r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 81713f952b51a865ad9764cde68e3fdb
278c3a9c4bb2a0ffb7375f90d89a1ba6e90a766a
c2eb0d8a24ecb51af28f1c71db4b9a95c568dcf6c94b41ee8c78787a4ebebcef
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C2EB0D8A24ECB51AF28F1C71DB4B9A95C568DCF6C94B41EE8C78787A4EBEBCEF"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6861
Expires: Fri, 03 Feb 2023 18:55:26 GMT
Date: Fri, 03 Feb 2023 17:01:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e935ea42be4feaed61a824b0b903913e
f966cfa80d65a805cb9d7c6a53b3340865d7c51a
eb0ce9ae50d156fe5924b2d77346735e4e93b5240cff301c9aa835bb0b385815
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB0CE9AE50D156FE5924B2D77346735E4E93B5240CFF301C9AA835BB0B385815"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9502
Expires: Fri, 03 Feb 2023 19:39:27 GMT
Date: Fri, 03 Feb 2023 17:01:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9a76feabb767086ae0fa54e0ffbf763f
3655d78994a1e9838340669462728b67c8c12e54
bf215ab858c7785b7c01f7d3d437a918f056f00fe9b065820e1cdd09b7bba8f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BF215AB858C7785B7C01F7D3D437A918F056F00FE9B065820E1CDD09B7BBA8F9"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15165
Expires: Fri, 03 Feb 2023 21:13:50 GMT
Date: Fri, 03 Feb 2023 17:01:05 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 03 Feb 2023 16:43:35 GMT
content-type: application/json
age: 1050
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 9OCQdv2/2SsBuTruFsrtdPcmFLrE0/ShkFBy3urZuWzVHnR6uhxF/bpigl+b0y1vO72c7yMIfBs=
x-amz-request-id: 78BJ9GEHJ4XHZMNH
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 03 Feb 2023 16:52:29 GMT
age: 516
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
www.pdfdrive.com/tomb-of-annihilation-d52202257.html
200 OK 13 kB URL HTTP/1.1 www.pdfdrive.com/tomb-of-annihilation-d52202257.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3405)
Hash 3f7a9525ca3a33b8763d4619b18d9fea
aafaa0b40e1b2e85ff7afde3a8675811ae579ae1
ca37b59975afe67cc4d5d03c7f5bfbec81046377e7b390c3ff4d359dbe05e05f
GET /tomb-of-annihilation-d52202257.html HTTP/1.1
Host: www.pdfdrive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:05 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Cache-Control: max-age=86400, max-age=0, no-cache, s-maxage=10
Set-Cookie: pd_session=egafki3grvl56op9u9gan4esmfpn8vcs; path=/
X-Mod-Pagespeed: 1.13.35.2-0
Vary: Accept-Encoding
X-Frame-Options: sameorigin
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Zr1y2tNwJjgKueomGMWi5RAH5yuMBnaILXgBBuvUIzY1GtGynTi4KjeuHbu5%2B1TtrnG0l8tEvVLI7pasZC6GJrm7eyIeObNh254B645aajuSzQrwWO%2BcHZS4DQRVuUTyPYA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 793cb9fb1c99b523-OSL
Content-Encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 17:01:05 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/css/all.min.css
200 OK 10 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/css/all.min.css
IP
File type ASCII text, with very long lines (59158)
Hash 77c1af627ac0cf4a26f1f230c3328544
f99817795a5ae027a7212b040438e49248a483b6
0496a11101ffd6d8230b041623cc1bf58971b25acd684a23fe91d702c486d2c8
GET /ajax/libs/font-awesome/5.15.3/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.pdfdrive.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:01:05 GMT
content-type: text/css; charset=utf-8
content-length: 10480
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "60510736-e7d0"
last-modified: Tue, 16 Mar 2021 19:29:58 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 757310
expires: Wed, 24 Jan 2024 17:01:05 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G%2FBx6zRVdQHxldRX7vBEqD4NUOBtvnF5vpZ3%2BYXkF7ItamAKskby1IjnSjqANo1%2B8g9g1P3rpv554k73Wm3hPurShtKLcHokdjd0EaPoMlFmxCjZW8Eq4b2w8Nz%2BbuEFET9fzRxq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 793cb9fe0a38b529-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 907398d5fb78588b0c610c0d649899e0
dfc0840362757a0f70c5cfc54b76c994912c39be
de8325abe2d1aef1555a0b54a5a4d73d05ef0e14600a0c91136510c46705de20
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5112
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:01:05 GMT
Last-Modified: Fri, 03 Feb 2023 15:35:53 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash 907398d5fb78588b0c610c0d649899e0
dfc0840362757a0f70c5cfc54b76c994912c39be
de8325abe2d1aef1555a0b54a5a4d73d05ef0e14600a0c91136510c46705de20
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5112
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:01:05 GMT
Last-Modified: Fri, 03 Feb 2023 15:35:53 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 278
resources.infolinks.com/js/infolinks_main.js
200 OK 2.1 kB URL HTTP/1.1 resources.infolinks.com/js/infolinks_main.js
IP
File type ASCII text, with very long lines (3530)
Hash c8cb13eefc1562fb573286d711dd92c5
dd2491dc9fb4fcdcee955e0497f8573fa2cbe0b1
c01b6b9abd3382aedcdf736d84a14c1659a5bdbca3cd588b387f9012baf79ecc
GET /js/infolinks_main.js HTTP/1.1
Host: resources.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:05 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 01 Feb 2023 14:55:07 GMT
ETag: W/"dcb-5f3a4a251e392"
Cache-Control: max-age=3600
Expires: Fri, 03 Feb 2023 16:35:01 GMT
Via: 1.1 google
CF-Cache-Status: HIT
Age: 5164
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 793cb9fe3c8cfabc-OSL
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bbeb609cbf32a8842bf96a124588e65e
40c0f548bcb714731f62df5a27cad21adef0463d
502c60a18a13b84598933731d182aafd4b83576bfc56451b36f9238c621a571d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:01:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bbeb609cbf32a8842bf96a124588e65e
40c0f548bcb714731f62df5a27cad21adef0463d
502c60a18a13b84598933731d182aafd4b83576bfc56451b36f9238c621a571d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:01:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/3.1.1/jquery.min.js
200 OK 30 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.1.1/jquery.min.js
IP
File type ASCII text, with very long lines (32030)
Hash 04ba0252a9f264db106d4eaab8df4ccb
cf52d9b3df7839c5c64fbf33aafeced74b3db750
397852429e768ffbd12a78ce4b94f14e3ab4afabf84acb07c0bb5b7798e6e0b2
GET /ajax/libs/jquery/3.1.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.pdfdrive.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30244
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Jan 2023 18:43:24 GMT
expires: Tue, 30 Jan 2024 18:43:24 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 339461
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 907398d5fb78588b0c610c0d649899e0
dfc0840362757a0f70c5cfc54b76c994912c39be
de8325abe2d1aef1555a0b54a5a4d73d05ef0e14600a0c91136510c46705de20
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5112
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:01:05 GMT
Last-Modified: Fri, 03 Feb 2023 15:35:53 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bbeb609cbf32a8842bf96a124588e65e
40c0f548bcb714731f62df5a27cad21adef0463d
502c60a18a13b84598933731d182aafd4b83576bfc56451b36f9238c621a571d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:01:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c181c51a9326d56e60915a792c306c2c
de1cc0ce1384905e65a9fa9575743091d785e528
b74bc74e2920124b3288a980f9a7b59e3450ba63f2333027440cd6ebbdfdbf8d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:01:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
clouddecrease.com/df4b7efb45757e4dbe9ea4dd784ddb26/invoke.js
200 OK 9.3 kB URL HTTP/1.1 clouddecrease.com/df4b7efb45757e4dbe9ea4dd784ddb26/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type Unicode text, UTF-8 text, with very long lines (25130), with no line terminators
Hash 12d4d021f21e3fa1be31a8c92bc1591a
42bd8c0456b6ea1ceaa79ec143bc9bdd3932b248
16d868d1b1f576283317dbb2221a6c6a579afa4efd198601e618dbc823422d73
Analyzer Verdict Alert quad9 Sinkholed
GET /df4b7efb45757e4dbe9ea4dd784ddb26/invoke.js HTTP/1.1
Host: clouddecrease.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 03 Feb 2023 17:01:05 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 467dcd491d35df48e94d41cca2ae324d
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.pdfdrive.com/assets/css/A.main.css,,qv3.84+responsive.css,,qv3.84+3rdparty.css,,qv3.84,Mcc.wPDRO9l41O.css.pagespeed.cf.k0W17_lbqE.css
200 OK 15 kB URL HTTP/1.1 www.pdfdrive.com/assets/css/A.main.css,,qv3.84+responsive.css,,qv3.84+3rdparty.css,,qv3.84,Mcc.wPDRO9l41O.css.pagespeed.cf.k0W17_lbqE.css
IP
File type ASCII text, with very long lines (28209)
Hash 0fb2d56e467564bb1773eea3177d9ef9
3516e11c79dfa69fa3f10327260eccf49a59721d
9949dd577ecf52451807782429d3c678001efcc6d8f34999ac240cfd4572553c
GET /assets/css/A.main.css,,qv3.84+responsive.css,,qv3.84+3rdparty.css,,qv3.84,Mcc.wPDRO9l41O.css.pagespeed.cf.k0W17_lbqE.css HTTP/1.1
Host: www.pdfdrive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/tomb-of-annihilation-d52202257.html
Cookie: pd_session=egafki3grvl56op9u9gan4esmfpn8vcs
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:05 GMT
Content-Type: text/css
Content-Length: 15296
Connection: keep-alive
Accept-Ranges: bytes
X-Frame-Options: sameorigin
Expires: Sat, 03 Feb 2024 16:58:41 GMT
Cache-Control: max-age=31536000
Etag: W/"0"
Last-Modified: Fri, 03 Feb 2023 16:58:41 GMT
X-Original-Content-Length: 86585
Vary: Accept-Encoding
Content-Encoding: gzip
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XQVs0TwnEb41OFWSzxWI%2BsOcMpatMMxbkSjMbReZi8UtZgPmkWmGUjj6w7Vsx4whlB61KeggyCw3U2LlgIoUazs53MqiiupmGBealFW%2FxCI2VE4MI1jOA1crqSQ7GtpgBdo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 793cb9fde877b523-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
www.pdfdrive.com/assets/js/combined.js,qv3.84.pagespeed.jm.3BGFzs7v9X.js
200 OK 21 kB URL HTTP/1.1 www.pdfdrive.com/assets/js/combined.js,qv3.84.pagespeed.jm.3BGFzs7v9X.js
IP
File type Unicode text, UTF-8 text, with very long lines (51454)
Hash 086ce230b57bd4f40684f18d05ad4098
bcfce4a49bb3ae6ff2c89b39745c786672392927
10de14da26621d868503e075d2cebd01ae487d6f32dea436fd868d4e52c549aa
GET /assets/js/combined.js,qv3.84.pagespeed.jm.3BGFzs7v9X.js HTTP/1.1
Host: www.pdfdrive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/tomb-of-annihilation-d52202257.html
Cookie: pd_session=egafki3grvl56op9u9gan4esmfpn8vcs
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:05 GMT
Content-Type: application/javascript
Content-Length: 21043
Connection: keep-alive
Accept-Ranges: bytes
X-Frame-Options: sameorigin
Expires: Sat, 03 Feb 2024 16:59:54 GMT
Cache-Control: max-age=31536000
Etag: W/"0"
Last-Modified: Fri, 03 Feb 2023 16:59:54 GMT
X-Original-Content-Length: 73949
Vary: Accept-Encoding
Content-Encoding: gzip
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B0HF4e3zbyoP7k%2BTFhHmjkjZTwGCs7s0M%2BMQ8RY%2FO5XGa5bxLeFP2%2FFfpb2a1VNrV4mcCF2%2BuwgsiZSQuY9sYDORW2b0%2BcT9qCBTtsYPBSgiBAZh%2FAtuFynjun5%2BjxINwMw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 793cb9fe0a560b65-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/webfonts/fa-solid-900.woff2
200 OK 78 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/webfonts/fa-solid-900.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261\012- data
Hash e8a427e15cc502bef99cfd722b37ea98
a9922842a120a7f1eaced667480c5e185a106d69
d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef
GET /ajax/libs/font-awesome/5.15.3/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.pdfdrive.com
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:01:05 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 78196
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "60510736-13174"
last-modified: Tue, 16 Mar 2021 19:29:58 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2406152
expires: Wed, 24 Jan 2024 17:01:05 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kNR%2BL5Y85SCyGLIXCcM87q3d4reXftWcohMoEorOI8MSagqHYm7nnjH5VQqUQjcixEdhbsmje%2Bc7Tp8y%2FaD%2BNFBtoQ8OSBzZuY8xP2QOMrFjPNL3ec3sYV2sxuZ5dOZly6Kyl7Uj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 793cba001cc9b529-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 2b8a61170e9f0bca5be36ff453247210
3f75b42ad4b48a255ecba57e57db6b6f25206555
1ac2f394bb5d7a0a311c9be005cc90e8a04e2f2e70d9115cbf02d87f1a79006c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5153
Cache-Control: max-age=125725
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:01:06 GMT
Etag: "63dc71ce-116"
Expires: Sun, 05 Feb 2023 03:56:31 GMT
Last-Modified: Fri, 03 Feb 2023 02:30:38 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 278
fonts.googleapis.com/css?family=Roboto:400,500,700
200 OK 1.1 kB URL HTTP/2 fonts.googleapis.com/css?family=Roboto:400,500,700
IP
Hash b34e2d8a844fe0ea336a6c231e636bd0
1254e4ff3cff168dd781e065e6f926d4f3063781
38f82748c62549380d58939e7e855f709edef3be18deb70e203da6e70c8768e4
GET /css?family=Roboto:400,500,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.pdfdrive.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 03 Feb 2023 17:01:05 GMT
date: Fri, 03 Feb 2023 17:01:05 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e3383a870b280d28b1d924543e6128af
0e9ccaf308e10ae68774fe0d32e10d063f379e7d
093a4523b327faf080d2d200d6e8d9e615abe6e048a72d70c3bc8e9f89cc50bf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:01:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.pdfdrive.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 29 Jan 2023 22:02:00 GMT
expires: Mon, 29 Jan 2024 22:02:00 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 413946
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.bundle.min.js
200 OK 20 kB URL HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.bundle.min.js
IP
File type ASCII text, with very long lines (65298)
Hash f82513a24d6b225eaec9444cbfad566a
c8b904482f812c20f6aa69ad71794a1b39f0da7a
163d17501e98c27b69dd6cf73006b9bf87188eee276743dd7c50e6bcf4f2ae43
GET /bootstrap/4.0.0/js/bootstrap.bundle.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.pdfdrive.com
Connection: keep-alive
Referer: http://www.pdfdrive.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:01:05 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
cdn-edgestorageid: 601, 617, 617
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 2021-08-02 21:17:38
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 224fa2fae2f85b3f50dbe921f41b329f
cdn-status: 200
cdn-cache: HIT
cf-cache-status: HIT
age: 20892166
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 793cb9fe8dfcb4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.pdfdrive.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 01 Feb 2023 07:51:59 GMT
expires: Thu, 01 Feb 2024 07:51:59 GMT
cache-control: public, max-age=31536000
age: 205747
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.pdfdrive.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 31 Jan 2023 13:09:06 GMT
expires: Wed, 31 Jan 2024 13:09:06 GMT
cache-control: public, max-age=31536000
age: 273120
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/webfonts/fa-brands-400.woff2
200 OK 471 B URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/webfonts/fa-brands-400.woff2
IP
Hash e3383a870b280d28b1d924543e6128af
0e9ccaf308e10ae68774fe0d32e10d063f379e7d
093a4523b327faf080d2d200d6e8d9e615abe6e048a72d70c3bc8e9f89cc50bf
GET /ajax/libs/font-awesome/5.15.3/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.pdfdrive.com
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:01:06 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 76764
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "60510736-12bdc"
last-modified: Tue, 16 Mar 2021 19:29:58 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 752774
expires: Wed, 24 Jan 2024 17:01:06 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NCNCoahi2Y%2F8uPbPlj1Pw9veMDnmEfPhaT0B0xqWWFgYdppmtlIWsI4I9hMMteHgbER1%2BWUDwFHJOpaTISyAUOIHxw56UO%2BTPZIVaKlIs3ExFSQjA2Nw2IvPstrEQjbrmxysJvuZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 793cba00bd8cb529-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.pdfdrive.com/assets/img/cat/8.jpg,q1.pagespeed.ce.OuzH2mMuOP.jpg
