tracking.tgmfr.com/aff_c?offer_id=1379&aff_id=1841&source=digital&aff_sub=100&aff_sub2=6405c498c1adff0001bf4de3&aff_sub3=100_2049
52.19.123.128302 Found 597 B URL HTTP/1.1 tracking.tgmfr.com/aff_c?offer_id=1379&aff_id=1841&source=digital&aff_sub=100&aff_sub2=6405c498c1adff0001bf4de3&aff_sub3=100_2049
IP 52.19.123.128:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (463)
Hash 0e318311b342486a6d3ed4ae1d4963c4
3bea685f03752cdc8a48e08c23a09f7c00052252
03ee5f683a71348df5337fd11f837b5783a9be22701f9285e94ff60fb0e64f4d
GET /aff_c?offer_id=1379&aff_id=1841&source=digital&aff_sub=100&aff_sub2=6405c498c1adff0001bf4de3&aff_sub3=100_2049 HTTP/1.1
Host: tracking.tgmfr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 06 Mar 2023 13:51:33 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 597
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Location: https://samplesavenue.com/battery/?lastname={lastname}&firstname={firstname}&gender={gender}&email={email}&birthdate={birthdate}&phone={phone}&address={address}&postal_code={postal_code}&locality={locality}&administrative_area_level_1={state}&source=digital&aff_sub=100&aff_sub2=6405c498c1adff0001bf4de3&aff_sub3=100_2049&hoid=10267b93ac2f34d01fd534f585509b
P3p: CP="NOI CUR OUR NOR INT"
Pragma: no-cache
Set-Cookie: enc_aff_session_1379=ENC034f00d4650b8d93beda279d977bb9237ae810833a124c3df29ba64daba082c4265a3585faf775253d103f418aea3d304eb522cb40c369fc37c233f2ec80d50dee9ab5c7b78504cbfdf0486c20a15872b45f605a26dabc4f8444a61b2441d0ef162bdedf88f2dd292ce62ce416954b9e2d471a38de39e52986725542f684327fc541842d493228f546605060ca34311f861e9c4721a8099a1f59f1c1de64138b732295bef8; expires=Tue, 07 Mar 2023 13:51:33 GMT; path=/; SameSite=None; Secure
ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIxMDUuMCIsIm1vYmlsZV9jYXJyaWVyIjoiPyIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgWDY0OyBSdjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMCIsImFjY2VwdF9sYW5ndWFnZSI6ImVuLVVTLGVuO3E9MC41IiwiY29ubmVjdGlvbl9zcGVlZCI6ImJyb2FkYmFuZCJ9; expires=Thu, 29 Jan 2026 00:31:33 GMT; path=/; SameSite=None; Secure
Tracking_id: 10267b93ac2f34d01fd534f585509b
X-Robots-Tag: noindex, nofollow
Access-Control-Allow-Origin: *
X-Request-Id: 60a3d9a95eb35ae591dcd7dff95b2636
Access-Control-Allow-Headers: Tune-SDK-Version
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash cf14baed0842431a08367ed54f2346ca
d943be8835b7e4470e3d6fbe09ac39c5464be434
a45fbc8cdddc9f43c0c3c7d73cbb2cdf3cf4c4cd2df20802925b795da5048aa4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A45FBC8CDDDC9F43C0C3C7D73CBB2CDF3CF4C4CD2DF20802925B795DA5048AA4"
Last-Modified: Sun, 05 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20838
Expires: Mon, 06 Mar 2023 19:38:52 GMT
Date: Mon, 06 Mar 2023 13:51:34 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash edf4102b9efce8261382541ecd721da5
23a30610ea113c9f93b0ce302ce3df010bd56f05
88c132ab9697f01e979e74208e0ae12ec410c26b7a79f0cead4f9c8f86d12fda
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "88C132AB9697F01E979E74208E0AE12EC410C26B7A79F0CEAD4F9C8F86D12FDA"
Last-Modified: Sat, 04 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17613
Expires: Mon, 06 Mar 2023 18:45:07 GMT
Date: Mon, 06 Mar 2023 13:51:34 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bc86ef2a0cee04915bc360f5821adc8f
3658f9028cce204d38f7f48fcfaa2a8e4f54383a
aeecd718d03811322457de4f20828bdba86b277e7e0e328cae9c0a8075638454
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Type, Retry-After, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 06 Mar 2023 13:13:22 GMT
content-type: application/json
age: 2292
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 5034bcceb9691ad6244be6045742ab53
51e77cdc92833432cd26b13f28875791a187c63c
540637d0d69c1201dcb2dd813b40e64cd07c5bd7685d46a7bad4d437a4e7aeea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "540637D0D69C1201DCB2DD813B40E64CD07C5BD7685D46A7BAD4D437A4E7AEEA"
Last-Modified: Sun, 05 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8490
Expires: Mon, 06 Mar 2023 16:13:04 GMT
Date: Mon, 06 Mar 2023 13:51:34 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash b5ba6334e73496995e3e3a9ecd0eb323
ad80d3b7718c28364e8c2004fb38a13a1747e462
aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: tho4WaWfJkLHwTpxAUXTsg/4tG/Ss8zjgxqIiiuLnsoRBgQlcKCGGoR6QpOEbs+QWwz9efPiYV0=
x-amz-request-id: 9KR0HTYJ5NGG37AE
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 06 Mar 2023 13:17:10 GMT
age: 2064
last-modified: Sat, 18 Feb 2023 20:28:27 GMT
etag: "b5ba6334e73496995e3e3a9ecd0eb323"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 13:51:34 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.r2m01.amazontrust.com/
54.230.80.227200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP 54.230.80.227:0
Hash eee9ec45ff48f1a512fe953b72b0e270
9f50ef982045c21c8497d2f0ea673ed4a0ef2638
c74ba3ea92657029e6ce84734cd4f4759305102278ec947727fb5fe471b393cf
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=113276
Date: Mon, 06 Mar 2023 13:51:34 GMT
Etag: "64050762-1d7"
Expires: Tue, 07 Mar 2023 21:19:30 GMT
Last-Modified: Sun, 05 Mar 2023 21:19:30 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: BdjqR9tdUSuUhnAohj_hbZM4U6SP-j2dIvU0XGY7_0jSD8icTtInzw==
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Type, Last-Modified, Retry-After, Expires, Pragma, Content-Length, Cache-Control, Alert, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 06 Mar 2023 13:03:41 GMT
age: 2873
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
samplesavenue.com/battery/?lastname={lastname}&firstname={firstname}&gender={gender}&email={email}&birthdate={birthdate}&phone={phone}&address={address}&postal_code={postal_code}&locality={locality}&administrative_area_level_1={state}&source=digital&aff_sub=100&aff_sub2=6405c498c1adff0001bf4de3&aff_sub3=100_2049&hoid=10267b93ac2f34d01fd534f585509b
3.89.34.130302 Found 902 B URL HTTP/2 samplesavenue.com/battery/?lastname={lastname}&firstname={firstname}&gender={gender}&email={email}&birthdate={birthdate}&phone={phone}&address={address}&postal_code={postal_code}&locality={locality}&administrative_area_level_1={state}&source=digital&aff_sub=100&aff_sub2=6405c498c1adff0001bf4de3&aff_sub3=100_2049&hoid=10267b93ac2f34d01fd534f585509b
IP 3.89.34.130:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (367)
Hash ea792bc8924d8b80decace84e3b692a9
052b61b9f6fe008c91f2be2f9713c8bdcb21786b
3cc4bbb4d685be871df202e3f367daff5c1a3e1db62e8c648bb50cf6dd5cc135
GET /battery/?lastname={lastname}&firstname={firstname}&gender={gender}&email={email}&birthdate={birthdate}&phone={phone}&address={address}&postal_code={postal_code}&locality={locality}&administrative_area_level_1={state}&source=digital&aff_sub=100&aff_sub2=6405c498c1adff0001bf4de3&aff_sub3=100_2049&hoid=10267b93ac2f34d01fd534f585509b HTTP/1.1
Host: samplesavenue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Mon, 06 Mar 2023 13:51:34 GMT
content-type: text/html; charset=UTF-8
content-length: 902
location: https://samplesavenue.com/battery?source=digital&aff_sub=100&aff_sub2=6405c498c1adff0001bf4de3&aff_sub3=100_2049&hoid=10267b93ac2f34d01fd534f585509b
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
set-cookie: contest_session=HdwIfSg1EwpVK6Q7ZF5mMoZoskN6yJoWmRC6Xt7R; path=/; secure; httponly; samesite=none
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 1dfdbbe528416d7653788c31a945540d
ce7e4b0cc913dcf90dcb43ca51706e2ff0677eaf
872f2081ef126a0358e196338a21f095c376652feaa7cb9b2bfd6f3149838f60
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "872F2081EF126A0358E196338A21F095C376652FEAA7CB9B2BFD6F3149838F60"
Last-Modified: Sat, 04 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9241
Expires: Mon, 06 Mar 2023 16:25:35 GMT
Date: Mon, 06 Mar 2023 13:51:34 GMT
Connection: keep-alive
samplesavenue.com/battery?source=digital&aff_sub=100&aff_sub2=6405c498c1adff0001bf4de3&aff_sub3=100_2049&hoid=10267b93ac2f34d01fd534f585509b
3.89.34.130302 Found 414 B URL HTTP/2 samplesavenue.com/battery?source=digital&aff_sub=100&aff_sub2=6405c498c1adff0001bf4de3&aff_sub3=100_2049&hoid=10267b93ac2f34d01fd534f585509b
IP 3.89.34.130:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash e65b87444e3063c9cad4a6552d59667e
5d50ba80de7a6f15d18725acb56fc81835320a62
f1c1b27a178c7f67eb950740b9648131fa26fa0e1288043cee4f9c6988af4479
GET /battery?source=digital&aff_sub=100&aff_sub2=6405c498c1adff0001bf4de3&aff_sub3=100_2049&hoid=10267b93ac2f34d01fd534f585509b HTTP/1.1
Host: samplesavenue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: contest_session=HdwIfSg1EwpVK6Q7ZF5mMoZoskN6yJoWmRC6Xt7R
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 302 Found
date: Mon, 06 Mar 2023 13:51:34 GMT
content-type: text/html; charset=UTF-8
content-length: 414
location: https://samplesavenue.com/battery/signup/1
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
set-cookie: contest_session=HdwIfSg1EwpVK6Q7ZF5mMoZoskN6yJoWmRC6Xt7R; path=/; secure; httponly; samesite=none
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
samplesavenue.com/battery/signup/1
3.89.34.130200 OK 7.2 kB URL HTTP/2 samplesavenue.com/battery/signup/1
IP 3.89.34.130:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2946), with CRLF, LF line terminators
Hash 3810ff6b7d64436f3b24222ac20bfa72
6d00ed0df6895303c1ae5140b1f3c83afafad94c
9e9028b6540eb9384ef07502f9b7bcf209fc3a5e73df9108f0e507aee33124a0
GET /battery/signup/1 HTTP/1.1
Host: samplesavenue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: contest_session=HdwIfSg1EwpVK6Q7ZF5mMoZoskN6yJoWmRC6Xt7R
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 13:51:34 GMT
content-type: text/html; charset=UTF-8
content-length: 7212
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
set-cookie: contest_session=HdwIfSg1EwpVK6Q7ZF5mMoZoskN6yJoWmRC6Xt7R; path=/; secure; httponly; samesite=none
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
push.services.mozilla.com/
44.229.130.57101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 44.229.130.57:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 8HnueXQxLI3ngrZpqrNKXQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: nUlsy0OYNKD1BamYSMayqqX+Ok0=
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 2c75d0e565cb4a72973a1f641470b811
429de37955e4b7785b18a83290c4e0b9075ab08d
64939f0385b16a3fa0298f4d6fac5bf1677b2ddc53df604406a5f539f0a93d42
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Mar 2023 13:51:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash fed02b60cdde629ed9682f466ed27c05
ca8a522c9deb45527119e5d243ddb316a0e22a44
0d653eca33ea40a8bcaf632dd27528d1ff4f3dfeb6497952edd530241f1cf69e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Mar 2023 13:51:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
