tracking.tgmfr.com/aff_c?offer_id=1720&aff_id=1841&source=digital&aff_sub=100&aff_sub2=63cc3995158ea9000112afaa&aff_sub3=100_2049
52.16.67.239302 Found 613 B URL HTTP/1.1 tracking.tgmfr.com/aff_c?offer_id=1720&aff_id=1841&source=digital&aff_sub=100&aff_sub2=63cc3995158ea9000112afaa&aff_sub3=100_2049
IP 52.16.67.239:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (479)
Hash 293bf183ea9be1a8347d94592026a39d
c56aa426cb73e027b5fb39fad2bcb239b65c9b27
46dad5743dbb1a31225100065cbe152ad99b97a592c503dfb306d864f259bd80
GET /aff_c?offer_id=1720&aff_id=1841&source=digital&aff_sub=100&aff_sub2=63cc3995158ea9000112afaa&aff_sub3=100_2049 HTTP/1.1
Host: tracking.tgmfr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 21 Jan 2023 22:21:38 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 613
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Location: https://vouchersavenue.com/300-clothing-gift-card/?lastname={lastname}&firstname={firstname}&gender={gender}&email={email}&birthdate={birthdate}&phone={phone}&address={address}&postal_code={postal_code}&locality={locality}&administrative_area_level_1={state}&source=digital&aff_sub=100&aff_sub2=63cc3995158ea9000112afaa&aff_sub3=100_2049&hoid=102dd5f0be0c13ce41eb51536f3098
P3p: CP="NOI CUR OUR NOR INT"
Pragma: no-cache
Set-Cookie: enc_aff_session_1720=ENC03e9cdc4585fdcd6dce181c36620293f0821c7dbcb8a4f25e1cc84ae253d677e104dae00d1371775603e4e84cd895a5386f87d5443dca4e1a32a318f959b9f1a7f3d632dd1fc2d02002b2e40bc6de537073f9491fe963d3e477d75e77e4776369f2c4010d588b53a5bba6127ab30a34d8b8e52de4d36acba3de46aff66ccb153b3d356b310ecb70b83db01c3a092b809777a00b5ca29c5e6eecb2edd384e804253116fd6c3; expires=Sun, 22 Jan 2023 22:21:38 GMT; path=/; SameSite=None; Secure
ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIxMDUuMCIsIm1vYmlsZV9jYXJyaWVyIjoiPyIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgWDY0OyBSdjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMCIsImFjY2VwdF9sYW5ndWFnZSI6ImVuLVVTLGVuO3E9MC41IiwiY29ubmVjdGlvbl9zcGVlZCI6ImJyb2FkYmFuZCJ9; expires=Tue, 16 Dec 2025 09:01:38 GMT; path=/; SameSite=None; Secure
Tracking_id: 102dd5f0be0c13ce41eb51536f3098
X-Robots-Tag: noindex, nofollow
Access-Control-Allow-Origin: *
X-Request-Id: 38b272a2b8d177f9349032b76b638e7b
Access-Control-Allow-Headers: Tune-SDK-Version
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 4714c95a0c854e38f9be444f9343bf14
07ce5eb635448f2b3bafbe51e4dfeef47cdf4f7b
4d47e08c9afb704096e93a51f6e95c0dc7c7bc31e67ded39998ff37ed56e0965
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4D47E08C9AFB704096E93A51F6E95C0DC7C7BC31E67DED39998FF37ED56E0965"
Last-Modified: Sat, 21 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4272
Expires: Sat, 21 Jan 2023 23:32:51 GMT
Date: Sat, 21 Jan 2023 22:21:39 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 8997fa58a7262e8fd559d64b40511a1b
0aa1c4365c28f45e4d7a8a234fbcf51cd009e083
1580d1145f125c765e40e5983cb4bb4e2424010d2920a25ea7da992485da0dea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1580D1145F125C765E40E5983CB4BB4E2424010D2920A25EA7DA992485DA0DEA"
Last-Modified: Sat, 21 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4166
Expires: Sat, 21 Jan 2023 23:31:05 GMT
Date: Sat, 21 Jan 2023 22:21:39 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 21 Jan 2023 21:34:45 GMT
content-type: application/json
age: 2814
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 38c102db4bcfb9c4fb19174986950fd3
51c2cc8a3aca4da5c9ab3438467c29203fc0b0c3
dad6b64bc9f4dd827471ccc2e5273fceee574685376083aaa80f9d2f918037f2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DAD6B64BC9F4DD827471CCC2E5273FCEEE574685376083AAA80F9D2F918037F2"
Last-Modified: Fri, 20 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9776
Expires: Sun, 22 Jan 2023 01:04:35 GMT
Date: Sat, 21 Jan 2023 22:21:39 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 6ennr2XSfKwiB996vnrrP0hLdNOj5uUvb67VUpF/7CTfrUnhuUB2KN7lIycNyDkm2ro5uUkNEq0=
x-amz-request-id: S91FSKJQSRSGZP38
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 21 Jan 2023 21:47:01 GMT
age: 2078
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jan 2023 22:21:39 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Expires, Pragma, Content-Type, Backoff, Last-Modified, Cache-Control, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 21 Jan 2023 22:17:29 GMT
age: 250
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
143.204.42.156200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.156:0
Hash 46291afec5815bbd455baed0877222af
f766e148b64a8387b6f0ac379ae63ff8542fbc0b
4bf573208375e79bb2426b30645905c5fc6b7a294265dcb2b4f6eca2422ab2e7
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Sat, 21 Jan 2023 22:21:39 GMT
Etag: "63cb22c2-1d7"
Server: ECS (dcb/7FA5)
X-Cache: Miss from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 0zxiAfmh079Vml_tyZmdHxEylNGNBPsoYP5ahC6QBosnULf2tP6yvA==
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash fc96297d0b59147e8f6052b16f1ca13f
23aeddfa143bb9be19b2ed06f2024a3a8aa120ce
034327c6ada560c662f451f3c95cd8531482d4ab51629e95875fab54c8f3e49a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3411
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 21 Jan 2023 22:21:39 GMT
Last-Modified: Sat, 21 Jan 2023 21:24:48 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
vouchersavenue.com/300-clothing-gift-card/?lastname={lastname}&firstname={firstname}&gender={gender}&email={email}&birthdate={birthdate}&phone={phone}&address={address}&postal_code={postal_code}&locality={locality}&administrative_area_level_1={state}&source=digital&aff_sub=100&aff_sub2=63cc3995158ea9000112afaa&aff_sub3=100_2049&hoid=102dd5f0be0c13ce41eb51536f3098
3.234.76.239302 Found 966 B URL HTTP/2 vouchersavenue.com/300-clothing-gift-card/?lastname={lastname}&firstname={firstname}&gender={gender}&email={email}&birthdate={birthdate}&phone={phone}&address={address}&postal_code={postal_code}&locality={locality}&administrative_area_level_1={state}&source=digital&aff_sub=100&aff_sub2=63cc3995158ea9000112afaa&aff_sub3=100_2049&hoid=102dd5f0be0c13ce41eb51536f3098
IP 3.234.76.239:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (399)
Hash 36d6a8b4a215640885507f9b728ebbb0
43b1256b4957bf9a0077a6cdd824882dd9dc3b30
f6aa8c0da7c933703c7409266cf37162bc0a623451c2417ba1a92f4dda36a714
GET /300-clothing-gift-card/?lastname={lastname}&firstname={firstname}&gender={gender}&email={email}&birthdate={birthdate}&phone={phone}&address={address}&postal_code={postal_code}&locality={locality}&administrative_area_level_1={state}&source=digital&aff_sub=100&aff_sub2=63cc3995158ea9000112afaa&aff_sub3=100_2049&hoid=102dd5f0be0c13ce41eb51536f3098 HTTP/1.1
Host: vouchersavenue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Sat, 21 Jan 2023 22:21:39 GMT
content-type: text/html; charset=UTF-8
content-length: 966
location: https://vouchersavenue.com/300-clothing-gift-card?source=digital&aff_sub=100&aff_sub2=63cc3995158ea9000112afaa&aff_sub3=100_2049&hoid=102dd5f0be0c13ce41eb51536f3098
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
set-cookie: contest_session=bZqS6ggrQ1ZgeP0QC9okZClfTeb15zwO3oJLt6FN; path=/; secure; httponly; samesite=none
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
vouchersavenue.com/300-clothing-gift-card?source=digital&aff_sub=100&aff_sub2=63cc3995158ea9000112afaa&aff_sub3=100_2049&hoid=102dd5f0be0c13ce41eb51536f3098
3.234.76.239302 Found 478 B URL HTTP/2 vouchersavenue.com/300-clothing-gift-card?source=digital&aff_sub=100&aff_sub2=63cc3995158ea9000112afaa&aff_sub3=100_2049&hoid=102dd5f0be0c13ce41eb51536f3098
IP 3.234.76.239:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f229c25990d98df62db21c81105905b8
545353351c18ab146db21ce71cf6157d2d45ea55
fa4c112ec43471384ee7c5aa13ac4847663a7f451a1dc52c400bac43589cdc5b
GET /300-clothing-gift-card?source=digital&aff_sub=100&aff_sub2=63cc3995158ea9000112afaa&aff_sub3=100_2049&hoid=102dd5f0be0c13ce41eb51536f3098 HTTP/1.1
Host: vouchersavenue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: contest_session=bZqS6ggrQ1ZgeP0QC9okZClfTeb15zwO3oJLt6FN
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 302 Found
date: Sat, 21 Jan 2023 22:21:39 GMT
content-type: text/html; charset=UTF-8
content-length: 478
location: https://vouchersavenue.com/300-clothing-gift-card/signup/1
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
set-cookie: contest_session=bZqS6ggrQ1ZgeP0QC9okZClfTeb15zwO3oJLt6FN; path=/; secure; httponly; samesite=none
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
push.services.mozilla.com/
34.215.55.199101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.215.55.199:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 7Zk9bNyL2JRJyneeIw5SSw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: hWRhfVU0bQoqp1B+J/M0l0R0IWY=
vouchersavenue.com/300-clothing-gift-card/signup/1
3.234.76.239200 OK 4.1 kB URL HTTP/2 vouchersavenue.com/300-clothing-gift-card/signup/1
IP 3.234.76.239:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1306), with CRLF, LF line terminators
Hash 284999e09435fadb93a90a3d17a96384
f8e172a0d614925945a227eb63d9d5e6fc91219a
685c91cfeee0408c577d59ca0ae74cfbae8165da85d0211862db71f6f03f22bc
Analyzer Verdict Alert fortinet Phishing
GET /300-clothing-gift-card/signup/1 HTTP/1.1
Host: vouchersavenue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: contest_session=bZqS6ggrQ1ZgeP0QC9okZClfTeb15zwO3oJLt6FN
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Jan 2023 22:21:40 GMT
content-type: text/html; charset=UTF-8
content-length: 4087
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
set-cookie: contest_session=bZqS6ggrQ1ZgeP0QC9okZClfTeb15zwO3oJLt6FN; path=/; secure; httponly; samesite=none
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 048c6078c93b76fb2eaea80d53037605
8f467ea1600c0f589f7693e6dc724f836039b5cf
5301d0b99d1eae2b9034ace3c61e761244ab3d7da86eddab0cfcb19372108d59
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3336
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 21 Jan 2023 22:21:40 GMT
Etag: "63cc18fa-118"
Last-Modified: Sat, 21 Jan 2023 21:26:04 GMT
Server: ECS (amb/6BC2)
X-Cache: HIT
Content-Length: 280
vouchersavenue.com/css/themes/bigbtn.css?id=72502ea78e1c771fbd56
