| go.trklinkcm.com/aff_c?offer_id=8000&aff_id=53724&url_id=0 |  172.255.248.105 | 302 Found | 264 B |
URL HTTP/1.1go.trklinkcm.com/aff_c?offer_id=8000&aff_id=53724&url_id=0 IP172.255.248.105:0
File typeHTML document, ASCII text, with no line terminators Hash28db6b2137d9847a0bf1453e7846cea9 bdbf399eb92e697a97b3f6e4443fc3095422d8db 705b9d8ca8398892be0448b3a2cc34285ae3610107f76ab6e542198bb929a0fe
GET /aff_c?offer_id=8000&aff_id=53724&url_id=0 HTTP/1.1
Host: go.trklinkcm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 22 Mar 2023 16:16:55 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 264
Connection: keep-alive
X-DNS-Prefetch-Control: off
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Download-Options: noopen
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Set-Cookie: language=en; Domain=go.trklinkcm.com; Path=/; Expires=Fri, 21 Apr 2023 16:16:55 GMT
test=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT
8000=37_53724_8000_ee8288104a4c204f2be1625242db4164; Domain=go.trklinkcm.com; Path=/; Expires=Fri, 21 Apr 2023 16:16:55 GMT
op_8000=0; Domain=go.trklinkcm.com; Path=/; Expires=Fri, 21 Apr 2023 16:16:55 GMT
user_id=bb2555e9-907a-4b93-a0ec-81b3c714f724_fad62f1cda4e596a139099f995efcac4; Domain=go.trklinkcm.com; Path=/; Expires=Mon, 20 Mar 2028 16:16:55 GMT; Secure; SameSite=None
Location: https://fuck-fantasie.com/jpt/?pub_id=53724&cid=37_53724_8000_ee8288104a4c204f2be1625242db4164&source=
Vary: Accept
Cache-Control: no-store, no-cache
|
|
| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashec332b81a27117ce9c16b67a5a8e4fac b6d2afa2c859d000ad830d3d8d73f57bac6ffce2 1dc32c78e4e850303813338fd4e9616a41c8c05d1063748a1e76a92c397a5e8f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1DC32C78E4E850303813338FD4E9616A41C8C05D1063748A1E76A92C397A5E8F"
Last-Modified: Mon, 20 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5449
Expires: Wed, 22 Mar 2023 17:47:45 GMT
Date: Wed, 22 Mar 2023 16:16:56 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash65fc860bc043f3fb83bdc3debdcd322d 418010755deae099ef1284e402813c5837a10f42 d93d50c523c7f735987aba09db628259441eb75efe713a2df3c214e1fb8b5171
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D93D50C523C7F735987ABA09DB628259441EB75EFE713A2DF3C214E1FB8B5171"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12947
Expires: Wed, 22 Mar 2023 19:52:43 GMT
Date: Wed, 22 Mar 2023 16:16:56 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash84db75194692d4afe13196bda6f22da8 4c1f49bc973a4917f146d93c8d598344edc021f6 a3bec66f95b3bdf1d310c726e8ed05f7b06c1901c62381a94582d581844d2c23
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Alert, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 22 Mar 2023 16:15:01 GMT
content-type: application/json
age: 115
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash51a5d4696a6090c295850554508b51ce c44e143c2223546e64b19f543b8101aaf3b11e97 8794223d5e8d4d276c35e2fdcc24bf99694240634dd749cd9b5bf874dec055cf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8794223D5E8D4D276C35E2FDCC24BF99694240634DD749CD9B5BF874DEC055CF"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7838
Expires: Wed, 22 Mar 2023 18:27:34 GMT
Date: Wed, 22 Mar 2023 16:16:56 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hashe7bace7c1e04d44012e37ddffe36e5d5 3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2 6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Nw0S44SAs2dbLSwpL8NNLSXFyqstPQAFL4Ay7HEWZT7ZWBRMi/Igk7TNef0Fp8W/ukcdAsZLxTs=
x-amz-request-id: 367SG9MGCGNP0RDE
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 22 Mar 2023 15:59:35 GMT
age: 1041
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 16:16:56 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-2.2.4.min.js | 69.16.175.10 | 200 OK | 30 kB |
URL HTTP/2code.jquery.com/jquery-2.2.4.min.js IP69.16.175.10:0
File typeASCII text, with very long lines (32065) Hash82885772205f23cd59e25a221521b059 96ed36f45544295f28df1ab251e7e38faceeff0e 8e85465daae15b31a1837a4112cf920c1eeec7a5c189595651b3a53cb9b97215
GET /jquery-2.2.4.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fuck-fantasie.com
Connection: keep-alive
Referer: https://fuck-fantasie.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Mar 2023 16:16:56 GMT
content-encoding: gzip
content-length: 29811
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-14e4a"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1679501816.dop208.sk1.t,1679501816.cds252.sk1.hn,1679501816.cds214.sk1.c
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.163 | 200 OK | 471 B |
IP142.250.74.163:0
Hash06adbc463c1bafb4b79a2d2f10791ef8 30a6d093719f89764805f62102b0a07c493016a0 64000d2bedca454efa1fc2de6083ca06cb3e94b33565427ba9ac7c9345a926fb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 16:16:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.163 | 200 OK | 471 B |
IP142.250.74.163:0
Hash06adbc463c1bafb4b79a2d2f10791ef8 30a6d093719f89764805f62102b0a07c493016a0 64000d2bedca454efa1fc2de6083ca06cb3e94b33565427ba9ac7c9345a926fb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 16:16:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Last-Modified, Retry-After, Content-Length, Alert, Cache-Control, Expires, Content-Type, Backoff, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 22 Mar 2023 16:14:33 GMT
age: 143
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.163 | 200 OK | 471 B |
IP142.250.74.163:0
Hash0086fc6b6b52670b2d7ca51fc65d8d44 1d906db50d0373e0e3e1e85031de970218264f4d 24a9078b3b1b7b060c8e68777d0baaa3651c18cebe9107a2598f07981086f830
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 16:16:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/archivoblack/v17/HTxqL289NzCGg4MzN6KJ7eW6CYyF_g.woff2 | 216.58.207.227 | 200 OK | 19 kB |
URL HTTP/2fonts.gstatic.com/s/archivoblack/v17/HTxqL289NzCGg4MzN6KJ7eW6CYyF_g.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 18604, version 1.0\012- data Hash4b6914a69e6a586fbe253f73d19d90b0 1f965709606b88830826c45ef0ebcfe3484aa674 25f33e61cf995abd6be62931cf03bf427286259177b43618cc410ee0157cfd30
GET /s/archivoblack/v17/HTxqL289NzCGg4MzN6KJ7eW6CYyF_g.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fuck-fantasie.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18604
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Mar 2023 17:33:30 GMT
expires: Thu, 14 Mar 2024 17:33:30 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 19 Apr 2022 19:33:53 GMT
content-type: font/woff2
age: 600206
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.163 | 200 OK | 471 B |
IP142.250.74.163:0
Hash0086fc6b6b52670b2d7ca51fc65d8d44 1d906db50d0373e0e3e1e85031de970218264f4d 24a9078b3b1b7b060c8e68777d0baaa3651c18cebe9107a2598f07981086f830
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 16:16:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash050ca4dc2182e0a27573b0d9f32b7834 bec14dc5af0d0b32210470673511acd8db404308 b6129b9d1848f75265dca4446c5399927bdaf15c7b49c083765847b0fe276eaf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B6129B9D1848F75265DCA4446C5399927BDAF15C7B49C083765847B0FE276EAF"
Last-Modified: Wed, 22 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7266
Expires: Wed, 22 Mar 2023 18:18:03 GMT
