qnney.abtrcker.com/test/c554fff292ad91c6
302 Found 298 B URL HTTP/1.1 qnney.abtrcker.com/test/c554fff292ad91c6
IP
File type HTML document, ASCII text
Hash 6ddf430a84744bddaf9465cd1fc83e62
5a0d4b9b5e28787ffd9562a18959475d926bbb6e
8294adc450ef2012ac5d77a2f0c5d362ee703dc261b383680eaa78451c779c4c
GET /test/c554fff292ad91c6 HTTP/1.1
Host: qnney.abtrcker.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx
Date: Sun, 26 Mar 2023 09:52:23 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 298
Connection: keep-alive
Location: https://go.trklinkcm.com/aff_c?aff_id=34828&aff_sub=preroll&aff_sub5=banner&browse=&campid=&carrier=&catego=&click_id=gtkrp642015d70002a5b2&creaid=&crname=&ctcode=&offer_id=8000&source=ff&target=×tamp=&url_id=0
Set-Cookie: unique_id=642015d70004d0c1; Path=/; Expires=Thu, 25 May 2023 09:52:23 GMT
unique_id2=642015d70004d92c; Path=/; Expires=Sat, 24 Jun 2023 09:52:23 GMT
impression=; Path=/; Expires=Sun, 26 Mar 2023 09:52:23 GMT
tid=gtkrp642015d70002a5b2; Path=/; Expires=Mon, 28 Feb 2028 09:52:23 GMT
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 13f90146df1d559743af6df15c29b77b
6dd24f60629c39f857e3c996084f4d515cf3f8d0
ea5975be17b9cd29c8770939eb5d63ce43c1c44ce9a3a4d04e1e79cd69b30d1c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EA5975BE17B9CD29C8770939EB5D63CE43C1C44CE9A3A4D04E1E79CD69B30D1C"
Last-Modified: Fri, 24 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10218
Expires: Sun, 26 Mar 2023 12:42:41 GMT
Date: Sun, 26 Mar 2023 09:52:23 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5d9435c884bf4a0777fdf4b57079ae09
7f04b9db47ffeec90ac6397416b7553e5336a550
fe77420ec3a11f547cf5172b68d30faa4fe0c13165ae305f0013b02914e61084
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FE77420EC3A11F547CF5172B68D30FAA4FE0C13165AE305F0013B02914E61084"
Last-Modified: Sat, 25 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6218
Expires: Sun, 26 Mar 2023 11:36:01 GMT
Date: Sun, 26 Mar 2023 09:52:23 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9bb70197d53617b5e6889b890dd2ae26
f3e9b8a743de494529baf2d078a622539f965307
a094a13905b7f1cd89475f9c83f9245580d4c3c7228d51d5c16622aec3c6aa45
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A094A13905B7F1CD89475F9C83F9245580D4C3C7228D51D5C16622AEC3C6AA45"
Last-Modified: Sat, 25 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2352
Expires: Sun, 26 Mar 2023 10:31:35 GMT
Date: Sun, 26 Mar 2023 09:52:23 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4ad6984a756720fbfff47b37a75513a2
355e35258114452af8b9638985ed9d8ef3bf0aca
43181fccb10652c68cae86e5e32b4e8f426fb5ad49d8125cb99e072cff573cf5
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 26 Mar 2023 09:15:34 GMT
content-type: application/json
age: 2209
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 8StpMiN251KHqAIvyF95VgS2Xxry2JKoyclV865+PaUWeGj8NSvWnE9EXjYtUnqKpdiWe9MTx9M=
x-amz-request-id: X2RF47ACKFPKRX2X
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 26 Mar 2023 09:01:09 GMT
age: 3074
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 26 Mar 2023 09:52:23 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
go.trklinkcm.com/aff_c?aff_id=34828&aff_sub=preroll&aff_sub5=banner&browse=&campid=&carrier=&catego=&click_id=gtkrp642015d70002a5b2&creaid=&crname=&ctcode=&offer_id=8000&source=ff&target=×tamp=&url_id=0
302 Found 268 B URL HTTP/1.1 go.trklinkcm.com/aff_c?aff_id=34828&aff_sub=preroll&aff_sub5=banner&browse=&campid=&carrier=&catego=&click_id=gtkrp642015d70002a5b2&creaid=&crname=&ctcode=&offer_id=8000&source=ff&target=×tamp=&url_id=0
IP
File type HTML document, ASCII text, with no line terminators
Hash 142952d33a27f479808c6ad789e0509e
3d869c26f4843542804e901a38263d9918e9e6cf
433173736f3f88822841fd9b482b57b5c990f0abc5aeec923407291597d2db48
GET /aff_c?aff_id=34828&aff_sub=preroll&aff_sub5=banner&browse=&campid=&carrier=&catego=&click_id=gtkrp642015d70002a5b2&creaid=&crname=&ctcode=&offer_id=8000&source=ff&target=×tamp=&url_id=0 HTTP/1.1
Host: go.trklinkcm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Server: nginx
Date: Sun, 26 Mar 2023 09:52:23 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 268
Connection: keep-alive
X-DNS-Prefetch-Control: off
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Download-Options: noopen
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Set-Cookie: language=en; Domain=go.trklinkcm.com; Path=/; Expires=Tue, 25 Apr 2023 09:52:23 GMT
test=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT
8000=37_34828_8000_84976a1954e85bf8d692d625fbc4e17f; Domain=go.trklinkcm.com; Path=/; Expires=Tue, 25 Apr 2023 09:52:23 GMT
op_8000=0; Domain=go.trklinkcm.com; Path=/; Expires=Tue, 25 Apr 2023 09:52:23 GMT
user_id=15783b15-1a32-45c1-864e-28e87befa421_47a438f72199ad5843f36e0f805b7fd3; Domain=go.trklinkcm.com; Path=/; Expires=Fri, 24 Mar 2028 09:52:23 GMT; Secure; SameSite=None
Location: https://fuck-fantasie.com/jpt/?pub_id=34828&cid=37_34828_8000_84976a1954e85bf8d692d625fbc4e17f&source=ff
Vary: Accept
Cache-Control: no-store, no-cache
ocsp.pki.goog/gts1c3
200 OK 5.2 kB IP
Hash bec323bf7f24a013073c996830d2c50e
4e71fa98a3fef9da7e86f946ab055dddfa9115dc
7af9082ee61df41c3bfd56f9d7697d70e531081f6501ec6d4627eb7972114783
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 26 Mar 2023 09:52:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
code.jquery.com/jquery-2.2.4.min.js
200 OK 30 kB URL HTTP/2 code.jquery.com/jquery-2.2.4.min.js
IP
File type ASCII text, with very long lines (32065)
Hash 82885772205f23cd59e25a221521b059
96ed36f45544295f28df1ab251e7e38faceeff0e
8e85465daae15b31a1837a4112cf920c1eeec7a5c189595651b3a53cb9b97215
GET /jquery-2.2.4.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fuck-fantasie.com
Connection: keep-alive
Referer: https://fuck-fantasie.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 26 Mar 2023 09:52:24 GMT
content-encoding: gzip
content-length: 29811
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-14e4a"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1679824344.dop010.sk1.t,1679824344.cds235.sk1.hn,1679824344.cds214.sk1.c
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 717ebcc65cb1390c2509851bac7b5878
1e04e3058329f3809bc01022d441172dcacc1aaa
3c8d41efe14dc75e001ce50aae65e133d90bcb2e2f86b2426cefe7abe4c7b588
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C8D41EFE14DC75E001CE50AAE65E133D90BCB2E2F86B2426CEFE7ABE4C7B588"
Last-Modified: Fri, 24 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6230
Expires: Sun, 26 Mar 2023 11:36:14 GMT
Date: Sun, 26 Mar 2023 09:52:24 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, ETag, Content-Type, Cache-Control, Pragma, Alert, Last-Modified, Retry-After, Backoff, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 26 Mar 2023 09:17:24 GMT
age: 2100
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 63ca8c4e17e0b692d1829cd62b9af3af
d0bbecbe0b93ea21026898dbd13edee5fc071cb2
1208545ecf01edb7bcef0b3c288d9edd34d2034c7404ba68a64c2ef251cb42f1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 26 Mar 2023 09:52:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b644abd1d83faa6f0327486dae33b18d