3.234.76.239200 OK 2.4 kB URL HTTP/2 vouchersavenue.com/css/themes/bigbtn.css?id=72502ea78e1c771fbd56
IP 3.234.76.239:0
File type ASCII text, with very long lines (12099), with no line terminators
Hash 425b79d023a9d4be936349b0fecab88d
08c3b6163cda144c867363acac737363e6cdfe1c
3f1ed950ed926065d4598155b0f6e33eec895c1938951e71a8478c3e8b486115
Analyzer Verdict Alert fortinet Phishing
GET /css/themes/bigbtn.css?id=72502ea78e1c771fbd56 HTTP/1.1
Host: vouchersavenue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/300-clothing-gift-card/signup/1
Cookie: contest_session=bZqS6ggrQ1ZgeP0QC9okZClfTeb15zwO3oJLt6FN
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Jan 2023 22:21:40 GMT
content-type: text/css
content-length: 2379
last-modified: Fri, 20 Jan 2023 10:36:50 GMT
etag: "2f43-5f2afa087b480-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 8297a7e7fb5d035686b39c2334b3a23f
054b5f0ad3e5400b910096b0d9742fc775eb43f3
bc4b0d28b1337627e4876888aeee94c8da1a017eabd61258dfc6b8ab7da60468
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6330
Cache-Control: max-age=121737
Content-Type: application/ocsp-response
Date: Sat, 21 Jan 2023 22:21:40 GMT
Etag: "63cb8543-1d7"
Expires: Mon, 23 Jan 2023 08:10:37 GMT
Last-Modified: Sat, 21 Jan 2023 06:25:07 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash c0f67edfa92ff11474d17ad3160ed43e
a43cc627d3c9258bdbe14ff3ceeed1c98496ff50
309dea4b94ceda4ec43c2f944cdfad61434c96eaafd172bc55c39545f3bf5a1e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 21 Jan 2023 22:21:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=
142.250.74.168200 OK 38 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=
IP 142.250.74.168:0
File type ASCII text, with very long lines (1921)
Hash 68f4999603bb8db083e95563bf75484c
cb879e3f24fb608db1774b7641a2999c19d19b57
49d4ffbe6988c1550e447883230879f57e653cef0892a2b4a2b356f1a205f2f7
GET /gtag/js?id= HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 21 Jan 2023 22:21:40 GMT
expires: Sat, 21 Jan 2023 22:21:40 GMT
cache-control: private, max-age=900
last-modified: Sat, 21 Jan 2023 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 37836
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash c0f67edfa92ff11474d17ad3160ed43e
a43cc627d3c9258bdbe14ff3ceeed1c98496ff50
309dea4b94ceda4ec43c2f944cdfad61434c96eaafd172bc55c39545f3bf5a1e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 21 Jan 2023 22:21:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 16e3606a37598bd4109aa1bd6784b88f
9a55d220410579aa214df0b7a3be0f9ac71fe067
6e894422084074d5c599c6ba300f38fd506a5bda101daa58ccba686f12f283e1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6E894422084074D5C599C6BA300F38FD506A5BDA101DAA58CCBA686F12F283E1"
Last-Modified: Fri, 20 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13201
Expires: Sun, 22 Jan 2023 02:01:41 GMT
Date: Sat, 21 Jan 2023 22:21:40 GMT
Connection: keep-alive
cache.consentframework.com/js/pa/26948/c/Ifv2D/stub
172.67.74.105200 OK 1.3 kB URL HTTP/2 cache.consentframework.com/js/pa/26948/c/Ifv2D/stub
IP 172.67.74.105:0
File type ASCII text, with very long lines (1604), with no line terminators
Hash 00e9886ec184deac8f9db81980730581
5ae4e3906604cbf7f6a75fac9fafbf11e1e59f40
44a575025b36d5fd8a0f3f8dd5104fc199b21f2af079421bc5bbe33e2c0763be
GET /js/pa/26948/c/Ifv2D/stub HTTP/1.1
Host: cache.consentframework.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 21 Jan 2023 22:21:40 GMT
content-type: text/javascript; charset=UTF-8
cache-control: max-age=3600
strict-transport-security: max-age=15724800; includeSubDomains; preload
last-modified: Sat, 21 Jan 2023 21:47:45 GMT
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qzxkIIYOJFxXi%2B396chn8n6y6%2F1ZUdQM0lJaWA72GcD3VCT%2BN2aCCLC15TwySA5dJ3M9MM9ZdawQMnsX4j284X0F%2FDPtliVGuOfZgv%2BJwIyB5hKbwlAfk%2BkBJnzN%2BiySgEK3O485zHseZMx6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78d371b6cd19b503-OSL
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 16e3606a37598bd4109aa1bd6784b88f
9a55d220410579aa214df0b7a3be0f9ac71fe067
6e894422084074d5c599c6ba300f38fd506a5bda101daa58ccba686f12f283e1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6E894422084074D5C599C6BA300F38FD506A5BDA101DAA58CCBA686F12F283E1"
Last-Modified: Fri, 20 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13201
Expires: Sun, 22 Jan 2023 02:01:41 GMT
Date: Sat, 21 Jan 2023 22:21:40 GMT
Connection: keep-alive
vouchersavenue.com/css/app.css?id=2921018d355133678ee1
3.234.76.239200 OK 47 kB URL HTTP/2 vouchersavenue.com/css/app.css?id=2921018d355133678ee1
IP 3.234.76.239:0
File type ASCII text, with very long lines (34575)
Hash e5855971146b2e48cf938abcded50232
e48d5931ba538d48c6c2dfc4bae56a0425774356
2adcd2312c1d831f7c6d1ea1312b1a8d1dfbc822c5a48ec82522972ff64d1aa0
Analyzer Verdict Alert fortinet Phishing
GET /css/app.css?id=2921018d355133678ee1 HTTP/1.1
Host: vouchersavenue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/300-clothing-gift-card/signup/1
Cookie: contest_session=bZqS6ggrQ1ZgeP0QC9okZClfTeb15zwO3oJLt6FN
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Jan 2023 22:21:40 GMT
content-type: text/css
content-length: 47155
last-modified: Fri, 20 Jan 2023 10:36:50 GMT
etag: "3bd31-5f2afa087b480-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
vouchersavenue.com/ehawktalon.js
3.234.76.239200 OK 14 kB URL HTTP/2 vouchersavenue.com/ehawktalon.js
IP 3.234.76.239:0
File type Unicode text, UTF-8 text, with very long lines (32046)
Hash 0f0cb03c72e2d87095aa2107ca944c75
71dcb06e8cdacdae437510d182922bb1a103530c
1f01c055b2af0e645f23d8917630c276b10e0f056208ccb12f5e238acea301b2
Analyzer Verdict Alert fortinet Phishing
GET /ehawktalon.js HTTP/1.1
Host: vouchersavenue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/300-clothing-gift-card/signup/1
Cookie: contest_session=bZqS6ggrQ1ZgeP0QC9okZClfTeb15zwO3oJLt6FN
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Jan 2023 22:21:40 GMT
content-type: application/javascript
content-length: 13595
last-modified: Mon, 16 Jan 2023 08:29:06 GMT
etag: "ab47-5f25d605ad880-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
choices.consentframework.com/js/pa/26948/c/Ifv2D/cmp
51.158.28.83200 OK 200 kB URL HTTP/1.1 choices.consentframework.com/js/pa/26948/c/Ifv2D/cmp
IP 51.158.28.83:0
File type Unicode text, UTF-8 text, with very long lines (65511), with no line terminators
Size 200 kB (200381 bytes)
Hash 689158a35cf3789c6c58b3a8db35c247
8e69b7b3cc7b7f4fc6d094946661b44986d016d1
46510f3d7ed62b8ef2af564ffd423aea2b5b43640b95f8aa11408474a663302a
GET /js/pa/26948/c/Ifv2D/cmp HTTP/1.1
Host: choices.consentframework.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sat, 21 Jan 2023 22:21:40 GMT
Content-Type: text/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: private, max-age=3600
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Content-Encoding: gzip
imgs.tagadamedia.com/media/us/14/us-vouchers-hm-giftcard-750x350-1407.jpg
169.150.247.39200 OK 273 kB URL HTTP/2 imgs.tagadamedia.com/media/us/14/us-vouchers-hm-giftcard-750x350-1407.jpg
IP 169.150.247.39:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 750x350, components 3\012- data
Size 273 kB (272736 bytes)
Hash 8b5053b721df726325310d74ba7f92b9
6ad28b9c0b8c7b2f4ec8326b0f804bec18ad68cb
01a5aee1c1b59a8bfd4693e87cfe831e8484a9aacf65fc239393107e1cd54fbb
GET /media/us/14/us-vouchers-hm-giftcard-750x350-1407.jpg HTTP/1.1
Host: imgs.tagadamedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 21 Jan 2023 22:21:40 GMT
content-type: image/jpeg
content-length: 272736
server: BunnyCDN-DE1-1082
cdn-pullzone: 61945
cdn-uid: 5d127034-96a6-45e8-a482-4f40615f18db
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Mon, 22 Feb 2021 14:51:57 GMT
x-amz-id-2: vM97Ii5LYGkHBhrV8tYzQc2jX14Jv2mPRJu49JEuyW2X/JdSVYaU+a/duCpN3qEb9FkJjKAVTr0=
x-amz-request-id: 8SFRC7Z6R6X00C6N
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 01/17/2023 14:47:13
cdn-edgestorageid: 1054
cdn-status: 200
cdn-requestid: a07f828d217171b3831ad365b6e138ba
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
imgs.tagadamedia.com/media/us/14/us-vouchers-hm-giftcard-580x690-1-1406.jpg
169.150.247.39200 OK 409 kB URL HTTP/2 imgs.tagadamedia.com/media/us/14/us-vouchers-hm-giftcard-580x690-1-1406.jpg
IP 169.150.247.39:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 580x690, components 3\012- data
Size 409 kB (409296 bytes)
Hash 240a6c3bc3528599b447e135b16e8668
27a5936e39412577bef2b1828e0f146812f940c4
0cb1b453c6f386104d237792f870876a25144968a5ba156b7208c7e21ac3763d
GET /media/us/14/us-vouchers-hm-giftcard-580x690-1-1406.jpg HTTP/1.1
Host: imgs.tagadamedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 21 Jan 2023 22:21:40 GMT
content-type: image/jpeg
content-length: 409296
server: BunnyCDN-DE1-1082
cdn-pullzone: 61945
cdn-uid: 5d127034-96a6-45e8-a482-4f40615f18db
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Mon, 22 Feb 2021 14:51:57 GMT
x-amz-id-2: Dwwst2QkZkvhS2dm6dmzFGSm9W7OdMJZIGkqmGtRSnlfsqNgudsQO+Ze+Imfmo3rjj+F/iplmbU=
x-amz-request-id: 0TY2GFPKYS2W2A1F
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 01/21/2023 21:21:49
cdn-edgestorageid: 1076
cdn-status: 200
cdn-requestid: c2f90f128e28acceb809cf29b257b20e
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
vouchersavenue.com/js/app.js?id=08c614bdc9122e9fa6c9
3.234.76.239200 OK 356 kB URL HTTP/2 vouchersavenue.com/js/app.js?id=08c614bdc9122e9fa6c9
IP 3.234.76.239:0
Size 356 kB (355852 bytes)
Hash a2e89f2c1b0ca8ef2767ed4cf7341101
4aba316bb97b6ec87c09284415e0a495d75b067a
bf4c87c244de6817932e97967364fbd011e9a7cec1fbd42559cd2881818c23a2
Analyzer Verdict Alert fortinet Phishing
GET /js/app.js?id=08c614bdc9122e9fa6c9 HTTP/1.1
Host: vouchersavenue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/300-clothing-gift-card/signup/1
Cookie: contest_session=bZqS6ggrQ1ZgeP0QC9okZClfTeb15zwO3oJLt6FN
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Jan 2023 22:21:40 GMT
content-type: application/javascript
last-modified: Fri, 20 Jan 2023 10:36:50 GMT
etag: "ebbf3-5f2afa087b480-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 6033dad399355478c264e1c7c27e7f62
7d5546258015b8a834ee87b5a679be0545723e9d
5126b70d194535387e80aab563a02db1ade53c682b9db45eb533ff4001e6ed1c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5126B70D194535387E80AAB563A02DB1ADE53C682B9DB45EB533FF4001E6ED1C"