Date: Wed, 22 Mar 2023 16:16:57 GMT
Connection: keep-alive
|
|
| ocsp.r2m02.amazontrust.com/ | 54.230.80.227 | 200 OK | 471 B |
URL HTTP/1.1ocsp.r2m02.amazontrust.com/ IP54.230.80.227:0
Hash578ef1ac594ff72371cb1e68c848591e 47ab35b4754c1d7dc7b5cbee7990394e16f65617 e9bb2d92c7eb1d89458f9b8f87e56a6cd41dd47537dde1043587a0f79fd69bd0
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Wed, 22 Mar 2023 16:16:57 GMT
Etag: "641ad8d5-1d7"
Server: ECAcc (dcb/7EF0)
X-Cache: Miss from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: rOuR15d8-oG064Cvp085zV3YiMmEb2-CT18NJE_cJmrYK32Ioybybw==
|
|
| push.services.mozilla.com/ | 35.163.190.146 | 101 Switching Protocols | 424 B |
URL HTTP/1.1push.services.mozilla.com/ IP35.163.190.146:0
Hash310a3daf3ec5119eb79b5b35bb06b657 59fa3551207ada71410343885eb6e76bf296b3cf 7add8cd1f83fd9e07156f73973c23a8554fc6901f0e636247b552b5512be02c3
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: njv43MlG17nm+r8FhYQtPQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: AG+FWXkjULZvfJ92e8MPiShbWJw=
|
|
| ocsp.r2m02.amazontrust.com/ | 54.230.80.227 | 200 OK | 471 B |
URL HTTP/1.1ocsp.r2m02.amazontrust.com/ IP54.230.80.227:0
Hashf506e4a4ca4ced5c84b5dad3339ecec8 c972d81463510736ffc3d512d97ef3837710726b 9aaeabb6a14bc012657ee5daa703c277cc8b46aff5a16fe320aa3bb3ddbca081
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=125864
Date: Wed, 22 Mar 2023 16:16:58 GMT
Etag: "641a70f6-1d7"
Expires: Fri, 24 Mar 2023 03:14:42 GMT
Last-Modified: Wed, 22 Mar 2023 03:07:34 GMT
Server: ECAcc (dcb/7EFC)
X-Cache: Miss from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Z1p9ATJNgxm7OEk9xmvvdj3ezzQr8ws9WyrznYHHO8O4Rkm8jmZSwg==
Age: 428
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hasha0d3d7099bbc5fed74a6e78e1a3096bf 96afaf8b3ac053577c56aca5f4a20d8655ecb771 c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14653
Expires: Wed, 22 Mar 2023 20:21:11 GMT
Date: Wed, 22 Mar 2023 16:16:58 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hasha0d3d7099bbc5fed74a6e78e1a3096bf 96afaf8b3ac053577c56aca5f4a20d8655ecb771 c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14653
Expires: Wed, 22 Mar 2023 20:21:11 GMT
Date: Wed, 22 Mar 2023 16:16:58 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hasha0d3d7099bbc5fed74a6e78e1a3096bf 96afaf8b3ac053577c56aca5f4a20d8655ecb771 c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14653
Expires: Wed, 22 Mar 2023 20:21:11 GMT
Date: Wed, 22 Mar 2023 16:16:58 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hasha0d3d7099bbc5fed74a6e78e1a3096bf 96afaf8b3ac053577c56aca5f4a20d8655ecb771 c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14653
Expires: Wed, 22 Mar 2023 20:21:11 GMT
Date: Wed, 22 Mar 2023 16:16:58 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F725f0930-57cc-4b81-8685-8be1acf4b380.jpeg | 34.120.237.76 | 200 OK | 3.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F725f0930-57cc-4b81-8685-8be1acf4b380.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash7a9178701002b637a130aec44024349b d51674c9b6d98baa4ec3905e2982ffecfcb1e9cb d3888f5cc4aef7239fe7d1ae8cee2f1ca94d1c1524b1629a1da5d6327376b5da
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F725f0930-57cc-4b81-8685-8be1acf4b380.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3474
x-amzn-requestid: ac3a81e6-328d-4944-beda-d9c85de30aff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJqP6F8gIAMFoww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a23ff-52d04e4a6adace9e17003e80;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:39:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: WzP3lkcd3AEE-N0bujYeE5UWkvfG5xmGfqLCbIv04YMkJ_E4OaThEg==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 9adef5b1c5fc9ca80d6f4f8d19e103a2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Mar 2023 22:09:39 GMT
etag: "d51674c9b6d98baa4ec3905e2982ffecfcb1e9cb"
content-type: image/jpeg
age: 65239
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22c3f36a-d800-4eab-8a32-e2b5ef86e386.jpeg | 34.120.237.76 | 200 OK | 9.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22c3f36a-d800-4eab-8a32-e2b5ef86e386.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash412bd6aea60211324e649d7d920601d2 a813976bda850a584b5ab94d9a70bfe0da69aca0 d36ef17fc6ab3cd4e5e43836f7df2c6fdf1781f1bac73e42c9a09e8594f797f9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22c3f36a-d800-4eab-8a32-e2b5ef86e386.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9459
x-amzn-requestid: 1b374321-f2df-404f-ab91-4e73d830fac9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJqmAEhHoAMFgRQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a248c-217d81154ecfe0c44ca70432;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:41:32 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: akl7ASh6hPewrlTjOxORbQRIcBbIHLM9JQgMexhgsiPqc1OarfnPHw==
via: 1.1 8ae6af4d17aae7471e5fe2792eb6abcc.cloudfront.net (CloudFront), 1.1 2c6b5dd77f1abe60653ce0454f344b64.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Mar 2023 21:47:59 GMT
age: 66539
etag: "a813976bda850a584b5ab94d9a70bfe0da69aca0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2f57fa6-bac5-42a3-be66-ebcc96d82ea2.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2f57fa6-bac5-42a3-be66-ebcc96d82ea2.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash2062cf7a271d4ac7a04c0a746d443e07 3343851f2128c5f1fe4302c2aa53e8ce1fb661ac e479263c1742d2597cf8948ef059b0bc97dbb97f47bb5cafee3d4af12069d2ce
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2f57fa6-bac5-42a3-be66-ebcc96d82ea2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10407
x-amzn-requestid: 87aba2e6-d7e8-4456-a12f-e05ac556b839
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJqJhGnXIAMF1yA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a23d6-2b6c3d62366f47f506ce8415;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:38:30 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 0o5WYZHvY_8BBGYe5Nc8R4wywGaEn5C71XI7vc_ScMv7GixtP9LyTw==
via: 1.1 b3cdce1c2fc39b89f45c98c417351f26.cloudfront.net (CloudFront), 1.1 219e8f088c8c2a564bdacafe44be620a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Mar 2023 22:01:15 GMT
age: 65743
etag: "3343851f2128c5f1fe4302c2aa53e8ce1fb661ac"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F882a2ebf-b22a-46de-bf52-8b9a1aaa2743.jpeg | 34.120.237.76 | 200 OK | 8.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F882a2ebf-b22a-46de-bf52-8b9a1aaa2743.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashaeb0d8069d746e467fecd886c0e42628 8229b537f84a7418dc67e30691e62db4cea67f0f 24705dc5b7eefd79a35323beee7c741aa041c3bf55801d13b4ffc2b202e6a394
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F882a2ebf-b22a-46de-bf52-8b9a1aaa2743.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8037
x-amzn-requestid: 7a9f7bb5-d810-4831-b5d2-3eead1af864a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJprcGY1IAMFSAg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2315-53cdee4b645ed18e1dfeb92c;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:17 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: QW8T5AGg_L1mT4fE8IHeBG9TSiGpbBJpZE2yZdBtAQMJCPV8OKK5Dw==
