31ada3526564d0e876
18067fc20e599b88876ed9fbf38ab7b198dbd5828867b2b3aaeba1066003c154
POST /rtb/bid?src=prebid_prebid_6.15.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 490
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sun, 04 Sep 2022 19:56:28 GMT
set-cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljtrtb=;Version=1;Domain=.lijit.com;Path=/;Max-Age=0;Secure;Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=None;
content-type: application/json
access-control-allow-origin: https://disploot.com
access-control-allow-methods: GET, POST, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
vary: Accept-Encoding, User-Agent
content-encoding: gzip
content-length: 100
pod: X-Sovrn-Pod: ad_ap7ams1
ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
200 OK 100 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a9d7f73aefc4ae2e45e591c337940af7
d5ecfc036ac5494601696dd4f41f195b6bfefeb3
830fd8c3ad643d8ff6ba8ab4ef0d8713cceeb8523bdd68b96ce00660741b0a6b
POST /rtb/bid?src=prebid_prebid_6.15.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 492
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sun, 04 Sep 2022 19:56:28 GMT
set-cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljtrtb=;Version=1;Domain=.lijit.com;Path=/;Max-Age=0;Secure;Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=None;
content-type: application/json
access-control-allow-origin: https://disploot.com
access-control-allow-methods: GET, POST, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
vary: Accept-Encoding, User-Agent
content-encoding: gzip
content-length: 100
pod: X-Sovrn-Pod: ad_ap7ams1
ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
200 OK 98 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 56247b53775b8c88f46e94f4fda99dcd
74852432216fab0127408bfbb75d965f6edc1b43
18aa5c69b060a33dc6645636fc19f8178ed49cbbd04f9e5867176f43ba59c301
POST /rtb/bid?src=prebid_prebid_6.15.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 490
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sun, 04 Sep 2022 19:56:28 GMT
set-cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljtrtb=;Version=1;Domain=.lijit.com;Path=/;Max-Age=0;Secure;Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=None;
content-type: application/json
access-control-allow-origin: https://disploot.com
access-control-allow-methods: GET, POST, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
vary: Accept-Encoding, User-Agent
content-encoding: gzip
content-length: 98
pod: X-Sovrn-Pod: ad_ap7ams1
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 4983cf171c251f89ff4de32b79d05829
c77f22715b606a490c5be6fff576176314d3333f
3691aff6a4e5b8f5d1816d68c771e73fcc2b3156ee7d019407f30cc31cbf51e2
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 669
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 04 Sep 2022 19:56:28 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://disploot.com
AN-X-Request-Uuid: 80f1f580-f69f-42a6-8c6e-fa180443977b
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
200 OK 99 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash b060f936df1049d2971405ae995eddd3
04f1b41af51e00531f514700723c769bbadddc1b
3191661d87dad78fa50d4bfa395a540fe077abdfadb3fcb285c3ef8dad6aa911
POST /rtb/bid?src=prebid_prebid_6.15.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 490
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sun, 04 Sep 2022 19:56:28 GMT
set-cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljtrtb=;Version=1;Domain=.lijit.com;Path=/;Max-Age=0;Secure;Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=None;
content-type: application/json
access-control-allow-origin: https://disploot.com
access-control-allow-methods: GET, POST, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
vary: Accept-Encoding, User-Agent
content-encoding: gzip
content-length: 99
pod: X-Sovrn-Pod: ad_ap7ams1
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=91465741775
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=91465741775
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=91465741775 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 488
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:56:28 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://disploot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
platform.pubfuture.com/v1/config/62e25c1df58e070028dfa2cf.js?v=6&ip=OTEuOTAuNDIuMTU0&cc=Tk8=&c=MzE0MzI0NA==&d=b3RoZXJz&s=aHR0cHM6Ly93b3JkY291bnRlci5pY3UvUmFscGgx
200 OK 1.8 kB URL HTTP/2 platform.pubfuture.com/v1/config/62e25c1df58e070028dfa2cf.js?v=6&ip=OTEuOTAuNDIuMTU0&cc=Tk8=&c=MzE0MzI0NA==&d=b3RoZXJz&s=aHR0cHM6Ly93b3JkY291bnRlci5pY3UvUmFscGgx
IP
File type HTML document, ASCII text, with very long lines (3642), with no line terminators
Hash 65da3349ec6115a958577fe4b3467437
d0e54252bc2de2b87ce651334d6607048454f372
58d5f0c2abb8dbfbbf5a514e27cb8abc600ef7a909eda36a03a0f5f7e627c713
GET /v1/config/62e25c1df58e070028dfa2cf.js?v=6&ip=OTEuOTAuNDIuMTU0&cc=Tk8=&c=MzE0MzI0NA==&d=b3RoZXJz&s=aHR0cHM6Ly93b3JkY291bnRlci5pY3UvUmFscGgx HTTP/1.1
Host: platform.pubfuture.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 19:56:27 GMT
content-type: application/javascript; charset=utf-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
access-control-allow-origin: *
etag: W/"e3a-n6b2sBoesdzt+kXYahuY2/zsuwU"
vary: Accept-Encoding
content-encoding: gzip
x-frame-options: SAMEORIGIN, SAMEORIGIN
X-Firefox-Spdy: h2
ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
200 OK 99 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f2e79c1b5eb88eebf453fbdd11c187cd
87ce50a6f04ee400e2176cb440212f19011d859f
e751e9d0cb0e0442c08ce1b186975bfaa3edfbf943a1875a46bc6226ee3ed86c
POST /rtb/bid?src=prebid_prebid_6.15.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 488
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sun, 04 Sep 2022 19:56:28 GMT
set-cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljtrtb=;Version=1;Domain=.lijit.com;Path=/;Max-Age=0;Secure;Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=None;
content-type: application/json
access-control-allow-origin: https://disploot.com
access-control-allow-methods: GET, POST, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
vary: Accept-Encoding, User-Agent
content-encoding: gzip
content-length: 99
pod: X-Sovrn-Pod: ad_ap7ams1
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 532
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 04 Sep 2022 19:56:29 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://disploot.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 4c97dbea57704563154893f697396d13
735bcf0ef489fbf35fa5b90e47ae2646e37a3137
e95c36817c8ffc0c7fa8c3c7cac633e36b7c7f6eccbea9e97d18d1a350b06c8e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4517
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:56:29 GMT
Last-Modified: Sun, 04 Sep 2022 18:41:12 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 313
cdn.viqeo.tv/js/assets/459/js/vq_fly_widget.js
200 OK 8.4 kB URL HTTP/2 cdn.viqeo.tv/js/assets/459/js/vq_fly_widget.js
IP
ASN #204720 CDNetworks LLC
File type HTML document, ASCII text, with very long lines (8380)
Hash 2ef59c0dc12a31e76e2ca5a97571a919
31baaf2859a1bb7cdf95e7b7e80a1346de8b65cc
f815a089133966d6e1c4fcf81360e2e1692f84f4328231f34972a96e808057d7
GET /js/assets/459/js/vq_fly_widget.js HTTP/1.1
Host: cdn.viqeo.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 19:56:29 GMT
content-type: application/javascript; charset=UTF-8
content-length: 8422