samplesavenue.com/css/themes/bigbtn.css?id=29982068a89c7d0ac6f1
3.89.34.130200 OK 2.4 kB URL HTTP/2 samplesavenue.com/css/themes/bigbtn.css?id=29982068a89c7d0ac6f1
IP 3.89.34.130:0
File type ASCII text, with very long lines (12031), with no line terminators
Hash 89d3682e5a196862206833b3daaf5be5
310cf5a820abfd2f053669128077794539129260
d5fd2f3f104009cf0a0c77866b88a2614a5e5e710c5ba20933606a6bd4b8e141
GET /css/themes/bigbtn.css?id=29982068a89c7d0ac6f1 HTTP/1.1
Host: samplesavenue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/battery/signup/1
Cookie: contest_session=HdwIfSg1EwpVK6Q7ZF5mMoZoskN6yJoWmRC6Xt7R
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 13:51:35 GMT
content-type: text/css
content-length: 2361
last-modified: Mon, 06 Mar 2023 09:17:38 GMT
etag: "2eff-5f637c425d080-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?render=6Lc-nzsaAAAAAEND8IZE_fKTIwq3dnZBF15CntLD
216.58.211.4200 OK 583 B URL HTTP/2 www.google.com/recaptcha/api.js?render=6Lc-nzsaAAAAAEND8IZE_fKTIwq3dnZBF15CntLD
IP 216.58.211.4:0
File type ASCII text, with very long lines (884), with no line terminators
Hash 5181ce22ef941e51f462135b71693a6e
c6f994d6c1df98aabafb4be0aea4828f0af9786a
a67d97f6e70a81616d64bfa1c0c2c250fa254a8876dd9d3fede368a8862305d0
GET /recaptcha/api.js?render=6Lc-nzsaAAAAAEND8IZE_fKTIwq3dnZBF15CntLD HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Mon, 06 Mar 2023 13:51:35 GMT
date: Mon, 06 Mar 2023 13:51:35 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 583
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
192.229.221.95200 OK 727 B IP 192.229.221.95:0
Hash 32855697274f15b807183e722fb6ee9e
f8c4d7076aba6fb6e9d2a962c7111293e96ba5eb
5689a0a6d4af03773907737c8b844d0304ebeb049f086b217604e04d77124094
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4127
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 06 Mar 2023 13:51:35 GMT
Last-Modified: Mon, 06 Mar 2023 12:42:49 GMT
Server: ECAcc (ska/F73A)
X-Cache: HIT
Content-Length: 727
www.googletagmanager.com/gtag/js?id=
142.250.74.168200 OK 39 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=
IP 142.250.74.168:0
File type ASCII text, with very long lines (2206)
Hash 02a76654e8fcc1ef0ff203d1f57d4ee6
2dea1410877289f72241209ce4db1d684d316c58
4387544f6d730b34adc8c89856983cf447e26abb060688fc2eed5c27fbf6bc56
GET /gtag/js?id= HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 06 Mar 2023 13:51:35 GMT
expires: Mon, 06 Mar 2023 13:51:35 GMT
cache-control: private, max-age=900
last-modified: Mon, 06 Mar 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 38658
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cache.consentframework.com/js/pa/26948/c/Ifv2D/stub
172.67.74.105200 OK 1.3 kB URL HTTP/2 cache.consentframework.com/js/pa/26948/c/Ifv2D/stub
IP 172.67.74.105:0
File type ASCII text, with very long lines (1604), with no line terminators
Hash 645e8f81e76f33fd8155db286475c93d
195f9b81054fbbe62849379f16a89390c28250b8
1831ba0633b3e3a79654915d214ca3b410f5225fc1268175a9eac9cf1cc3b617
GET /js/pa/26948/c/Ifv2D/stub HTTP/1.1
Host: cache.consentframework.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Mar 2023 13:51:35 GMT
content-type: text/javascript; charset=UTF-8
cache-control: max-age=3600
strict-transport-security: max-age=15724800; includeSubDomains; preload
last-modified: Mon, 06 Mar 2023 13:44:21 GMT
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xlN05ohxqsshsE2FgyHd0pqyJwADolmRbMmffYXHxX4S06%2FveKZYQjh5bpESWVKzOBoAU3aEpgLwb%2Fs6lEjTLuMtAvBbnz9YvVCc26cJnIvCgWqT3xZsSXmwGSbmX4PoSHTRuHgo9B%2BDjKII"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a3b1305081c0b02-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash fed02b60cdde629ed9682f466ed27c05
ca8a522c9deb45527119e5d243ddb316a0e22a44
0d653eca33ea40a8bcaf632dd27528d1ff4f3dfeb6497952edd530241f1cf69e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Mar 2023 13:51:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
samplesavenue.com/css/app.css?id=34c33efe043c43862f12
3.89.34.130200 OK 47 kB URL HTTP/2 samplesavenue.com/css/app.css?id=34c33efe043c43862f12
IP 3.89.34.130:0
File type ASCII text, with very long lines (34575)
Hash 9aa7637461475ac970d678b9e5b5d4cf
8b8483265b23910e56b4eeb71f4ade305e0a9abd
dbe8b8b6bac6ddfd129d440c897d3d14cdfb9830a11da7b772567e4eac9d05c4
GET /css/app.css?id=34c33efe043c43862f12 HTTP/1.1
Host: samplesavenue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/battery/signup/1
Cookie: contest_session=HdwIfSg1EwpVK6Q7ZF5mMoZoskN6yJoWmRC6Xt7R
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 13:51:35 GMT
content-type: text/css
content-length: 47045
last-modified: Mon, 06 Mar 2023 09:17:38 GMT
etag: "3bb41-5f637c425d080-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 60cf1c3760363de2086f1d0bfd37f242
67a9bb75da4323d3c5185f6eb519ef7aeee9fb38
2e2917eb553608588987bf9c4ca4c0338431f5296af9d1856064e77e8f026f08
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2E2917EB553608588987BF9C4CA4C0338431F5296AF9D1856064E77E8F026F08"
Last-Modified: Sun, 05 Mar 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13974
Expires: Mon, 06 Mar 2023 17:44:29 GMT
Date: Mon, 06 Mar 2023 13:51:35 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 0fecfa96f356c1115aaa495493da0e6c
7a183e6a42feb73e8f54b8e0057a468c14a56681
6f0c8ad506551c1719e97a7b6d7ce98c1aab87c5d4c47d900599b80333b4765b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6F0C8AD506551C1719E97A7B6D7CE98C1AAB87C5D4C47D900599B80333B4765B"
Last-Modified: Sat, 04 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6633
Expires: Mon, 06 Mar 2023 15:42:08 GMT
Date: Mon, 06 Mar 2023 13:51:35 GMT
Connection: keep-alive
samplesavenue.com/ehawktalon.js
3.89.34.130200 OK 14 kB URL HTTP/2 samplesavenue.com/ehawktalon.js
IP 3.89.34.130:0
File type Unicode text, UTF-8 text, with very long lines (32046)
Hash 0f0cb03c72e2d87095aa2107ca944c75
71dcb06e8cdacdae437510d182922bb1a103530c
1f01c055b2af0e645f23d8917630c276b10e0f056208ccb12f5e238acea301b2
GET /ehawktalon.js HTTP/1.1
Host: samplesavenue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/battery/signup/1
Cookie: contest_session=HdwIfSg1EwpVK6Q7ZF5mMoZoskN6yJoWmRC6Xt7R
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 13:51:35 GMT
content-type: application/javascript
content-length: 13595
last-modified: Mon, 06 Mar 2023 09:15:55 GMT
etag: "ab47-5f637be0228c0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 60cf1c3760363de2086f1d0bfd37f242
67a9bb75da4323d3c5185f6eb519ef7aeee9fb38
2e2917eb553608588987bf9c4ca4c0338431f5296af9d1856064e77e8f026f08
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2E2917EB553608588987BF9C4CA4C0338431F5296AF9D1856064E77E8F026F08"
Last-Modified: Sun, 05 Mar 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10164
Expires: Mon, 06 Mar 2023 16:40:59 GMT
Date: Mon, 06 Mar 2023 13:51:35 GMT
Connection: keep-alive
choices.consentframework.com/js/pa/26948/c/Ifv2D/cmp
51.158.29.12200 OK 200 kB URL HTTP/1.1 choices.consentframework.com/js/pa/26948/c/Ifv2D/cmp
IP 51.158.29.12:0
File type Unicode text, UTF-8 text, with very long lines (65513), with no line terminators
Size 200 kB (199588 bytes)
Hash 7449b2c52fa45a1e4c6e5e91bf548f03
8808de10ded7454ab627283341b3f9e74287925f
6c16300cd9c1a4c9bad5e32d796aa4b191552e66c9003e415124fd22d1e61edf
GET /js/pa/26948/c/Ifv2D/cmp HTTP/1.1
Host: choices.consentframework.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Mon, 06 Mar 2023 13:51:35 GMT
Content-Type: text/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: private, max-age=3600
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Content-Encoding: gzip
imgs.tagadamedia.com/contest/prod/us/75/752.png
138.199.36.10200 OK 368 kB URL HTTP/2 imgs.tagadamedia.com/contest/prod/us/75/752.png
IP 138.199.36.10:0
ASN #60068 Datacamp Limited
File type PNG image data, 580 x 690, 8-bit/color RGB, non-interlaced\012- data
Size 368 kB (367811 bytes)
Hash 2cefb29eef7b1e6d88bc29cf7c699f9d
bd68b082b9498a5f35284b34eb5790a0bc6e4710
394e14a2b912eb79a844dcca08999500d0bf53050245bb73f13a0513044d48e1
GET /contest/prod/us/75/752.png HTTP/1.1
Host: imgs.tagadamedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Mar 2023 13:51:35 GMT
content-type: image/png
content-length: 367811
server: BunnyCDN-DE1-1053
cdn-pullzone: 61945
cdn-uid: 5d127034-96a6-45e8-a482-4f40615f18db
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 09 Apr 2020 13:38:36 GMT
x-amz-id-2: WKWwemaMm6O4Ug+DwtE3gfbcdwkhcWHHKgDNSfBT2SvfiojOKgZEa7RIJ0hRhijUaKkYyCFsQd4=
x-amz-request-id: STDEHM3DY3J07QK2
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 03/04/2023 20:10:17
cdn-edgestorageid: 864
cdn-status: 200
cdn-requestid: 3f1e631c21724476e84cfa70c02e4c3b
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
imgs.tagadamedia.com/contest/prod/us/75/753.png
138.199.36.10200 OK 342 kB URL HTTP/2 imgs.tagadamedia.com/contest/prod/us/75/753.png
IP 138.199.36.10:0
ASN #60068 Datacamp Limited
File type PNG image data, 750 x 350, 8-bit/color RGBA, non-interlaced\012- data
Size 342 kB (342528 bytes)
Hash 54a542186380eb114c24dfbb0c67b1b8
c776de10c93ab28b334e7253c92bb603cadf0b33
23e160c03dee7766f2c1c46edf6e1f31da72fe4bb6bcb48fda0f86bf19ab5536
GET /contest/prod/us/75/753.png HTTP/1.1
Host: imgs.tagadamedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Mar 2023 13:51:35 GMT
content-type: image/png
content-length: 342528
server: BunnyCDN-DE1-1053
cdn-pullzone: 61945
cdn-uid: 5d127034-96a6-45e8-a482-4f40615f18db
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 09 Apr 2020 13:38:36 GMT
x-amz-id-2: kArENACeocPXbjs5d+DbnfXcPPeCjCPX8q6mqLUcPUJpAW1yJBoP/v7TEhyDO+DlaXKyj9/JMsw=
x-amz-request-id: STDBH60HGEC7GB5B
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 03/04/2023 20:10:17
cdn-edgestorageid: 1053
cdn-status: 200
cdn-requestid: 52c2b1ed8fa41751cda41ea159cccf56
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
samplesavenue.com/fonts/vendor/@fortawesome/fontawesome-free/webfa-solid-900.woff2?d824df7eb2e268626a2dd9a6a741ac4e
3.89.34.130200 OK 78 kB URL HTTP/2 samplesavenue.com/fonts/vendor/@fortawesome/fontawesome-free/webfa-solid-900.woff2?d824df7eb2e268626a2dd9a6a741ac4e
IP 3.89.34.130:0
File type Web Open Font Format (Version 2), TrueType, length 78268, version 331.-31196\012- data
Hash d824df7eb2e268626a2dd9a6a741ac4e
0ccb2c814a7e4ca12c4778821633809cb0361eaa
9834b82ad26e2a37583d22676a12dd2eb0fe7c80356a2114d0db1aa8b3899537
GET /fonts/vendor/@fortawesome/fontawesome-free/webfa-solid-900.woff2?d824df7eb2e268626a2dd9a6a741ac4e HTTP/1.1
Host: samplesavenue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://samplesavenue.com/css/app.css?id=34c33efe043c43862f12
Cookie: contest_session=HdwIfSg1EwpVK6Q7ZF5mMoZoskN6yJoWmRC6Xt7R
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 13:51:35 GMT
