earnme.club/safe2.php?link=hljjt
200 OK 448 B URL HTTP/1.1 earnme.club/safe2.php?link=hljjt
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash e9bc3296c596a41bad15f6df61eed034
fbeb7e9fca657c2521dccdb396d23dddc9724993
aa70d5fdd57d2c0d5078a5bb2ee6953196875142daed8a3fcf6196a51eba1204
Analyzer Verdict Alert fortinet Malware
GET /safe2.php?link=hljjt HTTP/1.1
Host: earnme.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Connection: Keep-Alive
Set-Cookie: tp2=hljjt; expires=Thu, 06-Oct-2022 18:36:10 GMT; Max-Age=180
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Content-Length: 448
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 18:33:10 GMT
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=259200
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 05 Oct 2022 15:47:18 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 7dfsynkupGcDL6qAECIqMbz8VC26jbCScPI6POIYVDSdUYvaMK4Gxw==
Age: 96353
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 282f6e1328452c1cb41f6a6272fff757
20b9ff1b5f4f81b645769bd4b4cf7bf7dfc16262
6a8070ebe51259cb11db68cca2c81f3c7408fad481d8c14cc1c38912442c63f4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A8070EBE51259CB11DB68CCA2C81F3C7408FAD481D8C14CC1C38912442C63F4"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6197
Expires: Thu, 06 Oct 2022 20:16:28 GMT
Date: Thu, 06 Oct 2022 18:33:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 94a09d62ab3057cda67a091c8d7478f5
b1c9d223a951d0bc9f17c9f3b84501266a552b58
582364f9f6014520c269f1f794e7c34027bd2697b53e5d02fad43e74a735e471
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "582364F9F6014520C269F1F794E7C34027BD2697B53E5D02FAD43E74A735E471"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17403
Expires: Thu, 06 Oct 2022 23:23:14 GMT
Date: Thu, 06 Oct 2022 18:33:11 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: s/tzFayVCiuvePXxHs1JbwH4721Rsw+QGvU3qPSMDEK2gtlOnTI99X2xR5SXsMcWPWK6jIe1wbM=
x-amz-request-id: 7GQ5ZBJ04J82VMY0
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 06 Oct 2022 17:58:50 GMT
age: 2061
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 18:33:11 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 87465c15992fe10c24c62a185f8c171d
fa938b624d06d1e2927c8eda6a44b2a32d930f59
239ef7fe5df8c396d96a928c20d66c842a5ec3e9ff71a3cd7c0068906fc3e537
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 40a4de06678d96242b71d5318f2fd4ef
546a7d1d92df81916f14155943427b5453ae3924
aed9af25ae57c181702a137d48cb00f5b30297180161451de3b628359dc9ec6f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
earnme.club/favicon.ico
404 Not Found 708 B IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 2382378378c002d88b9a507c712c3349
2e894db3808b554abadc8b144338ad9e2ea937ba
37a4e56c497e170de6e152bc479624eb8d7ccb35bad5a190f2fdb17ac699cffa
GET /favicon.ico HTTP/1.1
Host: earnme.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: tp2=hljjt
HTTP/1.1 404 Not Found
Connection: Keep-Alive
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Content-Type: text/html
Content-Length: 708
Date: Thu, 06 Oct 2022 18:33:11 GMT
earnme.club/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
200 OK 11 kB URL HTTP/2 earnme.club/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (43771)
Hash d45207ee05c1f0c57dfa075e61405ccd
a8d35143a2d828a739ea0fdde75f97d33621e7ec
a9a4adbbcee31ec277f1bdd573eef97dc4341f29f2db3b5685a02dfe4d2fe9bb
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.2 HTTP/1.1
Host: earnme.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/fidelityfx-super-resolution-from-amd/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 13 Oct 2022 18:33:11 GMT
content-type: text/css
last-modified: Wed, 13 Jul 2022 02:57:39 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 10946
date: Thu, 06 Oct 2022 18:33:11 GMT
X-Firefox-Spdy: h2
earnme.club/wp-content/themes/mh-magazine-lite/style.css?ver=2.9.2
200 OK 8.8 kB URL HTTP/2 earnme.club/wp-content/themes/mh-magazine-lite/style.css?ver=2.9.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (739)
Hash b4588be584fdfc6f3c8997ce49940a0f
f1b50682d29aa349889fea0469a12ed31deb25cb
c609f96251492512f62d975430d7d977a812b78031dad2797d12dbdf34d562db
GET /wp-content/themes/mh-magazine-lite/style.css?ver=2.9.2 HTTP/1.1
Host: earnme.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/fidelityfx-super-resolution-from-amd/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 13 Oct 2022 18:33:11 GMT
content-type: text/css
last-modified: Sun, 26 Jun 2022 02:57:58 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 8842
date: Thu, 06 Oct 2022 18:33:11 GMT
X-Firefox-Spdy: h2
earnme.club/wp-content/themes/mh-magazine-lite/includes/font-awesome.min.css
200 OK 6.7 kB URL HTTP/2 earnme.club/wp-content/themes/mh-magazine-lite/includes/font-awesome.min.css
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (30837)
Hash 97c6ce9b4936f66aa388ad33c39aba2d
3f14a7e78fbb4935cf35c20779dc2035531849a9
1eea453c424793fc56ef14093c10b373e3ca8388a70e847394e8084048c5ce38
GET /wp-content/themes/mh-magazine-lite/includes/font-awesome.min.css HTTP/1.1
Host: earnme.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/fidelityfx-super-resolution-from-amd/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 13 Oct 2022 18:33:11 GMT
content-type: text/css
last-modified: Sun, 26 Jun 2022 02:57:58 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6658
date: Thu, 06 Oct 2022 18:33:11 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b0e8a79f3e381ab34a44278947ac7c7e
70d01e6fdc8565c661b6ae8c5a043ddf2da16530
885a8c234fca85e6f6bb3e8fcab6672b9a9742b5d3f74681b17a330fa295d549
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
earnme.club/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 32 kB URL HTTP/2 earnme.club/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (65447)
Hash d5d325859c1520b3a1ba9a796909ee51
58674b6ceb71ac5a96867a2f205856c247d22e98
9fd5cba9b948a3870d7e13f33affd39e44226ae94a4e2917320aa35ed65bd91e
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: earnme.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/fidelityfx-super-resolution-from-amd/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 13 Oct 2022 18:33:11 GMT
content-type: application/javascript
last-modified: Wed, 10 Mar 2021 15:07:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 31593
date: Thu, 06 Oct 2022 18:33:11 GMT
X-Firefox-Spdy: h2
earnme.club/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 5.3 kB URL HTTP/2 earnme.club/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (11126)
Hash bb5413bc3872b98aa2a4e2aeb13c840c
746c6a7814a6369204462ed5c4c69cdfd2e2343d
5c7cec5bb8b8b40b38fe863b9419b13ec531d57170900dc74a59c7f232ccef91
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: earnme.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/fidelityfx-super-resolution-from-amd/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 13 Oct 2022 18:33:11 GMT
content-type: application/javascript
last-modified: Wed, 18 Nov 2020 09:06:06 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5300
date: Thu, 06 Oct 2022 18:33:11 GMT
X-Firefox-Spdy: h2
earnme.club/wp-content/themes/mh-magazine-lite/js/scripts.js?ver=2.9.2
200 OK 13 kB URL HTTP/2 earnme.club/wp-content/themes/mh-magazine-lite/js/scripts.js?ver=2.9.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (21960)
Hash 98574c14319f5ff56c6780de37593f2a
fd83667f007543824efddb81cbd2454db625ac80
ce0aad6c07f9909cae105e11c0a3c430a91065fd832eb1ad54526dbb80d41767
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/mh-magazine-lite/js/scripts.js?ver=2.9.2 HTTP/1.1
Host: earnme.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/fidelityfx-super-resolution-from-amd/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 13 Oct 2022 18:33:11 GMT
content-type: application/javascript
last-modified: Sun, 26 Jun 2022 02:57:58 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 12569
date: Thu, 06 Oct 2022 18:33:11 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f763a685d14b05b6ced9792151da30b8
b25be5359245be857ffa1bddcb197cb771a36a45
505ad6dc6417d58207f0d68862c4423f4611660ccc6afe165fd3ec2ccb1c893d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
earnme.club/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
200 OK 5.9 kB URL HTTP/2 earnme.club/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (15660)
Hash 53a47ac2d765d78a296044d5d7688fe6
d1a7088c6bf8dd8b36a59622df280a3992ece696
0a4ce5e80f7a886bcbe69732189e4650b5882bdbff0a718e636d63ea97a15db7
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.2 HTTP/1.1
Host: earnme.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/fidelityfx-super-resolution-from-amd/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 13 Oct 2022 18:33:11 GMT
content-type: application/javascript
last-modified: Tue, 12 Apr 2022 05:56:23 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5918
date: Thu, 06 Oct 2022 18:33:11 GMT
X-Firefox-Spdy: h2
earnme.club/wp-includes/js/comment-reply.min.js?ver=6.0.2
200 OK 2.5 kB URL HTTP/2 earnme.club/wp-includes/js/comment-reply.min.js?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (2968)
Hash 62c47f79a793143ddcefb6fee4285729
b04324c3ec6e13ea2c153c0660ad5c47c1ac0809
59337dadfa20a8d8881fe6b3f5ad89636754c3aa61c0e428d749ebae4b3abb55
GET /wp-includes/js/comment-reply.min.js?ver=6.0.2 HTTP/1.1
Host: earnme.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/fidelityfx-super-resolution-from-amd/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 13 Oct 2022 18:33:11 GMT
content-type: application/javascript
last-modified: Fri, 08 Apr 2022 20:07:18 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2525
date: Thu, 06 Oct 2022 18:33:11 GMT
X-Firefox-Spdy: h2
earnme.club/wp-content/uploads/2021/06/maxresdefault-1-678x381.jpg
200 OK 54 kB URL HTTP/2 earnme.club/wp-content/uploads/2021/06/maxresdefault-1-678x381.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 678x381, components 3\012- data
Hash 83a6fa245ddae7d3f36adbc77eb1827f
f6df076477eeca5bc5218f095432dba720cfcd78
0bbe5dae8491b7ca0cabee70dfa18aed9faecd943c4007f89f29a094a04bae31
GET /wp-content/uploads/2021/06/maxresdefault-1-678x381.jpg HTTP/1.1
Host: earnme.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/fidelityfx-super-resolution-from-amd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 13 Oct 2022 18:33:11 GMT
content-type: image/jpeg
last-modified: Sun, 26 Jun 2022 03:03:19 GMT
accept-ranges: bytes
content-length: 54303
date: Thu, 06 Oct 2022 18:33:11 GMT
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-LY1N2M6E7Y
200 OK 75 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-LY1N2M6E7Y
IP
File type ASCII text, with very long lines (18991)
Hash 9d8cabafc6cef750cc6bd3ed7b44c0eb
15d49f3fcb6869034f427dd7ef713a3eec51eaef
31874ee21c7fa086ce6641ff5439728538e02c1f9d38b825cf2ad3a69961a0b8
GET /gtag/js?id=G-LY1N2M6E7Y HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 06 Oct 2022 18:33:11 GMT
expires: Thu, 06 Oct 2022 18:33:11 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 74776
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Pragma, Content-Length, Backoff, Last-Modified, Cache-Control, Content-Type, Retry-After, ETag, Expires, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Thu, 06 Oct 2022 18:29:41 GMT
Expires: Thu, 06 Oct 2022 19:07:03 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: yQL1aEWaZQdYOZdI9Gu880f93qJsesuUxEHRt93D4ZPJPpf8XboB4Q==
Age: 211
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b0e8a79f3e381ab34a44278947ac7c7e
70d01e6fdc8565c661b6ae8c5a043ddf2da16530
885a8c234fca85e6f6bb3e8fcab6672b9a9742b5d3f74681b17a330fa295d549
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f763a685d14b05b6ced9792151da30b8
b25be5359245be857ffa1bddcb197cb771a36a45
505ad6dc6417d58207f0d68862c4423f4611660ccc6afe165fd3ec2ccb1c893d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tg1.playstream.media/api/adserver/spt?AV_TAGID=62790805abc41c4450002684&AV_PUBLISHERID=62176a72a06fe80ba569d18f
200 OK 6.9 kB URL HTTP/1.1 tg1.playstream.media/api/adserver/spt?AV_TAGID=62790805abc41c4450002684&AV_PUBLISHERID=62176a72a06fe80ba569d18f
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (3589)
Hash e4067d314c78b5c12b72e1952c9f4c5c
678108f39599469470dd4b1cc783722160b1749e
5d92d74a80359affe45feb1d827cf26e2ac54e1065ae2ae2376ca21269ee1749
GET /api/adserver/spt?AV_TAGID=62790805abc41c4450002684&AV_PUBLISHERID=62176a72a06fe80ba569d18f HTTP/1.1
Host: tg1.playstream.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript
Access-Control-Allow-Methods: GET, POST, DELETE, PUT, OPTIONS, INDEX
Access-Control-Allow-Headers: Keep-Alive,User-Agent,If-Modified-Since,Cache-Control,Content-Type,Authorization,X-Bamboo-Token,Event-Id,X-Requested-With,avsptstaging
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
Content-Length: 6874
Cache-Control: max-age=300
Expires: Thu, 06 Oct 2022 18:38:12 GMT
Date: Thu, 06 Oct 2022 18:33:12 GMT
Connection: keep-alive
Vary: Accept-Encoding
a.teads.tv/analytics/tag.js
200 OK 3.4 kB URL HTTP/2 a.teads.tv/analytics/tag.js
IP
File type ASCII text, with very long lines (4822)
Hash 17c0d6e20839220eda6b6705a5927ecd
7be150d4a843663f701b277490a61e7129ff96ff
7e0bd8b7407f2c07df78a42a431c8e9ec8b1737631c8793e6aeb19d502acca91
GET /analytics/tag.js HTTP/1.1
Host: a.teads.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: OcMovej99gPZ4phntcYbvwqKiH30Q6TNKFkEmNkRQfua36kK8447PqvZscNrOCB05xmNS8jfFeA=
x-amz-request-id: DJZJZ0MDY5N4XZTD
last-modified: Thu, 29 Sep 2022 14:53:50 GMT
etag: "17c0d6e20839220eda6b6705a5927ecd"
x-amz-server-side-encryption: AES256
x-amz-version-id: e3HRkV45dlKSU2VLXzuV.1qsEv2pzDxO
accept-ranges: bytes
content-type: text/javascript;charset=utf-8
content-length: 3375
cache-control: private, max-age=3600
date: Thu, 06 Oct 2022 18:33:12 GMT
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
c.amazon-adsystem.com/aax2/apstag.js
200 OK 45 kB URL HTTP/2 c.amazon-adsystem.com/aax2/apstag.js
IP
Hash 4f372653b0c4893eaec194d766656d00
0ada59b4d41c824ef295ed2de737a222498b752d
0be60895bc88b1bdc8f69a85b27947d2ff087455d91d183d3d4c2d8b134c5dd7
GET /aax2/apstag.js HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Thu, 06 Oct 2022 18:28:10 GMT
last-modified: Thu, 06 Oct 2022 18:12:38 GMT
etag: W/"4c87a00941c1aa3dcbab77fc8dc08ec0"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600
server: AmazonS3
content-encoding: gzip
via: 1.1 a49c26e403f2dac09629dceb6dac5740.cloudfront.net (CloudFront), 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: FRA60-P1, OSL50-P1
x-amz-cf-id: RDKA3KqwIf5s2VJbKEDuvDhuLeKHukBZnU0X4JeRtq9vrEdwR6837A==
age: 303
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0c4b4e7ae73ae5fe7f0fa6255146d79
b67c683c6a3e424f02cb391f5b6fd86d0f60092c
6f524b08cb96a6340239e0b50eab6ac8e35b9f923dc47aec259682c48e54cef8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6F524B08CB96A6340239E0B50EAB6AC8E35B9F923DC47AEC259682C48E54CEF8"
Last-Modified: Tue, 04 Oct 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6142
Expires: Thu, 06 Oct 2022 20:15:34 GMT
Date: Thu, 06 Oct 2022 18:33:12 GMT
Connection: keep-alive
htlbid.com/v3/earnme.club/adsstarbid.css
200 OK 0 B URL HTTP/2 htlbid.com/v3/earnme.club/adsstarbid.css
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/earnme.club/adsstarbid.css HTTP/1.1
Host: htlbid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
content-length: 0
last-modified: Mon, 13 Jun 2022 06:46:43 GMT
accept-ranges: bytes
server: AmazonS3
date: Thu, 06 Oct 2022 18:33:13 GMT
cache-control: max-age=600
etag: "d41d8cd98f00b204e9800998ecf8427e"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hSgjzBWUX7t_M0WWMyVQRm1d1GtHYvONzQijrgy9ye54I93GFkWhVQ==
X-Firefox-Spdy: h2
cat.hbwrapper.com/
200 OK 15 B IP
ASN #14061 DIGITALOCEAN-ASN
File type JSON data\012- , ASCII text, with no line terminators
Hash 0f0479874bf6f4a7281099b15df27c27
55a490e280d48996e564d00492437eb17faadd28
a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288
POST / HTTP/1.1
Host: cat.hbwrapper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 163
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 18:33:12 GMT
Server: Apache
Access-Control-Allow-Origin: https://earnme.club
Access-Control-Allow-Credentials: true
Content-Length: 15
Connection: close
Content-Type: text/html; charset=UTF-8
earnme.club/wp-content/themes/mh-magazine-lite/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL HTTP/2 earnme.club/wp-content/themes/mh-magazine-lite/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
ASN #24940 Hetzner Online GmbH
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/mh-magazine-lite/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: earnme.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://earnme.club/wp-content/themes/mh-magazine-lite/includes/font-awesome.min.css
Cookie: _uc_referrer=https://www.google.com/; _pbjs_userid_consent_data=3524755945110770
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 13 Oct 2022 18:33:12 GMT
content-type: font/woff2
last-modified: Sun, 26 Jun 2022 02:57:58 GMT
accept-ranges: bytes
content-length: 77160
date: Thu, 06 Oct 2022 18:33:12 GMT
X-Firefox-Spdy: h2
player.avplayer.com/script/2/v/avcplayer.js
200 OK 61 kB URL HTTP/2 player.avplayer.com/script/2/v/avcplayer.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 9dff0335699f04080269947f40c366ae
8447df4f8b168d9c506630f96ef95002c2c6eb28
157b5912ad26a879f38d0dafb1fce2def6df3168a08f991d6203463375fa32fc
GET /script/2/v/avcplayer.js HTTP/1.1
Host: player.avplayer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 03 Mar 2022 17:18:44 GMT
etag: "9dff0335699f04080269947f40c366ae"
x-guploader-uploadid: ADPycdtu-4lkKnewYrLZAQ6C3FYocqKyAEpTHAcTl1fhfCPCh7vxR-IJqbD_5jBst3P2Kl4LF2YOsUpbgaREFcUSdQ
server: UploadServer
x-goog-generation: 1646327924579580
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 61326
content-type: application/javascript
content-encoding: gzip
content-language: en
x-goog-hash: crc32c=DITkQg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 61326
cache-control: public, max-age=300
expires: Thu, 06 Oct 2022 18:38:12 GMT
date: Thu, 06 Oct 2022 18:33:12 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash aea480478c3be7392d09e8a92826542f
b660fb42c8122efb07b3d1de1a8907ad1f6e1a60
ee691969e4d61ba3145fe90b28c5051367c223f31c0e0ee001d8481035090760
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ff5f22aafa6751c60631736c305a4c7c
278b89e5c1a978e070be4b66bb780862894b8504
b501664d7591e6dfe95c8641e0020e04b76f16f5cb80a7fc0ee0b36af60a6382
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: kmD4aJ0fXp31NxGxUBUG8A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: +DpB3D2f+lpMPW1QvTiBZYdgN2Y=
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://earnme.club
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 06 Oct 2022 05:42:51 GMT
expires: Fri, 06 Oct 2023 05:42:51 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
age: 46221
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
flashnetic.com/c/uv85s8wiydoa62b7a5wma.json
200 OK 1.6 kB URL HTTP/2 flashnetic.com/c/uv85s8wiydoa62b7a5wma.json
IP
File type JSON data\012- , ASCII text, with very long lines (1588), with no line terminators
Hash 03aff7733037a126b48f39972696c32d
36ec514eac7312965cc9f3a8dfcd3fec5554d645
f6756f243b4ec685ae635dca47f8c510ed0f5b15d09ee4333a990b7565de95fb
GET /c/uv85s8wiydoa62b7a5wma.json HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Origin: https://earnme.club
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1588
last-modified: Wed, 05 Oct 2022 11:56:22 GMT
x-amz-version-id: sWNsbsoHcsMMKRa1JoBHS1vNNgN95QG2
accept-ranges: bytes
server: AmazonS3
date: Thu, 06 Oct 2022 12:13:00 GMT
etag: "03aff7733037a126b48f39972696c32d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _zRIE03uTlZSLlPrDioFLf5bkzMxyxqZXebkBgI68JoUgwvWtrXQ-A==
age: 22813
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
flashnetic.com/c/ao0y4krv21gsuol1v4o82.json
200 OK 1.6 kB URL HTTP/2 flashnetic.com/c/ao0y4krv21gsuol1v4o82.json
IP
File type JSON data\012- , ASCII text, with very long lines (1584), with no line terminators
Hash d08ab2e6e30a2fe0fdd62ab6d2286332
cf948644335d39edcf103f53565296875e528c62
638fae437ad08dd30810de850dfcc60bd51a79a76940b40ec0d44488811c9a74
GET /c/ao0y4krv21gsuol1v4o82.json HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Origin: https://earnme.club
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1584
last-modified: Wed, 05 Oct 2022 11:54:26 GMT
x-amz-version-id: uZbR8zEfxi2ioTloqRvdsCfHBpK7dIDa
accept-ranges: bytes
server: AmazonS3
date: Thu, 06 Oct 2022 18:33:12 GMT
etag: "d08ab2e6e30a2fe0fdd62ab6d2286332"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HzvAyJldjymcG_VTaas9506JBaUoLEA6-SYCSWyEu-p8UQxF1VBvvg==
age: 22813
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
flashnetic.com/c/tvdi2ru09cf0ymc0mwei9.json
200 OK 1.6 kB URL HTTP/2 flashnetic.com/c/tvdi2ru09cf0ymc0mwei9.json
IP
File type JSON data\012- , ASCII text, with very long lines (1588), with no line terminators
Hash 2960d65a4b73d7b40980f9a1d91a6ab0
4e81dec8d06dea2fbd201aa9ab08efb09f7a0725
40229c528d4c359fa696035f962d658d3538b3544ef8454b42632fc80820b0f2
GET /c/tvdi2ru09cf0ymc0mwei9.json HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Origin: https://earnme.club
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1588
last-modified: Wed, 05 Oct 2022 11:56:21 GMT
x-amz-version-id: 1JKBEEnBHtNMnaysapoNyhhpmgEdg1UN
accept-ranges: bytes
server: AmazonS3
date: Thu, 06 Oct 2022 18:33:12 GMT
etag: "2960d65a4b73d7b40980f9a1d91a6ab0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rI8PG5YcW9v4A2xL8TvyTJgrgJ__eNfNYQH4h3c9a7Cnpz7oxPr6aw==
age: 22813
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ff5f22aafa6751c60631736c305a4c7c
278b89e5c1a978e070be4b66bb780862894b8504
b501664d7591e6dfe95c8641e0020e04b76f16f5cb80a7fc0ee0b36af60a6382
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
player.avplayer.com/script/2/2.55/libs/hls.min.js
200 OK 72 kB URL HTTP/2 player.avplayer.com/script/2/2.55/libs/hls.min.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 7888b98658e8cef4a98786556ccdab66
d52a58a8e2463dba71947783a8485dcd023100d1
ea7bca216f10e44bd3b4febb9f5a6e6e2f72059b55441e2823ceb3a2be03e161
GET /script/2/2.55/libs/hls.min.js HTTP/1.1
Host: player.avplayer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 10 Jan 2021 14:52:52 GMT
etag: "7888b98658e8cef4a98786556ccdab66"
x-guploader-uploadid: ADPycdvb01YBBQDWpLAX_FuV-7DSoxLYAzI5YTOUillnczoaCnX1-6OEkBGHdpMa0ucqpIwdSEU02m8DzzX8XijUDkQ
x-goog-generation: 1610290372874389
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 71831
content-type: application/javascript
content-encoding: gzip
content-language: en
x-goog-hash: crc32c=vMWMIg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 71831
server: UploadServer
cache-control: public, max-age=300
expires: Thu, 06 Oct 2022 18:38:12 GMT
date: Thu, 06 Oct 2022 18:33:12 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.playstream.media/logo.png
200 OK 1.3 kB URL HTTP/2 cdn.playstream.media/logo.png
IP
File type PNG image data, 32 x 26, 8-bit/color RGBA, non-interlaced\012- data
Hash b0fb81e9e278d867bb73f8a6cde236f2
ca10201696f69919ff9541bb549de2d0b065eb8e
875a318ebf906866ab16eb2e848924b12c38f7d33ae1c6e72244aba92faa9b7b
GET /logo.png HTTP/1.1
Host: cdn.playstream.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:12 GMT
content-length: 1265
content-type: image/png
last-modified: Tue, 19 Jan 2021 07:48:16 GMT
accept-ranges: bytes
server: nginx/1.17.10
etag: "60068ec0-4f1"
cache-control: max-age=315360000
access-control-allow-origin: *
x-hw: 1665081192.cds204.sk1.hn,1665081192.cds203.sk1.c
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 1c20839bd5edb2af35d9acdc96b3a8d7
f22ea2690c49220ab93e442bd515daacc15ddfff
af21c2387eb392c833ecb2a358643f98149854aaac8e3af9cdca8a775affba4d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 18:33:12 GMT
Last-Modified: Thu, 06 Oct 2022 17:30:10 GMT
Server: ECS (nyb/1D18)
X-Cache: Miss from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: o3qJcv7IGa7kONUoUg9QMwSDGPRS54XYruMykJgfTIIionDTDfj2-w==
Age: 3782
status.geotrust.com/
200 OK 471 B IP
Hash 394043f4d265cf7c25605fc2a791636f
0b36ccfe99a4945a45d131daa50cf0b7b4e4f910
af5b32e0001ea8033028342efaef3f8a614206c750e75260db3bc483d548571d
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1387
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:12 GMT
Last-Modified: Thu, 06 Oct 2022 18:10:06 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 313 B IP
Hash f49a6396cd009de384469aa0c3a9c976
141bcfe87f6ba3c3dc7f8e24a22fba6709c4344f
779eae7cce4861bac89db859d87dd3cac6ef064f6b67687a35f938ab4ecf9745
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4076
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:12 GMT
Last-Modified: Thu, 06 Oct 2022 17:25:16 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 313
htlb.casalemedia.com/openrtb/pbjs?s=775312&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%22214b26f413a421e%22%2C%22site%22%3A%7B%22ref%22%3A%22https%3A%2F%2Fwww.google.com%2F%22%2C%22page%22%3A%22https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F%22%2C%22domain%22%3A%22earnme.club%22%2C%22publisher%22%3A%7B%22domain%22%3A%22earnme.club%22%7D%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22mfu%22%3A0%2C%22bu%22%3A1%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A1%2C%22ren%22%3Afalse%2C%22version%22%3A%227.15.0%22%2C%22userIds%22%3A%5B%5D%2C%22url%22%3A%22https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F%22%2C%22tmax%22%3A3000%2C%22syncsPerBidder%22%3A5%2C%22fpd%22%3Atrue%2C%22pbadslot%22%3A%22%2F22181265%2Femc_300v_2%22%2C%22adunitcode%22%3A%228c641015-9b33-40f5-862d-5504eec51413%22%2C%22divId%22%3A%228c641015-9b33-40f5-862d-5504eec51413%22%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%22227b0de200d74e78%22%2C%22banner%22%3A%7B%22topframe%22%3A1%2C%22format%22%3A%5B%7B%22w%22%3A300%2C%22h%22%3A250%2C%22ext%22%3A%7B%22siteID%22%3A%22775312%22%2C%22sid%22%3A%22300x250%22%2C%22fl%22%3A%22p%22%7D%7D%2C%7B%22w%22%3A336%2C%22h%22%3A280%2C%22ext%22%3A%7B%22siteID%22%3A%22775312%22%2C%22sid%22%3A%22336x280%22%2C%22fl%22%3A%22p%22%7D%7D%5D%2C%22pos%22%3A3%7D%2C%22ext%22%3A%7B%22dfp_ad_unit_code%22%3A%22%2F22181265%2Femc_300v_2%22%2C%22gpid%22%3A%22%2F22181265%2Femc_300v_2%22%7D%2C%22bidfloor%22%3A0.01%2C%22bidfloorcur%22%3A%22USD%22%7D%5D%2C%22at%22%3A1%2C%22source%22%3A%7B%22ext%22%3A%7B%22schain%22%3A%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22adapex.io%22%2C%22sid%22%3A%22s1602%22%2C%22hp%22%3A1%7D%5D%7D%7D%7D%2C%22user%22%3A%7B%22eids%22%3A%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%2240871300-f466-47da-93e3-15151277a692%22%7D%5D%7D%5D%7D%2C%22regs%22%3A%7B%22ext%22%3A%7B%22us_privacy%22%3A%221---%22%7D%7D%7D
200 OK 37 B URL HTTP/2 htlb.casalemedia.com/openrtb/pbjs?s=775312&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%22214b26f413a421e%22%2C%22site%22%3A%7B%22ref%22%3A%22https%3A%2F%2Fwww.google.com%2F%22%2C%22page%22%3A%22https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F%22%2C%22domain%22%3A%22earnme.club%22%2C%22publisher%22%3A%7B%22domain%22%3A%22earnme.club%22%7D%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22mfu%22%3A0%2C%22bu%22%3A1%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A1%2C%22ren%22%3Afalse%2C%22version%22%3A%227.15.0%22%2C%22userIds%22%3A%5B%5D%2C%22url%22%3A%22https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F%22%2C%22tmax%22%3A3000%2C%22syncsPerBidder%22%3A5%2C%22fpd%22%3Atrue%2C%22pbadslot%22%3A%22%2F22181265%2Femc_300v_2%22%2C%22adunitcode%22%3A%228c641015-9b33-40f5-862d-5504eec51413%22%2C%22divId%22%3A%228c641015-9b33-40f5-862d-5504eec51413%22%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%22227b0de200d74e78%22%2C%22banner%22%3A%7B%22topframe%22%3A1%2C%22format%22%3A%5B%7B%22w%22%3A300%2C%22h%22%3A250%2C%22ext%22%3A%7B%22siteID%22%3A%22775312%22%2C%22sid%22%3A%22300x250%22%2C%22fl%22%3A%22p%22%7D%7D%2C%7B%22w%22%3A336%2C%22h%22%3A280%2C%22ext%22%3A%7B%22siteID%22%3A%22775312%22%2C%22sid%22%3A%22336x280%22%2C%22fl%22%3A%22p%22%7D%7D%5D%2C%22pos%22%3A3%7D%2C%22ext%22%3A%7B%22dfp_ad_unit_code%22%3A%22%2F22181265%2Femc_300v_2%22%2C%22gpid%22%3A%22%2F22181265%2Femc_300v_2%22%7D%2C%22bidfloor%22%3A0.01%2C%22bidfloorcur%22%3A%22USD%22%7D%5D%2C%22at%22%3A1%2C%22source%22%3A%7B%22ext%22%3A%7B%22schain%22%3A%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22adapex.io%22%2C%22sid%22%3A%22s1602%22%2C%22hp%22%3A1%7D%5D%7D%7D%7D%2C%22user%22%3A%7B%22eids%22%3A%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%2240871300-f466-47da-93e3-15151277a692%22%7D%5D%7D%5D%7D%2C%22regs%22%3A%7B%22ext%22%3A%7B%22us_privacy%22%3A%221---%22%7D%7D%7D
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 8438d6678607d4b96556438b66ec2132
276baaab5332c5994340a1122a6a375d1f533b22
6aef3ebbc23e59b93926c8c8027d317277cdc3dfe663c85ee221fe1ca1aa6ffa
GET /openrtb/pbjs?s=775312&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%22214b26f413a421e%22%2C%22site%22%3A%7B%22ref%22%3A%22https%3A%2F%2Fwww.google.com%2F%22%2C%22page%22%3A%22https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F%22%2C%22domain%22%3A%22earnme.club%22%2C%22publisher%22%3A%7B%22domain%22%3A%22earnme.club%22%7D%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22mfu%22%3A0%2C%22bu%22%3A1%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A1%2C%22ren%22%3Afalse%2C%22version%22%3A%227.15.0%22%2C%22userIds%22%3A%5B%5D%2C%22url%22%3A%22https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F%22%2C%22tmax%22%3A3000%2C%22syncsPerBidder%22%3A5%2C%22fpd%22%3Atrue%2C%22pbadslot%22%3A%22%2F22181265%2Femc_300v_2%22%2C%22adunitcode%22%3A%228c641015-9b33-40f5-862d-5504eec51413%22%2C%22divId%22%3A%228c641015-9b33-40f5-862d-5504eec51413%22%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%22227b0de200d74e78%22%2C%22banner%22%3A%7B%22topframe%22%3A1%2C%22format%22%3A%5B%7B%22w%22%3A300%2C%22h%22%3A250%2C%22ext%22%3A%7B%22siteID%22%3A%22775312%22%2C%22sid%22%3A%22300x250%22%2C%22fl%22%3A%22p%22%7D%7D%2C%7B%22w%22%3A336%2C%22h%22%3A280%2C%22ext%22%3A%7B%22siteID%22%3A%22775312%22%2C%22sid%22%3A%22336x280%22%2C%22fl%22%3A%22p%22%7D%7D%5D%2C%22pos%22%3A3%7D%2C%22ext%22%3A%7B%22dfp_ad_unit_code%22%3A%22%2F22181265%2Femc_300v_2%22%2C%22gpid%22%3A%22%2F22181265%2Femc_300v_2%22%7D%2C%22bidfloor%22%3A0.01%2C%22bidfloorcur%22%3A%22USD%22%7D%5D%2C%22at%22%3A1%2C%22source%22%3A%7B%22ext%22%3A%7B%22schain%22%3A%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22adapex.io%22%2C%22sid%22%3A%22s1602%22%2C%22hp%22%3A1%7D%5D%7D%7D%7D%2C%22user%22%3A%7B%22eids%22%3A%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%2240871300-f466-47da-93e3-15151277a692%22%7D%5D%7D%5D%7D%2C%22regs%22%3A%7B%22ext%22%3A%7B%22us_privacy%22%3A%221---%22%7D%7D%7D HTTP/1.1
Host: htlb.casalemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:12 GMT
content-type: application/json
content-length: 37
cf-ray: 75607beef8fbb529-OSL
access-control-allow-origin: https://earnme.club
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
access-control-allow-credentials: true
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7phiV%2FZtvcVFXD5dVJxA%2Fu%2BLzgeWCszI4dBcfmj0zqQHJ0afu8Yb%2BdBCwDUplzmduwhcskUZNuHeuju%2FXwoi5py5Wk8EOeGP8ZjYy9m515NIPkCo88AVg0gFktKaDidU9vHsMb69"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash 5473c56886092dbc106e0f08f46f704c
af4238edca96af60f79c20967f78c2a464dd795c
b8e317d7a17b899ed3cfddf5f5120295b15e41c8e7bb77319a1ee623681f38a8
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3064
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:12 GMT
Last-Modified: Thu, 06 Oct 2022 17:42:08 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f420634594a0df5d9e2c3d8ac31dd4d3
701305aaa4845a9a3aaaab3fe655920efb0a0d6e
a3875d86f3c1432d92085d823ed2c3c346572eb57d40a6d6e2a5f98a993c2372
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3875D86F3C1432D92085D823ED2C3C346572EB57D40A6D6E2A5F98A993C2372"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7185
Expires: Thu, 06 Oct 2022 20:32:57 GMT
Date: Thu, 06 Oct 2022 18:33:12 GMT
Connection: keep-alive
track1.aniview.com/track?pid=62176a72a06fe80ba569d18f&cid=6278fd47e6b0901a49776895&cb=1665081192432&r=earnme.club&stagid=62790805abc41c4450002684&stplid=6278f4f0a7dd573d85421cad&d35=&d65=&e=playerLoaded
200 OK 0 B URL HTTP/2 track1.aniview.com/track?pid=62176a72a06fe80ba569d18f&cid=6278fd47e6b0901a49776895&cb=1665081192432&r=earnme.club&stagid=62790805abc41c4450002684&stplid=6278f4f0a7dd573d85421cad&d35=&d65=&e=playerLoaded
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track?pid=62176a72a06fe80ba569d18f&cid=6278fd47e6b0901a49776895&cb=1665081192432&r=earnme.club&stagid=62790805abc41c4450002684&stplid=6278f4f0a7dd573d85421cad&d35=&d65=&e=playerLoaded HTTP/1.1
Host: track1.aniview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:12 GMT