x-powered-by: Express
last-modified: Mon, 29 Aug 2022 11:52:10 GMT
etag: W/"20e6-182e971de26"
expires: Mon, 04 Sep 2023 19:56:29 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 80a630aaca3318cb690ea7c1e68e1b73
280347dd4fb4f86a75cc4a83942a20fab0995d27
4e50347db408d4fa75bbd658ad8f32340ba08ab7af2c734d0b3b9c72a61e294e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4E50347DB408D4FA75BBD658AD8F32340BA08AB7AF2C734D0B3B9C72A61E294E"
Last-Modified: Sat, 03 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6641
Expires: Sun, 04 Sep 2022 21:47:10 GMT
Date: Sun, 04 Sep 2022 19:56:29 GMT
Connection: keep-alive
api.viqeo.tv/v1/profile/9910/nextvideoblock?player_id=2266&block_length=1&referer=https://wordcounter.icu/Ralph1
200 OK 3.2 kB URL HTTP/2 api.viqeo.tv/v1/profile/9910/nextvideoblock?player_id=2266&block_length=1&referer=https://wordcounter.icu/Ralph1
IP
File type JSON data\012- , ASCII text, with very long lines (3216), with no line terminators
Hash f8bc240d02eb2b8a3d91ed28ca6fd39c
8db1ff7bac220995b18dd0e3b08334cebd806ca7
6ac6b4ccb69d4d79ad2cf9168c030090e2501aaea6b1694ba961276587a84955
GET /v1/profile/9910/nextvideoblock?player_id=2266&block_length=1&referer=https://wordcounter.icu/Ralph1 HTTP/1.1
Host: api.viqeo.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 19:56:29 GMT
content-type: application/json
content-length: 3216
set-cookie: user_key=232fda6f47244f2e4ee9a024a337086a913732df; max-age=2678400; domain=.viqeo.tv; path=/; secure; SameSite=None
access-control-allow-origin: https://wordcounter.icu
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type,Locale
vary: Origin
X-Firefox-Spdy: h2
api.viqeo.tv/v1/data/startup?video%5B%5D=603b373f75d160dcf229&profile=9910&referer=https%3A%2F%2Fwordcounter.icu%2FRalph1&title=Word%20Counter%20-%20Count%20Words
200 OK 1.6 kB URL HTTP/2 api.viqeo.tv/v1/data/startup?video%5B%5D=603b373f75d160dcf229&profile=9910&referer=https%3A%2F%2Fwordcounter.icu%2FRalph1&title=Word%20Counter%20-%20Count%20Words
IP
File type JSON data\012- , ASCII text, with very long lines (1558), with no line terminators
Hash a4fde2a621e015270f6b337f340ca10f
867485f503e3da51c35bd031f4029df36f875b4d
95f168004d3ce58eb0192025b5f932dcc8e337c22e07b9152bf4fea9f94270da
GET /v1/data/startup?video%5B%5D=603b373f75d160dcf229&profile=9910&referer=https%3A%2F%2Fwordcounter.icu%2FRalph1&title=Word%20Counter%20-%20Count%20Words HTTP/1.1
Host: api.viqeo.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Cookie: user_key=232fda6f47244f2e4ee9a024a337086a913732df
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 19:56:29 GMT
content-type: application/json
content-length: 1558
access-control-allow-origin: https://wordcounter.icu
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type,Locale
vary: Origin
X-Firefox-Spdy: h2
cdn.viqeo.tv/embed?vid=603b373f75d160dcf229&presetId=58066&playerId=2266
200 OK 20 kB URL HTTP/2 cdn.viqeo.tv/embed?vid=603b373f75d160dcf229&presetId=58066&playerId=2266
IP
ASN #204720 CDNetworks LLC
Hash 7c7d554e8a89944ba459e9812f0b3651
c0bb78b400749e2bf527d653d79a016db51b906f
088f40ea6dca0141fd9ce877364ce223744e6841d057ffd65bfdb63c652c8516
GET /embed?vid=603b373f75d160dcf229&presetId=58066&playerId=2266 HTTP/1.1
Host: cdn.viqeo.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Cookie: user_key=232fda6f47244f2e4ee9a024a337086a913732df
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 19:56:30 GMT
content-type: text/html; charset=UTF-8
expires: Sun, 04 Sep 2022 20:06:30 GMT
last-modified: Wed, 31 Aug 2022 06:33:02 GMT
pragma: no-cache
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type,Locale
vary: Accept-Encoding, Origin
content-encoding: gzip
cache-control: max-age=600
access-control-allow-origin: *
X-Firefox-Spdy: h2
unseenreport.com/pxf.gif?uuid=90d6bbf5-9ee6-4ff0-8c77-4d5bacd8c9b5&eb=da08d6844107154a138edda4653a0f4b&te=f6ce28b9ffd697cd2ee52a12f20448bb&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.31&b_frame=0&pk=03301f093675f77c84729c5993ceb7c8&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=19
200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=90d6bbf5-9ee6-4ff0-8c77-4d5bacd8c9b5&eb=da08d6844107154a138edda4653a0f4b&te=f6ce28b9ffd697cd2ee52a12f20448bb&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.31&b_frame=0&pk=03301f093675f77c84729c5993ceb7c8&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=19
IP
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=90d6bbf5-9ee6-4ff0-8c77-4d5bacd8c9b5&eb=da08d6844107154a138edda4653a0f4b&te=f6ce28b9ffd697cd2ee52a12f20448bb&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.31&b_frame=0&pk=03301f093675f77c84729c5993ceb7c8&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=19 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 04 Sep 2022 19:56:30 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8bf7d06d53eafb9bb0e8af82664e35dd
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.viqeo.tv/js/assets/459/js/348.js
200 OK 6.4 kB URL HTTP/2 cdn.viqeo.tv/js/assets/459/js/348.js
IP
ASN #204720 CDNetworks LLC
File type ASCII text, with very long lines (6378)
Hash 4c279866c644d8d1ac5b4b9e73105cd2
21f0f4e1e21c724c92df91bafb28557ab34e1cf7
7b5e8ce362e371a1f54f9c605ed5014962cec55ad10e573aa05b7d55ce37fb0c
GET /js/assets/459/js/348.js HTTP/1.1
Host: cdn.viqeo.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Cookie: user_key=232fda6f47244f2e4ee9a024a337086a913732df
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 19:56:30 GMT
content-type: application/javascript; charset=UTF-8
content-length: 6410
x-powered-by: Express
last-modified: Mon, 29 Aug 2022 11:52:10 GMT
etag: W/"190a-182e971de26"
expires: Mon, 04 Sep 2023 19:56:30 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5c558f0d361cf08abccb7a1a609e2060
98d2744309169cb3a7e6bf84b953af7e19a0c581
713db20649c65ae41e664926246fb8481c4b1ee5d72d030ac2735b8df163bdb9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "713DB20649C65AE41E664926246FB8481C4B1EE5D72D030AC2735B8DF163BDB9"
Last-Modified: Fri, 02 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6417
Expires: Sun, 04 Sep 2022 21:43:27 GMT
Date: Sun, 04 Sep 2022 19:56:30 GMT
Connection: keep-alive
stats.viqeo.tv/stats?referer=https%3A%2F%2Fwordcounter.icu%2FRalph1&user_key=232fda6f47244f2e4ee9a024a337086a913732df&rand=e5481eee1c466ed9c9565e76d4fdcbc8&profile_id=9910&site_id=7649&story_id=0&video_id=pageload&event=init&container=default&ab_segment=&page_type=web
200 OK 35 B URL HTTP/2 stats.viqeo.tv/stats?referer=https%3A%2F%2Fwordcounter.icu%2FRalph1&user_key=232fda6f47244f2e4ee9a024a337086a913732df&rand=e5481eee1c466ed9c9565e76d4fdcbc8&profile_id=9910&site_id=7649&story_id=0&video_id=pageload&event=init&container=default&ab_segment=&page_type=web
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df16d33739defe9bda1f4c45d36fd7a7
ff7489a6dd9ab0d9a4b084315f5b9d77cf9fdf50
90252ef0aa9e3d36c861bbeaa1bd57b7f855333edf2957ab9473838a52e2dd7f
GET /stats?referer=https%3A%2F%2Fwordcounter.icu%2FRalph1&user_key=232fda6f47244f2e4ee9a024a337086a913732df&rand=e5481eee1c466ed9c9565e76d4fdcbc8&profile_id=9910&site_id=7649&story_id=0&video_id=pageload&event=init&container=default&ab_segment=&page_type=web HTTP/1.1
Host: stats.viqeo.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Cookie: user_key=232fda6f47244f2e4ee9a024a337086a913732df
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 19:56:30 GMT
content-type: image/gif
content-length: 35
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: Content-Type,Authorization,Origin