200 OK 2.8 kB URL HTTP/1.1 www.pdfdrive.com/assets/img/cat/8.jpg,q1.pagespeed.ce.OuzH2mMuOP.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 40x40, components 3\012- data
Hash 3aecc7da632e38f7c825a9742aec4e52
6fac13d07cb23ad8cadff0086292d8ad416dd760
191b1ec1eaf8c2b8b3f73a54dbc608c4e0bd50a3762b02fb340085d51e38c8ab
GET /assets/img/cat/8.jpg,q1.pagespeed.ce.OuzH2mMuOP.jpg HTTP/1.1
Host: www.pdfdrive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/tomb-of-annihilation-d52202257.html
Cookie: pd_session=egafki3grvl56op9u9gan4esmfpn8vcs
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:06 GMT
Content-Type: image/jpeg
Content-Length: 2836
Connection: keep-alive
Link: <http://www.pdfdrive.com/assets/img/cat/8.jpg?1>; rel="canonical"
Accept-Ranges: bytes
X-Frame-Options: sameorigin
Last-Modified: Tue, 14 May 2019 09:31:12 GMT
Expires: Sat, 03 Feb 2024 17:01:06 GMT
Cache-Control: max-age=31536000
Etag: W/"0"
X-Original-Content-Length: 2836
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Kit4FSV%2F3LvB7VlqWK8clWK9%2Fh72Fht6fpWnKkIJsjmtqSD5lkNglw6vJIxhjJHyTMX8QBxYo%2FKEHIB5oNp2CD13yuzdq%2Bp7SEswEMaSl3V3%2F07nf52Lp6ekiuQXpC6gT5s%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 793cb9ffaaeeb523-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
www.pdfdrive.com/assets/img/cat/11.jpg,q1.pagespeed.ce.DGFb-dl2_M.jpg
200 OK 2.9 kB URL HTTP/1.1 www.pdfdrive.com/assets/img/cat/11.jpg,q1.pagespeed.ce.DGFb-dl2_M.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 40x40, components 3\012- data
Hash 0c615bf9d976fcc39eac593af2529ea9
160acb37e93a63cd20244ec0c7dae0ed1ae3bccd
16c0c12ea8888e7670c37dd6768068889b728cdd9067c0961319fe7045093a7c
GET /assets/img/cat/11.jpg,q1.pagespeed.ce.DGFb-dl2_M.jpg HTTP/1.1
Host: www.pdfdrive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/tomb-of-annihilation-d52202257.html
Cookie: pd_session=egafki3grvl56op9u9gan4esmfpn8vcs
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:06 GMT
Content-Type: image/jpeg
Content-Length: 2864
Connection: keep-alive
Link: <http://www.pdfdrive.com/assets/img/cat/11.jpg?1>; rel="canonical"
Accept-Ranges: bytes
X-Frame-Options: sameorigin
Last-Modified: Tue, 14 May 2019 09:32:29 GMT
Expires: Sat, 03 Feb 2024 17:01:06 GMT
Cache-Control: max-age=31536000
Etag: W/"0"
X-Original-Content-Length: 2864
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uFpJ0QqEY%2FloggpW%2FRfQTM5We%2BYAeqJmOwC166EHixztcjlVUeU9bXkEFGrgBJxfCYvMyoOziBCuzxk0LP6HURa%2BaXUsRWE%2FpyWua%2BXIViX0EWHny%2FED315BrfGuVtIq5Z8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 793cb9ffad33b4fa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
www.pdfdrive.com/assets/img/cat/17.jpg,q1.pagespeed.ce.bADb2_dTk7.jpg
200 OK 3.1 kB URL HTTP/1.1 www.pdfdrive.com/assets/img/cat/17.jpg,q1.pagespeed.ce.bADb2_dTk7.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 40x40, components 3\012- data
Hash 6c00dbdbf75393b952fcff1b91f30c2d
d7235c12e8ce5fe1a51e3e7d0aa86ac5a3d3c006
0662c92552242aa8bf4e6589689cb5bd8db75a36b81ee35996e5b348f99deab6
GET /assets/img/cat/17.jpg,q1.pagespeed.ce.bADb2_dTk7.jpg HTTP/1.1
Host: www.pdfdrive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/tomb-of-annihilation-d52202257.html
Cookie: pd_session=egafki3grvl56op9u9gan4esmfpn8vcs
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:06 GMT
Content-Type: image/jpeg
Content-Length: 3102
Connection: keep-alive
Link: <http://www.pdfdrive.com/assets/img/cat/17.jpg?1>; rel="canonical"
Accept-Ranges: bytes
X-Frame-Options: sameorigin
Last-Modified: Tue, 14 May 2019 09:32:52 GMT
Expires: Sat, 03 Feb 2024 17:01:06 GMT
Cache-Control: max-age=31536000
Etag: W/"0"
X-Original-Content-Length: 3102
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OtdlVI7EiyVlAJrRlNqSGExI5Cdl9mtLaPrSLzELJgwMDA6dor%2FmfyVnv9a64Ts1IScsizoCSA8NTfHDu7EOtxxK557JXfsHS75KOoEqQL%2B4fpp9u0jo%2FdFXWXsy1q4QEiI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 793cb9ffad31b4fa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
www.pdfdrive.com/assets/img/cat/19.jpg,q1.pagespeed.ce.HauFtH45bw.jpg
200 OK 2.9 kB URL HTTP/1.1 www.pdfdrive.com/assets/img/cat/19.jpg,q1.pagespeed.ce.HauFtH45bw.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 40x40, components 3\012- data
Hash 1dab85b47e396f09b75ed6e0077ae2fa
ce934d937b17aa08aff1f6b7afe35ad5c63373c1
36e3400e3a95b24281a2f8cb48a9f62780867415142a9e45f79c477faf28a18c
GET /assets/img/cat/19.jpg,q1.pagespeed.ce.HauFtH45bw.jpg HTTP/1.1
Host: www.pdfdrive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/tomb-of-annihilation-d52202257.html
Cookie: pd_session=egafki3grvl56op9u9gan4esmfpn8vcs
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:06 GMT
Content-Type: image/jpeg
Content-Length: 2911
Connection: keep-alive
Link: <http://www.pdfdrive.com/assets/img/cat/19.jpg?1>; rel="canonical"
Accept-Ranges: bytes
X-Frame-Options: sameorigin
Last-Modified: Tue, 14 May 2019 09:43:27 GMT
Expires: Sat, 03 Feb 2024 17:01:06 GMT
Cache-Control: max-age=31536000
Etag: W/"0"
X-Original-Content-Length: 2911
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=at9BJ7%2F3AAWKkKqXp40VlH8MXCVS4DLg7dZ1fgVGuFSJYvJycz0HcH1Hs4v%2FbK6tvlzZQV%2Fq0dnBqwyqbsSP4QvxqnyRrzFAaY%2BObD2nA6fT3xw0eTOb6Ejeaaes0sJpwLk%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 793cb9ffa99e0b31-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
www.pdfdrive.com/assets/img/cat/1.jpg,q1.pagespeed.ce.-rhdJZ7irU.jpg
200 OK 3.6 kB URL HTTP/1.1 www.pdfdrive.com/assets/img/cat/1.jpg,q1.pagespeed.ce.-rhdJZ7irU.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 40x40, components 3\012- data
Hash fab85d259ee2ad4780d9c847ae5b2e2c
1929221f05bc10cb530323c34106c0b4b2940375
f38637624a22521456dc4ed3c114e63933619e9c76fb1cae1e0e4b80da84cb20
GET /assets/img/cat/1.jpg,q1.pagespeed.ce.-rhdJZ7irU.jpg HTTP/1.1
Host: www.pdfdrive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/tomb-of-annihilation-d52202257.html
Cookie: pd_session=egafki3grvl56op9u9gan4esmfpn8vcs
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:06 GMT
Content-Type: image/jpeg
Content-Length: 3580
Connection: keep-alive
Link: <http://www.pdfdrive.com/assets/img/cat/1.jpg?1>; rel="canonical"
Accept-Ranges: bytes
X-Frame-Options: sameorigin
Last-Modified: Tue, 14 May 2019 09:28:02 GMT
Expires: Sat, 03 Feb 2024 17:01:06 GMT
Cache-Control: max-age=31536000
Etag: W/"0"
X-Original-Content-Length: 3580
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9mWA8u9YsI57EOnsiSNDXlVexD%2F14qL%2F%2BPMM2o4auk9Hv5UKI5S874ytoZu9fB1Mf8biKDBqfAqY9gb0f3RyvGox48kTpG9mOen1TBgN%2FO6gvg%2FLN7k7VpNcSW81t1S6LPE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 793cb9ffad3f0b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
www.pdfdrive.com/assets/img/logo-1.png.pagespeed.ce.5UNSDNAJsC.png
200 OK 5.3 kB URL HTTP/1.1 www.pdfdrive.com/assets/img/logo-1.png.pagespeed.ce.5UNSDNAJsC.png
IP
File type PNG image data, 625 x 116, 8-bit/color RGBA, non-interlaced\012- data
Hash e543520cd009b027d83c3110c4abe965
baff49ddc4d523cb10155e927188b337933870d2
c3a49c3dde1f28f31baf9f11aceff1f873488f63ac59a060239ecc7bb8773a43
GET /assets/img/logo-1.png.pagespeed.ce.5UNSDNAJsC.png HTTP/1.1
Host: www.pdfdrive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/tomb-of-annihilation-d52202257.html
Cookie: pd_session=egafki3grvl56op9u9gan4esmfpn8vcs
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:06 GMT
Content-Type: image/png
Content-Length: 5321
Connection: keep-alive
Link: <http://www.pdfdrive.com/assets/img/logo-1.png>; rel="canonical"
Accept-Ranges: bytes
X-Frame-Options: sameorigin
Last-Modified: Fri, 12 Feb 2021 08:10:54 GMT
Expires: Sat, 03 Feb 2024 17:01:06 GMT
Cache-Control: max-age=31536000
Etag: W/"0"
X-Original-Content-Length: 5321
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W1VeDYk3cPuNO6fV6lvTUljPMceLH7LpUZWSEbxPw74srVe5cGhSrFNSckGiIzl4vPVMB0cAxSn1rpqkIRdMBXt8Lg2fIbfUQA%2Bi4ec6sUz65vE77b2MU5EFo4quI0mDGWo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 793cba000be30b65-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8913af0be619500295008bb91f506660
a7b8068ba9aa506205a295b24458c2616997a0d1
6a9838d00256431807ca382fc205064b07c08d5054f2895c2ae3cc4e9094179a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6994
Expires: Fri, 03 Feb 2023 18:57:40 GMT
Date: Fri, 03 Feb 2023 17:01:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6662f59fb9510970af7bdd79a03541d2
70d5d127d4ed53b9c06ef502735b6921bd2a63f0
08e450464396fad53ff02bb3b83f24100ae0081dfd682284552684c40b4785de
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "08E450464396FAD53FF02BB3B83F24100AE0081DFD682284552684C40B4785DE"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12521
Expires: Fri, 03 Feb 2023 20:29:47 GMT
Date: Fri, 03 Feb 2023 17:01:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6662f59fb9510970af7bdd79a03541d2
70d5d127d4ed53b9c06ef502735b6921bd2a63f0
08e450464396fad53ff02bb3b83f24100ae0081dfd682284552684c40b4785de
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "08E450464396FAD53FF02BB3B83F24100AE0081DFD682284552684C40B4785DE"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12521
Expires: Fri, 03 Feb 2023 20:29:47 GMT
Date: Fri, 03 Feb 2023 17:01:06 GMT
Connection: keep-alive
cdn.asaha.com/assets/thumbs/6f2/6f247efbe82529f6df4392626a0cc1b1-s.jpg
200 OK 5.8 kB URL HTTP/1.1 cdn.asaha.com/assets/thumbs/6f2/6f247efbe82529f6df4392626a0cc1b1-s.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 116x160, components 3\012- data
Hash b7a93e0317646d8030746ee522fd9bc8
de76488f5939d3e85454bf60ebeab8b1ca8190a9
3d3a5a494966781a1bb89a8564c3741a57b8e0255a70129c737bcc8f86efd1e8
GET /assets/thumbs/6f2/6f247efbe82529f6df4392626a0cc1b1-s.jpg HTTP/1.1
Host: cdn.asaha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.pdfdrive.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:06 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Thu, 28 Feb 2019 22:58:48 GMT
ETag: "1685-582fc3bb3c88f"
Accept-Ranges: bytes
Content-Length: 5765
Cache-Control: max-age=31536000
Expires: Sat, 03 Feb 2024 17:01:06 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
cdn.asaha.com/assets/thumbs/1b4/1b4f55984f7e857df72eeb3745079082-s.jpg
200 OK 5.1 kB URL HTTP/1.1 cdn.asaha.com/assets/thumbs/1b4/1b4f55984f7e857df72eeb3745079082-s.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 116x160, components 3\012- data
Hash 44654ed303b05f21c68ab9b4f1b7dbe9
3c9425a9e6c48bc0b8078171f3e30ff8d62f0c58
28c3c9b86c0297ec50eeb89bfcabbe382e08c9030e17feab10ec830c6dae0f15
GET /assets/thumbs/1b4/1b4f55984f7e857df72eeb3745079082-s.jpg HTTP/1.1
Host: cdn.asaha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.pdfdrive.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:06 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sun, 08 Jul 2018 17:03:53 GMT
ETag: "13e0-5707fe1b58696"
Accept-Ranges: bytes
Content-Length: 5088
Cache-Control: max-age=31536000
Expires: Sat, 03 Feb 2024 17:01:06 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6662f59fb9510970af7bdd79a03541d2
70d5d127d4ed53b9c06ef502735b6921bd2a63f0
08e450464396fad53ff02bb3b83f24100ae0081dfd682284552684c40b4785de
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "08E450464396FAD53FF02BB3B83F24100AE0081DFD682284552684C40B4785DE"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12521
Expires: Fri, 03 Feb 2023 20:29:47 GMT
Date: Fri, 03 Feb 2023 17:01:06 GMT
Connection: keep-alive
cdn.asaha.com/assets/thumbs/f97/f97c968e33b6328dcf5c0f75b27708af-s.jpg
200 OK 8.0 kB URL HTTP/1.1 cdn.asaha.com/assets/thumbs/f97/f97c968e33b6328dcf5c0f75b27708af-s.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 116x160, components 3\012- data
Hash 92d8a3b62951a3ffbbe2e7303f38c3b7
a6da2b57cafd871d1e2f1f2714a4dc68da12f55e
9138af6f48d4e67e475168a7a71a733a2cb43794719e77c1999c29759f7d47af
GET /assets/thumbs/f97/f97c968e33b6328dcf5c0f75b27708af-s.jpg HTTP/1.1
Host: cdn.asaha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.pdfdrive.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:06 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Tue, 19 Jun 2018 04:04:52 GMT
ETag: "1f19-56ef6c8bf145e"
Accept-Ranges: bytes
Content-Length: 7961
Cache-Control: max-age=31536000
Expires: Sat, 03 Feb 2024 17:01:06 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
cdn.asaha.com/assets/thumbs/b0d/b0d353183975c8f08068f0876474e82f-s.jpg
200 OK 5.0 kB URL HTTP/1.1 cdn.asaha.com/assets/thumbs/b0d/b0d353183975c8f08068f0876474e82f-s.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 116x160, components 3\012- data
Hash ab570834dd2738dc004e802aac5953e2
b18ecbed3e2a8cb8fbea59231b42a09de71e066f
6659d6f7f7a7fbccdf74831fa38fd9d59ecbb54be6afa7fb96ef3abe1dc74448
GET /assets/thumbs/b0d/b0d353183975c8f08068f0876474e82f-s.jpg HTTP/1.1
Host: cdn.asaha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.pdfdrive.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:06 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sun, 08 Jul 2018 23:48:32 GMT
ETag: "13ad-5708588df5052"
Accept-Ranges: bytes
Content-Length: 5037
Cache-Control: max-age=31536000
Expires: Sat, 03 Feb 2024 17:01:06 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
cdn.asaha.com/assets/thumbs/9f6/9f6fc4c2f388a41718af4bcc91bbfb09-s.jpg
200 OK 5.8 kB URL HTTP/1.1 cdn.asaha.com/assets/thumbs/9f6/9f6fc4c2f388a41718af4bcc91bbfb09-s.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 116x160, components 3\012- data
Hash 0887e0b750420bd24713ef502cb31448
7c629955caa7e235501c837aa10779f129dc7854
3e2903d75255b95cbf4c13d90dc15c8f35b8eb9b4c0ae440fe8c5e77731e9d84
GET /assets/thumbs/9f6/9f6fc4c2f388a41718af4bcc91bbfb09-s.jpg HTTP/1.1
Host: cdn.asaha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.pdfdrive.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:06 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Tue, 19 Jun 2018 17:28:43 GMT
ETag: "16b4-56f02038aa059"
Accept-Ranges: bytes
Content-Length: 5812
Cache-Control: max-age=31536000
Expires: Sat, 03 Feb 2024 17:01:06 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6662f59fb9510970af7bdd79a03541d2
70d5d127d4ed53b9c06ef502735b6921bd2a63f0
08e450464396fad53ff02bb3b83f24100ae0081dfd682284552684c40b4785de
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "08E450464396FAD53FF02BB3B83F24100AE0081DFD682284552684C40B4785DE"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12521
Expires: Fri, 03 Feb 2023 20:29:47 GMT
Date: Fri, 03 Feb 2023 17:01:06 GMT
Connection: keep-alive
cdn.asaha.com/assets/thumbs/5c4/5c4141594509c18db4d5c2b9b44d7b69-s.jpg
200 OK 6.6 kB URL HTTP/1.1 cdn.asaha.com/assets/thumbs/5c4/5c4141594509c18db4d5c2b9b44d7b69-s.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 116x160, components 3\012- data
Hash 7722af642021b3de95efa792cb90b90c
e08c64100e63bc3e51a1ab3a7e644195c97ec4af
fc7c3432f68613781590f4236c118c9210fe345f6e029cf099709b0627056383
GET /assets/thumbs/5c4/5c4141594509c18db4d5c2b9b44d7b69-s.jpg HTTP/1.1
Host: cdn.asaha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.pdfdrive.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:06 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Tue, 19 Jun 2018 07:15:29 GMT
ETag: "19b1-56ef9726e0bf9"
Accept-Ranges: bytes
Content-Length: 6577
Cache-Control: max-age=31536000
Expires: Sat, 03 Feb 2024 17:01:06 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
cdn.asaha.com/assets/thumbs/533/533e7beff4ca3c637344e6217872d7c3-s.jpg
200 OK 5.0 kB URL HTTP/1.1 cdn.asaha.com/assets/thumbs/533/533e7beff4ca3c637344e6217872d7c3-s.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 116x160, components 3\012- data
Hash bb752d9ad23fda66375aff6c8db651c7
c30ebfd7e710a525cd91c6f1f3c2352e51baffe9
5ed9319217e80d28233c63d154d8d08b270bcdf686363ca7abba0a1e4d5290c2