content-type: font/woff2
content-length: 78268
last-modified: Mon, 06 Mar 2023 09:17:38 GMT
etag: "131bc-5f637c425d080"
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
samplesavenue.com/battery/sponso
3.89.34.130200 OK 4.0 kB URL HTTP/2 samplesavenue.com/battery/sponso
IP 3.89.34.130:0
Hash f5699554805c586e10716d3e9be86738
3a71be35d2d856e806de049690447d281ae829fa
416989dba3118b73e1617b5c2a05d30359560c9a0cf1d2841444aca40fa73e86
POST /battery/sponso HTTP/1.1
Host: samplesavenue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Origin: https://samplesavenue.com
Connection: keep-alive
Referer: https://samplesavenue.com/battery/signup/1
Cookie: contest_session=HdwIfSg1EwpVK6Q7ZF5mMoZoskN6yJoWmRC6Xt7R
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 13:51:35 GMT
content-type: text/html; charset=UTF-8
content-length: 3996
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
set-cookie: contest_session=HdwIfSg1EwpVK6Q7ZF5mMoZoskN6yJoWmRC6Xt7R; path=/; secure; httponly; samesite=none
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 0b2a6c80075ac612fdd0c0db8ecc7508
816bcd2a7acf9dbf93e52adbe3549a2945d4cbfb
f5b916b912ad2c776304ec956a0d8c6e383551ae5f4c9c15bdf82b2db499d02b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Mar 2023 13:51:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/recaptcha/releases/Nh10qRQB5k2ucc5SCBLAQ4nA/recaptcha__en.js
142.250.74.99200 OK 165 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Nh10qRQB5k2ucc5SCBLAQ4nA/recaptcha__en.js
IP 142.250.74.99:0
File type HTML document, ASCII text, with very long lines (839)
Size 165 kB (164689 bytes)
Hash 7f27adb1216e4ddb02884fd68a1ec297
a33a85dfc58ca995fa184035b8fdb896866c361f
aeea36b977f073b902c2c5536b21f43e931fc2ac5ba3601db228e686457e9bc8
GET /recaptcha/releases/Nh10qRQB5k2ucc5SCBLAQ4nA/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://samplesavenue.com
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 164689
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 05 Mar 2023 09:22:35 GMT
expires: Mon, 04 Mar 2024 09:22:35 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 20 Feb 2023 05:03:28 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 102541
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 0b2a6c80075ac612fdd0c0db8ecc7508
816bcd2a7acf9dbf93e52adbe3549a2945d4cbfb
f5b916b912ad2c776304ec956a0d8c6e383551ae5f4c9c15bdf82b2db499d02b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Mar 2023 13:51:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
choices.consentframework.com/api/v1/public/consent-string
51.158.29.12200 OK 0 B URL HTTP/1.1 choices.consentframework.com/api/v1/public/consent-string
IP 51.158.29.12:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v1/public/consent-string HTTP/1.1
Host: choices.consentframework.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://samplesavenue.com/
Origin: https://samplesavenue.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Mon, 06 Mar 2023 13:51:36 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
choices.consentframework.com/api/v1/public/user-action
51.158.29.12200 OK 0 B URL HTTP/1.1 choices.consentframework.com/api/v1/public/user-action
IP 51.158.29.12:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v1/public/user-action HTTP/1.1
Host: choices.consentframework.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://samplesavenue.com/
Origin: https://samplesavenue.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Mon, 06 Mar 2023 13:51:36 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
choices.consentframework.com/api/v1/public/consent-string
51.158.29.12200 OK 237 B URL HTTP/1.1 choices.consentframework.com/api/v1/public/consent-string
IP 51.158.29.12:0
File type JSON data\012- , ASCII text, with very long lines (453), with no line terminators
Hash df25013257a0e635443934e0f700731c
1a691a76264c833e6a293330cbba79dbcd50ed19
34e14781b6795258a64b86fd79b648320175f350fc29a15300e26dff23f89667
POST /api/v1/public/consent-string HTTP/1.1
Host: choices.consentframework.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://samplesavenue.com/
Content-Type: application/json
Origin: https://samplesavenue.com
Content-Length: 526
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Mon, 06 Mar 2023 13:51:36 GMT
Content-Type: application/json; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Content-Encoding: gzip
choices.consentframework.com/api/v1/public/user-action
51.158.29.12200 OK 0 B URL HTTP/1.1 choices.consentframework.com/api/v1/public/user-action
IP 51.158.29.12:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v1/public/user-action HTTP/1.1
Host: choices.consentframework.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://samplesavenue.com/
Content-Type: application/json
Origin: https://samplesavenue.com
Content-Length: 159
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Mon, 06 Mar 2023 13:51:36 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
analytics.tiktok.com/i18n/pixel/sdk.js?sdkid=BRK97NBJ857475I0MEDG
95.101.10.113200 OK 1.7 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/sdk.js?sdkid=BRK97NBJ857475I0MEDG
IP 95.101.10.113:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (2673)
Hash c4f84c109537c3be77c54538b39cd4fd
61027b1863bcde5e295c0d3b227c4c9b3bb6c406
b238e26a7c316376b2d628ed4fce9b7fa98e13be778a2dbd078bb138c4f2d391
GET /i18n/pixel/sdk.js?sdkid=BRK97NBJ857475I0MEDG HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 20230306135136CCBC92FAF686E136A444
x-tt-trace-host: 01250e51f4d5abc0e156abb7e367bacbb61987e92ca6e82fe8f5ce61a0d782a00b43fe90cd426744dcb2b33f46b1921111a94f7de8b42fff48afcc7dcc0f3d6baf962b7ac9c368e36be1fa047b7f36df5a4e507be2c3547e922ad498dde37a25d166db4675afc13ded95f467049fd9b187
content-encoding: gzip
content-length: 1718
x-origin-response-time: 5,23.220.104.202
x-akamai-request-id: ac1f6d36.1b2f14f3
expires: Mon, 06 Mar 2023 13:51:36 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Mon, 06 Mar 2023 13:51:36 GMT
x-cache: TCP_MISS from a95-101-10-109.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
vary: Accept-Encoding
set-cookie: _ttp=2MdwJg6DrDQGNJry172UD0RSK9k; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-cache-remote: TCP_MISS from a23-220-104-202.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=93, origin; dur=5, inner; dur=3
x-parent-response-time: 98,95.101.10.109
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/static/main.MTE3ZGZjMmFkMA.js
95.101.10.113200 OK 66 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/main.MTE3ZGZjMmFkMA.js
IP 95.101.10.113:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (21891)
Hash 2cc1557d4389098e4fb0a286d28898b7
412e14d52fb000fe55e919a9aed2d5637c438693
34164b3ca4f0b781bf510f4a9a21cf7c42d2b300d8c7ea949c9f851088e54847
GET /i18n/pixel/static/main.MTE3ZGZjMmFkMA.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/
Cookie: _ttp=2MdwJg6DrDQGNJry172UD0RSK9k
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 20230221145329D9E27CA0DC66C0FD94D0
x-tt-trace-host: 012f02cd23070ac00a0817281d5a7a74cf0b29783654be77f90759ecadc4cb8bb137fd4dac0c8f58f3bcb5545a4384d60b9dd421770e9499ec436fccbf366ea74c7334738d6d9d52ccbfffa3062dded125c7acd87b98eadba87c4be5c65c997d76
content-encoding: gzip
content-length: 66119
date: Mon, 06 Mar 2023 13:51:36 GMT
x-cache: TCP_HIT from a95-101-10-109.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=2
x-akamai-request-id: 1b2f155f
X-Firefox-Spdy: h2
samplesavenue.com/sw.js
3.89.34.130200 OK 191 B IP 3.89.34.130:0
Hash ba2e477c78d6ddfb80c11d6112d6f548
fb4fd2a17d23eee5f97f2de511ff96b678c44073
cce04e75f1e2cd6284b7974f87fe1bedc8ba1ef71258671ccf14c115fb7fe75f
GET /sw.js HTTP/1.1
Host: samplesavenue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: contest_session=HdwIfSg1EwpVK6Q7ZF5mMoZoskN6yJoWmRC6Xt7R
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 13:51:36 GMT
content-type: application/x-javascript
content-length: 191
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
set-cookie: contest_session=HdwIfSg1EwpVK6Q7ZF5mMoZoskN6yJoWmRC6Xt7R; path=/; secure; httponly; samesite=none
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 798f3637325523bddef4e627e66b0bb1
f3258713f39d4e7448590dee010917ed14320ec4
e5805f2922506bd022a7fe734d1022156241e88653ea5d16d5a698ac7067828b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E5805F2922506BD022A7FE734D1022156241E88653EA5D16D5A698AC7067828B"
Last-Modified: Sat, 04 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12008
Expires: Mon, 06 Mar 2023 17:11:44 GMT
Date: Mon, 06 Mar 2023 13:51:36 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 798f3637325523bddef4e627e66b0bb1
f3258713f39d4e7448590dee010917ed14320ec4
e5805f2922506bd022a7fe734d1022156241e88653ea5d16d5a698ac7067828b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E5805F2922506BD022A7FE734D1022156241E88653EA5D16D5A698AC7067828B"
Last-Modified: Sat, 04 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12008
Expires: Mon, 06 Mar 2023 17:11:44 GMT
Date: Mon, 06 Mar 2023 13:51:36 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 798f3637325523bddef4e627e66b0bb1
f3258713f39d4e7448590dee010917ed14320ec4
e5805f2922506bd022a7fe734d1022156241e88653ea5d16d5a698ac7067828b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E5805F2922506BD022A7FE734D1022156241E88653EA5D16D5A698AC7067828B"
Last-Modified: Sat, 04 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12008
Expires: Mon, 06 Mar 2023 17:11:44 GMT
Date: Mon, 06 Mar 2023 13:51:36 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 798f3637325523bddef4e627e66b0bb1
f3258713f39d4e7448590dee010917ed14320ec4
e5805f2922506bd022a7fe734d1022156241e88653ea5d16d5a698ac7067828b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E5805F2922506BD022A7FE734D1022156241E88653EA5D16D5A698AC7067828B"
Last-Modified: Sat, 04 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12008
Expires: Mon, 06 Mar 2023 17:11:44 GMT
Date: Mon, 06 Mar 2023 13:51:36 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdccd2ce9-584e-47ab-93bf-abf8287b821e.jpeg
34.120.237.76200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdccd2ce9-584e-47ab-93bf-abf8287b821e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 69536c57b14c2419255e2386dd07e825
dbae31696a00f5f6c8495de0983ff8a08e77f970
7e09f086bc5f848e3ff503a2ab61392a57a0149af47f20415e5adeb2408e02e5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdccd2ce9-584e-47ab-93bf-abf8287b821e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8161
x-amzn-requestid: c9201eea-8216-4a14-803c-b947465f327c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BU6k1GA4oAMFpkA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64050aeb-4c2595df7964fd650a9de81f;Sampled=0