cb745aa55db6976159ef31ff8835e2b26fd32109
784e1b0a41a50629890a6fd6f58beb9f3a6eb5ba56aa35c671e5217d839aeeac
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 26 Mar 2023 09:52:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/archivoblack/v17/HTxqL289NzCGg4MzN6KJ7eW6CYyF_g.woff2
200 OK 19 kB URL HTTP/2 fonts.gstatic.com/s/archivoblack/v17/HTxqL289NzCGg4MzN6KJ7eW6CYyF_g.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 18604, version 1.0\012- data
Hash 4b6914a69e6a586fbe253f73d19d90b0
1f965709606b88830826c45ef0ebcfe3484aa674
25f33e61cf995abd6be62931cf03bf427286259177b43618cc410ee0157cfd30
GET /s/archivoblack/v17/HTxqL289NzCGg4MzN6KJ7eW6CYyF_g.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fuck-fantasie.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18604
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 24 Mar 2023 10:28:10 GMT
expires: Sat, 23 Mar 2024 10:28:10 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 19 Apr 2022 19:33:53 GMT
content-type: font/woff2
age: 170654
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ZiQi0PJqVcgRJoyw+PVaNQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: e6f5Tmw6mHbh8WhohtABPYEEG7g=
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b644abd1d83faa6f0327486dae33b18d
cb745aa55db6976159ef31ff8835e2b26fd32109
784e1b0a41a50629890a6fd6f58beb9f3a6eb5ba56aa35c671e5217d839aeeac
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 26 Mar 2023 09:52:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.r2m02.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP
Hash 2793d080f667d273c199f1f7743b9c55
9c57f4fa3c8f77d9abc1ea4268add4d2431b2703
4e95d53571d308ed7a345e9995fa257bd94032f0336be22ea0ce95c2ff615c2f
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=88702
Date: Sun, 26 Mar 2023 09:52:24 GMT
Etag: "641ecd56-1d7"
Expires: Mon, 27 Mar 2023 10:30:48 GMT
Last-Modified: Sat, 25 Mar 2023 10:30:46 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: HxuV_XabA0Hk8rFCo6TkHOfY9Hpeg7ere-SV-BLiUIigRNBKx4UgpQ==
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6335
Expires: Sun, 26 Mar 2023 11:38:00 GMT
Date: Sun, 26 Mar 2023 09:52:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6335
Expires: Sun, 26 Mar 2023 11:38:00 GMT
Date: Sun, 26 Mar 2023 09:52:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6335
Expires: Sun, 26 Mar 2023 11:38:00 GMT
Date: Sun, 26 Mar 2023 09:52:25 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F381b1b42-2394-4e4e-bb0a-986511a19bd1.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F381b1b42-2394-4e4e-bb0a-986511a19bd1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8dc799aaa2f69ef1109501a605dbdcfd
58cefa986d580ee408fbca288e3e45ba86fb97ac
54fa967d6b96b456416c62140a4eb9b6cda29b80d5083b5d1321b1fb89b3455f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F381b1b42-2394-4e4e-bb0a-986511a19bd1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9124
x-amzn-requestid: 30a39bb7-d3cc-473a-a5f9-4921367832c5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CW1kUESiIAMFVEQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641f694e-6c9bb97512fc3c8a3ecedc43;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 21:36:14 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: _4VxID1v_auG0Vuzp87FJoPbgJovhYYYa1fpzQZze51I6HwFKbja6w==
via: 1.1 6af36c6902a46beec743522a9bbb3ab0.cloudfront.net (CloudFront), 1.1 331202b5b8aab67acbf389883133f256.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:37:20 GMT
age: 44105
etag: "58cefa986d580ee408fbca288e3e45ba86fb97ac"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a195fab-643a-48cc-8f4e-51e27511b474.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a195fab-643a-48cc-8f4e-51e27511b474.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c8a2437b3c9ab01cd0e2327d4be5c61a
33573e5a6b6c1912702040c6d880c362baf0c3db
2556646c122f89bfce8467d13bf05e68f735373c8c18a33f7258f37f602673cf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a195fab-643a-48cc-8f4e-51e27511b474.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5424
x-amzn-requestid: b03169ca-0cc0-49f5-b785-5e29d70048cf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CW1kWGCnIAMFf7w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641f694e-679415d416cf3b666ec128be;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 21:36:14 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: cMFdcKw6RZYIg35YKKDuetMlSGtT-g4Kc2L-BHA5s0877l_Gg-PqUw==
via: 1.1 88a7ff956a5b49ec3a35abfc0027af12.cloudfront.net (CloudFront), 1.1 2241406ac19fffc8f35d6ddef8e22f56.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:37:07 GMT
etag: "33573e5a6b6c1912702040c6d880c362baf0c3db"
content-type: image/jpeg
age: 44118
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbfc8880-7788-4d8c-a59c-c048b787b772.jpeg
200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbfc8880-7788-4d8c-a59c-c048b787b772.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9b21b2c60279839939b60afd83d047fa
544c243fe2d69156f50eec156a62de127128a028
091a59214cfc0af90b4cb820bb521577ae63e862ec10160b8f64c9a9e593630d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbfc8880-7788-4d8c-a59c-c048b787b772.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7823
x-amzn-requestid: c528eae7-69b4-4669-8c15-2b306586b84b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CW1kWHx5IAMFlEA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641f694e-340c77491ea4440b340e3822;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 21:36:14 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: 2uV186j4t31jcyYDdXxsw5YgM6P5nCbzmgXWvG-pVSpvsjXz6Fsp0A==
via: 1.1 e39f48cc8f516dc1072afdb086c71f32.cloudfront.net (CloudFront), 1.1 4d8620b80ebe37d366388e117039aa8e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:37:19 GMT
etag: "544c243fe2d69156f50eec156a62de127128a028"
content-type: image/jpeg
age: 44106
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ac1765-db6c-42e3-99bf-d857d27a34b9.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ac1765-db6c-42e3-99bf-d857d27a34b9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c831201ad81f55c63c1b101ce854a810
0e9b952f6489f0a5f4862d3bea2fbe0ecdd379e5
c854489720d2ca4a95eef00addda0fcdaf481402d044df7725282654a97eb54a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ac1765-db6c-42e3-99bf-d857d27a34b9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5556
x-amzn-requestid: 6b050645-14aa-47f7-b4a5-2e27abbe5115
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM69eHE3IAMF0Yw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b71ef-6ab2948e2bf2578f29798372;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:23:59 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: CgU9j02Bnw0UdIwQ3sRCDvJoPitHIAUTRDhLH_PMXYlAPoAwSbv6Iw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 4d8620b80ebe37d366388e117039aa8e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 26 Mar 2023 05:35:57 GMT
age: 15388
etag: "0e9b952f6489f0a5f4862d3bea2fbe0ecdd379e5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3fb4d16c-eef2-49cc-ac24-b125a7d6d9e0.jpeg