via: 1.1 a87682502db4b394cc6ba84510da9f98.cloudfront.net (CloudFront), 1.1 ae06b19943a6bad1c1b12b79f7339498.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Mar 2023 21:47:59 GMT
etag: "8229b537f84a7418dc67e30691e62db4cea67f0f"
content-type: image/jpeg
age: 66539
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ac1765-db6c-42e3-99bf-d857d27a34b9.jpeg | 34.120.237.76 | 200 OK | 5.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ac1765-db6c-42e3-99bf-d857d27a34b9.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashc831201ad81f55c63c1b101ce854a810 0e9b952f6489f0a5f4862d3bea2fbe0ecdd379e5 c854489720d2ca4a95eef00addda0fcdaf481402d044df7725282654a97eb54a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ac1765-db6c-42e3-99bf-d857d27a34b9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5556
x-amzn-requestid: dd5a8417-ddd5-469d-aa84-e880f4b84464
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CHqKFGRsoAMFTGQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6419570d-3f28a7502b56eda47dd82ba7;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 07:04:45 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: FQwexS3AfCYYOg7T9MYj2AbSoYTII1t-c-aX4SzlwEsj0LgBWv5Now==
via: 1.1 ee6ea1e4552345de209d26f9ffb35d4a.cloudfront.net (CloudFront), 1.1 8cb7de37a1655236518810d0aabb8656.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 06:23:16 GMT
age: 35622
etag: "0e9b952f6489f0a5f4862d3bea2fbe0ecdd379e5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08561a1f-1d19-45db-be98-107d6b1ed25d.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08561a1f-1d19-45db-be98-107d6b1ed25d.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash6f0b9e85381489dcf646c251722b21d4 5f7ea91288a2170bcabdca6be296718c4191eacd 911f803271ad9053ebac3787bdde9b75ec604acc6aa28692cc8e4c5c4fb61483
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08561a1f-1d19-45db-be98-107d6b1ed25d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10480
x-amzn-requestid: 58aa8272-4b4e-4a2f-9d6e-d47f70891c49
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJptHG7JoAMFSwA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2320-2fd6502b1271d5c13b4ebbe9;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:28 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: hqGFdT1Sk0IcvaNqfvjz5RsGBK-qMBcNKbK9FyZ7OoiH30hDL9ekxA==
via: 1.1 2241406ac19fffc8f35d6ddef8e22f56.cloudfront.net (CloudFront), 1.1 de2dd11312f7d5ad3bcd0cb112c7fd0e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Mar 2023 22:09:39 GMT
age: 65239
etag: "5f7ea91288a2170bcabdca6be296718c4191eacd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash1d28ce7a7154b9b1e6c68554d672b6e0 a99a6bd69ef8e29c9768db8a9a0c76805d060714 9a7a924a5da5351af58dc44d0964cd13311d55540957812d2061a11ecab8cb17
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9A7A924A5DA5351AF58DC44D0964CD13311D55540957812D2061A11ECAB8CB17"
Last-Modified: Wed, 22 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1583
Expires: Wed, 22 Mar 2023 16:43:21 GMT
Date: Wed, 22 Mar 2023 16:16:58 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashb20adedc48ae8801e53a4dfbed0e0d36 415472028f2db0cd8a7724a7a011061c2198734c 147ed38fa2ba6c9bb898a84fa3eff2143bbcd7b64acbb8888fe57ba7a824c283
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "147ED38FA2BA6C9BB898A84FA3EFF2143BBCD7B64ACBB8888FE57BA7A824C283"
Last-Modified: Mon, 20 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9116
Expires: Wed, 22 Mar 2023 18:48:55 GMT
Date: Wed, 22 Mar 2023 16:16:59 GMT
Connection: keep-alive
|
|
| ajax.aspnetcdn.com/ajax/bootstrap/3.3.7/css/bootstrap.min.css | 152.199.19.160 | 200 OK | 20 kB |
URL HTTP/2ajax.aspnetcdn.com/ajax/bootstrap/3.3.7/css/bootstrap.min.css IP152.199.19.160:0
File typeASCII text, with very long lines (65371) Hash7e2bb6028f0b19917a1a2d1944fc72b1 e1837fc75ee2ddd24c6e1df6b309ea212b57e681 cc6093bd7162882fd34252fb5d3e8e7d07247e3b70fad894320bf2a960abeda5
GET /ajax/bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: ajax.aspnetcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
age: 24228555
cache-control: public,max-age=31536000
content-type: text/css
date: Wed, 22 Mar 2023 16:16:59 GMT
etag: "0e914f2cb33d21:0"
last-modified: Mon, 31 Oct 2016 23:10:18 GMT
server: ECAcc (ska/F740)
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 19629
X-Firefox-Spdy: h2
|
|
| ajax.aspnetcdn.com/ajax/bootstrap/3.3.7/bootstrap.min.js | 152.199.19.160 | 200 OK | 9.8 kB |
URL HTTP/2ajax.aspnetcdn.com/ajax/bootstrap/3.3.7/bootstrap.min.js IP152.199.19.160:0
File typeASCII text, with very long lines (32033) Hash432ca07a1a844dbb27f9e0ab0d468be5 7fdaf858d702f84536a515c675b4028ce2eb0cfa 12732099d21835fabf83a93eec52f7cf1847cd64a0572d18917b2e13b06d5cf0
GET /ajax/bootstrap/3.3.7/bootstrap.min.js HTTP/1.1
Host: ajax.aspnetcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xpndtr.com
Connection: keep-alive
Referer: https://xpndtr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
age: 21134364
cache-control: public,max-age=31536000
content-type: application/javascript
date: Wed, 22 Mar 2023 16:16:59 GMT
etag: "80bdc1e6cb33d21:0"
last-modified: Mon, 31 Oct 2016 23:09:59 GMT
server: ECAcc (ska/F6C5)
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 9839
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js | 216.58.207.234 | 200 OK | 31 kB |
URL HTTP/2ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js IP216.58.207.234:0
File typeASCII text, with very long lines (65451) Hash81182f4b684635f6bdcbdd907ee66f25 a1f2f151df72ede41397c8131bd47a3ce85575b3 be40946c98d9a78a3c7c9ad097d379ab12549a195bd7a4766919a1d3fd987396
GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xpndtr.com
Connection: keep-alive
Referer: https://xpndtr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30774
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Mar 2023 22:25:46 GMT
expires: Thu, 14 Mar 2024 22:25:46 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Mon, 13 May 2019 14:37:17 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 582673
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| xpndtr.com/common_tpls/compactML/css/epcff.css | 207.120.33.8 | 200 OK | 8.4 kB |
URL HTTP/2xpndtr.com/common_tpls/compactML/css/epcff.css IP207.120.33.8:0
File typeASCII text, with very long lines (52331), with no line terminators Hashed24fec3d69d7d624c46074182760534 0ad4efdb5fcba381eec34e5183f553a40ed726ce 11e387467feef2ef56541b341867d58b1aa9be9fddd6ce2a1ddae3bf467ab181
GET /common_tpls/compactML/css/epcff.css HTTP/1.1
Host: xpndtr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/743aeee2dec8/?epcVIP=63.1066.g123&email=&password=&firstname=&lastname=&zip=&act=epc69324.47473-335576.53724.37_53724_8000_ee8288104a4c204f2be1625242db4164..JpO%3A032258617.8000&f_color=ffffff&epcCID=h8t0B3t6U0T4FeS7P1Q3jdLaB0g8Kex7l&rtid=91630056477
Cookie: PHPSESSID=2a0e91a1892f7a69b503ede9a50b7860
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Mar 2023 16:16:59 GMT
content-type: text/css
content-length: 8427
last-modified: Tue, 17 May 2022 21:08:38 GMT
etag: "62840ed6-cc6b"
content-encoding: gzip
vary: Accept-Encoding
section-io-cache-id: 14d02163c300356097f0daa12e36731c
x-varnish: 1471886 451831
age: 1598
via: 1.1 varnish-977b4d767-t7fp5 (Varnish/7.2)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: a4ac7dfcba6598504aebbde0ef24232d