x-amzn-remapped-date: Sun, 05 Mar 2023 21:34:35 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: QmcXVosHU7BBbvg9sgjmx-h4g8OCN024Oj-VkOUc0GdMgaF0WesCJg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 618052a0d9c86c1a3bf663f82d041d1c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Mar 2023 22:21:04 GMT
age: 55832
etag: "dbae31696a00f5f6c8495de0983ff8a08e77f970"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
192.229.221.95200 OK 727 B IP 192.229.221.95:0
Hash e8b586d00c19160015758a60bdee5cf3
b0f69495bded07d158b2356a42b8f7f294e0a982
a933e44b274b23688c9f1c5b004fe03bb7fe62fc36ac33ff504df68b1ecd846a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 858
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 06 Mar 2023 13:51:36 GMT
Last-Modified: Mon, 06 Mar 2023 13:37:18 GMT
Server: ECAcc (ska/F775)
X-Cache: HIT
Content-Length: 727
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0c3b178-ee57-465b-aa8c-fb6f93e35cab.jpeg
34.120.237.76200 OK 3.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0c3b178-ee57-465b-aa8c-fb6f93e35cab.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4726917eabc29a977873ad26e264e70d
4619a0418ee08d6618ead537f31823c98f355b5a
d3c6b43d46ccff30f0003a063b6c4c78d4a782262bfdeb138e6c015555ce2dcb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0c3b178-ee57-465b-aa8c-fb6f93e35cab.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3381
x-amzn-requestid: 8b89e7ab-b8b3-45cd-af3a-cc419e61f1fc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: A-PNPFynoAMFn8Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63fbf8ba-616bedc230d1c2b13a09beae;Sampled=0
x-amzn-remapped-date: Mon, 27 Feb 2023 00:26:34 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: Qd5FIKUZwnnKiIzEnrA7ZcC_yWa9_iP1r7xUaCP4f6I7m_z3ChB-2A==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 85ee490c179dc0af42b771f11421073e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Mar 2023 07:29:19 GMT
age: 22937
etag: "4619a0418ee08d6618ead537f31823c98f355b5a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c09ef55-602f-4eb8-aa1a-e701b5dc7903.jpeg
34.120.237.76200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c09ef55-602f-4eb8-aa1a-e701b5dc7903.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 02cd95c30a65a0c80928e653abedeefa
1099ae20c50109211fc9318ece50a784fec998f9
08162a68f91d9149ace613460e3dfae80ceac1dbe505c79642138032100335bb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c09ef55-602f-4eb8-aa1a-e701b5dc7903.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6155
x-amzn-requestid: 99998e44-c2f0-4973-bede-44c33036ba4d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BU7U7HA-oAMFQww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64050c1f-7f8fe3f96531b57c69584754;Sampled=0
x-amzn-remapped-date: Sun, 05 Mar 2023 21:39:43 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: zEWUxG77GT-uaewuPLzCl7DptXf5xbmQtBX7_tEaichah3kC3tmKAA==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 3bb2b699cd244bf37141ea08a6a61732.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Mar 2023 22:16:07 GMT
age: 56129
etag: "1099ae20c50109211fc9318ece50a784fec998f9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc4fc791-0fcf-48b3-a3fa-00548c2bff9f.jpeg
34.120.237.76200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc4fc791-0fcf-48b3-a3fa-00548c2bff9f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bc38d40f9431067b1de69da19834da17
b9a46b3bde27762b1e71ee871126daf531477c3a
ddaddeb8804444883556d93c2c94899ac8543f9b27017a4a62ab7edc98c99656
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc4fc791-0fcf-48b3-a3fa-00548c2bff9f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6740
x-amzn-requestid: 4326e8fa-b85a-4fd8-ab47-c989e968f4c6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BU6RjESxIAMFyKg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64050a70-18a08cb93f89f1de252c04c2;Sampled=0
x-amzn-remapped-date: Sun, 05 Mar 2023 21:32:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: eFmAxFarNo6BcYWv2gBMt3qRcGXrjN6HLI1AjHZ3nDLwT-OAjvZFqA==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 1d000d0dfe9d69b4983f619fdc5499d6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Mar 2023 21:46:30 GMT
etag: "b9a46b3bde27762b1e71ee871126daf531477c3a"
content-type: image/jpeg
age: 57906
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5642d287-8c21-49d9-9a11-2bfa6ee1a2f2.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5642d287-8c21-49d9-9a11-2bfa6ee1a2f2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9ab3964124c43755909f9891e162d3c7
c912f5fcb7985842877c76686c6bcd356b5977ff
34627773ad1d710b054986c725eb8e8a4c7d8fbac31e6724e83217dc06cfaaad
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5642d287-8c21-49d9-9a11-2bfa6ee1a2f2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10332
x-amzn-requestid: bcb59433-4093-4bb3-b6d3-69f5489d5ef9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BU6iVE07oAMF28A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64050adb-757a083b7be05f886d8d6edc;Sampled=0
x-amzn-remapped-date: Sun, 05 Mar 2023 21:34:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 034zEZAbWUmixhooZf4KqxdabRAyWiMDzsMzTkNX29m1SZjQqiWywQ==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 219e8f088c8c2a564bdacafe44be620a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Mar 2023 22:07:33 GMT
age: 56643
etag: "c912f5fcb7985842877c76686c6bcd356b5977ff"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdd016e3e-cec7-484b-8151-f72ea54dc958.jpeg
34.120.237.76200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdd016e3e-cec7-484b-8151-f72ea54dc958.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 49dbeca46074e859a5a2958fdec9b28b
c649916591826b4db490b98cbe530533818daf0d
cb33caa142deb6570ce9e8a382d7fce45ba0101cdbc65ee6319dd23693f22086
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdd016e3e-cec7-484b-8151-f72ea54dc958.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7250
x-amzn-requestid: 5ae814e4-592b-4811-a724-d807b69ebd2d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BU6hUHslIAMF26w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64050ad4-051cb0632863689209d81d45;Sampled=0
x-amzn-remapped-date: Sun, 05 Mar 2023 21:34:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 66AYoAs_rFJQ7dwagQyaBCAFJtuuOS3FcIgNT6es0h3cAITyEaYTTQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 2750b94b402c92287d764b5fa115a042.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Mar 2023 21:42:16 GMT
age: 58160
etag: "c649916591826b4db490b98cbe530533818daf0d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
js.cookieless-data.com/GS.d?pa=26948&uf_bday=&uf_gender=&cmp=0&u=https%3A%2F%2Fsamplesavenue.com%2Fbattery%2Fsignup%2F1&r=&rand=1678110696317&gdpr=1&gdpr_consent=CPoM8IAPoM8IABcAIBENC6CgAAAAAH_AABpwIyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEZACTDVuIAuzLHAm0DCKBECMKwkIgFABBQDC0QEADg4KdlYBPrCJAAgFAEYEQIcAUYEAgAAEgCQiACQIsEAAAIgEAAIAEAiEABAwCCgAsBAIAAQDQMQAoABAkAMiAiKUwICoEggJbKhBKC6Q0wgCrLACgERsFAAiCQAVgACAsHAMESAlYsECTEG0QAAAAAAAA&globalscope=false&cookieless_optout=0&tbp=true
51.158.29.12200 OK 0 B URL HTTP/1.1 js.cookieless-data.com/GS.d?pa=26948&uf_bday=&uf_gender=&cmp=0&u=https%3A%2F%2Fsamplesavenue.com%2Fbattery%2Fsignup%2F1&r=&rand=1678110696317&gdpr=1&gdpr_consent=CPoM8IAPoM8IABcAIBENC6CgAAAAAH_AABpwIyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEZACTDVuIAuzLHAm0DCKBECMKwkIgFABBQDC0QEADg4KdlYBPrCJAAgFAEYEQIcAUYEAgAAEgCQiACQIsEAAAIgEAAIAEAiEABAwCCgAsBAIAAQDQMQAoABAkAMiAiKUwICoEggJbKhBKC6Q0wgCrLACgERsFAAiCQAVgACAsHAMESAlYsECTEG0QAAAAAAAA&globalscope=false&cookieless_optout=0&tbp=true
IP 51.158.29.12:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /GS.d?pa=26948&uf_bday=&uf_gender=&cmp=0&u=https%3A%2F%2Fsamplesavenue.com%2Fbattery%2Fsignup%2F1&r=&rand=1678110696317&gdpr=1&gdpr_consent=CPoM8IAPoM8IABcAIBENC6CgAAAAAH_AABpwIyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEZACTDVuIAuzLHAm0DCKBECMKwkIgFABBQDC0QEADg4KdlYBPrCJAAgFAEYEQIcAUYEAgAAEgCQiACQIsEAAAIgEAAIAEAiEABAwCCgAsBAIAAQDQMQAoABAkAMiAiKUwICoEggJbKhBKC6Q0wgCrLACgERsFAAiCQAVgACAsHAMESAlYsECTEG0QAAAAAAAA&globalscope=false&cookieless_optout=0&tbp=true HTTP/1.1
Host: js.cookieless-data.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Mon, 06 Mar 2023 13:51:36 GMT
Content-Length: 0
Connection: keep-alive
Expires: Tue, 01 Jan 2000 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
X-Xss-Protection: 0
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
P3p: CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
analytics.tiktok.com/i18n/pixel/static/identify_cab4d.js
95.101.10.113200 OK 31 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/identify_cab4d.js
IP 95.101.10.113:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash fb6593acf6980819b1e523c5b227b9d3
65ee92619d1c809274ae96e3b73d40dfbc2566b9
00d74b2b8ddfef286c1f0985ad3755f5f2198f8dc8ce6a001920d9fc082c4043
GET /i18n/pixel/static/identify_cab4d.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/
Cookie: _ttp=2MdwJg6DrDQGNJry172UD0RSK9k
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 20230221145330D9E27CA0DC66C0FD94DA
x-tt-trace-host: 012f02cd23070ac00a0817281d5a7a74cf0b29783654be77f90759ecadc4cb8bb137fd4dac0c8f58f3bcb5545a4384d60b640e9332326312d6639f7259fcc215b67393ff35c0ddd1454cfcc77b4c1be8e9f6ec824693450e69fde7ecdace525083
content-encoding: gzip
content-length: 30762
date: Mon, 06 Mar 2023 13:51:36 GMT
x-cache: TCP_MEM_HIT from a95-101-10-109.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=3
x-akamai-request-id: 1b2f15e7
X-Firefox-Spdy: h2
ocsp.digicert.com/
192.229.221.95200 OK 471 B IP 192.229.221.95:0
Hash 05497205f054f2d3d7fe0c725c5b2abc
7004ff35c502e3a79c103c6684e13b98bf4e2600
fe1d1b49919dd2ff2090e47c9dee9dc2e72deef35b08f0ee0e28a60fa036e907
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 48016
Cache-Control: max-age=86404
Content-Type: application/ocsp-response
Date: Mon, 06 Mar 2023 13:51:36 GMT
Etag: "6403e2dc-1d7"
Expires: Tue, 07 Mar 2023 13:51:40 GMT
Last-Modified: Sun, 05 Mar 2023 00:31:24 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 471
analytics.tiktok.com/api/v2/pixel
95.101.10.113200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP 95.101.10.113:0
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 790
Origin: https://samplesavenue.com
Connection: keep-alive
Referer: https://samplesavenue.com/
Cookie: _ttp=2MdwJg6DrDQGNJry172UD0RSK9k
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 0
access-control-allow-origin: *
x-tt-logid: 202303061351360C0EB10A6810FCDB7918
x-tt-trace-host: 01250e51f4d5abc0e156abb7e367bacbb61987e92ca6e82fe8f5ce61a0d782a00b781320d6ba01e162748419dfd2521156e24f9cfd4b4c6f1c188d31e19d03cd3ddc536262dca109ee83212e7476327769faf3c6b82bafe8d18b9ea0e32e5633a0ec3afc6a6f457a840fdcdec6e31071ba