content-length: 0
cache-control: max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
onetag-sys.com/prebid-request
200 OK 41 B URL HTTP/2 onetag-sys.com/prebid-request
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 1c15203d1319c02fe2a06d78bc45eccf
40386992654bdda331c8f6eb21ac79de396119ee
cc81a9c5e7147dba347b0ffd34f64e9a7c40f25782569fec5c3fc68b4017badb
POST /prebid-request HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1380
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://earnme.club
access-control-allow-headers: content-type, origin, referer, user-agent
access-control-allow-credentials: true
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
cache-control: no-transform, no-cache
content-type: application/json
content-encoding: gzip
content-length: 41
strict-transport-security: max-age=15552000
X-Firefox-Spdy: h2
digikulture-d.openx.net/w/1.0/arj?ju=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&ch=UTF-8&res=1280x1024x24&ifr=false&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=fbb2630d-2b3a-4801-9795-82843bd09618&nocache=1665081192762&us_privacy=1---&pubcid=40871300-f466-47da-93e3-15151277a692&schain=1.0%2C1!adapex.io%2Cs1602%2C1%2C%2C%2C&aus=300x250%2C336x280&divids=8c641015-9b33-40f5-862d-5504eec51413&aucs=%252F22181265%252Femc_300v_2&auid=556580798&aumfs=10
200 OK 79 B URL HTTP/2 digikulture-d.openx.net/w/1.0/arj?ju=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&ch=UTF-8&res=1280x1024x24&ifr=false&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=fbb2630d-2b3a-4801-9795-82843bd09618&nocache=1665081192762&us_privacy=1---&pubcid=40871300-f466-47da-93e3-15151277a692&schain=1.0%2C1!adapex.io%2Cs1602%2C1%2C%2C%2C&aus=300x250%2C336x280&divids=8c641015-9b33-40f5-862d-5504eec51413&aucs=%252F22181265%252Femc_300v_2&auid=556580798&aumfs=10
IP
File type JSON data\012- , ASCII text
Hash 26fa6f823e0c3def8658fdaf8c747d4c
a066b5600203724d46a5302e7944a0250397763b
ad50ae7a063f77dd8fa8aa83d365723a6b4b39567adaddb1cb211c2cc01021fa
GET /w/1.0/arj?ju=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&ch=UTF-8&res=1280x1024x24&ifr=false&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=fbb2630d-2b3a-4801-9795-82843bd09618&nocache=1665081192762&us_privacy=1---&pubcid=40871300-f466-47da-93e3-15151277a692&schain=1.0%2C1!adapex.io%2Cs1602%2C1%2C%2C%2C&aus=300x250%2C336x280&divids=8c641015-9b33-40f5-862d-5504eec51413&aucs=%252F22181265%252Femc_300v_2&auid=556580798&aumfs=10 HTTP/1.1
Host: digikulture-d.openx.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept, Accept-Encoding
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Thu, 06 Oct 2022 18:33:12 GMT
content-type: application/json
content-length: 79
content-encoding: gzip
cache-control: private, max-age=0, no-cache
access-control-allow-origin: https://earnme.club
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
prebid.a-mo.net/a/c
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 968
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://earnme.club
cache-control: max-age=0, private, must-revalidate
date: Thu, 06 Oct 2022 18:33:12 GMT
server: envoy
vary: origin, Accept-Encoding
x-nbr: 8
x-envoy-upstream-service-time: 0
X-Firefox-Spdy: h2
player.aniview.com/script/6.1/AVmanager.js?v=1.0&type=s&pid=62176a72a06fe80ba569d18f
200 OK 112 kB URL HTTP/2 player.aniview.com/script/6.1/AVmanager.js?v=1.0&type=s&pid=62176a72a06fe80ba569d18f
IP
File type Unicode text, UTF-8 text, with very long lines (46154), with LF, NEL line terminators
Size 112 kB (112390 bytes)
Hash 338e56b1f4ce4f7715f277f4b2749547
600797536339e354a9ad5d1d23a10b2db113a34a
7e96fafa3b612256fa5fe692da8f6d55d1fe3e23fe677ecc5c6dd54dff8aabb1
GET /script/6.1/AVmanager.js?v=1.0&type=s&pid=62176a72a06fe80ba569d18f HTTP/1.1
Host: player.aniview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsdObmA8mb9WOhe-IjVLKKlAaIfwGqzQ776G7sR5J3z6kwNOGrLg4sRXNh3gw_uMdK0sDZnWsbkLmY_jqjWTkhysg
last-modified: Thu, 22 Sep 2022 10:35:01 GMT
etag: "338e56b1f4ce4f7715f277f4b2749547"
x-goog-generation: 1663842901832027
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 112390
content-type: application/javascript
content-encoding: gzip
x-goog-hash: crc32c=61SVsA==, md5=M45WsfTOT3cV8nf0snSVRw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 112390
access-control-allow-origin: *
access-control-expose-headers: Content-Type
server: UploadServer
cache-control: public, max-age=300
expires: Thu, 06 Oct 2022 18:38:12 GMT
date: Thu, 06 Oct 2022 18:33:12 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash 394043f4d265cf7c25605fc2a791636f
0b36ccfe99a4945a45d131daa50cf0b7b4e4f910
af5b32e0001ea8033028342efaef3f8a614206c750e75260db3bc483d548571d
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6183
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:12 GMT
Last-Modified: Thu, 06 Oct 2022 16:50:09 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 163a566c5ae77e6a837794d1fc9911db
040cef514e28450cc04518096d0f7e4f55e97f6e
f79fa40a837f8c64c600ad14d81fe17106404d97802e392adf1fcdce2ff5c074
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6515
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:12 GMT
Last-Modified: Thu, 06 Oct 2022 16:44:38 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 163a566c5ae77e6a837794d1fc9911db
040cef514e28450cc04518096d0f7e4f55e97f6e
f79fa40a837f8c64c600ad14d81fe17106404d97802e392adf1fcdce2ff5c074
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6515
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:12 GMT
Last-Modified: Thu, 06 Oct 2022 16:44:38 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash cad0371a15e19e30236221606a9d213e
046e3b4ff06d322ca0f9b78bbe9e92e3f65db9cc
ac92da5d9d40bb52ff113c4e2f963870ab060790eae3b1f8cdcfdbf2dd09c5e1
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 769
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:12 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://earnme.club
AN-X-Request-Uuid: 309d2f5a-77e1-41d1-9bb0-bd56689bc17a
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
c2shb.pubgw.yahoo.com/bidRequest
200 OK 0 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-openrtb-version
Referer: https://earnme.club/
Origin: https://earnme.club
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:12 GMT
content-length: 0
server: ATS/9.1.10.25
access-control-allow-origin: https://earnme.club
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-headers: X-Requested-With,Content-Type,X-Openrtb-Version
access-control-allow-credentials: true
access-control-max-age: 600
age: 0
X-Firefox-Spdy: h2
c2shb.pubgw.yahoo.com/bidRequest
200 OK 0 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-openrtb-version
Referer: https://earnme.club/
Origin: https://earnme.club
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:12 GMT
content-length: 0
server: ATS/9.1.10.25
access-control-allow-origin: https://earnme.club
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-headers: X-Requested-With,Content-Type,X-Openrtb-Version
access-control-allow-credentials: true
access-control-max-age: 600
age: 0
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash fb47e07a4eebcf53bf539e33c53ad5fd
a70a8019b57e29f9abc388047062065e31a7bafe
15963bddadf560a751bfa3670a6afed815dbe1084778ac1ab56da16304afc589
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 18:33:13 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 04 Oct 2022 19:45:29 GMT
Expires: Tue, 11 Oct 2022 19:45:28 GMT
Etag: "a70a8019b57e29f9abc388047062065e31a7bafe"
Cache-Control: max-age=435735,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75607bef3de11c0e-OSL
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9d13740675eb4cbc7e53e91c4e84a6d3
991d74999ba085985b7ae7e17f22c9a03bf9def8
7d9b86f31dc51a812ab91bf47d9eb26e8a88424576a6c1a1e64b0196b1690cc3
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 1239
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:13 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://earnme.club
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
hb.adpone.com/prebid6.28.0.js
200 OK 114 kB URL HTTP/2 hb.adpone.com/prebid6.28.0.js
IP
File type ASCII text, with very long lines (65423)
Size 114 kB (114279 bytes)
Hash 4e891780bfb6ad401c03ecfab05e491e
f5b44f664c0496f7625d3f073dc521f148ae70bd
80a3feb5a7fdd9ebac120d3c36d6aa26c008569f2c25d24cc01e921ed941913b
GET /prebid6.28.0.js HTTP/1.1
Host: hb.adpone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:12 GMT
content-type: application/javascript
x-amz-id-2: ZeYyFO1WO8bd0INZHGvPyLzFUYGKr05MtFUB6deBGQhTT09x1c8Kl8rNdCgyDw3KVM5M2xXZRr0=
x-amz-request-id: KSCZ9PK2H52Q0QYC
last-modified: Thu, 01 Sep 2022 08:38:40 GMT
etag: W/"94ea378b0eaeec94d5e74f26642abb74"
x-amz-version-id: x5L5JdEDG5On.qeaBIFlrpEiCcjiPsIi
cache-control: max-age=14400
cf-cache-status: HIT
age: 1974
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CTKp5rME9QCT99Y6f3N5vtAGAS1FVHLvzjrTZmaRHKTj3ku%2FYmKHcyDgv%2F4ysjsC1rGzaKVmbLb1zmhVUDfEku8qkQFSzHmqt4Wru4m2H6hfIc2pYXlOSiPYbCC05E4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75607bf00daeb50b-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eac86f868b3967f1946c7f5fc712b25f
e2ae8eb09715a0af0791c085eb35bf66e0548e30
bceb14e7a478c0e34a0f1d8286eb954566c62051e996bc36189de922a76a6e06
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
track1.avplayer.com/ctrack?pt=2&cmid=&cwid=&cvid=&pid=62176a72a06fe80ba569d18f&r=earnme.club&sn=&cd1=&cd2=&cd3=&app=&wi=640&he=361&test=&vi=51&e=cpll&cb=1665081192624
200 OK 0 B URL HTTP/2 track1.avplayer.com/ctrack?pt=2&cmid=&cwid=&cvid=&pid=62176a72a06fe80ba569d18f&r=earnme.club&sn=&cd1=&cd2=&cd3=&app=&wi=640&he=361&test=&vi=51&e=cpll&cb=1665081192624
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ctrack?pt=2&cmid=&cwid=&cvid=&pid=62176a72a06fe80ba569d18f&r=earnme.club&sn=&cd1=&cd2=&cd3=&app=&wi=640&he=361&test=&vi=51&e=cpll&cb=1665081192624 HTTP/1.1
Host: track1.avplayer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:13 GMT
content-length: 0
cache-control: max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=bcxwhghezg&e=1288751309616
200 OK 2.5 kB URL HTTP/2 flashnetic.com/r/p.html?f=bcxwhghezg&e=1288751309616
IP
File type HTML document, ASCII text
Hash 70947108c969e20b94055eb7b13c60be
422b5185e5b73c03721cfa6a54dc33e163ac146f
cb8907644a22b309e4af98123dae7ec4585be72793f0d1cc90b47442de4383c5
GET /r/p.html?f=bcxwhghezg&e=1288751309616 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _dxVJcdvmZsres8BmskhgEpGuDs5IrOJIvwaqE9Nx9KRCpftf2xHgA==
age: 23124
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=vzx&e=1288751309616
200 OK 2.1 kB URL HTTP/2 flashnetic.com/r/p.html?f=vzx&e=1288751309616
IP
File type HTML document, ASCII text
Hash ebbb38b35e216c34f1b6f2ff5a76d027
be76e32aec58bbd7506da1e46232a1b4fb6b5690
93318fc935fe9ebb5551247f79ec837d6447ef44bada5237c25656ede46bcddf
GET /r/p.html?f=vzx&e=1288751309616 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SLh1hNyKls5E9kaWCFzUqe6cWFt_y1wefXRfAgFh2DcBC_HOVuDHlQ==
age: 23124
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
securepubads.g.doubleclick.net/tag/js/gpt.js
200 OK 28 kB URL HTTP/2 securepubads.g.doubleclick.net/tag/js/gpt.js
IP
File type ASCII text, with very long lines (45115)
Hash 3cc1266298d152a7f5366e7367bce1c0
ae256f1e33df8718620c1d0f8b2e56c1cd582269
96b568031790922d4f2e0f8da34567935c73bc701550fd950bf4866a86b122ff
GET /tag/js/gpt.js HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 27707
date: Thu, 06 Oct 2022 18:33:13 GMT
expires: Thu, 06 Oct 2022 18:33:13 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1356 / 328 of 1000 / last-modified: 1665054354"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 140 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 6de7842c6df57d8a4edb8cadc7a434f9
9ffbd70627e51721bb761cd3a77294849fb848e1
4b5552d1c5bc8985b4095c9bc7a74f50d82d509b6914477d6ba9be61f33746ad
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 737
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:13 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 140
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://earnme.club
AN-X-Request-Uuid: 72630e55-3a8e-43e7-8056-07905b782a1e
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eac86f868b3967f1946c7f5fc712b25f
e2ae8eb09715a0af0791c085eb35bf66e0548e30
bceb14e7a478c0e34a0f1d8286eb954566c62051e996bc36189de922a76a6e06
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
prebid.adnxs.com/pbs/v1/openrtb2/auction
200 OK 258 B URL HTTP/1.1 prebid.adnxs.com/pbs/v1/openrtb2/auction
IP
File type JSON data\012- , ASCII text, with very long lines (322)
Hash 6de449b5a1d2b939b0cce640e70c67a2
5d11d96361b794a1bcfb3d41bca150cfeec876da
9a0b155451de6130925015b26ec4496421dcef0388dfd8eee7d77ca910d18a06
POST /pbs/v1/openrtb2/auction HTTP/1.1
Host: prebid.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1830
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:13 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://earnme.club
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Pragma: no-cache
Vary: Accept-Encoding, Origin
X-Prebid: pbs-go/0.227.2
Content-Encoding: gzip
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 37bf8fed0d7d939ee1ea641bf7e008b3
998737afef502a835aaed862727349d359d045c3
80db5ae4471b0a0cadde8c244b231724902c314a79290d8b7feb15587c55e6cc
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 731
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:13 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://earnme.club
AN-X-Request-Uuid: ec4c5e36-1222-48f7-80f4-47e28bc6fff2
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ocsp.digicert.com/
200 OK 313 B IP
Hash 75fa992cdd38422c02becf97f2fba44c
32ae97abe59ccfa477e58fb92830a4f87210c005
54f3984974bc5bd26ca6333d2631f0830c3da42fc3ceca1a20df8ea384268322
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6534
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:13 GMT
Last-Modified: Thu, 06 Oct 2022 16:44:19 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 471 B IP
Hash 076b5545d3b172759d57ebf0bb3daca8
fe49d91a44447c25303899ede347896dff3b6358
3593de7b71551abfbfab02a91d0a57de438983dfeb4c035ff9b70e5101091d96
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2310
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:13 GMT
Last-Modified: Thu, 06 Oct 2022 17:54:43 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 313 B IP
Hash 75fa992cdd38422c02becf97f2fba44c
32ae97abe59ccfa477e58fb92830a4f87210c005
54f3984974bc5bd26ca6333d2631f0830c3da42fc3ceca1a20df8ea384268322
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6534
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:13 GMT
Last-Modified: Thu, 06 Oct 2022 16:44:19 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 471 B IP
Hash 90812260be4e82a3d715acf8f9cef659
4935d5c6c693192779221ccd1c5d6630db149d04
de3b2a16ba12ee3c9c8222deabaa78ba469413efd3299251b3908d210914dbfe
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5477
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:13 GMT
Last-Modified: Thu, 06 Oct 2022 17:01:58 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 2bd6526d2c572d83fbb54fb3264eb1dd
03916631133c231b6d002a8b1d08a63a88fb42fd
1a0ab31200b83f7919a276d880fa090371763d75bc1f7da1b6b9a247d73dadfd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2889
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:13 GMT
Last-Modified: Thu, 06 Oct 2022 17:45:04 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.28.0&cb=95241097953
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.28.0&cb=95241097953
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.28.0&cb=95241097953 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 500
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:12 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://earnme.club
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash 16686ceabf98449a0b0feedb0aad47e0
523cb77001ef131b194ceba76a08c889039dd983
b2b4e1f3c83f5e63bae3bf327bcb277db7cf567b6b78403ad86c218da5b5785d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3362
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:13 GMT
Last-Modified: Thu, 06 Oct 2022 17:37:11 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 312
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.15.0&cb=28742486440&lsavail=1
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.15.0&cb=28742486440&lsavail=1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=7.15.0&cb=28742486440&lsavail=1 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 746
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:12 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://earnme.club
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash 16686ceabf98449a0b0feedb0aad47e0
523cb77001ef131b194ceba76a08c889039dd983
b2b4e1f3c83f5e63bae3bf327bcb277db7cf567b6b78403ad86c218da5b5785d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3748
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:13 GMT
Last-Modified: Thu, 06 Oct 2022 17:30:45 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 312
prebid-eu.creativecdn.com/bidder/prebid/bids
204 No Content 0 B URL HTTP/2 prebid-eu.creativecdn.com/bidder/prebid/bids
IP
ASN #204995 Rtb House S.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bidder/prebid/bids HTTP/1.1
Host: prebid-eu.creativecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 544
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Thu, 06 Oct 2022 18:33:13 GMT
access-control-allow-origin: https://earnme.club
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-max-age: 3600
vary: Origin
X-Firefox-Spdy: h2
prebid-eu.creativecdn.com/bidder/prebid/bids
204 No Content 0 B URL HTTP/2 prebid-eu.creativecdn.com/bidder/prebid/bids
IP
ASN #204995 Rtb House S.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bidder/prebid/bids HTTP/1.1
Host: prebid-eu.creativecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 548
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Thu, 06 Oct 2022 18:33:13 GMT
access-control-allow-origin: https://earnme.club
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-max-age: 3600
vary: Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=miec&e=1288751309616
200 OK 2.1 kB URL HTTP/2 flashnetic.com/r/p.html?f=miec&e=1288751309616
IP
File type HTML document, ASCII text
Hash ebbb38b35e216c34f1b6f2ff5a76d027
be76e32aec58bbd7506da1e46232a1b4fb6b5690
93318fc935fe9ebb5551247f79ec837d6447ef44bada5237c25656ede46bcddf
GET /r/p.html?f=miec&e=1288751309616 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: IcApCg7vs8pssLGIEieMshsfyDi8aDCXNqP7GQgZiLelU_LuJ5mhtQ==
age: 23124
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=lbiubdzagr&e=1288751309616
200 OK 2.5 kB URL HTTP/2 flashnetic.com/r/p.html?f=lbiubdzagr&e=1288751309616
IP
File type HTML document, ASCII text
Hash 8b99a6635ad3fac3e24a400fd9175413
5fb4e7c608fff1b5d4aa0e32a38c2ebae141856c
b6231a8219a3d22c32979d0f96ffed312ef1cdae8f1eebc4b25e61c225be81a9
GET /r/p.html?f=lbiubdzagr&e=1288751309616 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: U5mrwQlpzzG5DD8_uN_-hXF7rw-CkGXZDJ-z2BSwYKtOX9sJF0EwCQ==
age: 23124
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 638
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Thu, 06 Oct 2022 18:33:13 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://earnme.club
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&tg_i.page=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&tg_i.domain=earnme.club&tg_i.pbadslot=%2F21671350435%2C22687820958%2F300x250-earnme.club&tk_flint=pbjs_lite_v6.28.0&x_source.tid=88f17030-c049-4c2b-a619-70987da7b5bf&l_pb_bid_id=442d02693014ac8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.5737483634174972
200 OK 468 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&tg_i.page=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&tg_i.domain=earnme.club&tg_i.pbadslot=%2F21671350435%2C22687820958%2F300x250-earnme.club&tk_flint=pbjs_lite_v6.28.0&x_source.tid=88f17030-c049-4c2b-a619-70987da7b5bf&l_pb_bid_id=442d02693014ac8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.5737483634174972
IP
File type JSON data\012- , ASCII text, with very long lines (468), with no line terminators
Hash d513a30de83509751faa55ef69848c9f
89ee4100afdf0984a6b4b9c2f84db36661840ba5
37ee5b658f76b005e1556af5e526f9777fb4f63a4a94cd46971d59d0aab4550e
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&tg_i.page=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&tg_i.domain=earnme.club&tg_i.pbadslot=%2F21671350435%2C22687820958%2F300x250-earnme.club&tk_flint=pbjs_lite_v6.28.0&x_source.tid=88f17030-c049-4c2b-a619-70987da7b5bf&l_pb_bid_id=442d02693014ac8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.5737483634174972 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Thu, 06 Oct 2022 18:33:13 GMT
Content-Type: application/json
Content-Length: 468
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://earnme.club
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8XECNFE-1-LS6N; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:13 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qrBWklzd+COHO9DtVM30fCgpihd+i0AGkFykekj08My5Xvs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:13 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
grid.bidswitch.net/hbjson
200 OK 49 B URL HTTP/2 grid.bidswitch.net/hbjson
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 47e74ceef325af6e0d633fa0a2b12c04
e3ab18dd96f2cd6fd16a170a71110cd4a5ef2b50
91e457443e39cb6f460817a15f5974e85398c7bb0583751b817a03e3719bfc7d
POST /hbjson HTTP/1.1
Host: grid.bidswitch.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 831
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:13 GMT
content-type: application/json
content-length: 49
content-encoding: gzip
access-control-allow-credentials: true
access-control-allow-origin: https://earnme.club
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
prebid.smilewanted.com/
403 Forbidden 3.8 kB IP
Hash 786b4cec0e709f5eae76dd0d33d95822
47ba15e44bbda04cff2078a6485d3ee52da46b44
fa98243d95d3c5d859ece5be0162f80b9813d5548a88123645c5cf821f3c6783
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 376
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
date: Thu, 06 Oct 2022 18:33:12 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 75607bef2b890b51-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-LY1N2M6E7Y>m=2oea50&_p=541235531&cid=721372504.1665081193&ul=en-us&sr=1280x1024&_s=1&sid=1665081192&sct=1&seg=0&dl=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&dr=https%3A%2F%2Fwww.google.com%2F&dt=FidelityFX%20Super%20Resolution%20from%20AMD%20%E2%80%93%20Tech%20One&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-LY1N2M6E7Y>m=2oea50&_p=541235531&cid=721372504.1665081193&ul=en-us&sr=1280x1024&_s=1&sid=1665081192&sct=1&seg=0&dl=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&dr=https%3A%2F%2Fwww.google.com%2F&dt=FidelityFX%20Super%20Resolution%20from%20AMD%20%E2%80%93%20Tech%20One&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-LY1N2M6E7Y>m=2oea50&_p=541235531&cid=721372504.1665081193&ul=en-us&sr=1280x1024&_s=1&sid=1665081192&sct=1&seg=0&dl=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&dr=https%3A%2F%2Fwww.google.com%2F&dt=FidelityFX%20Super%20Resolution%20from%20AMD%20%E2%80%93%20Tech%20One&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://earnme.club
date: Thu, 06 Oct 2022 18:33:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 511 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
File type JSON data\012- , ASCII text, with very long lines (988), with no line terminators
Hash ae34e1ea460d2781ac1d07eb282ec86d
15bfe489b8d94794e48eb3de86727958b126dd75
96aefee0e236de77a81051a56eaa9c155e0c6195aa394f051340581f73c9858a
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 413
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Thu, 06 Oct 2022 18:33:13 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://earnme.club
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Fri, 06 Oct 2023 18:33:13 GMT; domain=.smartadserver.com; path=/
vs=527999=5134713; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Fri, 06 Oct 2023 18:33:13 GMT; domain=.smartadserver.com; path=/
pid=2017251452454435126; expires=Fri, 06 Oct 2023 18:33:13 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638006779933983239&o=1; expires=Fri, 07 Oct 2022 18:33:13 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Fri, 07 Oct 2022 18:33:13 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
prg.smartadserver.com/prebid/v1
200 OK 516 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1000), with no line terminators
Hash 3f127d6af6de7532795a1f4296813783
0ef5908d8bd92a49a76157a339ed243c404d398a
2c64c8a6513f8c102691186f0b236382447ec505b890d097493fa15654b97f86
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 411
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Thu, 06 Oct 2022 18:33:13 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://earnme.club
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Fri, 06 Oct 2023 18:33:13 GMT; domain=.smartadserver.com; path=/
vs=525642=5134713; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Fri, 06 Oct 2023 18:33:13 GMT; domain=.smartadserver.com; path=/
pid=3457364548127816145; expires=Fri, 06 Oct 2023 18:33:13 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638006779933794027&o=1; expires=Fri, 07 Oct 2022 18:33:13 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Fri, 07 Oct 2022 18:33:13 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fearnme.club&pubid=1ad7261b-91ea-4b6f-b9e9-b83522205b75
200 OK 1.0 kB URL HTTP/2 c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fearnme.club&pubid=1ad7261b-91ea-4b6f-b9e9-b83522205b75
IP
File type JSON data\012- , ASCII text, with very long lines (1041), with no line terminators
Hash f0a9c4332bf6e2dd0b676f6e47d85303
f8baf460856578ce458e092475f11af9d2878075
70c50e4d27c9119c508a5a1653bdc3b91d5eaed33370ee128f1bec220f66567c
GET /cdn/prod/config?src=600&u=https%3A%2F%2Fearnme.club&pubid=1ad7261b-91ea-4b6f-b9e9-b83522205b75 HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json;charset=UTF-8
content-length: 1041
access-control-allow-origin: https://earnme.club
access-control-allow-credentials: true
cache-control: max-age=21550, s-maxage=21600
date: Thu, 06 Oct 2022 15:52:13 GMT
server: Server
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Ue8sTe6jq8COp6fVWrwLwl8pyxPEZ7moH6pZSmtTWecY2iAXbkG3zQ==
age: 9659
X-Firefox-Spdy: h2
earnme.club/favicon.ico
404 Not Found 708 B IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 2382378378c002d88b9a507c712c3349
2e894db3808b554abadc8b144338ad9e2ea937ba
37a4e56c497e170de6e152bc479624eb8d7ccb35bad5a190f2fdb17ac699cffa
GET /favicon.ico HTTP/1.1
Host: earnme.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/fidelityfx-super-resolution-from-amd/
Cookie: _uc_referrer=https://www.google.com/; _pbjs_userid_consent_data=3524755945110770; _ga_LY1N2M6E7Y=GS1.1.1665081192.1.1.1665081192.0.0.0; _ga=GA1.1.721372504.1665081193
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 708
date: Thu, 06 Oct 2022 18:33:13 GMT
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=kzrldfx&e=1583478116998
200 OK 2.6 kB URL HTTP/2 flashnetic.com/r/p.html?f=kzrldfx&e=1583478116998
IP
File type HTML document, ASCII text
Hash 4856b1d6ef0d5d0702e5cd3892fac6d1
fed46eb70a4456507d642f28bc2a60ba1cd79061
be7e54c5d19c96698330d2c725057ffce2a0677144c4957f7d7f598c0eef4f11
GET /r/p.html?f=kzrldfx&e=1583478116998 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: V6r7tSjE9zHJzjXDwe0FUWQLfKYX0lQvZ9OFLEk-IUF8dCbnJZrCfg==
age: 23125
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 7141d10b460b0decb93c6232b672f719
b301c998064875617f3a71dce702f3e445732f6f
c828ab74c71e397bdd7d7f3c4f4ffdc15ac091c1f972c71205878f2123f6fd94
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 18:33:13 GMT
Last-Modified: Thu, 06 Oct 2022 16:57:54 GMT
Server: ECS (bsa/EB15)
X-Cache: Miss from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: KNyAQ89H38rWI68Cbx7FhOa8BQG6LKFS1CYntFxpQiPQONgcD0ZD1A==
Age: 5719
flashnetic.com/r/p.html?f=bhlbkk&e=1583478116998
200 OK 12 kB URL HTTP/2 flashnetic.com/r/p.html?f=bhlbkk&e=1583478116998
IP
File type HTML document, ASCII text
Hash 6be30c4644ef69b64065211042dec8e5
fcfe4e6e66474cfb8edffe510631e7d09fc7494b
eb26285d7be4be357a07d736799402a21f83fffb73f3d9b95111058aff97838f
GET /r/p.html?f=bhlbkk&e=1583478116998 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LJnKP71SCm_2MvcozxRx-l0zJc1aogl6V_IXrMrr-yLPlnpTYeW73Q==
age: 23125
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd38ec9d6-fb69-4c6e-aae2-136fd254ae50.jpeg
200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd38ec9d6-fb69-4c6e-aae2-136fd254ae50.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e238ccaa3b9fa88476a8514855e8232f
447cbf348ef10d0136a1811e843c46937defbba1
43dce3c1eb388dfaddca4176acb6eb32f76fc4c03fca18e7a315c9ddb43d2b02
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd38ec9d6-fb69-4c6e-aae2-136fd254ae50.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7270
x-amzn-requestid: f2f15f43-6054-40f5-943a-530671e772dd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjOZjF3aIAMFW9Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df770-5e2253791a927c8c40a0ff0d;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:30:24 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: xRuMce_9OkP3R2DqHjZI34GwkDezdfGKsgntCMTZG2c6SJUcyv0Ckg==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 583992e175976bd59a21b4416890271e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:56:40 GMT
etag: "447cbf348ef10d0136a1811e843c46937defbba1"
content-type: image/jpeg
age: 74193
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=ojdzgttc&e=1583478116998
200 OK 13 kB URL HTTP/2 flashnetic.com/r/p.html?f=ojdzgttc&e=1583478116998
IP
File type HTML document, ASCII text
Hash d379d24ebb26161626c01dce36b5345f
5f7f2bb69f7feb8c40de6b5d98f8f2e66ea91601
0af0cb80cfb154c6a58922850620d0415fda0f8a950055f31aaff68162c133e2
GET /r/p.html?f=ojdzgttc&e=1583478116998 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KXr592k3Fu-lIx-O7yqKyDwKlAT8tDgY50PfFiL3r9LA5d2d7RJXaA==
age: 23125
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=nxhymqvus&e=1583478116998
200 OK 13 kB URL HTTP/2 flashnetic.com/r/p.html?f=nxhymqvus&e=1583478116998
IP
File type HTML document, ASCII text
Hash ddc4d3f447ccd2c2e50a3ad1b762b6ff
e613789077b7336e68c0f83275fe9a05329810b2
dc978b3e6a3f1076234e1663c103f19b981a57cd972a530b7f6957fc66dc234f
GET /r/p.html?f=nxhymqvus&e=1583478116998 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2prkg_cKBcZqqkJc4HFeNKqWV_w2h22rGcE9nh3zINtVIUgHrAP3lg==
age: 23125
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=ivsahkyj&e=1583478116998
200 OK 2.1 kB URL HTTP/2 flashnetic.com/r/p.html?f=ivsahkyj&e=1583478116998
IP
File type HTML document, ASCII text
Hash ebbb38b35e216c34f1b6f2ff5a76d027
be76e32aec58bbd7506da1e46232a1b4fb6b5690
93318fc935fe9ebb5551247f79ec837d6447ef44bada5237c25656ede46bcddf
GET /r/p.html?f=ivsahkyj&e=1583478116998 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Ye_VeJPMD3j-B2qP7o173rfFPsYp8RIzcbZloaSzdA0tcQNMkFfKYA==
age: 23125
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ce3d070-3bf1-47cd-bdd7-2bda7b826976.jpeg
200 OK 4.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ce3d070-3bf1-47cd-bdd7-2bda7b826976.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dbba56f647bf5989ca51863632bbebfc
26694f34166345ee5693653e0101db6b910e68ba
ec5cc38f2a77e8e655aeeb7a376cf882ccb7163e4ef9d1ce4633ab4754e48765
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ce3d070-3bf1-47cd-bdd7-2bda7b826976.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4140
x-amzn-requestid: 13fcd792-1fcc-44b5-aa9e-d2773a60fe77
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjO6uHrbIAMFbqg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df844-5b5f5d781b9d651b68c04f2e;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:33:56 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: wfnbRpTKni8hbAmJXO9vdisV6ZPoRP-eBb3wP4RzPS7MlXvp7282dw==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 6a63e853422f3197776fb098fab5a416.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:36:41 GMT
age: 75392
etag: "26694f34166345ee5693653e0101db6b910e68ba"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ecef3b6-b278-4a22-86dd-6a19875e1cc1.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ecef3b6-b278-4a22-86dd-6a19875e1cc1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9e520f87cae411cfc2ed1c8a14184385
69ad212cb7ae309d4f02019552887135bfae67da
723b10bfbcde201b5811e3bd0560f02f90775e4d18b28d19e6c814899f2da71a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ecef3b6-b278-4a22-86dd-6a19875e1cc1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7511