Last-Modified: Fri, 20 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17185
Expires: Sun, 22 Jan 2023 03:08:06 GMT
Date: Sat, 21 Jan 2023 22:21:41 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 6033dad399355478c264e1c7c27e7f62
7d5546258015b8a834ee87b5a679be0545723e9d
5126b70d194535387e80aab563a02db1ade53c682b9db45eb533ff4001e6ed1c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5126B70D194535387E80AAB563A02DB1ADE53C682B9DB45EB533FF4001E6ED1C"
Last-Modified: Fri, 20 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17185
Expires: Sun, 22 Jan 2023 03:08:06 GMT
Date: Sat, 21 Jan 2023 22:21:41 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 6033dad399355478c264e1c7c27e7f62
7d5546258015b8a834ee87b5a679be0545723e9d
5126b70d194535387e80aab563a02db1ade53c682b9db45eb533ff4001e6ed1c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5126B70D194535387E80AAB563A02DB1ADE53C682B9DB45EB533FF4001E6ED1C"
Last-Modified: Fri, 20 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8548
Expires: Sun, 22 Jan 2023 00:44:09 GMT
Date: Sat, 21 Jan 2023 22:21:41 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F71b4fb2b-957e-4b2e-a736-8b37c06f7c95.jpeg
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F71b4fb2b-957e-4b2e-a736-8b37c06f7c95.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 03a13d74184595ec581932d00fc11945
656445fb81ad942ccb17044072dd7c1b4654b2c8
bed0c7c387b9e8ff3f1033f65544ce8527fa805d691ef805df01ca0dac938273
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F71b4fb2b-957e-4b2e-a736-8b37c06f7c95.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14414
x-amzn-requestid: 516b8fe5-60c2-43bd-94ad-c8f3a24476fd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fHNWREIoIAMFxLg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cc5c27-1dba5be24b3bec7b0072e1af;Sampled=0
x-amzn-remapped-date: Sat, 21 Jan 2023 21:41:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: CEKO3c9DXyHiFKW1kRPjR1c7bO7WbdiD-o3EhHDRtaSZVN5dI9mVOQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 21 Jan 2023 21:50:43 GMT
age: 1858
etag: "656445fb81ad942ccb17044072dd7c1b4654b2c8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4b9c3b02-6a9e-471d-9d0c-2b50255f00f9.jpeg
34.120.237.76200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4b9c3b02-6a9e-471d-9d0c-2b50255f00f9.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 54bb2c2439cbf0cefc3075f25576f161
e4e506d7acc877b266c18ae6da3b948e0d41bb1e
8cfef01c8eea67086fdea9865d760f9ed1ecc15dc42f3b2c94fc85d609a31aa2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4b9c3b02-6a9e-471d-9d0c-2b50255f00f9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9334
x-amzn-requestid: 23f9071b-5274-4c6a-9a4a-d63ea74c7483
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fHNWQETCoAMFdjw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cc5c27-393e62854ba77f783f142985;Sampled=0
x-amzn-remapped-date: Sat, 21 Jan 2023 21:41:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 3n5ILyjGGUjvn66yRrz02tfI9FZpfSsZq5c6Oo_kB9OCOpBxD6aAAw==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 21 Jan 2023 21:46:00 GMT
age: 2141
etag: "e4e506d7acc877b266c18ae6da3b948e0d41bb1e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88cefb6f-1c5c-4b01-a9b7-a36abdbbc20c.png
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88cefb6f-1c5c-4b01-a9b7-a36abdbbc20c.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 884f5d7c3a0ee782d4f3fe9f16099891
1c80645a9b9879d1e4b57c546ba35131ba3c28fd
a7b63d331e09518150e6d9eff0c1d80928185ed0734cf1992af7df0021b6886f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88cefb6f-1c5c-4b01-a9b7-a36abdbbc20c.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10497
x-amzn-requestid: 3bc349ba-7da8-48c8-aa90-2c48c93a023d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e3fnEG8mIAMFgMw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c612f9-08e751fc7f0eacb43fc92712;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 03:16:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: OklYfNWMWQdgf6QiC28Dq7wt5zr-FlQC-3NdIdsaA03HvhzwJlgGpQ==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 21 Jan 2023 05:14:48 GMT
age: 61613
etag: "1c80645a9b9879d1e4b57c546ba35131ba3c28fd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcdc45398-1d4d-45ac-94a6-2cc6d910d8b8.jpeg
34.120.237.76200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcdc45398-1d4d-45ac-94a6-2cc6d910d8b8.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 375f2cf298e45122ca727fb63f0e5ea7
eb746e6842127741552c7dcc48e8a92193ca3075
8b5e5432f69dad1428c3a735f7a0d07823658e03befc7b6e15f6f5c3306fbaa8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcdc45398-1d4d-45ac-94a6-2cc6d910d8b8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5196
x-amzn-requestid: 24221211-6673-4d7b-88de-2ef8c9a62f1b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fHNWRFPUIAMFf-w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cc5c27-286d3bb84ad3362d615479ed;Sampled=0
x-amzn-remapped-date: Sat, 21 Jan 2023 21:41:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zqdZgSWyXzoBBGx5Ef3zI6evJsyFmKlShUQvB3TdBGm-wrfU3ACoWw==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 21 Jan 2023 21:52:26 GMT
age: 1755
etag: "eb746e6842127741552c7dcc48e8a92193ca3075"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa8dd86d-d1f8-4246-a33c-c80dbc2c2538.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa8dd86d-d1f8-4246-a33c-c80dbc2c2538.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b429642344aabb638e3acbd63463fe8d
f9ea147291359b0fb6e7a78983643949665003d7
acda68bb2566774c9b279e048b62aaaa5a27b87e783048d6765e598ac2c584fd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa8dd86d-d1f8-4246-a33c-c80dbc2c2538.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12743
x-amzn-requestid: 6c542779-10fa-4bbd-9294-3127a104de12
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fHNkBEa3IAMF6-w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cc5c7f-4d5a606011cb84fd14d7b175;Sampled=0
x-amzn-remapped-date: Sat, 21 Jan 2023 21:43:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NLwQoDRTYi8Ol0cDp3gaJpQ7-0kq6ITtm9lzj1qFrKe2oGOK7YWMzg==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 21 Jan 2023 21:51:56 GMT
age: 1785
etag: "f9ea147291359b0fb6e7a78983643949665003d7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F70113ea7-c91e-43d6-831d-6e4d2bfdedd2.jpeg
34.120.237.76200 OK 18 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F70113ea7-c91e-43d6-831d-6e4d2bfdedd2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2e6e79a6d39c1a68916ba137d2a26bc8
008b963daf94069a9ad22e5f170e2f3569e73709
df945becb760ffae4d118bf4bd7f10e766003cf8a4134687969d0f6a47a39319
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F70113ea7-c91e-43d6-831d-6e4d2bfdedd2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 18374
x-amzn-requestid: 7b64c39d-6328-4c21-884e-c35a72227396
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fHN7fGzpoAMFj5w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cc5d16-78583c755c0a76b5268c879d;Sampled=0
x-amzn-remapped-date: Sat, 21 Jan 2023 21:45:58 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jeBRrvGvpmegIpee7ux6WNGJJQ2XXXdLs91g8hX4HFr2gChsd_4GOg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Sat, 21 Jan 2023 21:45:58 GMT
age: 2143
etag: "008b963daf94069a9ad22e5f170e2f3569e73709"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
choices.consentframework.com/api/v1/public/consent-string
51.158.28.83200 OK 0 B URL HTTP/1.1 choices.consentframework.com/api/v1/public/consent-string
IP 51.158.28.83:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v1/public/consent-string HTTP/1.1
Host: choices.consentframework.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://vouchersavenue.com/
Origin: https://vouchersavenue.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sat, 21 Jan 2023 22:21:41 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
choices.consentframework.com/api/v1/public/consent-string
51.158.28.83200 OK 237 B URL HTTP/1.1 choices.consentframework.com/api/v1/public/consent-string
IP 51.158.28.83:0
File type JSON data\012- , ASCII text, with very long lines (453), with no line terminators
Hash 74aaa5644b540cd72e1a76c37c8a6f7a
c8f2293599f830a2f4655dc1153acb5a61f05c7a
79b33eb976490708eaf47f5d35b2a004318988019e200e17340e9ffe742f8494
POST /api/v1/public/consent-string HTTP/1.1
Host: choices.consentframework.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vouchersavenue.com/
Content-Type: application/json
Origin: https://vouchersavenue.com
Content-Length: 542
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sat, 21 Jan 2023 22:21:41 GMT
Content-Type: application/json; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Content-Encoding: gzip
choices.consentframework.com/api/v1/public/user-action
51.158.28.83200 OK 0 B URL HTTP/1.1 choices.consentframework.com/api/v1/public/user-action
IP 51.158.28.83:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v1/public/user-action HTTP/1.1
Host: choices.consentframework.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://vouchersavenue.com/
Origin: https://vouchersavenue.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sat, 21 Jan 2023 22:21:41 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
choices.consentframework.com/api/v1/public/user-action
51.158.28.83200 OK 0 B URL HTTP/1.1 choices.consentframework.com/api/v1/public/user-action
IP 51.158.28.83:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v1/public/user-action HTTP/1.1
Host: choices.consentframework.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vouchersavenue.com/
Content-Type: application/json
Origin: https://vouchersavenue.com
Content-Length: 159
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sat, 21 Jan 2023 22:21:41 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash fbf0d6b57431b327402c628bb9f45ee9
1dbe9bda59be40b902610aa854446535cc0d44c5
94337039163a5d77ee6233e3ed63d2a91310a2ced7e06f02e839ab6e19ea767e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5520
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 21 Jan 2023 22:21:41 GMT
Last-Modified: Sat, 21 Jan 2023 20:49:41 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