200 OK 3.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3fb4d16c-eef2-49cc-ac24-b125a7d6d9e0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1ec08d4bd079a92161fc80f41281b5a9
bf61369962342cce85de8f48942b4b150fd2721e
8a8ed12c31d89d71c3cb88f0813ded83939529206461e917dcb0b8bc11abdda4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3fb4d16c-eef2-49cc-ac24-b125a7d6d9e0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3589
x-amzn-requestid: 9c09af43-79e8-4734-b28b-4194e0bb1e4e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CW1uyE2joAMF50g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641f6991-7607d33f6301182b591c56e8;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 21:37:21 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: pjRA439kqSg5daR_Zuvsf2l45R4oqv3AMWNiMCGQ_C5o2KA8kEd3TQ==
via: 1.1 46673955829b59a6da0ab071e0b7fbea.cloudfront.net (CloudFront), 1.1 27a84054de24e45f952ea4056a821764.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:37:21 GMT
etag: "bf61369962342cce85de8f48942b4b150fd2721e"
content-type: image/jpeg
age: 44104
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc872b459-32b1-4ecb-a595-95cee4c53ca4.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc872b459-32b1-4ecb-a595-95cee4c53ca4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8e19767dbe464134f0ab81b0eadb98fa
007758853c1d1605db69131eb50ff433a4da5f8c
63f1f08cd038e7b6d3316bbdc59a598b01c3bedd1ef04ba1986152e239fa128c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc872b459-32b1-4ecb-a595-95cee4c53ca4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12991
x-amzn-requestid: 16bc16bf-b87e-4ed7-a559-3e900595928e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CW1smH_kIAMF5oA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641f6983-21e7ce61788315866c752f28;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 21:37:07 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: MOu16Tzq-SiBg8abwfGrqkmSgxnr_WMJO0wSoVcNfIW-xgIPC1MWYQ==
via: 1.1 4b800f7fa2c3fbb9f4f3c505b0df315e.cloudfront.net (CloudFront), 1.1 331202b5b8aab67acbf389883133f256.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:37:07 GMT
etag: "007758853c1d1605db69131eb50ff433a4da5f8c"
content-type: image/jpeg
age: 44118
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.r2m02.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP
Hash ff07a16d436973334c7904bf0f7442d6
c383f79fbd13b148fb49982a3f5e74a9c8c040d7
3b2783f131d1544191fd9855d802981860fe02c347c32bf45ddeba1eb0caa353
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=148554
Date: Sun, 26 Mar 2023 09:52:25 GMT
Etag: "641fb6ed-1d7"
Expires: Tue, 28 Mar 2023 03:08:19 GMT
Last-Modified: Sun, 26 Mar 2023 03:07:25 GMT
Server: ECAcc (dcb/7EC4)
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: nDEEZDzHxYCliy0zhb4ItOlnL1LaHBbYFKb16Hzfie_n9p9l8IfT1g==
Age: 54
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9bd7905eb4fc2c5cb475e20f9101fe35
6c6ceed289f9a2a778b572fce2e5ca357e49aa7b
27299721a02285bff2547c6f8aebb7ad6475acc07b004bcc7238bae0c64cbbf6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "27299721A02285BFF2547C6F8AEBB7AD6475ACC07B004BCC7238BAE0C64CBBF6"
Last-Modified: Fri, 24 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2537
Expires: Sun, 26 Mar 2023 10:34:43 GMT
Date: Sun, 26 Mar 2023 09:52:26 GMT
Connection: keep-alive
actvjoin.com/signup/?epcVIP=63.1066.g123&email=&password=&firstname=&lastname=&zip=&act=epc69324.47477-100047.34828.37_34828_8000_84976a1954e85bf8d692d625fbc4e17f.ff.qCX6032635545.8000&f_color=ffffff
302 Found 0 B URL HTTP/2 actvjoin.com/signup/?epcVIP=63.1066.g123&email=&password=&firstname=&lastname=&zip=&act=epc69324.47477-100047.34828.37_34828_8000_84976a1954e85bf8d692d625fbc4e17f.ff.qCX6032635545.8000&f_color=ffffff
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /signup/?epcVIP=63.1066.g123&email=&password=&firstname=&lastname=&zip=&act=epc69324.47477-100047.34828.37_34828_8000_84976a1954e85bf8d692d625fbc4e17f.ff.qCX6032635545.8000&f_color=ffffff HTTP/1.1
Host: actvjoin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fuck-fantasie.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 26 Mar 2023 09:52:26 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://xpndtr.com/160c26fb150/?epcVIP=63.1066.g123&email=&password=&firstname=&lastname=&zip=&act=epc69324.47477-100047.34828.37_34828_8000_84976a1954e85bf8d692d625fbc4e17f.ff.qCX6032635545.8000&f_color=ffffff&epcCID=58j0u3R640z4IeK7J1K34dAau0R8Dey7t&rtid=41643401041
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=583712f48693f816490396c9f6659d80; path=/; secure; SameSite=None
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
x-varnish: 4145960
age: 0
via: 1.1 varnish-977b4d767-f225t (Varnish/7.2)
section-io-cache: Miss
section-io-id: 5dc2557f496938bb77ef174e1263b6e3
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d4fdfcf403fe9725798bbdde5a433b7e
ce8d61e9c96c36b453ff6945cf9acc413ea26adb
57a653ae6295b5a2d7cf70cf676f7760d58081fa6339ffb7c21c2d2908a27258
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "57A653AE6295B5A2D7CF70CF676F7760D58081FA6339FFB7C21C2D2908A27258"
Last-Modified: Sat, 25 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10278
Expires: Sun, 26 Mar 2023 12:43:45 GMT
Date: Sun, 26 Mar 2023 09:52:27 GMT
Connection: keep-alive
ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js
200 OK 31 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js
IP
File type ASCII text, with very long lines (65451)
Hash 81182f4b684635f6bdcbdd907ee66f25
a1f2f151df72ede41397c8131bd47a3ce85575b3
be40946c98d9a78a3c7c9ad097d379ab12549a195bd7a4766919a1d3fd987396
GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xpndtr.com
Connection: keep-alive
Referer: https://xpndtr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30774
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 24 Mar 2023 22:25:47 GMT
expires: Sat, 23 Mar 2024 22:25:47 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Mon, 13 May 2019 14:37:17 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 127600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ajax.aspnetcdn.com/ajax/bootstrap/3.3.7/bootstrap.min.js
200 OK 9.8 kB URL HTTP/2 ajax.aspnetcdn.com/ajax/bootstrap/3.3.7/bootstrap.min.js
IP
File type ASCII text, with very long lines (32033)
Hash 432ca07a1a844dbb27f9e0ab0d468be5
7fdaf858d702f84536a515c675b4028ce2eb0cfa
12732099d21835fabf83a93eec52f7cf1847cd64a0572d18917b2e13b06d5cf0
GET /ajax/bootstrap/3.3.7/bootstrap.min.js HTTP/1.1
Host: ajax.aspnetcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xpndtr.com
Connection: keep-alive
Referer: https://xpndtr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
age: 21456892
cache-control: public,max-age=31536000
content-type: application/javascript
date: Sun, 26 Mar 2023 09:52:27 GMT
etag: "80bdc1e6cb33d21:0"
last-modified: Mon, 31 Oct 2016 23:09:59 GMT
server: ECAcc (ska/F6C5)
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 9839
X-Firefox-Spdy: h2
ajax.aspnetcdn.com/ajax/bootstrap/3.3.7/css/bootstrap.min.css
200 OK 20 kB URL HTTP/2 ajax.aspnetcdn.com/ajax/bootstrap/3.3.7/css/bootstrap.min.css