access-control-allow-methods: GET, POST, HEAD, OPTIONS
cache-control: no-cache, no-store, must-revalidate
vary: Origin
X-Firefox-Spdy: h2
stats.viqeo.tv/stats?referer=https%3A%2F%2Fwordcounter.icu%2FRalph1&page_type=web&user_key=232fda6f47244f2e4ee9a024a337086a913732df&rand=f8470ee85118956e360a1c3c9e9aff58&profile_id=9910&site_id=7649&story_id=242305&video_id=603b373f75d160dcf229&event=init&container=default&ab_segment=&custom_tag
200 OK 35 B URL HTTP/2 stats.viqeo.tv/stats?referer=https%3A%2F%2Fwordcounter.icu%2FRalph1&page_type=web&user_key=232fda6f47244f2e4ee9a024a337086a913732df&rand=f8470ee85118956e360a1c3c9e9aff58&profile_id=9910&site_id=7649&story_id=242305&video_id=603b373f75d160dcf229&event=init&container=default&ab_segment=&custom_tag
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df16d33739defe9bda1f4c45d36fd7a7
ff7489a6dd9ab0d9a4b084315f5b9d77cf9fdf50
90252ef0aa9e3d36c861bbeaa1bd57b7f855333edf2957ab9473838a52e2dd7f
GET /stats?referer=https%3A%2F%2Fwordcounter.icu%2FRalph1&page_type=web&user_key=232fda6f47244f2e4ee9a024a337086a913732df&rand=f8470ee85118956e360a1c3c9e9aff58&profile_id=9910&site_id=7649&story_id=242305&video_id=603b373f75d160dcf229&event=init&container=default&ab_segment=&custom_tag HTTP/1.1
Host: stats.viqeo.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Cookie: user_key=232fda6f47244f2e4ee9a024a337086a913732df
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 19:56:30 GMT
content-type: image/gif
content-length: 35
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: Content-Type,Authorization,Origin
access-control-allow-methods: GET, POST, HEAD, OPTIONS
cache-control: no-cache, no-store, must-revalidate
vary: Origin
X-Firefox-Spdy: h2
stats.viqeo.tv/stats?referer=https%3A%2F%2Fwordcounter.icu%2FRalph1&page_type=web&user_key=232fda6f47244f2e4ee9a024a337086a913732df&site_id=7649&event=visible&container=recommend_player&custom_tag&profile_id=9910&rand=f8470ee85118956e360a1c3c9e9aff58&content_id=0&channel_id=0&owner_id=0&owner=&ab_segment=&story_id=242305&video_id=603b373f75d160dcf229&user_id=0
200 OK 35 B URL HTTP/2 stats.viqeo.tv/stats?referer=https%3A%2F%2Fwordcounter.icu%2FRalph1&page_type=web&user_key=232fda6f47244f2e4ee9a024a337086a913732df&site_id=7649&event=visible&container=recommend_player&custom_tag&profile_id=9910&rand=f8470ee85118956e360a1c3c9e9aff58&content_id=0&channel_id=0&owner_id=0&owner=&ab_segment=&story_id=242305&video_id=603b373f75d160dcf229&user_id=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df16d33739defe9bda1f4c45d36fd7a7
ff7489a6dd9ab0d9a4b084315f5b9d77cf9fdf50
90252ef0aa9e3d36c861bbeaa1bd57b7f855333edf2957ab9473838a52e2dd7f
GET /stats?referer=https%3A%2F%2Fwordcounter.icu%2FRalph1&page_type=web&user_key=232fda6f47244f2e4ee9a024a337086a913732df&site_id=7649&event=visible&container=recommend_player&custom_tag&profile_id=9910&rand=f8470ee85118956e360a1c3c9e9aff58&content_id=0&channel_id=0&owner_id=0&owner=&ab_segment=&story_id=242305&video_id=603b373f75d160dcf229&user_id=0 HTTP/1.1
Host: stats.viqeo.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Cookie: user_key=232fda6f47244f2e4ee9a024a337086a913732df
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 19:56:30 GMT
content-type: image/gif
content-length: 35
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: Content-Type,Authorization,Origin
access-control-allow-methods: GET, POST, HEAD, OPTIONS
cache-control: no-cache, no-store, must-revalidate
vary: Origin
X-Firefox-Spdy: h2
stats.viqeo.tv/stats?referer=https%3A%2F%2Fwordcounter.icu%2FRalph1&page_type=web&user_key=232fda6f47244f2e4ee9a024a337086a913732df&rand=f8470ee85118956e360a1c3c9e9aff58&profile_id=9910&site_id=7649&story_id=0&video_id=pageload&event=init&container=default&ab_segment=
200 OK 35 B URL HTTP/2 stats.viqeo.tv/stats?referer=https%3A%2F%2Fwordcounter.icu%2FRalph1&page_type=web&user_key=232fda6f47244f2e4ee9a024a337086a913732df&rand=f8470ee85118956e360a1c3c9e9aff58&profile_id=9910&site_id=7649&story_id=0&video_id=pageload&event=init&container=default&ab_segment=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df16d33739defe9bda1f4c45d36fd7a7
ff7489a6dd9ab0d9a4b084315f5b9d77cf9fdf50
90252ef0aa9e3d36c861bbeaa1bd57b7f855333edf2957ab9473838a52e2dd7f
GET /stats?referer=https%3A%2F%2Fwordcounter.icu%2FRalph1&page_type=web&user_key=232fda6f47244f2e4ee9a024a337086a913732df&rand=f8470ee85118956e360a1c3c9e9aff58&profile_id=9910&site_id=7649&story_id=0&video_id=pageload&event=init&container=default&ab_segment= HTTP/1.1
Host: stats.viqeo.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Cookie: user_key=232fda6f47244f2e4ee9a024a337086a913732df
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 19:56:30 GMT
content-type: image/gif
content-length: 35
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: Content-Type,Authorization,Origin
access-control-allow-methods: GET, POST, HEAD, OPTIONS
cache-control: no-cache, no-store, must-revalidate
vary: Origin
X-Firefox-Spdy: h2
cdn.viqeo.tv/storage/fe/54/fa5943e79609bd088330e723edbc0b9b.webp
200 OK 130 kB URL HTTP/2 cdn.viqeo.tv/storage/fe/54/fa5943e79609bd088330e723edbc0b9b.webp
IP
ASN #204720 CDNetworks LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1620x1080, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 130 kB (129618 bytes)
Hash 28c761d7469057e679764a29e37b84e2
20d35ccffdbe09732e06be5a15ad61705c9cdd7f
95a77dca887d94b6ebae6943061592139f3db9c9ed36ce2c469aaf0739667b67
GET /storage/fe/54/fa5943e79609bd088330e723edbc0b9b.webp HTTP/1.1
Host: cdn.viqeo.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: user_key=232fda6f47244f2e4ee9a024a337086a913732df
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 19:56:30 GMT
content-type: image/webp
content-length: 129618
expires: Mon, 04 Sep 2023 19:56:30 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.viqeo.tv/storage/3f/5c/8a0acdd59447ba7ac97974fc57b2d34e.webp
200 OK 84 kB URL HTTP/2 cdn.viqeo.tv/storage/3f/5c/8a0acdd59447ba7ac97974fc57b2d34e.webp
IP
ASN #204720 CDNetworks LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1624x1080, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 6ff34764db72568d8dfed801b3aa3aa9
1d744dab6a38908decc8bb4458164049f15147df
6a60ecc0b7d2e08f4a97f95d0638edf576598a19d251b1946f825847ce82d986
GET /storage/3f/5c/8a0acdd59447ba7ac97974fc57b2d34e.webp HTTP/1.1
Host: cdn.viqeo.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: user_key=232fda6f47244f2e4ee9a024a337086a913732df
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 19:56:30 GMT
content-type: image/webp
content-length: 83858
expires: Mon, 04 Sep 2023 19:56:30 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.viqeo.tv/v1/proxy/?url=https://static.videonow.ru/v2/51fae718/vn_module.js
200 OK 239 kB URL HTTP/2 cdn.viqeo.tv/v1/proxy/?url=https://static.videonow.ru/v2/51fae718/vn_module.js
IP
ASN #204720 CDNetworks LLC
Size 239 kB (238979 bytes)
Hash e18247981615cd8185b8eb2c650c7d96
6772ad9ce5d02fdae365dac0878c8544726de491
98e5aea68abd3f51696e683927ec464d3ecc92f1c5c3243f98ad51c1c3cd4542
GET /v1/proxy/?url=https://static.videonow.ru/v2/51fae718/vn_module.js HTTP/1.1
Host: cdn.viqeo.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Cookie: user_key=232fda6f47244f2e4ee9a024a337086a913732df
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 19:56:30 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 22 Aug 2022 12:07:18 GMT
etag: W/"63037176-80b8c"
expires: Mon, 04 Sep 2023 19:56:30 GMT