x-amzn-requestid: 995b51dd-5484-4b4c-ad40-550f7fd85930
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjO6uG70IAMFjBw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df844-70f17f6f24dce0003d03902a;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:33:56 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: 3lKuGlFCBN2wEsp9-Oa3ysQg62py090H30jy6_bR02Ufs0KGPrVC4w==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 d8d9c12d1a621129f4bc739038e7c72e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:36:41 GMT
age: 75392
etag: "69ad212cb7ae309d4f02019552887135bfae67da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ams-pageview-public.s3.amazonaws.com/1x1-pixel.png?id=a56697b2617c
200 OK 68 B URL HTTP/1.1 ams-pageview-public.s3.amazonaws.com/1x1-pixel.png?id=a56697b2617c
IP
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /1x1-pixel.png?id=a56697b2617c HTTP/1.1
Host: ams-pageview-public.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: nhAuXxcbUmdR1ZGWgVaszr/xoIaVTgWUMpZMJ4EOlsYyVCImYA7KkvmgvAziwZGiwvwG3pnfq5NNSqnRgX9mqw==
x-amz-request-id: PGS5JZA5DNKZTN4J
Date: Thu, 06 Oct 2022 18:33:14 GMT
Last-Modified: Mon, 26 Oct 2020 16:52:19 GMT
ETag: "91e42db1c66c0b276abf6234dc50b2eb"
Cache-Control: no-store
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 68
flashnetic.com/r/p.html?f=xvvcfqm&e=1288751309616
200 OK 2.3 kB URL HTTP/2 flashnetic.com/r/p.html?f=xvvcfqm&e=1288751309616
IP
File type HTML document, ASCII text
Hash 785713db62405b7f56677422bdc2db5d
08f80381fdf4adce16517e00ae488f4ab6bcc0d9
818bca99ddeab6f4e3d6f87f3714d62ea1026d722e5bd95c37ca0a866db62c66
GET /r/p.html?f=xvvcfqm&e=1288751309616 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wpq_-FmVqAiY3gAvLrP9IebRxw-M1jeTEgA3s0BYTkU_f4Mupf-jPg==
age: 23124
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
track1.aniview.com/track?d=Firefox&cou=NO&cos=Linux&r=earnme.club&rs=earnme.club&sid=10944&t=1665081193&cip=91.90.42.154&sn=&tgt=0&osv=&bv=96.0&brn=Firefox&wi=640&he=361&app=&AV_PUBLISHERID=62176a72a06fe80ba569d18f&test=&aafaid=&proto=https&uid=1665081193825-930277797056-009413-014-001599&cha=0.7&stagid=62790805abc41c4450002684&stplid=6278f4f0a7dd573d85421cad&d35=&d36=6.2.56&cb=48615942517&d39=&d65=&apppkg=&d9=1000&d37=realtime&pt=2&cmid=&cwid=&cvid=&AV_WIDTH=640&AV_HEIGHT=361&&ppid=62176a72a06fe80ba569d18f&nid=5e7b9048180bd02ded4b0937&pcid=6278fd47e6b0901a49776895&ncid=627a0e8f76eb182bd8758ee8&pasid=627a0ec5d3a48b4af3605f6c&e=request&cb=1665081194118&asid=6332ef55cd0fcf1ceb506cc4%2C62a9a2daf85a765d16158238%2C62fcc8551f0d537b70642b47%2C6332ef0a396c5d5aa40539b5%2C62a9a29da987b3169d027596%2C62a9a33ed8130b696c1cf184%2C62a9a3044f8b3f11bf3a5058%2C62a9a257b1f7be14705f5586%2C62a9a26be8c62b7a753672a4%2C6278e88ee9bdaa62e84aec34%2C6278e98aa3c275311934ede5&ofpr=%2C%2C%2C%2C%2C%2C%2C%2C%2C%2C&fpo=%2C%2C%2C%2C%2C%2C%2C%2C%2C%2C
200 OK 0 B URL HTTP/2 track1.aniview.com/track?d=Firefox&cou=NO&cos=Linux&r=earnme.club&rs=earnme.club&sid=10944&t=1665081193&cip=91.90.42.154&sn=&tgt=0&osv=&bv=96.0&brn=Firefox&wi=640&he=361&app=&AV_PUBLISHERID=62176a72a06fe80ba569d18f&test=&aafaid=&proto=https&uid=1665081193825-930277797056-009413-014-001599&cha=0.7&stagid=62790805abc41c4450002684&stplid=6278f4f0a7dd573d85421cad&d35=&d36=6.2.56&cb=48615942517&d39=&d65=&apppkg=&d9=1000&d37=realtime&pt=2&cmid=&cwid=&cvid=&AV_WIDTH=640&AV_HEIGHT=361&&ppid=62176a72a06fe80ba569d18f&nid=5e7b9048180bd02ded4b0937&pcid=6278fd47e6b0901a49776895&ncid=627a0e8f76eb182bd8758ee8&pasid=627a0ec5d3a48b4af3605f6c&e=request&cb=1665081194118&asid=6332ef55cd0fcf1ceb506cc4%2C62a9a2daf85a765d16158238%2C62fcc8551f0d537b70642b47%2C6332ef0a396c5d5aa40539b5%2C62a9a29da987b3169d027596%2C62a9a33ed8130b696c1cf184%2C62a9a3044f8b3f11bf3a5058%2C62a9a257b1f7be14705f5586%2C62a9a26be8c62b7a753672a4%2C6278e88ee9bdaa62e84aec34%2C6278e98aa3c275311934ede5&ofpr=%2C%2C%2C%2C%2C%2C%2C%2C%2C%2C&fpo=%2C%2C%2C%2C%2C%2C%2C%2C%2C%2C
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track?d=Firefox&cou=NO&cos=Linux&r=earnme.club&rs=earnme.club&sid=10944&t=1665081193&cip=91.90.42.154&sn=&tgt=0&osv=&bv=96.0&brn=Firefox&wi=640&he=361&app=&AV_PUBLISHERID=62176a72a06fe80ba569d18f&test=&aafaid=&proto=https&uid=1665081193825-930277797056-009413-014-001599&cha=0.7&stagid=62790805abc41c4450002684&stplid=6278f4f0a7dd573d85421cad&d35=&d36=6.2.56&cb=48615942517&d39=&d65=&apppkg=&d9=1000&d37=realtime&pt=2&cmid=&cwid=&cvid=&AV_WIDTH=640&AV_HEIGHT=361&&ppid=62176a72a06fe80ba569d18f&nid=5e7b9048180bd02ded4b0937&pcid=6278fd47e6b0901a49776895&ncid=627a0e8f76eb182bd8758ee8&pasid=627a0ec5d3a48b4af3605f6c&e=request&cb=1665081194118&asid=6332ef55cd0fcf1ceb506cc4%2C62a9a2daf85a765d16158238%2C62fcc8551f0d537b70642b47%2C6332ef0a396c5d5aa40539b5%2C62a9a29da987b3169d027596%2C62a9a33ed8130b696c1cf184%2C62a9a3044f8b3f11bf3a5058%2C62a9a257b1f7be14705f5586%2C62a9a26be8c62b7a753672a4%2C6278e88ee9bdaa62e84aec34%2C6278e98aa3c275311934ede5&ofpr=%2C%2C%2C%2C%2C%2C%2C%2C%2C%2C&fpo=%2C%2C%2C%2C%2C%2C%2C%2C%2C%2C HTTP/1.1
Host: track1.aniview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Cookie: aniC=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:14 GMT
content-length: 0
cache-control: max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
cdn.hadronid.net/hadron.js?url=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&ref=https%3A%2F%2Fwww.google.com%2F&_it=amazon&partner_id=405
200 OK 11 kB URL HTTP/2 cdn.hadronid.net/hadron.js?url=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&ref=https%3A%2F%2Fwww.google.com%2F&_it=amazon&partner_id=405
IP
File type ASCII text, with very long lines (55729), with no line terminators
Hash 200797ffeeab9caa21044a09aa87434f
4942c5e679193ea95218a31daf90348e871237df
f12e986fbce0a083e45c549aa57cf6910ef9a4363627b2d3c39077fb55a5e3ce
GET /hadron.js?url=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&ref=https%3A%2F%2Fwww.google.com%2F&_it=amazon&partner_id=405 HTTP/1.1
Host: cdn.hadronid.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:14 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"8174ddfcfe99c466011a1eb5f4eacbf7"
last-modified: Thu, 06 Oct 2022 16:24:46 GMT
x-amz-id-2: 5A2Iezzl45NPB0e79qgQGTXYq2ASsmYbIRAyiO2JONs7PD+R4Dl/aNI8//u6N17l2NN0bnjLyIs=
x-amz-request-id: NKC9FB0FJT3YJM3F
cache-control: max-age=3600
cf-cache-status: HIT
age: 492
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N0umxcnlpbOrewEb5F2DpulBkmqUprxI4NkhAHM8BlyWr4ITUHvrMdZnCUVhwkn1KtQyaG8afJy8RXuMo0GTXWT2YOdsWBhHhSGTdK5bEPydG5alxPbex8LDLb3oFN95IJY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75607bf76f14b52d-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f9371f81e2eeeead7fe351a49f3b1c40
ae23d6c6c57dd7cf568c3a74594c377b7bb7df43
03c4ba0faa3199d061d1bb37df5d48ba6d81f77a83e243922075efc4d4acf456
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1cecd042e106c70af7e8f0d9863ca3d9
fa94604e9e99c752d18708abcec8584a5eee66ea
3525f542ce5a72795646c2bba144333920f67f3e9938748f9d3bd3aff9ac496e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/adsid/integrator.js?domain=earnme.club
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=earnme.club
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=earnme.club HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Thu, 06 Oct 2022 18:33:14 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=earnme.club
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=earnme.club
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=earnme.club HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Thu, 06 Oct 2022 18:33:14 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1cecd042e106c70af7e8f0d9863ca3d9
fa94604e9e99c752d18708abcec8584a5eee66ea
3525f542ce5a72795646c2bba144333920f67f3e9938748f9d3bd3aff9ac496e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=2022100301&st=env
200 OK 11 kB URL HTTP/2 pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=2022100301&st=env
IP
File type JSON data\012- , ASCII text, with very long lines (14673), with no line terminators
Hash 7f45d74f9362a9cb176de5f481abd78b
a200e40e5fc540196723ff4a16e1416d4fd6126b
53f0d68de99ce38ca9ffc701a5d81fb79b9b001b7b1f19cddcb5b436634c0623
GET /getconfig/sodar?sv=200&tid=gpt&tv=2022100301&st=env HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Thu, 06 Oct 2022 18:33:14 GMT
server: cafe
cache-control: private
content-length: 11147
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
15ff3f88baa173ab003f0e7fc5f4a251.safeframe.googlesyndication.com/safeframe/1-0-38/html/container.html
200 OK 3.1 kB URL HTTP/2 15ff3f88baa173ab003f0e7fc5f4a251.safeframe.googlesyndication.com/safeframe/1-0-38/html/container.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5835)
Hash 3fa5e95a358d660ddb3c45769ae1357f
5f6164fbaf8cfbccfd061b00ae48dedfc16bbcd9
d32f4b680031c0e11222eb17385aa9d3b11d2903b05bff34c3d4eb6292631137
GET /safeframe/1-0-38/html/container.html HTTP/1.1
Host: 15ff3f88baa173ab003f0e7fc5f4a251.safeframe.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 3108
date: Thu, 06 Oct 2022 18:33:14 GMT
expires: Fri, 06 Oct 2023 18:33:14 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Tue, 02 Mar 2021 20:17:03 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
earnme.club/wp-admin/css/colors/blue/blue.php?id=hqs8lfma56iv8jua3ltoc
200 OK 120 B URL HTTP/2 earnme.club/wp-admin/css/colors/blue/blue.php?id=hqs8lfma56iv8jua3ltoc
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 5d2414361fb4c609ca07475f575bbadf
dd7c44fdc22fcf0a192ef2106ab208eabb56e83e
8e0fa295bd9f071403be3598ac7199cbd197bc41ce94b33c67d8f649f0f5161c
Analyzer Verdict Alert fortinet Malware
GET /wp-admin/css/colors/blue/blue.php?id=hqs8lfma56iv8jua3ltoc HTTP/1.1
Host: earnme.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/fidelityfx-super-resolution-from-amd/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Thu, 06 Oct 2022 18:33:11 GMT
X-Firefox-Spdy: h2
aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_n-mediagrid_n-index_n-sharethrough_n-LoopMe_n-onetag_rbd_n-vmg_n-MediaNet_cnv
302 Found 0 B URL HTTP/1.1 aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_n-mediagrid_n-index_n-sharethrough_n-LoopMe_n-onetag_rbd_n-vmg_n-MediaNet_cnv
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_n-mediagrid_n-index_n-sharethrough_n-LoopMe_n-onetag_rbd_n-vmg_n-MediaNet_cnv HTTP/1.1
Host: aax-eu.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: Server
Date: Thu, 06 Oct 2022 18:33:15 GMT
Content-Length: 0
Connection: keep-alive
x-amz-rid: TX5YJA9QKRW6XT8GV2TK
Set-Cookie: ad-id=A02U-steLUBFpqGvjEBYxSk|t; Domain=.amazon-adsystem.com; Expires=Sat, 01-Jul-2023 18:33:15 GMT; Path=/; Secure; HttpOnly; SameSite=None
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Location: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_n-mediagrid_n-index_n-sharethrough_n-LoopMe_n-onetag_rbd_n-vmg_n-MediaNet_cnv&dcc=t
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
flashnetic.com/t.js?i=ao0y4krv21gsuol1v4o82&cb=1564221665081192359
200 OK 25 kB URL HTTP/2 flashnetic.com/t.js?i=ao0y4krv21gsuol1v4o82&cb=1564221665081192359
IP
File type ASCII text, with very long lines (53314), with no line terminators
Hash d80a61e747b000120431395c70745f69
0b7e63ab18b5b4f599b337e95d10ebf1489a76d5
7421d9c82e6a60705fe8f2a4744304c6269541ee7ea5896c46191af7074a9af1
GET /t.js?i=ao0y4krv21gsuol1v4o82&cb=1564221665081192359 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 03 Oct 2022 09:57:56 GMT
x-amz-version-id: dA4Fe8HVqWzJ0kdxW9pTboxBQT4XyDQO
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"1f8bcab833fd358cdd3a0188d9bf9292"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qnpc7Sc3J6J0t1tjyFuJQIHcblVZu0l7_F9nrO48OKXH4DSQLZ_3yw==
age: 23124
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
cdn.id5-sync.com/api/1.0/id5-api.js
200 OK 16 kB URL HTTP/2 cdn.id5-sync.com/api/1.0/id5-api.js
IP
Hash 63c1522bee468765bc1816eddc4b9002
27c20f5b4cd544f0b592d3c656c5b7e101ca218e
3418de15584a128472d841b81925a6f3be51a925ebdd476265d01f08dbe8711a
GET /api/1.0/id5-api.js HTTP/1.1
Host: cdn.id5-sync.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:14 GMT
content-type: text/javascript;charset=utf-8
x-amz-id-2: xquZ6QoBGtIgECOlulfi9qoPm7v0WWNvgdo/gHYkJool7qqKRJv1p7VLfgECP96SCtmXrsRKKZg=
x-amz-request-id: NB2A206MY26ZNA92
last-modified: Thu, 22 Sep 2022 13:13:44 GMT
etag: W/"68154020ef14b5881614607902c7c21b"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600
cf-cache-status: HIT
age: 151
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
server: cloudflare
cf-ray: 75607bf92bf0b4f3-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
200 OK 45 kB URL HTTP/2 www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
IP
File type ASCII text, with very long lines (3498)
Hash bd7876f9970dad86c8d29b630ec103c5
27e7a0d9bedb3e711708049fce7a8bb09b4721fc
37094988b85e9a49b6146ff7724d05aeb3cbb02efe4eeb68f095c8d2cdfc4453
GET /activeview/js/current/rx_lidar.js?cache=r20110914 HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/active-view-scs-read-write-acl
cross-origin-opener-policy: same-origin; report-to="active-view-scs-read-write-acl"
report-to: {"group":"active-view-scs-read-write-acl","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/active-view-scs-read-write-acl"}]}
content-length: 45072
date: Thu, 06 Oct 2022 18:33:15 GMT
expires: Thu, 06 Oct 2022 18:33:15 GMT
cache-control: private, max-age=3000
etag: "1664970042070988"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
excellence-prebid.sfo2.cdn.digitaloceanspaces.com/prebid.js
200 OK 234 kB URL HTTP/2 excellence-prebid.sfo2.cdn.digitaloceanspaces.com/prebid.js
IP
File type ASCII text, with very long lines (65011)
Size 234 kB (233961 bytes)
Hash b8c335a03c0847286b2f70d097c5a38a
98a0e8f6b56f80b3352829537abb6b3bd9f38d77
0e0d5aaebcb9185499dabbc6f1e6979b963ba0a9e683603e0662e96302be9983
GET /prebid.js HTTP/1.1
Host: excellence-prebid.sfo2.cdn.digitaloceanspaces.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:15 GMT
cache-control: max-age=271
content-length: 233961
content-type: text/javascript
last-modified: Sun, 14 Aug 2022 17:57:51 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "b8c335a03c0847286b2f70d097c5a38a"
x-amz-request-id: tx00000000000012d67a5cf-00633f126a-3ade2f46-sfo2a
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1665081195.dop204.sk1.t,1665081195.cds222.sk1.hn,1665081195.cds212.sk1.c
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=23330455365
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=23330455365
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=23330455365 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:14 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 31fbc59a0b7422e43bcda0c5af951ce8
7b9adae1fd66dc8e8d1cdc03b330ab0912bc4181
3ba6fec2cf9aadfab47e2bdfc42bc839e903c428483f326ac6ee24e43b25a518
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 643
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:15 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: 8cb88e87-1ed7-451a-bea9-f5748d28fa3b
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6d2e644758758c696c3753c2b3062c4c
582fedf9527ffb72662188143b2e74d0604084c9
0a09eb83511271c81c2aca3a773b29f006520deb969ef5521088c6a6322a0109
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6d2e644758758c696c3753c2b3062c4c
582fedf9527ffb72662188143b2e74d0604084c9
0a09eb83511271c81c2aca3a773b29f006520deb969ef5521088c6a6322a0109
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 512e936a83b35a64b7e96ea3f1dbc90a
32c829986e85e50d99a392ff8b913fa01602cd9d
1825fc0ba3cfd5cf946e3dc2bfb93afaeb46fb38da6c42e428dcdd500d6260d8
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 18:33:15 GMT
Last-Modified: Thu, 06 Oct 2022 18:22:05 GMT
Server: ECS (nyb/1D34)
X-Cache: Miss from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ObSv9faUhkayv1dgk3X4QKKBNR28Cj-8QfRuSY87Q3HgZgYVcXNb_g==
Age: 671
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 512e936a83b35a64b7e96ea3f1dbc90a
32c829986e85e50d99a392ff8b913fa01602cd9d
1825fc0ba3cfd5cf946e3dc2bfb93afaeb46fb38da6c42e428dcdd500d6260d8
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 18:33:15 GMT
Last-Modified: Thu, 06 Oct 2022 18:21:32 GMT
Server: ECS (bsa/EB1A)
X-Cache: Miss from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: _8Pu1t0sNeOgrMbz-jykqoNKCjeV8dPMWYJyf2UteuDtvPnhpf7pKw==
Age: 704
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 90905d66403e14a0d75ecf6244dbff4b
48a8ef724c7dcef804134dda48d8ce389a5bae0b
9ffbce9a51764934519655e4afed1b67372e45d314eecd187aa61fed89ed97e6
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 644
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:15 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: 8ed41dd2-c629-4806-81d9-e6e781ff2403
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6d2e644758758c696c3753c2b3062c4c
582fedf9527ffb72662188143b2e74d0604084c9
0a09eb83511271c81c2aca3a773b29f006520deb969ef5521088c6a6322a0109
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=95217366488
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=95217366488
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=95217366488 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:15 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
cdn.ampproject.org/rtv/012209142312000/v0/amp-ad-exit-0.1.mjs
200 OK 5.2 kB URL HTTP/2 cdn.ampproject.org/rtv/012209142312000/v0/amp-ad-exit-0.1.mjs
IP
File type ASCII text, with very long lines (14666)
Hash 90d4680ee61ac8b66c304c8d49aa64ef
d6db51233a195dca2727e0d19637201136dd07a6
ab981b5994dd3b1ca1d201d109c1a912abc03b59a8698d3093cf03b04488f8c1
GET /rtv/012209142312000/v0/amp-ad-exit-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 5187
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 07:18:00 GMT
expires: Thu, 05 Oct 2023 07:18:00 GMT
cache-control: public, max-age=31536000
etag: "59737ceedde8bf1d"
content-type: text/javascript; charset=UTF-8
age: 126915
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.ampproject.org/rtv/012209142312000/v0/amp-fit-text-0.1.mjs
200 OK 1.9 kB URL HTTP/2 cdn.ampproject.org/rtv/012209142312000/v0/amp-fit-text-0.1.mjs
IP
File type ASCII text, with very long lines (5021)
Hash 79215171fa8f548ee980e89779b09d03
2b5586a06385889b91620131d3e59ca61516aece
0b07c60649c345bc28cb92d49ed8819a916f2d59846dc6e1740f5f6d782df790
GET /rtv/012209142312000/v0/amp-fit-text-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 1900
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 06 Oct 2022 02:25:39 GMT
expires: Fri, 06 Oct 2023 02:25:39 GMT
cache-control: public, max-age=31536000
etag: "01e154329648e832"
content-type: text/javascript; charset=UTF-8
age: 58056
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.ampproject.org/rtv/012209142312000/v0/amp-form-0.1.mjs
200 OK 13 kB URL HTTP/2 cdn.ampproject.org/rtv/012209142312000/v0/amp-form-0.1.mjs
IP
File type Unicode text, UTF-8 text, with very long lines (41068)
Hash 6a04b9d802504933132be4bab3195d81
49eba5e68937a7bbf2cf2fdf1054e01c78eabae6
06133b44c9ebb5d365064a0b37a197e9f007eaa5a14aec26617fca0aac277091
GET /rtv/012209142312000/v0/amp-form-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 12955
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 22:48:28 GMT
expires: Thu, 05 Oct 2023 22:48:28 GMT
cache-control: public, max-age=31536000
etag: "45d7f146b93052d9"
content-type: text/javascript; charset=UTF-8
age: 71087
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194296&tk_flint=pbjs_lite_v6.15.0&x_source.tid=5a3c2689-9b25-4a66-90e8-e7ca6b4fda29&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.11003119877854906
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194296&tk_flint=pbjs_lite_v6.15.0&x_source.tid=5a3c2689-9b25-4a66-90e8-e7ca6b4fda29&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.11003119877854906
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 51f3e58da255182b6691ac0b8f3689fd
6f53d6fd4ddc75761c5e52bc37078e2efcc4f763
96d53cf093e2b61c789a0fa673fc522a63513c2c36f76902211aa2fb364fddd8
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194296&tk_flint=pbjs_lite_v6.15.0&x_source.tid=5a3c2689-9b25-4a66-90e8-e7ca6b4fda29&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.11003119877854906 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Thu, 06 Oct 2022 18:33:15 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8XECOWA-1L-55G3; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qpjjA/7sWHurO9DtVM30fCgpihd+i0AGkFQWjJlp6KDD3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=71639325410
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=71639325410
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=71639325410 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:14 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
cdn.ampproject.org/rtv/012209142312000/amp4ads-v0.mjs
200 OK 62 kB URL HTTP/2 cdn.ampproject.org/rtv/012209142312000/amp4ads-v0.mjs
IP
File type Unicode text, UTF-8 text, with very long lines (65008)
Hash 2d25ebafd048009ce60257daa0c5e344
1c3ff52ad08dd6972825cbfc58b73fd540346d15
cd9aae70e3403a11f6d834f749a184fb53e189fd71955e959084c2feff9cb280
GET /rtv/012209142312000/amp4ads-v0.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 61591
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 06 Oct 2022 09:12:11 GMT
expires: Fri, 06 Oct 2023 09:12:11 GMT
cache-control: public, max-age=31536000
etag: "e54f9754f7fcb5b6"
content-type: text/javascript; charset=UTF-8
age: 33664
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
cdn.ampproject.org/rtv/012209142312000/v0/amp-analytics-0.1.mjs
200 OK 29 kB URL HTTP/2 cdn.ampproject.org/rtv/012209142312000/v0/amp-analytics-0.1.mjs
IP
File type ASCII text, with very long lines (65534)
Hash 5ec6f97604e85f5f119e04c1d9d7d91e
2598379c4181c916687767e7a53cd829846c26ca
a9365e4d3830939e7cb45a383e3595321929f3d3bacb6e014832714394a62dca
GET /rtv/012209142312000/v0/amp-analytics-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 28888
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 06 Oct 2022 05:46:22 GMT
expires: Fri, 06 Oct 2023 05:46:22 GMT
cache-control: public, max-age=31536000
etag: "e2dd099ef3a2ca02"
content-type: text/javascript; charset=UTF-8
age: 46013
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=22952869126
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=22952869126
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=22952869126 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:15 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 569 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
File type JSON data\012- , ASCII text, with very long lines (919), with no line terminators
Hash 0a94e0b93e3291dbaf280c3b8f304837
2edc6750601e25773bd466f9f33b306f1ec129df
874f4b294b48e9612ab74f02f679b46dc053c70f7edab6f3c0545ae5491c0ace
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 352
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
vs=527999=5134713; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
pid=7081518051969988941; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638006779953397878&o=1; expires=Fri, 07 Oct 2022 18:33:15 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Fri, 07 Oct 2022 18:33:15 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash af1423361d37c5204878438841fbd2c4
9103c586f98e9d422ef1dd4bf0ea7bad3f03d697
2dd0f2face59ffc40651acbae4fd758cba0effc2b3aa1ef2326268eec896ded6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=71110813065
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=71110813065
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=71110813065 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:15 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194279&tk_flint=pbjs_lite_v6.15.0&x_source.tid=38440d71-542c-4421-9fc9-2451aa5f0279&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.7981078104767014
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194279&tk_flint=pbjs_lite_v6.15.0&x_source.tid=38440d71-542c-4421-9fc9-2451aa5f0279&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.7981078104767014
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 3932d659d8a87f99c8827c80f130d94c
e72fdc37f1095a975fdac9e31a2209f8ac3d6716
ebc6d80f6f6ee31104bb44afb000a7ac5af74fbe426ef94c8d6597f6551a8e21
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194279&tk_flint=pbjs_lite_v6.15.0&x_source.tid=38440d71-542c-4421-9fc9-2451aa5f0279&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.7981078104767014 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Thu, 06 Oct 2022 18:33:15 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8XECOXM-1C-CAEW; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qpuUEMhX7IWo+9DtVM30fCgpihd+i0AGkFQWjJlp6KDD3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
adx.adform.net/adx/openrtb
200 OK 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://flashnetic.com/
Origin: https://flashnetic.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
allow: POST,OPTIONS
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7a11dce69776010b3b383d732feb315d
694787cecb61a5f6a1abc41ecfe63097446e4bba
70def09932b93836b7a939df4ccf400444c6bfe05b1e5e4a290966fcbee47d6b
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 641
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:15 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: 4e917b9f-121c-4d54-b0ea-b4250d2ddc64
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=75111853098
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=75111853098
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=75111853098 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:14 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash b4e05832f92a96339ac91a4a00b760be
98bb84e28bba049028962fa4a53f5edd2cf03737
9f74744fa34966073c59808db642328a1c2d7266a59234e35fd931c61005f894
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 645
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:15 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: 981e36d1-3648-411a-a42d-83b45f93b68e
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ib.adnxs.com/ut/v3/prebid
200 OK 145 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash cdf63727970e72bf975b375e87ab7728
16d0ef8fe7b5d7b6ea5f30243a43b20b66cd4ad0
1c9cc7ab8f001ab6c73a9bacf59feb6cd698b08c32c00b296c4b31c5557ad51a
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 638
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:15 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 145
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: 1d20753a-1db2-4290-a7fa-685224662876
Set-Cookie: icu=ChkIv46FARAKGAEgASgBMOu-_JkGOAFAAUgBEOu-_JkGGAA.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 04-Jan-2023 18:33:15 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=2474624496761272081; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 04-Jan-2023 18:33:15 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194291&tk_flint=pbjs_lite_v6.15.0&x_source.tid=b27483b1-6383-4189-a67b-2daebef206fd&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.4291873630333677
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194291&tk_flint=pbjs_lite_v6.15.0&x_source.tid=b27483b1-6383-4189-a67b-2daebef206fd&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.4291873630333677
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 1b76db86275d4a34099868b55dd1b766
0d3387597bafbfff115493c09c9328f6af815411
af81ac76960fe5e17eb948f428394102c9efe47a752fc67aee67135a88e8d365
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194291&tk_flint=pbjs_lite_v6.15.0&x_source.tid=b27483b1-6383-4189-a67b-2daebef206fd&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.4291873630333677 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Thu, 06 Oct 2022 18:33:15 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8XECP06-1V-E9R1; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qrkzSSSAcf+oO9DtVM30fCgpihd+i0AGkFQWjJlp6KDD3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6d2e644758758c696c3753c2b3062c4c
582fedf9527ffb72662188143b2e74d0604084c9
0a09eb83511271c81c2aca3a773b29f006520deb969ef5521088c6a6322a0109
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adx.adform.net/adx/openrtb
200 OK 6.4 kB URL HTTP/2 adx.adform.net/adx/openrtb
IP
File type gzip compressed data, max compression\012- data
Hash ac906814ed812c4ecdbb624a3bd2f6c3
8e4547eaffaa66a1ee61b36028dbcd7091d0e7de
8ab8cef6156022c4547455defd8252b48b6bcb8b734072849345bb99758705fe
OPTIONS /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://flashnetic.com/
Origin: https://flashnetic.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
allow: POST,OPTIONS
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 612 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
File type JSON data\012- , ASCII text, with very long lines (1281), with no line terminators
Hash b9d93360bace14a176a162166abd10a2
b785281407625587c4fa2aac8ae16737bba39b77
d7e84d055f8cd5a61891ca96921592c1e29977491ac040d991082ab482c28074
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 352
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
vs=527999=5134713; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
pid=5757095050080156121; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638006779954651326&o=1; expires=Fri, 07 Oct 2022 18:33:15 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Fri, 07 Oct 2022 18:33:15 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9363e15778847a2fd18f08d1a0cca76f
ad0ef0775fe0eb2843d2949745a5c6492eb9fac1
ffa1b79d7acb6967c91f58e2d9c21f3f46fa304208ddce0c71e68df5202f86c8
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 644
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:15 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: 7cf19254-1d41-41a3-bd0f-33d79a6342ca
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194313&tk_flint=pbjs_lite_v6.15.0&x_source.tid=e85f049e-fa43-41ea-b047-0525928c673f&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.273708283903602
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194313&tk_flint=pbjs_lite_v6.15.0&x_source.tid=e85f049e-fa43-41ea-b047-0525928c673f&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.273708283903602
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash de7c33291972bfbc2c8b10b4fc148e22
60134e4533d547cb666d692643eee26de1e24936
61f62f7f33b0769a60f5643def6d132abb6903a2c3aa897b33e8ba1076e36bf1
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194313&tk_flint=pbjs_lite_v6.15.0&x_source.tid=e85f049e-fa43-41ea-b047-0525928c673f&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.273708283903602 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Thu, 06 Oct 2022 18:33:15 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8XECP1T-K-1Q0Y; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qqWVoqEUk9FVu9DtVM30fCgpihd+i0AGkFQWjJlp6KDD3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
flashnetic.com/r/p.html?f=flsytxvba&e=1583478116998
200 OK 2.1 kB URL HTTP/2 flashnetic.com/r/p.html?f=flsytxvba&e=1583478116998
IP
File type HTML document, ASCII text
Hash ebbb38b35e216c34f1b6f2ff5a76d027
be76e32aec58bbd7506da1e46232a1b4fb6b5690
93318fc935fe9ebb5551247f79ec837d6447ef44bada5237c25656ede46bcddf
GET /r/p.html?f=flsytxvba&e=1583478116998 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Eo2TBWJrwVm1yPBfcwYk8XqfSJauMHbPcjsgLQMntrUjsAMTh7lh_g==
age: 23125
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=68278708791
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=68278708791
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=68278708791 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:15 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0bffe09cf2b251e744c74c84e708bff4
828cb63d203c990701f5a4bb6c54e4b854ce2917
a2a3a4413da275f05b44382ca9b02b966a6ed0beb5ba4dfd204b271e4434ab7f
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 644
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:15 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: 3f830cfb-6394-41d8-940a-26cc0acf9c11
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prg.smartadserver.com/prebid/v1
200 OK 607 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
File type JSON data\012- , ASCII text, with very long lines (1254), with no line terminators
Hash b1aac4136a6bc702229dc131df70b865
c4ffb80570cb45d0872eff37eb0ff087b64a2a34
699c6879083b44516b3bad35a08c3422c83dd9481c83395221ecba48aab0c3b2
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 351
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Thu, 06 Oct 2022 18:33:14 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
vs=527999=5134713; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
pid=5160234916812683758; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638006779955276451&o=1; expires=Fri, 07 Oct 2022 18:33:15 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Fri, 07 Oct 2022 18:33:15 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=2022100301&st=env