GET /assets/thumbs/533/533e7beff4ca3c637344e6217872d7c3-s.jpg HTTP/1.1
Host: cdn.asaha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.pdfdrive.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:06 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Fri, 19 Oct 2018 12:11:33 GMT
ETag: "13a4-57893cdebd2c6"
Accept-Ranges: bytes
Content-Length: 5028
Cache-Control: max-age=31536000
Expires: Sat, 03 Feb 2024 17:01:06 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
cdn.asaha.com/assets/thumbs/6de/6de3607d08851f1ceb6eff31c6fc8d58-s.jpg
200 OK 8.1 kB URL HTTP/1.1 cdn.asaha.com/assets/thumbs/6de/6de3607d08851f1ceb6eff31c6fc8d58-s.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 116x160, components 3\012- data
Hash 1ff0b384302ed7380e02f0999785df34
802b6dff99b266c646b91370cf21dbb2655e5f01
8b47d96a7b22980b5ccda1c717a01156ae28bc5014d4ae2b24787193b8ae2306
GET /assets/thumbs/6de/6de3607d08851f1ceb6eff31c6fc8d58-s.jpg HTTP/1.1
Host: cdn.asaha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.pdfdrive.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:06 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Fri, 11 Nov 2016 10:20:34 GMT
ETag: "1f83-54103d7284080"
Accept-Ranges: bytes
Content-Length: 8067
Cache-Control: max-age=31536000
Expires: Sat, 03 Feb 2024 17:01:06 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
cdn.asaha.com/assets/thumbs/655/6559ecb5a641e26a2aababa35d5b2b50-s.jpg
200 OK 6.7 kB URL HTTP/1.1 cdn.asaha.com/assets/thumbs/655/6559ecb5a641e26a2aababa35d5b2b50-s.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 116x160, components 3\012- data
Hash 82e1fd25975bac1e3a3e2bc527ac492a
b84bf17ddbc2f2221305120ef9a19a75ff46106a
ad07e0e5b9ce040fc191879ca6a58496e02ad988d8937f095708bb0a609ae749
GET /assets/thumbs/655/6559ecb5a641e26a2aababa35d5b2b50-s.jpg HTTP/1.1
Host: cdn.asaha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.pdfdrive.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:06 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sat, 07 Jul 2018 13:57:07 GMT
ETag: "1a3a-5706927f4f868"
Accept-Ranges: bytes
Content-Length: 6714
Cache-Control: max-age=31536000
Expires: Sat, 03 Feb 2024 17:01:06 GMT
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
cdn.asaha.com/assets/thumbs/101/101a42d6598c869816feea8392118aab-s.jpg
200 OK 5.9 kB URL HTTP/1.1 cdn.asaha.com/assets/thumbs/101/101a42d6598c869816feea8392118aab-s.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 116x160, components 3\012- data
Hash 9e9e29120196a786b9ce4e0c767c08cd
48e548aedbc685c18672b1647497b4167a08d6a8
49eb5f2d0b0bd69e6a8d4b061899042322f5bc713592c11691c4f77740aaedbf
GET /assets/thumbs/101/101a42d6598c869816feea8392118aab-s.jpg HTTP/1.1
Host: cdn.asaha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.pdfdrive.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:06 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Mon, 16 Oct 2017 03:30:55 GMT
ETag: "1732-55ba1a25a8666"
Accept-Ranges: bytes
Content-Length: 5938
Cache-Control: max-age=31536000
Expires: Sat, 03 Feb 2024 17:01:06 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
www.pdfdrive.com/assets/img/arrow-down.png.pagespeed.ce.JVBy7Ectjb.png
200 OK 229 B URL HTTP/1.1 www.pdfdrive.com/assets/img/arrow-down.png.pagespeed.ce.JVBy7Ectjb.png
IP
File type PNG image data, 22 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 255072ec472d8db1fe13ee4ea1fb079b
f361154fd4ad944e7823974bdf0f69bbc0c326b0
b485d27e208efbca80b94f96c52d4a61332785ed6a76f8d2ac3f75b428e52753
GET /assets/img/arrow-down.png.pagespeed.ce.JVBy7Ectjb.png HTTP/1.1
Host: www.pdfdrive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/assets/css/A.main.css,,qv3.84+responsive.css,,qv3.84+3rdparty.css,,qv3.84,Mcc.wPDRO9l41O.css.pagespeed.cf.k0W17_lbqE.css
Cookie: pd_session=egafki3grvl56op9u9gan4esmfpn8vcs
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:06 GMT
Content-Type: image/png
Content-Length: 229
Connection: keep-alive
Link: <http://www.pdfdrive.com/assets/img/arrow-down.png>; rel="canonical"
Accept-Ranges: bytes
X-Frame-Options: sameorigin
Last-Modified: Thu, 05 Jan 2017 13:18:28 GMT
Expires: Sat, 03 Feb 2024 17:01:06 GMT
Cache-Control: max-age=31536000
Etag: W/"0"
X-Original-Content-Length: 229
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hGq9gGLL8r09aMbLca6w0TQ6NSkcLu0gWXlPMSNqc4pprs9IkvQyq7srb0%2F5s221dEt23EKX6qmaKQcMAecExanfWv7c0DMmpxSkRUb0E83Cf4f4Yq8KC%2BiGBQlO47hvubg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 793cba012cc1b523-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 51587a23f66c8249b593bdd3bc316c26
a44589aa9cf9e0a703e280f130f13783a4dce154
9d3982efed953d409b9ff9e88be9f517be1f563d0569bc8f39ca9c75be104477
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 03 Feb 2023 17:01:06 GMT
Last-Modified: Fri, 03 Feb 2023 15:14:37 GMT
Server: ECS (bsa/EB1B)
X-Cache: Miss from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: DIj_smAnGEE6f-wpmcRLZnmgBsNrzvnlA7r_qK5cqjoJSD9RAOoDaw==
Age: 6389
cdn.bmcdn3.com/trl/62a84efecc5fbd1c36e2fd65/?sourceRef=http%3A%2F%2Fwww.pdfdrive.com%2Ftomb-of-annihilation-d52202257.html&displayHost=http%3A%2F%2Fcdn.bmcdn3.com%2F&loadTime=2000&badCode=Jm5ic3A7&badType=replaced&version=1675443698071
301 Moved Permanently 0 B URL HTTP/1.1 cdn.bmcdn3.com/trl/62a84efecc5fbd1c36e2fd65/?sourceRef=http%3A%2F%2Fwww.pdfdrive.com%2Ftomb-of-annihilation-d52202257.html&displayHost=http%3A%2F%2Fcdn.bmcdn3.com%2F&loadTime=2000&badCode=Jm5ic3A7&badType=replaced&version=1675443698071
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /trl/62a84efecc5fbd1c36e2fd65/?sourceRef=http%3A%2F%2Fwww.pdfdrive.com%2Ftomb-of-annihilation-d52202257.html&displayHost=http%3A%2F%2Fcdn.bmcdn3.com%2F&loadTime=2000&badCode=Jm5ic3A7&badType=replaced&version=1675443698071 HTTP/1.1
Host: cdn.bmcdn3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/
HTTP/1.1 301 Moved Permanently
Date: Fri, 03 Feb 2023 17:01:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 03 Feb 2023 18:01:06 GMT
Location: https://cdn.bmcdn3.com/trl/62a84efecc5fbd1c36e2fd65/?sourceRef=http%3A%2F%2Fwww.pdfdrive.com%2Ftomb-of-annihilation-d52202257.html&displayHost=http%3A%2F%2Fcdn.bmcdn3.com%2F&loadTime=2000&badCode=Jm5ic3A7&badType=replaced&version=1675443698071
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qi0kPr2EK9H%2Bo1nwGhc6yoPLyGs%2FrlRCPU08cCI0HDFigBTnkhmpXBzlP8FJgvD4d3qiq9wg3n3pmFBFsoLyko1AFbjrseXhXFxgJtE0W1aowDP3N1R6GtkwKk3Spp5A"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 793cba02d8c41bfa-OSL
alt-svc: h2=":443"; ma=60
cdn.bmcdn3.com/js/source/252855134280.js?v=1.0.4
301 Moved Permanently 0 B URL HTTP/1.1 cdn.bmcdn3.com/js/source/252855134280.js?v=1.0.4
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/source/252855134280.js?v=1.0.4 HTTP/1.1
Host: cdn.bmcdn3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/
HTTP/1.1 301 Moved Permanently
Date: Fri, 03 Feb 2023 17:01:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 03 Feb 2023 18:01:06 GMT
Location: https://cdn.bmcdn3.com/js/source/252855134280.js?v=1.0.4
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BkvwbOJDJtqo%2BFuQJCqE9RlWjl5sFsinjHj5SSo3TsWFc%2FiLpZIWycnqOTbAbsygDuKZisql4kAnwVw7Q0GYCt3EcQoMOyOsuYIC7uI5wge1dhSeKLEisoZ%2B8cqoUzoU"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 793cba02da930b61-OSL
alt-svc: h2=":443"; ma=60
www.pdfdrive.com/assets/img/cat/3.jpg,q1.pagespeed.ce.aSeZkTbnd7.jpg
200 OK 2.9 kB URL HTTP/1.1 www.pdfdrive.com/assets/img/cat/3.jpg,q1.pagespeed.ce.aSeZkTbnd7.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 40x40, components 3\012- data
Hash 6927999136e777b63f740ed40898263d
a9e09efff1c722283af182837c2fdd082153270e
e38edceafd0aa75223ce82881202aa933d4600bc919fc55d7e50d56f2a95b355
GET /assets/img/cat/3.jpg,q1.pagespeed.ce.aSeZkTbnd7.jpg HTTP/1.1
Host: www.pdfdrive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/tomb-of-annihilation-d52202257.html
Cookie: pd_session=egafki3grvl56op9u9gan4esmfpn8vcs
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:06 GMT
Content-Type: image/jpeg
Content-Length: 2935
Connection: keep-alive
Link: <http://www.pdfdrive.com/assets/img/cat/3.jpg?1>; rel="canonical"
Accept-Ranges: bytes
X-Frame-Options: sameorigin
Last-Modified: Tue, 14 May 2019 09:34:26 GMT
Expires: Sat, 03 Feb 2024 17:01:06 GMT
Cache-Control: max-age=31536000
Etag: W/"0"
X-Original-Content-Length: 2935
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tG00bWqfR6%2BqW6SQ2OeVX%2BhgnqBK8YPYcGjL4g7mse9ajSez5zupRCkt5rA3H5YsLoBq%2FW1F1y88J4lGPmd3MUinHWh08sUdFflygXFSCfL6bqF0kSTPmD2LVFHmluk%2FUwU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 793cba015f80b4fa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
www.pdfdrive.com/assets/img/cat/18.jpg,q1.pagespeed.ce.vjPjtEIVKT.jpg
200 OK 2.8 kB URL HTTP/1.1 www.pdfdrive.com/assets/img/cat/18.jpg,q1.pagespeed.ce.vjPjtEIVKT.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 40x40, components 3\012- data
Hash be33e3b442152936a5a17fee1349fe38
cb52a8d8827ae030d751823f33176d0a5d856762
2b3e79b3c1d8810996185dfa883bde649932c2b7d915a5b2108182a3dc715322
GET /assets/img/cat/18.jpg,q1.pagespeed.ce.vjPjtEIVKT.jpg HTTP/1.1
Host: www.pdfdrive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/tomb-of-annihilation-d52202257.html
Cookie: pd_session=egafki3grvl56op9u9gan4esmfpn8vcs
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:06 GMT
Content-Type: image/jpeg
Content-Length: 2752
Connection: keep-alive
Link: <http://www.pdfdrive.com/assets/img/cat/18.jpg?1>; rel="canonical"
Accept-Ranges: bytes
X-Frame-Options: sameorigin
Last-Modified: Tue, 14 May 2019 09:33:11 GMT
Expires: Sat, 03 Feb 2024 17:01:06 GMT
Cache-Control: max-age=31536000
Etag: W/"0"
X-Original-Content-Length: 2752
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LK1EyGaBAYC0PyqQk3MfDQjtcHauoV2aGS1Ksu2ew%2BD5YfFLllkrHRvGutIhblahkGyuiIGtvfePjsd8KBKwkBs674R8cb81jj9zeMrkjkYtv%2BZ6Ur%2BUm%2BazBVgCo9exAUk%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 793cba015b6b0b31-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 867d5ff6e2197a4102d3add0b39749d2
ab0c12e9a72743b84bb6dc897c901f551935a577
67249e0fddb088bba7ae657dedf6af81ff4a295826bb441a2e5c788ddd02a88f
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.pdfdrive.com
Connection: keep-alive
Referer: http://www.pdfdrive.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:01:06 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: http://www.pdfdrive.com
access-control-allow-credentials: true
set-cookie: uid_id2=084fe332-e4a5-4a57-a041-84d048a3bfd6:3:1; expires=Mon, 31 Jan 2033 17:01:06 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
www.pdfdrive.com/assets/img/cat/112.jpg,q1.pagespeed.ce.Xe6gOhTcER.jpg
200 OK 2.3 kB URL HTTP/1.1 www.pdfdrive.com/assets/img/cat/112.jpg,q1.pagespeed.ce.Xe6gOhTcER.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 40x40, components 3\012- data
Hash 5deea03a14dc1115fc041d711378d437
92fd6a1e26b04d483caa85dc1d9ee6dbf0fa3591
c842a055f004f0b31008691a75fb3adc9e4a2d29a6b066d0c7f6382e1dd55ce2
GET /assets/img/cat/112.jpg,q1.pagespeed.ce.Xe6gOhTcER.jpg HTTP/1.1
Host: www.pdfdrive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/tomb-of-annihilation-d52202257.html
Cookie: pd_session=egafki3grvl56op9u9gan4esmfpn8vcs
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:06 GMT
Content-Type: image/jpeg
Content-Length: 2320
Connection: keep-alive
Link: <http://www.pdfdrive.com/assets/img/cat/112.jpg?1>; rel="canonical"
Accept-Ranges: bytes
X-Frame-Options: sameorigin
Last-Modified: Tue, 14 May 2019 09:35:12 GMT
Expires: Sat, 03 Feb 2024 17:01:06 GMT
Cache-Control: max-age=31536000
Etag: W/"0"
X-Original-Content-Length: 2320
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dUi%2BdU2HUSQACsr12XBdxwAY85hbXCu0%2Bep070y1svx1a36EFxRtCSA8Q3gSTna37kfnpJf33ynZEPM%2BezB94s6RnTG%2FQedpovhuPB%2BCpyYf3C6O%2Fq9%2BWpTFjgxbm4rcE4s%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 793cba018fbdb4fa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2f9f1750890b3b3bff84b90056c5ade2
906090b1d1d49b6ffb54110a5f53f8ebcfa1150c
e0a5f564e3c0e84368a136fc795a6b181a0f075805caf4b9a90d880cdb7ba60d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E0A5F564E3C0E84368A136FC795A6B181A0F075805CAF4B9A90D880CDB7BA60D"
Last-Modified: Fri, 03 Feb 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10530
Expires: Fri, 03 Feb 2023 19:56:36 GMT
Date: Fri, 03 Feb 2023 17:01:06 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: hNola6e0imydyev3cnzHXw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: JRDwZ4dxwsc+Dib/+Gg/VeuLrvA=
www.pdfdrive.com/assets/img/cat/6.jpg,q1.pagespeed.ce.faGoLXw_Zo.jpg
200 OK 3.2 kB URL HTTP/1.1 www.pdfdrive.com/assets/img/cat/6.jpg,q1.pagespeed.ce.faGoLXw_Zo.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 40x40, components 3\012- data
Hash 7da1a82d7c3f668ce46bf29bddf91bb0
da0168bd54615ade7b4cdf804d2ce022bc23cb7c
9cf8098a7b09bf63630f962e9d306c02c5dca83efeb869efce118bb3b9974a29
GET /assets/img/cat/6.jpg,q1.pagespeed.ce.faGoLXw_Zo.jpg HTTP/1.1
Host: www.pdfdrive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/tomb-of-annihilation-d52202257.html
Cookie: pd_session=egafki3grvl56op9u9gan4esmfpn8vcs
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:06 GMT
Content-Type: image/jpeg
Content-Length: 3195
Connection: keep-alive
Link: <http://www.pdfdrive.com/assets/img/cat/6.jpg?1>; rel="canonical"
Accept-Ranges: bytes
X-Frame-Options: sameorigin
Last-Modified: Tue, 14 May 2019 09:43:23 GMT
Expires: Sat, 03 Feb 2024 17:01:06 GMT
Cache-Control: max-age=31536000
Etag: W/"0"
X-Original-Content-Length: 3195
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=74K%2FrjF348HGqJoQsi%2FEOes4vWs4z6MUJiajAdieDawF9lVYcBZmKcoMA0HDOrBCUGumbLJrir%2FLkLAKE5nplS0bEc2oktHx%2B2WJbT%2BEUKL3Uh5NZYLjrayLAAGV9pGc5uA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 793cba029e81b523-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
shippingswimsuitflog.com/a2/71/08/a2710803631d2a6fc90c289bfea08cdc.js
200 OK 29 kB URL HTTP/1.1 shippingswimsuitflog.com/a2/71/08/a2710803631d2a6fc90c289bfea08cdc.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65536), with no line terminators
Hash 828653e977cafa0f7775806efb9d142a
50403b151c4901ed637bb56280572681c759bb4f
9753a5aab1fdec9ba8bb186206fb130b673d47fce4d06e0325bbb93736fbe7a2
Analyzer Verdict Alert quad9 Sinkholed
GET /a2/71/08/a2710803631d2a6fc90c289bfea08cdc.js HTTP/1.1
Host: shippingswimsuitflog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 03 Feb 2023 17:01:06 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 399faaf1797428ed75771132f2ee16ea
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.pdfdrive.com/assets/img/cat/4.jpg,q1.pagespeed.ce.DJYM8KxsPA.jpg
200 OK 2.7 kB URL HTTP/1.1 www.pdfdrive.com/assets/img/cat/4.jpg,q1.pagespeed.ce.DJYM8KxsPA.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 40x40, components 3\012- data
Hash 0c960cf0ac6c3c0c91f8be2261e7c1ea
3e8dce7b23030fdd8003245bd13d6cb50d4c0499
9221e324493c267a9a424fca0c0399b5ec2352951698f3ec976b96ebee36ce53
GET /assets/img/cat/4.jpg,q1.pagespeed.ce.DJYM8KxsPA.jpg HTTP/1.1
Host: www.pdfdrive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/tomb-of-annihilation-d52202257.html
Cookie: pd_session=egafki3grvl56op9u9gan4esmfpn8vcs
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:06 GMT
Content-Type: image/jpeg
Content-Length: 2736
Connection: keep-alive
Link: <http://www.pdfdrive.com/assets/img/cat/4.jpg?1>; rel="canonical"
Accept-Ranges: bytes
X-Frame-Options: sameorigin
Last-Modified: Tue, 14 May 2019 09:31:36 GMT
Expires: Sat, 03 Feb 2024 17:01:06 GMT
Cache-Control: max-age=31536000
Etag: W/"0"
X-Original-Content-Length: 2736
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xqiRNSbxx5pdY3T73NwVCp1WVdQJaqPW3wawplk%2FMz8MJZJL4NgJNEEF%2FGdlpPVJulHMpYAy3wDiqhpXFZO9HWxtN6EpepFzncF6x8ovd0mGLz%2FMwQuVzIVhRToa36mUc8I%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 793cba030d240b31-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