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true, true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type,Locale
vary: Accept-Encoding, Origin
content-encoding: gzip
cache-control: max-age=31536000
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.viqeo.tv/storage/33/79/065c778364a5601dacb80cc080118e32.webp
200 OK 154 kB URL HTTP/2 cdn.viqeo.tv/storage/33/79/065c778364a5601dacb80cc080118e32.webp
IP
ASN #204720 CDNetworks LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1620x1080, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 154 kB (153806 bytes)
Hash 635f0ada4997f40f6b8d7ab0286ef813
7cc41270efb0e8640d913335e8296b8d03ce7f9b
dd9f95e68072aa6aa91df91406651eeb847954295429ffb0fda4e8da47b5c994
GET /storage/33/79/065c778364a5601dacb80cc080118e32.webp HTTP/1.1
Host: cdn.viqeo.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: user_key=232fda6f47244f2e4ee9a024a337086a913732df
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 19:56:30 GMT
content-type: image/webp
content-length: 153806
expires: Mon, 04 Sep 2023 19:56:30 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.viqeo.tv/storage/5a/b8/705e696da1cb960e71230c2b60f423cf.webp
200 OK 66 kB URL HTTP/2 cdn.viqeo.tv/storage/5a/b8/705e696da1cb960e71230c2b60f423cf.webp
IP
ASN #204720 CDNetworks LLC
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1438x1080, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5990ed5422ef51d48a61e1d2f59e62a6
256bf6dff9e9cc6d72736ba0f0909eb3ef88c352
f4499c064ba778c2fe24d28c18fe4de6f70c6ab081919e11fb9bda0e0f3e5f7c
GET /storage/5a/b8/705e696da1cb960e71230c2b60f423cf.webp HTTP/1.1
Host: cdn.viqeo.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: user_key=232fda6f47244f2e4ee9a024a337086a913732df
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 19:56:30 GMT
content-type: image/webp
content-length: 65602
expires: Mon, 04 Sep 2023 19:56:30 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
X-Firefox-Spdy: h2
stats.viqeo.tv/stats?referer=https%3A%2F%2Fwordcounter.icu%2FRalph1&page_type=web&user_key=232fda6f47244f2e4ee9a024a337086a913732df&site_id=7649&event=start&container=recommend_player&custom_tag&profile_id=9910&rand=f8470ee85118956e360a1c3c9e9aff58&content_id=0&channel_id=0&owner_id=0&owner=&ab_segment=&story_id=242305&video_id=603b373f75d160dcf229&user_id=0
200 OK 35 B URL HTTP/2 stats.viqeo.tv/stats?referer=https%3A%2F%2Fwordcounter.icu%2FRalph1&page_type=web&user_key=232fda6f47244f2e4ee9a024a337086a913732df&site_id=7649&event=start&container=recommend_player&custom_tag&profile_id=9910&rand=f8470ee85118956e360a1c3c9e9aff58&content_id=0&channel_id=0&owner_id=0&owner=&ab_segment=&story_id=242305&video_id=603b373f75d160dcf229&user_id=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df16d33739defe9bda1f4c45d36fd7a7
ff7489a6dd9ab0d9a4b084315f5b9d77cf9fdf50
90252ef0aa9e3d36c861bbeaa1bd57b7f855333edf2957ab9473838a52e2dd7f
GET /stats?referer=https%3A%2F%2Fwordcounter.icu%2FRalph1&page_type=web&user_key=232fda6f47244f2e4ee9a024a337086a913732df&site_id=7649&event=start&container=recommend_player&custom_tag&profile_id=9910&rand=f8470ee85118956e360a1c3c9e9aff58&content_id=0&channel_id=0&owner_id=0&owner=&ab_segment=&story_id=242305&video_id=603b373f75d160dcf229&user_id=0 HTTP/1.1
Host: stats.viqeo.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Cookie: user_key=232fda6f47244f2e4ee9a024a337086a913732df
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 19:56:30 GMT
content-type: image/gif
content-length: 35
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: Content-Type,Authorization,Origin
access-control-allow-methods: GET, POST, HEAD, OPTIONS
cache-control: no-cache, no-store, must-revalidate
vary: Origin
X-Firefox-Spdy: h2
api.viqeo.tv/v1/data/track?npvid=603b373f75d160dcf229&user_key=232fda6f47244f2e4ee9a024a337086a913732df&event=start
204 No Content 0 B URL HTTP/2 api.viqeo.tv/v1/data/track?npvid=603b373f75d160dcf229&user_key=232fda6f47244f2e4ee9a024a337086a913732df&event=start
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v1/data/track?npvid=603b373f75d160dcf229&user_key=232fda6f47244f2e4ee9a024a337086a913732df&event=start HTTP/1.1
Host: api.viqeo.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Cookie: user_key=232fda6f47244f2e4ee9a024a337086a913732df
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 04 Sep 2022 19:56:30 GMT
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type,Locale
vary: Origin
X-Firefox-Spdy: h2
onetag-sys.com/usync/?tag=img
204 No Content 0 B URL HTTP/2 onetag-sys.com/usync/?tag=img
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/?tag=img HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-store
strict-transport-security: max-age=15552000
X-Firefox-Spdy: h2
b1h.zemanta.com/usersync/prebid
200 OK 26 B URL HTTP/1.1 b1h.zemanta.com/usersync/prebid
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6a43099d5c8fe991a7aa7ebaca53069d
5bce2f0d57305c58c7b05bfce29ebb39a18f5570
3b7b8a4b411ddf8db9bacc2f3aabf406f8e4c0c087829b336ca331c40adfdff1
GET /usersync/prebid HTTP/1.1
Host: b1h.zemanta.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 26
Date: Sun, 04 Sep 2022 19:56:30 GMT
stats.viqeo.tv/stats?referer=https%3A%2F%2Fwordcounter.icu%2FRalph1&page_type=web&user_key=232fda6f47244f2e4ee9a024a337086a913732df&site_id=7649&event=advVisible&container=recommend_player&custom_tag&profile_id=9910&rand=f8470ee85118956e360a1c3c9e9aff58&content_id=0&channel_id=0&owner_id=0&owner=&ab_segment=&story_id=242305&video_id=603b373f75d160dcf229&user_id=0
200 OK 35 B URL HTTP/2 stats.viqeo.tv/stats?referer=https%3A%2F%2Fwordcounter.icu%2FRalph1&page_type=web&user_key=232fda6f47244f2e4ee9a024a337086a913732df&site_id=7649&event=advVisible&container=recommend_player&custom_tag&profile_id=9910&rand=f8470ee85118956e360a1c3c9e9aff58&content_id=0&channel_id=0&owner_id=0&owner=&ab_segment=&story_id=242305&video_id=603b373f75d160dcf229&user_id=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df16d33739defe9bda1f4c45d36fd7a7
ff7489a6dd9ab0d9a4b084315f5b9d77cf9fdf50
90252ef0aa9e3d36c861bbeaa1bd57b7f855333edf2957ab9473838a52e2dd7f
GET /stats?referer=https%3A%2F%2Fwordcounter.icu%2FRalph1&page_type=web&user_key=232fda6f47244f2e4ee9a024a337086a913732df&site_id=7649&event=advVisible&container=recommend_player&custom_tag&profile_id=9910&rand=f8470ee85118956e360a1c3c9e9aff58&content_id=0&channel_id=0&owner_id=0&owner=&ab_segment=&story_id=242305&video_id=603b373f75d160dcf229&user_id=0 HTTP/1.1
Host: stats.viqeo.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Cookie: user_key=232fda6f47244f2e4ee9a024a337086a913732df
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 19:56:31 GMT
content-type: image/gif
content-length: 35
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: Content-Type,Authorization,Origin
access-control-allow-methods: GET, POST, HEAD, OPTIONS
cache-control: no-cache, no-store, must-revalidate
vary: Origin
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash f48c002e16e83c46a43a4dd0eb75dc9f
4aa05a2c1e42de34e25562a4738b5232f3c2fe5e
8aaab69b52bc5c2408d1d94074790a38e11d6a5725ad124cab51e43d62e9ec5d
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 19:56:31 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Thu, 08 Sep 2022 18:48:15 GMT
ETag: "4aa05a2c1e42de34e25562a4738b5232f3c2fe5e"
Last-Modified: Sun, 04 Sep 2022 18:48:16 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1962
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 745949f88ca70b3d-OSL