IP
File type ASCII text, with very long lines (65371)
Hash 7e2bb6028f0b19917a1a2d1944fc72b1
e1837fc75ee2ddd24c6e1df6b309ea212b57e681
cc6093bd7162882fd34252fb5d3e8e7d07247e3b70fad894320bf2a960abeda5
GET /ajax/bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: ajax.aspnetcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
age: 24551083
cache-control: public,max-age=31536000
content-type: text/css
date: Sun, 26 Mar 2023 09:52:27 GMT
etag: "0e914f2cb33d21:0"
last-modified: Mon, 31 Oct 2016 23:10:18 GMT
server: ECAcc (ska/F740)
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 19629
X-Firefox-Spdy: h2
xpndtr.com/160c26fb150/?epcVIP=63.1066.g123&email=&password=&firstname=&lastname=&zip=&act=epc69324.47477-100047.34828.37_34828_8000_84976a1954e85bf8d692d625fbc4e17f.ff.qCX6032635545.8000&f_color=ffffff&epcCID=58j0u3R640z4IeK7J1K34dAau0R8Dey7t&rtid=41643401041
200 OK 41 kB URL HTTP/2 xpndtr.com/160c26fb150/?epcVIP=63.1066.g123&email=&password=&firstname=&lastname=&zip=&act=epc69324.47477-100047.34828.37_34828_8000_84976a1954e85bf8d692d625fbc4e17f.ff.qCX6032635545.8000&f_color=ffffff&epcCID=58j0u3R640z4IeK7J1K34dAau0R8Dey7t&rtid=41643401041
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (63580)
Hash 0445e631d7defc99b9f62b32966f42c8
e220c2417fdcdcc62e5616ef910c54e90841152f
64f146b68a601b6e3cea2d66f400cfd7893fab48b118f28df826f3b7979a094d
GET /160c26fb150/?epcVIP=63.1066.g123&email=&password=&firstname=&lastname=&zip=&act=epc69324.47477-100047.34828.37_34828_8000_84976a1954e85bf8d692d625fbc4e17f.ff.qCX6032635545.8000&f_color=ffffff&epcCID=58j0u3R640z4IeK7J1K34dAau0R8Dey7t&rtid=41643401041 HTTP/1.1
Host: xpndtr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fuck-fantasie.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 26 Mar 2023 09:52:27 GMT
content-type: text/html; charset=UTF-8
set-cookie: PHPSESSID=90daf98c33a4faff1dd1dd394f650949; path=/; secure; SameSite=None
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
content-encoding: gzip
vary: Accept-Encoding
x-varnish: 3652527
age: 0
via: 1.1 varnish-977b4d767-9xtjg (Varnish/7.2)
accept-ranges: bytes
section-io-cache: Miss
section-io-id: ff5f87a0ccdd8995ce761a217cd8fe50
X-Firefox-Spdy: h2
xpndtr.com/common_tpls/images/icons/email.png
200 OK 1.3 kB URL HTTP/2 xpndtr.com/common_tpls/images/icons/email.png
IP
File type PNG image data, 26 x 26, 8-bit/color RGB, non-interlaced\012- data
Hash a86d99b9176d82a211cfa29b2f0b353f
62947ddfd87e3a21869818885e4bfa4e55ad0c11
f8e82194c97e2a11a8c77fcd55d1ded51a1943b78eefac8475890f665dc620f1
GET /common_tpls/images/icons/email.png HTTP/1.1
Host: xpndtr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/160c26fb150/?epcVIP=63.1066.g123&email=&password=&firstname=&lastname=&zip=&act=epc69324.47477-100047.34828.37_34828_8000_84976a1954e85bf8d692d625fbc4e17f.ff.qCX6032635545.8000&f_color=ffffff&epcCID=58j0u3R640z4IeK7J1K34dAau0R8Dey7t&rtid=41643401041
Cookie: PHPSESSID=90daf98c33a4faff1dd1dd394f650949
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Mar 2023 09:52:27 GMT
content-type: image/png
content-length: 1254
last-modified: Mon, 21 Aug 2017 19:32:05 GMT
etag: "599b3535-4e6"
section-io-cache-id: b8df8fa08b34d77b873aa10d1f4af91c
x-varnish: 3731364 3674158
age: 20329
via: 1.1 varnish-977b4d767-f225t (Varnish/7.2)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: 2bffb0a0bccf102e32e600d8b17df4f9
X-Firefox-Spdy: h2
xpndtr.com/common_tpls/images/icons/fname.png
200 OK 1.6 kB URL HTTP/2 xpndtr.com/common_tpls/images/icons/fname.png
IP
File type PNG image data, 26 x 26, 8-bit/color RGBA, non-interlaced\012- data
Hash 5c846870756544f39604e671d4111b9d
304938c74246e228fa82d8ca40201c3db6098074
d43abf8c5665519a3fe3f7e90298fc17b62e06d8ada1b90a44ea9985a62abb4d
GET /common_tpls/images/icons/fname.png HTTP/1.1
Host: xpndtr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/160c26fb150/?epcVIP=63.1066.g123&email=&password=&firstname=&lastname=&zip=&act=epc69324.47477-100047.34828.37_34828_8000_84976a1954e85bf8d692d625fbc4e17f.ff.qCX6032635545.8000&f_color=ffffff&epcCID=58j0u3R640z4IeK7J1K34dAau0R8Dey7t&rtid=41643401041
Cookie: PHPSESSID=90daf98c33a4faff1dd1dd394f650949
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Mar 2023 09:52:27 GMT
content-type: image/png
content-length: 1649
last-modified: Tue, 28 Nov 2017 20:52:02 GMT
etag: "5a1dcc72-671"
section-io-cache-id: 52e25a40184eef456df674b0a3556349
x-varnish: 3731365 3188498
age: 20317
via: 1.1 varnish-977b4d767-f225t (Varnish/7.2)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: de9ac16b9bb094826d5b866a775438bb
X-Firefox-Spdy: h2
xpndtr.com/common_tpls/images/icons/password.png
200 OK 1.5 kB URL HTTP/2 xpndtr.com/common_tpls/images/icons/password.png
IP
File type PNG image data, 26 x 26, 8-bit/color RGB, non-interlaced\012- data
Hash 6f100f1cdbdce928118ffa4c9293ca5b
6b1a3593e792d4c00187d60560dd03fb42df1156
8c1a6b9e0c63edc7fa86898148dc6493cd56113fabbf85d901f7af4c180fce74
GET /common_tpls/images/icons/password.png HTTP/1.1
Host: xpndtr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/160c26fb150/?epcVIP=63.1066.g123&email=&password=&firstname=&lastname=&zip=&act=epc69324.47477-100047.34828.37_34828_8000_84976a1954e85bf8d692d625fbc4e17f.ff.qCX6032635545.8000&f_color=ffffff&epcCID=58j0u3R640z4IeK7J1K34dAau0R8Dey7t&rtid=41643401041
Cookie: PHPSESSID=90daf98c33a4faff1dd1dd394f650949
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Mar 2023 09:52:27 GMT
content-type: image/png
content-length: 1452
last-modified: Tue, 22 Aug 2017 16:34:59 GMT
etag: "599c5d33-5ac"
section-io-cache-id: 8ceec332423e4ec46588f8bf258c9155
x-varnish: 4965010 5281785
age: 1946
via: 1.1 varnish-977b4d767-9xtjg (Varnish/7.2)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: f3260353b4a908cd4eb14b51b5694957
X-Firefox-Spdy: h2
xpndtr.com/common_tpls/images/icons/address.png
200 OK 1.2 kB URL HTTP/2 xpndtr.com/common_tpls/images/icons/address.png
IP
File type PNG image data, 26 x 26, 8-bit/color RGB, non-interlaced\012- data
Hash b579e9868402d708e54e1a980166c444
1c58e2890b934c0b1ab057f3ac28bedd2a082d19
67756f8b542c7823bcdba421219c3b8e1ee472748d8c3463534f667271356dfb
GET /common_tpls/images/icons/address.png HTTP/1.1
Host: xpndtr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/160c26fb150/?epcVIP=63.1066.g123&email=&password=&firstname=&lastname=&zip=&act=epc69324.47477-100047.34828.37_34828_8000_84976a1954e85bf8d692d625fbc4e17f.ff.qCX6032635545.8000&f_color=ffffff&epcCID=58j0u3R640z4IeK7J1K34dAau0R8Dey7t&rtid=41643401041
Cookie: PHPSESSID=90daf98c33a4faff1dd1dd394f650949
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Mar 2023 09:52:27 GMT
content-type: image/png
content-length: 1167
last-modified: Mon, 21 Aug 2017 19:32:05 GMT
etag: "599b3535-48f"
section-io-cache-id: e96e5af655491a1ed1876a31570faad4
x-varnish: 4965011 5375909
age: 1944
via: 1.1 varnish-977b4d767-9xtjg (Varnish/7.2)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: dd269447ad1b562cf5824bb9508abf0a
X-Firefox-Spdy: h2
ka-p.fontawesome.com/releases/v5.15.4/css/pro.min.css?token=b314bdf1b3