200 OK 11 kB URL HTTP/2 pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=2022100301&st=env
IP
File type JSON data\012- , ASCII text, with very long lines (14866), with no line terminators
Hash a92edcebdacf574ad3f4316378bce441
a785308da1c5dc374d0b12bc3512b99720c78169
73c83326e04d5f167c2353be6d33d1cbdb8cb4cd65546adaae759d686494a8ad
GET /getconfig/sodar?sv=200&tid=gpt&tv=2022100301&st=env HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Thu, 06 Oct 2022 18:33:15 GMT
server: cafe
cache-control: private
content-length: 11287
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=2022100301&st=env
200 OK 11 kB URL HTTP/2 pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=2022100301&st=env
IP
File type JSON data\012- , ASCII text, with very long lines (14446), with no line terminators
Hash 50176854821caca1eeae72c40ad17023
393fa07124b5112c54602bb4ab22b1ed4ecbe3af
13d120d3af5ad94054f6dd88a836d54c3c9858f4de91f0b76e4bef3751ab3846
GET /getconfig/sodar?sv=200&tid=gpt&tv=2022100301&st=env HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Thu, 06 Oct 2022 18:33:15 GMT
server: cafe
cache-control: private
content-length: 10970
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194307&tk_flint=pbjs_lite_v6.15.0&x_source.tid=259d4bc8-4e15-4628-93b2-725670a30d73&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.302338673788752
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194307&tk_flint=pbjs_lite_v6.15.0&x_source.tid=259d4bc8-4e15-4628-93b2-725670a30d73&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.302338673788752
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash f273009988fb2e507fcabaa4df8ae36b
3452d2e0b76ad37adc05baee78ccdcb8f6c5d59f
51b2a17630afab179501349945937f213b611da35e8128bcc82dbf9face38309
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194307&tk_flint=pbjs_lite_v6.15.0&x_source.tid=259d4bc8-4e15-4628-93b2-725670a30d73&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.302338673788752 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Thu, 06 Oct 2022 18:33:15 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8XECP33-10-3HMD; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qpHZ9NEjTcvKO9DtVM30fCgpihd+i0AGkFQWjJlp6KDD3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 8b2eee8190f2e20ff408c7bc74f9b594
6a9089536994e2ce269799d9206dafcef7736aee
0b5ec06f616a0f9c52aeade9faaf6f89dfb77189fa1d3f649483e688470310af
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 641
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:15 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: c91b1f5a-b57e-4895-8959-17e7f9fd823f
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prg.smartadserver.com/prebid/v1
200 OK 587 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
File type JSON data\012- , ASCII text, with very long lines (1115), with no line terminators
Hash 960514e563013f389a5b818ff16ac16a
954138448ff79a433fa55597800e4aa847df2deb
66d04f702573f62c679a2b58986462b42a32631dab878b1c82f95260474f6db3
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 353
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
vs=527999=5134713; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
pid=5948185536717912368; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638006779955432121&o=1; expires=Fri, 07 Oct 2022 18:33:15 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Fri, 07 Oct 2022 18:33:15 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
prg.smartadserver.com/prebid/v1
200 OK 422 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
File type JSON data\012- , ASCII text, with very long lines (850), with no line terminators
Hash d766da72b2dd1cf65b8773e2c8c4b5f6
b3bdc15c9f954ab55035721fc4657b9bd93c54f8
0e280945ab5f068c19ec8c6fb458157b485cf8572d763caa6d40f0bf9dbad1ef
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 354
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Thu, 06 Oct 2022 18:33:14 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
vs=527999=5134713; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
pid=2153557573942376720; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638006779955656270&o=1; expires=Fri, 07 Oct 2022 18:33:15 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Fri, 07 Oct 2022 18:33:15 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=52642945316
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=52642945316
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=52642945316 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:15 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 547 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1060), with no line terminators
Hash 9eb752abfea6d08ba5009bf0733f7d27
ea860dff9a7adb26237c17d3b0c9f2c44d233f48
9bb6820e7eec2feb21a70eb515cb341ac7bee988ef0f15d5b9f9e10f3ad24383
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 353
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
vs=527999=5134713; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
pid=7073983107374774639; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638006779954035510&o=1; expires=Fri, 07 Oct 2022 18:33:15 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Fri, 07 Oct 2022 18:33:15 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194323&tk_flint=pbjs_lite_v6.15.0&x_source.tid=f271e2c2-8533-46a5-b15a-450161038435&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.14470851472157265
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194323&tk_flint=pbjs_lite_v6.15.0&x_source.tid=f271e2c2-8533-46a5-b15a-450161038435&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.14470851472157265
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 349a0d75519af273b0f3f2667b7f4f20
3ef1df9aa1cb211d57889b175e4693eead744c09
6e5f97a39f2194a11253ec3279f9d5bc4dabe9290ba6abfe7eca2e67e21f86c9
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194323&tk_flint=pbjs_lite_v6.15.0&x_source.tid=f271e2c2-8533-46a5-b15a-450161038435&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.14470851472157265 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Thu, 06 Oct 2022 18:33:15 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8XECP3Z-1N-CLKL; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qrnX3F3H8RvNe9DtVM30fCgpihd+i0AGkFQWjJlp6KDD3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0b9c3430c2d14b1ee1324ef33219971b
876ef664a9a6d064c09ee379265efeebc9f9ab15
f1043ce3f147998d1bbe3ae58b3f892707f5b42e0b51f728951d015203dae6ab
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 642
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:15 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: a6b00140-17b1-4637-8309-3b8c83e31511
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 473 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
File type JSON data\012- , ASCII text, with very long lines (1031), with no line terminators
Hash 6ac4d74466ea58ac4606464ec58d1d83
1a98865608cde1be4a4e09ccaf95e6a58cc535e0
8a5ecdd413128aab2ef5312eec2e0c27d91a79dd3f6aec2ca463eb56e1eabfd5
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 353
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
vs=527999=5134713; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
pid=2625696289340258733; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638006779956107274&o=1; expires=Fri, 07 Oct 2022 18:33:15 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Fri, 07 Oct 2022 18:33:15 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194336&tk_flint=pbjs_lite_v6.15.0&x_source.tid=01f5117d-d490-4eef-a140-b2ecf4b22081&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.722707098594938
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194336&tk_flint=pbjs_lite_v6.15.0&x_source.tid=01f5117d-d490-4eef-a140-b2ecf4b22081&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.722707098594938
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 19f213a4b58b4517899fde6db91839b4
10ccae3511e14c5f3f4dee2718dd19c43cfacb81
92c2ba7de527b255666e53b9360e8272e47d084a815cec77901d851adbad0b49
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194336&tk_flint=pbjs_lite_v6.15.0&x_source.tid=01f5117d-d490-4eef-a140-b2ecf4b22081&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.722707098594938 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Thu, 06 Oct 2022 18:33:15 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8XECP60-16-BZ55; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qqwNP+Fn5bZzO9DtVM30fCgpihd+i0AGkFQWjJlp6KDD3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
go1.aniview.com/api/adserver/tag/?AV_TAGID=62790805abc41c4450002684&AV_PUBLISHERID=62176a72a06fe80ba569d18f&AV_VIDEOURL=https%3A%2F%2Fstreaming.playstream.media%2Fstorage%2Fvideos%2F784a1b3a-f606-44a0-9bd0-87438314f291%2Findex.m3u8&AV_SLOTT=-2&AV_SECURED=1&AV_LANGUAGE=en&AV_URL=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&AV_CHANNELID=6278fd47e6b0901a49776895&tgt=0&AV_SUBID=&AV_CDIM1=&AV_CDIM2=&AV_CDIM3=&AV_ABT=&pce=1&npx=1&AV_DETDOMAIN=earnme.club&AV_DADPOS=3&AV_TAG=62790805abc41c4450002684&AV_TEMPLATE=6278f4f0a7dd573d85421cad&d36=6.2.56&responsive=1&sver=2&avtoken=193044&omv=1.0.1&clsid=333ce63a-84ce-4ee3-ba7f-9dd5b4909928&rando=82&AV_WIDTH=640&AV_HEIGHT=361&AV_CCPA=1---&AV_DNT=0&cb=1665081193438&wfc=1
200 OK 2.9 kB URL HTTP/2 go1.aniview.com/api/adserver/tag/?AV_TAGID=62790805abc41c4450002684&AV_PUBLISHERID=62176a72a06fe80ba569d18f&AV_VIDEOURL=https%3A%2F%2Fstreaming.playstream.media%2Fstorage%2Fvideos%2F784a1b3a-f606-44a0-9bd0-87438314f291%2Findex.m3u8&AV_SLOTT=-2&AV_SECURED=1&AV_LANGUAGE=en&AV_URL=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&AV_CHANNELID=6278fd47e6b0901a49776895&tgt=0&AV_SUBID=&AV_CDIM1=&AV_CDIM2=&AV_CDIM3=&AV_ABT=&pce=1&npx=1&AV_DETDOMAIN=earnme.club&AV_DADPOS=3&AV_TAG=62790805abc41c4450002684&AV_TEMPLATE=6278f4f0a7dd573d85421cad&d36=6.2.56&responsive=1&sver=2&avtoken=193044&omv=1.0.1&clsid=333ce63a-84ce-4ee3-ba7f-9dd5b4909928&rando=82&AV_WIDTH=640&AV_HEIGHT=361&AV_CCPA=1---&AV_DNT=0&cb=1665081193438&wfc=1
IP
Hash 70bb5901a0eeeb830d077af9260074a9
f9b91ec8709aefe67e9b1c64591f249960eb1d19
f1ef5bdc7b5bc8fc795f25fd15ac660075ef4e41659c10bcafb63fe6628b6c63
GET /api/adserver/tag/?AV_TAGID=62790805abc41c4450002684&AV_PUBLISHERID=62176a72a06fe80ba569d18f&AV_VIDEOURL=https%3A%2F%2Fstreaming.playstream.media%2Fstorage%2Fvideos%2F784a1b3a-f606-44a0-9bd0-87438314f291%2Findex.m3u8&AV_SLOTT=-2&AV_SECURED=1&AV_LANGUAGE=en&AV_URL=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&AV_CHANNELID=6278fd47e6b0901a49776895&tgt=0&AV_SUBID=&AV_CDIM1=&AV_CDIM2=&AV_CDIM3=&AV_ABT=&pce=1&npx=1&AV_DETDOMAIN=earnme.club&AV_DADPOS=3&AV_TAG=62790805abc41c4450002684&AV_TEMPLATE=6278f4f0a7dd573d85421cad&d36=6.2.56&responsive=1&sver=2&avtoken=193044&omv=1.0.1&clsid=333ce63a-84ce-4ee3-ba7f-9dd5b4909928&rando=82&AV_WIDTH=640&AV_HEIGHT=361&AV_CCPA=1---&AV_DNT=0&cb=1665081193438&wfc=1 HTTP/1.1
Host: go1.aniview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:13 GMT
content-type: application/json
vary: Accept-Encoding
set-cookie: aniC=1665081193825-930277797056-009413-014-001599; Expires=Wed, 26-Oct-22 18:33:13 GMT; Max-Age=1728000; Domain=aniview.com; Path=/; Secure; HttpOnly; SameSite=None
aniC=; Expires=Wed, 26-Oct-22 18:33:13 GMT; Max-Age=1728000; Domain=aniview.com; Path=/; Secure; HttpOnly; SameSite=None
access-control-allow-credentials: true
access-control-allow-origin: https://earnme.club
expires: Sun, 25 Sep 2022 04:46:33 GMT
cache-control: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=84429343414
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=84429343414
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=84429343414 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:15 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 596 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
File type JSON data\012- , ASCII text, with very long lines (1128), with no line terminators
Hash 93750fae01a0f16846bbbd4374e37b78
90fbdfea8eed1adc91274d59ffe9c233c276cb08
8ed211a3240d11cbc255d1d7f1fb17a3716700b71b24d2552ddaad3b6436cef9
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 354
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
vs=527999=5134713; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
pid=6166993955577657778; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638006779956421413&o=1; expires=Fri, 07 Oct 2022 18:33:15 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Fri, 07 Oct 2022 18:33:15 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194341&tk_flint=pbjs_lite_v6.15.0&x_source.tid=ba148b92-03a7-4bb0-be05-3a69b338ffa5&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.5318522099276625
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194341&tk_flint=pbjs_lite_v6.15.0&x_source.tid=ba148b92-03a7-4bb0-be05-3a69b338ffa5&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.5318522099276625
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash a81bc1b7d575bbd8082f3826ea381a64
0851f3ff7f5c48aeaff9436a1586d76b4065c82d
50af9a3b080ccc6476f8e2634b8c439c774cab9a956a4e59366369d29d6e6385
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194341&tk_flint=pbjs_lite_v6.15.0&x_source.tid=ba148b92-03a7-4bb0-be05-3a69b338ffa5&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.5318522099276625 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Thu, 06 Oct 2022 18:33:15 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8XECP6O-3-E9FH; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qqC06lnwGxKzu9DtVM30fCgpihd+i0AGkFQWjJlp6KDD3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=50048775817
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=50048775817
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=50048775817 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:14 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f491819a8dba48021d692d274ed874aa
5f75a94b847cd46a7644a87e0bb14bd1c4d0e771
a5dba12a118cbd3e244531832060daf14d5cdf6feb0ef1cd0ecbdc7338da2253
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 641
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:15 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: 60d01b19-40c9-434f-9585-fe2e1ebd73c9
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=47985059140
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=47985059140
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=47985059140 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:15 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 470 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
File type JSON data\012- , ASCII text, with very long lines (848), with no line terminators
Hash 34f1419d6aa3a91418f07f27bd77fa44
9db6711609fdcc0cc72d4ae1ab1df7c9fc3a8909
3c0315970b92e7aff4936b8f8eb2c9be1f5fa508988a438b99d8e618959b3d00
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 352
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
vs=527999=5134713; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
pid=2948775231267797394; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638006779957110649&o=1; expires=Fri, 07 Oct 2022 18:33:15 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Fri, 07 Oct 2022 18:33:15 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
prg.smartadserver.com/prebid/v1
200 OK 518 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
File type JSON data\012- , ASCII text, with very long lines (1149), with no line terminators
Hash 7a6e7187d70e07b88365923f53d3a6cb
a5feb4a73dabac1bb342a42a01721b9690aae69d
cc475ba09371c454db14283963861e859b484752ddda6665162fcec035a61126
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 353
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
vs=527999=5134713; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
pid=65962713694599651; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638006779956623922&o=1; expires=Fri, 07 Oct 2022 18:33:15 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Fri, 07 Oct 2022 18:33:15 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194347&tk_flint=pbjs_lite_v6.15.0&x_source.tid=2b5f1d92-645a-4d2a-a62c-b97c05f5a63a&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.4853014078564757
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194347&tk_flint=pbjs_lite_v6.15.0&x_source.tid=2b5f1d92-645a-4d2a-a62c-b97c05f5a63a&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.4853014078564757
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash f5d3487c04abf942730d8b25f921be99
79e94e7ab7c4ac599a1ec2d5ccd98f4787e619fc
bb5466f753e10a366dd2ac8aefd02a5287107689ceeeb517cfdfeb0214339da4
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194347&tk_flint=pbjs_lite_v6.15.0&x_source.tid=2b5f1d92-645a-4d2a-a62c-b97c05f5a63a&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.4853014078564757 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Thu, 06 Oct 2022 18:33:15 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8XECP7N-M-24RX; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|SDziDG3X/EgycEe1z+AmP+9DtVM30fCgpihd+i0AGkFQWjJlp6KDD3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 81408f61b7fa3d4abcd676bc7990db88
6dbf855a1dbde39706d22ca84cc760a941547952
9e4c3214f60b3cf5d678f6a180bb45829607a2cd7e7251c44b8441541e3032b6
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 642
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:15 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: 4b0a03a8-0fea-4173-b8f2-6940a9ff9159
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=34234594010
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=34234594010
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=34234594010 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:15 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194327&tk_flint=pbjs_lite_v6.15.0&x_source.tid=4bf92eb1-3f69-48b3-aedf-24ddbf0c8d60&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.9988506416253743
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194327&tk_flint=pbjs_lite_v6.15.0&x_source.tid=4bf92eb1-3f69-48b3-aedf-24ddbf0c8d60&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.9988506416253743
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 8039ff3b00fdfc88034988caeea6c3e3
17b905c3dcdc626cb42bc2f4b2548f06c5b84762
7b518d3f00170a84c027d58cddaba0d5902e4bf39a91f4fe37d8e84d97ced4e7
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194327&tk_flint=pbjs_lite_v6.15.0&x_source.tid=4bf92eb1-3f69-48b3-aedf-24ddbf0c8d60&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.9988506416253743 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Thu, 06 Oct 2022 18:33:15 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8XECP58-W-M7TQ; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qrbqSKzj1Jlhu9DtVM30fCgpihd+i0AGkFQWjJlp6KDD3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 95f0fef0bd8d38f1764c2feaa6a0a80c
e88223d15b848399bc8e03bb056c0f460daee408
1285ad9e35fd0a08b1f23ed952c07d89367b9bf5d9272e40e067d6057a505619
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1285AD9E35FD0A08B1F23ED952C07D89367B9BF5D9272E40E067D6057A505619"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4912
Expires: Thu, 06 Oct 2022 19:55:07 GMT
Date: Thu, 06 Oct 2022 18:33:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 95f0fef0bd8d38f1764c2feaa6a0a80c
e88223d15b848399bc8e03bb056c0f460daee408
1285ad9e35fd0a08b1f23ed952c07d89367b9bf5d9272e40e067d6057a505619
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1285AD9E35FD0A08B1F23ED952C07D89367B9BF5D9272E40E067D6057A505619"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4912
Expires: Thu, 06 Oct 2022 19:55:07 GMT
Date: Thu, 06 Oct 2022 18:33:15 GMT
Connection: keep-alive
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash e863818669eb23ab22c28af9adca982c
e11eb0a01ec06ad490196ed9ad37bee5b64df784
51b1f1ca4cca65e3c7f1b1ad245d481cc31278e5dab4a5cbaf85e3ce16641f34
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 638
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:15 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: f1a1daa7-7fa9-4c18-bfc9-67f750e2688e
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prg.smartadserver.com/prebid/v1
200 OK 573 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
File type JSON data\012- , ASCII text, with very long lines (1212), with no line terminators
Hash 99ee85b285bbde3f54d95ab275134df3
b2fb50fc36f305daac3977b95302eab3b4af4885
4d1c9bfda9d30fcc7a4681c502c41232bddbdd458d0293896a85d93ab647cad1
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 352
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
vs=527999=5134713; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
pid=1229485387293915513; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638006779957897753&o=1; expires=Fri, 07 Oct 2022 18:33:15 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Fri, 07 Oct 2022 18:33:15 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194357&tk_flint=pbjs_lite_v6.15.0&x_source.tid=94e459a1-7732-4e02-aee4-17f561918f96&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.8521659822721714
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194357&tk_flint=pbjs_lite_v6.15.0&x_source.tid=94e459a1-7732-4e02-aee4-17f561918f96&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.8521659822721714
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 7514b4834328944c97f39610dd5ca1e1
7d54d24ae293c334d074a20213141056e7c5e519
0df2a35efdec4045b15246cf17d64b70314df8a2b011842e8d225ef66b0db614
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194357&tk_flint=pbjs_lite_v6.15.0&x_source.tid=94e459a1-7732-4e02-aee4-17f561918f96&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.8521659822721714 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Thu, 06 Oct 2022 18:33:15 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8XECPAC-N-4S3T; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qrTst2VatiETO9DtVM30fCgpihd+i0AGkFQWjJlp6KDD3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=12933065122
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=12933065122
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=12933065122 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:15 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
lbs.eu-1-id5-sync.com/lbs/v1
200 OK 34 B URL HTTP/1.1 lbs.eu-1-id5-sync.com/lbs/v1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9d0dec1ff4018e25a10a0f50d131abed
86add7bf45bc4728bf446e5e9aef03b84eb8c43b
5757bcd865b97d0bb9cf83650e84d039aa59612b54260b717776c51cd54d3896
GET /lbs/v1 HTTP/1.1
Host: lbs.eu-1-id5-sync.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Thu, 6 Oct 2022 18:33:15 GMT
access-control-allow-origin: https://earnme.club
vary: Origin
content-type: application/json
content-length: 34
lb.eu-1-id5-sync.com/lb/v1
200 33 B URL HTTP/1.1 lb.eu-1-id5-sync.com/lb/v1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 219e8592146f0e4cd358980a8b8ebec5
793c6036855c2f8882d8044052b63435a4f53bdb
9cdfb5aea2c45391be6f07b67e5b6a75c3753f50806a08fa9529ac522dd88716
GET /lb/v1 HTTP/1.1
Host: lb.eu-1-id5-sync.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: https://earnme.club
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Thu, 06 Oct 2022 18:33:14 GMT
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 6ab0511e2ac3ace1e25228c2d938fda2
216d7ea648201b7ec146c9c83870388088fdffce
a194fb8607d93aac950979cbe3e01bf520779625b93050b3cb55f4f7630f8e64
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 645
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:15 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: b7fd25c3-dcf9-4507-8b84-64bb6bd57140
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=66995886190
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=66995886190
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=66995886190 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:15 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
id.hadron.ad.gt/v1/hadron.json?partner_id=405&sync=0&domain=earnme.club
200 OK 646 B URL HTTP/2 id.hadron.ad.gt/v1/hadron.json?partner_id=405&sync=0&domain=earnme.club
IP
Hash b810fda70cc1c7e4d202f0b9398b9800
474a15fd97860c091f7b90335a0c98a4dae2afb3
7399f823ad15ed6aa2737d13c911ec34af30d553842d6964c928b5b726b3a735
GET /v1/hadron.json?partner_id=405&sync=0&domain=earnme.club HTTP/1.1
Host: id.hadron.ad.gt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Allow-Origin: *
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:15 GMT
content-type: application/json
server: nginx/1.20.0
access-control-allow-origin: https://earnme.club
access-control-allow-credentials: true
vary: Origin
content-encoding: gzip
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=85526051730
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=85526051730
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=85526051730 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:15 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194364&tk_flint=pbjs_lite_v6.15.0&x_source.tid=2875be7b-8a54-4113-bdfc-38317cec200d&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.35872019293381563
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194364&tk_flint=pbjs_lite_v6.15.0&x_source.tid=2875be7b-8a54-4113-bdfc-38317cec200d&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.35872019293381563
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 32ee242701b14c11ac5045c7a64a7fdb
745d6aacc14c635a19dcbfc0c3a026a4c30108c4
57d3e37a74e9986a3ab8f275456d0a649b06b4fc5b74c5624b60bd3a8afffc74
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194364&tk_flint=pbjs_lite_v6.15.0&x_source.tid=2875be7b-8a54-4113-bdfc-38317cec200d&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.35872019293381563 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Thu, 06 Oct 2022 18:33:15 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8XECPBJ-21-G3NF; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qog7sKYhbExHu9DtVM30fCgpihd+i0AGkFQWjJlp6KDD3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
prg.smartadserver.com/prebid/v1
200 OK 558 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
File type JSON data\012- , ASCII text, with very long lines (1234), with no line terminators
Hash 4b8bb0893aa947b93ec53f466a56c85a
759ba763404af5233dbb6f5f160cecb3ffada883
987e6fa4ab8b59a7045aa2ce2d3642a4fe4dce55fca065853cd24ae955597b8c
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 354
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
vs=527999=5134713; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
pid=1232408520560736633; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638006779958769521&o=1; expires=Fri, 07 Oct 2022 18:33:15 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Fri, 07 Oct 2022 18:33:15 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=83726363095
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=83726363095
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=83726363095 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:15 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5920609a7a810adaf9ff50686ebec10d
c838e61d19794be34bcc7de4eeb583c6d9ed89d3
e31a9cda8a5e96808ab6715607bb3134bed58f29a700967b333442ac6b94176c
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 645
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:15 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: 428af7ea-4286-4146-a550-ed79ebd3be4b
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194361&tk_flint=pbjs_lite_v6.15.0&x_source.tid=8013d67a-ba81-47b7-9e0b-2fd8bc4c2cf9&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.2202189983671351
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194361&tk_flint=pbjs_lite_v6.15.0&x_source.tid=8013d67a-ba81-47b7-9e0b-2fd8bc4c2cf9&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.2202189983671351
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash e8768f5106255ba6fbaba78e11ca761c
b19b5eee1acb24c8c2bfabfc0896ad9f68e4bbaa
f83d04b552673d200dc4a758596fbe104387a14701b47aa52db179b3021eea27
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194361&tk_flint=pbjs_lite_v6.15.0&x_source.tid=8013d67a-ba81-47b7-9e0b-2fd8bc4c2cf9&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.2202189983671351 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Thu, 06 Oct 2022 18:33:15 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8XECPCJ-1H-G64H; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qqfBVLSgUsvze9DtVM30fCgpihd+i0AGkFQWjJlp6KDD3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
prg.smartadserver.com/prebid/v1
200 OK 633 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
File type JSON data\012- , ASCII text, with very long lines (1267), with no line terminators
Hash a17fd588566ce29805df1c3bce8b5d96
6b88c80c006350fc91a8a574f6ba6c181ad6e611
145d89af9664bd6e7ff88d806a459d2ff2f3376b38e56663a71a830087109946
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 353
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
vs=527999=5134713; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
pid=6495538561216936211; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638006779958969799&o=1; expires=Fri, 07 Oct 2022 18:33:15 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Fri, 07 Oct 2022 18:33:15 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194432&tk_flint=pbjs_lite_v6.15.0&x_source.tid=467c6923-580c-4752-a504-0bdaa6b839fa&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.40898652355580645
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194432&tk_flint=pbjs_lite_v6.15.0&x_source.tid=467c6923-580c-4752-a504-0bdaa6b839fa&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.40898652355580645
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash b46f4bebb4d45feb64ab77ddc038ec89
204daae28b4a4a6d828af9e185b45a94946f3e7e
10166afb70c0584871777043c8c946e2f7049963ee55ef0b16dde434471f7ba9
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194432&tk_flint=pbjs_lite_v6.15.0&x_source.tid=467c6923-580c-4752-a504-0bdaa6b839fa&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.40898652355580645 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Thu, 06 Oct 2022 18:33:15 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8XECPD5-20-KVIH; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|SDziDG3X/Ei90WM3mwytse9DtVM30fCgpihd+i0AGkFQWjJlp6KDD3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0f69dbf135a1bbad3ddc98898ab9ece3
6c59273b2b427d5a9f76896a3dad8e1fc3e35508
7eee50bd16c767c886a495d33eede2e9094fcdc5fdbe5f31ec0cbc5991baf33b
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 641
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:15 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: af2881b1-549d-4efb-9300-fde3e079a038
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=18265393023
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=18265393023
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=18265393023 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:15 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 145 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d7d1fa61e5dbf7e1960827760ceefa1e
ba1cabb97ab3f7d97c5c3f7e08de133d884051ae
a01aed05fed89e80cedd7c9fe42564f4ee54062df7cb2b07dd3d52a253afd991
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 640
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:15 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 145
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: d65c7dbb-4d60-47f9-9303-72e84a63af5e
Set-Cookie: icu=ChkIv46FARAKGAEgASgBMOu-_JkGOAFAAUgBEOu-_JkGGAA.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 04-Jan-2023 18:33:15 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=5010920590459752589; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 04-Jan-2023 18:33:15 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194450&tk_flint=pbjs_lite_v6.15.0&x_source.tid=e364a7cd-a574-4906-8981-dbff640ca21b&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.15872519073965763
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194450&tk_flint=pbjs_lite_v6.15.0&x_source.tid=e364a7cd-a574-4906-8981-dbff640ca21b&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.15872519073965763
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash afddb5ae1b62015276d31b6afa73704c
ee282d2215d1b4526747852ed4ff024d40bf4157
46daed94ac16c0af23d7e0e87083c4a36e7de787924643a7606f42f3c1cf878a
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194450&tk_flint=pbjs_lite_v6.15.0&x_source.tid=e364a7cd-a574-4906-8981-dbff640ca21b&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.15872519073965763 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Thu, 06 Oct 2022 18:33:16 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8XECPEM-Z-1DKL; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qohBTqzihL1PO9DtVM30fCgpihd+i0AGkFQWjJlp6KDD3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 06 Oct 2022 18:33:16 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 6928672ee76c81ce35ad8afa68e0591f