X-Firefox-Spdy: h2
|
|
| xpndtr.com/common_tpls/images/icons/email.png | 207.120.33.8 | 200 OK | 1.3 kB |
URL HTTP/2xpndtr.com/common_tpls/images/icons/email.png IP207.120.33.8:0
File typePNG image data, 26 x 26, 8-bit/color RGB, non-interlaced\012- data Hasha86d99b9176d82a211cfa29b2f0b353f 62947ddfd87e3a21869818885e4bfa4e55ad0c11 f8e82194c97e2a11a8c77fcd55d1ded51a1943b78eefac8475890f665dc620f1
GET /common_tpls/images/icons/email.png HTTP/1.1
Host: xpndtr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/743aeee2dec8/?epcVIP=63.1066.g123&email=&password=&firstname=&lastname=&zip=&act=epc69324.47473-335576.53724.37_53724_8000_ee8288104a4c204f2be1625242db4164..JpO%3A032258617.8000&f_color=ffffff&epcCID=h8t0B3t6U0T4FeS7P1Q3jdLaB0g8Kex7l&rtid=91630056477
Cookie: PHPSESSID=2a0e91a1892f7a69b503ede9a50b7860
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Mar 2023 16:16:59 GMT
content-type: image/png
content-length: 1254
last-modified: Mon, 21 Aug 2017 19:32:05 GMT
etag: "599b3535-4e6"
section-io-cache-id: b7d93e3e90e4c858fc7fd51f41c3ee49
x-varnish: 1784663 2296035
age: 1025
via: 1.1 varnish-977b4d767-9xtjg (Varnish/7.2)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: 5e96126f3ebe94e0648f21462962afe4
X-Firefox-Spdy: h2
|
|
| xpndtr.com/common_tpls/images/icons/fname.png | 207.120.33.8 | 200 OK | 1.6 kB |
URL HTTP/2xpndtr.com/common_tpls/images/icons/fname.png IP207.120.33.8:0
File typePNG image data, 26 x 26, 8-bit/color RGBA, non-interlaced\012- data Hash5c846870756544f39604e671d4111b9d 304938c74246e228fa82d8ca40201c3db6098074 d43abf8c5665519a3fe3f7e90298fc17b62e06d8ada1b90a44ea9985a62abb4d
GET /common_tpls/images/icons/fname.png HTTP/1.1
Host: xpndtr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/743aeee2dec8/?epcVIP=63.1066.g123&email=&password=&firstname=&lastname=&zip=&act=epc69324.47473-335576.53724.37_53724_8000_ee8288104a4c204f2be1625242db4164..JpO%3A032258617.8000&f_color=ffffff&epcCID=h8t0B3t6U0T4FeS7P1Q3jdLaB0g8Kex7l&rtid=91630056477
Cookie: PHPSESSID=2a0e91a1892f7a69b503ede9a50b7860
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Mar 2023 16:16:59 GMT
content-type: image/png
content-length: 1649
last-modified: Tue, 28 Nov 2017 20:52:02 GMT
etag: "5a1dcc72-671"
section-io-cache-id: fb26ba76a36baa9e5f154dfa65be8a62
x-varnish: 1784664 775166
age: 1049
via: 1.1 varnish-977b4d767-9xtjg (Varnish/7.2)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: ae081ba043bc8a62e0e5daddbb7f9d60
X-Firefox-Spdy: h2
|
|
| actvjoin.com/signup/?epcVIP=63.1066.g123&email=&password=&firstname=&lastname=&zip=&act=epc69324.47473-335576.53724.37_53724_8000_ee8288104a4c204f2be1625242db4164..JpO:032258617.8000&f_color=ffffff | 207.120.33.39 | 302 Found | 1.5 kB |
URL HTTP/2actvjoin.com/signup/?epcVIP=63.1066.g123&email=&password=&firstname=&lastname=&zip=&act=epc69324.47473-335576.53724.37_53724_8000_ee8288104a4c204f2be1625242db4164..JpO:032258617.8000&f_color=ffffff IP207.120.33.39:0
File typePNG image data, 26 x 26, 8-bit/color RGB, non-interlaced\012- data Hash6f100f1cdbdce928118ffa4c9293ca5b 6b1a3593e792d4c00187d60560dd03fb42df1156 8c1a6b9e0c63edc7fa86898148dc6493cd56113fabbf85d901f7af4c180fce74
GET /signup/?epcVIP=63.1066.g123&email=&password=&firstname=&lastname=&zip=&act=epc69324.47473-335576.53724.37_53724_8000_ee8288104a4c204f2be1625242db4164..JpO:032258617.8000&f_color=ffffff HTTP/1.1
Host: actvjoin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fuck-fantasie.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 22 Mar 2023 16:16:59 GMT
content-type: text/html; charset=UTF-8
location: https://xpndtr.com/743aeee2dec8/?epcVIP=63.1066.g123&email=&password=&firstname=&lastname=&zip=&act=epc69324.47473-335576.53724.37_53724_8000_ee8288104a4c204f2be1625242db4164..JpO%3A032258617.8000&f_color=ffffff&epcCID=h8t0B3t6U0T4FeS7P1Q3jdLaB0g8Kex7l&rtid=91630056477
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=60311dd4f63d4baa08b0e62145e36c76; path=/; secure; SameSite=None
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
x-varnish: 1360644
age: 0
via: 1.1 varnish-977b4d767-t7fp5 (Varnish/7.2)
section-io-cache: Miss
section-io-id: 1cf370e5671b87d7b14cda6047c12ed8
X-Firefox-Spdy: h2
|
|
| xpndtr.com/common_tpls/images/icons/address.png | 207.120.33.8 | 200 OK | 1.2 kB |
URL HTTP/2xpndtr.com/common_tpls/images/icons/address.png IP207.120.33.8:0
File typePNG image data, 26 x 26, 8-bit/color RGB, non-interlaced\012- data Hashb579e9868402d708e54e1a980166c444 1c58e2890b934c0b1ab057f3ac28bedd2a082d19 67756f8b542c7823bcdba421219c3b8e1ee472748d8c3463534f667271356dfb
GET /common_tpls/images/icons/address.png HTTP/1.1
Host: xpndtr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/743aeee2dec8/?epcVIP=63.1066.g123&email=&password=&firstname=&lastname=&zip=&act=epc69324.47473-335576.53724.37_53724_8000_ee8288104a4c204f2be1625242db4164..JpO%3A032258617.8000&f_color=ffffff&epcCID=h8t0B3t6U0T4FeS7P1Q3jdLaB0g8Kex7l&rtid=91630056477
Cookie: PHPSESSID=2a0e91a1892f7a69b503ede9a50b7860
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Mar 2023 16:16:59 GMT
content-type: image/png
content-length: 1167
last-modified: Mon, 21 Aug 2017 19:32:05 GMT
etag: "599b3535-48f"
section-io-cache-id: 511d7082523593d0501a031c00586906
x-varnish: 1430364 318283
age: 1049
via: 1.1 varnish-977b4d767-9xtjg (Varnish/7.2)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: f274f0f8a176a239209a0fda684224cc
X-Firefox-Spdy: h2
|
|
| ka-p.fontawesome.com/releases/v5.15.4/css/pro-v4-shims.min.css?token=b314bdf1b3 |  104.18.23.52 | 200 OK | 4.2 kB |
URL HTTP/2ka-p.fontawesome.com/releases/v5.15.4/css/pro-v4-shims.min.css?token=b314bdf1b3 IP104.18.23.52:0
File typeASCII text, with very long lines (26366) Hash7fd743485fa194e25e2a207bff6c258a 97c999d752b95ee1ed6271a29aa58109dc17281e dd939d69a23f003d49287291f0bcb59df58119d60bc5f14a81cbfd957894f6dc
GET /releases/v5.15.4/css/pro-v4-shims.min.css?token=b314bdf1b3 HTTP/1.1
Host: ka-p.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xpndtr.com/
Origin: https://xpndtr.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Mar 2023 16:16:59 GMT
content-type: text/css
content-length: 4194
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
etag: "610ae215-1062"
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
vary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method
cf-cache-status: HIT
age: 1790344
accept-ranges: bytes
server: cloudflare
cf-ray: 7abfbe06bec6b51d-OSL
X-Firefox-Spdy: h2
|
|
| ka-p.fontawesome.com/releases/v5.15.4/css/pro-v4-font-face.min.css?token=b314bdf1b3 | 104.18.23.52 | 200 OK | 2.6 kB |
URL HTTP/2ka-p.fontawesome.com/releases/v5.15.4/css/pro-v4-font-face.min.css?token=b314bdf1b3 IP104.18.23.52:0
File typeASCII text, with very long lines (27832) Hasheaaabd3f60063923cd5333eb1d7a20a1 0da69706105e28896a1f6eeaa91d5bec1b82f7f1 f863309ec0ac675409167610ff9776fa9c7620d6ee3592cc0c19d0b883ff2f70
GET /releases/v5.15.4/css/pro-v4-font-face.min.css?token=b314bdf1b3 HTTP/1.1
Host: ka-p.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xpndtr.com/
Origin: https://xpndtr.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Mar 2023 16:16:59 GMT
content-type: text/css
content-length: 2603