200 OK 54 kB URL HTTP/2 ka-p.fontawesome.com/releases/v5.15.4/css/pro.min.css?token=b314bdf1b3
IP
File type ASCII text, with very long lines (65397)
Hash dc9270247a97f75913a5d8934c24de03
ed9b0fa01b552571f99d529ed355b2ba91cfc48d
847cc3ab1ea736cbbaac34833596335471fc7a888089b501b3c83a323566f0b8
GET /releases/v5.15.4/css/pro.min.css?token=b314bdf1b3 HTTP/1.1
Host: ka-p.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xpndtr.com/
Origin: https://xpndtr.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Mar 2023 09:52:27 GMT
content-type: text/css
content-length: 54194
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
etag: "610ae215-d3b2"
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
vary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method
cf-cache-status: HIT
age: 2112872
accept-ranges: bytes
server: cloudflare
cf-ray: 7ade803e99b60b61-OSL
X-Firefox-Spdy: h2
ka-p.fontawesome.com/releases/v5.15.4/css/pro-v4-font-face.min.css?token=b314bdf1b3
200 OK 2.6 kB URL HTTP/2 ka-p.fontawesome.com/releases/v5.15.4/css/pro-v4-font-face.min.css?token=b314bdf1b3
IP
File type ASCII text, with very long lines (27832)
Hash eaaabd3f60063923cd5333eb1d7a20a1
0da69706105e28896a1f6eeaa91d5bec1b82f7f1
f863309ec0ac675409167610ff9776fa9c7620d6ee3592cc0c19d0b883ff2f70
GET /releases/v5.15.4/css/pro-v4-font-face.min.css?token=b314bdf1b3 HTTP/1.1
Host: ka-p.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xpndtr.com/
Origin: https://xpndtr.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Mar 2023 09:52:27 GMT
content-type: text/css
content-length: 2603
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
etag: "610ae215-a2b"
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
vary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method
cf-cache-status: HIT
age: 2112872
accept-ranges: bytes
server: cloudflare
cf-ray: 7ade803e99ba0b61-OSL
X-Firefox-Spdy: h2
ka-p.fontawesome.com/releases/v5.15.4/css/pro-v4-shims.min.css?token=b314bdf1b3
200 OK 4.2 kB URL HTTP/2 ka-p.fontawesome.com/releases/v5.15.4/css/pro-v4-shims.min.css?token=b314bdf1b3
IP
File type ASCII text, with very long lines (26366)
Hash 7fd743485fa194e25e2a207bff6c258a
97c999d752b95ee1ed6271a29aa58109dc17281e
dd939d69a23f003d49287291f0bcb59df58119d60bc5f14a81cbfd957894f6dc
GET /releases/v5.15.4/css/pro-v4-shims.min.css?token=b314bdf1b3 HTTP/1.1
Host: ka-p.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xpndtr.com/
Origin: https://xpndtr.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Mar 2023 09:52:27 GMT
content-type: text/css
content-length: 4194
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
etag: "610ae215-1062"
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
vary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method
cf-cache-status: HIT
age: 2112872
accept-ranges: bytes
server: cloudflare
cf-ray: 7ade803e99b90b61-OSL
X-Firefox-Spdy: h2
js-agent.newrelic.com/async-api.61caf4d9-1228.min.js
200 OK 1.1 kB URL HTTP/2 js-agent.newrelic.com/async-api.61caf4d9-1228.min.js
IP
File type ASCII text, with very long lines (2127), with no line terminators
Hash 606b062f028a46f78399bb7d44e1bf9a
0db86185b54254f268bf63ad7eab2711e197396a
7e10af14b845f8d8bf4246edf5a58ad7962b843acee6dcf7ab358fa81b0ad763
GET /async-api.61caf4d9-1228.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 4qHimWNFjregNO0v24Uwy0VSu4TmAzYd49DPoEWeovYwE4PJjf1d38C588/3E3n3tidD+bqDd6g=
x-amz-request-id: 2YKDJKAR9W4YXCRZ
last-modified: Mon, 20 Mar 2023 23:57:31 GMT
etag: "5a15fa90d5c9cf59729e937de488758b"
x-amz-server-side-encryption: AES256
x-amz-version-id: J0GluopGath26np.0jFNgGyfwhEN0LgG
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sun, 26 Mar 2023 09:52:28 GMT
via: 1.1 varnish
x-served-by: cache-bma1655-BMA
x-cache: HIT
x-cache-hits: 3938
x-timer: S1679824348.053471,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1122
X-Firefox-Spdy: h2
js-agent.newrelic.com/lazy-loader.37550b27-1228.min.js
200 OK 415 B URL HTTP/2 js-agent.newrelic.com/lazy-loader.37550b27-1228.min.js
IP
File type ASCII text, with very long lines (928), with no line terminators
Hash 5c27b117169d51b62811508a19428588
556e43e62196a24cce7eccf1ef69595759a9fbf2
c6f60726478aad438071daa75444fa323154769c9e691b135702483bf7c2a157
GET /lazy-loader.37550b27-1228.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 8doJj3ypzZDXTnbuEWGf9kkXHKLrI1CkcUoZIsWBpS0jLvtDZW9CMKuX9KRDn0F/1Ug/vSYTIkg=
x-amz-request-id: MV5VZ4WJZ8M58E8Z
last-modified: Mon, 20 Mar 2023 23:57:31 GMT
etag: "b6eaf4dad9b3e3384b0e9366ff9d0080"
x-amz-server-side-encryption: AES256
x-amz-version-id: veSIorK788CursSmiZNo6DAf4uBLqr8D
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sun, 26 Mar 2023 09:52:28 GMT
via: 1.1 varnish
x-served-by: cache-bma1655-BMA
x-cache: HIT
x-cache-hits: 2977
x-timer: S1679824348.054612,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 415
X-Firefox-Spdy: h2
js-agent.newrelic.com/862.e74e95d2-1228.min.js
200 OK 3.3 kB URL HTTP/2 js-agent.newrelic.com/862.e74e95d2-1228.min.js
IP
File type ASCII text, with very long lines (8095), with no line terminators
Hash 2c6d67d2bd7aa1f6c08a76954d047c3c
5daade1c47bb6f50b2113b517b12d44b13931e83
7126244a7f6f3d790033e16d8ccf52d4d41f5f4b98168e9efae681f220899149
GET /862.e74e95d2-1228.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: ODGthdKEh8F/R/deEYOW1Ebm5p9rPL88/GI7HSz7IV4BKMngJo2h5cORVS61qEV/RpFxp2U2dMI=
x-amz-request-id: YJ7J044SFE2WJ1F3
last-modified: Mon, 20 Mar 2023 23:57:31 GMT
etag: "ff02f82193fd2ec047cb131aa65a0dd8"
x-amz-server-side-encryption: AES256
x-amz-version-id: gDL8cpdspH3IxcZPeLUXHRvPqJEXPWmp
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sun, 26 Mar 2023 09:52:28 GMT
via: 1.1 varnish
x-served-by: cache-bma1655-BMA
x-cache: HIT
x-cache-hits: 1165
x-timer: S1679824348.205050,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 3271
X-Firefox-Spdy: h2
js-agent.newrelic.com/page_view_event-aggregate.46b69e61-1228.min.js
200 OK 1.7 kB URL HTTP/2 js-agent.newrelic.com/page_view_event-aggregate.46b69e61-1228.min.js
IP
File type ASCII text, with very long lines (3842), with no line terminators
Hash d703d7154e49d9a1ce07d4dd2b226cb7
37cadee9462cfff37a74fbcb55936a45b64e4e48
8f905564e9fb69c42bf6f862883603849a4b44c64725e0795556d1dc5f5ea084
GET /page_view_event-aggregate.46b69e61-1228.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: ZW7hZ/SVYpBomWXp9PbVUDX2IEjZH01//6PSPu4gw2lGZAq/qbtgt5IirzqSXe1xSfK6eAc61oQ=
x-amz-request-id: YJ7KVR4JV3MXV4SY
last-modified: Mon, 20 Mar 2023 23:57:31 GMT
etag: "75e56b9529bc3582d1ee120d4a1d49e9"
x-amz-server-side-encryption: AES256
x-amz-version-id: KBeqQAET2qZgk2U9E4XZJmVRm1HOq8Rk
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sun, 26 Mar 2023 09:52:28 GMT
via: 1.1 varnish
x-served-by: cache-bma1655-BMA
x-cache: HIT
x-cache-hits: 1156
x-timer: S1679824348.205462,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1729
X-Firefox-Spdy: h2
js-agent.newrelic.com/page_view_timing-aggregate.ced8c919-1228.min.js
200 OK 2.2 kB URL HTTP/2 js-agent.newrelic.com/page_view_timing-aggregate.ced8c919-1228.min.js
IP