js.cookieless-data.com/GS.d?pa=26948&uf_bday=&uf_gender=&cmp=0&u=https%3A%2F%2Fvouchersavenue.com%2F300-clothing-gift-card%2Fsignup%2F1&r=&rand=1674339700248&gdpr=1&gdpr_consent=CPl764APl764ABcAIBENC0CgAAAAAH_AABpwIyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEZACTDVuIAuzLHAm0DCKBECMKwkIgFABBQDC0QEADg4KdlYBPrCBAAgFAEYEQIcAUYEAgAAEgCQiACQIsEAAAIgEAAIAEAiEABAwCCgAsDAIAAQDQMQAoABAkAMiAiKUwICoEggJbKhBKC6Q0wgCrLACgERsFAAiCQAVgACAsHAMESAlYsECTEG2QAAAAAAAA&globalscope=false&cookieless_optout=0&tbp=true
51.15.145.115200 OK 0 B URL HTTP/1.1 js.cookieless-data.com/GS.d?pa=26948&uf_bday=&uf_gender=&cmp=0&u=https%3A%2F%2Fvouchersavenue.com%2F300-clothing-gift-card%2Fsignup%2F1&r=&rand=1674339700248&gdpr=1&gdpr_consent=CPl764APl764ABcAIBENC0CgAAAAAH_AABpwIyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEZACTDVuIAuzLHAm0DCKBECMKwkIgFABBQDC0QEADg4KdlYBPrCBAAgFAEYEQIcAUYEAgAAEgCQiACQIsEAAAIgEAAIAEAiEABAwCCgAsDAIAAQDQMQAoABAkAMiAiKUwICoEggJbKhBKC6Q0wgCrLACgERsFAAiCQAVgACAsHAMESAlYsECTEG2QAAAAAAAA&globalscope=false&cookieless_optout=0&tbp=true
IP 51.15.145.115:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /GS.d?pa=26948&uf_bday=&uf_gender=&cmp=0&u=https%3A%2F%2Fvouchersavenue.com%2F300-clothing-gift-card%2Fsignup%2F1&r=&rand=1674339700248&gdpr=1&gdpr_consent=CPl764APl764ABcAIBENC0CgAAAAAH_AABpwIyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEZACTDVuIAuzLHAm0DCKBECMKwkIgFABBQDC0QEADg4KdlYBPrCBAAgFAEYEQIcAUYEAgAAEgCQiACQIsEAAAIgEAAIAEAiEABAwCCgAsDAIAAQDQMQAoABAkAMiAiKUwICoEggJbKhBKC6Q0wgCrLACgERsFAAiCQAVgACAsHAMESAlYsECTEG2QAAAAAAAA&globalscope=false&cookieless_optout=0&tbp=true HTTP/1.1
Host: js.cookieless-data.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sat, 21 Jan 2023 22:21:41 GMT
Content-Length: 0
Connection: keep-alive
Expires: Tue, 01 Jan 2000 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
X-Xss-Protection: 0
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
P3p: CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
www.google-analytics.com/analytics.js
142.250.74.110200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.110:0
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Sat, 21 Jan 2023 20:41:07 GMT
expires: Sat, 21 Jan 2023 22:41:07 GMT
cache-control: public, max-age=7200
age: 6034
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 1127a765b20d7a3d3d33ee8b4f8c13f6
9147899d89018f38864448d7a2c85336263429af
d2295e0074bb57f7ce314f5893248a0eff8bb0f3ce5cb5ccd3ab3cfc24d09773
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D2295E0074BB57F7CE314F5893248A0EFF8BB0F3CE5CB5CCD3AB3CFC24D09773"
Last-Modified: Sat, 21 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8496
Expires: Sun, 22 Jan 2023 00:43:17 GMT
Date: Sat, 21 Jan 2023 22:21:41 GMT
Connection: keep-alive
vouchersavenue.com/sw.js
3.234.76.239200 OK 191 B IP 3.234.76.239:0
Hash ba2e477c78d6ddfb80c11d6112d6f548
fb4fd2a17d23eee5f97f2de511ff96b678c44073
cce04e75f1e2cd6284b7974f87fe1bedc8ba1ef71258671ccf14c115fb7fe75f
Analyzer Verdict Alert fortinet Phishing
GET /sw.js HTTP/1.1
Host: vouchersavenue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: contest_session=bZqS6ggrQ1ZgeP0QC9okZClfTeb15zwO3oJLt6FN
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Jan 2023 22:21:41 GMT
content-type: application/x-javascript
content-length: 191
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
set-cookie: contest_session=bZqS6ggrQ1ZgeP0QC9okZClfTeb15zwO3oJLt6FN; path=/; secure; httponly; samesite=none
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
data.perfmaker.net/website/614210c6324d8/tag.js
212.83.189.65200 OK 1.3 kB URL HTTP/1.1 data.perfmaker.net/website/614210c6324d8/tag.js
IP 212.83.189.65:0
File type ASCII text, with very long lines (655)
Hash 1a67bab0b9942d7a5929922e187a3d4a
7adc025fa9d92689c4d1439da5c29d6ca76e256f
b300b3258b52e4247f20b1a73ca1e04da9be81ca4c6f5e1fb406038f07247061
GET /website/614210c6324d8/tag.js HTTP/1.1
Host: data.perfmaker.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-powered-by: Express
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
content-type: application/javascript; charset=utf-8
etag: W/"fac-GzH3QT+G/tt9TA8IteMquj3ce08"
content-encoding: gzip
date: Sat, 21 Jan 2023 22:21:41 GMT
keep-alive: timeout=5
transfer-encoding: chunked
set-cookie: sid=s4; path=/; SameSite=None; Secure
cache-control: private
analytics.tiktok.com/i18n/pixel/sdk.js?sdkid=BRK97NBJ857475I0MEDG
23.36.79.32200 OK 1.7 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/sdk.js?sdkid=BRK97NBJ857475I0MEDG
IP 23.36.79.32:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (2673)
Hash 21f7984311d0848969ce4bd37d4eb1b3
a8b2a9ed1ceae4ddfa6eef58409494d8ee373655
8521acadfcd31972f8537b140ba568dbb1d358faedd1ba1af95adfe85e9b4fae
GET /i18n/pixel/sdk.js?sdkid=BRK97NBJ857475I0MEDG HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 20230121222141617E646505941393FA0E
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf603288c19c2577690cc6f843a75ffc83c9d723a9096c1eefcc47a35dcd6da0e70654417080c00450d2580621624bb83917fe631dfaea544b53bc0c1ceba65a0531f8d208dc9bd1a091ddee81c52860b581dbe3268bec0754b8e2ea1fa064cd6706
content-encoding: gzip
content-length: 1716
x-origin-response-time: 13,104.112.235.135
x-akamai-request-id: 352b1724.186157b5
expires: Sat, 21 Jan 2023 22:21:41 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sat, 21 Jan 2023 22:21:41 GMT
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
set-cookie: _ttp=2KeeuuSMZ2Bw9WbjRLmMV8lme6M; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-cache-remote: TCP_MISS from a104-112-235-135.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=100, origin; dur=13, inner; dur=3
x-parent-response-time: 113,23.36.79.28
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/static/main.MWE2YWY2YTgzMA.js
23.36.79.32200 OK 69 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/main.MWE2YWY2YTgzMA.js
IP 23.36.79.32:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (21891)
Hash 09e9bdc02bd94387901641c0b3a1f8f0
7bf30498ae27e11f7fc60b438b090f15b67ca113
d8f79f755ae4e42d98623589e5e6420342ce199553a3b7b7713caaaec65117e9
GET /i18n/pixel/static/main.MWE2YWY2YTgzMA.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Cookie: _ttp=2KeeuuSMZ2Bw9WbjRLmMV8lme6M
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 2023011217582238FCAA3D419588756972
x-tt-trace-host: 01e57b2566233939c0b7a614d728f3c137bda4b6e8ffed077a25e96861feda11fa551f058721a274fc4605886b55ca626730a56b385a942b4129028dfc561d0b618d751524aad0a4ae27ef533e55d2e8e40a3ad2aaa7ba995375ace641e8e6ae3a
content-encoding: gzip
date: Sat, 21 Jan 2023 22:21:41 GMT
content-length: 68605
x-cache: TCP_MEM_HIT from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=4
x-akamai-request-id: 18615867
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
143.204.42.156200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.156:0
Hash 0d82a2b2295de7324c192ba360be15b5
670a4db3706739c25ca430fdd0a70527fbee1610
a0c94917e8e73bfb6298c0e32518552efc8b778c8fb3ee81c1ef503fd13dddec
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=90590
Date: Sat, 21 Jan 2023 22:21:41 GMT
Etag: "63cb0dcf-1d7"
Expires: Sun, 22 Jan 2023 23:31:31 GMT
Last-Modified: Fri, 20 Jan 2023 21:55:27 GMT
Server: ECS (bsa/EB15)
X-Cache: Miss from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: S_S6RqCo6XIhZGBc-Lg7dGqkYOwWw8J6tNVnwLXqrqDJ8xwW1ja2wA==
Age: 5764
analytics.tiktok.com/i18n/pixel/static/identify_c4832.js
23.36.79.32200 OK 31 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/identify_c4832.js
IP 23.36.79.32:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 85bd96a56a6a7f09e3e7dadc7980152e
37590c595abeb315046a293a9e53632ae2128ac4
c27be18eef006f48310fb2b0c456d6bcb1f3b0298dcb6e580724923323cb48a7
GET /i18n/pixel/static/identify_c4832.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Cookie: _ttp=2KeeuuSMZ2Bw9WbjRLmMV8lme6M
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 20230112175825D19F86481431D6BBCCFF
x-tt-trace-host: 012b38305f60bfa8a9f04bdd846fde846b507e69fff233d9a114d447ebe9f93c0f827e6bc0806bd5a24cf0439744099e1e4bba0637571d8edb56c6009f69fe5018b8e38bd5b93708ee64c377fa97874d18ceefbea8a477a7fa2bec40c3b56c69b1
content-encoding: gzip
date: Sat, 21 Jan 2023 22:21:41 GMT
content-length: 30917
x-cache: TCP_MEM_HIT from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=1, inner; dur=3
x-akamai-request-id: 18615928
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/MBwHg01glLU
142.250.74.131200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/MBwHg01glLU
IP 142.250.74.131:0
Hash ca29e11985d1dbf0f179494a9d460ec1
f4a5318872d13c13f3055d3ac2ce5e6288595650
3fbde0d5dd74b40bcec756536fb9185226ce19a83bc69965eb6e7bd3aaab5494
POST /s/gts1d4/MBwHg01glLU HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 21 Jan 2023 22:21:41 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tag.perfmaker.net/version/perfmaker-v1.65.0/perfmaker.2.js
35.190.50.134200 OK 64 kB URL HTTP/2 tag.perfmaker.net/version/perfmaker-v1.65.0/perfmaker.2.js
IP 35.190.50.134:0
File type ASCII text, with very long lines (65465)
Hash e1066f61c3d3af7a79033cb3cd6d11de
42216004e495b37ba1deb0ee5b428f06bcf95f69
f4f21982ab666eb8dc0e2f0c17e08340d5e0b89fb2dd4e9ccdfeed13fb909c18
GET /version/perfmaker-v1.65.0/perfmaker.2.js HTTP/1.1
Host: tag.perfmaker.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycds2p00HNkDYhS_L_PbbX3iVNt4_BbHF8x3ddLsnFmMeq7zHaHVlPInswB6O0hGWg8jPX_av_G7jAtB768mLWPs24wkNzK0x
x-goog-generation: 1669634448669055
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 64001
content-encoding: gzip
x-goog-hash: crc32c=89IiRQ==, md5=4QZvYcPTr3p5AzyzzW0R3g==
x-goog-storage-class: STANDARD
accept-ranges: bytes
vary: Accept-Encoding
content-length: 64001
server: UploadServer
date: Sat, 21 Jan 2023 22:17:12 GMT
age: 269
last-modified: Mon, 28 Nov 2022 11:20:48 GMT
etag: "e1066f61c3d3af7a79033cb3cd6d11de"
content-type: application/javascript; charset=utf-8
cache-control: public,max-age=3600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
api.trustedform.com/trustedform.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=16743397005360.43853322431588715
3.213.7.37301 Moved Permanently 134 B URL HTTP/2 api.trustedform.com/trustedform.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=16743397005360.43853322431588715