data.videonow.ru/?profile_id=5735171&format=vast&vpaid=0&multi=1&flash=0&w=230&h=172&location=https%3A%2F%2Fwordcounter.icu%2FRalph1
302 Found 0 B URL HTTP/1.1 data.videonow.ru/?profile_id=5735171&format=vast&vpaid=0&multi=1&flash=0&w=230&h=172&location=https%3A%2F%2Fwordcounter.icu%2FRalph1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?profile_id=5735171&format=vast&vpaid=0&multi=1&flash=0&w=230&h=172&location=https%3A%2F%2Fwordcounter.icu%2FRalph1 HTTP/1.1
Host: data.videonow.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Sun, 04 Sep 2022 19:56:31 GMT
Content-Type: text/xml; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.34
Cache-Control: private, max-age=0, must-revalidate
Access-Control-Allow-Origin: https://wordcounter.icu
Access-Control-Allow-Credentials: true
Set-Cookie: vn_user_key=26d9ea6a717125c1d36da3b4eb1bb6b260d3c797; expires=Tue, 04-Oct-2022 19:56:31 GMT; path=/; domain=.videonow.ru; samesite=none; secure; HttpOnly
Location: https://data.videonow.ru/?profile_id=5735171&format=vast&vpaid=0&multi=1&flash=0&w=230&h=172&location=https%3A%2F%2Fwordcounter.icu%2FRalph1&ccheck=1
data.videonow.ru/?profile_id=5735171&format=vast&vpaid=0&multi=1&flash=0&w=230&h=172&location=https%3A%2F%2Fwordcounter.icu%2FRalph1&ccheck=1
200 OK 3.0 kB URL HTTP/1.1 data.videonow.ru/?profile_id=5735171&format=vast&vpaid=0&multi=1&flash=0&w=230&h=172&location=https%3A%2F%2Fwordcounter.icu%2FRalph1&ccheck=1
IP
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (425), with CRLF, LF line terminators
Hash 1ba6758fb759c9eabd8a5cef16007cca
6f894e5dad4d6d2bd7fb0f94089809db34110afc
2532ab0ef97b569ba73cb061161e89fda7a8ff9fa1fa5acc87b15f9900ea2f26
GET /?profile_id=5735171&format=vast&vpaid=0&multi=1&flash=0&w=230&h=172&location=https%3A%2F%2Fwordcounter.icu%2FRalph1&ccheck=1 HTTP/1.1
Host: data.videonow.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wordcounter.icu
Referer: https://wordcounter.icu/
Connection: keep-alive
Cookie: vn_user_key=26d9ea6a717125c1d36da3b4eb1bb6b260d3c797
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Sep 2022 19:56:31 GMT
Content-Type: text/xml; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.34
Cache-Control: private, max-age=0, must-revalidate
Access-Control-Allow-Origin: https://wordcounter.icu
Access-Control-Allow-Credentials: true
Set-Cookie: vn_user_key=26d9ea6a717125c1d36da3b4eb1bb6b260d3c797; expires=Tue, 04-Oct-2022 19:56:31 GMT; path=/; domain=.videonow.ru; samesite=none; secure; HttpOnly
ud=a%2Cs5310%2Cp5735171; expires=Sun, 04-Sep-2022 21:02:00 GMT; path=/; domain=.videonow.ru; samesite=none; secure; HttpOnly
uw=a%2Cs5310%2Cp5735171; expires=Sun, 04-Sep-2022 21:02:00 GMT; path=/; domain=.videonow.ru; samesite=none; secure; HttpOnly
um=a%2Cs5310%2Cp5735171; expires=Fri, 30-Sep-2022 21:02:00 GMT; path=/; domain=.videonow.ru; samesite=none; secure; HttpOnly
X-Check-Ip: 91.90.42.154
Content-Encoding: gzip
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 1cfd9909484f34187c5d1237bd277862
f7229dbf920902c247d483f52643190778aea1a1
140c8e7c4101420c0192c1926db0a0aa2099458a34a7929bfc2598207894ab3d
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 19:56:32 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Thu, 08 Sep 2022 17:43:46 GMT
ETag: "f7229dbf920902c247d483f52643190778aea1a1"
Last-Modified: Sun, 04 Sep 2022 17:43:47 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1963
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 745949fc29450b3d-OSL
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 2a95fadadd5a591a50533caca7c8f6c0
f6340437242f1d249b7c80acaa1acc53b89e61ed
34a3bb293cfb04249c408c81626bce8dbd9b479ba7cfd6a80ec50cffd223ef7f
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 19:56:32 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Thu, 08 Sep 2022 16:08:43 GMT
ETag: "f6340437242f1d249b7c80acaa1acc53b89e61ed"
Last-Modified: Sun, 04 Sep 2022 16:08:44 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2805
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 745949fc598b0b3d-OSL
status.thawte.com/
200 OK 471 B IP
Hash 9a08e4ca723caa1d3043bb9cbc4de5a4
e8baa55c23a4e29c79fb33c166e38179270c9cf5
bc3955451b19bda0bf9431e8d9bd03ea419e3af8e29767b10da8c781a36196fe
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 282
Cache-Control: max-age=149933
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:56:32 GMT
Etag: "6314a883-1d7"
Expires: Tue, 06 Sep 2022 13:35:25 GMT
Last-Modified: Sun, 04 Sep 2022 13:30:43 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
sync.otm-r.com/match?vn=190
302 Found 0 B URL HTTP/2 sync.otm-r.com/match?vn=190
IP
ASN #200350 Yandex.Cloud LLC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?vn=190 HTTP/1.1
Host: sync.otm-r.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.23.0
date: Sun, 04 Sep 2022 19:56:32 GMT
content-length: 0
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
access-control-allow-origin: *
vary: Origin
location: https://7139616009816931914.sync.otm-r.com/
set-cookie: mpid=NjMxNTAyZWYwMWQ0N2U0YQ==; expires=Tue, 04 Oct 2022 19:56:32 GMT; domain=.otm-r.com; path=/; HttpOnly; secure; SameSite=None
X-Firefox-Spdy: h2
sync.dmp.otm-r.com/match/beeline?r=https%3A%2F%2F%7Bpid_int%7D-otm.ops.beeline.ru%2Fp%3Fssp%3Dotm%26id%3D%7Bpid_int%7D
204 No Content 0 B URL HTTP/2 sync.dmp.otm-r.com/match/beeline?r=https%3A%2F%2F%7Bpid_int%7D-otm.ops.beeline.ru%2Fp%3Fssp%3Dotm%26id%3D%7Bpid_int%7D
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/beeline?r=https%3A%2F%2F%7Bpid_int%7D-otm.ops.beeline.ru%2Fp%3Fssp%3Dotm%26id%3D%7Bpid_int%7D HTTP/1.1
Host: sync.dmp.otm-r.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.17.0
date: Sun, 04 Sep 2022 19:56:32 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
fcp.beeline.ru/sync/me?guid=E5EF7EFF-4D17-49C5-A965-AB4A44E223D3
200 OK 12 B URL HTTP/1.1 fcp.beeline.ru/sync/me?guid=E5EF7EFF-4D17-49C5-A965-AB4A44E223D3
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash b3943afdd1559d81d42e67d215891d02
a4355849a58f80e844a47b571096b3894728d393
335ca4cd5d837040e83d89b4e8ec4c5bdfbcd859baabdd51e0f4fd210d27ddd4
GET /sync/me?guid=E5EF7EFF-4D17-49C5-A965-AB4A44E223D3 HTTP/1.1
Host: fcp.beeline.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Sep 2022 19:56:32 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
X-Host: 192.168.152.64
stats2.videonow.ru/stats?profile_id=5735171&category_id=0&user_id=26d9ea6a717125c1d36da3b4eb1bb6b260d3c797&link_key=ac6d736aed078594bd7785feecbd1e70&predictor=dead&location=https%3A%2F%2Fwordcounter.icu%2FRalph1&event=pass&adv_id=5881&seq=1
200 OK 35 B URL HTTP/1.1 stats2.videonow.ru/stats?profile_id=5735171&category_id=0&user_id=26d9ea6a717125c1d36da3b4eb1bb6b260d3c797&link_key=ac6d736aed078594bd7785feecbd1e70&predictor=dead&location=https%3A%2F%2Fwordcounter.icu%2FRalph1&event=pass&adv_id=5881&seq=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df16d33739defe9bda1f4c45d36fd7a7
ff7489a6dd9ab0d9a4b084315f5b9d77cf9fdf50
90252ef0aa9e3d36c861bbeaa1bd57b7f855333edf2957ab9473838a52e2dd7f
GET /stats?profile_id=5735171&category_id=0&user_id=26d9ea6a717125c1d36da3b4eb1bb6b260d3c797&link_key=ac6d736aed078594bd7785feecbd1e70&predictor=dead&location=https%3A%2F%2Fwordcounter.icu%2FRalph1&event=pass&adv_id=5881&seq=1 HTTP/1.1
Host: stats2.videonow.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Cookie: vn_user_key=26d9ea6a717125c1d36da3b4eb1bb6b260d3c797; ud=a%2Cs5310%2Cp5735171; uw=a%2Cs5310%2Cp5735171; um=a%2Cs5310%2Cp5735171