1426c3da9f00c3960a58ad16a5d13128b6d93be0
63ab6b7642d87f50493d52bc3bf645274b3e799573edac0f774bcf0874d54253
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 642
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:16 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: 50a442b0-8489-4ae6-8777-4d3660953d15
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prg.smartadserver.com/prebid/v1
200 OK 579 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
File type JSON data\012- , ASCII text, with very long lines (1137), with no line terminators
Hash 2c3b13e567b266a8a0ba00ef2abb3791
c99590f9883d21b38899288b412a51194e684d72
6e1d64a93df0ca6c1d49d3ce43a52dedeaa342dc06db03b7e9fa3034a7001949
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 351
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
vs=525642=5134713; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
pid=5106561122831432055; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638006779959504513&o=1; expires=Fri, 07 Oct 2022 18:33:15 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Fri, 07 Oct 2022 18:33:15 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=96093236682
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=96093236682
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=96093236682 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:15 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 586 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
File type JSON data\012- , ASCII text, with very long lines (1218), with no line terminators
Hash 4444dc21d284a2951dbf55b1828614bc
29d14c133e4f67cbf11066167bf58421973b83e9
ca5a11f99177171f42c33751ef728077c561f68712c982aeafb8a12f34ec4db2
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 354
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
vs=525642=5134713; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
pid=1733067717179603208; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638006779959634448&o=1; expires=Fri, 07 Oct 2022 18:33:15 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Fri, 07 Oct 2022 18:33:15 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 06 Oct 2022 18:33:16 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 06 Oct 2022 18:33:16 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194462&tk_flint=pbjs_lite_v6.15.0&x_source.tid=33119205-64f8-4be4-a3bf-ca04e0824885&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.38671658522395747
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194462&tk_flint=pbjs_lite_v6.15.0&x_source.tid=33119205-64f8-4be4-a3bf-ca04e0824885&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.38671658522395747
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 02b23f2d09b87f0db34dd0e6f947f5ed
afb5c4feef2c8aa1fceac5ca0e229aaac12fa021
3aadfeaa8ec8fb97e19962d0a8dc48ea219311564dd491016e6be80e757c2823
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194462&tk_flint=pbjs_lite_v6.15.0&x_source.tid=33119205-64f8-4be4-a3bf-ca04e0824885&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.38671658522395747 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Thu, 06 Oct 2022 18:33:16 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8XECPFV-1W-6GCQ; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qr0e8IpoZfsaO9DtVM30fCgpihd+i0AGkFQWjJlp6KDD3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 40a4de06678d96242b71d5318f2fd4ef
546a7d1d92df81916f14155943427b5453ae3924
aed9af25ae57c181702a137d48cb00f5b30297180161451de3b628359dc9ec6f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=71760239331
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=71760239331
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=71760239331 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:15 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194445&tk_flint=pbjs_lite_v6.15.0&x_source.tid=f72b2c46-2157-4537-9f0a-7edbb87f3ca9&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.3425135352846149
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194445&tk_flint=pbjs_lite_v6.15.0&x_source.tid=f72b2c46-2157-4537-9f0a-7edbb87f3ca9&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.3425135352846149
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash d9743111d61daba240d2de7c5633d41f
3018a10336a075a3fb93b839a0a8da6d70adca7d
5124f82732b908d1c2bf5a5fa2f06b408421676ae3dd9cf49de8995104a60ca0
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194445&tk_flint=pbjs_lite_v6.15.0&x_source.tid=f72b2c46-2157-4537-9f0a-7edbb87f3ca9&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.3425135352846149 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Thu, 06 Oct 2022 18:33:16 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8XECPEX-1V-8P60; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qpvrUnTHNdZXu9DtVM30fCgpihd+i0AGkFQWjJlp6KDD3vs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:15 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
prg.smartadserver.com/prebid/v1
200 OK 510 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
File type JSON data\012- , ASCII text, with very long lines (1038), with no line terminators
Hash b37059279c00424402f99fd2a1a35e04
de9e6cab9773a6698035a62963f317527f78752d
2d8db9bacaba7d98103188912afedea4f6af9f114cbf3cb397422c2c3ccfcdbe
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 354
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Thu, 06 Oct 2022 18:33:16 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
vs=525642=5134713; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
pid=5827860275573815767; expires=Fri, 06 Oct 2023 18:33:15 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638006779959986407&o=1; expires=Fri, 07 Oct 2022 18:33:15 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Fri, 07 Oct 2022 18:33:15 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
www.google.com/ads/measurement/l?ebcid=ALh7CaS6P9uiwKkWOoa-moNRu_1-SXC4ApLa2GM5Buj6N315a0Dsxr8TVMQp7MmraZVHDVQm74drn3gavs4j9LHOJyAEytg3TQ
204 No Content 0 B URL HTTP/2 www.google.com/ads/measurement/l?ebcid=ALh7CaS6P9uiwKkWOoa-moNRu_1-SXC4ApLa2GM5Buj6N315a0Dsxr8TVMQp7MmraZVHDVQm74drn3gavs4j9LHOJyAEytg3TQ
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ads/measurement/l?ebcid=ALh7CaS6P9uiwKkWOoa-moNRu_1-SXC4ApLa2GM5Buj6N315a0Dsxr8TVMQp7MmraZVHDVQm74drn3gavs4j9LHOJyAEytg3TQ HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Thu, 06 Oct 2022 18:33:16 GMT
server: jumble_frontend_server
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 06 Oct 2022 18:33:16 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 549 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
File type JSON data\012- , ASCII text, with very long lines (1132), with no line terminators
Hash 3d0f277bb4d960847feb0524743ce21f
f78e59bf6affa2137d254a286d9d95d2797a523b
9b55e1ddf7d71e29c11e99baa8c8e1687ef1940631b0b83db8816cae08c801f8
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 353
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Fri, 06 Oct 2023 18:33:16 GMT; domain=.smartadserver.com; path=/
vs=525642=5134713; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Fri, 06 Oct 2023 18:33:16 GMT; domain=.smartadserver.com; path=/
pid=2550005938948929982; expires=Fri, 06 Oct 2023 18:33:16 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638006779960391012&o=1; expires=Fri, 07 Oct 2022 18:33:16 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Fri, 07 Oct 2022 18:33:16 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194475&tk_flint=pbjs_lite_v6.15.0&x_source.tid=ae4253fd-3420-4dd6-b518-f44c81d4df0a&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.806212103763944
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194475&tk_flint=pbjs_lite_v6.15.0&x_source.tid=ae4253fd-3420-4dd6-b518-f44c81d4df0a&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.806212103763944
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash e9693ed1fda808a8d50a805f78aae6d0
e2963cdb9e5f75700016188ed53504db4559794c
6a90dbaf699398af6acafa80eaf4276a265dcb1138fb1ecd47b4d65c021075b6
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194475&tk_flint=pbjs_lite_v6.15.0&x_source.tid=ae4253fd-3420-4dd6-b518-f44c81d4df0a&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.806212103763944 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Thu, 06 Oct 2022 18:33:16 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8XECPH0-U-9YK2; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:16 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qqH3gErStaPze9DtVM30fCgpihd+i0AGkGp7DuUABCGnnvs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:16 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
prg.smartadserver.com/prebid/v1
200 OK 558 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
File type JSON data\012- , ASCII text, with very long lines (1181), with no line terminators
Hash f6754cfa357e58b99aa83dd39488e042
b386a8ade5fc36b406d0ac9fbcb481cbc832f775
c0ffd9f0f03b858f055351c8f12043531a6328aa91b618bbe0f9cffdf36c203c
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 354
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Fri, 06 Oct 2023 18:33:16 GMT; domain=.smartadserver.com; path=/
vs=525642=5134713; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Fri, 06 Oct 2023 18:33:16 GMT; domain=.smartadserver.com; path=/
pid=526036707044227499; expires=Fri, 06 Oct 2023 18:33:16 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638006779960806290&o=1; expires=Fri, 07 Oct 2022 18:33:16 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Fri, 07 Oct 2022 18:33:16 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194479&tk_flint=pbjs_lite_v6.15.0&x_source.tid=816a777e-05ce-4426-a015-7d310f4b9244&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.39184082692528344
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194479&tk_flint=pbjs_lite_v6.15.0&x_source.tid=816a777e-05ce-4426-a015-7d310f4b9244&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.39184082692528344
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 474cdde7f2ca1ea6bb72317d4cfb1510
e812d89ada555d69a798685daba57d84c705a2c9
43f9163828b70a9db2b915064645f0d25bad95ba13d9bf9bf58439fa056a5e37
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194479&tk_flint=pbjs_lite_v6.15.0&x_source.tid=816a777e-05ce-4426-a015-7d310f4b9244&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.39184082692528344 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Thu, 06 Oct 2022 18:33:16 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8XECPI8-X-K84B; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:16 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|SDziDG3X/EhsowOQb3xL6e9DtVM30fCgpihd+i0AGkGp7DuUABCGnnvs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:16 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 2362e7309e373c24a7f9f0c6a11f3068
e9fb8139f47d9a0a8a0f13b6fb9604c94c34435c
8899aba6df2007427f1f5947f5a59a4b74237a92903f18e20c6f0eb0a5e91d47
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 644
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:16 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: 7b3a9c05-6cb4-4617-ac78-624552e6446c
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=34983907174
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=34983907174
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=34983907174 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:15 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0067168dbce999d6f0a46131e0a12f6b
579bf316a1dd48b234a107f1bb1b42e3f305dbbf
30cce56427a910b3ffbd653df53520f4791bc2ae96c22f2091be082439a073d9
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 643
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:16 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: ae617324-188d-4c05-b180-9ac6b946317a
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=30203699017
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=30203699017
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=30203699017 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:15 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 27079e772551b2043f12d9eaacf949ab
1c45d85a60d3a1c7549309d6e0987c059af4ef2e
0282e4cc2127e2601257ca4f23c922eb4a0b90a0edfbef5de57a440702a5bedf
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 643
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:16 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: f8e7a273-44f5-4591-994e-67502cbb4d99
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 06 Oct 2022 18:33:16 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash b84500f81cdb6e80fc92c9f14061aff4
83304d71d0c7ab4489909e98ca8cb0f14eba096c
58ce5c2cbd9daf1f17e8b590a310baea35baea230f1b9461623b813ebef37876
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 641
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:16 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: 00fb80da-7ead-4beb-8948-e1f5c7454b0a
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prg.smartadserver.com/prebid/v1
200 OK 485 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
File type JSON data\012- , ASCII text, with very long lines (1038), with no line terminators
Hash 20640b0b38c578ba1484ae718f0c7177
283c6c691a70a4fb5f17a72fe5ffa72fedddebfb
d6af779003d7802d3892dd2dbc87e0f8004dd8f0b9d7f32cd7b5d89704f8425f
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 354
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Fri, 06 Oct 2023 18:33:16 GMT; domain=.smartadserver.com; path=/
vs=525642=5134713; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Fri, 06 Oct 2023 18:33:16 GMT; domain=.smartadserver.com; path=/
pid=6990381246835587534; expires=Fri, 06 Oct 2023 18:33:16 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638006779961884310&o=1; expires=Fri, 07 Oct 2022 18:33:16 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Fri, 07 Oct 2022 18:33:16 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
prg.smartadserver.com/prebid/v1
200 OK 495 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
File type JSON data\012- , ASCII text, with very long lines (1010), with no line terminators
Hash fa9b6be09f30a69b51de99245c146223
cc435a7633761a9a71bb8e9b8a4b59428f4ae319
6462bc6e71534c7171c620baf6b6b3f814fc46c4a2db3302ffeda5b07abd232d
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 353
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Fri, 06 Oct 2023 18:33:16 GMT; domain=.smartadserver.com; path=/
vs=525642=5134713; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Fri, 06 Oct 2023 18:33:16 GMT; domain=.smartadserver.com; path=/
pid=3831368474902395225; expires=Fri, 06 Oct 2023 18:33:16 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638006779962265477&o=1; expires=Fri, 07 Oct 2022 18:33:16 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Fri, 07 Oct 2022 18:33:16 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 89d9a090d02252e9335e45b2ac85dc79
00b202d1b86d79a47158421f3aca992c939bee1e
b267f1471f06da82247ba4c8f04237c73a2b480fa0093e8613d8c1be565d35b3
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 639
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:16 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: d4216f08-aecf-4d25-b9e2-b82384e385ea
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 06 Oct 2022 18:33:16 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=14325888941
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=14325888941
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=14325888941 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:15 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 06 Oct 2022 18:33:16 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194496&tk_flint=pbjs_lite_v6.15.0&x_source.tid=742d1032-d359-4a9c-94e4-6a880cc2ce08&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6666179963253324
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194496&tk_flint=pbjs_lite_v6.15.0&x_source.tid=742d1032-d359-4a9c-94e4-6a880cc2ce08&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6666179963253324
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 16ea5a6abaa86ef1985fa83abf7059e1
3c8f77c9caa1fbe6d4b4aa5cb4b8fbec71195e84
9ff91b0acb480a3c90ae6cc7b8321482e944dbfab3295ca1ac02049ccef5da4f
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194496&tk_flint=pbjs_lite_v6.15.0&x_source.tid=742d1032-d359-4a9c-94e4-6a880cc2ce08&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6666179963253324 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Thu, 06 Oct 2022 18:33:16 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8XECPLX-13-GM0Y; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:16 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qoY192lNCifS+9DtVM30fCgpihd+i0AGkGp7DuUABCGnnvs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:16 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
prg.smartadserver.com/prebid/v1
200 OK 590 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
File type JSON data\012- , ASCII text, with very long lines (1042), with no line terminators
Hash 0d8efe1469ca5dee71633dcedeb418ac
924cf4705658c18bb62c9f57e7f9b7adadffea30
190ce82e3cc05f8565c7e75b57f5cc0254d8341f1f4e299163914a420791b340
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 352
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Fri, 06 Oct 2023 18:33:16 GMT; domain=.smartadserver.com; path=/
vs=525642=5134713; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Fri, 06 Oct 2023 18:33:16 GMT; domain=.smartadserver.com; path=/
pid=4976256694153640328; expires=Fri, 06 Oct 2023 18:33:16 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638006779962599153&o=1; expires=Fri, 07 Oct 2022 18:33:16 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Fri, 07 Oct 2022 18:33:16 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194484&tk_flint=pbjs_lite_v6.15.0&x_source.tid=121f0636-b7cc-4e11-8929-db3f9d5e3eb0&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.07578951161583736
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194484&tk_flint=pbjs_lite_v6.15.0&x_source.tid=121f0636-b7cc-4e11-8929-db3f9d5e3eb0&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.07578951161583736
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 89cb9c69a0926c185bc9784e3355cf35
a60617c2eba960834276fb510f5069127253d9a1
ff997a499ab55a4f669cdd9ce657418a64a283a3f723e5e736bb45657c972533
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194484&tk_flint=pbjs_lite_v6.15.0&x_source.tid=121f0636-b7cc-4e11-8929-db3f9d5e3eb0&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.07578951161583736 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Thu, 06 Oct 2022 18:33:16 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8XECPNC-1A-AJYM; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:16 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qq4eATFuVLUoe9DtVM30fCgpihd+i0AGkGp7DuUABCGnnvs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:16 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=62487313234
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=62487313234
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=62487313234 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:15 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=42423670235
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=42423670235
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=42423670235 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:16 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194492&tk_flint=pbjs_lite_v6.15.0&x_source.tid=44d00b2a-b1d8-4d28-8d1b-1b48f1611279&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.3471064905847181
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194492&tk_flint=pbjs_lite_v6.15.0&x_source.tid=44d00b2a-b1d8-4d28-8d1b-1b48f1611279&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.3471064905847181
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 6819a799ed51528978c0bcd5267d3775
3336c84de33db63f22a56edc0c80882902dc7b85
1569a44f516f25025a540a3487232bdf5efd940f7b2fb68c86aede1cc5658ac7
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194492&tk_flint=pbjs_lite_v6.15.0&x_source.tid=44d00b2a-b1d8-4d28-8d1b-1b48f1611279&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.3471064905847181 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Thu, 06 Oct 2022 18:33:16 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8XECPOJ-1Z-282I; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:16 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qodFkV0N9U6SO9DtVM30fCgpihd+i0AGkGp7DuUABCGnnvs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:16 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7665ad7c2402e7cd7f44f9bbc5c87aef
332b37651395ed8810fd092f11cbe31f10662265
4157d2aea79392b9a140270f8f2a8ef786adb8a6a31ee9a75c225c049163cec1
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 641
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:16 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: 40ab68cb-2956-4c98-a92c-1156aa68ff33
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=69317223919
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=69317223919
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=69317223919 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:15 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 584 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
File type JSON data\012- , ASCII text, with very long lines (1127), with no line terminators
Hash d5ebbea889d1a120dd6179f201e883ca
7d64b5c85a6ccae55ddd2394c218879b38f5e6cc
6787fd7569d5d1621e16c44a570d07ae508096ff8a208c821e9c799264d99f58
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 351
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Thu, 06 Oct 2022 18:33:16 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Fri, 06 Oct 2023 18:33:16 GMT; domain=.smartadserver.com; path=/
vs=525642=5134713; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Fri, 06 Oct 2023 18:33:16 GMT; domain=.smartadserver.com; path=/
pid=420801985293318633; expires=Fri, 06 Oct 2023 18:33:16 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638006779962994653&o=1; expires=Fri, 07 Oct 2022 18:33:16 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Fri, 07 Oct 2022 18:33:16 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 06 Oct 2022 18:33:16 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=71368998196
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=71368998196
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=71368998196 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:15 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 2bf5d112f456bf644c7827a5d9317f06
f2f88da534c32ae3f15a03217e3de54be216b91c
3b39c0d8e2171b9c045c5cb086300a5307c9488e1a4b535cb600553ca91c73e8
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 641
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:16 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: d3856591-8a29-4467-9107-c2442c6af371
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ib.adnxs.com/ut/v3/prebid
200 OK 145 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0d8092b6c573468521b93efd47b9d9fa
3d00766303c7791eae86c3b54d24a84a10a8915f
199c4dd6a3bef9145901c47f5c19883c57f5d7ecea64c402ac3142e54b21b2eb
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 642
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:16 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 145
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: 22388713-552a-433d-9b47-b2e4cec9241f
Set-Cookie: icu=ChkIv46FARAKGAEgASgBMOy-_JkGOAFAAUgBEOy-_JkGGAA.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 04-Jan-2023 18:33:16 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=4193577608535133531; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 04-Jan-2023 18:33:16 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prg.smartadserver.com/prebid/v1
200 OK 668 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
File type JSON data\012- , ASCII text, with very long lines (1369), with no line terminators
Hash 4e7e4923931663de08eeb96bfae3d51d
9590d8ebef8fd59e73bf86ba6c3f0d74e0fb8e35
ee81da01d273a3b3b978596d8af7db6bd5be271f708bc7654e2e81f2dc7ec237
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 353
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Fri, 06 Oct 2023 18:33:16 GMT; domain=.smartadserver.com; path=/
vs=525642=5134713; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Fri, 06 Oct 2023 18:33:16 GMT; domain=.smartadserver.com; path=/
pid=4379502693823019396; expires=Fri, 06 Oct 2023 18:33:16 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638006779964083350&o=1; expires=Fri, 07 Oct 2022 18:33:16 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Fri, 07 Oct 2022 18:33:16 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194523&tk_flint=pbjs_lite_v6.15.0&x_source.tid=b6cf4350-49c3-46de-bac6-2e88ce93d69b&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.10233238833625657
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194523&tk_flint=pbjs_lite_v6.15.0&x_source.tid=b6cf4350-49c3-46de-bac6-2e88ce93d69b&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.10233238833625657
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 7ab2219306c172067634c75ac340976f
2be10ed107344570cb1b35c1a03f0663c335860c
7bba95a57cb6d954603c515fec5854a1663a084b507a3188ef2ecbccc0bb9e1c
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194523&tk_flint=pbjs_lite_v6.15.0&x_source.tid=b6cf4350-49c3-46de-bac6-2e88ce93d69b&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.10233238833625657 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Thu, 06 Oct 2022 18:33:16 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8XECPQM-7-LI01; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:16 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qqvH0CqUNzneu9DtVM30fCgpihd+i0AGkGp7DuUABCGnnvs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:16 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 06 Oct 2022 18:33:16 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 06 Oct 2022 18:33:16 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194527&tk_flint=pbjs_lite_v6.15.0&x_source.tid=7c4c7a38-f950-4123-bc88-4d40830bac00&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.5107989882358037
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194527&tk_flint=pbjs_lite_v6.15.0&x_source.tid=7c4c7a38-f950-4123-bc88-4d40830bac00&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.5107989882358037
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 6f54c84ef622a65bca127587edeceef3
399aa44a2c1d92365133c0af56cdd69957bd2954
7c8a58b8820870d3c0f93bb3fc3db1f510856d23cdc81dc5423f483ad7bab247
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194527&tk_flint=pbjs_lite_v6.15.0&x_source.tid=7c4c7a38-f950-4123-bc88-4d40830bac00&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.5107989882358037 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Thu, 06 Oct 2022 18:33:16 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8XECPRL-25-I2YM; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:16 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qqBQAOHg+QljO9DtVM30fCgpihd+i0AGkGp7DuUABCGnnvs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:16 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=12076721735
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=12076721735
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=12076721735 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:16 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 474 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
File type JSON data\012- , ASCII text, with very long lines (823), with no line terminators
Hash 15a10a9dbc7cb8eaa25a8a4405380c02
b3d5c230b7e7e1b1f9ad8b15b4087fcc08be4efb
e541b7738ce592d7f51bfef4e8e52477e25325562331439869e05cb85e0a30a6
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 353
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Fri, 06 Oct 2023 18:33:16 GMT; domain=.smartadserver.com; path=/
vs=525642=5134713; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Fri, 06 Oct 2023 18:33:16 GMT; domain=.smartadserver.com; path=/
pid=8608588803569875347; expires=Fri, 06 Oct 2023 18:33:16 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638006779964515270&o=1; expires=Fri, 07 Oct 2022 18:33:16 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Fri, 07 Oct 2022 18:33:16 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
prg.smartadserver.com/prebid/v1
200 OK 521 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
File type JSON data\012- , ASCII text, with very long lines (1060), with no line terminators
Hash b73177e1ff7a8543b6e665b66b401d8e
0d0968564a3576740f3b0908dd5d8a45427b3ed6
347727ee0290c070364d56bfc5c105041306fc8ba634dc9272848a4bc3438b4b
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 351
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Fri, 06 Oct 2023 18:33:16 GMT; domain=.smartadserver.com; path=/
vs=525642=5134713; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Fri, 06 Oct 2023 18:33:16 GMT; domain=.smartadserver.com; path=/
pid=2568039879559608790; expires=Fri, 06 Oct 2023 18:33:16 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638006779963776355&o=1; expires=Fri, 07 Oct 2022 18:33:16 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Fri, 07 Oct 2022 18:33:16 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194509&tk_flint=pbjs_lite_v6.15.0&x_source.tid=85eb8223-ca77-490a-b488-fdf3299dcbc8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6637477886672046
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194509&tk_flint=pbjs_lite_v6.15.0&x_source.tid=85eb8223-ca77-490a-b488-fdf3299dcbc8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6637477886672046
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 382e8029c2cfd1f28be34ff5158f86c3
ecbdf61c01e8970a5ca8c2139893332d32943341
9891b4f268a4cb4cf7f91e691d1ce11346ae5a3b39053f01f040886575f43a5b
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194509&tk_flint=pbjs_lite_v6.15.0&x_source.tid=85eb8223-ca77-490a-b488-fdf3299dcbc8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6637477886672046 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Thu, 06 Oct 2022 18:33:16 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8XECPSF-1O-HWKS; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:16 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|SDziDG3X/Ej6VZAEg1rVgO9DtVM30fCgpihd+i0AGkGp7DuUABCGnnvs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:16 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash b8d5120a77be8edd98172d9f3fdf0c48
46f5194f311692f23dc4f8ac8d60c1136bbb567c
906582b3fd066c4421461e3839c173101fd12184f051d68c516e0661b39c5688
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 643
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:16 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: b8606011-456e-4ff6-867f-df0c4a556aba
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f23603c05228b8a0f51b2709f60dbdd7
1dab397947545fc3ac73f637304847aa575d7138
125ea0df8256fb44dfdcfe2c519be6b89288cf7862619bbdc0031bf355d088aa
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 642
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:16 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
AN-X-Request-Uuid: 1af90deb-29ae-4c8e-82c3-d9fad81cd19e
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=4362627968
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=4362627968
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=4362627968 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 460
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:16 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://flashnetic.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 06 Oct 2022 18:33:16 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 06 Oct 2022 18:33:16 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 498 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
File type JSON data\012- , ASCII text, with very long lines (843), with no line terminators
Hash ffc5f973886c674944bb97449c1f7e98
99cba8bd81a8f9902cd57f7bd107c9667faca639
a155f0b5c1431396ba5a14e1f5a338b7eccd12dffa419cb1254504cd17d4059e
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 352
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Thu, 06 Oct 2022 18:33:15 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Fri, 06 Oct 2023 18:33:16 GMT; domain=.smartadserver.com; path=/