IP 3.213.7.37:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /trustedform.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=16743397005360.43853322431588715 HTTP/1.1
Host: api.trustedform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: awselb/2.0
date: Sat, 21 Jan 2023 22:21:41 GMT
content-type: text/html
content-length: 134
location: https://cdn.trustedform.com:443/bootstrap.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=16743397005360.43853322431588715
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/MBwHg01glLU
142.250.74.131200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/MBwHg01glLU
IP 142.250.74.131:0
Hash ca29e11985d1dbf0f179494a9d460ec1
f4a5318872d13c13f3055d3ac2ce5e6288595650
3fbde0d5dd74b40bcec756536fb9185226ce19a83bc69965eb6e7bd3aaab5494
POST /s/gts1d4/MBwHg01glLU HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 21 Jan 2023 22:21:41 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.google-analytics.com/g/collect?v=2&tid=G-7NEF16H3WB>m=2oe1i0&_p=1580983894&gcs=G100&cid=218108705.1674339700&ul=en-us&sr=1280x1024&_s=1&sid=1674339700&sct=1&seg=0&dl=https%3A%2F%2Fvouchersavenue.com%2F300-clothing-gift-card%2Fsignup%2F1&dt=Vouchers%20Avenue%20%3A%20300%24%20Clothing%20Gift%20Card&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
216.239.34.36204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-7NEF16H3WB>m=2oe1i0&_p=1580983894&gcs=G100&cid=218108705.1674339700&ul=en-us&sr=1280x1024&_s=1&sid=1674339700&sct=1&seg=0&dl=https%3A%2F%2Fvouchersavenue.com%2F300-clothing-gift-card%2Fsignup%2F1&dt=Vouchers%20Avenue%20%3A%20300%24%20Clothing%20Gift%20Card&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP 216.239.34.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-7NEF16H3WB>m=2oe1i0&_p=1580983894&gcs=G100&cid=218108705.1674339700&ul=en-us&sr=1280x1024&_s=1&sid=1674339700&sct=1&seg=0&dl=https%3A%2F%2Fvouchersavenue.com%2F300-clothing-gift-card%2Fsignup%2F1&dt=Vouchers%20Avenue%20%3A%20300%24%20Clothing%20Gift%20Card&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vouchersavenue.com
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://vouchersavenue.com
date: Sat, 21 Jan 2023 22:21:41 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
143.204.42.156200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.156:0
Hash 34fed3f43c5b3b544d7be0549003971d
6a101b44f6dc01dd1c19a69e19053e6a22e4e2a1
35154f8eb0aef5fd6cbe5b44dd7faa4a96ca1e5a3ed0075cdfca8453bcf56229
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=140765
Date: Sat, 21 Jan 2023 22:21:41 GMT
Etag: "63cbd6c9-1d7"
Expires: Mon, 23 Jan 2023 13:27:46 GMT
Last-Modified: Sat, 21 Jan 2023 12:12:57 GMT
Server: ECS (nyb/1D34)
X-Cache: Miss from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: PP5z45YRhIkDT5yslhz3_ELeLSIrwn9g4CsMM8reO78fjWN66Pfn9A==
Age: 4489
analytics.tiktok.com/api/v2/pixel
23.36.79.32200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP 23.36.79.32:0
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 806
Origin: https://vouchersavenue.com
Connection: keep-alive
Referer: https://vouchersavenue.com/
Cookie: _ttp=2KeeuuSMZ2Bw9WbjRLmMV8lme6M
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 0
access-control-allow-origin: *
x-tt-logid: 20230121222141E19BD5B031321B97958A
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf603288c19c2577690cc6f843a75ffc83c9c835970fa756bb208421743842f94297e4c619d3565dad97ef4ec0c4fa50c5bd48f74b9208eacb7837d8f28a62be92f70526269b8c956c45bfb7082df59468b9f48d774f8e5840ff9a1579e48107b1bf
x-origin-response-time: 31,104.112.235.151
x-akamai-request-id: 36c098dd.1861593f
expires: Sat, 21 Jan 2023 22:21:42 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sat, 21 Jan 2023 22:21:42 GMT
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-cache-remote: TCP_MISS from a104-112-235-151.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=119, origin; dur=31, inner; dur=21
x-parent-response-time: 146,23.36.79.28
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
143.204.42.156200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.156:0
Hash a6392be277cb05d451d205a64a118261
ea50b86b15c80bf2584902a5834b857a02274b38
8db1a90891bdf175f8ff9dcc1240a5ce906a5b01d62670e089b2a73aa753696e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=145480
Date: Sat, 21 Jan 2023 22:21:42 GMT
Etag: "63cbed55-1d7"
Expires: Mon, 23 Jan 2023 14:46:22 GMT
Last-Modified: Sat, 21 Jan 2023 13:49:09 GMT
Server: ECS (nyb/1D24)
X-Cache: Miss from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: tQb2DG0Dx0XQGyrtZW_IazXPfNgQmm6Oc--nsHocPqYXnQaFPXfzzw==
Age: 3433
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 5074bfa38808c4a0f18b00a601cfef53
ffc0c526e49251605b2c95d0d1d595f9c702cd9a
6262e4155e8fbf18388f2f38c8e65cb87db94dae66d1dbbd329b4973d8b243df
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 21 Jan 2023 22:21:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pagead2.googlesyndication.com/pagead/landing?gcs=G100&gcd=G100&rnd=1078246845.1674339701&url=https%3A%2F%2Fvouchersavenue.com%2F300-clothing-gift-card%2Fsignup%2F1>m=2wg1i0P645S3F
142.250.74.66200 OK 42 B URL HTTP/2 pagead2.googlesyndication.com/pagead/landing?gcs=G100&gcd=G100&rnd=1078246845.1674339701&url=https%3A%2F%2Fvouchersavenue.com%2F300-clothing-gift-card%2Fsignup%2F1>m=2wg1i0P645S3F
IP 142.250.74.66:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
POST /pagead/landing?gcs=G100&gcd=G100&rnd=1078246845.1674339701&url=https%3A%2F%2Fvouchersavenue.com%2F300-clothing-gift-card%2Fsignup%2F1>m=2wg1i0P645S3F HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vouchersavenue.com
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 21 Jan 2023 22:21:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
create.lidstatic.com/campaign/beb516a1-60ed-00cc-73eb-a6a318cfa8e9.js?snippet_version=2
104.22.39.182200 OK 40 kB URL HTTP/2 create.lidstatic.com/campaign/beb516a1-60ed-00cc-73eb-a6a318cfa8e9.js?snippet_version=2
IP 104.22.39.182:0
Hash a696283b238d85008eed62d8a5256cba
2dea9260745e7f053d47d599d9d12aec3adcc7a4
80a1d7d29c8182fde3ee8e018ae47a1c93b42956c01cf0f48747d464b2e6d6c4
GET /campaign/beb516a1-60ed-00cc-73eb-a6a318cfa8e9.js?snippet_version=2 HTTP/1.1
Host: create.lidstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 21 Jan 2023 22:21:41 GMT
content-type: text/javascript
x-amz-id-2: pVCqm5pEJixjk9sXQvPe9qoEHRvCJ3HxXPE4UoKJDgNW/AA2MR/v3uLDC3SLFw9TWZdJvjUmSmI=
x-amz-request-id: 0644W3D82X6ERSRE
x-amz-replication-status: COMPLETED
last-modified: Fri, 12 Nov 2021 01:06:02 GMT
etag: W/"a26a2a7efa03d037874965870726da4a"
cache-control: max-age=1800
x-amz-version-id: C0ArZgU5VyyGfHMzwlfuO_22EOgyVHi9
cf-cache-status: HIT
age: 1777
vary: Accept-Encoding
server: cloudflare
cf-ray: 78d371beff200a2c-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 5074bfa38808c4a0f18b00a601cfef53
ffc0c526e49251605b2c95d0d1d595f9c702cd9a
6262e4155e8fbf18388f2f38c8e65cb87db94dae66d1dbbd329b4973d8b243df
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 21 Jan 2023 22:21:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
data.perfmaker.net/data/website/614210c6324d8/settings/05cb6acbcba8d52b5055062a31e6191313384030
212.83.189.65200 OK 2.8 kB URL HTTP/1.1 data.perfmaker.net/data/website/614210c6324d8/settings/05cb6acbcba8d52b5055062a31e6191313384030
IP 212.83.189.65:0
File type Unicode text, UTF-8 text, with very long lines (21035), with no line terminators
Hash 6770404b246e1ff82afcbed5d55549e2
09c70fce8fb7547a5c547d2967578da0da4a7874
01787d69eb880b2e190f929614cf432fc769ae41b0e8b7b75048d5fb8bbbcdf7
GET /data/website/614210c6324d8/settings/05cb6acbcba8d52b5055062a31e6191313384030 HTTP/1.1
Host: data.perfmaker.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vouchersavenue.com/
Origin: https://vouchersavenue.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-powered-by: Express
access-control-allow-origin: https://vouchersavenue.com
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
content-type: application/json; charset=utf-8
etag: W/"522e-oc1+RWQAAq0f/OZXR7tAgOfyZEM"
content-encoding: gzip
date: Sat, 21 Jan 2023 22:21:42 GMT
keep-alive: timeout=5
transfer-encoding: chunked
set-cookie: sid=s4; path=/; SameSite=None; Secure
cache-control: private
d2m2wsoho8qq12.cloudfront.net/iframe.html?token=ADAC2925-0A11-4C45-63B5-89C6F64B2D82&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.11.9&lck=BEB516A1-60ED-00CC-73EB-A6A318CFA8E9&lac=A223F9AF-E7A0-7D87-DD28-D0C442307BFE
143.204.42.49200 OK 1.4 kB URL HTTP/1.1 d2m2wsoho8qq12.cloudfront.net/iframe.html?token=ADAC2925-0A11-4C45-63B5-89C6F64B2D82&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.11.9&lck=BEB516A1-60ED-00CC-73EB-A6A318CFA8E9&lac=A223F9AF-E7A0-7D87-DD28-D0C442307BFE
IP 143.204.42.49:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash ef825b8a88a51cd76a51d08dfc1d4f99
5bf247bd91a4be0c3b76a70ec8e5e462de0e9f3b
2ac453ec379c3e7b0fa69b810ecf2d6771de3e7611a2599a20f8e8ce9a240af1
GET /iframe.html?token=ADAC2925-0A11-4C45-63B5-89C6F64B2D82&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.11.9&lck=BEB516A1-60ED-00CC-73EB-A6A318CFA8E9&lac=A223F9AF-E7A0-7D87-DD28-D0C442307BFE HTTP/1.1
Host: d2m2wsoho8qq12.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Mon, 19 Dec 2022 22:41:59 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Content-Encoding: gzip
Date: Sat, 21 Jan 2023 06:43:02 GMT
ETag: W/"63a0e8b7-dbb"
X-Cache: Hit from cloudfront
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: LwP_ds-wS2AOH3I9_Wf4MPeYthMK73971ZQXJJTlUmapMhma2upF_w==
Age: 56338
ocsp.r2m01.amazontrust.com/
54.230.80.227200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP 54.230.80.227:0
Hash f04d1f85d1933285a39cfe532ea5499b
85a2b22c4a6a02b085fdee2e4f515f2a3e9d4755
ed354994e9eb2bd76f9b8af080e63008a9e8058d9b0561f1eaa647cc4c84a239
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=98591
Date: Sat, 21 Jan 2023 22:21:42 GMT
Etag: "63cb2b50-1d7"
Expires: Mon, 23 Jan 2023 01:44:53 GMT
Last-Modified: Sat, 21 Jan 2023 00:01:20 GMT
Server: ECS (nyb/1D1B)
X-Cache: Miss from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: gYM0OnAfj944-s_IZCRTqE17puBykT80FLdpenM9ZTIJBx-rqPXGWA==
Age: 6213