www.pdfdrive.com/assets/img/cat/16.jpg,q1.pagespeed.ce.zwzmmHmCkd.jpg
200 OK 2.6 kB URL HTTP/1.1 www.pdfdrive.com/assets/img/cat/16.jpg,q1.pagespeed.ce.zwzmmHmCkd.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 40x40, components 3\012- data
Hash cf0ce698798291d8509480ce62083261
4dff94a11b2928f875e241da87bc6a82ea9ac6c2
17a24dcf53667937ff665de96553cff7408dba7a25275a25ac22c9fb6b674ab8
GET /assets/img/cat/16.jpg,q1.pagespeed.ce.zwzmmHmCkd.jpg HTTP/1.1
Host: www.pdfdrive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/tomb-of-annihilation-d52202257.html
Cookie: pd_session=egafki3grvl56op9u9gan4esmfpn8vcs
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:06 GMT
Content-Type: image/jpeg
Content-Length: 2572
Connection: keep-alive
Link: <http://www.pdfdrive.com/assets/img/cat/16.jpg?1>; rel="canonical"
Accept-Ranges: bytes
X-Frame-Options: sameorigin
Last-Modified: Tue, 14 May 2019 09:34:45 GMT
Expires: Sat, 03 Feb 2024 17:01:06 GMT
Cache-Control: max-age=31536000
Etag: W/"0"
X-Original-Content-Length: 2572
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eyZ9xLEYdR%2BF41PxP6Y3lnSxnnIQcr9evAWE53%2F0L0esGgnW3eGHP%2FITJGdOxjBhAkvGX1hIiPJn5OBZqOmOsXPg5xIlQO1BL6S1A%2BA5%2BazrTnzktqR%2F8m5CMLATD%2FcOv0g%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 793cba0309deb4fa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
www.pdfdrive.com/assets/img/cat/15.jpg,q1.pagespeed.ce.C7piLVryvI.jpg
200 OK 3.3 kB URL HTTP/1.1 www.pdfdrive.com/assets/img/cat/15.jpg,q1.pagespeed.ce.C7piLVryvI.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 40x40, components 3\012- data
Hash 0bba622d5af2bc8622705efb4574a78f
d2395032e0e2fa69ab04d20872f4bb9392a5c69b
881f4f8d938d1c26dfeb912339766ae603db8af23ed65ed59f905e62e87153ce
GET /assets/img/cat/15.jpg,q1.pagespeed.ce.C7piLVryvI.jpg HTTP/1.1
Host: www.pdfdrive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/tomb-of-annihilation-d52202257.html
Cookie: pd_session=egafki3grvl56op9u9gan4esmfpn8vcs
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:06 GMT
Content-Type: image/jpeg
Content-Length: 3336
Connection: keep-alive
Link: <http://www.pdfdrive.com/assets/img/cat/15.jpg?1>; rel="canonical"
Accept-Ranges: bytes
X-Frame-Options: sameorigin
Last-Modified: Tue, 14 May 2019 09:30:15 GMT
Expires: Sat, 03 Feb 2024 17:01:06 GMT
Cache-Control: max-age=31536000
Etag: W/"0"
X-Original-Content-Length: 3336
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DRB2RSljk2GECL2%2BdpVXq9wauJLPzTQB7nOJ57DmzMQuKqt66sWCV6RVkCjl2nUD%2F4egnmi8eEwz2cMN%2FNcCtzbQMtt0HjpXru6YLbaswR%2FHmb%2BIqhcZw7UUmGyFypWrCS0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 793cba033a2eb4fa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
www.pdfdrive.com/assets/img/cat/10.jpg,q1.pagespeed.ce.w8ZghX1Xa9.jpg
200 OK 2.7 kB URL HTTP/1.1 www.pdfdrive.com/assets/img/cat/10.jpg,q1.pagespeed.ce.w8ZghX1Xa9.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 40x40, components 3\012- data
Hash c3c660857d576bdcb373a3c108119b0f
1bc04738ebb50ebfa1ff9820833c334b2930f72c
c170e4faa50ff85f60493650549e876142de7fe082b845a2e7001f02426ff94c
GET /assets/img/cat/10.jpg,q1.pagespeed.ce.w8ZghX1Xa9.jpg HTTP/1.1
Host: www.pdfdrive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/tomb-of-annihilation-d52202257.html
Cookie: pd_session=egafki3grvl56op9u9gan4esmfpn8vcs
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:06 GMT
Content-Type: image/jpeg
Content-Length: 2720
Connection: keep-alive
Link: <http://www.pdfdrive.com/assets/img/cat/10.jpg?1>; rel="canonical"
Accept-Ranges: bytes
X-Frame-Options: sameorigin
Last-Modified: Tue, 14 May 2019 09:33:58 GMT
Expires: Sat, 03 Feb 2024 17:01:06 GMT
Cache-Control: max-age=31536000
Etag: W/"0"
X-Original-Content-Length: 2720
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xxoWWguUvanEpe4NJjfs35ia7xMpNYVTv0KFuddcC0iPYbE7GO%2FoHEt3LYDueLwRNVbQDN2k0%2BkVnGAh7vI89KbUuu%2B3y0mxsWzj1yyrV6ZBasGKt7qXEi4VPVBxPTCSiHI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 793cba0438e0b523-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
shippingswimsuitflog.com/ntv.json?key=df4b7efb45757e4dbe9ea4dd784ddb26&vstc=1
200 OK 4.2 kB URL HTTP/1.1 shippingswimsuitflog.com/ntv.json?key=df4b7efb45757e4dbe9ea4dd784ddb26&vstc=1
IP
File type JSON data\012- , ASCII text, with very long lines (4155), with no line terminators
Hash 6d0aacb40eca194c94f769ffceafa56f
9ef0c274725ee3e61f37efbc34bba24eec104fbf
9f6a19785d152f8164d426bd67cb522771b473e76dd9951b51f25ece53a5e496
Analyzer Verdict Alert quad9 Sinkholed
GET /ntv.json?key=df4b7efb45757e4dbe9ea4dd784ddb26&vstc=1 HTTP/1.1
Host: shippingswimsuitflog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.pdfdrive.com
Connection: keep-alive
Referer: http://www.pdfdrive.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 03 Feb 2023 17:01:06 GMT
Content-Type: application/json
Content-Length: 4155
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://www.pdfdrive.com
Access-Control-Allow-Origin: http://www.pdfdrive.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=17340372; expires=Sat, 04 Feb 2023 17:01:06 GMT; secure; SameSite=None
pdhtkv=true; expires=Sat, 04 Feb 2023 17:01:06 GMT; secure; SameSite=None
uncs=1; expires=Sat, 04 Feb 2023 17:01:06 GMT; secure; SameSite=None
pdhtkv49=true; expires=Sat, 04 Feb 2023 17:01:06 GMT; secure; SameSite=None
uncs49=1; expires=Sat, 04 Feb 2023 17:01:06 GMT; secure; SameSite=None
nlecdf4b7efb45757e4dbe9ea4dd784ddb26=[3955576]; expires=Fri, 03 Feb 2023 17:01:11 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9c92a8a047254afc9b35afee0454d85b
Strict-Transport-Security: max-age=0; includeSubdomains
peevishchasingstir.com/pixel/purst?dl=0&th=0&sc=0&rs=1564&rd=1564&fd=567&bv=22.10.v.10&tmpl=136
200 OK 0 B URL HTTP/1.1 peevishchasingstir.com/pixel/purst?dl=0&th=0&sc=0&rs=1564&rd=1564&fd=567&bv=22.10.v.10&tmpl=136
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=1564&rd=1564&fd=567&bv=22.10.v.10&tmpl=136 HTTP/1.1
Host: peevishchasingstir.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 03 Feb 2023 17:01:06 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
www.pdfdrive.com/assets/img/cat/14.jpg,q1.pagespeed.ce.FOEGkoiVh7.jpg
200 OK 2.9 kB URL HTTP/1.1 www.pdfdrive.com/assets/img/cat/14.jpg,q1.pagespeed.ce.FOEGkoiVh7.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 40x40, components 3\012- data
Hash 14e10692889587b289e2c66dc64ca616
ca1118dc8dfce9fd337564d5c757b1703ffc0105
578005c571cf8ce88a20f90bfc96a6e88151974fda8e0554aa747e5c8bd37125
GET /assets/img/cat/14.jpg,q1.pagespeed.ce.FOEGkoiVh7.jpg HTTP/1.1
Host: www.pdfdrive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/tomb-of-annihilation-d52202257.html
Cookie: pd_session=egafki3grvl56op9u9gan4esmfpn8vcs
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:06 GMT
Content-Type: image/jpeg
Content-Length: 2922
Connection: keep-alive
Link: <http://www.pdfdrive.com/assets/img/cat/14.jpg?1>; rel="canonical"
Accept-Ranges: bytes
X-Frame-Options: sameorigin
Last-Modified: Tue, 14 May 2019 09:43:25 GMT
Expires: Sat, 03 Feb 2024 17:01:06 GMT
Cache-Control: max-age=31536000
Etag: W/"0"
X-Original-Content-Length: 2922
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nXRCr8aeHKNonAigyxZhXeKalf3bjhc%2Fq71VXSBi0WZTDZdnumGt3jEZLJ%2FTnMNseGDDkrE%2BU8dnRCRV2RNZLhtOmwzdnHZseAMqrh6TxnaopD4u5fkAqzVmSHm8i6evsgk%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 793cba04aeb30b31-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cdn.bmcdn3.com/pv/62a8238bcc5fbd1c36e2caca/?source=http%253A%252F%252Fwww.pdfdrive.com%252Ftomb-of-annihilation-d52202257.html&sourceid=252855134280&ent=&we=0&fid=52b02fd531429bfeab5d153fe053ee70&fidnoua=025b59fb845d305a8691bec5748d5ce2&ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0&sig=0x00000&blocksubid=0&pageViewUuid=9d43fabe-988b-447f-a799-37287443cd6a&version=1675443698702
301 Moved Permanently 0 B URL HTTP/1.1 cdn.bmcdn3.com/pv/62a8238bcc5fbd1c36e2caca/?source=http%253A%252F%252Fwww.pdfdrive.com%252Ftomb-of-annihilation-d52202257.html&sourceid=252855134280&ent=&we=0&fid=52b02fd531429bfeab5d153fe053ee70&fidnoua=025b59fb845d305a8691bec5748d5ce2&ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0&sig=0x00000&blocksubid=0&pageViewUuid=9d43fabe-988b-447f-a799-37287443cd6a&version=1675443698702
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pv/62a8238bcc5fbd1c36e2caca/?source=http%253A%252F%252Fwww.pdfdrive.com%252Ftomb-of-annihilation-d52202257.html&sourceid=252855134280&ent=&we=0&fid=52b02fd531429bfeab5d153fe053ee70&fidnoua=025b59fb845d305a8691bec5748d5ce2&ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0&sig=0x00000&blocksubid=0&pageViewUuid=9d43fabe-988b-447f-a799-37287443cd6a&version=1675443698702 HTTP/1.1
Host: cdn.bmcdn3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/
HTTP/1.1 301 Moved Permanently
Date: Fri, 03 Feb 2023 17:01:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 03 Feb 2023 18:01:07 GMT
Location: https://cdn.bmcdn3.com/pv/62a8238bcc5fbd1c36e2caca/?source=http%253A%252F%252Fwww.pdfdrive.com%252Ftomb-of-annihilation-d52202257.html&sourceid=252855134280&ent=&we=0&fid=52b02fd531429bfeab5d153fe053ee70&fidnoua=025b59fb845d305a8691bec5748d5ce2&ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0&sig=0x00000&blocksubid=0&pageViewUuid=9d43fabe-988b-447f-a799-37287443cd6a&version=1675443698702
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WeSV6hzZ0BAZ6dtAvGaQtTNno2WJtwr3A2XFMqP0pmJAqRp36L4G%2FoaTmtUCuSkMZomLa3rQBVs6ROBTrSobg6Hfx7Z442br3XenjZlQegmtPBqPgqsaiH1KloWFlPd0"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 793cba06ccd11bfa-OSL
alt-svc: h2=":443"; ma=60
cdn.bmcdn3.com/js/source/252855134280.js?v=1.0.4
200 OK 17 kB URL HTTP/2 cdn.bmcdn3.com/js/source/252855134280.js?v=1.0.4
IP
File type Unicode text, UTF-8 text, with very long lines (51800), with no line terminators
Hash 3fa9beb25038cf63aef3bc4903e89488
3be8286859ef054297a31d36c060c18fd86bf380
c316375c5e84b100a0d06dbebba7e5533c073b46bcd0cac72a25ba0fe8728bc5
GET /js/source/252855134280.js?v=1.0.4 HTTP/1.1
Host: cdn.bmcdn3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.pdfdrive.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:01:06 GMT
content-type: application/javascript
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization
access-control-allow-methods: *
access-control-allow-origin: *
cache-control: max-age=1800, public
vary: Accept-Encoding
expires: Fri, 03 Feb 2023 17:31:06 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2CR6K%2FL%2B6OQEDMX8Ss3ZwntvMFwwVZw8D4UDPl9NRHIVWZtdvYFvwAib6%2FUjuCcO%2FEsUndcN2khMebFjAlJVXVFzV7Mopajo50VjH36Kk%2BtnShQu5xaL0qMHIchE5kSM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 793cba031843b50f-OSL
content-encoding: br
X-Firefox-Spdy: h2
shippingswimsuitflog.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSP2wcxReeTfzTLyIVEQ0ioK0QSOi8e7fn8xGQhQmOLILj%2FAEXNMzszJ4Hz%2B2sZnZvz6axHBGlvFT8qdbf2bEIVkSo0iChc5rIVVZIyEVc0CBEiUSN9nyS4Um77818b6Tve%2B%2B7s50dEw8ZPVr%2BSG9Ipeh0s%2Ba5b6zImOvcuku3XN%2BreZfcFRnPBJfcfvUzvbd9r1nz3nSviHBNT9c93%2FN8z3cXpBGR7k%2BPUchkv%2B3X2l4tqNf8ZoC%2B%2Be%2FZZg4sdcB7x%2BQCJC%2F%2Ft%2Fr0EWQ4Qtz94bKwa6lO3vqgmymaaoMe3%2Fs4Xot1HqN7WkbGQRTvTbqhbUnI12eg472JAujeTqUATJbE%2BdUHi%2FcmNMF6uydMmYKIwfh55L0RhBpB0hFCfRuSPyNAyLF0DXH3%2FpI2OV0%2FQWmFlmTq778g85JMPX8JcffhvJJ996ZWWSp1bNGPCsj%2BCLIzQpIdIN1wIPMDhOkWJCeIuwUkL8aqpRxBRiMoMQC1DrLqkw6yyEGWOOjyI5c225HntSIWNRqzQRiGjUYYNmdneJM3gtnIQxZWtAZIkwFCNUBoNpGYTazJe8%2BaF2Cyn2FXC1juwKYlca5voscL5IIgtwQ5JcglQZ4S5L1ilytbt8V9rmzG%2FEmuT3KjGOq0s013ddoRMdlOjsmL1Uicc1%2F9gjVx5PIoYC0RsaDZarZEwJloCxpw3poNOGf1GVhZQNozY7UbsiQXRz8ikSX5%2F2evgtEDWHWAUL4Cmvmg%2BbBV90BXh8Gsh414P%2BERN7InaqHugusCSTqFdN3ZVsfk5fFq3vm0DxEezj18fP3PL197jNAUSEyBz%2BUTgo66O7yhc7JzQ%2BeWPLqWpLIrN2i1tpspTcXZBx%2BK9VwbvnjZDr57L6yAqty%2FJWx6lcZcxh1Lvp%2BXnAuzoE0oyE%2BLdkWw5cyuzmcmzpKry%2B8vLHYTI6yVOh6BVhaUcwhlSc6f%2FWRsSXfrCqQZwWQFutkhmQSkPkCYbMImh3MPLu6f81%2F%2FA1YTGHXawxIHeVYMTZ2dXipZkunaFJQ4nLvzZOsL%2FdvvoKyAFf96eFpv27voGAc0vT02Y88U6KkCVA1gsxeGaWIO555%2BU8W3YMoZMmWcHaaMuncyYCuPXNGMvEh4dcGiNota1OPtKGgz2vZFizWpj9SW4fN3y38AAAD%2F%2FwEAAP%2F%2FccfPxW4EAAA%3D
200 OK 7 B URL HTTP/1.1 shippingswimsuitflog.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSP2wcxReeTfzTLyIVEQ0ioK0QSOi8e7fn8xGQhQmOLILj%2FAEXNMzszJ4Hz%2B2sZnZvz6axHBGlvFT8qdbf2bEIVkSo0iChc5rIVVZIyEVc0CBEiUSN9nyS4Um77818b6Tve%2B%2B7s50dEw8ZPVr%2BSG9Ipeh0s%2Ba5b6zImOvcuku3XN%2BreZfcFRnPBJfcfvUzvbd9r1nz3nSviHBNT9c93%2FN8z3cXpBGR7k%2BPUchkv%2B3X2l4tqNf8ZoC%2B%2Be%2FZZg4sdcB7x%2BQCJC%2F%2Ft%2Fr0EWQ4Qtz94bKwa6lO3vqgmymaaoMe3%2Fs4Xot1HqN7WkbGQRTvTbqhbUnI12eg472JAujeTqUATJbE%2BdUHi%2FcmNMF6uydMmYKIwfh55L0RhBpB0hFCfRuSPyNAyLF0DXH3%2FpI2OV0%2FQWmFlmTq778g85JMPX8JcffhvJJ996ZWWSp1bNGPCsj%2BCLIzQpIdIN1wIPMDhOkWJCeIuwUkL8aqpRxBRiMoMQC1DrLqkw6yyEGWOOjyI5c225HntSIWNRqzQRiGjUYYNmdneJM3gtnIQxZWtAZIkwFCNUBoNpGYTazJe8%2BaF2Cyn2FXC1juwKYlca5voscL5IIgtwQ5JcglQZ4S5L1ilytbt8V9rmzG%2FEmuT3KjGOq0s013ddoRMdlOjsmL1Uicc1%2F9gjVx5PIoYC0RsaDZarZEwJloCxpw3poNOGf1GVhZQNozY7UbsiQXRz8ikSX5%2F2evgtEDWHWAUL4Cmvmg%2BbBV90BXh8Gsh414P%2BERN7InaqHugusCSTqFdN3ZVsfk5fFq3vm0DxEezj18fP3PL197jNAUSEyBz%2BUTgo66O7yhc7JzQ%2BeWPLqWpLIrN2i1tpspTcXZBx%2BK9VwbvnjZDr57L6yAqty%2FJWx6lcZcxh1Lvp%2BXnAuzoE0oyE%2BLdkWw5cyuzmcmzpKry%2B8vLHYTI6yVOh6BVhaUcwhlSc6f%2FWRsSXfrCqQZwWQFutkhmQSkPkCYbMImh3MPLu6f81%2F%2FA1YTGHXawxIHeVYMTZ2dXipZkunaFJQ4nLvzZOsL%2FdvvoKyAFf96eFpv27voGAc0vT02Y88U6KkCVA1gsxeGaWIO555%2BU8W3YMoZMmWcHaaMuncyYCuPXNGMvEh4dcGiNota1OPtKGgz2vZFizWpj9SW4fN3y38AAAD%2F%2FwEAAP%2F%2FccfPxW4EAAA%3D
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSP2wcxReeTfzTLyIVEQ0ioK0QSOi8e7fn8xGQhQmOLILj%2FAEXNMzszJ4Hz%2B2sZnZvz6axHBGlvFT8qdbf2bEIVkSo0iChc5rIVVZIyEVc0CBEiUSN9nyS4Um77818b6Tve%2B%2B7s50dEw8ZPVr%2BSG9Ipeh0s%2Ba5b6zImOvcuku3XN%2BreZfcFRnPBJfcfvUzvbd9r1nz3nSviHBNT9c93%2FN8z3cXpBGR7k%2BPUchkv%2B3X2l4tqNf8ZoC%2B%2Be%2FZZg4sdcB7x%2BQCJC%2F%2Ft%2Fr0EWQ4Qtz94bKwa6lO3vqgmymaaoMe3%2Fs4Xot1HqN7WkbGQRTvTbqhbUnI12eg472JAujeTqUATJbE%2BdUHi%2FcmNMF6uydMmYKIwfh55L0RhBpB0hFCfRuSPyNAyLF0DXH3%2FpI2OV0%2FQWmFlmTq778g85JMPX8JcffhvJJ996ZWWSp1bNGPCsj%2BCLIzQpIdIN1wIPMDhOkWJCeIuwUkL8aqpRxBRiMoMQC1DrLqkw6yyEGWOOjyI5c225HntSIWNRqzQRiGjUYYNmdneJM3gtnIQxZWtAZIkwFCNUBoNpGYTazJe8%2BaF2Cyn2FXC1juwKYlca5voscL5IIgtwQ5JcglQZ4S5L1ilytbt8V9rmzG%2FEmuT3KjGOq0s013ddoRMdlOjsmL1Uicc1%2F9gjVx5PIoYC0RsaDZarZEwJloCxpw3poNOGf1GVhZQNozY7UbsiQXRz8ikSX5%2F2evgtEDWHWAUL4Cmvmg%2BbBV90BXh8Gsh414P%2BERN7InaqHugusCSTqFdN3ZVsfk5fFq3vm0DxEezj18fP3PL197jNAUSEyBz%2BUTgo66O7yhc7JzQ%2BeWPLqWpLIrN2i1tpspTcXZBx%2BK9VwbvnjZDr57L6yAqty%2FJWx6lcZcxh1Lvp%2BXnAuzoE0oyE%2BLdkWw5cyuzmcmzpKry%2B8vLHYTI6yVOh6BVhaUcwhlSc6f%2FWRsSXfrCqQZwWQFutkhmQSkPkCYbMImh3MPLu6f81%2F%2FA1YTGHXawxIHeVYMTZ2dXipZkunaFJQ4nLvzZOsL%2FdvvoKyAFf96eFpv27voGAc0vT02Y88U6KkCVA1gsxeGaWIO555%2BU8W3YMoZMmWcHaaMuncyYCuPXNGMvEh4dcGiNota1OPtKGgz2vZFizWpj9SW4fN3y38AAAD%2F%2FwEAAP%2F%2FccfPxW4EAAA%3D HTTP/1.1
Host: shippingswimsuitflog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.pdfdrive.com/
Cookie: u_pl=17340372; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 03 Feb 2023 17:01:07 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: fc4dbd3f0f99e1b26da6e662e28d09ef
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.cloudimagesb.com/si/06/17/a0/0617a061e6a71952b94e88ab57d30d21/1674471968.png
200 OK 78 kB URL HTTP/1.1 cdn.cloudimagesb.com/si/06/17/a0/0617a061e6a71952b94e88ab57d30d21/1674471968.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 320 x 240, 8-bit/color RGBA, non-interlaced\012- data
Hash 489907c95d7afef0cc236fad317a1112
6ba0470a7e9fdf90fcc481e31f8866ea7d4fb063
2030387c9affa0ca884585bb770bb8577acbde75c63ee9005c318b676a769142
GET /si/06/17/a0/0617a061e6a71952b94e88ab57d30d21/1674471968.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:07 GMT
Content-Type: image/png
Content-Length: 78315
Connection: keep-alive
Server: nginx/1.17.6