vs=525642=5134713; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Fri, 06 Oct 2023 18:33:16 GMT; domain=.smartadserver.com; path=/
pid=1675950446053685622; expires=Fri, 06 Oct 2023 18:33:16 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638006779965571200&o=1; expires=Fri, 07 Oct 2022 18:33:16 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Fri, 07 Oct 2022 18:33:16 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 504
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 06 Oct 2022 18:33:16 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://flashnetic.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194514&tk_flint=pbjs_lite_v6.15.0&x_source.tid=1d9359d8-e904-44e6-8523-8ee059d1ca98&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.42822311002292224
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194514&tk_flint=pbjs_lite_v6.15.0&x_source.tid=1d9359d8-e904-44e6-8523-8ee059d1ca98&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.42822311002292224
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 77aaed0db293e2012bf28ba449e3a747
7c95fb926e090c8e6e13348677a9b58fa775f7d7
084ebc2afed5e7532f16bebdfc3ae6608a835363cfc6c6a4e31283ce328b9d86
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194514&tk_flint=pbjs_lite_v6.15.0&x_source.tid=1d9359d8-e904-44e6-8523-8ee059d1ca98&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.42822311002292224 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Thu, 06 Oct 2022 18:33:16 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8XECPV9-O-5NJ1; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:16 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qrkzSSSAcf+oO9DtVM30fCgpihd+i0AGkGp7DuUABCGnnvs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:16 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194501&tk_flint=pbjs_lite_v6.15.0&x_source.tid=5891973e-0640-4f04-9725-f244d8be4d59&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.008160254776906184
200 OK 310 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194501&tk_flint=pbjs_lite_v6.15.0&x_source.tid=5891973e-0640-4f04-9725-f244d8be4d59&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.008160254776906184
IP
File type JSON data\012- , ASCII text, with very long lines (310), with no line terminators
Hash 7e32907360c7696939692c53e77cdf6d
10360daaffdb5519ff95bd948258b6d07c471f9a
7c0b349e361bfeb395f3aef1b37173f391ee2ebba8df4c59cd2f6ecc7a25f09f
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2226136&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2F&tg_i.pbadslot=adpn-adtag-1665081194501&tk_flint=pbjs_lite_v6.15.0&x_source.tid=5891973e-0640-4f04-9725-f244d8be4d59&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.008160254776906184 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Thu, 06 Oct 2022 18:33:16 GMT
Content-Type: application/json
Content-Length: 310
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://flashnetic.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8XECPUU-1T-6TG9; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:16 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qpa1nCGijYYDe9DtVM30fCgpihd+i0AGkGp7DuUABCGnnvs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:16 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
prg.smartadserver.com/prebid/v1
200 OK 596 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
File type JSON data\012- , ASCII text, with very long lines (1123), with no line terminators
Hash 6832dd94a1cd9cec8f12b63a8722dde7
3c13f65e6519d6b0f0db236134dc3c87b6e0024e
121ff134ce3a696a31ed88759ab7dcd6932e8c1e716b3b873755b6264667b817
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 352
Origin: https://flashnetic.com
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Thu, 06 Oct 2022 18:33:16 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://flashnetic.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Fri, 06 Oct 2023 18:33:16 GMT; domain=.smartadserver.com; path=/
vs=525642=5134713; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Fri, 06 Oct 2023 18:33:16 GMT; domain=.smartadserver.com; path=/
pid=789022695654160642; expires=Fri, 06 Oct 2023 18:33:16 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638006779965186712&o=1; expires=Fri, 07 Oct 2022 18:33:16 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Fri, 07 Oct 2022 18:33:16 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
csync.loopme.me/?redirect=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D124%26partneruserid%3D%7Bdevice_id%7D&gdpr=0&gdpr_consent=
204 No Content 0 B URL HTTP/2 csync.loopme.me/?redirect=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D124%26partneruserid%3D%7Bdevice_id%7D&gdpr=0&gdpr_consent=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?redirect=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D124%26partneruserid%3D%7Bdevice_id%7D&gdpr=0&gdpr_consent= HTTP/1.1
Host: csync.loopme.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Thu, 06 Oct 2022 18:33:17 GMT
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 75607c0a58efb4ee-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash da24c3d35c9aa2a337a9a13ce1c0a8b6
f2de820375a4a3ba63e75bb07b4c1512ee847375
86358a176fd39e47744821766b318dcf7dd4aa9903f27b6221ea55075c3f5655
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3950
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:17 GMT
Last-Modified: Thu, 06 Oct 2022 17:27:27 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 313
c1.adform.net/serving/cookie/match?party=10&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D22%26partneruserid%3DYOUR_USER_ID&gdpr=0&gdpr_consent=
302 Found 0 B URL HTTP/2 c1.adform.net/serving/cookie/match?party=10&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D22%26partneruserid%3DYOUR_USER_ID&gdpr=0&gdpr_consent=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /serving/cookie/match?party=10&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D22%26partneruserid%3DYOUR_USER_ID&gdpr=0&gdpr_consent= HTTP/1.1
Host: c1.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Thu, 06 Oct 2022 18:33:17 GMT
content-length: 0
location: https://c1.adform.net/serving/cookie/match?CC=1&party=10&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D22%26partneruserid%3DYOUR_USER_ID&gdpr=0&gdpr_consent=
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
set-cookie: C=1; expires=Sun, 06 Nov 2022 18:33:17 GMT; domain=adform.net; path=/
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
secure.adnxs.com/getuid?https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D86%26partneruserid%3D$UID&gdpr=0&gdpr_consent=
307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/getuid?https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D86%26partneruserid%3D$UID&gdpr=0&gdpr_consent=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D86%26partneruserid%3D$UID&gdpr=0&gdpr_consent= HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:17 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Frtb-csync.smartadserver.com%252Fredir%252F%253Fissi%253D1%2526partnerid%253D86%2526partneruserid%253D%24UID%26gdpr%3D0%26gdpr_consent%3D
AN-X-Request-Uuid: fcd2a40c-d657-4063-9c52-ae80f4f477e7
Set-Cookie: uuid2=2461604283462300814; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 04-Jan-2023 18:33:17 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 952.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ocsp.sectigo.com/
200 OK 472 B IP
Hash b47a9f637b1b5bc09e67cbabec54c59e
8c2935a998b135b0f97bcdd183a9c668c5ce948c
a6b00c8d1c535d8f8d72dbb178952040f97b80ca9144419c8a248235e77c766d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 18:33:17 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 06 Oct 2022 14:08:00 GMT
Expires: Thu, 13 Oct 2022 14:07:59 GMT
Etag: "8c2935a998b135b0f97bcdd183a9c668c5ce948c"
Cache-Control: max-age=588281,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75607c0b2ec51c0e-OSL
rtb-csync.smartadserver.com/redir/?issi=1&partnerid=135&partneruserid=TAM_OK&redirurl=https%3A%2F%2Fs.amazon-adsystem.com%2Fdcm%3Fpid%3D72348060-38ad-4586-8e4f-f1e2a8e789b3%26id%3DSMART_USER_ID&gdpr=0&gdpr_consent=
302 Found 0 B URL HTTP/1.1 rtb-csync.smartadserver.com/redir/?issi=1&partnerid=135&partneruserid=TAM_OK&redirurl=https%3A%2F%2Fs.amazon-adsystem.com%2Fdcm%3Fpid%3D72348060-38ad-4586-8e4f-f1e2a8e789b3%26id%3DSMART_USER_ID&gdpr=0&gdpr_consent=
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redir/?issi=1&partnerid=135&partneruserid=TAM_OK&redirurl=https%3A%2F%2Fs.amazon-adsystem.com%2Fdcm%3Fpid%3D72348060-38ad-4586-8e4f-f1e2a8e789b3%26id%3DSMART_USER_ID&gdpr=0&gdpr_consent= HTTP/1.1
Host: rtb-csync.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
content-length: 0
date: Thu, 06 Oct 2022 18:33:17 GMT
cache-control: no-cache,no-store
location: https://s.amazon-adsystem.com/dcm?pid=72348060-38ad-4586-8e4f-f1e2a8e789b3&id=6909554343191509474&gdpr=0&gdpr_consent=
pragma: no-cache
set-cookie: pid=6909554343191509474; expires=Mon, 06 Nov 2023 18:33:17 GMT; domain=smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 06 Nov 2023 18:33:17 GMT; domain=smartadserver.com; path=/
csync=135:TAM_OK; expires=Fri, 06 Oct 2023 18:33:17 GMT; domain=smartadserver.com; path=/
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
sync.tidaltv.com/genericusersync.ashx?dpid=3157&gdpr=0&gdpr_consent=
302 Found 0 B URL HTTP/2 sync.tidaltv.com/genericusersync.ashx?dpid=3157&gdpr=0&gdpr_consent=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /genericusersync.ashx?dpid=3157&gdpr=0&gdpr_consent= HTTP/1.1
Host: sync.tidaltv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 06 Oct 2022 18:33:17 GMT
content-length: 0
location: https://sync.tidaltv.com/genericusersync.ashx?dpid=3157&gdpr=0&gdpr_consent=&s_h=1
set-cookie: tidal_ttid=9cbea58f-af3e-4397-be4b-909d85c607a2; Domain=.tidaltv.com; Expires=Fri, 06-Oct-2023 18:33:17 GMT; Path=/; SameSite=None; Secure
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0ef5ba5f414b83617d61af4f484f98aa
23120bd70c1c5eff0751314ab6c91394206d93e1
1580e3a923221302354bb92b547039a3b90d392f4df80911613ffae494fa65e3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1580E3A923221302354BB92B547039A3B90D392F4DF80911613FFAE494FA65E3"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5136
Expires: Thu, 06 Oct 2022 19:58:53 GMT
Date: Thu, 06 Oct 2022 18:33:17 GMT
Connection: keep-alive
static.criteo.net/js/ld/publishertag.prebid.123.js
200 OK 29 kB URL HTTP/2 static.criteo.net/js/ld/publishertag.prebid.123.js
IP
Hash 7a6fdd05ac6ac7b8a71997a78cbb3633
72d708d5ba7afaeb03147b84313b6c0c785ab7af
96cd122fd15e9677a8c408affce88d87b49223ddc608c598c23874e9af2bb5f9
GET /js/ld/publishertag.prebid.123.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 18:33:17 GMT
content-type: text/javascript
last-modified: Tue, 03 May 2022 11:21:03 GMT
etag: W/"6271101f-15b58"
expires: Fri, 07 Oct 2022 18:33:17 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 9f8f8a3f67361fc3e56404f7277f6fc5
3da05443dbab3355419edb7e429f9da8695d65bb
95fc855557cde36c4a41df0572f5f6fb68a3982e567e292488991f4d20ea3413
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 18:33:17 GMT
Last-Modified: Thu, 06 Oct 2022 16:44:48 GMT
Server: ECS (bsa/EB23)
X-Cache: Miss from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: u9rY1etxvpu1vQuvuYwU-Q4ajd1AyZTg0Le9pzikxhXdW2wCSsVS1g==
Age: 6509
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 03c084e296160b70d4e74411194a575c
65bda98055bd9fffc746db4ab9fd246d5fe96ccb
dfb8cbc0aa892c5a84efb121b34445b4f2d997a194c73ee58bbd1980b86fb5a3
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 668
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:17 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://earnme.club
AN-X-Request-Uuid: 56ad5736-5b3d-4537-b9b6-b9d1f07300a4
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f8912a1bd7035e0dc3c54f6362d1c505
58103438404973bce19b3c8888030c002f99c777
4aa07aad22708412161b234aac1b2a5a065b0488f7afcafffd432cff68468645
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AA07AAD22708412161B234AAC1B2A5A065B0488F7AFCAFFFD432CFF68468645"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4997
Expires: Thu, 06 Oct 2022 19:56:34 GMT
Date: Thu, 06 Oct 2022 18:33:17 GMT
Connection: keep-alive
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash e034b84ec9b063f236c53c918a562082
b5e0e75c7fac674ad457c0b935354a2832b0e499
01b575dfe803715ae641bfcdab4fa6c8807de7942eb0d35ecdcb8f5fe2372be7
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 857
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:17 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://earnme.club
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 36cddefe83f0dbb5e17ea8745c931685
1a2e210f2fba95448b89b6eaf7931f9d887635f1
2f6fdfb59f0eed2e21ff69ae51e762b32cd261529e4c8235a7cf7ad4036cd2bb
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 667
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:18 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://earnme.club
AN-X-Request-Uuid: 2ec33620-483f-4f11-a342-db39e19d439f
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash c485b838053a8014d622bd6024ccc5b3
a0f0ea98a833098686d10222e3bac33d0ed7f15d
9b857f61219560f0de967a279e33b0914ebb9e4081d55d60c08be854c2213be5
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 18:33:18 GMT
Last-Modified: Thu, 06 Oct 2022 16:45:37 GMT
Server: ECS (bsa/EB12)
X-Cache: Miss from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: QySxEw_EfT4b3DNaFCQQMGiuJEs7zJ9jxCH1NwNwf2wYyqdN3cLjjg==
Age: 6461
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash ffeed77fda9bf2c0d702dc23f203fd81
241f1b322f991ee58f8880e96c872b5596932de1
490aea90c4c20711478a6899a9b0982c025f203f43294129e5e8ea94451f15a5
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 858
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:18 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://earnme.club
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
204 No Content 0 B URL HTTP/2 btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1
Host: btlr.sharethrough.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 692
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Thu, 06 Oct 2022 18:33:18 GMT
vary: Origin
cache-control: private, no-cache, no-store, must-revalidate
access-control-allow-origin: https://earnme.club
access-control-allow-credentials: true
X-Firefox-Spdy: h2
btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
204 No Content 0 B URL HTTP/2 btlr.sharethrough.com/universal/v1?supply_id=WYu2BXv1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1
Host: btlr.sharethrough.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 692
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Thu, 06 Oct 2022 18:33:18 GMT
vary: Origin
cache-control: private, no-cache, no-store, must-revalidate
access-control-allow-origin: https://earnme.club
access-control-allow-credentials: true
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.28.0&cb=71422242076
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.28.0&cb=71422242076
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.28.0&cb=71422242076 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 508
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:17 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://earnme.club
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f42b0e1163107cc9e2fc21bc541568c7
4b3d188188db732ce0b955c63bd87a31fc317beb
b179bc6e15a0b6dd3c1d3c2b577b47031ab12a25b8fc36d8d216b07167f3468b
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 737
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:18 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://earnme.club
AN-X-Request-Uuid: 8db0089b-3c7b-4698-9549-fbac579658e4
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prebid-eu.creativecdn.com/bidder/prebid/bids
204 No Content 0 B URL HTTP/2 prebid-eu.creativecdn.com/bidder/prebid/bids
IP
ASN #204995 Rtb House S.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bidder/prebid/bids HTTP/1.1
Host: prebid-eu.creativecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 548
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Thu, 06 Oct 2022 18:33:18 GMT
access-control-allow-origin: https://earnme.club
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-max-age: 3600
vary: Origin
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 638
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 06 Oct 2022 18:33:18 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://earnme.club
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 494 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
File type JSON data\012- , ASCII text, with very long lines (1051), with no line terminators
Hash b67d664a3f13916878a259967a846777
f08b828938d8289eca30c00006475a5854a2a846
51aba189908d49419c793403f4643c9b6d9910471a51d3f891ffe96dbde6285e
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 413
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Thu, 06 Oct 2022 18:33:17 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://earnme.club
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Fri, 06 Oct 2023 18:33:18 GMT; domain=.smartadserver.com; path=/
vs=527998=5134713; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Fri, 06 Oct 2023 18:33:18 GMT; domain=.smartadserver.com; path=/
pid=1605394265208256854; expires=Fri, 06 Oct 2023 18:33:18 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638006779983150957&o=1; expires=Fri, 07 Oct 2022 18:33:18 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Fri, 07 Oct 2022 18:33:18 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
imasdk.googleapis.com/js/sdkloader/ima3.js
200 OK 130 kB URL HTTP/2 imasdk.googleapis.com/js/sdkloader/ima3.js
IP
File type ASCII text, with very long lines (2831)
Size 130 kB (129536 bytes)
Hash 3d0f6d436384df600244a0f2ba1b3e08
e5978d4cf46a61adf7e51db33a0cba5d339abac7
a3028c2c6138f0a5bc21f797cf50a3407a9527521c24b0fbed8bc440c204a4cd
GET /js/sdkloader/ima3.js HTTP/1.1
Host: imasdk.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-doubleclick-instream-static"
report-to: {"group":"ads-doubleclick-instream-static","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static"}]}
content-length: 129536
date: Thu, 06 Oct 2022 18:33:18 GMT
expires: Thu, 06 Oct 2022 18:33:18 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&tg_i.page=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&tg_i.domain=earnme.club&tg_i.pbadslot=%2F21671350435%2C22687820958%2F300x250-earnme.club_._2&tk_flint=pbjs_lite_v6.28.0&x_source.tid=bfd773c4-ee02-4505-b0ca-c89f2179ba97&l_pb_bid_id=124682ae33f39e48&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.5360334762025063
200 OK 472 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&tg_i.page=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&tg_i.domain=earnme.club&tg_i.pbadslot=%2F21671350435%2C22687820958%2F300x250-earnme.club_._2&tk_flint=pbjs_lite_v6.28.0&x_source.tid=bfd773c4-ee02-4505-b0ca-c89f2179ba97&l_pb_bid_id=124682ae33f39e48&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.5360334762025063
IP
File type JSON data\012- , ASCII text, with very long lines (472), with no line terminators
Hash 9d2631421378e2b35e3d76e3d4f4b7e9
0db049b899c70f47d36fbff506c085e90645a3a2
d4ae15b9921fd124aa6fd963f62dfb1bcc30f2b6f3d4a652879169ad65baf473
GET /a/api/fastlane.json?account_id=17210&site_id=397268&zone_id=2229032&size_id=15&p_pos=atf&rp_schain=1.0,1!adpone.com,a1ea75ec94e5611d58bc,1,,,&rf=earnme.club&tg_i.ref=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&tg_i.page=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&tg_i.domain=earnme.club&tg_i.pbadslot=%2F21671350435%2C22687820958%2F300x250-earnme.club_._2&tk_flint=pbjs_lite_v6.28.0&x_source.tid=bfd773c4-ee02-4505-b0ca-c89f2179ba97&l_pb_bid_id=124682ae33f39e48&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.5360334762025063 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Thu, 06 Oct 2022 18:33:18 GMT
Content-Type: application/json
Content-Length: 472
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://earnme.club
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L8XECR8N-1U-F35P; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:18 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|SDziDG3X/EihNRlrBtuo1+9DtVM30fCgpihd+i0AGkE6LJhuaFuu8nvs5xm8c681tq9R0N6+0FRpWVHBsUSA99APlTu0R9RN; Domain=.rubiconproject.com; Path=/; Expires=Fri, 06-Oct-2023 18:33:18 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 44381f402cb7aee5a35bf0c47aa2f6e6
f3934c9f2cdd0631645e92182feb48ddc6a33be4
6378f7e2af542d06e25f4223af36e7fa2db0ce0c13963f411adcfd19ee10cca7
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 736
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:18 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://earnme.club
AN-X-Request-Uuid: df6e1ef6-1159-4f5a-aea2-e0bd450a527a
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 38a407d98a4634fbb702a2b805a7be7a
4f6531e3ba92ea4aec62809f3ab61d62e64709ca
d18f38d5d9e55d4578e8e0dc6e508154c78589836b8184bea6601dd1dcb0aeeb
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 858
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:18 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://earnme.club
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=vpuukgbaw&e=1810590574682
200 OK 7.1 kB URL HTTP/2 flashnetic.com/r/p.html?f=vpuukgbaw&e=1810590574682
IP
File type HTML document, ASCII text
Hash 054c04b302b12dc6f4d7fc3b11ead522
e310a8b2ab2491c31e53c67cf05234631a31d52e
0126c0652b23a7bcf6f68dc154870dd70f5b7609471dcc121246911caf3b95cf
GET /r/p.html?f=vpuukgbaw&e=1810590574682 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: b6Ojn0LoNF_PyCYbZziVFiSYzrYhw9Z6L7Lz5gDVPOSZqmv3ex40Lw==
age: 23127
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=vjakfomr&e=1810590574682
200 OK 7.1 kB URL HTTP/2 flashnetic.com/r/p.html?f=vjakfomr&e=1810590574682
IP
File type HTML document, ASCII text
Hash 054c04b302b12dc6f4d7fc3b11ead522
e310a8b2ab2491c31e53c67cf05234631a31d52e
0126c0652b23a7bcf6f68dc154870dd70f5b7609471dcc121246911caf3b95cf
GET /r/p.html?f=vjakfomr&e=1810590574682 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Han7tPknuP5v5dFKPLvB73vn9iUri3_PeUY3Bd2HPDfOcAsRyfDH-w==
age: 23127
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=abovtyga&e=1810590574682
200 OK 2.6 kB URL HTTP/2 flashnetic.com/r/p.html?f=abovtyga&e=1810590574682
IP
File type HTML document, ASCII text
Hash e98138d0a5ed9e36ded3a117797ceed4
69b2b32f54e98dd6fa587d0823711ff4a0e01cdf
72f01075dff1101606ca7c25f50d5834afbe244c0143550dd9299acd3ce75644
GET /r/p.html?f=abovtyga&e=1810590574682 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RWAfBPdzIpxZ-WYWBmSyMTiqF5oI3pbYEFnqhX0zf5kL9aIEwsbJng==
age: 23127
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=rbvjibz&e=1810590574682
200 OK 2.1 kB URL HTTP/2 flashnetic.com/r/p.html?f=rbvjibz&e=1810590574682
IP
File type HTML document, ASCII text
Hash ebbb38b35e216c34f1b6f2ff5a76d027
be76e32aec58bbd7506da1e46232a1b4fb6b5690
93318fc935fe9ebb5551247f79ec837d6447ef44bada5237c25656ede46bcddf
GET /r/p.html?f=rbvjibz&e=1810590574682 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jaAC_egu8zIUYRrkTmYRd5oPWR3gCOtdK7SPsqpPW9vfQD5AE4cSkw==
age: 23127
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
id5-sync.com/i/102/9.gif?gdpr=0&gdpr_consent=
200 43 B URL HTTP/1.1 id5-sync.com/i/102/9.gif?gdpr=0&gdpr_consent=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /i/102/9.gif?gdpr=0&gdpr_consent= HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
p3p: CP="CAO PSA OUR"
set-cookie: cf=; Max-Age=300; Expires=Thu, 06-Oct-2022 18:38:18 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
cip=; Max-Age=300; Expires=Thu, 06-Oct-2022 18:38:18 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
cnac=; Max-Age=300; Expires=Thu, 06-Oct-2022 18:38:18 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
car=; Max-Age=300; Expires=Thu, 06-Oct-2022 18:38:18 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
gdpr=; Max-Age=300; Expires=Thu, 06-Oct-2022 18:38:18 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
callback=; Max-Age=300; Expires=Thu, 06-Oct-2022 18:38:18 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
content-type: image/gif;charset=UTF-8
transfer-encoding: chunked
date: Thu, 06 Oct 2022 18:33:18 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
flashnetic.com/r/p.html?f=pbusewyto&e=1810590574682
200 OK 2.1 kB URL HTTP/2 flashnetic.com/r/p.html?f=pbusewyto&e=1810590574682
IP
File type HTML document, ASCII text
Hash ebbb38b35e216c34f1b6f2ff5a76d027
be76e32aec58bbd7506da1e46232a1b4fb6b5690
93318fc935fe9ebb5551247f79ec837d6447ef44bada5237c25656ede46bcddf
GET /r/p.html?f=pbusewyto&e=1810590574682 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TiIhxOWGlzUFlLn6USVhVVLF0jDN3rLT6UDA3dJxpEIxSUiPN9DSYw==
age: 23127
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=lcuwhwals&e=1810590574682
200 OK 2.1 kB URL HTTP/2 flashnetic.com/r/p.html?f=lcuwhwals&e=1810590574682
IP
File type HTML document, ASCII text
Hash ebbb38b35e216c34f1b6f2ff5a76d027
be76e32aec58bbd7506da1e46232a1b4fb6b5690
93318fc935fe9ebb5551247f79ec837d6447ef44bada5237c25656ede46bcddf
GET /r/p.html?f=lcuwhwals&e=1810590574682 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 50l0e2UwjP7whmdhI1GbxAQCYIoymNiPE7Rjk5M67E5p6pLoVgMf7Q==
age: 23127
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Frtb-csync.smartadserver.com%252Fredir%252F%253Fissi%253D1%2526partnerid%253D86%2526partneruserid%253D%24UID%26gdpr%3D0%26gdpr_consent%3D
302 Found 0 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Frtb-csync.smartadserver.com%252Fredir%252F%253Fissi%253D1%2526partnerid%253D86%2526partneruserid%253D%24UID%26gdpr%3D0%26gdpr_consent%3D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Frtb-csync.smartadserver.com%252Fredir%252F%253Fissi%253D1%2526partnerid%253D86%2526partneruserid%253D%24UID%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:18 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=86&partneruserid=0&gdpr=0&gdpr_consent=
AN-X-Request-Uuid: 51bc5d84-7876-43c4-a356-466d144c1731
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 952.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
c1.adform.net/serving/cookie/match?CC=1&party=10&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D22%26partneruserid%3DYOUR_USER_ID&gdpr=0&gdpr_consent=
200 OK 98 B URL HTTP/2 c1.adform.net/serving/cookie/match?CC=1&party=10&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D22%26partneruserid%3DYOUR_USER_ID&gdpr=0&gdpr_consent=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 5efd5213caa6c49fc497d065678b4fa0
427daa98cf4b7460c65a4aa36c7c0843e85f0851
1978f0051bcfd1dcc3a6215cc946fa427703c94f530b63367e4dbe7fa827735a
GET /serving/cookie/match?CC=1&party=10&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D22%26partneruserid%3DYOUR_USER_ID&gdpr=0&gdpr_consent= HTTP/1.1
Host: c1.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 18:33:18 GMT
content-type: image/gif
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/omsdk/releases/live/omweb-v1.js
200 OK 13 kB URL HTTP/2 pagead2.googlesyndication.com/omsdk/releases/live/omweb-v1.js
IP
File type ASCII text, with very long lines (1977)
Hash 64bb7f59803ae6130d8f160e9b5caea8
e9f34d7bf416e6719b9a6da7e6d72804afdeecfd
dd71fb7acce37bb1b1c4a943d3e226ada9df7ab2b7ed93b9d0ed33c8d98c4f8d
GET /omsdk/releases/live/omweb-v1.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/omsdk-team-release-policy
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="omsdk-team-release-policy"
report-to: {"group":"omsdk-team-release-policy","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/omsdk-team-release-policy"}]}
content-length: 12926
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 06 Oct 2022 18:10:08 GMT
expires: Thu, 06 Oct 2022 19:10:08 GMT
cache-control: public, max-age=3600
age: 1390
last-modified: Tue, 19 Jul 2022 21:40:00 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=oxeuibaw&e=1810590574682
200 OK 2.1 kB URL HTTP/2 flashnetic.com/r/p.html?f=oxeuibaw&e=1810590574682
IP
File type HTML document, ASCII text
Hash ebbb38b35e216c34f1b6f2ff5a76d027
be76e32aec58bbd7506da1e46232a1b4fb6b5690
93318fc935fe9ebb5551247f79ec837d6447ef44bada5237c25656ede46bcddf
GET /r/p.html?f=oxeuibaw&e=1810590574682 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QusM0oRNQjLSnTpyZ76oXc9wFxKy1bH0adsY6rAi02wdtNDyxVPVJA==
age: 23127
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=dcvdfxmas&e=1810590574682
200 OK 2.1 kB URL HTTP/2 flashnetic.com/r/p.html?f=dcvdfxmas&e=1810590574682
IP
File type HTML document, ASCII text
Hash c078375113cefc4ce250d8987c84d9f9
615e390d0530ad1b6c0611bd75d1cbf0fc023616
5e220f308eef0576ac26e088ee0a749489f975ff55947643c2d97a5b9e3d95fa
GET /r/p.html?f=dcvdfxmas&e=1810590574682 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GN34kxoZG7o3q-sxpnM5jYQBcTaxdwzbcuNWpjxHMpj1ktSc3Pe44Q==
age: 23127
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash c3a1d995c14f6697159764b39fb7440f
b191833749f9211030a943a4ab7a29a008fbd450
08a352ea9b14dddd1e28275f25c95744162663f4af6a2b7b35cb409ad37b3bea
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1017
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:19 GMT
Last-Modified: Thu, 06 Oct 2022 18:16:22 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f24f49dce99bf22d6f1834c2f702f1f4
5c683d0f6be8cd1a60d95a0cb892007f4363005a
3b3e804ba36f52b1aaad872cd62a8b1f67d59a41c62a68c96d13605103329ff1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pbjs.e-planning.net/pbjs/1/27fa6/1/earnme.club/ROS?rnd=0.5716575954954758&e=300x250_0%3A300x250&ur=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&pbv=7.10.0&ncb=1&vs=F&crs=UTF-8&fr=https%3A%2F%2Fwww.google.com%2F
302 Found 821 B URL HTTP/2 pbjs.e-planning.net/pbjs/1/27fa6/1/earnme.club/ROS?rnd=0.5716575954954758&e=300x250_0%3A300x250&ur=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&pbv=7.10.0&ncb=1&vs=F&crs=UTF-8&fr=https%3A%2F%2Fwww.google.com%2F
IP
ASN #49981 WorldStream B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (306), with CRLF, LF line terminators
Hash 94034aaf3e1daf8ec63b05f38a37cf20
ee3b26c12d73f4901fc5e3f9dee4ea3de2d20438
b2d3a9d3d492a465959ed7aa8a89080c8976c13424e6be7ab8f6eac6d8ab5fe6
GET /pbjs/1/27fa6/1/earnme.club/ROS?rnd=0.5716575954954758&e=300x250_0%3A300x250&ur=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&pbv=7.10.0&ncb=1&vs=F&crs=UTF-8&fr=https%3A%2F%2Fwww.google.com%2F HTTP/1.1
Host: pbjs.e-planning.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: openresty
date: Thu, 06 Oct 2022 18:33:17 GMT
content-type: text/html; charset=iso-8859-1
set-cookie: CT=1; path=/; SameSite=None; Secure
access-control-allow-origin: https://earnme.club
access-control-allow-credentials: true
p3p: policyref="http://ads.us.e-planning.net/p3p/eplanning.p3p", CP="NOI DSP COR NID CURa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV"
location: /hb/1/27fa6/1/earnme.club/ROS?ct=1&r=pbjs&rnd=0.5716575954954758&e=300x250_0%3A300x250&ur=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&pbv=7.10.0&ncb=1&vs=F&crs=UTF-8&fr=https%3A%2F%2Fwww.google.com%2F
x-sid: AMS-928
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash d49e695444d7e768343728f8e7fb6e87
6f4ce47f8445bf983c484fd4f03e365998d590be
6a0fafd4495e5f0161fb42bf3c5b1bdba3b2377a01c6318212abd514e93e2133
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 18:33:19 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Mon, 10 Oct 2022 16:19:48 GMT
ETag: "6f4ce47f8445bf983c484fd4f03e365998d590be"
Last-Modified: Thu, 06 Oct 2022 16:19:49 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3507
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75607c16aa860afe-OSL
s0.2mdn.net/instream/video/client.js
200 OK 17 kB URL HTTP/2 s0.2mdn.net/instream/video/client.js
IP
File type ASCII text, with very long lines (2156)
Hash 49295de6ccd23cf80b6418a2d209868f
42a955b4560bb22cb9b5b39577f7a691ea345018
d5a29c73c6200af2ed6918a61106e649b92098ecd476830d725ed4d2ea5a8efa
GET /instream/video/client.js HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
content-length: 16746
date: Thu, 06 Oct 2022 18:33:19 GMT
expires: Thu, 06 Oct 2022 18:33:19 GMT
cache-control: private, max-age=900
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 3c2de7f584463d98eb7cc0ba3ccd430d
8444f89981b9d819acec1ff14a7e07250188a1c4
69d6121738d32fe367b7480655e755643a5ffaf43771f392b7af17761379a807
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1911
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:19 GMT
Last-Modified: Thu, 06 Oct 2022 18:01:29 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
match.adsrvr.org/track/cmf/generic?ttd_pid=8gkxb6n&ttd_tpi=1&ttd_puid=AU1D-0100-001665081199-B7BATCG0-FRJV&gdpr=0