x-origin-response-time: 28,23.220.104.204
x-akamai-request-id: b2ac6678.1b2f15f1
expires: Mon, 06 Mar 2023 13:51:36 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Mon, 06 Mar 2023 13:51:36 GMT
x-cache: TCP_MISS from a95-101-10-109.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
x-cache-remote: TCP_MISS from a23-220-104-204.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=99, origin; dur=28, inner; dur=24
x-parent-response-time: 121,95.101.10.109
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
31.13.72.12200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP 31.13.72.12:0
File type ASCII text, with very long lines (64348)
Hash 43d943c7499b27a8ef3972fa070f6756
59303c79335aa0a9f529c0f6166f99c3e650088c
96ab29f531694f1b8e5d2f031e16581fe1052636fb32c5cd96d55b824d6539b2
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: UhGXDTUtf4WP3df2PoBXIE2MdxziGclFuxsppmUhl/WafZ7RRzzhhOKeNWGXkYcNgZFtetRqA9pLg9+V2IgzrA==
content-length: 27907
x-fb-trip-id: 2050670934
date: Mon, 06 Mar 2023 13:51:36 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
192.229.221.95200 OK 471 B IP 192.229.221.95:0
Hash 05497205f054f2d3d7fe0c725c5b2abc
7004ff35c502e3a79c103c6684e13b98bf4e2600
fe1d1b49919dd2ff2090e47c9dee9dc2e72deef35b08f0ee0e28a60fa036e907
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 72011
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 06 Mar 2023 13:51:36 GMT
Last-Modified: Sun, 05 Mar 2023 17:51:25 GMT
Server: ECAcc (ska/F6AF)
X-Cache: HIT
Content-Length: 471
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.99200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.99:0
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 01 Mar 2023 22:06:57 GMT
expires: Thu, 29 Feb 2024 22:06:57 GMT
cache-control: public, max-age=31536000
age: 402279
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
142.250.74.99200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 142.250.74.99:0
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Mar 2023 03:13:01 GMT
expires: Fri, 01 Mar 2024 03:13:01 GMT
cache-control: public, max-age=31536000
age: 383915
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 21bc7d19b85212954bd97a826883dde6
6e26f565b84766c41d45dd9fc9d89f5206ccc9ba
e34750e6e2434f3659b67c93c2106fe6205a66c38186bcf6aaa0142e48f92324
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Mar 2023 13:51:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pagead2.googlesyndication.com/pagead/landing?gcs=G100&gcd=G100&rnd=972996017.1678110696&url=https%3A%2F%2Fsamplesavenue.com%2Fbattery%2Fsignup%2F1>m=45He3310n81P645S3F
142.250.74.98200 OK 42 B URL HTTP/2 pagead2.googlesyndication.com/pagead/landing?gcs=G100&gcd=G100&rnd=972996017.1678110696&url=https%3A%2F%2Fsamplesavenue.com%2Fbattery%2Fsignup%2F1>m=45He3310n81P645S3F
IP 142.250.74.98:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
POST /pagead/landing?gcs=G100&gcd=G100&rnd=972996017.1678110696&url=https%3A%2F%2Fsamplesavenue.com%2Fbattery%2Fsignup%2F1>m=45He3310n81P645S3F HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://samplesavenue.com
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 06 Mar 2023 13:51:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
143.204.42.88200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.88:0
Hash 5bc95c2c294a97375dedb3832f5105f5
8e1f4d0ce657fdf197df9a8fa808aef53da3ce60
e79d867924ad5f9102fc0f4b8b34ab45e12ab7a270c93fc26b83dd37795d5d4b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=107345
Date: Mon, 06 Mar 2023 13:51:36 GMT
Etag: "64049dd5-1d7"
Expires: Tue, 07 Mar 2023 19:40:41 GMT
Last-Modified: Sun, 05 Mar 2023 13:49:09 GMT
Server: ECAcc (nya/7946)
X-Cache: Miss from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: UHjHSnwGwBt06wMCigN-4stzV58PxZW7n0j1EzRhoBZI77EXZGc7pQ==
Age: 21092
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 21bc7d19b85212954bd97a826883dde6
6e26f565b84766c41d45dd9fc9d89f5206ccc9ba
e34750e6e2434f3659b67c93c2106fe6205a66c38186bcf6aaa0142e48f92324
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Mar 2023 13:51:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.google-analytics.com/g/collect?v=2&tid=G-7NEF16H3WB>m=45je3310&_p=1105350089&gcs=G100&cid=899813206.1678110696&ul=en-us&sr=1280x1024&_s=1&sid=1678110696&sct=1&seg=0&dl=https%3A%2F%2Fsamplesavenue.com%2Fbattery%2Fsignup%2F1&dt=Samples%20Avenue%20%3A%20Battery&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
216.239.34.36204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-7NEF16H3WB>m=45je3310&_p=1105350089&gcs=G100&cid=899813206.1678110696&ul=en-us&sr=1280x1024&_s=1&sid=1678110696&sct=1&seg=0&dl=https%3A%2F%2Fsamplesavenue.com%2Fbattery%2Fsignup%2F1&dt=Samples%20Avenue%20%3A%20Battery&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP 216.239.34.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-7NEF16H3WB>m=45je3310&_p=1105350089&gcs=G100&cid=899813206.1678110696&ul=en-us&sr=1280x1024&_s=1&sid=1678110696&sct=1&seg=0&dl=https%3A%2F%2Fsamplesavenue.com%2Fbattery%2Fsignup%2F1&dt=Samples%20Avenue%20%3A%20Battery&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://samplesavenue.com
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://samplesavenue.com
date: Mon, 06 Mar 2023 13:51:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pwrkr.s3.amazonaws.com/push-worker-sdk-TAGA2958.js
52.216.170.115200 OK 222 B URL HTTP/1.1 pwrkr.s3.amazonaws.com/push-worker-sdk-TAGA2958.js
IP 52.216.170.115:0
Hash c86f20d2163476bfa9d8c8ddb4d9ab5b
c79017b2c0c8a134d646d43eab957c1a0dae504e
88535ddc6ee6525237614935cf4a2a3ac15797263a4468a65082ab4b788d94c1
GET /push-worker-sdk-TAGA2958.js HTTP/1.1
Host: pwrkr.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: CmIqOmLmKic+GTTZHRBG1kNEng4wsbtKabaxzdVc5Eqvd33uHQCvKIau5yi5DU4hl3AdyKetMzY=
x-amz-request-id: TY9MPMPJE733W4M7
Date: Mon, 06 Mar 2023 13:51:38 GMT
Last-Modified: Wed, 30 Mar 2022 18:54:24 GMT
ETag: "c86f20d2163476bfa9d8c8ddb4d9ab5b"
x-amz-version-id: qXUXhRDuiTMcAHML6mtY_O8jIrrAfEra
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 222
trc.pushnami.com/api/push/track
3.216.234.227204 No Content 0 B URL HTTP/2 trc.pushnami.com/api/push/track
IP 3.216.234.227:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/push/track HTTP/1.1
Host: trc.pushnami.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: key
Referer: https://samplesavenue.com/
Origin: https://samplesavenue.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Mon, 06 Mar 2023 13:51:37 GMT
access-control-allow-origin: *
access-control-allow-methods: POST
access-control-allow-headers: Accept,Authorization,Content-Type,If-None-Match,key
access-control-max-age: 86400
access-control-expose-headers: WWW-Authenticate,Server-Authorization
cache-control: no-cache
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10015244.json
87.248.119.251200 OK 22 B URL HTTP/2 s.yimg.com/wi/config/10015244.json
IP 87.248.119.251:0
ASN #203220 Yahoo! UK Services Limited
File type JSON data\012- , ASCII text, with no line terminators
Hash 14293ad9ad0ffaf9f7a3acf1b0793b66
718dea6b65b9516e5e33fac53451056397deb255
73a1b438b0221511fb3dde18e019f5ab045811b2248d25d424e40980c683a9dc
GET /wi/config/10015244.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://samplesavenue.com
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
x-amz-request-id: TY9THNC6B4HNZDE0
x-amz-id-2: lvq/KuKU0Ic3lYE+mAEdXFat5Gzn0rM3BETLPYHi7NKLdlm8crLvHPvq7A0Hjqj+2T4hUNLHBgU=
content-type: application/json
date: Mon, 06 Mar 2023 13:51:36 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
age: 1
content-encoding: gzip
content-length: 22
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
trc.pushnami.com/api/push/track
3.216.234.227200 OK 2 B URL HTTP/2 trc.pushnami.com/api/push/track
IP 3.216.234.227:0
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /api/push/track HTTP/1.1
Host: trc.pushnami.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://samplesavenue.com/
content-type: application/x-www-form-urlencoded
key: 5cc0bb93e04a8c20b5240228
Origin: https://samplesavenue.com
Content-Length: 70
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 13:51:37 GMT
content-type: text/html; charset=utf-8
content-length: 2
access-control-allow-origin: *
access-control-expose-headers: WWW-Authenticate,Server-Authorization
cache-control: no-cache
X-Firefox-Spdy: h2
ocsp.r2m01.amazontrust.com/
54.230.80.227200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP 54.230.80.227:0
Hash 850bda61ccaf5894643da7fc964608bd
0633048b79e877ee76b4aedfcc3109987701bbfa
9cc59c24ef28ed9281bdc35af6e4fe84da226a33f428639f630f83aba2c0c11b
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 06 Mar 2023 13:51:37 GMT
Last-Modified: Mon, 06 Mar 2023 00:01:17 GMT
Server: ECAcc (bsa/EB4C)
X-Cache: Miss from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: MnaSQJ5Qak9zSNoSD3FFuDf6BbWT5Jzfhk8TpOP38XOAdYehGiH75g==
Age: 49820
ocsp.r2m02.amazontrust.com/
54.230.80.227200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP 54.230.80.227:0
Hash 653f1077965f4734dfedbf7ed5aa304a
cf54d38db4c49f36876ec8ca5f05d7d31c92464e
1a54490a6702d4e6573581e872606e47c8b431a445df4ed6eda5b1df60312e02
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=86073
Date: Mon, 06 Mar 2023 13:51:37 GMT
Etag: "64044f04-1d7"
Expires: Tue, 07 Mar 2023 13:46:10 GMT
Last-Modified: Sun, 05 Mar 2023 08:12:52 GMT
Server: ECAcc (nya/79CE)
X-Cache: Miss from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: oUWTEchw_q8FnbcRa6apA4M6ghc0n_canAGne7YLarE0idIgVzcWRw==
Age: 19998
imgs.tagadamedia.com/media/us/24/1549639292222-2483.jpg
138.199.36.10200 OK 7.5 kB URL HTTP/2 imgs.tagadamedia.com/media/us/24/1549639292222-2483.jpg
IP 138.199.36.10:0
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x200, components 3\012- data
Hash a661f8fabf91b0638343c662d823b4b5
a139a2d2ab8a7660549d0c4232eb5730f238980f
b80d2f7365c105563dfb4b9daa9fe16b40b985dd62d96893f465f445f112b440
GET /media/us/24/1549639292222-2483.jpg HTTP/1.1
Host: imgs.tagadamedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 13:51:37 GMT
content-type: image/jpeg
content-length: 7517
server: BunnyCDN-DE1-1053
cdn-pullzone: 61945
cdn-uid: 5d127034-96a6-45e8-a482-4f40615f18db
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Wed, 21 Dec 2022 13:52:44 GMT
x-amz-id-2: j7O2yAnpnSC9xzMq41PKGTuX78/LGcEZnc1WKG7h7hZy1foJuqHVti4HeIbYPJ+ZahX8TD3fi6s=
x-amz-request-id: Z05YDRDF5AKZZTP8
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 12/21/2022 13:52:43
cdn-edgestorageid: 1049
cdn-status: 200
cdn-requestid: 096bb5680f3a311c9a95e129980514d2
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
imgs.tagadamedia.com/media/us/24/sq-navigation-logo-2491.png