Last-Modified: Mon, 23 Jan 2023 11:06:17 GMT
ETag: "63ce6a29-131eb"
Expires: Sun, 05 Feb 2023 17:01:07 GMT
Cache-Control: max-age=172800
X-Proxy-Cache: HIT
Accept-Ranges: bytes
shippingswimsuitflog.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSP2wcxReeTfzTLyIVEQ0ioK0QSOi8e7eXuyMgixAcWQTH%2BQMuaJidmT0PnttZzezenk1jOSJKean4U62%2Fs2MRrIhQpUFC5zSRq6yQkIu4oEGIEoka7fkkw5N235v53kjf9953Zys7Ih4yerj0kV6XStHZZs1z31iWMde5dRdvub5X8y66yzK%2BEFx0B9XP9N%2F2vWbNe9O9Itiqnq17vuf5nu%2FOSyMiPZidoJDJXsevdbxaUK%2F5zQAD89%2BzzRxY6oD3j8g5SF7%2Bb%2BXpI0g2Rtz74bKwq6lO3vqglymaaoM%2B3%2F04Xo11HqN3UkbGQRTvTruhbUnI16eg492pAuj%2BdqUAoSyJ86uPMN6d0kTY3zlmGiqIGCE%2Fi7w%2FhlBjSDoG07ch%2BTMCMI7Fa4h79xe1yenaMUortCQzf%2F8FmZdk5vlLiHsPLyk5cG9qlaVSxxaDqIAcjCG7YyTZPtJ1BzLfB0s3ITlB3CsgeTFRLeUYMhpDiSGodZBVn3SQRQ6yxEGPH7q02Yk8rxWFUaPRDhhjjQZjzfYF3uSNoB15yFhFa4g0GYKpIZjZQGI2sCrvPWueg8l%2Bhl0pYLkDm5bEub6BPi%2BQC4LcEuSUIJcEeUqQ94sdrmzdFve5slnoT3N9mhvFSKfdLbqj066IyVZyRF6sRuKc%2BeoXrIpDl0dB2BJRGDRbzZYIeCg6ggact9oB52H9AqwsIO2pidp1WZLz4x%2BRyJL8%2F7NXEdJ9WLUPJl8BzXzQfNSqe6Aro6DtYT3eS3jEjeyLGtM9cF0gSWeQrjlb6oi8PFnNO58OINjB3MPH1%2F%2F88rXHYKZAYgp8Lp8QdNXd0Q2dk%2B0bOrfk0bUklT25Tqu13UxpKk4%2F%2BFCs5drwhct2%2BN17rAKqcu%2BWsOlVGnMZdy35%2FpLkXJh5bZggPy3YZREuZXblUmbiLLm69P78Qi8xwlqp4zFoZUE5ByZLcvb0JxNLuptXIM0YJivQyw7INCD1PliyAZsczD04v3fGf%2F0PWE1g1ElPmDjIs2Jk6uHJpZIlma3NQImDuTtPNr%2FQv%2F0OGhaw4l8PT%2Botexdd44Cmtydm7JsCfVWAqiFs9sIoTczB3NNvqvgWoXJGoTLOdqiMunc8YCsP3aYfiHbYbjHOQ8G436o32g3Pq3MetDrC7yC1JXv%2BbvkPAAAA%2F%2F8BAAD%2F%2F2XPQSNuBAAA
200 OK 7 B URL HTTP/1.1 shippingswimsuitflog.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSP2wcxReeTfzTLyIVEQ0ioK0QSOi8e7eXuyMgixAcWQTH%2BQMuaJidmT0PnttZzezenk1jOSJKean4U62%2Fs2MRrIhQpUFC5zSRq6yQkIu4oEGIEoka7fkkw5N235v53kjf9953Zys7Ih4yerj0kV6XStHZZs1z31iWMde5dRdvub5X8y66yzK%2BEFx0B9XP9N%2F2vWbNe9O9Itiqnq17vuf5nu%2FOSyMiPZidoJDJXsevdbxaUK%2F5zQAD89%2BzzRxY6oD3j8g5SF7%2Bb%2BXpI0g2Rtz74bKwq6lO3vqglymaaoM%2B3%2F04Xo11HqN3UkbGQRTvTruhbUnI16eg492pAuj%2BdqUAoSyJ86uPMN6d0kTY3zlmGiqIGCE%2Fi7w%2FhlBjSDoG07ch%2BTMCMI7Fa4h79xe1yenaMUortCQzf%2F8FmZdk5vlLiHsPLyk5cG9qlaVSxxaDqIAcjCG7YyTZPtJ1BzLfB0s3ITlB3CsgeTFRLeUYMhpDiSGodZBVn3SQRQ6yxEGPH7q02Yk8rxWFUaPRDhhjjQZjzfYF3uSNoB15yFhFa4g0GYKpIZjZQGI2sCrvPWueg8l%2Bhl0pYLkDm5bEub6BPi%2BQC4LcEuSUIJcEeUqQ94sdrmzdFve5slnoT3N9mhvFSKfdLbqj066IyVZyRF6sRuKc%2BeoXrIpDl0dB2BJRGDRbzZYIeCg6ggact9oB52H9AqwsIO2pidp1WZLz4x%2BRyJL8%2F7NXEdJ9WLUPJl8BzXzQfNSqe6Aro6DtYT3eS3jEjeyLGtM9cF0gSWeQrjlb6oi8PFnNO58OINjB3MPH1%2F%2F88rXHYKZAYgp8Lp8QdNXd0Q2dk%2B0bOrfk0bUklT25Tqu13UxpKk4%2F%2BFCs5drwhct2%2BN17rAKqcu%2BWsOlVGnMZdy35%2FpLkXJh5bZggPy3YZREuZXblUmbiLLm69P78Qi8xwlqp4zFoZUE5ByZLcvb0JxNLuptXIM0YJivQyw7INCD1PliyAZsczD04v3fGf%2F0PWE1g1ElPmDjIs2Jk6uHJpZIlma3NQImDuTtPNr%2FQv%2F0OGhaw4l8PT%2Botexdd44Cmtydm7JsCfVWAqiFs9sIoTczB3NNvqvgWoXJGoTLOdqiMunc8YCsP3aYfiHbYbjHOQ8G436o32g3Pq3MetDrC7yC1JXv%2BbvkPAAAA%2F%2F8BAAD%2F%2F2XPQSNuBAAA
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSP2wcxReeTfzTLyIVEQ0ioK0QSOi8e7eXuyMgixAcWQTH%2BQMuaJidmT0PnttZzezenk1jOSJKean4U62%2Fs2MRrIhQpUFC5zSRq6yQkIu4oEGIEoka7fkkw5N235v53kjf9953Zys7Ih4yerj0kV6XStHZZs1z31iWMde5dRdvub5X8y66yzK%2BEFx0B9XP9N%2F2vWbNe9O9Itiqnq17vuf5nu%2FOSyMiPZidoJDJXsevdbxaUK%2F5zQAD89%2BzzRxY6oD3j8g5SF7%2Bb%2BXpI0g2Rtz74bKwq6lO3vqglymaaoM%2B3%2F04Xo11HqN3UkbGQRTvTruhbUnI16eg492pAuj%2BdqUAoSyJ86uPMN6d0kTY3zlmGiqIGCE%2Fi7w%2FhlBjSDoG07ch%2BTMCMI7Fa4h79xe1yenaMUortCQzf%2F8FmZdk5vlLiHsPLyk5cG9qlaVSxxaDqIAcjCG7YyTZPtJ1BzLfB0s3ITlB3CsgeTFRLeUYMhpDiSGodZBVn3SQRQ6yxEGPH7q02Yk8rxWFUaPRDhhjjQZjzfYF3uSNoB15yFhFa4g0GYKpIZjZQGI2sCrvPWueg8l%2Bhl0pYLkDm5bEub6BPi%2BQC4LcEuSUIJcEeUqQ94sdrmzdFve5slnoT3N9mhvFSKfdLbqj066IyVZyRF6sRuKc%2BeoXrIpDl0dB2BJRGDRbzZYIeCg6ggact9oB52H9AqwsIO2pidp1WZLz4x%2BRyJL8%2F7NXEdJ9WLUPJl8BzXzQfNSqe6Aro6DtYT3eS3jEjeyLGtM9cF0gSWeQrjlb6oi8PFnNO58OINjB3MPH1%2F%2F88rXHYKZAYgp8Lp8QdNXd0Q2dk%2B0bOrfk0bUklT25Tqu13UxpKk4%2F%2BFCs5drwhct2%2BN17rAKqcu%2BWsOlVGnMZdy35%2FpLkXJh5bZggPy3YZREuZXblUmbiLLm69P78Qi8xwlqp4zFoZUE5ByZLcvb0JxNLuptXIM0YJivQyw7INCD1PliyAZsczD04v3fGf%2F0PWE1g1ElPmDjIs2Jk6uHJpZIlma3NQImDuTtPNr%2FQv%2F0OGhaw4l8PT%2Botexdd44Cmtydm7JsCfVWAqiFs9sIoTczB3NNvqvgWoXJGoTLOdqiMunc8YCsP3aYfiHbYbjHOQ8G436o32g3Pq3MetDrC7yC1JXv%2BbvkPAAAA%2F%2F8BAAD%2F%2F2XPQSNuBAAA HTTP/1.1
Host: shippingswimsuitflog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.pdfdrive.com/
Cookie: u_pl=17340372; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 03 Feb 2023 17:01:07 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 194780df2b12d313a815f887f418ad92
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.bmcdn3.com/p/62a84efecc5fbd1c36e2fd65/?source=http%253A%252F%252Fwww.pdfdrive.com%252Ftomb-of-annihilation-d52202257.html&sourceid=252855134280&ent=&we=0&fid=52b02fd531429bfeab5d153fe053ee70&fidnoua=025b59fb845d305a8691bec5748d5ce2&impid=ffb648ed-b6c5-47ff-be6b-43ecf2564cac&pageViewUuid=9d43fabe-988b-447f-a799-37287443cd6a&ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0&sig=0x00000&blocksubid=0
200 OK 108 kB URL HTTP/2 cdn.bmcdn3.com/p/62a84efecc5fbd1c36e2fd65/?source=http%253A%252F%252Fwww.pdfdrive.com%252Ftomb-of-annihilation-d52202257.html&sourceid=252855134280&ent=&we=0&fid=52b02fd531429bfeab5d153fe053ee70&fidnoua=025b59fb845d305a8691bec5748d5ce2&impid=ffb648ed-b6c5-47ff-be6b-43ecf2564cac&pageViewUuid=9d43fabe-988b-447f-a799-37287443cd6a&ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0&sig=0x00000&blocksubid=0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1506), with no line terminators
Size 108 kB (108317 bytes)
Hash e8bbd796b98cf23dab62b5cf800b3056
5134648e8121ac4f9b77113fab015b5f35012819
0c39bfba185f0006a27b4bf7179a2413798127064b7dd6723fece1b36afb799c
GET /p/62a84efecc5fbd1c36e2fd65/?source=http%253A%252F%252Fwww.pdfdrive.com%252Ftomb-of-annihilation-d52202257.html&sourceid=252855134280&ent=&we=0&fid=52b02fd531429bfeab5d153fe053ee70&fidnoua=025b59fb845d305a8691bec5748d5ce2&impid=ffb648ed-b6c5-47ff-be6b-43ecf2564cac&pageViewUuid=9d43fabe-988b-447f-a799-37287443cd6a&ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0&sig=0x00000&blocksubid=0 HTTP/1.1
Host: cdn.bmcdn3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.pdfdrive.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:01:07 GMT
content-type: text/html
access-control-allow-origin: *
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZPqPYn9sdX28I6uH9nAAG4TC%2FHPwa5FseRZzhhGD%2Fo5uvGEfK62oQUaDXG6e8ykwcAQ2DL7NDSx4kRaVQO8NJOTR%2BLu51u3Ic8ybdrb63WFMMlWDRn5d%2BEHjO6cy59Wi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 793cba06dde5b50f-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.pdfdrive.com/assets/img/cat/5.jpg,q1.pagespeed.ce.s9tlpDKaed.jpg
200 OK 2.7 kB URL HTTP/1.1 www.pdfdrive.com/assets/img/cat/5.jpg,q1.pagespeed.ce.s9tlpDKaed.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 40x40, components 3\012- data
Hash b3db65a4329a79ddb5508fb241442dd8
6a76016733b7568d2241eea063ed9cd472de1f0d
c1b88b517f0f51d1f8ed50b4ddfa52321482bc7595baa2f5469e8a6cee9da46f
GET /assets/img/cat/5.jpg,q1.pagespeed.ce.s9tlpDKaed.jpg HTTP/1.1
Host: www.pdfdrive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/tomb-of-annihilation-d52202257.html
Cookie: pd_session=egafki3grvl56op9u9gan4esmfpn8vcs
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:07 GMT
Content-Type: image/jpeg
Content-Length: 2747
Connection: keep-alive
Link: <http://www.pdfdrive.com/assets/img/cat/5.jpg?1>; rel="canonical"
Accept-Ranges: bytes
X-Frame-Options: sameorigin
Last-Modified: Tue, 14 May 2019 09:30:40 GMT
Expires: Sat, 03 Feb 2024 17:01:07 GMT
Cache-Control: max-age=31536000
Etag: W/"0"
X-Original-Content-Length: 2747
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lWFcP%2FnMvmDMQayxOb7bDZQKbugN4PsTYbw%2B0rf3%2Bo%2BfsT99RXY1QcgDSdu%2BlW%2FK%2B9ePBjeu%2FWVTLPdF81xtTrsjUcJJXekVHSxAh8rio1nxuWc%2B%2FqVHdPJUCGCqH9s9iyg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 793cba017ee60b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
www.pdfdrive.com/assets/img/cat/113.jpg,q1.pagespeed.ce.mkYymIWWrJ.jpg
200 OK 2.5 kB URL HTTP/1.1 www.pdfdrive.com/assets/img/cat/113.jpg,q1.pagespeed.ce.mkYymIWWrJ.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 40x40, components 3\012- data
Hash 9a4632988596ac9d37b1354219dcacc7
fb7f6524bf445f18f4ac9e76124825aa67bdfe80
2b861d512f9813b062f526b997c749ae42607974b9fc7ec14464ab4ef1e15e59
GET /assets/img/cat/113.jpg,q1.pagespeed.ce.mkYymIWWrJ.jpg HTTP/1.1
Host: www.pdfdrive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/tomb-of-annihilation-d52202257.html
Cookie: pd_session=egafki3grvl56op9u9gan4esmfpn8vcs
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:07 GMT
Content-Type: image/jpeg
Content-Length: 2515
Connection: keep-alive
Link: <http://www.pdfdrive.com/assets/img/cat/113.jpg?1>; rel="canonical"
Accept-Ranges: bytes
X-Frame-Options: sameorigin
Last-Modified: Tue, 14 May 2019 09:36:00 GMT
Expires: Sat, 03 Feb 2024 17:01:07 GMT
Cache-Control: max-age=31536000
Etag: W/"0"
X-Original-Content-Length: 2515
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FodPhdOSKBuMRiudEJLCR0pu9GbACVnZKwPvzThtp05uv%2BQZMrWjKFFC1NX5Q4N66P3egaS4dnHHWLvu%2ByAgKoYNX4C6opPPb1nMiKUH%2BMFSSxl4csSEJBtCqPTaQ6efD34%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 793cba018d580b65-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
resources.infolinks.com/js/1845.006-3.025/ice.js
200 OK 57 kB URL HTTP/1.1 resources.infolinks.com/js/1845.006-3.025/ice.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash c6ee2f5ee5d8108c139d7995eb7235be
fe8501fa91bf7692c9b40163c95089fc699c56e1
c79263ce4c0b60c655507bc9530cdcbeb56b09a745b060ce1902179795ee6e7c
GET /js/1845.006-3.025/ice.js HTTP/1.1
Host: resources.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 25 Jan 2023 14:23:04 GMT
ETag: W/"2d3a3-5f3175edcfc76"
Cache-Control: max-age=2592000
Expires: Sun, 05 Mar 2023 16:11:18 GMT
Via: 1.1 google
CF-Cache-Status: HIT
Age: 2989
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 793cba09de53fabc-OSL
Content-Encoding: gzip
cdn.taboola.com/libtrc/asahainc/loader.js
200 OK 23 kB URL HTTP/1.1 cdn.taboola.com/libtrc/asahainc/loader.js
IP
File type ASCII text, with very long lines (65508)
Hash 687ef18c9465f3e1643857adbbc69530
33b8dd1093a7c713a561b331e448e0d71ad0a855
219a94cabccf0abd025f9e400fc8b395139277939b779524bd786dda40829c3c
GET /libtrc/asahainc/loader.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 22805
x-amz-id-2: epcx4KO9ggIGZlToSS+WmqHqMLCRB/tnazezr47ojqD/fRYHa196uNs8HbHVq6IyQbQlMHDSg+8=
x-amz-request-id: NF5E4QAZ8ZHWEFX6
x-amz-replication-status: FAILED
Last-Modified: Thu, 15 Dec 2022 16:49:51 GMT
x-amz-expiration: expiry-date="Tue, 14 Feb 2023 00:00:00 GMT", rule-id="expire-versioned-loader"
ETag: "ee25db3002650e134ed6618aef328deb"
x-amz-version-id: Ewk6jC1UW18t5Xhg2bDbkrX.H0jKK3_y
Content-Type: application/javascript; charset=utf-8
Server: AmazonS3
Content-Encoding: gzip
Accept-Ranges: bytes
Date: Fri, 03 Feb 2023 17:01:07 GMT
Via: 1.1 varnish
Age: 53
X-Served-By: cache-bma1677-BMA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1675443668.508553,VS0,VE1
Cache-Control: private,max-age=14401
Vary: Accept-Encoding
abp: 99
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0c15fd84f4711d994724c35236542194
c47d77fe5b373a86bd9a116bd8baac07ec746add
a210a4599baaa980674b456f020282cd470559b319be263fdcf9eaec7cff0d3b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:01:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
play.google.com/intl/en_us/badges/images/generic/en_badge_web_generic.png
302 Found 284 B URL HTTP/2 play.google.com/intl/en_us/badges/images/generic/en_badge_web_generic.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 9eb20e53f15c05dec7817750a07830e1
28c80c8b3546ead8bf99e0523cd85da02452d1c4
0de5342646b1fbde8390c9adfef31f1b443e2ccdeb921d90e037e04e61fb1214
GET /intl/en_us/badges/images/generic/en_badge_web_generic.png HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.pdfdrive.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://play.google.com/intl/en_us/badges/static/images/badges/en_badge_web_generic.png
cache-control: private
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 17:01:07 GMT
server: sffe
content-length: 284
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7d482750bf7fdfcaa38c0efd583ef4dc
a4f68a124e4be130bc838e70f23fd4c6d2f4ef2d
5e6f1cadf4bc425664bb26fa2b384cf13900461b689c77d0916b1d2edd41337c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:01:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0c15fd84f4711d994724c35236542194
c47d77fe5b373a86bd9a116bd8baac07ec746add
a210a4599baaa980674b456f020282cd470559b319be263fdcf9eaec7cff0d3b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:01:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
play.google.com/intl/en_us/badges/static/images/badges/en_badge_web_generic.png
200 OK 4.9 kB URL HTTP/2 play.google.com/intl/en_us/badges/static/images/badges/en_badge_web_generic.png
IP
File type PNG image data, 646 x 250, 8-bit colormap, non-interlaced\012- data
Hash 1e91d02cf5a902f38f2923c006d79281
cb8126b32c2274e0394246b40bd0b7f9f847e44c
f72611e2df8e88204009fd896d05d5e8e83c77009c63943bbffa169559934849
GET /intl/en_us/badges/static/images/badges/en_badge_web_generic.png HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.pdfdrive.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/play_google
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="uxe-owners-acl/play_google"
report-to: {"group":"uxe-owners-acl/play_google","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/play_google"}]}
content-length: 4904
date: Fri, 03 Feb 2023 17:01:07 GMT
expires: Fri, 03 Feb 2023 17:01:07 GMT
cache-control: private, max-age=0
last-modified: Thu, 04 Aug 2022 06:08:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j99&a=1850424201&t=pageview&_s=1&dl=http%3A%2F%2Fwww.pdfdrive.com%2Ftomb-of-annihilation-d52202257.html&ul=en-us&de=UTF-8&dt=Tomb%20of%20Annihilation%20PDF%20(%20Free%20%7C%20203%20Pages%20)&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=1070368892&gjid=192075039&cid=791748282.1675443699&tid=UA-154495440-1&_gid=167042429.1675443699&_r=1&_slc=1&z=109443490
200 OK 2 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j99&a=1850424201&t=pageview&_s=1&dl=http%3A%2F%2Fwww.pdfdrive.com%2Ftomb-of-annihilation-d52202257.html&ul=en-us&de=UTF-8&dt=Tomb%20of%20Annihilation%20PDF%20(%20Free%20%7C%20203%20Pages%20)&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=1070368892&gjid=192075039&cid=791748282.1675443699&tid=UA-154495440-1&_gid=167042429.1675443699&_r=1&_slc=1&z=109443490
IP
File type ASCII text, with no line terminators
Hash 38684612f0c6bb6dfa16da92f4a6878f
6fe62d0dd7db314b7f9bb945672f078e01d27f0f
a048e640908046be06e00eab37742b5d5ff80964af58cfd22f7cb2de4dfe375f
POST /j/collect?v=1&_v=j99&a=1850424201&t=pageview&_s=1&dl=http%3A%2F%2Fwww.pdfdrive.com%2Ftomb-of-annihilation-d52202257.html&ul=en-us&de=UTF-8&dt=Tomb%20of%20Annihilation%20PDF%20(%20Free%20%7C%20203%20Pages%20)&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=1070368892&gjid=192075039&cid=791748282.1675443699&tid=UA-154495440-1&_gid=167042429.1675443699&_r=1&_slc=1&z=109443490 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.pdfdrive.com
Connection: keep-alive
Referer: http://www.pdfdrive.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://www.pdfdrive.com
date: Fri, 03 Feb 2023 17:01:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/impl.20221215-12-RELEASE.js
200 OK 186 kB URL HTTP/2 cdn.taboola.com/libtrc/impl.20221215-12-RELEASE.js
IP
File type ASCII text, with very long lines (65508)
Size 186 kB (185914 bytes)
Hash ccad4453f2d817ad5cdecd8224d09f30
1312b5e96897a6e080c0cfba51f40fa2dd0b6e67
ddde539bb180e852fe5b4076fa50d06578f4182b58a08fe545a2520df351e097
GET /libtrc/impl.20221215-12-RELEASE.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.pdfdrive.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: QHRrdWvceWwlqxz2LSQplzRrKLxcD9Lp3qT1FnxD1qhv+XF0YaEo51uDN27dJhgygqpHBo6ZCO0=