200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?ttd_pid=8gkxb6n&ttd_tpi=1&ttd_puid=AU1D-0100-001665081199-B7BATCG0-FRJV&gdpr=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?ttd_pid=8gkxb6n&ttd_tpi=1&ttd_puid=AU1D-0100-001665081199-B7BATCG0-FRJV&gdpr=0 HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:19 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f24f49dce99bf22d6f1834c2f702f1f4
5c683d0f6be8cd1a60d95a0cb892007f4363005a
3b3e804ba36f52b1aaad872cd62a8b1f67d59a41c62a68c96d13605103329ff1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
sync.smartadserver.com/getuid?url=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fsmart_match%3Fid%3DAU1D-0100-001665081199-B7BATCG0-FRJV%26sas_uid%3D%5bsas_uid%5d&gdpr=0
302 Found 0 B URL HTTP/1.1 sync.smartadserver.com/getuid?url=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fsmart_match%3Fid%3DAU1D-0100-001665081199-B7BATCG0-FRJV%26sas_uid%3D%5bsas_uid%5d&gdpr=0
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?url=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fsmart_match%3Fid%3DAU1D-0100-001665081199-B7BATCG0-FRJV%26sas_uid%3D%5bsas_uid%5d&gdpr=0 HTTP/1.1
Host: sync.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
content-length: 0
date: Thu, 06 Oct 2022 18:33:19 GMT
cache-control: no-cache,no-store
location: https://sync.smartadserver.com:443/getuid?url=https://ids.ad.gt/api/v1/smart_match?id=AU1D-0100-001665081199-B7BATCG0-FRJV&sas_uid=[sas_uid]&gdpr=0&cklb=1
pragma: no-cache
set-cookie: TestIfCookie=ok; expires=Mon, 01 Jan 0001 00:00:00 GMT; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Fri, 06 Oct 2023 18:33:19 GMT; domain=.smartadserver.com; path=/
pbw=%24b%3d12960%3b%24o%3d99999; expires=Fri, 06 Oct 2023 18:33:19 GMT; domain=.smartadserver.com; path=/
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
ocsp.sectigo.com/
200 OK 472 B IP
Hash d530c702bea45c017c2e876522cd442d
d399045615ae4634e5c3f7f7da7e3e5f96f9ad9b
21ad37109950ad7694f045648ec512a7ee434bf8f9627590fa37326af98a1fd8
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 18:33:19 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 01:55:54 GMT
Expires: Wed, 12 Oct 2022 01:55:53 GMT
Etag: "d399045615ae4634e5c3f7f7da7e3e5f96f9ad9b"
Cache-Control: max-age=457953,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75607c166b361c0e-OSL
s.amazon-adsystem.com/dcm?pid=72348060-38ad-4586-8e4f-f1e2a8e789b3&id=6909554343191509474&gdpr=0&gdpr_consent=
302 Found 0 B URL HTTP/1.1 s.amazon-adsystem.com/dcm?pid=72348060-38ad-4586-8e4f-f1e2a8e789b3&id=6909554343191509474&gdpr=0&gdpr_consent=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dcm?pid=72348060-38ad-4586-8e4f-f1e2a8e789b3&id=6909554343191509474&gdpr=0&gdpr_consent= HTTP/1.1
Host: s.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: Server
Date: Thu, 06 Oct 2022 18:33:19 GMT
Content-Length: 0
Connection: keep-alive
x-amz-rid: SYZJW6WPTP7YKERSY2QM
Set-Cookie: ad-id=A_wJTJDGjEnVsxcnUap7lK4|t; Domain=.amazon-adsystem.com; Expires=Sat, 01-Jul-2023 18:33:19 GMT; Path=/; Secure; HttpOnly; SameSite=None
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Location: https://s.amazon-adsystem.com/dcm?pid=72348060-38ad-4586-8e4f-f1e2a8e789b3&id=6909554343191509474&gdpr=0&gdpr_consent=&dcc=t
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
ids.ad.gt/api/v1/g_hosted?id=AU1D-0100-001665081199-B7BATCG0-FRJV
302 Found 473 B URL HTTP/2 ids.ad.gt/api/v1/g_hosted?id=AU1D-0100-001665081199-B7BATCG0-FRJV
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (363)
Hash 9587c9066f2e01c04ab51e645d1468c2
b8063224d442190187601e1658f4d1946305bd28
ff2cdbe07de834fa5548117174e9c30419d8722f8d354adcb73e81fb53de405c
GET /api/v1/g_hosted?id=AU1D-0100-001665081199-B7BATCG0-FRJV HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 06 Oct 2022 18:33:19 GMT
content-type: text/html; charset=utf-8
content-length: 473
location: https://cm.g.doubleclick.net/pixel?google_nid=audigent_w_appnexus_3985&google_hm=QVUxRC0wMTAwLTAwMTY2NTA4MTE5OS1CN0JBVENHMC1GUkpW
server: nginx/1.20.0
set-cookie: au_id=AU1D-0100-001665081199-B7BATCG0-FRJV; Expires=Sat, 05 Oct 2024 18:33:19 GMT; Domain=.ad.gt; Path=/; SameSite=None; Secure
g_hosted=; Expires=Sat, 05 Oct 2024 18:33:19 GMT; Domain=.ad.gt; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
pbjs.e-planning.net/hb/1/27fa6/1/earnme.club/ROS?ct=1&r=pbjs&rnd=0.5218417443014588&e=336x280_0%3A336x280&ur=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&pbv=7.10.0&ncb=1&vs=F&crs=UTF-8&fr=https%3A%2F%2Fwww.google.com%2F
200 OK 75 B URL HTTP/2 pbjs.e-planning.net/hb/1/27fa6/1/earnme.club/ROS?ct=1&r=pbjs&rnd=0.5218417443014588&e=336x280_0%3A336x280&ur=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&pbv=7.10.0&ncb=1&vs=F&crs=UTF-8&fr=https%3A%2F%2Fwww.google.com%2F
IP
ASN #49981 WorldStream B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash 7b048181e72c2d1e6ec3400f911417b5
c90f0192ca880cd1318c1c70b76c138fa3103cd5
49095e8d88e6dbb2392a21b9c14db479d7b66f8f92069d898c18209b58db3e84
GET /hb/1/27fa6/1/earnme.club/ROS?ct=1&r=pbjs&rnd=0.5218417443014588&e=336x280_0%3A336x280&ur=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&pbv=7.10.0&ncb=1&vs=F&crs=UTF-8&fr=https%3A%2F%2Fwww.google.com%2F HTTP/1.1
Host: pbjs.e-planning.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://earnme.club
Content-Type: text/plain
Referer: https://earnme.club/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 06 Oct 2022 18:33:19 GMT
content-type: application/json
access-control-allow-origin: https://earnme.club
cache-control: max-age=0, no-cache
access-control-allow-credentials: true
p3p: policyref="http://ads.us.e-planning.net/p3p/eplanning.p3p", CP="NOI DSP COR NID CURa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV"
expires: Thu, 06 Oct 2022 18:33:19 GMT
content-length: 75
x-sid: AMS-928
X-Firefox-Spdy: h2
pbjs.e-planning.net/pbjs/1/27fa6/1/earnme.club/ROS?rnd=0.5218417443014588&e=336x280_0%3A336x280&ur=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&pbv=7.10.0&ncb=1&vs=F&crs=UTF-8&fr=https%3A%2F%2Fwww.google.com%2F
302 Found 540 B URL HTTP/2 pbjs.e-planning.net/pbjs/1/27fa6/1/earnme.club/ROS?rnd=0.5218417443014588&e=336x280_0%3A336x280&ur=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&pbv=7.10.0&ncb=1&vs=F&crs=UTF-8&fr=https%3A%2F%2Fwww.google.com%2F
IP
ASN #49981 WorldStream B.V.
Hash 13337b62f4ec0f864c2d2786edcfbeab
4d78b769a140155ecb6eb7a77086772fa259ddf1
68519b63551813a69f682ccef470460b0f21cdb14987ac8f8f8ad565b60c0bab
GET /pbjs/1/27fa6/1/earnme.club/ROS?rnd=0.5218417443014588&e=336x280_0%3A336x280&ur=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&pbv=7.10.0&ncb=1&vs=F&crs=UTF-8&fr=https%3A%2F%2Fwww.google.com%2F HTTP/1.1
Host: pbjs.e-planning.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Thu, 06 Oct 2022 18:33:18 GMT
content-type: text/html; charset=iso-8859-1
set-cookie: CT=1; path=/; SameSite=None; Secure
access-control-allow-origin: https://earnme.club
access-control-allow-credentials: true
p3p: policyref="http://ads.us.e-planning.net/p3p/eplanning.p3p", CP="NOI DSP COR NID CURa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV"
location: /hb/1/27fa6/1/earnme.club/ROS?ct=1&r=pbjs&rnd=0.5218417443014588&e=336x280_0%3A336x280&ur=https%3A%2F%2Fearnme.club%2Ffidelityfx-super-resolution-from-amd%2F&pbv=7.10.0&ncb=1&vs=F&crs=UTF-8&fr=https%3A%2F%2Fwww.google.com%2F
x-sid: AMS-928
X-Firefox-Spdy: h2
ids.ad.gt/api/v1/halo_match?id=AU1D-0100-001665081199-B7BATCG0-FRJV&halo_id=060fg7fcdlebbd8a8h8fi68bi6fafj9hkdloq2oik0mggk4e4s4ou04gu0oeow6sy
200 OK 84 kB URL HTTP/2 ids.ad.gt/api/v1/halo_match?id=AU1D-0100-001665081199-B7BATCG0-FRJV&halo_id=060fg7fcdlebbd8a8h8fi68bi6fafj9hkdloq2oik0mggk4e4s4ou04gu0oeow6sy
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash e6eb9dcc6d124fdfe0c2628be2a7d112
bf51318c477cf98121e3c30e7d6753ab2d114a9c
f962f942850b4482b566d0621bf91d607945ffeb28a4b40cea0f481615e8386e
GET /api/v1/halo_match?id=AU1D-0100-001665081199-B7BATCG0-FRJV&halo_id=060fg7fcdlebbd8a8h8fi68bi6fafj9hkdloq2oik0mggk4e4s4ou04gu0oeow6sy HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:19 GMT
content-type: image/gif
server: nginx/1.20.0
cache-control: public, max-age=43200
expires: Fri, 07 Oct 2022 06:33:19 GMT
set-cookie: au_id=AU1D-0100-001665081199-B7BATCG0-FRJV; Expires=Sat, 05 Oct 2024 18:33:19 GMT; Domain=.ad.gt; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 18bac5c2b82d7d9122ee2a4101e7370b
d5957f5c7597f93ad1b4cf79fc218efa3c14462d
ee60ade2b3a681e1b8f6ed1fab478acdc3c26ea392f837d9478e0afc8118c184
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4256
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:19 GMT
Last-Modified: Thu, 06 Oct 2022 17:22:24 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 313
match.sharethrough.com/sync/v1?source_id=98KUz37ype9D3X2sf9ovgeTt&source_user_id=5646643850030086432&gdpr=0&gdpr_consent=
204 No Content 0 B URL HTTP/2 match.sharethrough.com/sync/v1?source_id=98KUz37ype9D3X2sf9ovgeTt&source_user_id=5646643850030086432&gdpr=0&gdpr_consent=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/v1?source_id=98KUz37ype9D3X2sf9ovgeTt&source_user_id=5646643850030086432&gdpr=0&gdpr_consent= HTTP/1.1
Host: match.sharethrough.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Thu, 06 Oct 2022 18:33:19 GMT
X-Firefox-Spdy: h2
sync-tm.everesttech.net/ct/upi/pid/gjIEMT18?redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D94%26partneruserid%3D%24%7BTM_USER_ID%7D&gdpr=0&gdpr_consent=&_test=Yz8fbgAAHnuwxwAr
200 OK 85 B URL HTTP/2 sync-tm.everesttech.net/ct/upi/pid/gjIEMT18?redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D94%26partneruserid%3D%24%7BTM_USER_ID%7D&gdpr=0&gdpr_consent=&_test=Yz8fbgAAHnuwxwAr
IP
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 5bec6606b8392065f9da9898ca6f7b14
73ac5b01b5e3293fb792179626e7f8369cdb944d
acccc501aa6afa3cfac15e8ddccf1561deed2ed08c2f7d652abbdbe9aa71609a
GET /ct/upi/pid/gjIEMT18?redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D94%26partneruserid%3D%24%7BTM_USER_ID%7D&gdpr=0&gdpr_consent=&_test=Yz8fbgAAHnuwxwAr HTTP/1.1
Host: sync-tm.everesttech.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
server: Jetty(9.4.35.v20201120)
accept-ranges: bytes
date: Thu, 06 Oct 2022 18:33:19 GMT
via: 1.1 varnish
age: 157
x-served-by: cache-bma1670-BMA
x-cache: HIT
x-cache-hits: 304
x-timer: S1665081200.851700,VS0,VE0
cache-control: no-cache
pragma: no-cache
content-length: 85
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=2022100301&st=env
200 OK 11 kB URL HTTP/2 pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=2022100301&st=env
IP
File type JSON data\012- , ASCII text, with very long lines (14845), with no line terminators
Hash e26a894b09561f2a595123d235ab8dba
504952b47752655226c64984b2648c104aa880a8
031a620554454d530ebdb40a207a9282ed7c9b17a0510b01a17b7346e0f23f51
GET /getconfig/sodar?sv=200&tid=gpt&tv=2022100301&st=env HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Thu, 06 Oct 2022 18:33:19 GMT
server: cafe
cache-control: private
content-length: 11273
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fmatch%3Fid%3DAU1D-0100-001665081199-B7BATCG0-FRJV%26adnxs_id%3D%24UID%26gdpr%3D0
302 Found 0 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fmatch%3Fid%3DAU1D-0100-001665081199-B7BATCG0-FRJV%26adnxs_id%3D%24UID%26gdpr%3D0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fmatch%3Fid%3DAU1D-0100-001665081199-B7BATCG0-FRJV%26adnxs_id%3D%24UID%26gdpr%3D0 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 18:33:19 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://ids.ad.gt/api/v1/match?id=AU1D-0100-001665081199-B7BATCG0-FRJV&adnxs_id=0&gdpr=0
AN-X-Request-Uuid: 1c21dec3-d60d-4449-8231-39cb18b98d78
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 952.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
sync.smartadserver.com/getuid?url=https://ids.ad.gt/api/v1/smart_match?id=AU1D-0100-001665081199-B7BATCG0-FRJV&sas_uid=[sas_uid]&gdpr=0&cklb=1
200 OK 0 B URL HTTP/1.1 sync.smartadserver.com/getuid?url=https://ids.ad.gt/api/v1/smart_match?id=AU1D-0100-001665081199-B7BATCG0-FRJV&sas_uid=[sas_uid]&gdpr=0&cklb=1
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?url=https://ids.ad.gt/api/v1/smart_match?id=AU1D-0100-001665081199-B7BATCG0-FRJV&sas_uid=[sas_uid]&gdpr=0&cklb=1 HTTP/1.1
Host: sync.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-length: 0
date: Thu, 06 Oct 2022 18:33:19 GMT
rtb-csync.smartadserver.com/redir/?issi=1&partnerid=86&partneruserid=0&gdpr=0&gdpr_consent=
200 OK 43 B URL HTTP/1.1 rtb-csync.smartadserver.com/redir/?issi=1&partnerid=86&partneruserid=0&gdpr=0&gdpr_consent=
IP
ASN #201081 SmartAdServer SAS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 221d8352905f2c38b3cb2bd191d630b0
d804b495cb9b84b9007a25b5d85f9ae674004cde
89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
GET /redir/?issi=1&partnerid=86&partneruserid=0&gdpr=0&gdpr_consent= HTTP/1.1
Host: rtb-csync.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: image/gif
date: Thu, 06 Oct 2022 18:33:19 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: pid=279473767136098707; expires=Mon, 06 Nov 2023 18:33:19 GMT; domain=smartadserver.com; path=/
TestIfCookieP=ok; expires=Mon, 06 Nov 2023 18:33:19 GMT; domain=smartadserver.com; path=/
csync=86:0; expires=Fri, 06 Oct 2023 18:33:19 GMT; domain=smartadserver.com; path=/
transfer-encoding: chunked
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-DPKU9niS82Tt1ibCcYzK_RXbNBCmKLauFvGhtohKiylJstF5T3OjEp0rY5RJe43pq66wNC8HKstQLNPN5HiRPjmapQhA&cry=1&dbm_d=AKAmf-APoGDo4dPH6y1PoiZJWPsrL3R6tNzkC58AEFGVoAjZtUJxI40N55qFxNReVnBJl-M7bw1vu5au76jsBD4xgWbUvgc-M3d0585P48AYveVxqKuAx1KS8-qK61whxgpaA8aT1nBTxD6zTwSlzaHS-VfYelmbsUEoVE3G3zlUUqc3JMjQpfYxQucKJEHs7TMW0S3V2SZz7E0vbcfgoCtby7CK01Ynjojxj722BgJysmuvFXo5Iq_l7Z17IoESU7DkfdWaCXFqz24aKWhVGFyWAEfR1dr30Y-wI72VYyFVnI6zRZ4IFI7yHePdicsMIlnqsWONEO_eAcMGJYrVfxsmlIMKPd5dq1zQ5kDG013dKMsFCVpVhHfR8MCJ0LN4ufI4BX3YqPoqW0HpkSilILzhAXZTaXLfTn4CwtN0Vyik6xMEf_5ZU5NKk2-0CO0rS2DM2cykw4u2Do824yobmqT_IcqcUdSd5jJhKfPVS9s4jbucPi_VZzGcXg0Jkeqfx6Lxcbo12uBGcaWpSUr2nUFuikdeXoHX86FHf_b0BgEgNAhtenQuBe4zsddOlYc_NnRiH0vuXcOQW167zmik822mih83BOc20p5n-64yaeuHYgig4AJ7U-upk7l7VkuhBSeTWkku-ltk-X30iYbGuM95v4lTfpplFLRrfUcCSz40tyopS1hmXChKJH3DgxUbjWvFhE4SUIwM6hpNMus6kf7hnnDCXIN1pabqHHUuyE_l7FBKkQ-qszMwcWznP4kCUNOva_7K5fQUdHLFQdykljc-m-HmADRYyywgUDQZZrXg6VUcpT2Y1nQEDXhuoAeQSRXfyZb5UEmiC31b2pQEg61uTD7Fm7HA49bruNhvesrt-PJnJPA9yPKkp8ONPCeZqKGFzDJtXMXfFvm22jo4ugUI-_eAgpLxWr2N3AoR8SPCOzxLTE06cH-q0yoLtx3PV2EYEdAbSvkQFD7iu2bH_quZvCG0q8LrkX_DhbO9w9aGMQRrsltQUIkrEiiP82aIvC7AaYoZQIt_oYvVMBP_9vvTlkjvE7A2CeJ-7ALAEKvjpsVs1a5BH6aWKJaoJrYFt2k4sLc4Q5PaKxIpnSGGJ-yOZFxIP7FMtvk7Z1kbPK_eQwvGsdIMfgEf-jlMipq858b8Reg2kI_O2Xp4Wa1srrgw2JPA9vXtqdTqtrtav8KvKxZ6X-5STmBfPUr4W4M3X1bdOTiTSOvcyjau3XSAKfE_GDaB4ZK72X2_TFXb78OQsm0n7vUSQ3oZi7yhTlIKSQXC69xlsJUmzMO44urUzJLyfANUqu5noWjCTt0i4MchpGR1vh6MA3YLdjxbQGuMwepwch5EKQarmyj7Qd_WLyiDcEJ-bhc0Mfff26p9btTp8emwlb_q0-We0E0-pov9rOvM85TND2tMS8NLvBrdSpAxQ-XM4JiEdYLhwDf7m_8BKSROno_na9k_JgatezqDXuy03O3-lETch9o3BMHQCzQoa9urM_xzYIFAg0vGzMdy0d4ZrFjjbCwMz0IxLsLqyVGML-Q-dhtDmmxuZvTUCyKBQxyj6hvEuz19nFrfcxLJe92p18zvj3MVyZpeUIOE8mpPQEPF2huF0-YgMqWl5EWC_3mPXa55nwVorps6_lt17YcBpwymeMoR1lNXWVa60FR57woo7SyJrk9qdCHQhtVjblkqpiw-twgAXZnmfNi0xiMa6G5kUFvXTay8PlZ6DRv0rdeGX50DWgCPmLRzjbEL6XmiMT693ILz31sfCUW51wGYW0X4p7VXm-XZJZy-Mo4Z0Nu9FgCFrFuqJmnKFNVbOzICOarcaSfvqdYJp4GGn5XHJdHiXQAS06iQYwh3qMOK31UeFLMAt0hBEreuxVDbyCbjJCY_XRwzoiybem8wF31fd0gjkQSQberVSvQz-cOVMZDdlABluKT_ptw7Af8mILVqEK2wnL7slp5seECIpej3nQErIMV_FN07lwJsWSnCF05rjFTRyFSE8ZK6OSylr6itBKx7SJdHpjGqs1RJzjZBR_S7MpFCqNN_ONUs4oQega8Zdsa4XPOA3RFWO9AH5dRZXMAUTdsKYQkd1HXs5QHyF8ifdp1Oe64wSBojdkELr1-ZMtDZ60sGpMrHUYWeJIV1xg-NehwRrQkHDR5Kv_wTV836MHXAETNaLI6NW-yfmv3cIGBwzeAAAO2P9pXWZ62yl7HJ7K0MJlFfo_nQjhvYB5uCnZwfQwW4goJiclWJJRLI14T6_vC5W80jt6xdbBX3ZqSEB1GJWYeZRBMvNaGF5sL3NvwYv9BJVhxrkkBz688qE_lzffj8XHKFbpgFCaISNJxD_COST_pN2hJ2F-LvQQsS2vHuw9lO4mLRiwkuj6hgoxH8O8BHHMmRRULpxWQ_y-hcW-4Q7BgrOd-lJh2xTWAuoFChO7BaNgol81nr6LcMPNHIm0nt4b3J6HdRiGkgEtNAUeGeXQxkATkQS6auTN9LSBjPcIfPMUmWAUuw3Kzi9JSFnkz3ykAw2txmi5eKcLBkEK2UXIwEE-YHceY2JAxRkGLQO872W8JiUBLIpGXBG1EdfQAl-luPgMdu5-QDhrmcClXq9XGREs3JDjFpM9NixwIhH1GdYdoHvGKWljpHcOrRj9LI0R7jlAmSduROaShV3Uh0_4x_DNmyV9M4oFLeXsoHkrP8D0foF9SBkq08IZ0jQLluinR7juxgCAI-MH3ik3Vv_owFYluLtCflLIa3xwkBJTIG0N8fPLvCTrT_EVA18UZygELuTViBoU_VYBjGSKn0sA3ZmILcCGWJ2BH01P0IsOt3XoqrNvdoBftB3eDvfvCNtCrqt3-08Q8zK1VCOL0XAOyKsfbbQroy5nUhV4GfprVGbPt4oyWrrzNrofI0hTDD2jVntAH69KRyLXV-omiLiYN0Erh6prXA1QnclNNHB-KFYVRelBhHDf8Jvx1AiWVZqla5kMRLQatNwK6daS8lMbsbY-6pOSUDX2M11r2tvkCAeol8AhxRFxPBzfJ6puDxMe-QIxVyI2PrlZATDFUyAlCijfH7Tze3qniMmYlMFUo6pcdrusRTK4MOZMj1w6XJlMdTPendTbw3ajUXJj1f6cKX9lI82GfiKU2vYnU&cid=CAASKORo8xXz-lDEbM9iFqj79p3rZQVrqbsxICL4ZTi0NORau0T5CtQ1-d8&rfl=2%2C%2Chttps%253A%252F%252Fearnme.club%252F%240
200 OK 34 kB URL HTTP/2 googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-DPKU9niS82Tt1ibCcYzK_RXbNBCmKLauFvGhtohKiylJstF5T3OjEp0rY5RJe43pq66wNC8HKstQLNPN5HiRPjmapQhA&cry=1&dbm_d=AKAmf-APoGDo4dPH6y1PoiZJWPsrL3R6tNzkC58AEFGVoAjZtUJxI40N55qFxNReVnBJl-M7bw1vu5au76jsBD4xgWbUvgc-M3d0585P48AYveVxqKuAx1KS8-qK61whxgpaA8aT1nBTxD6zTwSlzaHS-VfYelmbsUEoVE3G3zlUUqc3JMjQpfYxQucKJEHs7TMW0S3V2SZz7E0vbcfgoCtby7CK01Ynjojxj722BgJysmuvFXo5Iq_l7Z17IoESU7DkfdWaCXFqz24aKWhVGFyWAEfR1dr30Y-wI72VYyFVnI6zRZ4IFI7yHePdicsMIlnqsWONEO_eAcMGJYrVfxsmlIMKPd5dq1zQ5kDG013dKMsFCVpVhHfR8MCJ0LN4ufI4BX3YqPoqW0HpkSilILzhAXZTaXLfTn4CwtN0Vyik6xMEf_5ZU5NKk2-0CO0rS2DM2cykw4u2Do824yobmqT_IcqcUdSd5jJhKfPVS9s4jbucPi_VZzGcXg0Jkeqfx6Lxcbo12uBGcaWpSUr2nUFuikdeXoHX86FHf_b0BgEgNAhtenQuBe4zsddOlYc_NnRiH0vuXcOQW167zmik822mih83BOc20p5n-64yaeuHYgig4AJ7U-upk7l7VkuhBSeTWkku-ltk-X30iYbGuM95v4lTfpplFLRrfUcCSz40tyopS1hmXChKJH3DgxUbjWvFhE4SUIwM6hpNMus6kf7hnnDCXIN1pabqHHUuyE_l7FBKkQ-qszMwcWznP4kCUNOva_7K5fQUdHLFQdykljc-m-HmADRYyywgUDQZZrXg6VUcpT2Y1nQEDXhuoAeQSRXfyZb5UEmiC31b2pQEg61uTD7Fm7HA49bruNhvesrt-PJnJPA9yPKkp8ONPCeZqKGFzDJtXMXfFvm22jo4ugUI-_eAgpLxWr2N3AoR8SPCOzxLTE06cH-q0yoLtx3PV2EYEdAbSvkQFD7iu2bH_quZvCG0q8LrkX_DhbO9w9aGMQRrsltQUIkrEiiP82aIvC7AaYoZQIt_oYvVMBP_9vvTlkjvE7A2CeJ-7ALAEKvjpsVs1a5BH6aWKJaoJrYFt2k4sLc4Q5PaKxIpnSGGJ-yOZFxIP7FMtvk7Z1kbPK_eQwvGsdIMfgEf-jlMipq858b8Reg2kI_O2Xp4Wa1srrgw2JPA9vXtqdTqtrtav8KvKxZ6X-5STmBfPUr4W4M3X1bdOTiTSOvcyjau3XSAKfE_GDaB4ZK72X2_TFXb78OQsm0n7vUSQ3oZi7yhTlIKSQXC69xlsJUmzMO44urUzJLyfANUqu5noWjCTt0i4MchpGR1vh6MA3YLdjxbQGuMwepwch5EKQarmyj7Qd_WLyiDcEJ-bhc0Mfff26p9btTp8emwlb_q0-We0E0-pov9rOvM85TND2tMS8NLvBrdSpAxQ-XM4JiEdYLhwDf7m_8BKSROno_na9k_JgatezqDXuy03O3-lETch9o3BMHQCzQoa9urM_xzYIFAg0vGzMdy0d4ZrFjjbCwMz0IxLsLqyVGML-Q-dhtDmmxuZvTUCyKBQxyj6hvEuz19nFrfcxLJe92p18zvj3MVyZpeUIOE8mpPQEPF2huF0-YgMqWl5EWC_3mPXa55nwVorps6_lt17YcBpwymeMoR1lNXWVa60FR57woo7SyJrk9qdCHQhtVjblkqpiw-twgAXZnmfNi0xiMa6G5kUFvXTay8PlZ6DRv0rdeGX50DWgCPmLRzjbEL6XmiMT693ILz31sfCUW51wGYW0X4p7VXm-XZJZy-Mo4Z0Nu9FgCFrFuqJmnKFNVbOzICOarcaSfvqdYJp4GGn5XHJdHiXQAS06iQYwh3qMOK31UeFLMAt0hBEreuxVDbyCbjJCY_XRwzoiybem8wF31fd0gjkQSQberVSvQz-cOVMZDdlABluKT_ptw7Af8mILVqEK2wnL7slp5seECIpej3nQErIMV_FN07lwJsWSnCF05rjFTRyFSE8ZK6OSylr6itBKx7SJdHpjGqs1RJzjZBR_S7MpFCqNN_ONUs4oQega8Zdsa4XPOA3RFWO9AH5dRZXMAUTdsKYQkd1HXs5QHyF8ifdp1Oe64wSBojdkELr1-ZMtDZ60sGpMrHUYWeJIV1xg-NehwRrQkHDR5Kv_wTV836MHXAETNaLI6NW-yfmv3cIGBwzeAAAO2P9pXWZ62yl7HJ7K0MJlFfo_nQjhvYB5uCnZwfQwW4goJiclWJJRLI14T6_vC5W80jt6xdbBX3ZqSEB1GJWYeZRBMvNaGF5sL3NvwYv9BJVhxrkkBz688qE_lzffj8XHKFbpgFCaISNJxD_COST_pN2hJ2F-LvQQsS2vHuw9lO4mLRiwkuj6hgoxH8O8BHHMmRRULpxWQ_y-hcW-4Q7BgrOd-lJh2xTWAuoFChO7BaNgol81nr6LcMPNHIm0nt4b3J6HdRiGkgEtNAUeGeXQxkATkQS6auTN9LSBjPcIfPMUmWAUuw3Kzi9JSFnkz3ykAw2txmi5eKcLBkEK2UXIwEE-YHceY2JAxRkGLQO872W8JiUBLIpGXBG1EdfQAl-luPgMdu5-QDhrmcClXq9XGREs3JDjFpM9NixwIhH1GdYdoHvGKWljpHcOrRj9LI0R7jlAmSduROaShV3Uh0_4x_DNmyV9M4oFLeXsoHkrP8D0foF9SBkq08IZ0jQLluinR7juxgCAI-MH3ik3Vv_owFYluLtCflLIa3xwkBJTIG0N8fPLvCTrT_EVA18UZygELuTViBoU_VYBjGSKn0sA3ZmILcCGWJ2BH01P0IsOt3XoqrNvdoBftB3eDvfvCNtCrqt3-08Q8zK1VCOL0XAOyKsfbbQroy5nUhV4GfprVGbPt4oyWrrzNrofI0hTDD2jVntAH69KRyLXV-omiLiYN0Erh6prXA1QnclNNHB-KFYVRelBhHDf8Jvx1AiWVZqla5kMRLQatNwK6daS8lMbsbY-6pOSUDX2M11r2tvkCAeol8AhxRFxPBzfJ6puDxMe-QIxVyI2PrlZATDFUyAlCijfH7Tze3qniMmYlMFUo6pcdrusRTK4MOZMj1w6XJlMdTPendTbw3ajUXJj1f6cKX9lI82GfiKU2vYnU&cid=CAASKORo8xXz-lDEbM9iFqj79p3rZQVrqbsxICL4ZTi0NORau0T5CtQ1-d8&rfl=2%2C%2Chttps%253A%252F%252Fearnme.club%252F%240
IP
File type Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Hash da76a6301ecc514e4b4331d8e0d21749
6e43faa3479ecd58c09ac87f5abbd98a4a4cf0d8
2cc06f2f483aa6781e4ab8539d8aecda5e9be64478c7a3f1ed9a60de48eded63
GET /dbm/ad?dbm_c=AKAmf-DPKU9niS82Tt1ibCcYzK_RXbNBCmKLauFvGhtohKiylJstF5T3OjEp0rY5RJe43pq66wNC8HKstQLNPN5HiRPjmapQhA&cry=1&dbm_d=AKAmf-APoGDo4dPH6y1PoiZJWPsrL3R6tNzkC58AEFGVoAjZtUJxI40N55qFxNReVnBJl-M7bw1vu5au76jsBD4xgWbUvgc-M3d0585P48AYveVxqKuAx1KS8-qK61whxgpaA8aT1nBTxD6zTwSlzaHS-VfYelmbsUEoVE3G3zlUUqc3JMjQpfYxQucKJEHs7TMW0S3V2SZz7E0vbcfgoCtby7CK01Ynjojxj722BgJysmuvFXo5Iq_l7Z17IoESU7DkfdWaCXFqz24aKWhVGFyWAEfR1dr30Y-wI72VYyFVnI6zRZ4IFI7yHePdicsMIlnqsWONEO_eAcMGJYrVfxsmlIMKPd5dq1zQ5kDG013dKMsFCVpVhHfR8MCJ0LN4ufI4BX3YqPoqW0HpkSilILzhAXZTaXLfTn4CwtN0Vyik6xMEf_5ZU5NKk2-0CO0rS2DM2cykw4u2Do824yobmqT_IcqcUdSd5jJhKfPVS9s4jbucPi_VZzGcXg0Jkeqfx6Lxcbo12uBGcaWpSUr2nUFuikdeXoHX86FHf_b0BgEgNAhtenQuBe4zsddOlYc_NnRiH0vuXcOQW167zmik822mih83BOc20p5n-64yaeuHYgig4AJ7U-upk7l7VkuhBSeTWkku-ltk-X30iYbGuM95v4lTfpplFLRrfUcCSz40tyopS1hmXChKJH3DgxUbjWvFhE4SUIwM6hpNMus6kf7hnnDCXIN1pabqHHUuyE_l7FBKkQ-qszMwcWznP4kCUNOva_7K5fQUdHLFQdykljc-m-HmADRYyywgUDQZZrXg6VUcpT2Y1nQEDXhuoAeQSRXfyZb5UEmiC31b2pQEg61uTD7Fm7HA49bruNhvesrt-PJnJPA9yPKkp8ONPCeZqKGFzDJtXMXfFvm22jo4ugUI-_eAgpLxWr2N3AoR8SPCOzxLTE06cH-q0yoLtx3PV2EYEdAbSvkQFD7iu2bH_quZvCG0q8LrkX_DhbO9w9aGMQRrsltQUIkrEiiP82aIvC7AaYoZQIt_oYvVMBP_9vvTlkjvE7A2CeJ-7ALAEKvjpsVs1a5BH6aWKJaoJrYFt2k4sLc4Q5PaKxIpnSGGJ-yOZFxIP7FMtvk7Z1kbPK_eQwvGsdIMfgEf-jlMipq858b8Reg2kI_O2Xp4Wa1srrgw2JPA9vXtqdTqtrtav8KvKxZ6X-5STmBfPUr4W4M3X1bdOTiTSOvcyjau3XSAKfE_GDaB4ZK72X2_TFXb78OQsm0n7vUSQ3oZi7yhTlIKSQXC69xlsJUmzMO44urUzJLyfANUqu5noWjCTt0i4MchpGR1vh6MA3YLdjxbQGuMwepwch5EKQarmyj7Qd_WLyiDcEJ-bhc0Mfff26p9btTp8emwlb_q0-We0E0-pov9rOvM85TND2tMS8NLvBrdSpAxQ-XM4JiEdYLhwDf7m_8BKSROno_na9k_JgatezqDXuy03O3-lETch9o3BMHQCzQoa9urM_xzYIFAg0vGzMdy0d4ZrFjjbCwMz0IxLsLqyVGML-Q-dhtDmmxuZvTUCyKBQxyj6hvEuz19nFrfcxLJe92p18zvj3MVyZpeUIOE8mpPQEPF2huF0-YgMqWl5EWC_3mPXa55nwVorps6_lt17YcBpwymeMoR1lNXWVa60FR57woo7SyJrk9qdCHQhtVjblkqpiw-twgAXZnmfNi0xiMa6G5kUFvXTay8PlZ6DRv0rdeGX50DWgCPmLRzjbEL6XmiMT693ILz31sfCUW51wGYW0X4p7VXm-XZJZy-Mo4Z0Nu9FgCFrFuqJmnKFNVbOzICOarcaSfvqdYJp4GGn5XHJdHiXQAS06iQYwh3qMOK31UeFLMAt0hBEreuxVDbyCbjJCY_XRwzoiybem8wF31fd0gjkQSQberVSvQz-cOVMZDdlABluKT_ptw7Af8mILVqEK2wnL7slp5seECIpej3nQErIMV_FN07lwJsWSnCF05rjFTRyFSE8ZK6OSylr6itBKx7SJdHpjGqs1RJzjZBR_S7MpFCqNN_ONUs4oQega8Zdsa4XPOA3RFWO9AH5dRZXMAUTdsKYQkd1HXs5QHyF8ifdp1Oe64wSBojdkELr1-ZMtDZ60sGpMrHUYWeJIV1xg-NehwRrQkHDR5Kv_wTV836MHXAETNaLI6NW-yfmv3cIGBwzeAAAO2P9pXWZ62yl7HJ7K0MJlFfo_nQjhvYB5uCnZwfQwW4goJiclWJJRLI14T6_vC5W80jt6xdbBX3ZqSEB1GJWYeZRBMvNaGF5sL3NvwYv9BJVhxrkkBz688qE_lzffj8XHKFbpgFCaISNJxD_COST_pN2hJ2F-LvQQsS2vHuw9lO4mLRiwkuj6hgoxH8O8BHHMmRRULpxWQ_y-hcW-4Q7BgrOd-lJh2xTWAuoFChO7BaNgol81nr6LcMPNHIm0nt4b3J6HdRiGkgEtNAUeGeXQxkATkQS6auTN9LSBjPcIfPMUmWAUuw3Kzi9JSFnkz3ykAw2txmi5eKcLBkEK2UXIwEE-YHceY2JAxRkGLQO872W8JiUBLIpGXBG1EdfQAl-luPgMdu5-QDhrmcClXq9XGREs3JDjFpM9NixwIhH1GdYdoHvGKWljpHcOrRj9LI0R7jlAmSduROaShV3Uh0_4x_DNmyV9M4oFLeXsoHkrP8D0foF9SBkq08IZ0jQLluinR7juxgCAI-MH3ik3Vv_owFYluLtCflLIa3xwkBJTIG0N8fPLvCTrT_EVA18UZygELuTViBoU_VYBjGSKn0sA3ZmILcCGWJ2BH01P0IsOt3XoqrNvdoBftB3eDvfvCNtCrqt3-08Q8zK1VCOL0XAOyKsfbbQroy5nUhV4GfprVGbPt4oyWrrzNrofI0hTDD2jVntAH69KRyLXV-omiLiYN0Erh6prXA1QnclNNHB-KFYVRelBhHDf8Jvx1AiWVZqla5kMRLQatNwK6daS8lMbsbY-6pOSUDX2M11r2tvkCAeol8AhxRFxPBzfJ6puDxMe-QIxVyI2PrlZATDFUyAlCijfH7Tze3qniMmYlMFUo6pcdrusRTK4MOZMj1w6XJlMdTPendTbw3ajUXJj1f6cKX9lI82GfiKU2vYnU&cid=CAASKORo8xXz-lDEbM9iFqj79p3rZQVrqbsxICL4ZTi0NORau0T5CtQ1-d8&rfl=2%2C%2Chttps%253A%252F%252Fearnme.club%252F%240 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6c92bb693e6dc5eba28d80f7f9436549.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 06 Oct 2022 18:33:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 33930
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 06-Oct-2022 18:48:19 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/xbbe/pixel?d=CN-KGhDw3uOiAxjl0YzGATAB&v=APEucNWrOumxPXN9kry8m0ADmgW4D4sI5g1hOj1GuETy2NppaONpomcC-iU5sp74aIwUI68DufruVDtWh3cliEILypsEI5UuCpT8H4lFp82Gl8wquM91gwF_EJtM86oQx0GK-5kc8xDVeRaAEXUSrDWdrQbxUnqjcshyNmP4xP-J-ExdL91Q0HY
200 OK 0 B URL HTTP/2 googleads.g.doubleclick.net/xbbe/pixel?d=CN-KGhDw3uOiAxjl0YzGATAB&v=APEucNWrOumxPXN9kry8m0ADmgW4D4sI5g1hOj1GuETy2NppaONpomcC-iU5sp74aIwUI68DufruVDtWh3cliEILypsEI5UuCpT8H4lFp82Gl8wquM91gwF_EJtM86oQx0GK-5kc8xDVeRaAEXUSrDWdrQbxUnqjcshyNmP4xP-J-ExdL91Q0HY
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /xbbe/pixel?d=CN-KGhDw3uOiAxjl0YzGATAB&v=APEucNWrOumxPXN9kry8m0ADmgW4D4sI5g1hOj1GuETy2NppaONpomcC-iU5sp74aIwUI68DufruVDtWh3cliEILypsEI5UuCpT8H4lFp82Gl8wquM91gwF_EJtM86oQx0GK-5kc8xDVeRaAEXUSrDWdrQbxUnqjcshyNmP4xP-J-ExdL91Q0HY HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a1bd6e58b2679fb90a588a9503b148b4.safeframe.googlesyndication.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Thu, 06 Oct 2022 18:33:19 GMT
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 06-Oct-2022 18:48:19 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Thu, 06 Oct 2022 18:33:19 GMT
cache-control: private
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/xbbe/pixel?d=CPHmIRDO5Zb8AhiY_bnTATAB&v=APEucNWPfbZ1GUN7L-QJ8oJQ1j0qlh8ORtppJAoWzxAgGJD6qwiD-cWpPoNTFU_U9B5-D5D3lye9yKosbIAPEt6vRFEizSv2kUcqckh1ql-LCvY9w5LerRAdqbMoq9TZTnRub8in-wBo-B6ZwdYUdsDwAyXshthksq8XK3fIou4Cq7N8WbsEaDA
200 OK 0 B URL HTTP/2 googleads.g.doubleclick.net/xbbe/pixel?d=CPHmIRDO5Zb8AhiY_bnTATAB&v=APEucNWPfbZ1GUN7L-QJ8oJQ1j0qlh8ORtppJAoWzxAgGJD6qwiD-cWpPoNTFU_U9B5-D5D3lye9yKosbIAPEt6vRFEizSv2kUcqckh1ql-LCvY9w5LerRAdqbMoq9TZTnRub8in-wBo-B6ZwdYUdsDwAyXshthksq8XK3fIou4Cq7N8WbsEaDA
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /xbbe/pixel?d=CPHmIRDO5Zb8AhiY_bnTATAB&v=APEucNWPfbZ1GUN7L-QJ8oJQ1j0qlh8ORtppJAoWzxAgGJD6qwiD-cWpPoNTFU_U9B5-D5D3lye9yKosbIAPEt6vRFEizSv2kUcqckh1ql-LCvY9w5LerRAdqbMoq9TZTnRub8in-wBo-B6ZwdYUdsDwAyXshthksq8XK3fIou4Cq7N8WbsEaDA HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6c92bb693e6dc5eba28d80f7f9436549.safeframe.googlesyndication.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Thu, 06 Oct 2022 18:33:19 GMT
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 06-Oct-2022 18:48:19 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Thu, 06 Oct 2022 18:33:19 GMT
cache-control: private
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-Ctq9VuWEyKNpoT2n1_gNPe_5RV1D_u_gxskKyObP3x-_issERi3WQX9UJ0CqYECLRQy5ElsO-cjWQItXnpC6_82oiDWJYsSDVfP1__T8C6c1N1whP7n8xXC4JYqgwx3kr8Amp-HQh1rPoVmhDx62rVLsTdj7_8rDmXppJ4-rIi_5mNX14&cry=1&dbm_d=AKAmf-Dc6Xo18PoW6fgJKvru2Uhb6s9Ld7-gxDNYrYOinRBTU9C1pCMmmDtgylK2Afwr7Fe5k56sR_yu-_YxZm0lBw41HEnCNUf_xd8NqVzRzsIRcHA57QP4hLDtDkenRwpTtSShEdglFwASytJ0Wn3htfR3tTYIFMfPJA8ujH60AVP0HoqvUEERrmCABDailDlG0uEHyZj6z73ixq1Eo4V7EMLK7IU1cDA98B3OZcfJ80vSwk-MpnTDq0K15nlA_Dq4wXuQq3uphDKIV2CafQheO8hZVfFOhMK0upjmVsK7tDa32qmwmQQaL0A7JOs0NzT2-iGvwLf_pYfJvkzavvs9gdm1qmYoFbr-WH55sWxH9TflmQMtO3s42VN1_Oge25V4Ycos328nvrKGjSGqOCqjjL95_SVPgApcxY8XKUPkb_MFEt-C39FMIOS2cMLZdpJG4E4Fsz6S1jhF6FICuIL55rMz_0bucyuYCFFpclrUJNdF_31w32uK_oQW4r7TusjWxrCShyWPBPLu4H_qPu3S8-8zIaTKp9HtdudxMkSSaCxaYdXJqorrfm6KWA6J1iz_JgA96Rv5zGSkkE5bxHpm7CitWkeOfvylRasOCrbNI1Bs4cpr7hIQeIOrN8ZhNYr5niGWgq5Zlkq19qJ_9Ab_cIMLzqyzSUNJyqNpKorNguF68vgAoMJsaITQvgB4wLZWSBLEHm3XV7PUQ5MoXhvgnFYglqC-LpTXBGvvgUoI4hAKgpAkc-amkoa0mxt_lxKe1FCf48byzEXx-0R9OLvmvIb_XzAgejMpadadsw3QaeBbcqc6o4uFkebm-at8tHppwd5paCGKo14QeGVGcuoQGN380iHyHxQwiAk8KAdO8sJVSCRafI2HX7VSK87BL-YuZXTGfDzfbPXXDZkEeZBUqFLmFvvUmc10dWEoV9jaZ4SLpmH9JW2zJWKPZrP4gkc6pL2_c8htNM-oHxRWSb3p__wNOlQi5v8po13YoewpuqZtAGH4qu82svMxZiGAJkpI6Cu1qbuR4a5G42ZmX8u6RKs6GS2vXDxU4HRbSEW0365z0XSdEhKbCr6eM_Xy1fwgOjJEbntQ9KjtW_3H1S20yjWy78L6a9EtyLvkomRKbjOvPDAz41MarVSLBw_GWzOb83-t7-cLnAWhBquYDUDinE4zkWYe8bW3HoMa-EGAQUiMoJJ75ikGNnVTDfmTHJjtCn0jGWZBjZPi9TJWfflNJHaqwLcNo1J3Mnl_ip2Xkg_MCtBQOP2bKMPX9ehFdBdR1nx4pvB_TOt0Ajy1MmlnCgxHO8ZyxPqnKtg78iVS89qCpIvXg77kMlhMddakc1YIA3GVQKoBleezIrSZTYhpItKj0-VgQFIi-TDfvPmyBE60olX7cNm-ZwKuPKbaDk4-y7CaHUY_tzijI9CCg6GQjGLC-RLDGTH9CO9EI4RVE039zIqb-B011KVl7nS-cbBgQAO3Nz5C9Hgrmx2MSQCed0skl1JL5gZ7nWbZxau8ZOuDvuFvnRhSjcxQdYA_DJ_GQ58MeVuRGnMMQmED_vJqPZLbAFf6Qix66LLB13MHXMLF55MXGxpU_SV4bEFI-gvpq_UpYGqBRBc7MCBv_6BPy-NEc9AfBjqlLjBB0m1uCjf1Z0XtG0SG5UQWWZmdLrF-gdgBvm93TYFpejeWwKIAzwhsNXqnkg3m9iMDIasRFqO9SEonuvJONE7BbzgmloDiJ5yY10QT-yBA1Qgt-JsemVnjgiAX-a2nFfEumOf4fp4Lz_-e0vvz6NOzcZflndmta2ADqXwaasQGuJp17-OnVkIvmtI-0xukbj-hN21FbyZ8nP5okYi8DXAUX_N2csb8go8Xl0K3Rq_Eh0hdgri-Bu8an86NsiYSFTEBKrPATWAVKYB9OPSR8gB7KU43JjOtEx5k3eWICO9Syut9cAuh8392LaU2Pin0GGvAEHTwOLmWY0DIjFAqBl930tXnBt7sdKbLg88_bu0l6w9N96qAXSoSDLPtmVRwYfOxFGUq2avdXgMw6uom4GmQ1FsRg3yZ9H8V3Wo6BMp5RFAjDBwn_C2RCopiKTUVGQPl5-p-5qOPWshbgViskGzUb1dtuMBu0i-FLXmX_cWYeqmXeCI5p_mNUsA96UfukeYIRTF1jDcWVIsshco48j0TfiQjGwyrpZ-4uGhCpUm198AAC1n8xm8xuVAxSPpaDAmEFpak-NVGiZFezS6y3UJdzBV2pCnBYWlgJpKotjxifucYjwWP9WGNs7L8pTZjZr8EP66cVk4sR-lEBWaZfXK22aPgzbx03JNKKrIX1kaIZ2Wx7MwK26Pilpn3BAeL6MCH0aiRLG6I8QJthEARwNTXeCCAdyeKX6emP4f5yhVAtnnZaYguHpQ7t9M1SOXhSrnRh1A4idbOiHl1G8GSeERNqHuipjZ-d7Bj1luSLKNMiyGvZxkR5X5w6vwcICezZYYloolKxdzD37GLCWDhzs4JFXX22gNcmlCbXwOkh5bwJykXCX6jH5WzmOcQMBJNaAulqZVtp_D6hERfiWT1QmzthfmTnCTTbLcihh72_WaHEcULlFvFHY22l4BJcDEzXOVIT35SeJlR4Yo4t1flWhdO9bb3poRkAVmZLy6Sbhwb5Ddf0ibIcz-DkCFsBLopSGKPGC7P7THQ4KJnvUgDqSMASXnqWOAEwKXj2UXzc5fidPBvA_-WbbA1Su2gbfw2Fi5vOV8tx4drkokt7KpEEJf1scpdbAjcd56glpJ0DfhwuOdRh0g0-gnY6EqClPXZdVlQjSUAefkD9NDjFyyVmyG_RlwEcVoHt7S79z6X72YGRjGM757T8ag7vOl7YJhSLGRMXkfzSKtctSPCIqf0kOi4i1aJr2JO_Z8WPHPZYmGOuIyb-jMZtP9ZK6MGJ3exBK9XvvoWs3tQ-A8F3Ysofviax3lrlMeA8Mn_RiSwbkbKzpJrgEQJYXGbyME9sDK42HE95pd9ynrcxVO7tCBc8iLIXOnx5HvTgX43UT8Js1QtnuVvSLMnTvt5AOoXL3GWI3AD3TokXctL4-lBNfF4UuAK_Nvq6EZBAxUOtuVuGT5d7icWjdmn7CbtbPZvjekWrZE4pSl7dYtwAjOjBuqk5MhNtP-ngU4HXiYDmM5b2oFlqOnfTVS2Z1mRjwc3QYhmxRu-rOsFBabDX3gX5UvJpK31pgSYPy_nKZXz1knxfKE-jrX03wertecpR093tF9vzmIV6S_mPBq51MRwWdSHlgCSAUKpHi3xeJFELnmaoy_T66iSeEWAMw_MMhHrht24HNsZUW76wj-E95MjMCuRG5GQuM4Ier3v11iIEnqzKc2HmIMUGZGORynwgxz9irJnHuzUhuCoTdbUtTqMDH8&cid=CAASKORoCrJY8jUxPnJEGfn_wTdARqNfkoaQO0iACjpxEwlsHx1cceM5W_Q&rfl=2%2C%2Chttps%253A%252F%252Fearnme.club%252F%240
200 OK 11 kB URL HTTP/2 googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-Ctq9VuWEyKNpoT2n1_gNPe_5RV1D_u_gxskKyObP3x-_issERi3WQX9UJ0CqYECLRQy5ElsO-cjWQItXnpC6_82oiDWJYsSDVfP1__T8C6c1N1whP7n8xXC4JYqgwx3kr8Amp-HQh1rPoVmhDx62rVLsTdj7_8rDmXppJ4-rIi_5mNX14&cry=1&dbm_d=AKAmf-Dc6Xo18PoW6fgJKvru2Uhb6s9Ld7-gxDNYrYOinRBTU9C1pCMmmDtgylK2Afwr7Fe5k56sR_yu-_YxZm0lBw41HEnCNUf_xd8NqVzRzsIRcHA57QP4hLDtDkenRwpTtSShEdglFwASytJ0Wn3htfR3tTYIFMfPJA8ujH60AVP0HoqvUEERrmCABDailDlG0uEHyZj6z73ixq1Eo4V7EMLK7IU1cDA98B3OZcfJ80vSwk-MpnTDq0K15nlA_Dq4wXuQq3uphDKIV2CafQheO8hZVfFOhMK0upjmVsK7tDa32qmwmQQaL0A7JOs0NzT2-iGvwLf_pYfJvkzavvs9gdm1qmYoFbr-WH55sWxH9TflmQMtO3s42VN1_Oge25V4Ycos328nvrKGjSGqOCqjjL95_SVPgApcxY8XKUPkb_MFEt-C39FMIOS2cMLZdpJG4E4Fsz6S1jhF6FICuIL55rMz_0bucyuYCFFpclrUJNdF_31w32uK_oQW4r7TusjWxrCShyWPBPLu4H_qPu3S8-8zIaTKp9HtdudxMkSSaCxaYdXJqorrfm6KWA6J1iz_JgA96Rv5zGSkkE5bxHpm7CitWkeOfvylRasOCrbNI1Bs4cpr7hIQeIOrN8ZhNYr5niGWgq5Zlkq19qJ_9Ab_cIMLzqyzSUNJyqNpKorNguF68vgAoMJsaITQvgB4wLZWSBLEHm3XV7PUQ5MoXhvgnFYglqC-LpTXBGvvgUoI4hAKgpAkc-amkoa0mxt_lxKe1FCf48byzEXx-0R9OLvmvIb_XzAgejMpadadsw3QaeBbcqc6o4uFkebm-at8tHppwd5paCGKo14QeGVGcuoQGN380iHyHxQwiAk8KAdO8sJVSCRafI2HX7VSK87BL-YuZXTGfDzfbPXXDZkEeZBUqFLmFvvUmc10dWEoV9jaZ4SLpmH9JW2zJWKPZrP4gkc6pL2_c8htNM-oHxRWSb3p__wNOlQi5v8po13YoewpuqZtAGH4qu82svMxZiGAJkpI6Cu1qbuR4a5G42ZmX8u6RKs6GS2vXDxU4HRbSEW0365z0XSdEhKbCr6eM_Xy1fwgOjJEbntQ9KjtW_3H1S20yjWy78L6a9EtyLvkomRKbjOvPDAz41MarVSLBw_GWzOb83-t7-cLnAWhBquYDUDinE4zkWYe8bW3HoMa-EGAQUiMoJJ75ikGNnVTDfmTHJjtCn0jGWZBjZPi9TJWfflNJHaqwLcNo1J3Mnl_ip2Xkg_MCtBQOP2bKMPX9ehFdBdR1nx4pvB_TOt0Ajy1MmlnCgxHO8ZyxPqnKtg78iVS89qCpIvXg77kMlhMddakc1YIA3GVQKoBleezIrSZTYhpItKj0-VgQFIi-TDfvPmyBE60olX7cNm-ZwKuPKbaDk4-y7CaHUY_tzijI9CCg6GQjGLC-RLDGTH9CO9EI4RVE039zIqb-B011KVl7nS-cbBgQAO3Nz5C9Hgrmx2MSQCed0skl1JL5gZ7nWbZxau8ZOuDvuFvnRhSjcxQdYA_DJ_GQ58MeVuRGnMMQmED_vJqPZLbAFf6Qix66LLB13MHXMLF55MXGxpU_SV4bEFI-gvpq_UpYGqBRBc7MCBv_6BPy-NEc9AfBjqlLjBB0m1uCjf1Z0XtG0SG5UQWWZmdLrF-gdgBvm93TYFpejeWwKIAzwhsNXqnkg3m9iMDIasRFqO9SEonuvJONE7BbzgmloDiJ5yY10QT-yBA1Qgt-JsemVnjgiAX-a2nFfEumOf4fp4Lz_-e0vvz6NOzcZflndmta2ADqXwaasQGuJp17-OnVkIvmtI-0xukbj-hN21FbyZ8nP5okYi8DXAUX_N2csb8go8Xl0K3Rq_Eh0hdgri-Bu8an86NsiYSFTEBKrPATWAVKYB9OPSR8gB7KU43JjOtEx5k3eWICO9Syut9cAuh8392LaU2Pin0GGvAEHTwOLmWY0DIjFAqBl930tXnBt7sdKbLg88_bu0l6w9N96qAXSoSDLPtmVRwYfOxFGUq2avdXgMw6uom4GmQ1FsRg3yZ9H8V3Wo6BMp5RFAjDBwn_C2RCopiKTUVGQPl5-p-5qOPWshbgViskGzUb1dtuMBu0i-FLXmX_cWYeqmXeCI5p_mNUsA96UfukeYIRTF1jDcWVIsshco48j0TfiQjGwyrpZ-4uGhCpUm198AAC1n8xm8xuVAxSPpaDAmEFpak-NVGiZFezS6y3UJdzBV2pCnBYWlgJpKotjxifucYjwWP9WGNs7L8pTZjZr8EP66cVk4sR-lEBWaZfXK22aPgzbx03JNKKrIX1kaIZ2Wx7MwK26Pilpn3BAeL6MCH0aiRLG6I8QJthEARwNTXeCCAdyeKX6emP4f5yhVAtnnZaYguHpQ7t9M1SOXhSrnRh1A4idbOiHl1G8GSeERNqHuipjZ-d7Bj1luSLKNMiyGvZxkR5X5w6vwcICezZYYloolKxdzD37GLCWDhzs4JFXX22gNcmlCbXwOkh5bwJykXCX6jH5WzmOcQMBJNaAulqZVtp_D6hERfiWT1QmzthfmTnCTTbLcihh72_WaHEcULlFvFHY22l4BJcDEzXOVIT35SeJlR4Yo4t1flWhdO9bb3poRkAVmZLy6Sbhwb5Ddf0ibIcz-DkCFsBLopSGKPGC7P7THQ4KJnvUgDqSMASXnqWOAEwKXj2UXzc5fidPBvA_-WbbA1Su2gbfw2Fi5vOV8tx4drkokt7KpEEJf1scpdbAjcd56glpJ0DfhwuOdRh0g0-gnY6EqClPXZdVlQjSUAefkD9NDjFyyVmyG_RlwEcVoHt7S79z6X72YGRjGM757T8ag7vOl7YJhSLGRMXkfzSKtctSPCIqf0kOi4i1aJr2JO_Z8WPHPZYmGOuIyb-jMZtP9ZK6MGJ3exBK9XvvoWs3tQ-A8F3Ysofviax3lrlMeA8Mn_RiSwbkbKzpJrgEQJYXGbyME9sDK42HE95pd9ynrcxVO7tCBc8iLIXOnx5HvTgX43UT8Js1QtnuVvSLMnTvt5AOoXL3GWI3AD3TokXctL4-lBNfF4UuAK_Nvq6EZBAxUOtuVuGT5d7icWjdmn7CbtbPZvjekWrZE4pSl7dYtwAjOjBuqk5MhNtP-ngU4HXiYDmM5b2oFlqOnfTVS2Z1mRjwc3QYhmxRu-rOsFBabDX3gX5UvJpK31pgSYPy_nKZXz1knxfKE-jrX03wertecpR093tF9vzmIV6S_mPBq51MRwWdSHlgCSAUKpHi3xeJFELnmaoy_T66iSeEWAMw_MMhHrht24HNsZUW76wj-E95MjMCuRG5GQuM4Ier3v11iIEnqzKc2HmIMUGZGORynwgxz9irJnHuzUhuCoTdbUtTqMDH8&cid=CAASKORoCrJY8jUxPnJEGfn_wTdARqNfkoaQO0iACjpxEwlsHx1cceM5W_Q&rfl=2%2C%2Chttps%253A%252F%252Fearnme.club%252F%240