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 983410dffbd2f6609e689d468279cad3
9ed22350a720ebff727059fa19538dd721252f31
0f772ca05a2b10e54f9d9ba798c555e777461c5d5270b5355df7c303af07297d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1667
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 21 Jan 2023 22:21:42 GMT
Last-Modified: Sat, 21 Jan 2023 21:53:55 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/fbevents.js
31.13.72.12200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP 31.13.72.12:0
File type ASCII text, with very long lines (64348)
Hash 9ba458c0d3060a442f3094daf58ec05d
fc35d487d0dd81e6855f1b02367b755609d9608d
17087257ea25c2232c025f338b9f3153d35c3d953cb382b7b6e01728a643bc0b
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: tXRYXOrA0QLIXw/LIF+/EP0naYPofRKrZegvSwLRUPTkeZiB5LRJtoIvqucweOF6KzTHPYQtjNdMp4IS2+1RFw==
priority: u=3,i
content-length: 27859
x-fb-trip-id: 2050670934
date: Sat, 21 Jan 2023 22:21:42 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
trc.pushnami.com/api/push/track
34.200.96.220204 No Content 0 B URL HTTP/2 trc.pushnami.com/api/push/track
IP 34.200.96.220:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/push/track HTTP/1.1
Host: trc.pushnami.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: key
Referer: https://vouchersavenue.com/
Origin: https://vouchersavenue.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 21 Jan 2023 22:21:42 GMT
access-control-allow-origin: *
access-control-allow-methods: POST
access-control-allow-headers: Accept,Authorization,Content-Type,If-None-Match,key
access-control-max-age: 86400
access-control-expose-headers: WWW-Authenticate,Server-Authorization
cache-control: no-cache
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 983410dffbd2f6609e689d468279cad3
9ed22350a720ebff727059fa19538dd721252f31
0f772ca05a2b10e54f9d9ba798c555e777461c5d5270b5355df7c303af07297d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1667
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 21 Jan 2023 22:21:42 GMT
Last-Modified: Sat, 21 Jan 2023 21:53:55 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
trc.pushnami.com/api/push/track
34.200.96.220200 OK 2 B URL HTTP/2 trc.pushnami.com/api/push/track
IP 34.200.96.220:0
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /api/push/track HTTP/1.1
Host: trc.pushnami.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vouchersavenue.com/
content-type: application/x-www-form-urlencoded
key: 5cc0bb93e04a8c20b5240228
Origin: https://vouchersavenue.com
Content-Length: 70
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Jan 2023 22:21:42 GMT
content-type: text/html; charset=utf-8
content-length: 2
access-control-allow-origin: *
access-control-expose-headers: WWW-Authenticate,Server-Authorization
cache-control: no-cache
X-Firefox-Spdy: h2
s3.amazonaws.com/pushext.com/sdk-v3.03.js
52.217.66.118200 OK 28 kB URL HTTP/1.1 s3.amazonaws.com/pushext.com/sdk-v3.03.js
IP 52.217.66.118:0
File type ASCII text, with CRLF line terminators
Hash ddcd86ed61e2264d6ebcfd75102f02ee
e0eccfc8ea444bd5eabcf38e22240b4db80fe34a
d568a00003589ad112ddf1f8a27c4cbf7b63a80b1df39a26d1ebc2f185417e53
GET /pushext.com/sdk-v3.03.js HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: eNY//Im4MiAv2bSCA5gu/p5yXOJL4ATjbzIsupworvfF3f8Wn3MBE7OxFV0AuzdNi5YwyvZmcRk=
x-amz-request-id: 0M0R3H5QA8N84XJ4
Date: Sat, 21 Jan 2023 22:21:43 GMT
Last-Modified: Wed, 30 Mar 2022 18:55:32 GMT
ETag: "ddcd86ed61e2264d6ebcfd75102f02ee"
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 28274
ocsp.sca1b.amazontrust.com/
143.204.42.156200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.156:0
Hash d8dd87b5f9c7ac36ea4770f08623e176
29591fb68ac4d2120f0a884f3b7dc61c0cfbb7ac
471cc36d317dc0d68a0a22f718c1523e5aaffab668d1ade4097d8035f117864c
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 21 Jan 2023 22:21:42 GMT
Last-Modified: Sat, 21 Jan 2023 21:50:49 GMT
Server: ECS (nyb/1D25)
X-Cache: Miss from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: HJ0yV6KnzkI3yht9fIqD6HbGVo7Q1QiDtZTK0ZpSBMdAAYSsBSafEA==
Age: 1854
create.leadid.com/2.11.9/SaveDom?msn=2&pid=c9fa855d-62bb-411b-9a1d-ed21ca859dd6&token=ADAC2925-0A11-4C45-63B5-89C6F64B2D82&_=751167358
50.16.132.247200 OK 42 B URL HTTP/2 create.leadid.com/2.11.9/SaveDom?msn=2&pid=c9fa855d-62bb-411b-9a1d-ed21ca859dd6&token=ADAC2925-0A11-4C45-63B5-89C6F64B2D82&_=751167358
IP 50.16.132.247:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 6e34a90d1d3d1961240a6516221493c8
ccb305a997c59ad63b2f44f9f1a1dbd7ce2a2ff7
463a06d729a46113a013ccca248f43c329444925c8b8bfdef0c1a6f5e86aa27f
POST /2.11.9/SaveDom?msn=2&pid=c9fa855d-62bb-411b-9a1d-ed21ca859dd6&token=ADAC2925-0A11-4C45-63B5-89C6F64B2D82&_=751167358 HTTP/1.1
Host: create.leadid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 512
Origin: https://vouchersavenue.com
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Jan 2023 22:21:42 GMT
content-type: text/plain;charset=UTF-8
server: nginx
set-cookie: rgisanonymous=false; expires=Mon, 20-Feb-2023 22:21:42 GMT; Max-Age=2592000; path=/
rguserid=2d46852a-2008-45dd-88fa-50464eacac76; expires=Mon, 20-Feb-2023 22:21:42 GMT; Max-Age=2592000; path=/
rguuid=true; expires=Mon, 20-Feb-2023 22:21:42 GMT; Max-Age=2592000; path=/
rgisanonymous=true; expires=Mon, 20-Feb-2023 22:21:42 GMT; Max-Age=2592000; path=/
cache-control: no-cache, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type
access-control-max-age: 1728000
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=274483184077389&ev=PageView&dl=https%3A%2F%2Fvouchersavenue.com%2F300-clothing-gift-card%2Fsignup%2F1&rl=&if=false&ts=1674339702163&sw=1280&sh=1024&v=2.9.94&r=stable&a=tmgoogletagmanager&ec=0&o=30&fbp=fb.1.1674339702161.1794051020&it=1674339701677&coo=false&rqm=GET
31.13.72.36200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=274483184077389&ev=PageView&dl=https%3A%2F%2Fvouchersavenue.com%2F300-clothing-gift-card%2Fsignup%2F1&rl=&if=false&ts=1674339702163&sw=1280&sh=1024&v=2.9.94&r=stable&a=tmgoogletagmanager&ec=0&o=30&fbp=fb.1.1674339702161.1794051020&it=1674339701677&coo=false&rqm=GET
IP 31.13.72.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=274483184077389&ev=PageView&dl=https%3A%2F%2Fvouchersavenue.com%2F300-clothing-gift-card%2Fsignup%2F1&rl=&if=false&ts=1674339702163&sw=1280&sh=1024&v=2.9.94&r=stable&a=tmgoogletagmanager&ec=0&o=30&fbp=fb.1.1674339702161.1794051020&it=1674339701677&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Sat, 21 Jan 2023 22:21:43 GMT
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
143.204.42.156200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.156:0
Hash c3675ec85500464230453658b21c0309
42f445cf5b332fab2a5ee10afe9fb70dbf2cd368
028eb45fd4592438fb4e53aa6b8ada0d282bd8900d185766f8012489e63c8494
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=103055
Date: Sat, 21 Jan 2023 22:21:43 GMT
Etag: "63cb3c0c-1d7"
Expires: Mon, 23 Jan 2023 02:59:18 GMT
Last-Modified: Sat, 21 Jan 2023 01:12:44 GMT
Server: ECS (nyb/1D19)
X-Cache: Miss from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Hv_u_G37d0Sfpz-ZYx2wT1L4eOZvkcbMD60XJqxolChktrm4ByI7tg==
Age: 6394
api.trustedform.com/certs
3.213.7.37201 Created 475 B URL HTTP/2 api.trustedform.com/certs
IP 3.213.7.37:0
File type JSON data\012- , ASCII text, with very long lines (475), with no line terminators
Hash cb2da91a11ea541d5e6199c0304a9213
f6e94ed5d178e306c7b695b7f725d0bf8f8af0d8
30434c14104b29c603fcfdd4c98db25eeb4b4f01b1112bf83bc55de271978342
POST /certs HTTP/1.1
Host: api.trustedform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 617
Origin: https://vouchersavenue.com
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 201 Created
date: Sat, 21 Jan 2023 22:21:43 GMT
content-type: application/json; charset=utf-8
content-length: 475
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers:
cache-control: max-age=0, private, must-revalidate
server: Cowboy
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
143.204.42.156200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.156:0
Hash e98f77758977fc744018ac4d51561112
6723c293a9b056c413b899e41b43096deb3fe579
c1538e8215ec3c23c0a6a20f56c019c7e14bfc9d8b456c627c0e1a1e3f22b8dc
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 21 Jan 2023 22:21:43 GMT
Last-Modified: Sat, 21 Jan 2023 20:44:35 GMT
Server: ECS (dcb/7EA7)
X-Cache: Miss from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ve32Xn9aJ3zdM60voE4uaSjUpfsg_WSU9P3UyUFt5SpqB1sz9Jgg-g==
Age: 5828
api.trustedform.com/certs/5e03ea4886a64264b28f3eb314b71c93861f90f4/snapshot
3.213.7.37204 No Content 0 B URL HTTP/2 api.trustedform.com/certs/5e03ea4886a64264b28f3eb314b71c93861f90f4/snapshot
IP 3.213.7.37:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /certs/5e03ea4886a64264b28f3eb314b71c93861f90f4/snapshot HTTP/1.1
Host: api.trustedform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 18711
Origin: https://vouchersavenue.com
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 21 Jan 2023 22:21:43 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers:
cache-control: max-age=0, private, must-revalidate
server: Cowboy
X-Firefox-Spdy: h2
api.trustedform.com/certs/5e03ea4886a64264b28f3eb314b71c93861f90f4/fingerprints
3.213.7.37204 No Content 0 B URL HTTP/2 api.trustedform.com/certs/5e03ea4886a64264b28f3eb314b71c93861f90f4/fingerprints
IP 3.213.7.37:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /certs/5e03ea4886a64264b28f3eb314b71c93861f90f4/fingerprints HTTP/1.1
Host: api.trustedform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 563
Origin: https://vouchersavenue.com
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 21 Jan 2023 22:21:43 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers:
cache-control: max-age=0, private, must-revalidate
server: Cowboy
X-Firefox-Spdy: h2
api.trustedform.com/certs/5e03ea4886a64264b28f3eb314b71c93861f90f4/events
3.213.7.37204 No Content 0 B URL HTTP/2 api.trustedform.com/certs/5e03ea4886a64264b28f3eb314b71c93861f90f4/events
IP 3.213.7.37:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /certs/5e03ea4886a64264b28f3eb314b71c93861f90f4/events HTTP/1.1
Host: api.trustedform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1902
Origin: https://vouchersavenue.com