x-amz-request-id: S3X0K4YHXTGRSZ8Z
x-amz-replication-status: COMPLETED
last-modified: Mon, 19 Dec 2022 11:41:55 GMT
etag: "2d16ebf06f3b6d63283c99b612f59a20"
x-amz-version-id: YQbCQYyimP9HJMcamD34ogk3mfbzx5Ls
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Fri, 03 Feb 2023 17:01:07 GMT
via: 1.1 varnish
age: 53
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1675443668.605668,VS0,VE1
cache-control: private,max-age=31536000
vary: Accept-Encoding
abp: 17
content-length: 185914
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3140
Expires: Fri, 03 Feb 2023 17:53:27 GMT
Date: Fri, 03 Feb 2023 17:01:07 GMT
Connection: keep-alive
cdn.bmcdn3.com/js/62a84efecc5fbd1c36e2fd65.js
200 OK 4.3 kB URL HTTP/2 cdn.bmcdn3.com/js/62a84efecc5fbd1c36e2fd65.js
IP
File type ASCII text, with very long lines (8809), with no line terminators
Hash 260ff827d110dc0c6f3d0ece48e9f8c4
3322069efc39411164700fe0cfc6ee0facbc2088
453023c2ed5f2b37cb421c5b435be1f1e4b48e0e10ecffbb5908a223b27b3c2d
GET /js/62a84efecc5fbd1c36e2fd65.js HTTP/1.1
Host: cdn.bmcdn3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.pdfdrive.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:01:06 GMT
content-type: application/javascript
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization
access-control-allow-methods: *
access-control-allow-origin: *
vary: Accept-Encoding
expires: Fri, 03 Feb 2023 17:31:06 GMT
cache-control: max-age=1800, public
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yg5EWEGvupbqCm8RFvLaAk9EehKLdRTZ7qTXMgQVDGJEFzz58JsMjXwqEcaHQz83LXt3RydSb5Wk%2B%2F2J1qqIS3xA4hHIaigt8DQnueGddn%2BqM0dpmXmtA5CAfqe%2BW%2BsP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 793cba00ac8fb50f-OSL
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F524a46fd-88eb-4539-9d8b-1ac679ae5990.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F524a46fd-88eb-4539-9d8b-1ac679ae5990.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 114e345e134986d7451148fcea31b29d
541e878afee68c8802bb52b0cbbe5a5a0a185392
5030244d4babd1023166f39c935029d789a91ba90aa3a44c6f4c88ddc947b678
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F524a46fd-88eb-4539-9d8b-1ac679ae5990.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8211
x-amzn-requestid: 2df5779a-a808-46ec-9246-1a9b9bddd9e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fmKLVHwroAMF72Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d8bd7b-3cfe97e07d17958836425784;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 07:04:27 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ZZXEXszbtmGh7kLfhabCGd41rZRnSmQvdcySUQRTDtJRBqZVUK3LaQ==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 07:19:27 GMT
age: 34900
etag: "541e878afee68c8802bb52b0cbbe5a5a0a185392"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e366b32074025aaf60bbae8bdb08d330
a52c2883bad98fa20333aa639a5dd3a5bf544c8e
9d661c26effaec9efee16833f6459d6ecbe4f77b822c9c46e2a6433bda816e5c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11565
x-amzn-requestid: 87a84ffd-1176-4656-aac4-e98f38ec2cd9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fboIrFGboAMFyyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d48704-162ed8114aa1809204500548;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 02:23:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: w0Zm5V0TQxsQ7917U3fdhS_n7qKE143PuhI2JmNCDM_Pf0yPLyW6yA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 04:53:21 GMT
age: 43666
etag: "a52c2883bad98fa20333aa639a5dd3a5bf544c8e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49d52576-44b1-4baf-92c0-88f267415a19.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49d52576-44b1-4baf-92c0-88f267415a19.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d4041f3b5316bc84c9e6d88ddbc85b89
4978a4a20836b6f5d863d331bcedad782b7b4ac6
549b62d2c4ec965b8bec62010c0ce338dfea7992ee83eb7af61ff1a30d21f8b5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49d52576-44b1-4baf-92c0-88f267415a19.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5641
x-amzn-requestid: b53b54b1-3b00-47cf-a25c-e93910c2ebfb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fuvzpHsXoAMFsuw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dc2ce3-0c4fc8154763febb44460ac2;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 21:36:36 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: x4-BZdG4JGRKCSdKynnuweZfo9l0XZtDB-MiANy7C2Yz1URYMHP4sQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 22:28:50 GMT
age: 66737
etag: "4978a4a20836b6f5d863d331bcedad782b7b4ac6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 472 B URL HTTP/1.1 www.google-analytics.com/analytics.js
IP
Hash 9c45ea25709afbea416f215ee34611b0
117c52c0ee3ff15a2485c0b1e39cc12c7c2021ed
7fbc3c806c7fc6d70d70b55723dbbfc00698b14fcad55014218bc5e03e92a118
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/
HTTP/1.1 200 OK
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 20085
Date: Fri, 03 Feb 2023 16:03:19 GMT
Expires: Fri, 03 Feb 2023 18:03:19 GMT
Cache-Control: public, max-age=7200
Age: 3468
Last-Modified: Tue, 10 Jan 2023 21:29:14 GMT
Content-Type: text/javascript
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fedd456a0-d42f-4b40-ad63-ea1dcfaf69eb.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fedd456a0-d42f-4b40-ad63-ea1dcfaf69eb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2a6aaf87a867f93dc9268a8b27973b97
f52ccbe6cbced1994acb13a00b05436553b6813e
3fbd7441712035f4d53c17eec93bc278e6c072043f3b5a721cac349fc0dabe77
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fedd456a0-d42f-4b40-ad63-ea1dcfaf69eb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10166
x-amzn-requestid: 54fe0d12-360f-4d97-bcf3-b24747d956aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fY_4zHEcoAMF1iA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d379d1-4ba89e44005f616a0ed3ed24;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 07:14:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: G0R-0w9HtLB5OXb-w-RyR9QCnrddkS29FqF_GeAQa1CRWkqaUJwQoA==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 22:27:53 GMT
age: 66794
etag: "f52ccbe6cbced1994acb13a00b05436553b6813e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4ea648-021a-44ef-a083-3ea03f73dca3.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4ea648-021a-44ef-a083-3ea03f73dca3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3490571dd2de0a747987b9a0e18cccc8
18e9f8f160d3515f1cb31fc7538ac762a6cab344
1c071d7f3b288b29254500f94f19c0db0633c6aa90812f2e92c4f64992f5221a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4ea648-021a-44ef-a083-3ea03f73dca3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10796
x-amzn-requestid: 5c9b1a83-c99a-44b9-9a90-5edd7ef1e225
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi0XKG93oAMFtsA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76760-01bf754d6c725c3275c02a1b;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 06:44:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vUJO-Pt9Hi1ndrCQQT1nNCGT7oDOYBpA8-EawHanESoZAsZv32dQdg==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 00:25:04 GMT
age: 59763
etag: "18e9f8f160d3515f1cb31fc7538ac762a6cab344"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4c16006-34b0-45cb-bb9f-46fe6dd44e3c.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4c16006-34b0-45cb-bb9f-46fe6dd44e3c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cf80667db0c35c9c6139eca4ba5d12fd
4c4cfdc2463e8704a7bf8e1477c43b6adf7c7590
d63e69f4b6ea16333d242bf33d4f02a4a6c96a739ca018d86afc5741d85b774d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4c16006-34b0-45cb-bb9f-46fe6dd44e3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13065
x-amzn-requestid: 20c6f462-0f1f-44d1-9b6b-6afbc4e79e8b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fpYpcELtIAMFvFg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63da07d5-44cd803c0feba28919b0a9ec;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 06:33:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: T3PhGRcHX1X2hn8K_4587fXBrEyuY5Em-b9Jg41uH4uyQXeFoRBIYg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 21:55:01 GMT
age: 68766
etag: "4c4cfdc2463e8704a7bf8e1477c43b6adf7c7590"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.pdfdrive.com/favicon.ico
200 OK 770 B URL HTTP/1.1 www.pdfdrive.com/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 8ab0f48d08407a5698989d496e13aaaa
bb22ead08513ee91e36b6b0a0c85b3e1005463fc
c1ae09b6e2cc96012aa871f5e297c69d0b4a8ddbc0bef1e0b71b9d23294ec973
GET /favicon.ico HTTP/1.1
Host: www.pdfdrive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/tomb-of-annihilation-d52202257.html
Cookie: pd_session=egafki3grvl56op9u9gan4esmfpn8vcs; dom3ic8zudi28v8lr6fgphwffqoz0j6c=084fe332-e4a5-4a57-a041-84d048a3bfd6%3A3%3A1; bitmedia_fid=eyJmaWQiOiI1MmIwMmZkNTMxNDI5YmZlYWI1ZDE1M2ZlMDUzZWU3MCIsImZpZG5vdWEiOiIwMjViNTlmYjg0NWQzMDVhODY5MWJlYzU3NDhkNWNlMiJ9; m5a4xojbcp2nx3gptmm633qal3gzmadn=shippingswimsuitflog.com; ppu_idelay_a2710803631d2a6fc90c289bfea08cdc=1
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:07 GMT
Content-Type: image/vnd.microsoft.icon
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 18 Jan 2017 04:47:56 GMT
ETag: W/"47e-546571ece6aee"
X-Frame-Options: sameorigin
Cache-Control: s-maxage=10
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1KWpnlHquleIe57WlWcAnlAE6zlUiZBnAZmcgpsi72QUU238qIMEeCMf8ojm6AjaVLQFz4nwDosk9My20LKCOLvtK6GCAPHrYLQ73st%2BWUW54BFY5%2FtEYckhWPQJjfv4nyQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 793cba09ddda0b65-OSL
Content-Encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
router.infolinks.com/gsd?evt=afterGSD&pid=3213572&wsid=0&pdom=www.pdfdrive.com&purl=http%3A%2F%2Fwww.pdfdrive.com%2Ftomb-of-annihilation-d52202257.html&jsv=1845.006-3.025&_cb=16754436992920
200 OK 265 B URL HTTP/1.1 router.infolinks.com/gsd?evt=afterGSD&pid=3213572&wsid=0&pdom=www.pdfdrive.com&purl=http%3A%2F%2Fwww.pdfdrive.com%2Ftomb-of-annihilation-d52202257.html&jsv=1845.006-3.025&_cb=16754436992920
IP
File type ASCII text, with very long lines (317), with no line terminators
Hash 6351f4524bc57108440b24c45d3ba2c9
945a73e0fd3c69ed727c8cdea97a65de339be9eb
de8b98d844b8ebb43d466731c47bb087c72fff5b3500d5116f35326c5849b843
GET /gsd?evt=afterGSD&pid=3213572&wsid=0&pdom=www.pdfdrive.com&purl=http%3A%2F%2Fwww.pdfdrive.com%2Ftomb-of-annihilation-d52202257.html&jsv=1845.006-3.025&_cb=16754436992920 HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:07 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Cache-Control: max-age=0
P3P: CP="NON DSP NID OUR COR"
Set-Cookie: cuid=607e3daf-6d69-4736-afce-fc2dc5020756; Domain=infolinks.com; Expires=Sun, 02-Feb-2025 17:01:07 GMT; Path=/; SameSite=None
Via: 1.1 google
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 793cba0abe3a1bfe-OSL
Content-Encoding: gzip
router.infolinks.com/usync/lcmanage?pid=3213572&wsid=0&pdom=www.pdfdrive.com&purl=http%3A%2F%2Fwww.pdfdrive.com%2Ftomb-of-annihilation-d52202257.html
200 OK 0 B URL HTTP/2 router.infolinks.com/usync/lcmanage?pid=3213572&wsid=0&pdom=www.pdfdrive.com&purl=http%3A%2F%2Fwww.pdfdrive.com%2Ftomb-of-annihilation-d52202257.html
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/lcmanage?pid=3213572&wsid=0&pdom=www.pdfdrive.com&purl=http%3A%2F%2Fwww.pdfdrive.com%2Ftomb-of-annihilation-d52202257.html HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.pdfdrive.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:01:07 GMT
content-length: 0
cache-control: no-store
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 793cba0aeac3b523-OSL
X-Firefox-Spdy: h2
www.pdfdrive.com/ebook/counter?time=0.7737375550218724
200 OK 34 B URL HTTP/1.1 www.pdfdrive.com/ebook/counter?time=0.7737375550218724
IP
File type ASCII text, with no line terminators
Hash b649e21a1f2c0f43cd34b97c31fa0367
ed1be5da99c13216bd90c29812092c3c982cba0b
e1852e7c16bb8058ae568ef8fb6e93217d7fe19d99954e8a14180e95d3c12e12
GET /ebook/counter?time=0.7737375550218724 HTTP/1.1
Host: www.pdfdrive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://www.pdfdrive.com/tomb-of-annihilation-d52202257.html
Cookie: pd_session=egafki3grvl56op9u9gan4esmfpn8vcs; dom3ic8zudi28v8lr6fgphwffqoz0j6c=084fe332-e4a5-4a57-a041-84d048a3bfd6%3A3%3A1; bitmedia_fid=eyJmaWQiOiI1MmIwMmZkNTMxNDI5YmZlYWI1ZDE1M2ZlMDUzZWU3MCIsImZpZG5vdWEiOiIwMjViNTlmYjg0NWQzMDVhODY5MWJlYzU3NDhkNWNlMiJ9; m5a4xojbcp2nx3gptmm633qal3gzmadn=shippingswimsuitflog.com; ppu_idelay_a2710803631d2a6fc90c289bfea08cdc=1
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:07 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Mod-Pagespeed: 1.13.35.2-0
X-Frame-Options: sameorigin
Cache-Control: max-age=0, no-cache, s-maxage=10
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8QE7V6CKGFdO63MZU3IEc8RlmoBIkCG5Em5TpD1hnvX4nEyJbPED7kWQ5AIRpTEsggtBA%2FDsHtFveZsyhSe249TVRFBybh39jsAr27BhhVeQ1DvxMPmsUGf9RZmRyNg94PU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 793cba09dbf9b4fa-OSL
Content-Encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
302 Found 0 B URL HTTP/1.1 gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/
HTTP/1.1 302 Found
content-length: 0
location: https://gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
cache-control: no-cache
trc-events.taboola.com/asahainc/log/2/debug?tim=17%3A01%3A39.466&type=usage&msg=rtus&llvl=2&id=9256&cv=20221215-12-RELEASE<=normal&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/asahainc/log/2/debug?tim=17%3A01%3A39.466&type=usage&msg=rtus&llvl=2&id=9256&cv=20221215-12-RELEASE<=normal&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /asahainc/log/2/debug?tim=17%3A01%3A39.466&type=usage&msg=rtus&llvl=2&id=9256&cv=20221215-12-RELEASE<=normal&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.pdfdrive.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Fri, 03 Feb 2023 17:01:07 GMT
x-fastly-to-nlb-rtt: 22188
access-control-allow-credentials: true
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash c11f0c0346b891128d1772c9e0263baf
3d1f3201075de5d0b3a0e1c5ab1a01853c7bbd50
5d7f4adc08aa921962a1b101003a6cd96793d4b1a9a0f6294778ff1cd4d7855d
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1564
Cache-Control: max-age=166781
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:01:07 GMT
Etag: "63dd2034-1d7"
Expires: Sun, 05 Feb 2023 15:20:48 GMT
Last-Modified: Fri, 03 Feb 2023 14:54:44 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
ib.adnxs.com/getuid?https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fapn-usync%3Fuser_id%3D%24UID
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/getuid?https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fapn-usync%3Fuser_id%3D%24UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fapn-usync%3Fuser_id%3D%24UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Fri, 03 Feb 2023 17:01:07 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fapn-usync%253Fuser_id%253D%2524UID
AN-X-Request-Uuid: ebd2f2f3-663a-426b-80c1-6b4b554b900c
Set-Cookie: uuid2=4368215523408082616; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 04-May-2023 17:01:07 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 961.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
u.openx.net/w/1.0/cm?id=9b5994f2-035d-46de-8c12-bc0e9a4e66c2&r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fox-usync%3Fuid%3D
200 OK 56 B URL HTTP/2 u.openx.net/w/1.0/cm?id=9b5994f2-035d-46de-8c12-bc0e9a4e66c2&r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fox-usync%3Fuid%3D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 15669dda86db3cbff7835fa202dc0b16
ce788cab9c1aa7e458a3971a59702c410b37e64d
5cc3f958039a8885c4e9526e22d454da47d579b9a02861e7a60b41fa0ba910df
GET /w/1.0/cm?id=9b5994f2-035d-46de-8c12-bc0e9a4e66c2&r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fox-usync%3Fuid%3D HTTP/1.1