138.199.36.10200 OK 20 kB URL HTTP/2 imgs.tagadamedia.com/media/us/24/sq-navigation-logo-2491.png
IP 138.199.36.10:0
ASN #60068 Datacamp Limited
File type PNG image data, 380 x 62, 8-bit/color RGBA, interlaced\012- data
Hash 0ad52d262a1918e5954c63ec5d7602f2
f40365b54205b44ef5eedb22843d46a33d3f1d09
fc3b76a1878062c3b1be9229be7432df871bd0448a395d7baa995171182f21bd
GET /media/us/24/sq-navigation-logo-2491.png HTTP/1.1
Host: imgs.tagadamedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 13:51:37 GMT
content-type: image/png
content-length: 20261
server: BunnyCDN-DE1-1053
cdn-pullzone: 61945
cdn-uid: 5d127034-96a6-45e8-a482-4f40615f18db
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Wed, 28 Dec 2022 16:12:25 GMT
x-amz-id-2: +d4xeWrWjgVqYAYcsJ/1uIRvMVt9+IgWMFE65FBJWx9L/mdIRyD6EjuK8h7H0Lox+5hfadJYZ5M=
x-amz-request-id: 8804MRBPHN4V4E2D
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 12/28/2022 16:12:25
cdn-edgestorageid: 752
cdn-status: 200
cdn-requestid: 8a8425d3caa05af6d89443fe80d45d8f
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
imgs.tagadamedia.com/media/us/24/321615-avatar-image-1564430400-2499.jpeg
138.199.36.10200 OK 127 kB URL HTTP/2 imgs.tagadamedia.com/media/us/24/321615-avatar-image-1564430400-2499.jpeg
IP 138.199.36.10:0
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2552x2550, components 3\012- data
Size 127 kB (127007 bytes)
Hash 2c664091ca42af8c3c02921ad2442a2f
cf2e8aa31d208b80b5d157f1a01f628020920fca
aae53fe7dfc7ac63c6ada0527f77980c04751803be4ba4b6efc463f2a3a61c6f
GET /media/us/24/321615-avatar-image-1564430400-2499.jpeg HTTP/1.1
Host: imgs.tagadamedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 13:51:37 GMT
content-type: image/jpeg
content-length: 127007
server: BunnyCDN-DE1-1053
cdn-pullzone: 61945
cdn-uid: 5d127034-96a6-45e8-a482-4f40615f18db
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Wed, 11 Jan 2023 16:17:51 GMT
x-amz-id-2: uckZy0h7NFIphN+VA6gclTpi60tddCM4BLvwdR/W+liFMS1SpqMsJeS7Prtphj7kPTBZeogS+pI=
x-amz-request-id: AS6X2B69JEPG2SVP
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 01/11/2023 16:17:50
cdn-edgestorageid: 1081
cdn-status: 200
cdn-requestid: b35733c804310d02ff06cd1f63ac158c
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
imgs.tagadamedia.com/media/us/25/telechargement-15-2549.png
138.199.36.10200 OK 2.0 kB URL HTTP/2 imgs.tagadamedia.com/media/us/25/telechargement-15-2549.png
IP 138.199.36.10:0
ASN #60068 Datacamp Limited
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash bc18975a1d14ef34bdb59a0d8d3593e2
1b6477dfe0dd019ad579b1ca46b38385e98b729d
999a087a68603d56584c98e225dd7da048ae1dd0178338e39e162891003a1be2
GET /media/us/25/telechargement-15-2549.png HTTP/1.1
Host: imgs.tagadamedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 13:51:37 GMT
content-type: image/png
content-length: 1997
server: BunnyCDN-DE1-1053
cdn-pullzone: 61945
cdn-uid: 5d127034-96a6-45e8-a482-4f40615f18db
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 09 Feb 2023 14:59:51 GMT
x-amz-id-2: zto6oirVi5QdKxvTcxUYo5qB4xoxc7q2KatXswQ2owZf9Xjn/jn6Db9WcHLjWDub6cMEq1jYjQQ=
x-amz-request-id: D1XN09FT6K0ZX4MK
x-amz-server-side-encryption: AES256
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 02/09/2023 14:59:50
cdn-edgestorageid: 1054
cdn-status: 200
cdn-requestid: aa3cfedbfaa0273f6f22cc4fb33729a9
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
api.trustedform.com/trustedform.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=16781106972880.24815444557013
54.236.68.177301 Moved Permanently 110 kB URL HTTP/2 api.trustedform.com/trustedform.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=16781106972880.24815444557013
IP 54.236.68.177:0
File type gzip compressed data, from Unix\012- data
Size 110 kB (110460 bytes)
Hash bebe1af6d56f231dcc620b1ef090f6dc
6f3eb6362659745ab0bc0dd8f03a7dffe2bb6de6
f5b35b2c566b57cb92bf3d829c551d9c934e8c07693ed6037da8516d0f7d40a0
GET /trustedform.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=16781106972880.24815444557013 HTTP/1.1
Host: api.trustedform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: awselb/2.0
date: Mon, 06 Mar 2023 13:51:37 GMT
content-type: text/html
content-length: 134
location: https://cdn.trustedform.com:443/bootstrap.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=16781106972880.24815444557013
X-Firefox-Spdy: h2
s3.amazonaws.com/pushext.com/sdk-v3.03.js
52.216.92.141200 OK 28 kB URL HTTP/1.1 s3.amazonaws.com/pushext.com/sdk-v3.03.js
IP 52.216.92.141:0
File type ASCII text, with CRLF line terminators
Hash ddcd86ed61e2264d6ebcfd75102f02ee
e0eccfc8ea444bd5eabcf38e22240b4db80fe34a
d568a00003589ad112ddf1f8a27c4cbf7b63a80b1df39a26d1ebc2f185417e53
GET /pushext.com/sdk-v3.03.js HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: mSiFdDNSbBgFfSy+2kFkDAcZ+V32Wc0k/J6aveXpdgYgpvwQyOryZN1KmlilSeg0IFi7XAjSBuk=
x-amz-request-id: TY9WNGA88XJ7EAA9
Date: Mon, 06 Mar 2023 13:51:38 GMT
Last-Modified: Wed, 30 Mar 2022 18:55:32 GMT
ETag: "ddcd86ed61e2264d6ebcfd75102f02ee"
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 28274
www.facebook.com/tr/?id=274483184077389&ev=PageView&dl=https%3A%2F%2Fsamplesavenue.com%2Fbattery%2Fsignup%2F1&rl=&if=false&ts=1678110697330&sw=1280&sh=1024&v=2.9.98&r=stable&a=tmgoogletagmanager&ec=0&o=30&cs_est=true&fbp=fb.1.1678110697328.1781705017&it=1678110696893&coo=false&rqm=GET
157.240.200.35200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=274483184077389&ev=PageView&dl=https%3A%2F%2Fsamplesavenue.com%2Fbattery%2Fsignup%2F1&rl=&if=false&ts=1678110697330&sw=1280&sh=1024&v=2.9.98&r=stable&a=tmgoogletagmanager&ec=0&o=30&cs_est=true&fbp=fb.1.1678110697328.1781705017&it=1678110696893&coo=false&rqm=GET
IP 157.240.200.35:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=274483184077389&ev=PageView&dl=https%3A%2F%2Fsamplesavenue.com%2Fbattery%2Fsignup%2F1&rl=&if=false&ts=1678110697330&sw=1280&sh=1024&v=2.9.98&r=stable&a=tmgoogletagmanager&ec=0&o=30&cs_est=true&fbp=fb.1.1678110697328.1781705017&it=1678110696893&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Mon, 06 Mar 2023 13:51:37 GMT
X-Firefox-Spdy: h2
ocsp.r2m02.amazontrust.com/
54.230.80.227200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP 54.230.80.227:0
Hash abe236865f9847f67733fca9613125db
334cc3c3b56b53d3951817ea4e8727246920fa6c
b8d49e03af6e6a083b9a2889140622b09dd911fe27fae14727889c7b2175fa6e
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 06 Mar 2023 13:51:38 GMT
Last-Modified: Mon, 06 Mar 2023 01:06:28 GMT
Server: ECAcc (nya/78E9)
X-Cache: Miss from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 9Q0Y6trk4-_P3ktO6WHB0novD1Ssj9dvusPas3c5ALdd63CZktw0AA==
Age: 45910
ocsp.r2m02.amazontrust.com/
54.230.80.227200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP 54.230.80.227:0
Hash 2c7353d0c0c616c00c9767927431eebf
7cfecf0e029a09d7051c897617780d30f27e9dec
9300b0394fe56fc63ee3b4fadd86d52083f4a8990a19782b3dc7cbf010fe5cc0
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=128580
Date: Mon, 06 Mar 2023 13:51:38 GMT
Etag: "6403aeac-1d7"
Expires: Wed, 08 Mar 2023 01:34:38 GMT
Last-Modified: Sat, 04 Mar 2023 20:48:44 GMT
Server: ECAcc (bsa/EB32)
X-Cache: Miss from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Ao9z6VhaWfjl_rm1rB1RDeE5SqLicTuHK_75mv2WYhmOIcd-PX34Ng==
Age: 103554
ocsp.r2m02.amazontrust.com/
54.230.80.227200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP 54.230.80.227:0
Hash 6c23903e54da524d7545131d9a132fcc
b69146dea171bab30db7184d773736d15b4e4a42
a672922d92789bf815e5ff9e48e165a363299392f55c48253f20eec78983b0ae
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=171949
Date: Mon, 06 Mar 2023 13:51:39 GMT
Etag: "64047d58-1d7"
Expires: Wed, 08 Mar 2023 13:37:28 GMT
Last-Modified: Sun, 05 Mar 2023 11:30:32 GMT
Server: ECAcc (nya/1C5C)
X-Cache: Miss from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: V-UrKVX2HL7_S8xu-0e6tErsfl7wp4kTcAbO2p_7vx5zdUp5lrAeOQ==
Age: 94016
create.leadid.com/2.11.9/GenerateToken?msn=1&pid=3c1fa500-2231-492f-ae55-984dd2f30310&_=418635893
3.216.75.124200 OK 1.5 kB URL HTTP/2 create.leadid.com/2.11.9/GenerateToken?msn=1&pid=3c1fa500-2231-492f-ae55-984dd2f30310&_=418635893
IP 3.216.75.124:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 73379859c0b5d268b6cbcbfc9bdb9da1
ccd7193a077e873ad482f54dee26115a6ae1f50e
e7233d51eab1eadb997e9a22564b4193c59c9853f780506d9345819d3c841735
POST /2.11.9/GenerateToken?msn=1&pid=3c1fa500-2231-492f-ae55-984dd2f30310&_=418635893 HTTP/1.1
Host: create.leadid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 185
Origin: https://samplesavenue.com
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Mar 2023 13:51:39 GMT
content-type: text/plain;charset=UTF-8
server: nginx
set-cookie: rgisanonymous=false; expires=Wed, 05-Apr-2023 13:51:38 GMT; Max-Age=2592000; path=/
rguserid=4185714f-dab1-450a-a388-20409e02f337; expires=Wed, 05-Apr-2023 13:51:38 GMT; Max-Age=2592000; path=/
rguuid=true; expires=Wed, 05-Apr-2023 13:51:38 GMT; Max-Age=2592000; path=/
rgisanonymous=true; expires=Wed, 05-Apr-2023 13:51:38 GMT; Max-Age=2592000; path=/
cache-control: no-cache, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type
access-control-max-age: 1728000
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
api.pushnami.com/scripts/v1/pushnami-adv/5cc0bb93e04a8c20b5240228
54.230.111.113200 OK 20 kB URL HTTP/2 api.pushnami.com/scripts/v1/pushnami-adv/5cc0bb93e04a8c20b5240228
IP 54.230.111.113:0
Hash 816bd0fdc0b08158d3ebc5b8191216ff
3988be43226d17677c12b69fb4a0c23ad167445b
4a2cfbd6db59f232e61f8c37752fe3d32512e53384ec2895ac1024bff0513398
GET /scripts/v1/pushnami-adv/5cc0bb93e04a8c20b5240228 HTTP/1.1
Host: api.pushnami.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Mon, 06 Mar 2023 13:51:36 GMT
cache-control: no-cache
content-encoding: gzip
vary: accept-encoding
x-cache: Miss from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0AXvbkQ2z2OVg7Bro26qxNT1Wt-UzxGxFJ8APKEbgLnHdKEVbKIzFg==
X-Firefox-Spdy: h2
ocsp.r2m02.amazontrust.com/
54.230.80.227200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP 54.230.80.227:0
Hash 4e66b948b578d22be954a54bcd94af59
dd98ca7cbf48cdfa27f8f32cf7143f89b0bf96a8
226a314c582a018613afcbb19c28d245c744fd4d82d047b9b933d102c0393915
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=86351
Date: Mon, 06 Mar 2023 13:51:40 GMT
Etag: "64037ef2-1d7"
Expires: Tue, 07 Mar 2023 13:50:51 GMT
Last-Modified: Sat, 04 Mar 2023 17:25:06 GMT
Server: ECAcc (nya/7970)
X-Cache: Miss from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: bp-PjwgvuWTCss6AyWsUAAm9jzdCYwsd13a5gRji1kk9Q6qmwrw3ww==
Age: 73546
api.trustedform.com/certs/400b878f888cfac8715340df8ecfeb3e9614dff1/snapshot
54.236.68.177204 No Content 0 B URL HTTP/2 api.trustedform.com/certs/400b878f888cfac8715340df8ecfeb3e9614dff1/snapshot