File type ASCII text, with very long lines (5426), with no line terminators
Hash c75a5acd79c2d258696d115cb843a372
d6e6ca6e03dddd29d5bb612b7894261a8b445a98
0de60dedc16b420a590189f7e3bf8b8bdadfa33b6419834db2ffa3fa6b7e69fd
GET /page_view_timing-aggregate.ced8c919-1228.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: GB3dqnW6PpnOi3rUocoggX/qYb28eMXhMVEm8cDOh0LjJhHU9idywolI8WwfDnrXVNPyQAmCvCc=
x-amz-request-id: YJ7T5DYXGA9D7XKC
last-modified: Mon, 20 Mar 2023 23:57:31 GMT
etag: "ddb946a277f5c644d555e8e1bcf23b77"
x-amz-server-side-encryption: AES256
x-amz-version-id: ktDXvd_Dmea2UVJNoozUGAPGaGpVn1ZV
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sun, 26 Mar 2023 09:52:28 GMT
via: 1.1 varnish
x-served-by: cache-bma1655-BMA
x-cache: HIT
x-cache-hits: 341409
x-timer: S1679824348.205636,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2225
X-Firefox-Spdy: h2
js-agent.newrelic.com/jserrors-aggregate.64f61365-1228.min.js
200 OK 2.9 kB URL HTTP/2 js-agent.newrelic.com/jserrors-aggregate.64f61365-1228.min.js
IP
File type ASCII text, with very long lines (7660), with no line terminators
Hash e460383ef942d4368147befed4756575
97c96dbd480b1822fea8928db812da692d587d55
a4c77314269906cfdfc84678035cae17f03e9b836d59de9f2a1f25c943c3a030
GET /jserrors-aggregate.64f61365-1228.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: tR6AP7M/xBTQ5hWQVBwrTCyXdK10Vjdane+TQtvvTV3AmWRU7qxDmXE4ddAk0NgMSj6Hij2M49g=
x-amz-request-id: A78E2NWVZA3DYN8N
last-modified: Mon, 20 Mar 2023 23:57:31 GMT
etag: "06e9895d210a73225fa4b9a47e6e9c5a"
x-amz-server-side-encryption: AES256
x-amz-version-id: 7blonOgQSCw8rfW7sCjHyJm0L6QYtp4X
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sun, 26 Mar 2023 09:52:28 GMT
via: 1.1 varnish
x-served-by: cache-bma1655-BMA
x-cache: HIT
x-cache-hits: 214520
x-timer: S1679824348.206333,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2938
X-Firefox-Spdy: h2
js-agent.newrelic.com/metrics-aggregate.56d9a464-1228.min.js
200 OK 1.8 kB URL HTTP/2 js-agent.newrelic.com/metrics-aggregate.56d9a464-1228.min.js
IP
File type ASCII text, with very long lines (4128), with no line terminators
Hash f84674d70f2da6cf2475d96cb7bd17a3
ab21646e21c60f5434becfdddbdc7ed93dc37675
bdffea2371721acbad0ce69cbe57a6fda503fd0e4a300918aa3d8da4a598d65f
GET /metrics-aggregate.56d9a464-1228.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 9tYWuYw8BkKxP0WzUFSHj0hhJ/h+lb0pIcLzT1iE87nHv7MFgWZtzLIC3BjQ+f7xSwwC6PN3GIA=
x-amz-request-id: YJ7K11MQHVY5FB6B
last-modified: Mon, 20 Mar 2023 23:57:31 GMT
etag: "04475d81e10a8c7213d39d14e581c599"
x-amz-server-side-encryption: AES256
x-amz-version-id: cAHIZ8FQmEPf2jyMvAgXJXAVQ_Jrw1XM
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sun, 26 Mar 2023 09:52:28 GMT
via: 1.1 varnish
x-served-by: cache-bma1655-BMA
x-cache: HIT
x-cache-hits: 6685
x-timer: S1679824348.206349,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1751
X-Firefox-Spdy: h2
js-agent.newrelic.com/ajax-aggregate.e6085a9a-1228.min.js
200 OK 2.4 kB URL HTTP/2 js-agent.newrelic.com/ajax-aggregate.e6085a9a-1228.min.js
IP
File type ASCII text, with very long lines (5165), with no line terminators
Hash 02911d7d1cb7fe28b7b2bc1acf9ad6aa
d83bdd4826e1cf5c5bfd6f3aa67dd07ff20c082a
239bc00b7961a0be6e7440f295cea69127a37649aecb3ec202a24e4ceba46e37
GET /ajax-aggregate.e6085a9a-1228.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: G1LX3c31FW5dBULh9Yx0J6aZ9c3UUAbLs0SoI5436GaYvqy6migZ0Os9ZSWOX/1Eosj1eXoIeSg=
x-amz-request-id: A781Y95FH37QS1G7
last-modified: Mon, 20 Mar 2023 23:57:31 GMT
etag: "61554094cde63c6eec39f630c32a828f"
x-amz-server-side-encryption: AES256
x-amz-version-id: Z4Nlcg06uCyBNWwjTtAHDtnTc5kadigL
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sun, 26 Mar 2023 09:52:28 GMT
via: 1.1 varnish
x-served-by: cache-bma1655-BMA
x-cache: HIT
x-cache-hits: 4324
x-timer: S1679824348.206823,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2365
X-Firefox-Spdy: h2
js-agent.newrelic.com/session_trace-aggregate.ada8b15b-1228.min.js
200 OK 3.7 kB URL HTTP/2 js-agent.newrelic.com/session_trace-aggregate.ada8b15b-1228.min.js
IP
File type ASCII text, with very long lines (9901), with no line terminators
Hash 6f91df6fc998fa88f468eaa1ebd3155d
b6b7e5cf4da4aceab02cadf0a47b02868b97fcaf
a795bf965e8d8d2ffa8b93495f82a337bc23815f4fc3c54a91e13541db672348
GET /session_trace-aggregate.ada8b15b-1228.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: +X0DZKoAxksb0r5UTN80+bg7cK+bR3t91LjZWIk+6PB+yWSBmR5u3XcsQzvR9kjG9dDVIAp9/KQ=
x-amz-request-id: A78BCKN4B7HQ2WB3
last-modified: Mon, 20 Mar 2023 23:57:31 GMT
etag: "69d309900c2caeef33af662ddf91affc"
x-amz-server-side-encryption: AES256
x-amz-version-id: CejlNuOfipmDjtAs.g7oae_1BhJQzddr
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sun, 26 Mar 2023 09:52:28 GMT
via: 1.1 varnish
x-served-by: cache-bma1655-BMA
x-cache: HIT
x-cache-hits: 4313
x-timer: S1679824348.207163,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 3732
X-Firefox-Spdy: h2
js-agent.newrelic.com/page_action-aggregate.1ef08094-1228.min.js
200 OK 1.2 kB URL HTTP/2 js-agent.newrelic.com/page_action-aggregate.1ef08094-1228.min.js
IP
File type ASCII text, with very long lines (2766), with no line terminators
Hash 266c07f5762c0bc8bd699ea3321ea4b2
7753ab73650177a18565e14f64eb9164e09145b6
fd2c0b6ec6fe04fcc0fd0af6689e8bd3204c7f249d0b26a5d131e4985d9b78d3
GET /page_action-aggregate.1ef08094-1228.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: ncWrXTNXSvf3BhFGCARp2bc5UxWeuEslvIOsQV9ubBGoK2hGBZ21zXBn+Ly3zn7JqtuMnYA1z5M=
x-amz-request-id: A780TYPXZJNN5ENK
last-modified: Mon, 20 Mar 2023 23:57:31 GMT
etag: "9c1563b1437a04e5cd75285b2f4bffb0"
x-amz-server-side-encryption: AES256
x-amz-version-id: ZC9wFZ_QkK2B08VVIX3wzqk3DACA4ZFm
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sun, 26 Mar 2023 09:52:28 GMT
via: 1.1 varnish
x-served-by: cache-bma1655-BMA
x-cache: HIT
x-cache-hits: 4322
x-timer: S1679824348.207365,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1202
X-Firefox-Spdy: h2
xpndtr.com/acct/trk/?rtid=41643401041
200 OK 21 B URL HTTP/2 xpndtr.com/acct/trk/?rtid=41643401041
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 3d62e423b0e73ec3ac2c125169a9bba9
75ecc2876e8266e598cb29d9c0742e1682f14ddc
ae8ef17129cb916d2cd6a1cd1bf7c04629a19c65cf7029e3133e4b43a4034c3c
GET /acct/trk/?rtid=41643401041 HTTP/1.1
Host: xpndtr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-NewRelic-ID: VwUCVFRWCBAJV1dSDwkPVV0=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjMzNTUyNTAiLCJhcCI6IjExMDMwNzg4NDIiLCJpZCI6IjFhYzRmZmZlNTdjNzk2MzkiLCJ0ciI6ImUyNWZmY2YyZDg5OTFhNDQyMjYwNmRlYWVmODExMGIwIiwidGkiOjE2Nzk4MjQzNjMyMzl9fQ==
traceparent: 00-e25ffcf2d8991a4422606deaef8110b0-1ac4fffe57c79639-01
tracestate: 3355250@nr=0-1-3355250-1103078842-1ac4fffe57c79639----1679824363239
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://xpndtr.com/160c26fb150/?epcVIP=63.1066.g123&email=&password=&firstname=&lastname=&zip=&act=epc69324.47477-100047.34828.37_34828_8000_84976a1954e85bf8d692d625fbc4e17f.ff.qCX6032635545.8000&f_color=ffffff&epcCID=58j0u3R640z4IeK7J1K34dAau0R8Dey7t&rtid=41643401041