Host: u.openx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept, Accept-Encoding
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Fri, 03 Feb 2023 17:01:07 GMT
content-type: text/html
content-length: 56
content-encoding: gzip
cache-control: private, max-age=0, no-cache
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ib.adnxs.com/getuid?https://s.cpx.to/ca.png?ref=http%253A%252F%252Fwww.pdfdrive.com%252Ftomb-of-annihilation-d52202257.html&pid=12306&adnxs_uid=$UID
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/getuid?https://s.cpx.to/ca.png?ref=http%253A%252F%252Fwww.pdfdrive.com%252Ftomb-of-annihilation-d52202257.html&pid=12306&adnxs_uid=$UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https://s.cpx.to/ca.png?ref=http%253A%252F%252Fwww.pdfdrive.com%252Ftomb-of-annihilation-d52202257.html&pid=12306&adnxs_uid=$UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Fri, 03 Feb 2023 17:01:07 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fs.cpx.to%2Fca.png%3Fref%3Dhttp%25253A%25252F%25252Fwww.pdfdrive.com%25252Ftomb-of-annihilation-d52202257.html%26pid%3D12306%26adnxs_uid%3D%24UID
AN-X-Request-Uuid: d4e728c4-c42f-45f5-8729-a5efdd467366
Set-Cookie: uuid2=8855599691806534799; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 04-May-2023 17:01:07 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 961.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
rt3020.infolinks.com/action/doq.htm?pcode=utf-8&r=16754436994811
200 OK 604 B URL HTTP/1.1 rt3020.infolinks.com/action/doq.htm?pcode=utf-8&r=16754436994811
IP
File type JSON data\012- , ASCII text, with very long lines (1019)
Hash 957be4fa817827f49a480a87fdd87408
2656781f37b972d380fb8aea8396964572d33bf0
b706834089d2660205ffe36091af3366e11cc12bba7b8aebf93e9b86e0fa60ab
POST /action/doq.htm?pcode=utf-8&r=16754436994811 HTTP/1.1
Host: rt3020.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-type: application/x-www-form-urlencoded
Content-Length: 2155
Origin: http://www.pdfdrive.com
Connection: keep-alive
Referer: http://www.pdfdrive.com/
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:07 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Application-Context: application:prod
Access-Control-Allow-Origin: http://www.pdfdrive.com
Vary: Origin
Access-Control-Allow-Credentials: true
Cache-Control: no-cache,no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Set-Cookie: cuid=607e3daf-6d69-4736-afce-fc2dc5020756; Domain=infolinks.com; Expires=Sun, 02-Feb-2025 17:01:07 GMT; Path=/; SameSite=None
P3P: CP="NON DSP NID OUR COR"
Content-Language: en-US
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 793cba0bc966b505-OSL
Content-Encoding: gzip
www.pdfdrive.com/ebook/broken?id=52202257&session=34fee5e6409694882ff018179a12bf9f&r=740
200 OK 1.3 kB URL HTTP/1.1 www.pdfdrive.com/ebook/broken?id=52202257&session=34fee5e6409694882ff018179a12bf9f&r=740
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (659)
Hash 6276ad70e60866b0e6e3648b4becb775
7202f0576dd841d67254835ad58695c83e752433
05998edb33738079f96b933cc583c99be0045defdad617a9578b59b22b6cc190
GET /ebook/broken?id=52202257&session=34fee5e6409694882ff018179a12bf9f&r=740 HTTP/1.1
Host: www.pdfdrive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://www.pdfdrive.com/tomb-of-annihilation-d52202257.html
Cookie: pd_session=egafki3grvl56op9u9gan4esmfpn8vcs; dom3ic8zudi28v8lr6fgphwffqoz0j6c=084fe332-e4a5-4a57-a041-84d048a3bfd6%3A3%3A1; bitmedia_fid=eyJmaWQiOiI1MmIwMmZkNTMxNDI5YmZlYWI1ZDE1M2ZlMDUzZWU3MCIsImZpZG5vdWEiOiIwMjViNTlmYjg0NWQzMDVhODY5MWJlYzU3NDhkNWNlMiJ9; m5a4xojbcp2nx3gptmm633qal3gzmadn=shippingswimsuitflog.com; ppu_idelay_a2710803631d2a6fc90c289bfea08cdc=1
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:08 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, no-cache, s-maxage=10
Pragma: no-cache
Set-Cookie: pd_session=egafki3grvl56op9u9gan4esmfpn8vcs; expires=Wed, 02-Feb-2028 17:01:07 GMT; Max-Age=157680000; path=/; HttpOnly
X-Mod-Pagespeed: 1.13.35.2-0
Vary: Accept-Encoding
X-Frame-Options: sameorigin
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JcaTjNTNiTtjUpAPTEie1vvbdlD4Zv3%2BaPwvQAeBOEAyVWoxr6mur8WrC6wdkhC0ZSP%2F%2BixShh6Rg2XXqaltrA28PPbXOJJ9tJgN1p5HvnirI4KXa870ON7Syijz9ACIzZY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 793cba09df350b49-OSL
Content-Encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
ocsp.digicert.com/
200 OK 280 B IP
Hash b203d3ea1988ed23dc3940d0c4c76536
4a445af838fe9df7a03c9c0b46d6b5f170d4e233
79ce7df2897669d38bbd746eb8325df8bc5992999aa085f3379cb10977662b68
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2782
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:01:08 GMT
Last-Modified: Fri, 03 Feb 2023 16:14:46 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 313 B IP
Hash c20cf2947b23f54c08faaa69e2becdec
ae4c5c126002479cecc0a53dd8700e7e46a347f0
81000272aee9625ace4c21b43649f780bf3422150b0e2e169eb35711f7aa33ec
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3184
Cache-Control: max-age=164113
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:01:08 GMT
Etag: "63dd0f75-139"
Expires: Sun, 05 Feb 2023 14:36:21 GMT
Last-Modified: Fri, 03 Feb 2023 13:43:17 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 471 B IP
Hash da3beb9cdc6505327a8aa019852b0553
31096ce2624631fbbabb0a9692beb6aaeb6f2a30
2d3d3e32082cf7785814aec2d4c33eb2b25530590c69ccfbc4e2247aca46c71c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5732
Cache-Control: max-age=151851
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:01:08 GMT
Etag: "63dcd59b-1d7"
Expires: Sun, 05 Feb 2023 11:11:59 GMT
Last-Modified: Fri, 03 Feb 2023 09:36:27 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
ssum-sec.casalemedia.com/usermatch?s=191306&cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D
302 Found 0 B URL HTTP/2 ssum-sec.casalemedia.com/usermatch?s=191306&cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatch?s=191306&cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 03 Feb 2023 17:01:08 GMT
content-length: 0
location: /usermatch?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D&s=191306&C=1
cf-ray: 793cba0d3c86b521-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
pragma: no-cache
set-cookie: CMID=Y9091BTeyBStzsXiNZ4LjgAA; Path=/; Domain=casalemedia.com; Expires=Sat, 03 Feb 2024 17:01:08 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=1879; Path=/; Domain=casalemedia.com; Expires=Thu, 04 May 2023 17:01:08 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=1879; Path=/; Domain=casalemedia.com; Expires=Thu, 04 May 2023 17:01:08 GMT; Max-Age=7776000; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XzRL3tQcLxXPIYIyeD68PopI0ODVcUFsj5ZWEQe4dvjh4Lg%2BPKWhSI%2Bn55vEAaQUgKvw0p2q8o4rHjsgszYP2%2Bp%2FbQcBGH00YReCh4SHWx35bSDq2anqHAv7lWTmy%2FqNMKubjEr81DmzLw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
onetag-sys.com/usync/?pubId=598ce3ddaee8c90
204 No Content 0 B URL HTTP/2 onetag-sys.com/usync/?pubId=598ce3ddaee8c90
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/?pubId=598ce3ddaee8c90 HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
cache-control: no-store
strict-transport-security: max-age=15552000
X-Firefox-Spdy: h2
router.infolinks.com/dyn/iq-usync
200 OK 0 B URL HTTP/2 router.infolinks.com/dyn/iq-usync
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dyn/iq-usync HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/usync/manage?pid=3213572&wsid=0&pdom=www.pdfdrive.com&purl=http%3A%2F%2Fwww.pdfdrive.com%2Ftomb-of-annihilation-d52202257.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:01:08 GMT
content-length: 0
cache-control: no-store
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 793cba0c0c78b523-OSL
X-Firefox-Spdy: h2
ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fapn-usync%253Fuser_id%253D%2524UID
302 Found 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fapn-usync%253Fuser_id%253D%2524UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fapn-usync%253Fuser_id%253D%2524UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Fri, 03 Feb 2023 17:01:08 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://router.infolinks.com/dyn/apn-usync?user_id=0
AN-X-Request-Uuid: 5168836b-de6e-4bc2-9814-fcf18fc7829b
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 961.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
image8.pubmatic.com/AdServer/ImgSync?p=156872&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156872%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fpbm-usync%253Fuid%253D%2523PMUID
302 Found 267 B URL HTTP/2 image8.pubmatic.com/AdServer/ImgSync?p=156872&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156872%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fpbm-usync%253Fuid%253D%2523PMUID
IP
File type HTML document, ASCII text
Hash 4c3b0ed5d0694dfc6293df9d26db3427
d24a807f496ede8c6860cdfaef65db160c5bd622
bd7d1d9ab7cd90754ced171b8a2a5f8585295a99cbdaeeb377019e772442efe4
GET /AdServer/ImgSync?p=156872&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156872%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fpbm-usync%253Fuid%253D%2523PMUID HTTP/1.1
Host: image8.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=utf-8
location: /AdServer/ImgSync?p=156872&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156872%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fpbm-usync%253Fuid%253D%2523PMUID&rdf=1
set-cookie: KTPCACOOKIE=YES; domain=pubmatic.com; path=/; max-age=86400; secure;
date: Fri, 03 Feb 2023 17:01:07 GMT
content-length: 267
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash a066fb1e4ce413ebe177c2531a594cc3
49a39c4ee5c1e5d7e07ab17d703262c495b217d1
464f12dd3b739f5fe9f4875253f7567c660988f10950704b5cf145037599f3f6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3663
Cache-Control: max-age=158106
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:01:08 GMT
Etag: "63dcf61f-139"
Expires: Sun, 05 Feb 2023 12:56:14 GMT
Last-Modified: Fri, 03 Feb 2023 11:55:11 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 471 B IP
Hash 7d70c748b9288211c05eab1f436670ee
91fefada5e7642002e08a1443dc8829f883279bd
8c91d5490eb51f272bc017a0c025995cf1243ba3dc2ba9a5fd58aad4d35ccec9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5422
Cache-Control: max-age=171699
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:01:08 GMT
Etag: "63dd2459-1d7"
Expires: Sun, 05 Feb 2023 16:42:47 GMT
Last-Modified: Fri, 03 Feb 2023 15:12:25 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
cdn.bmcdn3.com/pv/62a8238bcc5fbd1c36e2caca/?source=http%253A%252F%252Fwww.pdfdrive.com%252Ftomb-of-annihilation-d52202257.html&sourceid=252855134280&ent=&we=0&fid=52b02fd531429bfeab5d153fe053ee70&fidnoua=025b59fb845d305a8691bec5748d5ce2&ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0&sig=0x00000&blocksubid=0&pageViewUuid=9d43fabe-988b-447f-a799-37287443cd6a&version=1675443698702
200 OK 35 B URL HTTP/2 cdn.bmcdn3.com/pv/62a8238bcc5fbd1c36e2caca/?source=http%253A%252F%252Fwww.pdfdrive.com%252Ftomb-of-annihilation-d52202257.html&sourceid=252855134280&ent=&we=0&fid=52b02fd531429bfeab5d153fe053ee70&fidnoua=025b59fb845d305a8691bec5748d5ce2&ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0&sig=0x00000&blocksubid=0&pageViewUuid=9d43fabe-988b-447f-a799-37287443cd6a&version=1675443698702
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /pv/62a8238bcc5fbd1c36e2caca/?source=http%253A%252F%252Fwww.pdfdrive.com%252Ftomb-of-annihilation-d52202257.html&sourceid=252855134280&ent=&we=0&fid=52b02fd531429bfeab5d153fe053ee70&fidnoua=025b59fb845d305a8691bec5748d5ce2&ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0&sig=0x00000&blocksubid=0&pageViewUuid=9d43fabe-988b-447f-a799-37287443cd6a&version=1675443698702 HTTP/1.1
Host: cdn.bmcdn3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.pdfdrive.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:01:07 GMT
content-type: image/gif
access-control-allow-origin: *
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qkR%2BGmZcqxWOIrUmh66tErwl9pcxj4BWDMJqKhRioLnqdeBwaiw96kw%2Fbe%2BCi6InfpjueKDDGaUbLYbNkDC3JSu5WLDL1l7I3hnxPtI7nwkReDTw1n55BjuotptjWxuO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 793cba06ddd8b50f-OSL
X-Firefox-Spdy: h2
cs.media.net/cksync?cs=41&ovsid=setstatuscode&type=inf&redirect=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fmnet-usync%3Fuid%3D%3Cvsid%3E
302 Moved Temporarily 154 B URL HTTP/1.1 cs.media.net/cksync?cs=41&ovsid=setstatuscode&type=inf&redirect=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fmnet-usync%3Fuid%3D%3Cvsid%3E
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 52558d05355ee6e9d14ff3cf8a5a3ef0
52cfd7dd3859dc0578849a7b1c91bb8f91ad84c2
bac5546ea0f819f461c9023592ec2398a45a6c3aab78e55fed8b7c908dce6060
GET /cksync?cs=41&ovsid=setstatuscode&type=inf&redirect=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fmnet-usync%3Fuid%3D%3Cvsid%3E HTTP/1.1
Host: cs.media.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: Apache
Content-Length: 154
Content-Type: text/html
Location: https://router.infolinks.com/dyn/mnet-usync?uid=0000EEA
Set-Cookie: data-inf=setstatuscode~~41;Expires=Thu, 04 May 2023 17:01:08 GMT;path=/;domain=.media.net;
P3P: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA", CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA
X-MNET-HL2: E
Expires: Fri, 03 Feb 2023 17:01:08 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 03 Feb 2023 17:01:08 GMT
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 6b20ab09bdee94b615d6fac70c587fe1
a9993f72a38f0c477b3d89c4956520b88db4cc61
82e37abea1bfe340439674e683154c0eeb7397d0460524e609508e52ac35ef1b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=163130
Date: Fri, 03 Feb 2023 17:01:08 GMT
Etag: "63dd059d-1d7"
Expires: Sun, 05 Feb 2023 14:19:58 GMT
Last-Modified: Fri, 03 Feb 2023 13:01:17 GMT
Server: ECS (bsa/EB12)
X-Cache: Miss from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: hJJMRi8IaMCxQng7fOMJscrh8uYdSS0yhMWtVMB2bF19lDmsz2Sjiw==
Age: 4721
image8.pubmatic.com/AdServer/ImgSync?p=156872&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156872%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fpbm-usync%253Fuid%253D%2523PMUID&rdf=1
200 OK 0 B URL HTTP/2 image8.pubmatic.com/AdServer/ImgSync?p=156872&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156872%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fpbm-usync%253Fuid%253D%2523PMUID&rdf=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /AdServer/ImgSync?p=156872&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156872%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fpbm-usync%253Fuid%253D%2523PMUID&rdf=1 HTTP/1.1
Host: image8.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:01:06 GMT
content-length: 0
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58422/occ
302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58422/occ
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58422/occ HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 03 Feb 2023 17:01:08 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/58422/occ?verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBNQ93WMCEJvJN7aFPnbvt13cxidbuBMFEgEBAQGP3mPnYwAAAAAA_eMAAA&S=AQAAAlOaZQE4upRhgpYjO6wvhsM; Expires=Sat, 3 Feb 2024 23:01:08 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash c11f0c0346b891128d1772c9e0263baf
3d1f3201075de5d0b3a0e1c5ab1a01853c7bbd50
5d7f4adc08aa921962a1b101003a6cd96793d4b1a9a0f6294778ff1cd4d7855d
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5110
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:01:08 GMT
Last-Modified: Fri, 03 Feb 2023 15:35:58 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
router.infolinks.com/usync/manage?pid=3213572&wsid=0&pdom=www.pdfdrive.com&purl=http%3A%2F%2Fwww.pdfdrive.com%2Ftomb-of-annihilation-d52202257.html