IP 54.236.68.177:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /certs/400b878f888cfac8715340df8ecfeb3e9614dff1/snapshot HTTP/1.1
Host: api.trustedform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 58895
Origin: https://samplesavenue.com
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Mon, 06 Mar 2023 13:51:40 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers:
cache-control: max-age=0, private, must-revalidate
server: Cowboy
X-Firefox-Spdy: h2
api.trustedform.com/certs/400b878f888cfac8715340df8ecfeb3e9614dff1/fingerprints
54.236.68.177204 No Content 0 B URL HTTP/2 api.trustedform.com/certs/400b878f888cfac8715340df8ecfeb3e9614dff1/fingerprints
IP 54.236.68.177:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /certs/400b878f888cfac8715340df8ecfeb3e9614dff1/fingerprints HTTP/1.1
Host: api.trustedform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 692
Origin: https://samplesavenue.com
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Mon, 06 Mar 2023 13:51:40 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers:
cache-control: max-age=0, private, must-revalidate
server: Cowboy
X-Firefox-Spdy: h2
script.anura.io/response.json
18.133.63.102200 OK 71 B URL HTTP/2 script.anura.io/response.json
IP 18.133.63.102:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 89eeab4ff6a4e253b4fb76569fb282bf
5d798a0c4742bf990076ca044ee557351c691fe6
37257a6d7db6a80f62ad260f1af5415acaca1e9469fa4ae78deb46272fb81651
POST /response.json HTTP/1.1
Host: script.anura.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 3074
Origin: https://samplesavenue.com
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Mar 2023 13:51:40 GMT
content-type: application/json; charset=utf-8
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: POST
expires: Sun, 28 Dec 1980 18:57:00 EST
cache-control: private, no-cache, no-store, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
samplesavenue.com/sw.js
3.89.34.130200 OK 191 B IP 3.89.34.130:0
Hash ba2e477c78d6ddfb80c11d6112d6f548
fb4fd2a17d23eee5f97f2de511ff96b678c44073
cce04e75f1e2cd6284b7974f87fe1bedc8ba1ef71258671ccf14c115fb7fe75f
GET /sw.js HTTP/1.1
Host: samplesavenue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: contest_session=HdwIfSg1EwpVK6Q7ZF5mMoZoskN6yJoWmRC6Xt7R; _tt_enable_cookie=1; _ttp=RxfP4iwDfYk5kEmFsBe-O56oMas; _fbp=fb.1.1678110697328.1781705017; leadid_token-A223F9AF-E7A0-7D87-DD28-D0C442307BFE-BEB516A1-60ED-00CC-73EB-A6A318CFA8E9=43509BBD-5931-8181-A432-8C72DC62E7AB
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Cache-Control: max-age=0
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 13:51:41 GMT
content-type: application/x-javascript
content-length: 191
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
set-cookie: contest_session=HdwIfSg1EwpVK6Q7ZF5mMoZoskN6yJoWmRC6Xt7R; path=/; secure; httponly; samesite=none
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.r2m01.amazontrust.com/
54.230.80.227200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP 54.230.80.227:0
Hash 850bda61ccaf5894643da7fc964608bd
0633048b79e877ee76b4aedfcc3109987701bbfa
9cc59c24ef28ed9281bdc35af6e4fe84da226a33f428639f630f83aba2c0c11b
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 06 Mar 2023 13:51:41 GMT
Last-Modified: Mon, 06 Mar 2023 00:01:14 GMT
Server: ECAcc (nya/7993)
X-Cache: Miss from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: bP7OFgSpIuLFoxRHHmEiiPQtEBGTCmK5DBRUKdsy6jlPEov6Y6L9Zg==
Age: 49827
ocsp.sca1b.amazontrust.com/
143.204.42.88200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.88:0
Hash 5bc95c2c294a97375dedb3832f5105f5
8e1f4d0ce657fdf197df9a8fa808aef53da3ce60
e79d867924ad5f9102fc0f4b8b34ab45e12ab7a270c93fc26b83dd37795d5d4b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=107646
Date: Mon, 06 Mar 2023 13:51:41 GMT
Etag: "64049dd5-1d7"
Expires: Tue, 07 Mar 2023 19:45:47 GMT
Last-Modified: Sun, 05 Mar 2023 13:49:09 GMT
Server: ECAcc (nya/78C0)
X-Cache: Miss from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 3uP4l_-UiGmkPbijGYG7rKp67XOWMj__TKCCZdwLciiIXqzkUt8ymQ==
Age: 21398
pwrkr.s3.amazonaws.com/push-worker-sdk-TAGA2958.js
52.217.105.132200 OK 222 B URL HTTP/1.1 pwrkr.s3.amazonaws.com/push-worker-sdk-TAGA2958.js
IP 52.217.105.132:0
Hash c86f20d2163476bfa9d8c8ddb4d9ab5b
c79017b2c0c8a134d646d43eab957c1a0dae504e
88535ddc6ee6525237614935cf4a2a3ac15797263a4468a65082ab4b788d94c1
GET /push-worker-sdk-TAGA2958.js HTTP/1.1
Host: pwrkr.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: eU8tQhnIdWOy7qt1m0pJtkC6JU4SipmuLA2SUaTwWWJOA81d0HZRsTKxQ5QrUys3Xsvx3JRSL94=
x-amz-request-id: GC35HEQ8JMMZFG05
Date: Mon, 06 Mar 2023 13:51:42 GMT
Last-Modified: Wed, 30 Mar 2022 18:54:24 GMT
ETag: "c86f20d2163476bfa9d8c8ddb4d9ab5b"
x-amz-version-id: qXUXhRDuiTMcAHML6mtY_O8jIrrAfEra
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 222
s3.amazonaws.com/pushext.com/sdk-v3.03.js
52.216.33.232200 OK 28 kB URL HTTP/1.1 s3.amazonaws.com/pushext.com/sdk-v3.03.js
IP 52.216.33.232:0
File type ASCII text, with CRLF line terminators
Hash ddcd86ed61e2264d6ebcfd75102f02ee
e0eccfc8ea444bd5eabcf38e22240b4db80fe34a
d568a00003589ad112ddf1f8a27c4cbf7b63a80b1df39a26d1ebc2f185417e53
GET /pushext.com/sdk-v3.03.js HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: Q7uvaS2g2WyRZ0EobKu8unUBnHrAfPnMxwXXV3RgEsD9Zlx4dgctE7EJVqftznlMYSH6lsZ3cU4=
x-amz-request-id: GC3EZCDK78M1B6P2
Date: Mon, 06 Mar 2023 13:51:42 GMT
Last-Modified: Wed, 30 Mar 2022 18:55:32 GMT
ETag: "ddcd86ed61e2264d6ebcfd75102f02ee"
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 28274
psp.pushnami.com/api/psp
54.167.183.48200 OK 69 B IP 54.167.183.48:0
File type JSON data\012- , ASCII text, with no line terminators
Hash cef934af42a2b3c3a2ef347da15d70ee
f83f1f069fcc230e3c9397653eef8ddd4d66c9a9
47e250e449472cb557a99ef04f6b6b5a407034f197d911e6301193c20c2f1cee
OPTIONS /api/psp HTTP/1.1
Host: psp.pushnami.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: key
Referer: https://samplesavenue.com/
Origin: https://samplesavenue.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Mar 2023 13:51:41 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: https://samplesavenue.com
access-control-allow-credentials: true
access-control-expose-headers: content-type, content-length, etag
access-control-max-age: 600
access-control-allow-headers: key
access-control-allow-methods: POST
cache-control: no-cache
vary: accept-encoding
content-encoding: gzip
X-Firefox-Spdy: h2
api.trustedform.com/certs/400b878f888cfac8715340df8ecfeb3e9614dff1/events
54.236.68.177204 No Content 0 B URL HTTP/2 api.trustedform.com/certs/400b878f888cfac8715340df8ecfeb3e9614dff1/events
IP 54.236.68.177:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /certs/400b878f888cfac8715340df8ecfeb3e9614dff1/events HTTP/1.1
Host: api.trustedform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1118
Origin: https://samplesavenue.com
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Mon, 06 Mar 2023 13:51:42 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers:
cache-control: max-age=0, private, must-revalidate
server: Cowboy
X-Firefox-Spdy: h2
deviceid.trueleadid.com/iframe.html?token=43509BBD-5931-8181-A432-8C72DC62E7AB&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.11.9&lck=BEB516A1-60ED-00CC-73EB-A6A318CFA8E9&lac=A223F9AF-E7A0-7D87-DD28-D0C442307BFE
35.169.79.47200 OK 1.8 kB URL HTTP/2 deviceid.trueleadid.com/iframe.html?token=43509BBD-5931-8181-A432-8C72DC62E7AB&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.11.9&lck=BEB516A1-60ED-00CC-73EB-A6A318CFA8E9&lac=A223F9AF-E7A0-7D87-DD28-D0C442307BFE
IP 35.169.79.47:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4108)
Hash 84b67591c3b8f2bb3d9877c918a11408
41d2abca88bb1ae1b814b85be02aae5cf8642769
54620938b525a7c48a1c069b2cc6f7c59ac4cd771bd3cd664c0e90a57547e0f7
GET /iframe.html?token=43509BBD-5931-8181-A432-8C72DC62E7AB&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.11.9&lck=BEB516A1-60ED-00CC-73EB-A6A318CFA8E9&lac=A223F9AF-E7A0-7D87-DD28-D0C442307BFE HTTP/1.1
Host: deviceid.trueleadid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d2m2wsoho8qq12.cloudfront.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Mar 2023 13:51:40 GMT
content-type: text/html
server: nginx
last-modified: Thu, 02 Feb 2023 16:44:23 GMT
etag: W/"63dbe867-1049"
expires: Tue, 07 Mar 2023 13:51:40 GMT
p3p: CP="NOI DSP COR NID CUR ADM DEV OUR BUS"
cache-control: max-age=86400, public
content-encoding: gzip
X-Firefox-Spdy: h2
imgs.tagadamedia.com/media/us/24/awl-red-2482.svg
138.199.36.10200 OK 0 B URL HTTP/2 imgs.tagadamedia.com/media/us/24/awl-red-2482.svg
IP 138.199.36.10:0
ASN #60068 Datacamp Limited
GET /media/us/24/awl-red-2482.svg HTTP/1.1
Host: imgs.tagadamedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 13:51:37 GMT
content-type: image/svg+xml
vary: Accept-Encoding
server: BunnyCDN-DE1-1053
cdn-pullzone: 61945
cdn-uid: 5d127034-96a6-45e8-a482-4f40615f18db
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Wed, 21 Dec 2022 13:49:57 GMT
x-amz-id-2: hj3R3n03xlBj+Oeb3qtGxDoPA0cgAgZ9liSO1s9pHx3YIeb4cIMTUysqEAt2fRtQqTp6XMqIaRE=
x-amz-request-id: V8NYXG7481NSDX0M
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 12/21/2022 13:49:56
cdn-edgestorageid: 1053
cdn-status: 200
cdn-requestid: c9aca08d75d652b319cb0c1e85ced1c9
cdn-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
imgs.tagadamedia.com/media/us/24/isi-international-4-2481.svg
138.199.36.10200 OK 0 B URL HTTP/2 imgs.tagadamedia.com/media/us/24/isi-international-4-2481.svg
IP 138.199.36.10:0
ASN #60068 Datacamp Limited
GET /media/us/24/isi-international-4-2481.svg HTTP/1.1
Host: imgs.tagadamedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 13:51:37 GMT
content-type: image/svg+xml
vary: Accept-Encoding
server: BunnyCDN-DE1-1053
cdn-pullzone: 61945
cdn-uid: 5d127034-96a6-45e8-a482-4f40615f18db
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Wed, 21 Dec 2022 13:43:46 GMT
x-amz-id-2: 16VTJhr/H4+wHNo8XyCXDNjAvWgvp/1Ub8/Kt41VCm95uzfsduELbpuXtUN54AeUcSblz1mE64s=
x-amz-request-id: X1PZ3JYN7M14ZMWX
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 12/21/2022 13:43:45
cdn-edgestorageid: 722
cdn-status: 200
cdn-requestid: 7a2cfc26dc7066a38631ee7337694538
cdn-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
create.leadid.com/2.11.9/InitFormData?msn=3&pid=3c1fa500-2231-492f-ae55-984dd2f30310&token=43509BBD-5931-8181-A432-8C72DC62E7AB&_=418635895
3.216.75.124200 OK 0 B URL HTTP/2 create.leadid.com/2.11.9/InitFormData?msn=3&pid=3c1fa500-2231-492f-ae55-984dd2f30310&token=43509BBD-5931-8181-A432-8C72DC62E7AB&_=418635895
IP 3.216.75.124:0
POST /2.11.9/InitFormData?msn=3&pid=3c1fa500-2231-492f-ae55-984dd2f30310&token=43509BBD-5931-8181-A432-8C72DC62E7AB&_=418635895 HTTP/1.1