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Sep 2022 19:56:32 GMT
Content-Type: image/gif
Content-Length: 35
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://wordcounter.icu
Access-Control-Allow-Headers: Content-Type,Authorization,Origin
Access-Control-Allow-Methods: GET, POST, HEAD, OPTIONS
Cache-Control: no-cache, no-store, must-revalidate
Vary: Origin
7139616009816931914.sync.otm-r.com/
200 OK 0 B URL HTTP/2 7139616009816931914.sync.otm-r.com/
IP
ASN #200350 Yandex.Cloud LLC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 7139616009816931914.sync.otm-r.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wordcounter.icu/
Connection: keep-alive
Cookie: mpid=NjMxNTAyZWYwMWQ0N2U0YQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.23.0
date: Sun, 04 Sep 2022 19:56:32 GMT
content-type: text/html
content-length: 0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f18d96282b7c77f54403502a9285b351
59e0108e0c0ef8fdcce853f7aca1b9edfd537914
18284f55bb7175b00a34cec965d8f24c5d4f8505c4c46351a638a03ba3e3144c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "18284F55BB7175B00A34CEC965D8F24C5D4F8505C4C46351A638A03BA3E3144C"
Last-Modified: Fri, 02 Sep 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12896
Expires: Sun, 04 Sep 2022 23:31:28 GMT
Date: Sun, 04 Sep 2022 19:56:32 GMT
Connection: keep-alive
ocsp.usertrust.com/
200 OK 472 B IP
Hash 3cb7e2b2a6df8205bf7e708b4c914ac8
b182d7ea431afd778ae8f1565c131ec6360b185d
33388a0df4097697187061d8c2588a2a988d709b05d951d533f0b8036f0f9edb
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 19:56:32 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 01 Sep 2022 16:18:20 GMT
Expires: Thu, 08 Sep 2022 16:18:19 GMT
Etag: "b182d7ea431afd778ae8f1565c131ec6360b185d"
Cache-Control: max-age=603393,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 898
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 745949fe3f37b4f3-OSL
ocsp.globalsign.com/gseccovsslca2018
200 OK 940 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 36d89968e433c0619b4f2e8048839d16
d8f556645f1d65f5602d2669af8cf3dc0e32f1a6
5e72226637a357b5dfe34dd4b53e9aa7dc814557fbbf64f96a5a027b0cd56e47
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 19:56:32 GMT
Content-Type: application/ocsp-response
Content-Length: 940
Connection: keep-alive
Expires: Thu, 08 Sep 2022 18:32:22 GMT
ETag: "d8f556645f1d65f5602d2669af8cf3dc0e32f1a6"
Last-Modified: Sun, 04 Sep 2022 18:32:23 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1303
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 745949fe6d9e1c12-OSL
dmg.digitaltarget.ru/1/6323/i/i?a=622&e=26d9ea6a717125c1d36da3b4eb1bb6b260d3c797&i=133068994
307 Temporary Redirect 0 B URL HTTP/1.1 dmg.digitaltarget.ru/1/6323/i/i?a=622&e=26d9ea6a717125c1d36da3b4eb1bb6b260d3c797&i=133068994
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/6323/i/i?a=622&e=26d9ea6a717125c1d36da3b4eb1bb6b260d3c797&i=133068994 HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Sun, 04 Sep 2022 19:56:32 GMT
Content-Length: 0
Connection: keep-alive
Location: https://dmg.digitaltarget.ru/awg/custom/6323/i/i?call_source=awg&a=622&e=26d9ea6a717125c1d36da3b4eb1bb6b260d3c797&i=133068994
Set-Cookie: viuserid=IlNDzX0ylfw9xFe7Ro52; Max-Age=93312000; Expires=Tue, 19 Aug 2025 19:56:32 GMT; SameSite=None; Path=/; Domain=dmg.digitaltarget.ru; Secure; HTTPOnly
Request-Time: 0
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
videotarget-sync.rutarget.ru/sync?vn=716
302 Moved Temporarily 0 B URL HTTP/1.1 videotarget-sync.rutarget.ru/sync?vn=716
IP
ASN #208677 Cloud technology Limited (Ltd.)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?vn=716 HTTP/1.1
Host: videotarget-sync.rutarget.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Sun, 04 Sep 2022 19:56:32 GMT
Content-Length: 0
Connection: close
Location: https://sync.dmp.otm-r.com/match/segmento?id=41VKXIN4UN5B
P3P: CP="This is not a P3P policy. Please visit http://rutarget.ru/p3p/ to get more information."
Set-Cookie: userId=41VKXIN4UN5B; Path=/; Domain=.rutarget.ru; Expires=Fri, 03 Mar 2023 19:56:32 GMT; SameSite=None; Secure
dmg.digitaltarget.ru/awg/custom/6323/i/i?call_source=awg&a=622&e=26d9ea6a717125c1d36da3b4eb1bb6b260d3c797&i=133068994
200 OK 64 B URL HTTP/1.1 dmg.digitaltarget.ru/awg/custom/6323/i/i?call_source=awg&a=622&e=26d9ea6a717125c1d36da3b4eb1bb6b260d3c797&i=133068994
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ffd585dfb1ac6320633a0be46d579437
5a6033d23bc9cd5d1de9ee61de69a44428086dcb
df18d81deb0cc1c48ae87e6481bb4ee375b40cce0fec3d226e002704d49f6cc8
GET /awg/custom/6323/i/i?call_source=awg&a=622&e=26d9ea6a717125c1d36da3b4eb1bb6b260d3c797&i=133068994 HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wordcounter.icu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Sep 2022 19:56:32 GMT
Content-Type: image/gif
Content-Length: 64
Connection: keep-alive
Vary: Accept-Encoding
Request-Time: 1
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
sync.dmp.otm-r.com/match/segmento?id=41VKXIN4UN5B
204 No Content 0 B URL HTTP/2 sync.dmp.otm-r.com/match/segmento?id=41VKXIN4UN5B
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/segmento?id=41VKXIN4UN5B HTTP/1.1
Host: sync.dmp.otm-r.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wordcounter.icu/
Connection: keep-alive
Cookie: mpid=NjMxNTAyZWYwMWQ0N2U0YQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.17.0
date: Sun, 04 Sep 2022 19:56:32 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9439a7cde73fea464c1463febdda0556
6a0030d4f26b2e9658700708c82e7ce6120ce93c
c3a5a489f4ef8c8cce54dbd819c5cf573740317ea3718ccd6804a03374739199
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:56:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.videonow.ru/v2/51fae718/vn_providers_vpaid.js
200 OK 168 kB URL HTTP/2 cdn.videonow.ru/v2/51fae718/vn_providers_vpaid.js
IP
ASN #204720 CDNetworks LLC
File type ASCII text, with very long lines (65460)
Size 168 kB (167892 bytes)
Hash 5d982369730a140bf02854684eaa2b70
c60034b31d8a50a5bd6303c39eb8643709444e74
d215d225d1fb45bbac5e08d65385f72ae4ed57137c167a61c06f2ced03674e5a
GET /v2/51fae718/vn_providers_vpaid.js HTTP/1.1
Host: cdn.videonow.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: vn_user_key=26d9ea6a717125c1d36da3b4eb1bb6b260d3c797; ud=a%2Cs5310%2Cp5735171; uw=a%2Cs5310%2Cp5735171; um=a%2Cs5310%2Cp5735171
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 19:56:33 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 22 Aug 2022 12:07:18 GMT
etag: W/"63037176-21cc5"
expires: Mon, 05 Sep 2022 12:07:53 GMT
access-control-allow-credentials: true
cache-control: max-age=86400, public
content-encoding: gzip
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a73c40e0fed317f31e35a24d5b5e2d0d
fb19e9d403e37956762ebb527260576860161872
4a38f2cc8997dada402e2cce06bbd8776cbad2075b00696d00efa59ad5388644
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:56:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.criteo.net/js/ld/publishertag.prebid.117.js
200 OK 0 B URL HTTP/2 static.criteo.net/js/ld/publishertag.prebid.117.js
IP
GET /js/ld/publishertag.prebid.117.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 19:56:29 GMT
content-type: text/javascript
last-modified: Wed, 29 Dec 2021 12:30:46 GMT
etag: W/"61cc54f6-15c19"
expires: Mon, 05 Sep 2022 19:56:29 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
disploot.com/r/p.html?f=kgixylywt&e=1184250294462
200 OK 0 B URL HTTP/2 disploot.com/r/p.html?f=kgixylywt&e=1184250294462