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
etag: "610ae215-a2b"
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
vary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method
cf-cache-status: HIT
age: 1790344
accept-ranges: bytes
server: cloudflare
cf-ray: 7abfbe06bec9b51d-OSL
X-Firefox-Spdy: h2
|
|
| kit.fontawesome.com/b314bdf1b3.js | 104.18.23.52 | 200 OK | 58 kB |
URL HTTP/2kit.fontawesome.com/b314bdf1b3.js IP104.18.23.52:0
File typeASCII text, with very long lines (54322) Hashd04ab01f6c5f0fe7c725b11894a5fc19 b521d532a1f5edab45e9ee81e8142cf25d9e7877 bba0bfb776b9bdb3711d3c3af4bf941892c27850d26c8aaff39feaa81ae7b2cc
GET /b314bdf1b3.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xpndtr.com
Connection: keep-alive
Referer: https://xpndtr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Mar 2023 16:16:59 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, must-revalidate
strict-transport-security: max-age=31536000; preload
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: F0htQbRFX-bLj3zXVyZi
cf-cache-status: HIT
age: 46
server: cloudflare
cf-ray: 7abfbe060dceb51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| js-agent.newrelic.com/async-api.737e0ca6-1227.min.js | 151.101.130.137 | 200 OK | 1.1 kB |
URL HTTP/2js-agent.newrelic.com/async-api.737e0ca6-1227.min.js IP151.101.130.137:0
File typeASCII text, with very long lines (2129), with no line terminators Hash03dfc27bd3e9c55760c43279990e3229 b113bb4989edd07f098c6e1bb09b363444fac3ca 701b3c2622fc68fc8853e1898044bd46d6717de875a178bca0ecf2e533b0234b
GET /async-api.737e0ca6-1227.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: LLTB4EDFC5QdmDB6fBVQH93tx9tnr4EXlsaYC2YJm4sqjgK75ZMyTo22k8mG/8P1cD3albbe9oA=
x-amz-request-id: X1KWZ3FX1KK6PDEW
last-modified: Thu, 09 Mar 2023 16:57:12 GMT
etag: "d12e5c859f6125ad9fcfab27abe9d60a"
x-amz-server-side-encryption: AES256
x-amz-version-id: .VExrz.uwnbfzMN2qSXv.A5mU3ucPuDN
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Wed, 22 Mar 2023 16:17:00 GMT
via: 1.1 varnish
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 3783
x-timer: S1679501820.032853,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1123
X-Firefox-Spdy: h2
|
|
| xpndtr.com/common_tpls/js/iframeResizer.contentWindow.min.js | 207.120.33.8 | 200 OK | 5.8 kB |
URL HTTP/2xpndtr.com/common_tpls/js/iframeResizer.contentWindow.min.js IP207.120.33.8:0
File typeASCII text, with very long lines (12990) Hash76806ed65c8c4e1332ab802bede6e85b cb0c3d6c5caf778c452406c667cfe8a0696de8ef 77fad819967a772981829e7e2ed2bebfb9702c10eebe311cf4e868243eab8fd0
GET /common_tpls/js/iframeResizer.contentWindow.min.js HTTP/1.1
Host: xpndtr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/743aeee2dec8/?epcVIP=63.1066.g123&email=&password=&firstname=&lastname=&zip=&act=epc69324.47473-335576.53724.37_53724_8000_ee8288104a4c204f2be1625242db4164..JpO%3A032258617.8000&f_color=ffffff&epcCID=h8t0B3t6U0T4FeS7P1Q3jdLaB0g8Kex7l&rtid=91630056477
Cookie: PHPSESSID=2a0e91a1892f7a69b503ede9a50b7860
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Mar 2023 16:16:59 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Thu, 04 Feb 2016 15:06:03 GMT
etag: W/"56b368db-3445"
section-io-cache-id: fed83834cc4085c7e64d38bc11e5139a
x-varnish: 680969 2295995
age: 1034
via: 1.1 varnish-977b4d767-9xtjg (Varnish/7.2)
section-io-cache: Hit
content-encoding: gzip
section-io-id: 7d5152c47c9a6fcffe17b76b1903f5e7
X-Firefox-Spdy: h2
|
|
| js-agent.newrelic.com/178.52056f28-1227.min.js | 151.101.130.137 | 200 OK | 3.8 kB |
URL HTTP/2js-agent.newrelic.com/178.52056f28-1227.min.js IP151.101.130.137:0
File typeASCII text, with very long lines (9255), with no line terminators Hash0cdee4386fc5e26c88588f13c1f98d2f 7f787ff772c58db6d8eb86e3718210cf02e823bf d2aea8be91ec37fa5c0f6fe1f65baba7486684ecbd60f73d56d22d423a657025
GET /178.52056f28-1227.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: aT06CGh5oOpXrIqz5qwibNaMUOM/m7kcMAEg7Jf3TVcRfAagKDE4/nS+nf0+eQPu+zomW62XXt4=
x-amz-request-id: J3KF281NCW962AQS
last-modified: Thu, 09 Mar 2023 16:57:12 GMT
etag: "b21a67c8e50dcceef0405ebb063eca96"
x-amz-server-side-encryption: AES256
x-amz-version-id: tfnJWGkgjVdXF5EV55Q2uJIk1QgPYrSL
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Wed, 22 Mar 2023 16:17:00 GMT
via: 1.1 varnish
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 3600
x-timer: S1679501820.204982,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 3764
X-Firefox-Spdy: h2
|
|
| js-agent.newrelic.com/page_view_timing-aggregate.a7d9d7be-1227.min.js | 151.101.130.137 | 200 OK | 2.2 kB |
URL HTTP/2js-agent.newrelic.com/page_view_timing-aggregate.a7d9d7be-1227.min.js IP151.101.130.137:0
File typeASCII text, with very long lines (5426), with no line terminators Hash1d0aca99dc56a135a91221ab5314b29c a44835c7e37f94e33cb20f4a2b51a2b94a1ed11d 7c1277b080c6737e0b266099b42d5c2ade65be54c9dc27c4a8e9625e34608357
GET /page_view_timing-aggregate.a7d9d7be-1227.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: MeR9P8RqaGzGYO1G4on1DBJmuSM9V+li+iEGIcVb5R/cEtGrnv/5zYy1NywRKsVssm0sdpVbJFI=
x-amz-request-id: J3KFSTCH0H35BJM1
last-modified: Thu, 09 Mar 2023 16:57:12 GMT
etag: "eb3b7aaf78edc0a629532c28a1c06b8a"
x-amz-server-side-encryption: AES256
x-amz-version-id: sqO0QzvZ3V3OZNlIV1_qDeOPuvdGFJah
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Wed, 22 Mar 2023 16:17:00 GMT
via: 1.1 varnish
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 3597
x-timer: S1679501820.205340,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2224
X-Firefox-Spdy: h2
|
|
| js-agent.newrelic.com/page_view_event-aggregate.2ae3c96c-1227.min.js | 151.101.130.137 | 200 OK | 1.7 kB |
URL HTTP/2js-agent.newrelic.com/page_view_event-aggregate.2ae3c96c-1227.min.js IP151.101.130.137:0
File typeASCII text, with very long lines (3814), with no line terminators Hasheb1f985802faf8e291793c6c6a509a0d 77a00623aa6fcce14e8acc3d17adbfe30e6d9f55 0b876f14f19c14c874c6e4f892517f91b36be238f18acebc5502d001244f65f9
GET /page_view_event-aggregate.2ae3c96c-1227.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: RGUZ8edb5ibnhA3ai0RzLn0AOxcz8rfWlVv3yR0obJn8Nxhj+jSWLnK9qmK/G80UOegoBtuC5Q4=
x-amz-request-id: J3K0ZC8YB249SAHT
last-modified: Thu, 09 Mar 2023 16:57:12 GMT
etag: "f768d3f0fb8ea163c644cfa4a536676d"
x-amz-server-side-encryption: AES256
x-amz-version-id: FeegzFVNqKt6H_XSfsFwZcx1Np._S4kr
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Wed, 22 Mar 2023 16:17:00 GMT
via: 1.1 varnish
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 3609
x-timer: S1679501820.205336,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1713
X-Firefox-Spdy: h2
|
|
| js-agent.newrelic.com/metrics-aggregate.28086cfb-1227.min.js | 151.101.130.137 | 200 OK | 22 kB |
URL HTTP/2js-agent.newrelic.com/metrics-aggregate.28086cfb-1227.min.js IP151.101.130.137:0
Hash04e9c84eb65c99cd0b4d3a16ee2c9d3d 18949faefbfc3ca392bdc7003fe9608025b9aaf8 91966a72a8db956289c68cb4be4b4afe97277fca49eac4922af2d4222eeca8b9
GET /metrics-aggregate.28086cfb-1227.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: JlI9jEnvHwyUH5q51zPj7FC0eR8SIbY27K1rjyASXl8wqklVZ78+KkILmuVlfa9+u7BPhqCqDdg=
x-amz-request-id: J3KE7BT8ZDH9ZJM2
last-modified: Thu, 09 Mar 2023 16:57:12 GMT
etag: "fd7ae418fde6eab067f9005c5dccc62b"