Host: create.leadid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 74996
Origin: https://samplesavenue.com
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 13:51:39 GMT
content-type: text/plain;charset=UTF-8
server: nginx
set-cookie: rgisanonymous=false; expires=Wed, 05-Apr-2023 13:51:39 GMT; Max-Age=2592000; path=/
rguserid=f917e89d-cfcc-4b7b-8faf-dd9052ec49a5; expires=Wed, 05-Apr-2023 13:51:39 GMT; Max-Age=2592000; path=/
rguuid=true; expires=Wed, 05-Apr-2023 13:51:39 GMT; Max-Age=2592000; path=/
rgisanonymous=true; expires=Wed, 05-Apr-2023 13:51:39 GMT; Max-Age=2592000; path=/
cache-control: no-cache, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type
access-control-max-age: 1728000
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
ads.anura.io/showads.js?416740285799
54.230.111.27200 OK 0 B URL HTTP/2 ads.anura.io/showads.js?416740285799
IP 54.230.111.27:0
GET /showads.js?416740285799 HTTP/1.1
Host: ads.anura.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://samplesavenue.com
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Sun, 05 Mar 2023 16:17:23 GMT
server: nginx
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SeFDbCU3EpA83bhbdcgB6xDSUydvSNSBidx2Yd5-5AlnuqK0SOdQ6w==
age: 77656
X-Firefox-Spdy: h2
samplesavenue.com/js/app.js?id=f2c75101ca4df1e15b33
3.89.34.130200 OK 0 B URL HTTP/2 samplesavenue.com/js/app.js?id=f2c75101ca4df1e15b33
IP 3.89.34.130:0
GET /js/app.js?id=f2c75101ca4df1e15b33 HTTP/1.1
Host: samplesavenue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/battery/signup/1
Cookie: contest_session=HdwIfSg1EwpVK6Q7ZF5mMoZoskN6yJoWmRC6Xt7R
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 13:51:35 GMT
content-type: application/javascript
last-modified: Mon, 06 Mar 2023 09:17:38 GMT
etag: "ec167-5f637c425d080-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
imgs.tagadamedia.com/media/us/25/homeyou-logo-2550.svg
138.199.36.10200 OK 0 B URL HTTP/2 imgs.tagadamedia.com/media/us/25/homeyou-logo-2550.svg
IP 138.199.36.10:0
ASN #60068 Datacamp Limited
GET /media/us/25/homeyou-logo-2550.svg HTTP/1.1
Host: imgs.tagadamedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 13:51:37 GMT
content-type: image/svg+xml
vary: Accept-Encoding
server: BunnyCDN-DE1-1053
cdn-pullzone: 61945
cdn-uid: 5d127034-96a6-45e8-a482-4f40615f18db
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Fri, 10 Feb 2023 13:06:59 GMT
x-amz-id-2: lYZiywp3PmBSUkeOu7E93vNVnbVknNccwFe6MZC0PQoO7UnFKJSuw6Xo39TmK0n3RxdFgMDJaVE=
x-amz-request-id: PK8R0DK1DQ2A6VFZ
x-amz-server-side-encryption: AES256
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 02/10/2023 13:06:59
cdn-edgestorageid: 863
cdn-status: 200
cdn-requestid: 37364dc74f2e9f1cac04d557ab8e8357
cdn-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
create.lidstatic.com/campaign/beb516a1-60ed-00cc-73eb-a6a318cfa8e9.js?snippet_version=2
104.22.38.182200 OK 0 B URL HTTP/2 create.lidstatic.com/campaign/beb516a1-60ed-00cc-73eb-a6a318cfa8e9.js?snippet_version=2
IP 104.22.38.182:0
GET /campaign/beb516a1-60ed-00cc-73eb-a6a318cfa8e9.js?snippet_version=2 HTTP/1.1
Host: create.lidstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Mar 2023 13:51:37 GMT
content-type: text/javascript
x-amz-id-2: Gfa0sOazaTlIwZ0Sl4zvanforKroCFjm1118+IXMDWca8hJPbT4d0gxdn/8ERssB/lTWGjMFY1c=
x-amz-request-id: T6QRJTB34MSS9JZ1
x-amz-replication-status: COMPLETED
last-modified: Fri, 12 Nov 2021 01:06:02 GMT
etag: W/"a26a2a7efa03d037874965870726da4a"
cache-control: max-age=1800
x-amz-version-id: C0ArZgU5VyyGfHMzwlfuO_22EOgyVHi9
cf-cache-status: REVALIDATED
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a3b1312a9359902-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.trustedform.com/bootstrap.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=16781106972880.24815444557013
54.230.111.111200 OK 0 B URL HTTP/2 cdn.trustedform.com/bootstrap.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=16781106972880.24815444557013
IP 54.230.111.111:0
GET /bootstrap.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=16781106972880.24815444557013 HTTP/1.1
Host: cdn.trustedform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://samplesavenue.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 06 Mar 2023 13:51:39 GMT
last-modified: Fri, 24 Feb 2023 16:04:14 GMT
x-amz-version-id: oadcnJCg2vYrfrS_vSmPkc6nBoYFDxSV
etag: W/"1b4d8abad5e0668a237e388577c6a93c"
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CCPMOrafuqTM-KX-MfH5npnhkeXE30_l7-N_w7BS1adrG1z786woyg==
X-Firefox-Spdy: h2
api.pushnami.com/scripts/v2/pushnami-sw/5cc0bb93e04a8c20b5240228
54.230.111.113200 OK 0 B URL HTTP/2 api.pushnami.com/scripts/v2/pushnami-sw/5cc0bb93e04a8c20b5240228
IP 54.230.111.113:0
GET /scripts/v2/pushnami-sw/5cc0bb93e04a8c20b5240228 HTTP/1.1
Host: api.pushnami.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Mon, 06 Mar 2023 13:51:38 GMT
cache-control: no-cache
content-encoding: gzip
vary: accept-encoding
x-cache: Miss from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yIa9eLSLu7xGIH-9zSroepniJyPhG0VXQlG-xxWrVX95fATRrT3j4g==
X-Firefox-Spdy: h2
cdn.trustedform.com/trustedform-1.8.38.js
54.230.111.111200 OK 0 B URL HTTP/2 cdn.trustedform.com/trustedform-1.8.38.js
IP 54.230.111.111:0
GET /trustedform-1.8.38.js HTTP/1.1
Host: cdn.trustedform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 24 Feb 2023 16:04:14 GMT
x-amz-version-id: ffJa67w_.T4JjuAeq9bT6P3fBUPuRaPp
server: AmazonS3
content-encoding: gzip
date: Mon, 06 Mar 2023 13:51:39 GMT
etag: W/"a71c6d4fa015e7b61cc1fc54ff9b242e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VS_p7M7P5HbmeSg6KSRHPOVmyRcXsgd3ZsOyxaBpG3-pGScRY3pOMQ==
age: 5
X-Firefox-Spdy: h2
imgs.tagadamedia.com/media/us/20/512x512-2088.svg
138.199.36.10200 OK 0 B URL HTTP/2 imgs.tagadamedia.com/media/us/20/512x512-2088.svg
IP 138.199.36.10:0
ASN #60068 Datacamp Limited
GET /media/us/20/512x512-2088.svg HTTP/1.1
Host: imgs.tagadamedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 13:51:36 GMT
content-type: image/svg+xml
vary: Accept-Encoding
server: BunnyCDN-DE1-1053
cdn-pullzone: 61945
cdn-uid: 5d127034-96a6-45e8-a482-4f40615f18db
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Mon, 24 Jan 2022 11:11:38 GMT
x-amz-id-2: p2nd6I7cqVmSzjag686VzlXejBGm9AgTi97uKJSaOU1uyzyz6ju1ncWde0MN5mo1ciYGTgarTo8=
x-amz-request-id: AQNKFVS6T6N0GTJC
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 01/15/2023 14:28:49
cdn-edgestorageid: 1049
cdn-status: 200
cdn-requestid: 3ed2ffbbd45fa24f9bea5b7f9ada60be
cdn-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.pushmaster-cdn.xyz/scripts/publishers/616c889db7494c0008691a0e/SDK.js
172.67.72.27200 OK 0 B URL HTTP/2 cdn.pushmaster-cdn.xyz/scripts/publishers/616c889db7494c0008691a0e/SDK.js
IP 172.67.72.27:0
GET /scripts/publishers/616c889db7494c0008691a0e/SDK.js HTTP/1.1
Host: cdn.pushmaster-cdn.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Mar 2023 13:51:36 GMT
content-type: application/javascript
x-amz-id-2: K2Nwi49qjjnW7MDyVf+/urTguKGaLRoSSbScsMpjomFk102k2o6JoqEzOMkhshIvuwhHeYM4ewk=
x-amz-request-id: MRE73ZWPV52R28YP
last-modified: Thu, 07 Jul 2022 18:16:14 GMT
x-amz-version-id: 3iDpsZiRXmLsrKEtZ1pm4Wp_k22Zwbi1
etag: W/"e239a1a8fb10138990c101e3957c013d"
cache-control: max-age=86400
cf-cache-status: HIT
age: 608
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1mSRjZqNhcGqaGd31oz79MVho9YdCdnfDYKLnAAQuVxeLE5bWrvpYs2GbAPuDftlbACpX0a3SNmGKjanNQp1rHAjMUztdh1vgre0r78ATSscR4PJG726dAy4YGl0QMR8L73pdpup0nE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a3b130c69b60b49-OSL
content-encoding: br
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
87.248.119.251200 OK 0 B IP 87.248.119.251:0
ASN #203220 Yahoo! UK Services Limited
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: rd2II15IV5mFCa5H2TykTp4iX6o4uSbg74dTDkqWHxCSFeqJUjrqje78OEbTGImJ5KE9ODaDxxA=
x-amz-request-id: XQ0JEPYQ8KFQZEQH
date: Mon, 06 Mar 2023 13:51:34 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 3
content-encoding: gzip
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
api.pushnami.com/scripts/v2/pushnami-sw/5cc0bb93e04a8c20b5240228
54.230.111.33200 OK 0 B URL HTTP/2 api.pushnami.com/scripts/v2/pushnami-sw/5cc0bb93e04a8c20b5240228
IP 54.230.111.33:0
GET /scripts/v2/pushnami-sw/5cc0bb93e04a8c20b5240228 HTTP/1.1
Host: api.pushnami.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Mon, 06 Mar 2023 13:51:38 GMT
cache-control: no-cache
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SVeixeudRjeyYwKJAbag2SS8c_181d5is1N_YLP1wF8FVrwP-M9NZQ==
age: 3
X-Firefox-Spdy: h2
imgs.tagadamedia.com/media/us/20/450x70-2089.svg
138.199.36.10200 OK 0 B URL HTTP/2 imgs.tagadamedia.com/media/us/20/450x70-2089.svg
IP 138.199.36.10:0
ASN #60068 Datacamp Limited
GET /media/us/20/450x70-2089.svg HTTP/1.1
Host: imgs.tagadamedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Mar 2023 13:51:35 GMT
content-type: image/svg+xml
vary: Accept-Encoding
server: BunnyCDN-DE1-1053
cdn-pullzone: 61945
cdn-uid: 5d127034-96a6-45e8-a482-4f40615f18db
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Mon, 24 Jan 2022 11:11:38 GMT
x-amz-id-2: +rpdt03bRSczyjpP3KDBr+3bvH1RdGv2Ry3kWLQZOyM1YipGst2hd4YY3cvsGfMvxGMzOEFXhW8=
x-amz-request-id: WPFPH5GNAJMCRQ32
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 01/15/2023 11:20:14
cdn-edgestorageid: 1053
cdn-status: 200
cdn-requestid: cc2394df607b82d18812bff47193abd2
cdn-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
create.leadid.com/2.11.9/SaveDom?msn=2&pid=3c1fa500-2231-492f-ae55-984dd2f30310&token=43509BBD-5931-8181-A432-8C72DC62E7AB&_=418635894
3.216.75.124200 OK 0 B URL HTTP/2 create.leadid.com/2.11.9/SaveDom?msn=2&pid=3c1fa500-2231-492f-ae55-984dd2f30310&token=43509BBD-5931-8181-A432-8C72DC62E7AB&_=418635894
IP 3.216.75.124:0
POST /2.11.9/SaveDom?msn=2&pid=3c1fa500-2231-492f-ae55-984dd2f30310&token=43509BBD-5931-8181-A432-8C72DC62E7AB&_=418635894 HTTP/1.1
Host: create.leadid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 512
Origin: https://samplesavenue.com
Connection: keep-alive
Referer: https://samplesavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Mar 2023 13:51:39 GMT
content-type: text/plain;charset=UTF-8
server: nginx
set-cookie: rgisanonymous=false; expires=Wed, 05-Apr-2023 13:51:39 GMT; Max-Age=2592000; path=/
rguserid=1a7a1200-3e7a-4cfe-ae17-6e0287e7c3fe; expires=Wed, 05-Apr-2023 13:51:39 GMT; Max-Age=2592000; path=/
rguuid=true; expires=Wed, 05-Apr-2023 13:51:39 GMT; Max-Age=2592000; path=/
rgisanonymous=true; expires=Wed, 05-Apr-2023 13:51:39 GMT; Max-Age=2592000; path=/
cache-control: no-cache, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type
access-control-max-age: 1728000
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2