IP
GET /r/p.html?f=kgixylywt&e=1184250294462 HTTP/1.1
Host: disploot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Sun, 04 Sep 2022 04:14:44 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: k4fwcYPHcWZZYnLWPdC54XU852Hkq6s7aTrlf80q2YnO7toaOVLFbw==
age: 58365
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
an.yandex.ru/mapuid/adfox/26d9ea6a717125c1d36da3b4eb1bb6b260d3c797?jsredir=1
302 Found 0 B URL HTTP/2 an.yandex.ru/mapuid/adfox/26d9ea6a717125c1d36da3b4eb1bb6b260d3c797?jsredir=1
IP
GET /mapuid/adfox/26d9ea6a717125c1d36da3b4eb1bb6b260d3c797?jsredir=1 HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
timing-allow-origin: *
location: https://an.yandex.ru/mapuid/adfox/26d9ea6a717125c1d36da3b4eb1bb6b260d3c797?redir-setuniq=1&jsredir=1
date: Sun, 04 Sep 2022 19:56:32 GMT
set-cookie: yandexuid=6463623361662321392; domain=.yandex.ru; path=/; expires=Wed, 01-Sep-2032 19:56:32 GMT
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 04 Sep 2022 19:56:32 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Sun, 04 Sep 2022 19:56:32 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
an.yandex.ru/mapuid/adfox/26d9ea6a717125c1d36da3b4eb1bb6b260d3c797?redir-setuniq=1&jsredir=1
200 OK 0 B URL HTTP/2 an.yandex.ru/mapuid/adfox/26d9ea6a717125c1d36da3b4eb1bb6b260d3c797?redir-setuniq=1&jsredir=1
IP
GET /mapuid/adfox/26d9ea6a717125c1d36da3b4eb1bb6b260d3c797?redir-setuniq=1&jsredir=1 HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wordcounter.icu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Sun, 04 Sep 2022 19:56:32 GMT
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 04 Sep 2022 19:56:32 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Sun, 04 Sep 2022 19:56:32 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif; charset=utf-8
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
c.amazon-adsystem.com/aax2/apstag.js
200 OK 0 B URL HTTP/2 c.amazon-adsystem.com/aax2/apstag.js
IP
GET /aax2/apstag.js HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 04 Sep 2022 19:45:33 GMT
last-modified: Thu, 01 Sep 2022 20:50:54 GMT
etag: W/"350e165fc9b88312c43a9ba90eba4e3d"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600
server: AmazonS3
content-encoding: gzip
via: 1.1 490f651effcacfa7d80143d3047d794e.cloudfront.net (CloudFront), 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: FRA60-P1, OSL50-P1
x-amz-cf-id: hAUsnLDA2bSzMILcrN0MY_lTvLofqw_rzWTlQ8BvXP7Ron-t48g9Sw==
age: 653
X-Firefox-Spdy: h2
wordcounter.icu/Ralph1
200 OK 0 B IP
GET /Ralph1 HTTP/1.1
Host: wordcounter.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:56:25 GMT
content-type: text/html; charset=UTF-8
set-cookie: AppSession=c029c5fcaf683cbb25e88be8cf373392; path=/; HttpOnly; secure
refRalph1=ODU3YWE3MzI0YjBhYjJkODViM2EwOTRjOWQxZTZmNWQyYmU1M2U1NjlhYjJkZGYxZmU0ODYwNmU4NDQ0YWNhZUT3qzw0XsUjvp0WGBwdvN%2FpKKxyi4z%2BMZiut9kzm0gm; expires=Sun, 04-Sep-2022 20:01:24 GMT; Max-Age=300; path=/; HttpOnly; secure
csrfToken=3049ca1a7859f35544966d545fe770b6b15e8194c14e98b4ca3e8d234663873985c087e96d33a614093e52719db8913c1b5115e6b8c47ba9f2a9103f68ba72a9; path=/; HttpOnly; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-frame-options: SAMEORIGIN,SAMEORIGIN
x-robots-tag: noindex, nofollow
vary: Accept-Encoding,User-Agent
strict-transport-security: max-age=63072000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gG5FfhI3F1887ClmjWjFbOQ2e46ZEbD99yytfu0JfQHDH3Ij%2FdRhNpHKjvPzGUk8BfeDNb6tIQWisCmjY4LoL0jxJajZ4PjKzrfPU6Pbr2LUaeTDF6czZU%2BNEKN8D6pILSc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 745949cd6edbb511-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
test.cmp.quantcast.com/GVL-v2/cmp-list.json
200 OK 0 B URL HTTP/2 test.cmp.quantcast.com/GVL-v2/cmp-list.json
IP
GET /GVL-v2/cmp-list.json HTTP/1.1
Host: test.cmp.quantcast.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
access-control-max-age: 86400
cache-control: max-age=172800
date: Sun, 04 Sep 2022 03:00:37 GMT
last-modified: Thu, 01 Sep 2022 19:55:38 GMT
etag: W/"6956b949229e4f70c6801a6ba073ae1e"
x-amz-server-side-encryption: AES256
x-amz-version-id: 7JVvY2BjkVZ63YlCse_n1XAdPqJrPXIl
server: AmazonS3
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xRpGmIqmDczh9w33d_0y7kVLRCcAZQ_CjjoBrXixE8vlb_ESRXt04g==
age: 60951
X-Firefox-Spdy: h2
script.4dex.io/localstore.js
200 OK 0 B URL HTTP/2 script.4dex.io/localstore.js
IP
GET /localstore.js HTTP/1.1
Host: script.4dex.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:56:26 GMT
content-type: application/javascript
x-amz-id-2: txc6abd54ace594ae2a5b2f-00629f4bc7
last-modified: Tue, 10 May 2022 09:57:32 GMT
etag: W/"922cffdd75f7192f75231d92684885aa"
cache-control: public, max-age=1800
x-amz-version-id: 1652176652152482
x-amz-request-id: txc6abd54ace594ae2a5b2f-00629f4bc7
cf-cache-status: HIT
age: 2357792
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XA1M2N6uK%2BTxHiHXcXCH4gH8ylTlxt%2BqJSEOtG4ct7pjn0zsH2SJGly%2BiglUvuQmBuTfhiMsO7hYYTKU87shCJu209CDrDsFJwIklxl772N4cq1HSVK1pStxhvZzZ50C"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 745949db3e23b524-OSL
content-encoding: br
X-Firefox-Spdy: h2
cmp.quantcast.com/choice/PRrmquD1Ggcb1/wordcounter.icu/choice.js?tag_version=V2
200 OK 0 B URL HTTP/2 cmp.quantcast.com/choice/PRrmquD1Ggcb1/wordcounter.icu/choice.js?tag_version=V2
IP
GET /choice/PRrmquD1Ggcb1/wordcounter.icu/choice.js?tag_version=V2 HTTP/1.1
Host: cmp.quantcast.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 15 Jul 2022 05:27:59 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
content-encoding: br
date: Sun, 04 Sep 2022 19:56:26 GMT
cache-control: max-age=900
etag: W/"d543dbae27e0fbc2490048ba8f5c5417"
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: kqDanhex6K24tCpBkhCTBNfY7I_S-Aci6lTNjxM3--1-8pINIi3Ksg==
age: 17
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fwordcounter.icu%2F&domain=wordcounter.icu&cw=1&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fwordcounter.icu%2F&domain=wordcounter.icu&cw=1&lsw=1
IP
GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fwordcounter.icu%2F&domain=wordcounter.icu&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:56:25 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://wordcounter.icu
server-processing-duration-in-ticks: 893849
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
secure.quantserve.com/quant.js
200 OK 0 B URL HTTP/2 secure.quantserve.com/quant.js
IP
GET /quant.js HTTP/1.1
Host: secure.quantserve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:56:26 GMT
content-type: application/javascript
accept-ranges: bytes
cache-control: private, max-age=604800
content-encoding: gzip
etag: "3K3nn1ChiYCKxJYFUmbsHw=="
expires: Sun, 11 Sep 2022 19:56:26 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.viqeo.tv/js/assets/459/js/317.js
200 OK 0 B URL HTTP/2 cdn.viqeo.tv/js/assets/459/js/317.js
IP
ASN #204720 CDNetworks LLC
GET /js/assets/459/js/317.js HTTP/1.1
Host: cdn.viqeo.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Cookie: user_key=232fda6f47244f2e4ee9a024a337086a913732df
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 19:56:30 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
x-powered-by: Express
last-modified: Mon, 29 Aug 2022 11:52:10 GMT
etag: W/"3900-182e971de26"
content-encoding: gzip
expires: Mon, 04 Sep 2023 19:56:30 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
X-Firefox-Spdy: h2
disploot.com/r/p.html?f=yildxyd&e=1184250294462