IP
File type ASCII text, with very long lines (15222), with no line terminators
Hash dd2efec19cdfe1b66b79e1e8808ebed0
77b0d5113a38ac3b8ba0361fc5f645454cbabd2d
4b37387e3d1a1a98819701585c8612d723a08010d6662e9b029eebdb158f2295
GET /dbm/ad?dbm_c=AKAmf-Ctq9VuWEyKNpoT2n1_gNPe_5RV1D_u_gxskKyObP3x-_issERi3WQX9UJ0CqYECLRQy5ElsO-cjWQItXnpC6_82oiDWJYsSDVfP1__T8C6c1N1whP7n8xXC4JYqgwx3kr8Amp-HQh1rPoVmhDx62rVLsTdj7_8rDmXppJ4-rIi_5mNX14&cry=1&dbm_d=AKAmf-Dc6Xo18PoW6fgJKvru2Uhb6s9Ld7-gxDNYrYOinRBTU9C1pCMmmDtgylK2Afwr7Fe5k56sR_yu-_YxZm0lBw41HEnCNUf_xd8NqVzRzsIRcHA57QP4hLDtDkenRwpTtSShEdglFwASytJ0Wn3htfR3tTYIFMfPJA8ujH60AVP0HoqvUEERrmCABDailDlG0uEHyZj6z73ixq1Eo4V7EMLK7IU1cDA98B3OZcfJ80vSwk-MpnTDq0K15nlA_Dq4wXuQq3uphDKIV2CafQheO8hZVfFOhMK0upjmVsK7tDa32qmwmQQaL0A7JOs0NzT2-iGvwLf_pYfJvkzavvs9gdm1qmYoFbr-WH55sWxH9TflmQMtO3s42VN1_Oge25V4Ycos328nvrKGjSGqOCqjjL95_SVPgApcxY8XKUPkb_MFEt-C39FMIOS2cMLZdpJG4E4Fsz6S1jhF6FICuIL55rMz_0bucyuYCFFpclrUJNdF_31w32uK_oQW4r7TusjWxrCShyWPBPLu4H_qPu3S8-8zIaTKp9HtdudxMkSSaCxaYdXJqorrfm6KWA6J1iz_JgA96Rv5zGSkkE5bxHpm7CitWkeOfvylRasOCrbNI1Bs4cpr7hIQeIOrN8ZhNYr5niGWgq5Zlkq19qJ_9Ab_cIMLzqyzSUNJyqNpKorNguF68vgAoMJsaITQvgB4wLZWSBLEHm3XV7PUQ5MoXhvgnFYglqC-LpTXBGvvgUoI4hAKgpAkc-amkoa0mxt_lxKe1FCf48byzEXx-0R9OLvmvIb_XzAgejMpadadsw3QaeBbcqc6o4uFkebm-at8tHppwd5paCGKo14QeGVGcuoQGN380iHyHxQwiAk8KAdO8sJVSCRafI2HX7VSK87BL-YuZXTGfDzfbPXXDZkEeZBUqFLmFvvUmc10dWEoV9jaZ4SLpmH9JW2zJWKPZrP4gkc6pL2_c8htNM-oHxRWSb3p__wNOlQi5v8po13YoewpuqZtAGH4qu82svMxZiGAJkpI6Cu1qbuR4a5G42ZmX8u6RKs6GS2vXDxU4HRbSEW0365z0XSdEhKbCr6eM_Xy1fwgOjJEbntQ9KjtW_3H1S20yjWy78L6a9EtyLvkomRKbjOvPDAz41MarVSLBw_GWzOb83-t7-cLnAWhBquYDUDinE4zkWYe8bW3HoMa-EGAQUiMoJJ75ikGNnVTDfmTHJjtCn0jGWZBjZPi9TJWfflNJHaqwLcNo1J3Mnl_ip2Xkg_MCtBQOP2bKMPX9ehFdBdR1nx4pvB_TOt0Ajy1MmlnCgxHO8ZyxPqnKtg78iVS89qCpIvXg77kMlhMddakc1YIA3GVQKoBleezIrSZTYhpItKj0-VgQFIi-TDfvPmyBE60olX7cNm-ZwKuPKbaDk4-y7CaHUY_tzijI9CCg6GQjGLC-RLDGTH9CO9EI4RVE039zIqb-B011KVl7nS-cbBgQAO3Nz5C9Hgrmx2MSQCed0skl1JL5gZ7nWbZxau8ZOuDvuFvnRhSjcxQdYA_DJ_GQ58MeVuRGnMMQmED_vJqPZLbAFf6Qix66LLB13MHXMLF55MXGxpU_SV4bEFI-gvpq_UpYGqBRBc7MCBv_6BPy-NEc9AfBjqlLjBB0m1uCjf1Z0XtG0SG5UQWWZmdLrF-gdgBvm93TYFpejeWwKIAzwhsNXqnkg3m9iMDIasRFqO9SEonuvJONE7BbzgmloDiJ5yY10QT-yBA1Qgt-JsemVnjgiAX-a2nFfEumOf4fp4Lz_-e0vvz6NOzcZflndmta2ADqXwaasQGuJp17-OnVkIvmtI-0xukbj-hN21FbyZ8nP5okYi8DXAUX_N2csb8go8Xl0K3Rq_Eh0hdgri-Bu8an86NsiYSFTEBKrPATWAVKYB9OPSR8gB7KU43JjOtEx5k3eWICO9Syut9cAuh8392LaU2Pin0GGvAEHTwOLmWY0DIjFAqBl930tXnBt7sdKbLg88_bu0l6w9N96qAXSoSDLPtmVRwYfOxFGUq2avdXgMw6uom4GmQ1FsRg3yZ9H8V3Wo6BMp5RFAjDBwn_C2RCopiKTUVGQPl5-p-5qOPWshbgViskGzUb1dtuMBu0i-FLXmX_cWYeqmXeCI5p_mNUsA96UfukeYIRTF1jDcWVIsshco48j0TfiQjGwyrpZ-4uGhCpUm198AAC1n8xm8xuVAxSPpaDAmEFpak-NVGiZFezS6y3UJdzBV2pCnBYWlgJpKotjxifucYjwWP9WGNs7L8pTZjZr8EP66cVk4sR-lEBWaZfXK22aPgzbx03JNKKrIX1kaIZ2Wx7MwK26Pilpn3BAeL6MCH0aiRLG6I8QJthEARwNTXeCCAdyeKX6emP4f5yhVAtnnZaYguHpQ7t9M1SOXhSrnRh1A4idbOiHl1G8GSeERNqHuipjZ-d7Bj1luSLKNMiyGvZxkR5X5w6vwcICezZYYloolKxdzD37GLCWDhzs4JFXX22gNcmlCbXwOkh5bwJykXCX6jH5WzmOcQMBJNaAulqZVtp_D6hERfiWT1QmzthfmTnCTTbLcihh72_WaHEcULlFvFHY22l4BJcDEzXOVIT35SeJlR4Yo4t1flWhdO9bb3poRkAVmZLy6Sbhwb5Ddf0ibIcz-DkCFsBLopSGKPGC7P7THQ4KJnvUgDqSMASXnqWOAEwKXj2UXzc5fidPBvA_-WbbA1Su2gbfw2Fi5vOV8tx4drkokt7KpEEJf1scpdbAjcd56glpJ0DfhwuOdRh0g0-gnY6EqClPXZdVlQjSUAefkD9NDjFyyVmyG_RlwEcVoHt7S79z6X72YGRjGM757T8ag7vOl7YJhSLGRMXkfzSKtctSPCIqf0kOi4i1aJr2JO_Z8WPHPZYmGOuIyb-jMZtP9ZK6MGJ3exBK9XvvoWs3tQ-A8F3Ysofviax3lrlMeA8Mn_RiSwbkbKzpJrgEQJYXGbyME9sDK42HE95pd9ynrcxVO7tCBc8iLIXOnx5HvTgX43UT8Js1QtnuVvSLMnTvt5AOoXL3GWI3AD3TokXctL4-lBNfF4UuAK_Nvq6EZBAxUOtuVuGT5d7icWjdmn7CbtbPZvjekWrZE4pSl7dYtwAjOjBuqk5MhNtP-ngU4HXiYDmM5b2oFlqOnfTVS2Z1mRjwc3QYhmxRu-rOsFBabDX3gX5UvJpK31pgSYPy_nKZXz1knxfKE-jrX03wertecpR093tF9vzmIV6S_mPBq51MRwWdSHlgCSAUKpHi3xeJFELnmaoy_T66iSeEWAMw_MMhHrht24HNsZUW76wj-E95MjMCuRG5GQuM4Ier3v11iIEnqzKc2HmIMUGZGORynwgxz9irJnHuzUhuCoTdbUtTqMDH8&cid=CAASKORoCrJY8jUxPnJEGfn_wTdARqNfkoaQO0iACjpxEwlsHx1cceM5W_Q&rfl=2%2C%2Chttps%253A%252F%252Fearnme.club%252F%240 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a1bd6e58b2679fb90a588a9503b148b4.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 06 Oct 2022 18:33:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 11372
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 06-Oct-2022 18:48:19 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s.amazon-adsystem.com/dcm?pid=72348060-38ad-4586-8e4f-f1e2a8e789b3&id=6909554343191509474&gdpr=0&gdpr_consent=&dcc=t
200 OK 43 B URL HTTP/1.1 s.amazon-adsystem.com/dcm?pid=72348060-38ad-4586-8e4f-f1e2a8e789b3&id=6909554343191509474&gdpr=0&gdpr_consent=&dcc=t
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6851dbf491ae442da3314f19e8aff085
ecfec27263608c4ae7cd4f8e0cebb1b061df2ac3
c21e2c1246fe45a6750ae6208db2b5965ff6ed63eb80d2ecec3be9c83813428e
GET /dcm?pid=72348060-38ad-4586-8e4f-f1e2a8e789b3&id=6909554343191509474&gdpr=0&gdpr_consent=&dcc=t HTTP/1.1
Host: s.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Server
Date: Thu, 06 Oct 2022 18:33:19 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
x-amz-rid: 5R4XSHRGVCPZFHKJ07S9
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
sync.1rx.io/usersync/audigent/0?dspret=1&redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Funruly%3Fid%3DAU1D-0100-001665081199-B7BATCG0-FRJV%26unruly_id%3D%5BRX_UUID%5D
302 Found 4.4 kB URL HTTP/2 sync.1rx.io/usersync/audigent/0?dspret=1&redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Funruly%3Fid%3DAU1D-0100-001665081199-B7BATCG0-FRJV%26unruly_id%3D%5BRX_UUID%5D
IP
File type gzip compressed data, max compression\012- data
Hash 682bf699cccbc0ff817e1fcb7b95262a
11ad3edf0008f52b733c2d6d7199e1f052318d58
bd42f773d589f85cf6884d7893746d5d4e0c082f78e1c80511cf3aefa1c69a0f
GET /usersync/audigent/0?dspret=1&redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Funruly%3Fid%3DAU1D-0100-001665081199-B7BATCG0-FRJV%26unruly_id%3D%5BRX_UUID%5D HTTP/1.1
Host: sync.1rx.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 06 Oct 2022 18:33:19 GMT
content-type: text/html
cache-control: no-store, no-cache, must-revalidate
expires: 0
pragma: no-cache
set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-4b457c8f-82b3-4586-9891-e1f90f28c116-003%22%7D; path=/; expires=Fri, 06 Oct 2023 18:33:19 GMT; domain=.1rx.io; samesite=none; secure; httponly
p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why"
location: https://sync.1rx.io/usersync/audigent/0?zcc=1&redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Funruly%3Fid%3DAU1D-0100-001665081199-B7BATCG0-FRJV%26unruly_id%3D%5BRX_UUID%5D&cb=1665081199319
etag: RX4b457c8f82b345869891e1f90f28c116003
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=nuqyyrt&e=1583478116998
200 OK 119 kB URL HTTP/2 flashnetic.com/r/p.html?f=nuqyyrt&e=1583478116998
IP
File type HTML document, ASCII text
Size 119 kB (119278 bytes)
Hash c10b8a079e17c4983395598f14d4b678
f893176f8257f92d0354d5753c13875269cb9263
32d9dbf8a90cc7d5afb94c61510360c2f02d9372c3bf3e9085b8afe279d235bf
GET /r/p.html?f=nuqyyrt&e=1583478116998 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ziWkLcuNe5hTn_7EV7dGAeB-GzEM9k7SA5-qhSAPhx1sA-bntukxnw==
age: 23125
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
bh.contextweb.com/bh/rtset?pid=562316&ev=1&rurl=https://ids.ad.gt/api/v1/ppnt_match?uid=%%VGUID%%&id=AU1D-0100-001665081199-B7BATCG0-FRJV
302 Found 100 B URL HTTP/2 bh.contextweb.com/bh/rtset?pid=562316&ev=1&rurl=https://ids.ad.gt/api/v1/ppnt_match?uid=%%VGUID%%&id=AU1D-0100-001665081199-B7BATCG0-FRJV
IP
File type gzip compressed data, max compression\012- data
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /bh/rtset?pid=562316&ev=1&rurl=https://ids.ad.gt/api/v1/ppnt_match?uid=%%VGUID%%&id=AU1D-0100-001665081199-B7BATCG0-FRJV HTTP/1.1
Host: bh.contextweb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT"
cw-server: bh-deployment-7945856c5-rdvc7
cache-control: private, max-age=0, no-cache, no-store
expires: -1
content-language: en-US
location: https://ids.ad.gt/api/v1/ppnt_match?uid=Jw3VF1Z4uGN3&ev=1&pid=562316&id=AU1D-0100-001665081199-B7BATCG0-FRJV
server: Jetty(9.4.14.v20181114)
strict-transport-security: max-age=15768000
set-cookie: V=Jw3VF1Z4uGN3;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Sun, 01-Oct-2023 18:33:19 GMT;Max-Age=31104000;SameSite=None
INGRESSCOOKIE=0f3eff0357dd0016; path=/; HttpOnly; Secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash f71dddcc03bb2b19646dda07ec6f4c05
d99faed81d1c9bd0c009e7308142e865333cace5
000a2454918bc9de223fa3ef59910b724de20510e57803de0bae40396f8303ef
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4982
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 18:33:20 GMT
Last-Modified: Thu, 06 Oct 2022 17:10:18 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 314
pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&li=gpt_2022100301&jk=1610827427045258&rc=
204 No Content 0 B URL HTTP/2 pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&li=gpt_2022100301&jk=1610827427045258&rc=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/sodar?id=sodar2&v=225&li=gpt_2022100301&jk=1610827427045258&rc= HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Thu, 06 Oct 2022 18:33:20 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.adapex.io/hb/aaw.emc.js
200 OK 164 kB URL HTTP/2 cdn.adapex.io/hb/aaw.emc.js
IP
File type ASCII text, with very long lines (65254)
Size 164 kB (164350 bytes)
Hash 490013e6c7565867cd9714e2ab4b74a0
fa5c40a7010fcce6349e6c2dfcfa8f831c4ec815
e50acd0b3bc9ff1e2e293551bfed600d1a1973e80173fb20c1a3526541ad6672
GET /hb/aaw.emc.js HTTP/1.1
Host: cdn.adapex.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:11 GMT
content-type: application/javascript
last-modified: Tue, 04 Oct 2022 06:19:54 GMT
vary: Accept-Encoding
etag: W/"633bd08a-7effe"
expires: Thu, 06 Oct 2022 06:20:43 GMT
cache-control: public, max-age=86400
access-control-allow-origin: *
cf-cache-status: HIT
age: 79565
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T4aih79EHyEB76tneDiOqOjZkPrpGdyUA%2Fb%2BRMApH5CGfbb8iXd7EimCd6%2FAoA2KN9USuuY%2B1jUSp2KJB%2BNGIsgnij6ZKceltiTdyyTQauRHqv6OYaTUOH%2FDteLWB1EW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75607be978f1b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ids.ad.gt/api/v1/ppnt_match?uid=Jw3VF1Z4uGN3&ev=1&pid=562316&id=AU1D-0100-001665081199-B7BATCG0-FRJV
200 OK 0 B URL HTTP/2 ids.ad.gt/api/v1/ppnt_match?uid=Jw3VF1Z4uGN3&ev=1&pid=562316&id=AU1D-0100-001665081199-B7BATCG0-FRJV
IP
GET /api/v1/ppnt_match?uid=Jw3VF1Z4uGN3&ev=1&pid=562316&id=AU1D-0100-001665081199-B7BATCG0-FRJV HTTP/1.1
Host: ids.ad.gt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Connection: keep-alive
Cookie: au_id=AU1D-0100-001665081199-B7BATCG0-FRJV; g_hosted=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:19 GMT
content-type: image/gif
server: nginx/1.20.0
cache-control: public, max-age=43200
expires: Fri, 07 Oct 2022 06:33:19 GMT
set-cookie: au_id=AU1D-0100-001665081199-B7BATCG0-FRJV; Expires=Sat, 05 Oct 2024 18:33:19 GMT; Domain=.ad.gt; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
200 OK 0 B URL HTTP/2 c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
IP
GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Thu, 06 Oct 2022 01:33:17 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Thu, 06 Oct 2022 01:32:47 GMT
etag: W/"a4d296427fc806b21335359e398c025c"
cache-control: public, max-age=86400
x-amz-version-id: YousslGi_alc9N7i1PBVBMNtdY1LkTzi
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lK5hK4wBThkQ-uNgjW540xXWKunBPeRYAFh337Eip6lAv_Y2AMhJog==
age: 61197
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=plehyzyj&e=1288751309616
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=plehyzyj&e=1288751309616
IP
GET /r/p.html?f=plehyzyj&e=1288751309616 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1dt3P8oKPxbNmoHyQeC9t3xVug77A_imzjNTNaoIt9SoedDbDYWRvQ==
age: 23124
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=tnadnbv&e=1288751309616
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=tnadnbv&e=1288751309616
IP
GET /r/p.html?f=tnadnbv&e=1288751309616 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: if6XXmOtYFeh4wjEqScEcwDwC-l6iALSAAeEDVvB_ZkwTfr1Xc98sg==
age: 23124
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=xxrpa&e=1583478116998
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=xxrpa&e=1583478116998
IP
GET /r/p.html?f=xxrpa&e=1583478116998 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 31-TkKAhuUeUjHLkLoD-o6VP5nU9QK6MvgbNJvGSxeKKT4QVpwmcWg==
age: 23125
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=fpehcoh&e=1810590574682
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=fpehcoh&e=1810590574682
IP
GET /r/p.html?f=fpehcoh&e=1810590574682 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dME0g-T9RKv39qs04v2haBSXRjiYsm-KyRugLr8gg6sRhXJtW19fjg==
age: 23127
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=wivuzxbn&e=1810590574682
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=wivuzxbn&e=1810590574682
IP
GET /r/p.html?f=wivuzxbn&e=1810590574682 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: E0OD8MiHKGhPEb4xNB_nfMvAzbLCEbZHTbf_NPxsGBE-KC1rS2oFDw==
age: 23127
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=luofy&e=1583478116998
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=luofy&e=1583478116998
IP
GET /r/p.html?f=luofy&e=1583478116998 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vUm7GqIYwTZrbMISwu86AMGdQ-OXP-B008eOzi333EJqE7xTjf_GiA==
age: 23125
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
ads.eu.criteo.com/delivery/r/afr.php?z=Yz8fagAKeqMK5gUEAAYa9mEsmauMDHKLNlGBfg&u=%7Cugy3CyDsmcuWVIYgjucqxuklL03cVp3ymmu%2Fz7GFzog%3D%7C&c1=TEbw32HdmhlTb08vzaRE05Nor-kWNW37ds0oDHxEuxeKn7Xrp6ainli_Cmw5dJSudhYAqTqyTVLcRTLo73uKkdINW4E1Xhl0_TEoFnlBVZEouO_INcgZlvIaL1JOCATlMXyAbGV3omie1QXbz1DeAg8Gu1uHurElbT3g7OWMY6-bbfBkzbP1JKlmlOwWMV8_RlFxpGHqno5GrFmBMA7dYZrKeTWxeThYKlXFTr_TVaGielJT179XO7q_04kpJAwd1A4gupFIFpxjJz2oggN2a8H1QismUn0RiAHVDL5x9wDmn6y7zgudPuxXbaT73mcglWcJQYclW3Jsnj0bdoyuw7lRsT2N5OvxOn8_ax7AaMLWf9NYrh22fLRre5Vc9adW0_lDQ_nT5TRIpQd81p5GxiqXV5j04_3Lho-BScMtFKw5M4Mopm2YUvCnoRq5aRctlExkJ9UMVgQ7peS4NL2imoabMRmOfkahENlH6zX2lRlBvkqK-zlXk7NwYfcbv8ENzjpceN_g6RyNi2CHumkpdODyMpXeEBVxDI8p7yoIeyGNIexOxaEcgA&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCL_CBah8_Y6P1KYSKmAf2tZjIAsme0rFcvfGU93DAjbcBEAEgAGDDhICAmBiCARdjYS1wdWItOTk1OTczMDc1NDAzODAyNsgBCakC_ad16ICMsD7gAgCoAwGqBOYBT9BViY3QK_ucr5g8EqoQQd74Mg7CXY3iNUPCNMdh2wVQXzATksJ___eMF7ZAMYDizjvSL4CXrZtCsd9wcwSzGib9y-e9a1U2ahpygsVA6OYQVWZF3A3zsF-XdKS9VaEIDUqwzuAH97uUmBMpa_TkRYCzNmdPa_2do7rvBUe0gGGNPFC3aylDa6uJ5Fv3Pj7NVktZrbXvQ6uOSSDZ2y80hcco5Zpf5OMKmM7py55_msIg4sn61n-DuPzR-zwicO1X-jxdfwKWQtRbQcFALb-diDOkpgYH54-aRy7gQcQLCDBhRZvGYUTgBAGABrjB9-Ssx_Hb5QGgBiGoB4qYsQKoB6a-G6gHltgbqAeqm7ECqAf_nrECqAffn7EC2AcA0ggQCIjhgHAQATID64IBOgKAQPIIG2FkeC1zdWJzeW4tNjIxNjUxOTk0MTQxMDkwMPoLAggBgAwB0BUBgBcB%26num%3D1%26sig%3DAOD64_3gHY3D1Hn7oBeh42JFtG1MDJvyCQ%26client%3Dca-pub-9959730754038026%26adurl%3D
200 OK 0 B URL HTTP/2 ads.eu.criteo.com/delivery/r/afr.php?z=Yz8fagAKeqMK5gUEAAYa9mEsmauMDHKLNlGBfg&u=%7Cugy3CyDsmcuWVIYgjucqxuklL03cVp3ymmu%2Fz7GFzog%3D%7C&c1=TEbw32HdmhlTb08vzaRE05Nor-kWNW37ds0oDHxEuxeKn7Xrp6ainli_Cmw5dJSudhYAqTqyTVLcRTLo73uKkdINW4E1Xhl0_TEoFnlBVZEouO_INcgZlvIaL1JOCATlMXyAbGV3omie1QXbz1DeAg8Gu1uHurElbT3g7OWMY6-bbfBkzbP1JKlmlOwWMV8_RlFxpGHqno5GrFmBMA7dYZrKeTWxeThYKlXFTr_TVaGielJT179XO7q_04kpJAwd1A4gupFIFpxjJz2oggN2a8H1QismUn0RiAHVDL5x9wDmn6y7zgudPuxXbaT73mcglWcJQYclW3Jsnj0bdoyuw7lRsT2N5OvxOn8_ax7AaMLWf9NYrh22fLRre5Vc9adW0_lDQ_nT5TRIpQd81p5GxiqXV5j04_3Lho-BScMtFKw5M4Mopm2YUvCnoRq5aRctlExkJ9UMVgQ7peS4NL2imoabMRmOfkahENlH6zX2lRlBvkqK-zlXk7NwYfcbv8ENzjpceN_g6RyNi2CHumkpdODyMpXeEBVxDI8p7yoIeyGNIexOxaEcgA&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCL_CBah8_Y6P1KYSKmAf2tZjIAsme0rFcvfGU93DAjbcBEAEgAGDDhICAmBiCARdjYS1wdWItOTk1OTczMDc1NDAzODAyNsgBCakC_ad16ICMsD7gAgCoAwGqBOYBT9BViY3QK_ucr5g8EqoQQd74Mg7CXY3iNUPCNMdh2wVQXzATksJ___eMF7ZAMYDizjvSL4CXrZtCsd9wcwSzGib9y-e9a1U2ahpygsVA6OYQVWZF3A3zsF-XdKS9VaEIDUqwzuAH97uUmBMpa_TkRYCzNmdPa_2do7rvBUe0gGGNPFC3aylDa6uJ5Fv3Pj7NVktZrbXvQ6uOSSDZ2y80hcco5Zpf5OMKmM7py55_msIg4sn61n-DuPzR-zwicO1X-jxdfwKWQtRbQcFALb-diDOkpgYH54-aRy7gQcQLCDBhRZvGYUTgBAGABrjB9-Ssx_Hb5QGgBiGoB4qYsQKoB6a-G6gHltgbqAeqm7ECqAf_nrECqAffn7EC2AcA0ggQCIjhgHAQATID64IBOgKAQPIIG2FkeC1zdWJzeW4tNjIxNjUxOTk0MTQxMDkwMPoLAggBgAwB0BUBgBcB%26num%3D1%26sig%3DAOD64_3gHY3D1Hn7oBeh42JFtG1MDJvyCQ%26client%3Dca-pub-9959730754038026%26adurl%3D
IP
GET /delivery/r/afr.php?z=Yz8fagAKeqMK5gUEAAYa9mEsmauMDHKLNlGBfg&u=%7Cugy3CyDsmcuWVIYgjucqxuklL03cVp3ymmu%2Fz7GFzog%3D%7C&c1=TEbw32HdmhlTb08vzaRE05Nor-kWNW37ds0oDHxEuxeKn7Xrp6ainli_Cmw5dJSudhYAqTqyTVLcRTLo73uKkdINW4E1Xhl0_TEoFnlBVZEouO_INcgZlvIaL1JOCATlMXyAbGV3omie1QXbz1DeAg8Gu1uHurElbT3g7OWMY6-bbfBkzbP1JKlmlOwWMV8_RlFxpGHqno5GrFmBMA7dYZrKeTWxeThYKlXFTr_TVaGielJT179XO7q_04kpJAwd1A4gupFIFpxjJz2oggN2a8H1QismUn0RiAHVDL5x9wDmn6y7zgudPuxXbaT73mcglWcJQYclW3Jsnj0bdoyuw7lRsT2N5OvxOn8_ax7AaMLWf9NYrh22fLRre5Vc9adW0_lDQ_nT5TRIpQd81p5GxiqXV5j04_3Lho-BScMtFKw5M4Mopm2YUvCnoRq5aRctlExkJ9UMVgQ7peS4NL2imoabMRmOfkahENlH6zX2lRlBvkqK-zlXk7NwYfcbv8ENzjpceN_g6RyNi2CHumkpdODyMpXeEBVxDI8p7yoIeyGNIexOxaEcgA&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCL_CBah8_Y6P1KYSKmAf2tZjIAsme0rFcvfGU93DAjbcBEAEgAGDDhICAmBiCARdjYS1wdWItOTk1OTczMDc1NDAzODAyNsgBCakC_ad16ICMsD7gAgCoAwGqBOYBT9BViY3QK_ucr5g8EqoQQd74Mg7CXY3iNUPCNMdh2wVQXzATksJ___eMF7ZAMYDizjvSL4CXrZtCsd9wcwSzGib9y-e9a1U2ahpygsVA6OYQVWZF3A3zsF-XdKS9VaEIDUqwzuAH97uUmBMpa_TkRYCzNmdPa_2do7rvBUe0gGGNPFC3aylDa6uJ5Fv3Pj7NVktZrbXvQ6uOSSDZ2y80hcco5Zpf5OMKmM7py55_msIg4sn61n-DuPzR-zwicO1X-jxdfwKWQtRbQcFALb-diDOkpgYH54-aRy7gQcQLCDBhRZvGYUTgBAGABrjB9-Ssx_Hb5QGgBiGoB4qYsQKoB6a-G6gHltgbqAeqm7ECqAf_nrECqAffn7EC2AcA0ggQCIjhgHAQATID64IBOgKAQPIIG2FkeC1zdWJzeW4tNjIxNjUxOTk0MTQxMDkwMPoLAggBgAwB0BUBgBcB%26num%3D1%26sig%3DAOD64_3gHY3D1Hn7oBeh42JFtG1MDJvyCQ%26client%3Dca-pub-9959730754038026%26adurl%3D HTTP/1.1
Host: ads.eu.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://15ff3f88baa173ab003f0e7fc5f4a251.safeframe.googlesyndication.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:19 GMT
content-type: text/html
server: Kestrel
cache-control: private, max-age=0, no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
access-control-max-age: 1000
cross-origin-resource-policy: cross-origin
p3p: CP='CUR ADM OUR NOR STA NID'
report-to: {"endpoints":[{"url":"https://csm.eu.criteo.net/heavyad?cppv=3&cpp=ug_YYuR9V9JH_3hBbshWV-hdrO7o_gssRt7nch-M_2m60p3dGTdqyM3VhlCNgSO9tH-0td2LQIGxHQAbR4Q_7KUZ_9KQkP6WErgtWLD3N6DFFygKOTNIwZHAGJJArP4ChAlr3oxtZRbNu0zLPTd2OO-En9GVW8ROuOWX1Wxg1gt3bD7o0FlIRUEOkZBrAcj8r6KRE7PEVlp1Rd0N_9sUXQsXE8mufpDQW43D0R7dLoqLb0L5NiqUDYTFO-k"}], "max_age": 86400}
link: <pix.eu.criteo.net>; rel=preconnect; crossorigin, <static.criteo.net>; rel=preconnect; crossorigin
server-processing-duration-in-ticks: 104833064
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?origin=publishertag&topUrl=earnme.club
200 OK 0 B URL HTTP/2 gum.criteo.com/syncframe?origin=publishertag&topUrl=earnme.club
IP
GET /syncframe?origin=publishertag&topUrl=earnme.club HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:18 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=a8aff8c0-9309-41cd-91ae-cd04703a88c8; expires=Tue, 31 Oct 2023 18:33:19 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 502305
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
cloudflare.com/cdn-cgi/trace
200 OK 0 B URL HTTP/2 cloudflare.com/cdn-cgi/trace
IP
GET /cdn-cgi/trace HTTP/1.1
Host: cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:12 GMT
content-type: text/plain
access-control-allow-origin: *
server: cloudflare
cf-ray: 75607beadc1ab4fd-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
htlbid.com/v3/earnme.club/adsstarbid.js
200 OK 0 B URL HTTP/2 htlbid.com/v3/earnme.club/adsstarbid.js
IP
GET /v3/earnme.club/adsstarbid.js HTTP/1.1
Host: htlbid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 13 Jun 2022 06:46:43 GMT
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 18:33:13 GMT
cache-control: max-age=600
etag: W/"c0185a5add25b0953f000fc7d272c31f"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zdy0bhhO_70PhEor1WeGBgmCasGY33NKsMeYt3IzXQVXB4zarZAtBQ==
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=wgcyua&e=1288751309616
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=wgcyua&e=1288751309616
IP
GET /r/p.html?f=wgcyua&e=1288751309616 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5WgjWJruyZzQ1hEGXSMSn92DV9RAJ7CojdDi0LyWEA5ViILB_0By5Q==
age: 23124
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
id.hadron.ad.gt/v1/hadron.json?partner_id=405&sync=0&domain=earnme.club
200 OK 0 B URL HTTP/2 id.hadron.ad.gt/v1/hadron.json?partner_id=405&sync=0&domain=earnme.club
IP
OPTIONS /v1/hadron.json?partner_id=405&sync=0&domain=earnme.club HTTP/1.1
Host: id.hadron.ad.gt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: access-control-allow-origin
Referer: https://earnme.club/
Origin: https://earnme.club
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:15 GMT
content-type: application/json
server: nginx/1.20.0
access-control-allow-origin: https://earnme.club
access-control-allow-credentials: true
access-control-allow-headers: access-control-allow-origin
access-control-allow-methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT
vary: Origin
content-encoding: gzip
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=oyrzmso&e=1810590574682
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=oyrzmso&e=1810590574682
IP
GET /r/p.html?f=oyrzmso&e=1810590574682 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: y4kWc9BkBwV-ijWg6Vo1djxdDNl1pT28UD2CZni0KPRPsU4a0qBrpw==
age: 23127
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
sync.tidaltv.com/genericusersync.ashx?dpid=3157&gdpr=0&gdpr_consent=&s_h=1
200 OK 0 B URL HTTP/2 sync.tidaltv.com/genericusersync.ashx?dpid=3157&gdpr=0&gdpr_consent=&s_h=1
IP
GET /genericusersync.ashx?dpid=3157&gdpr=0&gdpr_consent=&s_h=1 HTTP/1.1
Host: sync.tidaltv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:18 GMT
content-type: image/gif
set-cookie: tidal_ttid=07dcfab8-94a5-43c7-9686-5eabf4a82db3; Domain=.tidaltv.com; Expires=Fri, 06-Oct-2023 18:33:18 GMT; Path=/; SameSite=None; Secure
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=odaeciqaf&e=1288751309616
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=odaeciqaf&e=1288751309616
IP
GET /r/p.html?f=odaeciqaf&e=1288751309616 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: R34tRXRJzNlRKnx29MyDBlSFZEHN8gp-_5scjYUX97jAr87M8PHcWA==
age: 23124
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:400,400italic,700,600
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,400italic,700,600
IP
GET /css?family=Open+Sans:400,400italic,700,600 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 06 Oct 2022 18:33:11 GMT
date: Thu, 06 Oct 2022 18:33:11 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
flashnetic.com/t.js?i=uv85s8wiydoa62b7a5wma&cb=5091201665081192361
200 OK 0 B URL HTTP/2 flashnetic.com/t.js?i=uv85s8wiydoa62b7a5wma&cb=5091201665081192361
IP
GET /t.js?i=uv85s8wiydoa62b7a5wma&cb=5091201665081192361 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 03 Oct 2022 09:57:56 GMT
x-amz-version-id: dA4Fe8HVqWzJ0kdxW9pTboxBQT4XyDQO
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"1f8bcab833fd358cdd3a0188d9bf9292"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qi81S7snEhrQWgoeshdiqjdBayRK0IhHm_9xaaDQgeWZVBksGUt8Ww==
age: 23124
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=xtopol&e=1288751309616
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=xtopol&e=1288751309616
IP
GET /r/p.html?f=xtopol&e=1288751309616 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vjDorhUJbfSS6ZhubE8nzGNZhoCFNpU1bWpT1KhTShiPMXrJFYUCZQ==
age: 23124
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=wcbxyngzp&e=1810590574682
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=wcbxyngzp&e=1810590574682
IP
GET /r/p.html?f=wcbxyngzp&e=1810590574682 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hzJQJGqcxA0b1gYtR84fSgM48ZFnJRpMioE6saJmQEXB0L7ceSkASA==
age: 23127
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=lyfthrci&e=1810590574682
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=lyfthrci&e=1810590574682
IP
GET /r/p.html?f=lyfthrci&e=1810590574682 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8SHiw22hAZr7ATe75IdDrZnKuatvIfZNR5KFxFxT_vfRpJ8IcUf-8g==
age: 23127
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
trc.taboola.com/sg/audigent/1/cm?redirect=http%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Ftaboola%3Fpartner_uid%3D%3CTUID%3E%3Fid%3DAU1D-0100-001665081199-B7BATCG0-FRJV
200 OK 0 B URL HTTP/2 trc.taboola.com/sg/audigent/1/cm?redirect=http%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Ftaboola%3Fpartner_uid%3D%3CTUID%3E%3Fid%3DAU1D-0100-001665081199-B7BATCG0-FRJV
IP
GET /sg/audigent/1/cm?redirect=http%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Ftaboola%3Fpartner_uid%3D%3CTUID%3E%3Fid%3DAU1D-0100-001665081199-B7BATCG0-FRJV HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
cache-control: no-cache, no-store
pragma: no-cache
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
date: Thu, 06 Oct 2022 18:33:19 GMT
via: 1.1 varnish
x-served-by: cache-bma1639-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1665081199.126876,VS0,VE88
x-vcl-time-ms: 88
X-Firefox-Spdy: h2
sync.1rx.io/usersync/audigent/0?zcc=1&redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Funruly%3Fid%3DAU1D-0100-001665081199-B7BATCG0-FRJV%26unruly_id%3D%5BRX_UUID%5D&cb=1665081199319
302 Found 0 B URL HTTP/2 sync.1rx.io/usersync/audigent/0?zcc=1&redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Funruly%3Fid%3DAU1D-0100-001665081199-B7BATCG0-FRJV%26unruly_id%3D%5BRX_UUID%5D&cb=1665081199319
IP
GET /usersync/audigent/0?zcc=1&redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Funruly%3Fid%3DAU1D-0100-001665081199-B7BATCG0-FRJV%26unruly_id%3D%5BRX_UUID%5D&cb=1665081199319 HTTP/1.1
Host: sync.1rx.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://earnme.club/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Thu, 06 Oct 2022 18:33:19 GMT
content-type: text/html
cache-control: no-store, no-cache, must-revalidate
expires: 0
pragma: no-cache
location: https://ids.ad.gt/api/v1/unruly?id=AU1D-0100-001665081199-B7BATCG0-FRJV&unruly_id=OPTOUT
etag: OPTOUT
X-Firefox-Spdy: h2
earnme.club/fidelityfx-super-resolution-from-amd/
200 OK 0 B URL HTTP/2 earnme.club/fidelityfx-super-resolution-from-amd/
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Malware
GET /fidelityfx-super-resolution-from-amd/ HTTP/1.1
Host: earnme.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
x-pingback: https://earnme.club/xmlrpc.php
link: <https://earnme.club/wp-json/>; rel="https://api.w.org/", <https://earnme.club/wp-json/wp/v2/posts/182>; rel="alternate"; type="application/json", <https://earnme.club/?p=182>; rel=shortlink
vary: Accept-Encoding
content-encoding: gzip
date: Thu, 06 Oct 2022 18:33:11 GMT
alt-svc: quic=":443"; ma=2592000; v="43,46", h3-Q043=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-25=":443"; ma=2592000, h3-27=":443"; ma=2592000
X-Firefox-Spdy: h2
earnme.club/wp-content/uploads/2021/06/gsmarena_000-1-1-80x60.jpg
200 OK 0 B URL HTTP/2 earnme.club/wp-content/uploads/2021/06/gsmarena_000-1-1-80x60.jpg
IP
ASN #24940 Hetzner Online GmbH
GET /wp-content/uploads/2021/06/gsmarena_000-1-1-80x60.jpg HTTP/1.1
Host: earnme.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/fidelityfx-super-resolution-from-amd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 13 Oct 2022 18:33:11 GMT
content-type: image/jpeg
last-modified: Sun, 26 Jun 2022 03:03:19 GMT
accept-ranges: bytes
content-length: 2965
date: Thu, 06 Oct 2022 18:33:11 GMT
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=jmkgauaiki&e=1288751309616
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=jmkgauaiki&e=1288751309616
IP
GET /r/p.html?f=jmkgauaiki&e=1288751309616 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0i_pFH-X-DeZOon6c0_sBDZKNBzNbrnRQo4HDULvNha0xmLHxagCSw==
age: 23124
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=wysptxhth&e=1288751309616
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=wysptxhth&e=1288751309616
IP
GET /r/p.html?f=wysptxhth&e=1288751309616 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zifFhgE9Cy-fLyCb8gpVhU6TpNGDMcDu0TTa8cYeCqifKa5HkmQ2rA==
age: 23124
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=gssrvlans&e=1288751309616
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=gssrvlans&e=1288751309616
IP
GET /r/p.html?f=gssrvlans&e=1288751309616 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cFKL3mtQVHlmYCT6Pi1rG3dB73eN3UBo4wRtclfpUMx-uqohbowa8w==
age: 23124
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
hb.adpone.com/prebid6.15.0.js
200 OK 0 B URL HTTP/2 hb.adpone.com/prebid6.15.0.js
IP
GET /prebid6.15.0.js HTTP/1.1
Host: hb.adpone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://flashnetic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:14 GMT
content-type: application/javascript
x-amz-id-2: A0VTHS/zewNM63KgZx0PmP4uGNMo0c2vn1qK9hVgDIe6uV2NCGbM8RVwVK+jZyCw9s1DAEeSxFs=
x-amz-request-id: VM1TYMZFSZX14TWX
last-modified: Wed, 30 Mar 2022 09:13:54 GMT
etag: W/"ead6e8c23bf835688215d35a6b357336"
x-amz-version-id: xeKiFDHa4caZh3hM.m43HLu9jNtrHamp
cache-control: max-age=14400
cf-cache-status: HIT
age: 2754
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Zw3%2BxaE9f6wLUlyp7bOezFt0qjL4Fh2pVRYkYHPdvmJ%2Bf2QOySbGV2UFCKs6EDhzZi6H%2Fc7gcRgWzq8Cu0YSn1ipRUazm4EspRRYhXYidrCXiO7Jp5NkVMfYlKX8c9g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75607bf8599fb50b-OSL
content-encoding: br
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=mkdlvzc&e=1583478116998
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=mkdlvzc&e=1583478116998
IP
GET /r/p.html?f=mkdlvzc&e=1583478116998 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: EwWSo-rIB1TX5hR4GJirN7WR8FMaT1wSQJsc1zjRZdjntRHp7LkIsA==
age: 23125
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
flashnetic.com/r/p.html?f=bhbkeaxdco&e=1583478116998
200 OK 0 B URL HTTP/2 flashnetic.com/r/p.html?f=bhbkeaxdco&e=1583478116998
IP
GET /r/p.html?f=bhbkeaxdco&e=1583478116998 HTTP/1.1
Host: flashnetic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
date: Thu, 06 Oct 2022 12:07:48 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hguCxpJ3vGG8G0GTb8HMwHTFf6i7yG2XzoNG_Z2is8jrwX3XzBQ0hQ==
age: 23125
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
prebid.media.net/rtb/prebid?cid=8CUQWX43D
200 OK 0 B URL HTTP/2 prebid.media.net/rtb/prebid?cid=8CUQWX43D
IP
POST /rtb/prebid?cid=8CUQWX43D HTTP/1.1
Host: prebid.media.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 2432
Origin: https://earnme.club
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 18:33:13 GMT
content-type: application/json;charset=UTF-8
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: https://earnme.club
access-control-allow-credentials: true
content-encoding: gzip
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
a.ad.gt/api/v1/u/matches/405?_it=amazon
200 OK 0 B URL HTTP/2 a.ad.gt/api/v1/u/matches/405?_it=amazon
IP
GET /api/v1/u/matches/405?_it=amazon HTTP/1.1
Host: a.ad.gt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://earnme.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 18:33:17 GMT
content-type: application/javascript
server: nginx/1.20.0
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
157.90.71.190
142.250.74.162
178.250.2.131
151.101.85.44
93.184.220.29
52.94.222.140
147.75.85.234
37.157.4.23
104.18.20.226
23.38.201.50