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 21 Jan 2023 22:21:44 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers:
cache-control: max-age=0, private, must-revalidate
server: Cowboy
X-Firefox-Spdy: h2
script.anura.io/response.json
52.56.170.143200 OK 139 B URL HTTP/2 script.anura.io/response.json
IP 52.56.170.143:0
File type JSON data\012- , ASCII text, with no line terminators
Hash b90b28812e9ef260fae159c246a063e6
cafd096b45381d58201ff288b30b477294b994ca
d0c615cef8708acf5aec1f374baf965c37a71b6cb3faa3782df923fe1ba1d160
POST /response.json HTTP/1.1
Host: script.anura.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 3180
Origin: https://vouchersavenue.com
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 21 Jan 2023 22:21:44 GMT
content-type: application/json; charset=utf-8
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: POST
expires: Sun, 28 Dec 1980 18:57:00 EST
cache-control: private, no-cache, no-store, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
api.trustedform.com/certs/5e03ea4886a64264b28f3eb314b71c93861f90f4/events
3.213.7.37204 No Content 0 B URL HTTP/2 api.trustedform.com/certs/5e03ea4886a64264b28f3eb314b71c93861f90f4/events
IP 3.213.7.37:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /certs/5e03ea4886a64264b28f3eb314b71c93861f90f4/events HTTP/1.1
Host: api.trustedform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 350
Origin: https://vouchersavenue.com
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 21 Jan 2023 22:21:46 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers:
cache-control: max-age=0, private, must-revalidate
server: Cowboy
X-Firefox-Spdy: h2
cdn.pushmaster-cdn.xyz/scripts/publishers/616c889db7494c0008691a0e/SDK.js
104.26.15.80200 OK 0 B URL HTTP/2 cdn.pushmaster-cdn.xyz/scripts/publishers/616c889db7494c0008691a0e/SDK.js
IP 104.26.15.80:0
GET /scripts/publishers/616c889db7494c0008691a0e/SDK.js HTTP/1.1
Host: cdn.pushmaster-cdn.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 21 Jan 2023 22:21:41 GMT
content-type: application/javascript
x-amz-id-2: K2Nwi49qjjnW7MDyVf+/urTguKGaLRoSSbScsMpjomFk102k2o6JoqEzOMkhshIvuwhHeYM4ewk=
x-amz-request-id: MRE73ZWPV52R28YP
last-modified: Thu, 07 Jul 2022 18:16:14 GMT
x-amz-version-id: 3iDpsZiRXmLsrKEtZ1pm4Wp_k22Zwbi1
etag: W/"e239a1a8fb10138990c101e3957c013d"
cache-control: max-age=86400
cf-cache-status: HIT
age: 5751
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NL4jSjXkZ1hEgF5nM3vLZTiJBTrxAiyXFbq7ooBZE4sHv2O6M%2BNJINyE4xzgfft8weEcFVl2KiSRosQjVHNzGosKoucsSivLAZcoR8wtjjOLTTr3V4SFDKYP1hHcjggiO1ghLkw2ebI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78d371bec9600b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
api.pushnami.com/scripts/v1/pushnami-adv/5cc0bb93e04a8c20b5240228
54.230.111.113200 OK 0 B URL HTTP/2 api.pushnami.com/scripts/v1/pushnami-adv/5cc0bb93e04a8c20b5240228
IP 54.230.111.113:0
GET /scripts/v1/pushnami-adv/5cc0bb93e04a8c20b5240228 HTTP/1.1
Host: api.pushnami.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Sat, 21 Jan 2023 22:21:42 GMT
cache-control: no-cache
content-encoding: gzip
vary: accept-encoding
x-cache: Miss from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NZHpJ4-G3Rz3mkocKWz4XCkLCWYegp_0NzJZoQBoDZcCsAyhyEHtMg==
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
87.248.119.252200 OK 0 B IP 87.248.119.252:0
ASN #203220 Yahoo! UK Services Limited
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: n4wbYb6FwOduFq2QyOsep3AduDCZQt81YHI4m4fSJvLRnAJHVsk0uBMGF1qMyPQSU0+O/TpHqmw=
x-amz-request-id: NHKGKF4TRPPTB4QF
date: Sat, 21 Jan 2023 22:21:19 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 24
content-encoding: gzip
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
create.leadid.com/2.11.9/SaveDeviceId.js?lac=A223F9AF-E7A0-7D87-DD28-D0C442307BFE&lck=BEB516A1-60ED-00CC-73EB-A6A318CFA8E9&methods=48&token=ADAC2925-0A11-4C45-63B5-89C6F64B2D82&uuid=2e4efbed97f8452cabb9651aa56aeb1b
50.16.132.247200 OK 0 B URL HTTP/2 create.leadid.com/2.11.9/SaveDeviceId.js?lac=A223F9AF-E7A0-7D87-DD28-D0C442307BFE&lck=BEB516A1-60ED-00CC-73EB-A6A318CFA8E9&methods=48&token=ADAC2925-0A11-4C45-63B5-89C6F64B2D82&uuid=2e4efbed97f8452cabb9651aa56aeb1b
IP 50.16.132.247:0
GET /2.11.9/SaveDeviceId.js?lac=A223F9AF-E7A0-7D87-DD28-D0C442307BFE&lck=BEB516A1-60ED-00CC-73EB-A6A318CFA8E9&methods=48&token=ADAC2925-0A11-4C45-63B5-89C6F64B2D82&uuid=2e4efbed97f8452cabb9651aa56aeb1b HTTP/1.1
Host: create.leadid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://deviceid.trueleadid.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Jan 2023 22:21:42 GMT
content-type: text/javascript;charset=UTF-8
server: nginx
set-cookie: rgisanonymous=false; expires=Mon, 20-Feb-2023 22:21:42 GMT; Max-Age=2592000; path=/
rguserid=29b6e207-c730-43c3-994f-1aac2956a548; expires=Mon, 20-Feb-2023 22:21:42 GMT; Max-Age=2592000; path=/
rguuid=true; expires=Mon, 20-Feb-2023 22:21:42 GMT; Max-Age=2592000; path=/
rgisanonymous=true; expires=Mon, 20-Feb-2023 22:21:42 GMT; Max-Age=2592000; path=/
cache-control: no-cache, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type
access-control-max-age: 1728000
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.trustedform.com/trustedform-1.8.35.js
54.230.111.91200 OK 0 B URL HTTP/2 cdn.trustedform.com/trustedform-1.8.35.js
IP 54.230.111.91:0
GET /trustedform-1.8.35.js HTTP/1.1
Host: cdn.trustedform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 06 Jan 2023 16:07:23 GMT
x-amz-version-id: PsGscq0o6WWOGkSqGH9BYInejEgnNeUZ
server: AmazonS3
content-encoding: gzip
date: Sat, 21 Jan 2023 22:21:38 GMT
etag: W/"cef26bd569e1a24279f16aecc87c254b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TJEt7Wv6fuj2Ql2pb829PL1PAjsz6AeX_AAScEoytNgJ-e5De1JogQ==
age: 17
X-Firefox-Spdy: h2
create.leadid.com/2.11.9/InitFormData?msn=3&pid=c9fa855d-62bb-411b-9a1d-ed21ca859dd6&token=ADAC2925-0A11-4C45-63B5-89C6F64B2D82&_=751167359
50.16.132.247200 OK 0 B URL HTTP/2 create.leadid.com/2.11.9/InitFormData?msn=3&pid=c9fa855d-62bb-411b-9a1d-ed21ca859dd6&token=ADAC2925-0A11-4C45-63B5-89C6F64B2D82&_=751167359
IP 50.16.132.247:0
POST /2.11.9/InitFormData?msn=3&pid=c9fa855d-62bb-411b-9a1d-ed21ca859dd6&token=ADAC2925-0A11-4C45-63B5-89C6F64B2D82&_=751167359 HTTP/1.1
Host: create.leadid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 1231
Origin: https://vouchersavenue.com
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Jan 2023 22:21:42 GMT
content-type: text/plain;charset=UTF-8
server: nginx
set-cookie: rgisanonymous=false; expires=Mon, 20-Feb-2023 22:21:42 GMT; Max-Age=2592000; path=/
rguserid=ded68516-28f9-492f-9d55-8fbc5a61405a; expires=Mon, 20-Feb-2023 22:21:42 GMT; Max-Age=2592000; path=/
rguuid=true; expires=Mon, 20-Feb-2023 22:21:42 GMT; Max-Age=2592000; path=/
rgisanonymous=true; expires=Mon, 20-Feb-2023 22:21:42 GMT; Max-Age=2592000; path=/
cache-control: no-cache, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type
access-control-max-age: 1728000
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
deviceid.trueleadid.com/iframe.html?token=ADAC2925-0A11-4C45-63B5-89C6F64B2D82&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.11.9&lck=BEB516A1-60ED-00CC-73EB-A6A318CFA8E9&lac=A223F9AF-E7A0-7D87-DD28-D0C442307BFE
54.146.7.236200 OK 0 B URL HTTP/2 deviceid.trueleadid.com/iframe.html?token=ADAC2925-0A11-4C45-63B5-89C6F64B2D82&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.11.9&lck=BEB516A1-60ED-00CC-73EB-A6A318CFA8E9&lac=A223F9AF-E7A0-7D87-DD28-D0C442307BFE
IP 54.146.7.236:0
GET /iframe.html?token=ADAC2925-0A11-4C45-63B5-89C6F64B2D82&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.11.9&lck=BEB516A1-60ED-00CC-73EB-A6A318CFA8E9&lac=A223F9AF-E7A0-7D87-DD28-D0C442307BFE HTTP/1.1
Host: deviceid.trueleadid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d2m2wsoho8qq12.cloudfront.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 21 Jan 2023 22:21:42 GMT
content-type: text/html
server: nginx
last-modified: Wed, 07 Dec 2022 21:18:32 GMT
etag: W/"63910328-1049"
expires: Sun, 22 Jan 2023 22:21:42 GMT
p3p: CP="NOI DSP COR NID CUR ADM DEV OUR BUS"
cache-control: max-age=86400, public
content-encoding: gzip
X-Firefox-Spdy: h2
script.anura.io/request.js?instance=3688597576&source=undefined&campaign=undefined&callback=Pushnami.anTrack&86017889058
52.56.170.143200 OK 0 B URL HTTP/2 script.anura.io/request.js?instance=3688597576&source=undefined&campaign=undefined&callback=Pushnami.anTrack&86017889058
IP 52.56.170.143:0
GET /request.js?instance=3688597576&source=undefined&campaign=undefined&callback=Pushnami.anTrack&86017889058 HTTP/1.1
Host: script.anura.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 21 Jan 2023 22:21:43 GMT
content-type: application/javascript; charset=utf-8
server: nginx
vary: Accept-Encoding
expires: Sun, 28 Dec 1980 18:57:00 EST
cache-control: private, no-cache, no-store, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
create.leadid.com/2.11.9/InitFormData?msn=4&pid=c9fa855d-62bb-411b-9a1d-ed21ca859dd6&token=ADAC2925-0A11-4C45-63B5-89C6F64B2D82&_=751167360
50.16.132.247200 OK 0 B URL HTTP/2 create.leadid.com/2.11.9/InitFormData?msn=4&pid=c9fa855d-62bb-411b-9a1d-ed21ca859dd6&token=ADAC2925-0A11-4C45-63B5-89C6F64B2D82&_=751167360
IP 50.16.132.247:0
POST /2.11.9/InitFormData?msn=4&pid=c9fa855d-62bb-411b-9a1d-ed21ca859dd6&token=ADAC2925-0A11-4C45-63B5-89C6F64B2D82&_=751167360 HTTP/1.1
Host: create.leadid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 1079
Origin: https://vouchersavenue.com
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Jan 2023 22:21:44 GMT
content-type: text/plain;charset=UTF-8
server: nginx
set-cookie: rgisanonymous=false; expires=Mon, 20-Feb-2023 22:21:44 GMT; Max-Age=2592000; path=/
rguserid=239ad878-52e6-45a7-8450-e5a12f5b5bf9; expires=Mon, 20-Feb-2023 22:21:44 GMT; Max-Age=2592000; path=/
rguuid=true; expires=Mon, 20-Feb-2023 22:21:44 GMT; Max-Age=2592000; path=/
rgisanonymous=true; expires=Mon, 20-Feb-2023 22:21:44 GMT; Max-Age=2592000; path=/
cache-control: no-cache, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type
access-control-max-age: 1728000
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
psp.pushnami.com/api/psp
54.167.183.48200 OK 0 B IP 54.167.183.48:0
POST /api/psp HTTP/1.1
Host: psp.pushnami.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vouchersavenue.com/