200 OK 0 B URL HTTP/2 disploot.com/r/p.html?f=yildxyd&e=1184250294462
IP
GET /r/p.html?f=yildxyd&e=1184250294462 HTTP/1.1
Host: disploot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Sun, 04 Sep 2022 04:14:44 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: uTF4Bv4tiF9FxmKSEiilp_X74UR2alEes-Jp4EP0j48Mp6wyVi1Gdw==
age: 58365
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
static.criteo.net/js/ld/publishertag.prebid.js
200 OK 0 B URL HTTP/2 static.criteo.net/js/ld/publishertag.prebid.js
IP
GET /js/ld/publishertag.prebid.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 19:56:29 GMT
content-type: text/javascript
last-modified: Wed, 31 Aug 2022 21:48:59 GMT
etag: W/"630fd74b-16068"
expires: Mon, 05 Sep 2022 19:56:29 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
cdn.viqeo.tv/js/assets/459/js/70.js
200 OK 0 B URL HTTP/2 cdn.viqeo.tv/js/assets/459/js/70.js
IP
ASN #204720 CDNetworks LLC
GET /js/assets/459/js/70.js HTTP/1.1
Host: cdn.viqeo.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Cookie: user_key=232fda6f47244f2e4ee9a024a337086a913732df
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 19:56:30 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
x-powered-by: Express
last-modified: Mon, 29 Aug 2022 11:52:10 GMT
etag: W/"5362-182e971de26"
content-encoding: gzip
expires: Mon, 04 Sep 2023 19:56:30 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.viqeo.tv/js/assets/fonts/roboto_condensed.css
200 OK 0 B URL HTTP/2 cdn.viqeo.tv/js/assets/fonts/roboto_condensed.css
IP
ASN #204720 CDNetworks LLC
GET /js/assets/fonts/roboto_condensed.css HTTP/1.1
Host: cdn.viqeo.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: user_key=232fda6f47244f2e4ee9a024a337086a913732df
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 19:56:30 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
x-powered-by: Express
last-modified: Mon, 29 Aug 2022 11:52:10 GMT
etag: W/"22abc-182e971de26"
content-encoding: gzip
expires: Mon, 04 Sep 2023 19:56:30 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
X-Firefox-Spdy: h2
disploot.com/r/p.html?f=itbngxa&e=1184250294462
200 OK 0 B URL HTTP/2 disploot.com/r/p.html?f=itbngxa&e=1184250294462
IP
GET /r/p.html?f=itbngxa&e=1184250294462 HTTP/1.1
Host: disploot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Sun, 04 Sep 2022 04:14:44 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 2t0Gm_y9Lj79uTNXnJTJh7j_PMiySc2njZJKn-fB7KNZDb7Q--3WWA==
age: 58365
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
cmp.quantcast.com/tcfv2/43/cmp2ui-en.js
200 OK 0 B URL HTTP/2 cmp.quantcast.com/tcfv2/43/cmp2ui-en.js
IP
GET /tcfv2/43/cmp2ui-en.js HTTP/1.1
Host: cmp.quantcast.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
access-control-max-age: 86400
cache-control: max-age=172800
date: Sat, 03 Sep 2022 08:51:38 GMT
last-modified: Tue, 02 Aug 2022 14:10:37 GMT
etag: W/"cdd513c37d4fc734e0fb03e5d9e813a7"
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: L9QM45_tyhc3pC0dS84Z-Z7nYGPgsuv505cbI0OAvrYMR-Mol6IXJA==
age: 126290
X-Firefox-Spdy: h2
disploot.com/r/p.html?f=ytsycwscp&e=1184250294462
200 OK 0 B URL HTTP/2 disploot.com/r/p.html?f=ytsycwscp&e=1184250294462
IP
GET /r/p.html?f=ytsycwscp&e=1184250294462 HTTP/1.1
Host: disploot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Sun, 04 Sep 2022 04:14:44 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: guSfdCBnxp9ghbB6hInGBPPhjwgMDRdZJgEpIDw_w7GX1kalk_mQdQ==
age: 58365
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fwordcounter.icu%2F&domain=wordcounter.icu&cw=1&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fwordcounter.icu%2F&domain=wordcounter.icu&cw=1&lsw=1
IP
OPTIONS /sid/json?origin=prebid&topUrl=https%3A%2F%2Fwordcounter.icu%2F&domain=wordcounter.icu&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://wordcounter.icu/
Origin: https://wordcounter.icu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:56:26 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: GET
access-control-allow-origin: https://wordcounter.icu
server-processing-duration-in-ticks: 407911
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.viqeo.tv/js/assets/459/js/vq_player.js
200 OK 0 B URL HTTP/2 cdn.viqeo.tv/js/assets/459/js/vq_player.js
IP
ASN #204720 CDNetworks LLC
GET /js/assets/459/js/vq_player.js HTTP/1.1
Host: cdn.viqeo.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Cookie: user_key=232fda6f47244f2e4ee9a024a337086a913732df
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 19:56:30 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
x-powered-by: Express
last-modified: Mon, 29 Aug 2022 11:52:10 GMT
etag: W/"59280-182e971de26"
content-encoding: gzip
expires: Mon, 04 Sep 2023 19:56:30 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
X-Firefox-Spdy: h2
disploot.com/r/p.html?f=nkyjotjgl&e=1184250294462
200 OK 0 B URL HTTP/2 disploot.com/r/p.html?f=nkyjotjgl&e=1184250294462
IP
GET /r/p.html?f=nkyjotjgl&e=1184250294462 HTTP/1.1
Host: disploot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Sun, 04 Sep 2022 04:14:44 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: efHHOyOVz5ToB_gCHh4qNP4KLjSvz91zuHvD03TnCvO4RTmgMlg-YA==
age: 58365
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
disploot.com/r/p.html?f=whcizqqcj&e=1184250294462
200 OK 0 B URL HTTP/2 disploot.com/r/p.html?f=whcizqqcj&e=1184250294462
IP
GET /r/p.html?f=whcizqqcj&e=1184250294462 HTTP/1.1
Host: disploot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: gzip
date: Sun, 04 Sep 2022 04:14:44 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: u56LsSYcfWAkJ1qzkYbqpGAMFg-flLrgL8qqaR9WgGIUaP55LlkzPQ==
age: 58365
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
200 OK 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
OPTIONS /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://disploot.com/
Origin: https://disploot.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 19:56:27 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://disploot.com
access-control-max-age: 86400
allow: POST,OPTIONS
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
cdn.viqeo.tv/js/assets/459/js/vq_init.js
200 OK 0 B URL HTTP/2 cdn.viqeo.tv/js/assets/459/js/vq_init.js
IP
ASN #204720 CDNetworks LLC
GET /js/assets/459/js/vq_init.js HTTP/1.1
Host: cdn.viqeo.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wordcounter.icu/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 19:56:29 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
x-powered-by: Express
last-modified: Mon, 29 Aug 2022 11:52:10 GMT
etag: W/"2b19d-182e971de26"
content-encoding: gzip
expires: Mon, 04 Sep 2023 19:56:29 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
X-Firefox-Spdy: h2
addresseepaper.com/sfp.js
200 OK 0 B URL HTTP/2 addresseepaper.com/sfp.js
IP
GET /sfp.js HTTP/1.1
Host: addresseepaper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:56:27 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: e405fe33eb4b078338fbf601b18953ea
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Sun, 04 Sep 2022 19:56:26 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5Gik8Favq50ZtgB05NOI2A6bY3qTLZalscLkzTiiuhQFQRm4aBnm9RKZ5RepZfB0U1qloae7oz3fBUCpmbtFtX1ETvRy3zeYPqqg9lH8tNCMD0aSpKy%2Bkprmwf%2FUn3np0EiHrOw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 745949dc8c4d75c9-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
172.67.149.108
51.89.9.254
37.157.3.30
151.236.71.1
46.243.142.48
104.18.32.68
178.250.0.157
23.36.77.32
18.193.0.23
5.178.65.246
23.60.69.6