x-amz-server-side-encryption: AES256
x-amz-version-id: 3OFnwVDELpuG2CawrTfxxEzGbg_GjKb5
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Wed, 22 Mar 2023 16:17:00 GMT
via: 1.1 varnish
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 3591
x-timer: S1679501820.206007,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1752
X-Firefox-Spdy: h2
|
|
| js-agent.newrelic.com/ajax-aggregate.52cc993d-1227.min.js | 151.101.130.137 | 200 OK | 2.4 kB |
URL HTTP/2js-agent.newrelic.com/ajax-aggregate.52cc993d-1227.min.js IP151.101.130.137:0
File typeASCII text, with very long lines (5165), with no line terminators Hash83226cc545f1573770e17c74c06e369e a308a4f8cd6bc78c354ca8ad123088a485aa55bf 44ce733b51e98d329bc679cca1958fbdf4539a4e4aa80f9715d3c90a19004012
GET /ajax-aggregate.52cc993d-1227.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: uKYdlJCnwz1StUhF9zoiWKtlQ6fpSBIIT63aZy+F/+pAESRra5qRoyNBoOwr10NRBsbtUX8zuO0=
x-amz-request-id: J3KDR0B9Q3E16DTY
last-modified: Thu, 09 Mar 2023 16:57:12 GMT
etag: "02a285136a56fd1bcf1e6bf9df3ce3f5"
x-amz-server-side-encryption: AES256
x-amz-version-id: M7cKVh.sJWWYP936S672_AC9W1qCcjJQ
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Wed, 22 Mar 2023 16:17:00 GMT
via: 1.1 varnish
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 2154
x-timer: S1679501820.205927,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2366
X-Firefox-Spdy: h2
|
|
| js-agent.newrelic.com/jserrors-aggregate.941c6e17-1227.min.js | 151.101.130.137 | 200 OK | 2.9 kB |
URL HTTP/2js-agent.newrelic.com/jserrors-aggregate.941c6e17-1227.min.js IP151.101.130.137:0
File typeASCII text, with very long lines (7661), with no line terminators Hashb94b9853573a235e49b390310d18f8c8 7edbeb499928788296b7e9eaaf52720b04423663 bc57cadd1025ab6cbb6967cd21f5bbfc324f1a7c977fee20ee715a3ef074aa2c
GET /jserrors-aggregate.941c6e17-1227.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: WJlvLjGJlxrmBB8rgC9pVHFwHvXx9C2rr+PUuT0PJgAiqq/YbO4hm7afvFD3IsJsd2qC0CTtB/8=
x-amz-request-id: H85NTR4DKHDTZFMV
last-modified: Thu, 09 Mar 2023 16:57:12 GMT
etag: "8a0b3cc73395206dfac178f98f412980"
x-amz-server-side-encryption: AES256
x-amz-version-id: wlVstoCC4UFYAF1ILBCZ5Nc.v2fH1cp7
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Wed, 22 Mar 2023 16:17:00 GMT
via: 1.1 varnish
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 489
x-timer: S1679501820.205947,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2938
X-Firefox-Spdy: h2
|
|
| js-agent.newrelic.com/spa-aggregate.494130b7-1227.min.js | 151.101.130.137 | 200 OK | 6.7 kB |
URL HTTP/2js-agent.newrelic.com/spa-aggregate.494130b7-1227.min.js IP151.101.130.137:0
File typeASCII text, with very long lines (18780), with no line terminators Hash8663942728c4e3ba0df2337240c35ee3 cfad319e622269f9c3a29c2bc7e0e0df7bc4a6d6 fa933e57987c869c0d563c218372a4c85acd6cf1d737cfc789a0b47a774ec96f
GET /spa-aggregate.494130b7-1227.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: TIE1n7VMj7a0ZMKSZyXsxWQwz/KtqLTPsDtLZjBBbER8IkqtT+Hq/WcV1TH3DMAy7qYWlCTW2j4=
x-amz-request-id: J3KFTKZNH4ZC5FKN
last-modified: Thu, 09 Mar 2023 16:57:12 GMT
etag: "c9a85289539a80c3ce75d510ee52f0c6"
x-amz-server-side-encryption: AES256
x-amz-version-id: MOfgH_1ttKzddlisAak1jm7fbEtINNGC
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Wed, 22 Mar 2023 16:17:00 GMT
via: 1.1 varnish
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 1481
x-timer: S1679501820.206667,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 6664
X-Firefox-Spdy: h2
|
|
| js-agent.newrelic.com/page_action-aggregate.2f41aaf7-1227.min.js | 151.101.130.137 | 200 OK | 1.2 kB |
URL HTTP/2js-agent.newrelic.com/page_action-aggregate.2f41aaf7-1227.min.js IP151.101.130.137:0
File typeASCII text, with very long lines (2766), with no line terminators Hash0336e9116f41017d1f4ed8755e7fe22e 9f3418cc775a10992caab99e1591ea2c942e4c64 8dc96e300269a2f5b114a0e496e35fbbbf8d0afeb51f02b8a1edf61d317cc3d3
GET /page_action-aggregate.2f41aaf7-1227.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: cQya9Ywp0T2V/jWBNZ5XJuzu9cp1pmO6QX96R3G27WS7mhYd14VWFr8a14pQQ+odaVm54bHd9wQ=
x-amz-request-id: J3K8FWW5K0DE3R3B
last-modified: Thu, 09 Mar 2023 16:57:12 GMT
etag: "92a020a299ca63b75917d615a52d026c"
x-amz-server-side-encryption: AES256
x-amz-version-id: 33uPpeyapVuhMjJor_DeoOiouAFaWoOf
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Wed, 22 Mar 2023 16:17:00 GMT
via: 1.1 varnish
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 2153
x-timer: S1679501820.206672,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1202
X-Firefox-Spdy: h2
|
|
| js-agent.newrelic.com/session_trace-aggregate.545db67a-1227.min.js | 151.101.130.137 | 200 OK | 3.7 kB |
URL HTTP/2js-agent.newrelic.com/session_trace-aggregate.545db67a-1227.min.js IP151.101.130.137:0
File typeASCII text, with very long lines (9923), with no line terminators Hashe7e6ee264746303d21bbb267a9ba3d81 752836aa17acfc6b7df98c952d736ea06f41f776 45d351c15ee5f1e543c07e3986f9e310c7af6c518c2bb3ddef3ae9d75743870f
GET /session_trace-aggregate.545db67a-1227.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 2/LkMvvv/W3Vc2zaO7/N0k1X0D1BEr2QUVv7EW93g6wV5zsa/CZODpT5p0a62KCeZ7DEF+5k8TM=
x-amz-request-id: J3KB37HK18WBXXKE
last-modified: Thu, 09 Mar 2023 16:57:12 GMT
etag: "00f1a92b2eb88dcbd4684c44ca621600"
x-amz-server-side-encryption: AES256
x-amz-version-id: 8sXc8kke00U4XRsYmYhWsmLPR6EjlyYd
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Wed, 22 Mar 2023 16:17:00 GMT
via: 1.1 varnish
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 2154
x-timer: S1679501820.206728,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 3742
X-Firefox-Spdy: h2
|
|
| xpndtr.com/acct/trk/?rtid=91630056477 | 207.120.33.8 | 200 OK | 21 B |
URL HTTP/2xpndtr.com/acct/trk/?rtid=91630056477 IP207.120.33.8:0
File typeJSON data\012- , ASCII text, with no line terminators Hashbb21a122a0f879ef65a47ee761cb3b5c a2a8330db5be6b3d83da413ffb427849cf5a78ba 22edb5a41f7a018aad5d06b56e06e645d762d4fec4e55a48382fee3696abd1c2
GET /acct/trk/?rtid=91630056477 HTTP/1.1
Host: xpndtr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-NewRelic-ID: VwUCVFRWCBAJV1dSDwkPVV0=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjMzNTUyNTAiLCJhcCI6IjExMDMwNzg4NDIiLCJpZCI6IjQwNzk0ZmFmZmFjMjkyMDMiLCJ0ciI6IjE5NmQ5ZWUzZDk0ZjU2MWUzMzA4YWUyNTg0ZmZkOTgwIiwidGkiOjE2Nzk1MDE4MjU4Njd9fQ==
traceparent: 00-196d9ee3d94f561e3308ae2584ffd980-40794faffac29203-01
tracestate: 3355250@nr=0-1-3355250-1103078842-40794faffac29203----1679501825867
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://xpndtr.com/743aeee2dec8/?epcVIP=63.1066.g123&email=&password=&firstname=&lastname=&zip=&act=epc69324.47473-335576.53724.37_53724_8000_ee8288104a4c204f2be1625242db4164..JpO%3A032258617.8000&f_color=ffffff&epcCID=h8t0B3t6U0T4FeS7P1Q3jdLaB0g8Kex7l&rtid=91630056477
Cookie: PHPSESSID=2a0e91a1892f7a69b503ede9a50b7860
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Mar 2023 16:17:00 GMT
content-type: text/json;charset=UTF-8
content-length: 21
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
x-varnish: 85860
age: 0
via: 1.1 varnish-977b4d767-t7fp5 (Varnish/7.2)
section-io-cache: Miss
section-io-id: 95f4120fdcd656d85b56b60056b16da0
X-Firefox-Spdy: h2
|