content-type: application/x-www-form-urlencoded
key: 5cc0bb93e04a8c20b5240228
Origin: https://vouchersavenue.com
Content-Length: 97
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Jan 2023 22:21:45 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: https://vouchersavenue.com
access-control-allow-credentials: true
cache-control: no-cache
vary: accept-encoding
content-encoding: gzip
X-Firefox-Spdy: h2
create.leadid.com/2.11.9/Snap?msn=7&pid=c9fa855d-62bb-411b-9a1d-ed21ca859dd6&token=ADAC2925-0A11-4C45-63B5-89C6F64B2D82&_=751167363
50.16.132.247200 OK 0 B URL HTTP/2 create.leadid.com/2.11.9/Snap?msn=7&pid=c9fa855d-62bb-411b-9a1d-ed21ca859dd6&token=ADAC2925-0A11-4C45-63B5-89C6F64B2D82&_=751167363
IP 50.16.132.247:0
POST /2.11.9/Snap?msn=7&pid=c9fa855d-62bb-411b-9a1d-ed21ca859dd6&token=ADAC2925-0A11-4C45-63B5-89C6F64B2D82&_=751167363 HTTP/1.1
Host: create.leadid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 198411
Origin: https://vouchersavenue.com
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Jan 2023 22:21:47 GMT
content-type: text/plain;charset=UTF-8
server: nginx
set-cookie: rgisanonymous=false; expires=Mon, 20-Feb-2023 22:21:47 GMT; Max-Age=2592000; path=/
rguserid=7d74a71b-54e7-4585-a131-88c690a180e6; expires=Mon, 20-Feb-2023 22:21:47 GMT; Max-Age=2592000; path=/
rguuid=true; expires=Mon, 20-Feb-2023 22:21:47 GMT; Max-Age=2592000; path=/
rgisanonymous=true; expires=Mon, 20-Feb-2023 22:21:47 GMT; Max-Age=2592000; path=/
cache-control: no-cache, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type
access-control-max-age: 1728000
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
imgs.tagadamedia.com/media/us/20/512x512-2095.svg
169.150.247.39200 OK 0 B URL HTTP/2 imgs.tagadamedia.com/media/us/20/512x512-2095.svg
IP 169.150.247.39:0
GET /media/us/20/512x512-2095.svg HTTP/1.1
Host: imgs.tagadamedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Jan 2023 22:21:40 GMT
content-type: image/svg+xml
vary: Accept-Encoding
server: BunnyCDN-DE1-1082
cdn-pullzone: 61945
cdn-uid: 5d127034-96a6-45e8-a482-4f40615f18db
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Mon, 24 Jan 2022 11:51:37 GMT
x-amz-id-2: OhEWrM3WTvco2DodI09c9KQWM2im1M5mZY3mTvEqp+rOxOitHm6vD+BLfidnycuH0yFMfTBD/0c=
x-amz-request-id: STFJARBTQECWFEYV
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 01/05/2023 12:50:19
cdn-edgestorageid: 1080
cdn-status: 200
cdn-requestid: 0c6356cbab44d83abf7ebde7d2e689a5
cdn-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.trustedform.com/bootstrap.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=16743397005360.43853322431588715
54.230.111.91200 OK 0 B URL HTTP/2 cdn.trustedform.com/bootstrap.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=16743397005360.43853322431588715
IP 54.230.111.91:0
GET /bootstrap.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=16743397005360.43853322431588715 HTTP/1.1
Host: cdn.trustedform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vouchersavenue.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Sat, 21 Jan 2023 22:21:43 GMT
last-modified: Fri, 06 Jan 2023 16:07:22 GMT
x-amz-version-id: mGsiKszEOvLychB1h9uHpdFpT70J3aoc
etag: W/"90474758772e8fd27bc16a6e21bb75e8"
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9xDwErUQaiFSF1-Xw_byrluHms96kqXtpOCS91dJ18hUfwkQ94L7MA==
X-Firefox-Spdy: h2
create.leadid.com/2.11.9/Snap?msn=5&pid=c9fa855d-62bb-411b-9a1d-ed21ca859dd6&token=ADAC2925-0A11-4C45-63B5-89C6F64B2D82&_=751167361
50.16.132.247200 OK 0 B URL HTTP/2 create.leadid.com/2.11.9/Snap?msn=5&pid=c9fa855d-62bb-411b-9a1d-ed21ca859dd6&token=ADAC2925-0A11-4C45-63B5-89C6F64B2D82&_=751167361
IP 50.16.132.247:0
POST /2.11.9/Snap?msn=5&pid=c9fa855d-62bb-411b-9a1d-ed21ca859dd6&token=ADAC2925-0A11-4C45-63B5-89C6F64B2D82&_=751167361 HTTP/1.1
Host: create.leadid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 198410
Origin: https://vouchersavenue.com
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Jan 2023 22:21:47 GMT
content-type: text/plain;charset=UTF-8
server: nginx
set-cookie: rgisanonymous=false; expires=Mon, 20-Feb-2023 22:21:47 GMT; Max-Age=2592000; path=/
rguserid=8c2ac4f6-359c-4831-aeb8-e35bccfdaf8d; expires=Mon, 20-Feb-2023 22:21:47 GMT; Max-Age=2592000; path=/
rguuid=true; expires=Mon, 20-Feb-2023 22:21:47 GMT; Max-Age=2592000; path=/
rgisanonymous=true; expires=Mon, 20-Feb-2023 22:21:47 GMT; Max-Age=2592000; path=/
cache-control: no-cache, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type
access-control-max-age: 1728000
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
create.leadid.com/2.11.9/Snap?msn=6&pid=c9fa855d-62bb-411b-9a1d-ed21ca859dd6&token=ADAC2925-0A11-4C45-63B5-89C6F64B2D82&_=751167362
50.16.132.247200 OK 0 B URL HTTP/2 create.leadid.com/2.11.9/Snap?msn=6&pid=c9fa855d-62bb-411b-9a1d-ed21ca859dd6&token=ADAC2925-0A11-4C45-63B5-89C6F64B2D82&_=751167362
IP 50.16.132.247:0
POST /2.11.9/Snap?msn=6&pid=c9fa855d-62bb-411b-9a1d-ed21ca859dd6&token=ADAC2925-0A11-4C45-63B5-89C6F64B2D82&_=751167362 HTTP/1.1
Host: create.leadid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 198411
Origin: https://vouchersavenue.com
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Jan 2023 22:21:47 GMT
content-type: text/plain;charset=UTF-8
server: nginx
set-cookie: rgisanonymous=false; expires=Mon, 20-Feb-2023 22:21:47 GMT; Max-Age=2592000; path=/
rguserid=5447f84a-a60a-4f23-8024-003aebc7fa20; expires=Mon, 20-Feb-2023 22:21:47 GMT; Max-Age=2592000; path=/
rguuid=true; expires=Mon, 20-Feb-2023 22:21:47 GMT; Max-Age=2592000; path=/
rgisanonymous=true; expires=Mon, 20-Feb-2023 22:21:47 GMT; Max-Age=2592000; path=/
cache-control: no-cache, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type
access-control-max-age: 1728000
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
imgs.tagadamedia.com/media/us/20/450x70-2094.svg
169.150.247.39200 OK 0 B URL HTTP/2 imgs.tagadamedia.com/media/us/20/450x70-2094.svg
IP 169.150.247.39:0
GET /media/us/20/450x70-2094.svg HTTP/1.1
Host: imgs.tagadamedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 21 Jan 2023 22:21:40 GMT
content-type: image/svg+xml
vary: Accept-Encoding
server: BunnyCDN-DE1-1082
cdn-pullzone: 61945
cdn-uid: 5d127034-96a6-45e8-a482-4f40615f18db
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Mon, 24 Jan 2022 11:51:37 GMT
x-amz-id-2: ax0m/Xodwj8Y/EYzIMLyIOxgt8GgQgDMy895Cqw+LKVNhXvoyUIZMVrNtXbgJjy9LLi2FZUXcic=
x-amz-request-id: MRVXC9YHJASKN9K1
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 01/05/2023 13:28:24
cdn-edgestorageid: 1081
cdn-status: 200
cdn-requestid: 8342a8e22ac616672c80bdc226ff0ac3
cdn-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
create.leadid.com/2.11.9/GenerateToken?msn=1&pid=c9fa855d-62bb-411b-9a1d-ed21ca859dd6&_=751167357
50.16.132.247200 OK 0 B URL HTTP/2 create.leadid.com/2.11.9/GenerateToken?msn=1&pid=c9fa855d-62bb-411b-9a1d-ed21ca859dd6&_=751167357
IP 50.16.132.247:0
POST /2.11.9/GenerateToken?msn=1&pid=c9fa855d-62bb-411b-9a1d-ed21ca859dd6&_=751167357 HTTP/1.1
Host: create.leadid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 201
Origin: https://vouchersavenue.com
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 21 Jan 2023 22:21:42 GMT
content-type: text/plain;charset=UTF-8
server: nginx
set-cookie: rgisanonymous=false; expires=Mon, 20-Feb-2023 22:21:42 GMT; Max-Age=2592000; path=/
rguserid=8115dfcf-137c-4b0b-a64e-3c4814b06f97; expires=Mon, 20-Feb-2023 22:21:42 GMT; Max-Age=2592000; path=/
rguuid=true; expires=Mon, 20-Feb-2023 22:21:42 GMT; Max-Age=2592000; path=/
rgisanonymous=true; expires=Mon, 20-Feb-2023 22:21:42 GMT; Max-Age=2592000; path=/
cache-control: no-cache, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type
access-control-max-age: 1728000
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
api.pushnami.com/scripts/v1/hub
54.230.111.113200 OK 0 B URL HTTP/2 api.pushnami.com/scripts/v1/hub
IP 54.230.111.113:0
GET /scripts/v1/hub HTTP/1.1
Host: api.pushnami.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
date: Sat, 21 Jan 2023 22:01:37 GMT
access-control-allow-origin: *
access-control-allow-methods: GET,PUT,POST,DELETE
access-control-allow-headers: X-Requested-With
content-security-policy: default-src 'unsafe-inline' *
x-content-security-policy: default-src 'unsafe-inline' *
x-webkit-csp: default-src 'unsafe-inline' *
cache-control: no-cache
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Scte0I0UnbOjI-zpwG_wRC3fpo8HCqUnRc5_EfFnzlFCKymSzufXPQ==
age: 1206
X-Firefox-Spdy: h2
ads.anura.io/showads.js?873790067618
54.230.111.55200 OK 0 B URL HTTP/2 ads.anura.io/showads.js?873790067618
IP 54.230.111.55:0
GET /showads.js?873790067618 HTTP/1.1
Host: ads.anura.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vouchersavenue.com
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Sat, 21 Jan 2023 10:53:26 GMT
server: nginx
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: MOKevBvqzn9G7mlRal5pDt3S49M5VbD3ss3BCMhnmOhx_CACFJNfnA==
age: 41297
X-Firefox-Spdy: h2
create.leadid.com/2.11.9/Snap?msn=8&pid=c9fa855d-62bb-411b-9a1d-ed21ca859dd6&token=ADAC2925-0A11-4C45-63B5-89C6F64B2D82&_=751167364
50.16.132.247200 OK 0 B URL HTTP/2 create.leadid.com/2.11.9/Snap?msn=8&pid=c9fa855d-62bb-411b-9a1d-ed21ca859dd6&token=ADAC2925-0A11-4C45-63B5-89C6F64B2D82&_=751167364
IP 50.16.132.247:0
POST /2.11.9/Snap?msn=8&pid=c9fa855d-62bb-411b-9a1d-ed21ca859dd6&token=ADAC2925-0A11-4C45-63B5-89C6F64B2D82&_=751167364 HTTP/1.1
Host: create.leadid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 35927
Origin: https://vouchersavenue.com
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 21 Jan 2023 22:21:47 GMT
content-type: text/plain;charset=UTF-8
server: nginx
set-cookie: rgisanonymous=false; expires=Mon, 20-Feb-2023 22:21:47 GMT; Max-Age=2592000; path=/
rguserid=e7e7cb53-1bf4-4177-8f03-751e1142b7c3; expires=Mon, 20-Feb-2023 22:21:47 GMT; Max-Age=2592000; path=/
rguuid=true; expires=Mon, 20-Feb-2023 22:21:47 GMT; Max-Age=2592000; path=/
rgisanonymous=true; expires=Mon, 20-Feb-2023 22:21:47 GMT; Max-Age=2592000; path=/
cache-control: no-cache, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type
access-control-max-age: 1728000
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2