Cookie: PHPSESSID=90daf98c33a4faff1dd1dd394f650949
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Mar 2023 09:52:28 GMT
content-type: text/json;charset=UTF-8
content-length: 21
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
x-varnish: 5063773
age: 0
via: 1.1 varnish-977b4d767-9xtjg (Varnish/7.2)
section-io-cache: Miss
section-io-id: ec0da59dae4ba9e53e244a9b8acddf10
X-Firefox-Spdy: h2
bam.nr-data.net/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1228.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTg9XBVMbShMMRw%3D%3D&rst=3839&ck=0&s=14882ffcf8cd3ab0&ref=https://xpndtr.com/160c26fb150/&ap=90&be=3389&fe=212&dc=206&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1679824359615,%22n%22:0,%22f%22:2577,%22dn%22:2578,%22dne%22:2584,%22c%22:2584,%22s%22:2694,%22ce%22:2985,%22rq%22:2985,%22rp%22:3265,%22rpe%22:3376,%22dl%22:3268,%22di%22:3577,%22ds%22:3594,%22de%22:3598,%22dc%22:3598,%22l%22:3598,%22le%22:3606%7D,%22navigation%22:%7B%7D%7D&at=HxVQQAsaG0Q%3D&jsonp=NREUM.setToken
200 OK 49 B URL HTTP/1.1 bam.nr-data.net/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1228.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTg9XBVMbShMMRw%3D%3D&rst=3839&ck=0&s=14882ffcf8cd3ab0&ref=https://xpndtr.com/160c26fb150/&ap=90&be=3389&fe=212&dc=206&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1679824359615,%22n%22:0,%22f%22:2577,%22dn%22:2578,%22dne%22:2584,%22c%22:2584,%22s%22:2694,%22ce%22:2985,%22rq%22:2985,%22rp%22:3265,%22rpe%22:3376,%22dl%22:3268,%22di%22:3577,%22ds%22:3594,%22de%22:3598,%22dc%22:3598,%22l%22:3598,%22le%22:3606%7D,%22navigation%22:%7B%7D%7D&at=HxVQQAsaG0Q%3D&jsonp=NREUM.setToken
IP
File type ASCII text, with no line terminators
Hash ada33e5b8877e743ff658bf4bfa1867c
5a78662243dac43c0ee48bcb7e05a536b84c2e38
dac715f087720dd7ff7067f5d2ec1988851fa93140ae8a9cbfaa15659dd7fd82
GET /1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1228.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTg9XBVMbShMMRw%3D%3D&rst=3839&ck=0&s=14882ffcf8cd3ab0&ref=https://xpndtr.com/160c26fb150/&ap=90&be=3389&fe=212&dc=206&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1679824359615,%22n%22:0,%22f%22:2577,%22dn%22:2578,%22dne%22:2584,%22c%22:2584,%22s%22:2694,%22ce%22:2985,%22rq%22:2985,%22rp%22:3265,%22rpe%22:3376,%22dl%22:3268,%22di%22:3577,%22ds%22:3594,%22de%22:3598,%22dc%22:3598,%22l%22:3598,%22le%22:3606%7D,%22navigation%22:%7B%7D%7D&at=HxVQQAsaG0Q%3D&jsonp=NREUM.setToken HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 49
date: Sun, 26 Mar 2023 09:52:28 GMT
content-type: text/javascript
cross-origin-resource-policy: cross-origin
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
access-control-allow-credentials: true
access-control-allow-origin: *
x-served-by: cache-bma1652-BMA
bam.nr-data.net/events/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1228.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTg9XBVMbShMMRw%3D%3D&rst=4066&ck=0&s=14882ffcf8cd3ab0&ref=https://xpndtr.com/160c26fb150/
200 OK 24 B URL HTTP/1.1 bam.nr-data.net/events/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1228.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTg9XBVMbShMMRw%3D%3D&rst=4066&ck=0&s=14882ffcf8cd3ab0&ref=https://xpndtr.com/160c26fb150/
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash bc32ed98d624acb4008f986349a20d26
2d3df8c11d2168ce2c27e0937421d11d85016361
0c9cf152a0ad00d4f102c93c613c104914be5517ac8f8e0831727f8bfbe8b300
POST /events/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1228.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTg9XBVMbShMMRw%3D%3D&rst=4066&ck=0&s=14882ffcf8cd3ab0&ref=https://xpndtr.com/160c26fb150/ HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain
Content-Length: 675
Origin: https://xpndtr.com
Connection: keep-alive
Referer: https://xpndtr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 24
date: Sun, 26 Mar 2023 09:52:28 GMT
content-type: image/gif
access-control-allow-origin: https://xpndtr.com
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
access-control-allow-credentials: true
x-served-by: cache-bma1652-BMA
t.formatinfo.top/v1/popup-trk/close?source_id=36
200 OK 0 B URL HTTP/2 t.formatinfo.top/v1/popup-trk/close?source_id=36
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v1/popup-trk/close?source_id=36 HTTP/1.1
Host: t.formatinfo.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fuck-fantasie.com
Connection: keep-alive
Referer: https://fuck-fantasie.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 26 Mar 2023 09:52:32 GMT
content-length: 0
access-control-allow-origin: https://fuck-fantasie.com
access-control-allow-headers: Content-Type
access-control-allow-methods: POST,PUT,DELETE
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=077f7yl8sfK7iYXahohVabygetidY5U4kvQp%2FpiaYQBEpatxRxko54Gn0zsBB2iM2swIYi5IELUwjGcTWEDi2rKOgU2%2BDg65BdeFuWJZBQC%2FF1HkQIvcuMPI4AWQbDhHUP0m"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ade80590aab1c0a-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
t.formatinfo.top/v1/popup-trk/show?source_id=36
200 OK 424 B URL HTTP/2 t.formatinfo.top/v1/popup-trk/show?source_id=36
IP
Hash 310a3daf3ec5119eb79b5b35bb06b657
59fa3551207ada71410343885eb6e76bf296b3cf
7add8cd1f83fd9e07156f73973c23a8554fc6901f0e636247b552b5512be02c3
GET /v1/popup-trk/show?source_id=36 HTTP/1.1
Host: t.formatinfo.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fuck-fantasie.com
Connection: keep-alive
Referer: https://fuck-fantasie.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 26 Mar 2023 09:52:32 GMT
content-length: 0
access-control-allow-origin: https://fuck-fantasie.com
access-control-allow-headers: Content-Type
access-control-allow-methods: POST,PUT,DELETE
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wvxaqLdhY%2BjNs6g5bXrSHF48yBoC3HB%2Br3ceYMw5gS2%2FdKJ7AX%2BvUWpR2WUZ8rHKmWnrayTpTcBnLazSn0NTWskRqmAPWtU6TKvRkPZydJxzft4R5pLgHbujmPiDGd1D6vPV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ade80590ab11c0a-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d1c1d28-ce70-4700-b792-c3cd3b6a06c5.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d1c1d28-ce70-4700-b792-c3cd3b6a06c5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 36a60c74992a65b12db6f631deb84728
d46ed5863a7a29ff508acd61b8c8cc514b115d03
fd1515b96769a04260213276aea05cb5a0b37ae02590f7e94e3f143108c1c27f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d1c1d28-ce70-4700-b792-c3cd3b6a06c5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 10632
x-amzn-requestid: f64ed87f-d270-4f7f-8098-6766fc171786
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CW1kWHEpIAMF31g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641f694e-1e438ce43655540f4cf1d25a;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 21:36:14 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Q8IPNi9zZqdVS51x_ll7ax62L81C95O8hFEKu4ruMgIAno80V7UGvw==
via: 1.1 b3cdce1c2fc39b89f45c98c417351f26.cloudfront.net (CloudFront), 1.1 4c48e9fb20d53d40e9fe273dbdae1098.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 22:11:44 GMT
age: 42048