|
| bam.nr-data.net/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1227.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTg9XBVMbShMMRw%3D%3D&rst=3539&ck=0&s=5167de02b61ab605&ref=https://xpndtr.com/743aeee2dec8/&ap=79&be=3122&fe=183&dc=178&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1679501822542,%22n%22:0,%22f%22:2445,%22dn%22:2446,%22dne%22:2451,%22c%22:2451,%22s%22:2562,%22ce%22:2726,%22rq%22:2726,%22rp%22:3000,%22rpe%22:3110,%22dl%22:3004,%22di%22:3287,%22ds%22:3299,%22de%22:3302,%22dc%22:3302,%22l%22:3302,%22le%22:3309%7D,%22navigation%22:%7B%7D%7D&at=HxVQQAsaG0Q%3D&jsonp=NREUM.setToken | 162.247.243.29 | 200 OK | 49 B |
URL HTTP/1.1bam.nr-data.net/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1227.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTg9XBVMbShMMRw%3D%3D&rst=3539&ck=0&s=5167de02b61ab605&ref=https://xpndtr.com/743aeee2dec8/&ap=79&be=3122&fe=183&dc=178&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1679501822542,%22n%22:0,%22f%22:2445,%22dn%22:2446,%22dne%22:2451,%22c%22:2451,%22s%22:2562,%22ce%22:2726,%22rq%22:2726,%22rp%22:3000,%22rpe%22:3110,%22dl%22:3004,%22di%22:3287,%22ds%22:3299,%22de%22:3302,%22dc%22:3302,%22l%22:3302,%22le%22:3309%7D,%22navigation%22:%7B%7D%7D&at=HxVQQAsaG0Q%3D&jsonp=NREUM.setToken IP162.247.243.29:0
File typeASCII text, with no line terminators Hashada33e5b8877e743ff658bf4bfa1867c 5a78662243dac43c0ee48bcb7e05a536b84c2e38 dac715f087720dd7ff7067f5d2ec1988851fa93140ae8a9cbfaa15659dd7fd82
GET /1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1227.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTg9XBVMbShMMRw%3D%3D&rst=3539&ck=0&s=5167de02b61ab605&ref=https://xpndtr.com/743aeee2dec8/&ap=79&be=3122&fe=183&dc=178&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1679501822542,%22n%22:0,%22f%22:2445,%22dn%22:2446,%22dne%22:2451,%22c%22:2451,%22s%22:2562,%22ce%22:2726,%22rq%22:2726,%22rp%22:3000,%22rpe%22:3110,%22dl%22:3004,%22di%22:3287,%22ds%22:3299,%22de%22:3302,%22dc%22:3302,%22l%22:3302,%22le%22:3309%7D,%22navigation%22:%7B%7D%7D&at=HxVQQAsaG0Q%3D&jsonp=NREUM.setToken HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 49
date: Wed, 22 Mar 2023 16:17:00 GMT
content-type: text/javascript
cross-origin-resource-policy: cross-origin
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
access-control-allow-credentials: true
access-control-allow-origin: *
x-served-by: cache-bma1652-BMA
|
|
| bam.nr-data.net/events/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1227.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTg9XBVMbShMMRw%3D%3D&rst=3738&ck=0&s=5167de02b61ab605&ref=https://xpndtr.com/743aeee2dec8/ | 162.247.243.29 | 200 OK | 24 B |
URL HTTP/1.1bam.nr-data.net/events/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1227.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTg9XBVMbShMMRw%3D%3D&rst=3738&ck=0&s=5167de02b61ab605&ref=https://xpndtr.com/743aeee2dec8/ IP162.247.243.29:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashbc32ed98d624acb4008f986349a20d26 2d3df8c11d2168ce2c27e0937421d11d85016361 0c9cf152a0ad00d4f102c93c613c104914be5517ac8f8e0831727f8bfbe8b300
POST /events/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1227.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTg9XBVMbShMMRw%3D%3D&rst=3738&ck=0&s=5167de02b61ab605&ref=https://xpndtr.com/743aeee2dec8/ HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain
Content-Length: 674
Origin: https://xpndtr.com
Connection: keep-alive
Referer: https://xpndtr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 24
date: Wed, 22 Mar 2023 16:17:00 GMT
content-type: image/gif
access-control-allow-origin: https://xpndtr.com
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
access-control-allow-credentials: true
x-served-by: cache-bma1652-BMA
|
|
| t.formatinfo.top/v1/popup-trk/show?source_id=36 | 172.67.167.91 | 200 OK | 0 B |
URL HTTP/2t.formatinfo.top/v1/popup-trk/show?source_id=36 IP172.67.167.91:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v1/popup-trk/show?source_id=36 HTTP/1.1
Host: t.formatinfo.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fuck-fantasie.com
Connection: keep-alive
Referer: https://fuck-fantasie.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Mar 2023 16:17:04 GMT
content-length: 0
access-control-allow-origin: https://fuck-fantasie.com
access-control-allow-headers: Content-Type
access-control-allow-methods: POST,PUT,DELETE
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=w1jFPZ%2BnWPbmze6nNcwksopfwoMMvm1hshxsc%2FboXhUajyhUIOgZaWqSsLv1NK%2By3BnfJH9TNMu6CWxvHScCdZdFZN6QjLsZf2Qsa3AI32XW7DgDeIvMxlSw9r3Oip25EGZz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7abfbe21ced51bfe-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| t.formatinfo.top/v1/popup-trk/close?source_id=36 | 172.67.167.91 | 200 OK | 0 B |
URL HTTP/2t.formatinfo.top/v1/popup-trk/close?source_id=36 IP172.67.167.91:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v1/popup-trk/close?source_id=36 HTTP/1.1
Host: t.formatinfo.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fuck-fantasie.com
Connection: keep-alive
Referer: https://fuck-fantasie.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Mar 2023 16:17:04 GMT
content-length: 0
access-control-allow-origin: https://fuck-fantasie.com
access-control-allow-headers: Content-Type
access-control-allow-methods: POST,PUT,DELETE
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B9jxdg%2B8hUQxDJHhswknid4nhQL5oO%2Fn9MrxSD8znmoSA8gt9DTcuZn1W23W%2B3CBSto7rc%2B2peDEec64hrKukks88b3gTwXWBJoAQvKQhUJk07t17nE7G%2FuF%2FKyqal9mJLdC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7abfbe21ced91bfe-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ccef074-5c97-4b5e-842d-b01d7dc45627.jpeg | 34.120.237.76 | 200 OK | 3.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ccef074-5c97-4b5e-842d-b01d7dc45627.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash4f9aef2e82d471b00bdf191d1e955492 e1d36f5481258ce121d9f41b4b868d1c9c1b2f06 c09128e3010f6f2e3e4ccbe4b4920ba55e46ce2cde0c51eedb7779cd92add9f2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ccef074-5c97-4b5e-842d-b01d7dc45627.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 3100
x-amzn-requestid: 10971eed-ede1-4e8a-bfd0-ff9028b54792
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJqOpHeNoAMFn2A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a23f7-12abbd6a4d0ada441f378fa9;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:39:03 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: QXCRb_HI9cbKAVPYlRTKc77WZ1EVE9XKD6HVd5RtWRAiRaQiR3lz3A==
via: 1.1 f3802d173009698413044360f84de06c.cloudfront.net (CloudFront), 1.1 6af3b573d8970d5db2a4d03354335b84.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Mar 2023 22:09:39 GMT
etag: "e1d36f5481258ce121d9f41b4b868d1c9c1b2f06"
content-type: image/jpeg
age: 65246
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| hotrtr.com/cr.php?cid=916&ACT=69324&TRK=53724.37_53724_8000_ee8288104a4c204f2be1625242db4164. | 54.71.119.144 | 302 Found | 0 B |
URL HTTP/2hotrtr.com/cr.php?cid=916&ACT=69324&TRK=53724.37_53724_8000_ee8288104a4c204f2be1625242db4164. IP54.71.119.144:0
GET /cr.php?cid=916&ACT=69324&TRK=53724.37_53724_8000_ee8288104a4c204f2be1625242db4164. HTTP/1.1
Host: hotrtr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fuck-fantasie.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 22 Mar 2023 16:16:57 GMT
content-type: text/html; charset=UTF-8
location: https://fastlnd.com/ep.php/JK-prmagms:76181/69324:53724.37_53724_8000_ee8288104a4c204f2be1625242db4164..JpO:032258617.8000
set-cookie: AWSALB=03AqSqFE1RlNTI+KxoeRz+3rtCfo/96GFeKA1yEonkFVf27Gjhv2cGjHi0HOEZniIoRNywgvK+hS5YPLgUNZ2VIzCfX3cXWOq16M8xM7FLnxN604Q6lbRqwn1/GL; Expires=Wed, 29 Mar 2023 16:16:57 GMT; Path=/
AWSALBCORS=03AqSqFE1RlNTI+KxoeRz+3rtCfo/96GFeKA1yEonkFVf27Gjhv2cGjHi0HOEZniIoRNywgvK+hS5YPLgUNZ2VIzCfX3cXWOq16M8xM7FLnxN604Q6lbRqwn1/GL; Expires=Wed, 29 Mar 2023 16:16:57 GMT; Path=/; SameSite=None; Secure
hskp=JpO%3A032258617%2C; expires=Wed, 05-Apr-2023 16:16:57 GMT; Max-Age=1209600
skip=-1679501817%2C2578; expires=Wed, 22-Mar-2023 16:26:57 GMT; Max-Age=600
916_2578_0=1679501817; expires=Thu, 23-Mar-2023 16:16:57 GMT; Max-Age=86400
server: Apache
X-Firefox-Spdy: h2
|
|
| xpndtr.com/common_tpls/js/validate_form_v2.js?jsv=33 | 207.120.33.8 | 200 OK | 0 B |
URL HTTP/2xpndtr.com/common_tpls/js/validate_form_v2.js?jsv=33 IP207.120.33.8:0
GET /common_tpls/js/validate_form_v2.js?jsv=33 HTTP/1.1
Host: xpndtr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/743aeee2dec8/?epcVIP=63.1066.g123&email=&password=&firstname=&lastname=&zip=&act=epc69324.47473-335576.53724.37_53724_8000_ee8288104a4c204f2be1625242db4164..JpO%3A032258617.8000&f_color=ffffff&epcCID=h8t0B3t6U0T4FeS7P1Q3jdLaB0g8Kex7l&rtid=91630056477
Cookie: PHPSESSID=2a0e91a1892f7a69b503ede9a50b7860
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Mar 2023 16:16:59 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Mon, 13 Feb 2023 23:40:03 GMT
etag: W/"63eaca53-63ed"
section-io-cache-id: a17927f627b1e2b5191031a9c7138606
x-varnish: 1471887 451820
age: 1601
via: 1.1 varnish-977b4d767-t7fp5 (Varnish/7.2)
section-io-cache: Hit
content-encoding: gzip
section-io-id: cbef131888c816e34f729cbc8b118df2
X-Firefox-Spdy: h2
|
|
| xpndtr.com/common_tpls/js/form_support.js?v=1101202201 | 207.120.33.8 | 200 OK | 0 B |
URL HTTP/2xpndtr.com/common_tpls/js/form_support.js?v=1101202201 IP207.120.33.8:0
GET /common_tpls/js/form_support.js?v=1101202201 HTTP/1.1
Host: xpndtr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xpndtr.com/743aeee2dec8/?epcVIP=63.1066.g123&email=&password=&firstname=&lastname=&zip=&act=epc69324.47473-335576.53724.37_53724_8000_ee8288104a4c204f2be1625242db4164..JpO%3A032258617.8000&f_color=ffffff&epcCID=h8t0B3t6U0T4FeS7P1Q3jdLaB0g8Kex7l&rtid=91630056477
Cookie: PHPSESSID=2a0e91a1892f7a69b503ede9a50b7860
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Mar 2023 16:16:59 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 18 Nov 2022 21:23:38 GMT
etag: W/"6377f7da-ed7"
section-io-cache-id: db41ca6abea7198299110f35abcaa1e0
x-varnish: 1784662 945430
age: 1040
via: 1.1 varnish-977b4d767-9xtjg (Varnish/7.2)
section-io-cache: Hit
content-encoding: gzip
section-io-id: 35ca2ec8d857457b77a64275edec2920
X-Firefox-Spdy: h2
|
|
| fuck-fantasie.com/jpt/?pub_id=53724&cid=37_53724_8000_ee8288104a4c204f2be1625242db4164&source= |  188.114.96.1 | 200 OK | 0 B |
URL HTTP/2fuck-fantasie.com/jpt/?pub_id=53724&cid=37_53724_8000_ee8288104a4c204f2be1625242db4164&source= IP188.114.96.1:0
GET /jpt/?pub_id=53724&cid=37_53724_8000_ee8288104a4c204f2be1625242db4164&source= HTTP/1.1
Host: fuck-fantasie.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Wed, 22 Mar 2023 16:16:56 GMT
content-type: text/html
last-modified: Fri, 10 Feb 2023 14:35:06 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aI84E2piu5rvLWPW1s1HNwwojz2dpOsSfJ%2BW3wm7n6fXOSXgm0W4QKUBEjIMMtCYHmmOTia67Zd2rDsL%2B2QzOj0WIvpZ75v029i5HpZUddjy0GVFTj41sS1B%2FCz9E%2FF8epimJQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7abfbdef5c70b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Archivo+Black&family=Secular+One&family=Signika+Negative&display=swap | 142.250.74.74 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css2?family=Archivo+Black&family=Secular+One&family=Signika+Negative&display=swap IP142.250.74.74:0
GET /css2?family=Archivo+Black&family=Secular+One&family=Signika+Negative&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fuck-fantasie.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 22 Mar 2023 16:16:56 GMT
date: Wed, 22 Mar 2023 16:16:56 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fastlnd.com/ep.php/JK-prmagms:76181/69324:53724.37_53724_8000_ee8288104a4c204f2be1625242db4164..JpO:032258617.8000 | 44.236.163.254 | 302 Found | 0 B |
URL HTTP/2fastlnd.com/ep.php/JK-prmagms:76181/69324:53724.37_53724_8000_ee8288104a4c204f2be1625242db4164..JpO:032258617.8000 IP44.236.163.254:0
GET /ep.php/JK-prmagms:76181/69324:53724.37_53724_8000_ee8288104a4c204f2be1625242db4164..JpO:032258617.8000 HTTP/1.1
Host: fastlnd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fuck-fantasie.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 22 Mar 2023 16:16:58 GMT
content-type: text/html; charset=UTF-8
location: https://actvjoin.com/signup/?epcVIP=63.1066.g123&email=&password=&firstname=&lastname=&zip=&act=epc69324.47473-335576.53724.37_53724_8000_ee8288104a4c204f2be1625242db4164..JpO:032258617.8000&f_color=ffffff
set-cookie: AWSALB=YwRP/eocDxHgNYVz0XYcMAvMqHrNuFjia3/MRNJOWq7ZGEfxevzRoKT3yfbUqaF+vbaqgpn+oyD65SUryMgruBLQrjKzB+6KJWi/tXWsxh++zacBCz9FHHXv2XOx; Expires=Wed, 29 Mar 2023 16:16:58 GMT; Path=/
AWSALBCORS=YwRP/eocDxHgNYVz0XYcMAvMqHrNuFjia3/MRNJOWq7ZGEfxevzRoKT3yfbUqaF+vbaqgpn+oyD65SUryMgruBLQrjKzB+6KJWi/tXWsxh++zacBCz9FHHXv2XOx; Expires=Wed, 29 Mar 2023 16:16:58 GMT; Path=/; SameSite=None; Secure
vip_id=69324.47473-335576; expires=Sat, 25-Mar-2023 16:16:58 GMT; Max-Age=259200; path=/
server: Apache
X-Firefox-Spdy: h2
|
|
| xpndtr.com/743aeee2dec8/?epcVIP=63.1066.g123&email=&password=&firstname=&lastname=&zip=&act=epc69324.47473-335576.53724.37_53724_8000_ee8288104a4c204f2be1625242db4164..JpO%3A032258617.8000&f_color=ffffff&epcCID=h8t0B3t6U0T4FeS7P1Q3jdLaB0g8Kex7l&rtid=91630056477 | 207.120.33.8 | 200 OK | 0 B |
URL HTTP/2xpndtr.com/743aeee2dec8/?epcVIP=63.1066.g123&email=&password=&firstname=&lastname=&zip=&act=epc69324.47473-335576.53724.37_53724_8000_ee8288104a4c204f2be1625242db4164..JpO%3A032258617.8000&f_color=ffffff&epcCID=h8t0B3t6U0T4FeS7P1Q3jdLaB0g8Kex7l&rtid=91630056477 IP207.120.33.8:0
GET /743aeee2dec8/?epcVIP=63.1066.g123&email=&password=&firstname=&lastname=&zip=&act=epc69324.47473-335576.53724.37_53724_8000_ee8288104a4c204f2be1625242db4164..JpO%3A032258617.8000&f_color=ffffff&epcCID=h8t0B3t6U0T4FeS7P1Q3jdLaB0g8Kex7l&rtid=91630056477 HTTP/1.1
Host: xpndtr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fuck-fantasie.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Mar 2023 16:16:59 GMT
content-type: text/html; charset=UTF-8
set-cookie: PHPSESSID=2a0e91a1892f7a69b503ede9a50b7860; path=/; secure; SameSite=None
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
content-encoding: gzip
vary: Accept-Encoding
x-varnish: 281888
age: 0
via: 1.1 varnish-977b4d767-9xtjg (Varnish/7.2)
accept-ranges: bytes
section-io-cache: Miss
section-io-id: 44e7485ad0b146f5cd30baaaf19d50f8
X-Firefox-Spdy: h2
|
|