etag: "d46ed5863a7a29ff508acd61b8c8cc514b115d03"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fuck-fantasie.com/jpt/?pub_id=34828&cid=37_34828_8000_84976a1954e85bf8d692d625fbc4e17f&source=ff
200 OK 0 B URL HTTP/2 fuck-fantasie.com/jpt/?pub_id=34828&cid=37_34828_8000_84976a1954e85bf8d692d625fbc4e17f&source=ff
IP
GET /jpt/?pub_id=34828&cid=37_34828_8000_84976a1954e85bf8d692d625fbc4e17f&source=ff HTTP/1.1
Host: fuck-fantasie.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sun, 26 Mar 2023 09:52:23 GMT
content-type: text/html
last-modified: Fri, 10 Feb 2023 14:35:06 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N1JyegaBILc4KNjRkXZC2uagmqcs6R21qQm68c9wl8Ng8dbHPThttxLks9JLzljBvoIqgHPClfwaXs6nOVowgsFcVK55QLhraULwCk060u2q4jkkY4xsnenyByCXEMHWnhVlow%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ade8024e82cb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Archivo+Black&family=Secular+One&family=Signika+Negative&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Archivo+Black&family=Secular+One&family=Signika+Negative&display=swap
IP
GET /css2?family=Archivo+Black&family=Secular+One&family=Signika+Negative&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fuck-fantasie.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 26 Mar 2023 09:52:24 GMT
date: Sun, 26 Mar 2023 09:52:24 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
hotrtr.com/cr.php?cid=916&ACT=69324&TRK=34828.37_34828_8000_84976a1954e85bf8d692d625fbc4e17f.ff
302 Found 0 B URL HTTP/2 hotrtr.com/cr.php?cid=916&ACT=69324&TRK=34828.37_34828_8000_84976a1954e85bf8d692d625fbc4e17f.ff
IP
GET /cr.php?cid=916&ACT=69324&TRK=34828.37_34828_8000_84976a1954e85bf8d692d625fbc4e17f.ff HTTP/1.1
Host: hotrtr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fuck-fantasie.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 26 Mar 2023 09:52:25 GMT
content-type: text/html; charset=UTF-8
location: https://fastlnd.com/ep.php/JK-prmagms:76181/69324:34828.37_34828_8000_84976a1954e85bf8d692d625fbc4e17f.ff.qCX6032635545.8000
set-cookie: AWSALB=Y8MIYezRcj+i5l8O4zLHVKJ7Lf6EGWXt9xujFnPh/NYOt1aTLHYmeC2XQpmApSZNLwvZ6g+U1mBPRPdCoxi5oYq9mXTeO1cMYBRq+oU5cvAWx6fN12rwQJ3+U0Ka; Expires=Sun, 02 Apr 2023 09:52:25 GMT; Path=/
AWSALBCORS=Y8MIYezRcj+i5l8O4zLHVKJ7Lf6EGWXt9xujFnPh/NYOt1aTLHYmeC2XQpmApSZNLwvZ6g+U1mBPRPdCoxi5oYq9mXTeO1cMYBRq+oU5cvAWx6fN12rwQJ3+U0Ka; Expires=Sun, 02 Apr 2023 09:52:25 GMT; Path=/; SameSite=None; Secure
hskp=qCX6032635545%2C; expires=Sun, 09-Apr-2023 09:52:25 GMT; Max-Age=1209600
skip=-1679824345%2C2578; expires=Sun, 26-Mar-2023 10:02:25 GMT; Max-Age=600
916_2578_0=1679824345; expires=Mon, 27-Mar-2023 09:52:25 GMT; Max-Age=86400
server: Apache
X-Firefox-Spdy: h2
xpndtr.com/common_tpls/js/iframeResizer.contentWindow.min.js
200 OK 0 B URL HTTP/2 xpndtr.com/common_tpls/js/iframeResizer.contentWindow.min.js
IP
GET /common_tpls/js/iframeResizer.contentWindow.min.js HTTP/1.1
Host: xpndtr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/160c26fb150/?epcVIP=63.1066.g123&email=&password=&firstname=&lastname=&zip=&act=epc69324.47477-100047.34828.37_34828_8000_84976a1954e85bf8d692d625fbc4e17f.ff.qCX6032635545.8000&f_color=ffffff&epcCID=58j0u3R640z4IeK7J1K34dAau0R8Dey7t&rtid=41643401041
Cookie: PHPSESSID=90daf98c33a4faff1dd1dd394f650949
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Mar 2023 09:52:27 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Thu, 04 Feb 2016 15:06:03 GMT
etag: W/"56b368db-3445"
section-io-cache-id: 41b5cfe15a5dc083f0c7a793de84563b
x-varnish: 3652535 4571757
age: 1946
via: 1.1 varnish-977b4d767-9xtjg (Varnish/7.2)
section-io-cache: Hit
content-encoding: gzip
section-io-id: 69c2a349b6f2f1436aef8cb77310ff22
X-Firefox-Spdy: h2
js-agent.newrelic.com/spa-aggregate.7222cbb6-1228.min.js
200 OK 0 B URL HTTP/2 js-agent.newrelic.com/spa-aggregate.7222cbb6-1228.min.js
IP
GET /spa-aggregate.7222cbb6-1228.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 02ZRvWQSsN7ybgz1cY3Zukb2GtJMJ5tGgboRn1skksUpKHUfjBWKaKNSwurVz5txcdRBseQ+rYI=
x-amz-request-id: A782FPCSK4KTQ306
last-modified: Mon, 20 Mar 2023 23:57:31 GMT
etag: "5d22b006d12752c6dafe1b5f41318762"
x-amz-server-side-encryption: AES256
x-amz-version-id: 8nTKqPmpPpJMnC7V_9l7a.Xfo0rf._qG
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sun, 26 Mar 2023 09:52:28 GMT
via: 1.1 varnish
x-served-by: cache-bma1655-BMA
x-cache: HIT
x-cache-hits: 1853
x-timer: S1679824348.207653,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 6663
X-Firefox-Spdy: h2
xpndtr.com/common_tpls/js/form_support.js?v=1101202201
200 OK 0 B URL HTTP/2 xpndtr.com/common_tpls/js/form_support.js?v=1101202201
IP
GET /common_tpls/js/form_support.js?v=1101202201 HTTP/1.1
Host: xpndtr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/160c26fb150/?epcVIP=63.1066.g123&email=&password=&firstname=&lastname=&zip=&act=epc69324.47477-100047.34828.37_34828_8000_84976a1954e85bf8d692d625fbc4e17f.ff.qCX6032635545.8000&f_color=ffffff&epcCID=58j0u3R640z4IeK7J1K34dAau0R8Dey7t&rtid=41643401041
Cookie: PHPSESSID=90daf98c33a4faff1dd1dd394f650949
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Mar 2023 09:52:27 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 18 Nov 2022 21:23:38 GMT
etag: W/"6377f7da-ed7"
section-io-cache-id: e3eb8f4fba00f7d64a4ca65145af09aa
x-varnish: 3731362 4722565
age: 20317
via: 1.1 varnish-977b4d767-f225t (Varnish/7.2)
section-io-cache: Hit
content-encoding: gzip
section-io-id: 4bc455e21da8808cc902e05849096be9
X-Firefox-Spdy: h2
xpndtr.com/common_tpls/js/validate_form_v2.js?jsv=33
200 OK 0 B URL HTTP/2 xpndtr.com/common_tpls/js/validate_form_v2.js?jsv=33
IP
GET /common_tpls/js/validate_form_v2.js?jsv=33 HTTP/1.1
Host: xpndtr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/160c26fb150/?epcVIP=63.1066.g123&email=&password=&firstname=&lastname=&zip=&act=epc69324.47477-100047.34828.37_34828_8000_84976a1954e85bf8d692d625fbc4e17f.ff.qCX6032635545.8000&f_color=ffffff&epcCID=58j0u3R640z4IeK7J1K34dAau0R8Dey7t&rtid=41643401041
Cookie: PHPSESSID=90daf98c33a4faff1dd1dd394f650949
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Mar 2023 09:52:27 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Mon, 13 Feb 2023 23:40:03 GMT
etag: W/"63eaca53-63ed"
section-io-cache-id: 9723f16f5e8f820b04e6458dac01aae6
x-varnish: 4708927 3674200
age: 20311
via: 1.1 varnish-977b4d767-f225t (Varnish/7.2)
section-io-cache: Hit
content-encoding: gzip
section-io-id: a4f0d4972d81dd39948172e6e8bafc19
X-Firefox-Spdy: h2
kit.fontawesome.com/b314bdf1b3.js
200 OK 0 B URL HTTP/2 kit.fontawesome.com/b314bdf1b3.js
IP
GET /b314bdf1b3.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xpndtr.com
Connection: keep-alive
Referer: https://xpndtr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 26 Mar 2023 09:52:27 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, must-revalidate
strict-transport-security: max-age=31536000; preload
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: F0htQbRFX-bLj3zXVyZi
cf-cache-status: HIT
server: cloudflare
cf-ray: 7ade803dc8f90b61-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
52.19.101.114
142.250.74.42
23.33.119.27
172.255.248.105
104.18.22.52