200 OK 2.1 kB URL HTTP/2 router.infolinks.com/usync/manage?pid=3213572&wsid=0&pdom=www.pdfdrive.com&purl=http%3A%2F%2Fwww.pdfdrive.com%2Ftomb-of-annihilation-d52202257.html
IP
Hash bf4cdf5f9a7f9f71126226011738bfbf
254cb783bef02fce10be8333a71d514039743048
08bcebd1716934de3a4c006354b0cc2385e46f1b41332c3db21705e29ea329e9
GET /usync/manage?pid=3213572&wsid=0&pdom=www.pdfdrive.com&purl=http%3A%2F%2Fwww.pdfdrive.com%2Ftomb-of-annihilation-d52202257.html HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.pdfdrive.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:01:07 GMT
content-type: text/html;charset=UTF-8
cache-control: no-store
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 793cba0aeacfb523-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
pixel.advertising.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true
301 Moved Permanently 360 B URL HTTP/2 pixel.advertising.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash ef184c6b065a63adf6c94f609c0a0c72
12e8af72d7af8f029d4300991e1eda7ec9f2545b
b01d8ed4f119579d92815a648e454327ae4af8a4592e98462fb72f414ddba9af
GET /ups/58237/sync?&gdpr=&gdpr_consent=&redir=true HTTP/1.1
Host: pixel.advertising.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Fri, 03 Feb 2023 17:01:08 GMT
server: ATS/9.1.10.25
cache-control: no-store
location: https://ups.analytics.yahoo.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true
content-type: text/html
content-language: en
set-cookie: A3=d=AQABBNQ93WMCEJSVwlZOopnpm_7kAVrpdWUFEgEBAQGP3mPnYwAAAAAA_eMAAA&S=AQAAAmV6NOFMDuk0vPBA3BJOK20; Expires=Sat, 3 Feb 2024 23:01:08 GMT; Max-Age=31557600; Domain=.advertising.com; Path=/; SameSite=None; Secure; HttpOnly
content-length: 360
X-Firefox-Spdy: h2
image8.pubmatic.com/AdServer/ImgSync?p=60809&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D60809%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fusersync%253Fpmuservalue%253D%2523PMUID
302 Found 272 B URL HTTP/2 image8.pubmatic.com/AdServer/ImgSync?p=60809&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D60809%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fusersync%253Fpmuservalue%253D%2523PMUID
IP
File type HTML document, ASCII text
Hash ebb92a4e4bfa9f49081d6d5490b87169
e986871fb2a1067935b9f45ff4ba155383056b29
fd3de728a94f948ba814f33b0020466ae949a4c493784a6b7a5f23687385747d
GET /AdServer/ImgSync?p=60809&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D60809%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fusersync%253Fpmuservalue%253D%2523PMUID HTTP/1.1
Host: image8.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=utf-8
location: /AdServer/ImgSync?p=60809&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D60809%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fusersync%253Fpmuservalue%253D%2523PMUID&rdf=1
set-cookie: KTPCACOOKIE=YES; domain=pubmatic.com; path=/; max-age=86400; secure;
date: Fri, 03 Feb 2023 17:01:07 GMT
content-length: 272
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58422/occ?verify=true
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58422/occ?verify=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58422/occ?verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 03 Feb 2023 17:01:08 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBNQ93WMCELBl_Aw7YLhv7c4IlNajG2AFEgEBAQGP3mPnYwAAAAAA_eMAAA&S=AQAAAmCLcf97rj2PYKboqUYhxUU; Expires=Sat, 3 Feb 2024 23:01:08 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true
302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58237/sync?&gdpr=&gdpr_consent=&redir=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Fri, 03 Feb 2023 17:01:08 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true&verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBNQ93WMCEKCyGvNfIYeV2APxwbfcLNMFEgEBAQGP3mPnYwAAAAAA_eMAAA&S=AQAAAu_6kcFmB7kAk_SpilQUFT4; Expires=Sat, 3 Feb 2024 23:01:08 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash f1d7caa3990755c35b3e67326ce30c48
0564b1aaab6c757a54df2cf0a1f625af03fa179c
ddfb8bd82c7416a8b00612e89b74455b8bd256a757ccfcdb2dba4a3bf17b162b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5986
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:01:08 GMT
Last-Modified: Fri, 03 Feb 2023 15:21:22 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
image8.pubmatic.com/AdServer/ImgSync?p=60809&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D60809%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fusersync%253Fpmuservalue%253D%2523PMUID&rdf=1
200 OK 0 B URL HTTP/2 image8.pubmatic.com/AdServer/ImgSync?p=60809&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D60809%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fusersync%253Fpmuservalue%253D%2523PMUID&rdf=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /AdServer/ImgSync?p=60809&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D60809%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fusersync%253Fpmuservalue%253D%2523PMUID&rdf=1 HTTP/1.1
Host: image8.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:01:06 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash c950978b4936b4cf9e55f8d096659397
f29ed621b2af55b13a09df5e24988a54b89f8dbf
79e5bb5dee2b9cd2f03022df4419472e3b78be32b7dfb5c7cc7c147f5fe1994e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:08 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 01 Feb 2023 01:55:55 GMT
Expires: Wed, 08 Feb 2023 01:55:54 GMT
Etag: "f29ed621b2af55b13a09df5e24988a54b89f8dbf"
Cache-Control: max-age=377085,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 793cba0e3ce1b509-OSL
router.infolinks.com/dyn/apn-usync?user_id=0
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/apn-usync?user_id=0
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/apn-usync?user_id=0 HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:01:08 GMT
content-type: image/gif
content-length: 35
cache-control: no-store
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 793cba0dcee1b523-OSL
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true&verify=true
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true&verify=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58237/sync?&gdpr=&gdpr_consent=&redir=true&verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 03 Feb 2023 17:01:08 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBNQ93WMCEBR_8jxv0AZVBS-QXSZrm-oFEgEBAQGP3mPnYwAAAAAA_eMAAA&S=AQAAAlupfrlekU9sMS19t3DfRKY; Expires=Sat, 3 Feb 2024 23:01:08 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 4ac3064c7508ad9b4025691320b35ab7
0d59935826565b8415bb91bfd1abaf475fd6018a
3e788ef15349387b0942b996b3a83630b6675ce02e6e2ea06c283cd508972726
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 03 Feb 2023 17:01:08 GMT
Last-Modified: Fri, 03 Feb 2023 16:20:51 GMT
Server: ECS (bsa/EB17)
X-Cache: Miss from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: VO3fy03arYynifKG6km8J7yJqnig3ltlyy_2bHiLQ3GshWDXCfJAvQ==
Age: 2417
cms.quantserve.com/pixel/p-u1vdacBMXAcfT.gif?idmatch=0
302 Found 0 B URL HTTP/2 cms.quantserve.com/pixel/p-u1vdacBMXAcfT.gif?idmatch=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/p-u1vdacBMXAcfT.gif?idmatch=0 HTTP/1.1
Host: cms.quantserve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 03 Feb 2023 17:01:08 GMT
content-length: 0
cache-control: private, no-cache, no-store, proxy-revalidate
expires: Fri, 04 Aug 1978 12:00:00 GMT
location: https://router.infolinks.com/dyn/qc-usync?&uid=-jkF4f9uBbHhOVjg_zJM4Po-B7ThP1Gyr2wjch_J
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV"
pragma: no-cache
set-cookie: d=EEsBDQGaKM2aswA; expires=Thu, 04-May-2023 17:01:08 GMT; path=/; domain=.quantserve.com
mc=63dd3dd4-39e38-e64f1-507cf; expires=Tue, 05-Mar-2024 17:01:08 GMT; path=/; domain=.quantserve.com
X-Firefox-Spdy: h2
imasdk.googleapis.com/js/sdkloader/ima3.js
200 OK 126 kB URL HTTP/1.1 imasdk.googleapis.com/js/sdkloader/ima3.js
IP
File type ASCII text, with very long lines (2846)
Size 126 kB (125826 bytes)
Hash 98b1fe69946e421b8ece280ad4995eed
e6e0b95673083dd5319db64472e9505964998bc0
3ce90bb62a4f3d7a503d1a819ce1b7016837a27c17065adb97c94680a7cd870a
GET /js/sdkloader/ima3.js HTTP/1.1
Host: imasdk.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="ads-doubleclick-instream-static"
Report-To: {"group":"ads-doubleclick-instream-static","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static"}]}
Content-Length: 125826
Date: Fri, 03 Feb 2023 17:01:08 GMT
Expires: Fri, 03 Feb 2023 17:01:08 GMT
Cache-Control: private, max-age=900, stale-while-revalidate=3600
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
ocsp.digicert.com/
200 OK 280 B IP
Hash b203d3ea1988ed23dc3940d0c4c76536
4a445af838fe9df7a03c9c0b46d6b5f170d4e233
79ce7df2897669d38bbd746eb8325df8bc5992999aa085f3379cb10977662b68
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2782
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:01:08 GMT
Last-Modified: Fri, 03 Feb 2023 16:14:46 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 280
router.infolinks.com/dyn/mnet-usync?uid=0000EEA
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/mnet-usync?uid=0000EEA
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/mnet-usync?uid=0000EEA HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:01:08 GMT
content-type: image/gif
content-length: 35
cache-control: no-store, no-cache, private
set-cookie: MNETUSERCOOKIE=0000EEA; Domain=infolinks.com; Expires=Thu, 04-May-2023 17:01:08 GMT; Path=/; SameSite=None; Secure
pragma: no-cache
expires: Thu, 03 Feb 2022 17:01:08 GMT
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 793cba0def17b523-OSL
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash c950978b4936b4cf9e55f8d096659397
f29ed621b2af55b13a09df5e24988a54b89f8dbf
79e5bb5dee2b9cd2f03022df4419472e3b78be32b7dfb5c7cc7c147f5fe1994e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:08 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 01 Feb 2023 01:55:55 GMT
Expires: Wed, 08 Feb 2023 01:55:54 GMT
Etag: "f29ed621b2af55b13a09df5e24988a54b89f8dbf"
Cache-Control: max-age=377085,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 793cba0d6bf1fac0-OSL
router.infolinks.com/dyn/ix-usync?uid=0
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/ix-usync?uid=0
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/ix-usync?uid=0 HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ssum-sec.casalemedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:01:08 GMT
content-type: image/gif
content-length: 35
cache-control: no-store
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 793cba0def1db523-OSL
X-Firefox-Spdy: h2
ad.360yield.com/server_match?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fimd-usync%3Fuser_id%3D%7BPUB_USER_ID%7D%26partner_id%3D1531
302 Found 0 B URL HTTP/2 ad.360yield.com/server_match?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fimd-usync%3Fuser_id%3D%7BPUB_USER_ID%7D%26partner_id%3D1531
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /server_match?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fimd-usync%3Fuser_id%3D%7BPUB_USER_ID%7D%26partner_id%3D1531 HTTP/1.1
Host: ad.360yield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 03 Feb 2023 17:01:08 GMT
content-type: text/plain
content-length: 0
location: https://ad.360yield.com/ul_cb/server_match?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fimd-usync%3Fuser_id%3D%7BPUB_USER_ID%7D%26partner_id%3D1531
set-cookie: tuuid=580e2319-7064-405d-9912-3d8884acbf9f; Expires=Thu, 04 May 2023 17:01:08 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure
tuuid_lu=1675443668; Expires=Thu, 04 May 2023 17:01:08 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash e490a80cd80d74c1296a5868257408a2
88b42d8ef10e4f8060018757fec6bc6685b9fdf8
9528af6a913355267553947d3ea25f3cfca57081e471697a9b7b8a5b32909b2b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4220
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 17:01:08 GMT
Last-Modified: Fri, 03 Feb 2023 15:50:48 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
ad.360yield.com/ul_cb/server_match?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fimd-usync%3Fuser_id%3D%7BPUB_USER_ID%7D%26partner_id%3D1531
200 OK 43 B URL HTTP/2 ad.360yield.com/ul_cb/server_match?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fimd-usync%3Fuser_id%3D%7BPUB_USER_ID%7D%26partner_id%3D1531
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/server_match?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fimd-usync%3Fuser_id%3D%7BPUB_USER_ID%7D%26partner_id%3D1531 HTTP/1.1
Host: ad.360yield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:01:08 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash d4d7bad292931b894ae20bb4032cb7e8
aef7612ce483c0d0deaf3e5b971ce7cd19c34526
3702cc8cde09782a0be2dbe9accb0d6e1c257fc5ca2b28be83718f243f48a29e
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 03 Feb 2023 17:01:08 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 02 Feb 2023 21:18:18 GMT
Expires: Fri, 03 Feb 2023 21:18:18 GMT
ETag: "aef7612ce483c0d0deaf3e5b971ce7cd19c34526"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
router.infolinks.com/dyn/qc-usync?&uid=-jkF4f9uBbHhOVjg_zJM4Po-B7ThP1Gyr2wjch_J
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/qc-usync?&uid=-jkF4f9uBbHhOVjg_zJM4Po-B7ThP1Gyr2wjch_J
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/qc-usync?&uid=-jkF4f9uBbHhOVjg_zJM4Po-B7ThP1Gyr2wjch_J HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:01:08 GMT
content-type: image/gif
content-length: 35
cache-control: no-store, no-cache, private
set-cookie: QCUSERCOOKIE=-jkF4f9uBbHhOVjg_zJM4Po-B7ThP1Gyr2wjch_J; Domain=infolinks.com; Expires=Thu, 04-May-2023 17:01:08 GMT; Path=/; SameSite=None; Secure
pragma: no-cache
expires: Thu, 03 Feb 2022 17:01:08 GMT
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 793cba0ea82fb523-OSL
X-Firefox-Spdy: h2
b1sync.zemanta.com/usersync/infolinks/?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fzmn-usync%3Fuid%3D__ZUID__
302 Found 70 B URL HTTP/1.1 b1sync.zemanta.com/usersync/infolinks/?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fzmn-usync%3Fuid%3D__ZUID__
IP
File type HTML document, ASCII text
Hash 16ccc9da763aca428789e4f469fc7ff1
4a873c523b8d9bdbc30b8c48189817413a19ee7a
5be7e833013b4b10333a904010b01217263df39c501a29b146d072110ceea4a1
GET /usersync/infolinks/?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fzmn-usync%3Fuid%3D__ZUID__ HTTP/1.1
Host: b1sync.zemanta.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Content-Length: 70
Cache-Control: no-cache, no-store, must-revalidate
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Location: https://router.infolinks.com/dyn/zmn-usync?uid=
Pragma: no-cache
Date: Fri, 03 Feb 2023 17:01:08 GMT
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 94e8977e051ad005b7311296ee851274
f190a1ad7c8f8d26fc51b698a360a2ca2b77d146
25ffe4764d27842df585c4e24105eba4a55c5282ada475da3d899bca7a494c32
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 03 Feb 2023 17:01:08 GMT
Last-Modified: Fri, 03 Feb 2023 16:20:57 GMT
Server: ECS (nyb/1D29)
X-Cache: Miss from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: aRNIIz-DTADnPSt-6nCUh3gcd1NaE-vBpqKt-q6QJNbV9_lP4nmtEw==
Age: 2411
ocsp.sectigo.com/
200 OK 471 B IP
Hash f778d551c0863c1a21556c8505894dff
2eeaa5eaa20a00dcd52e5912430d5a0819495c78
6eeff9b51275defc26c45f86df2f82a3cb5cce699667c36437d76daebffd2369
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:08 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 01 Feb 2023 23:33:41 GMT
Expires: Wed, 08 Feb 2023 23:33:40 GMT
Etag: "2eeaa5eaa20a00dcd52e5912430d5a0819495c78"
Cache-Control: max-age=454951,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 793cba0e7fc1b4fd-OSL
sync.go.sonobi.com/us?loc=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fsonobi-usync%3Fuid%3D%5BUID%5D
302 Found 0 B URL HTTP/1.1 sync.go.sonobi.com/us?loc=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fsonobi-usync%3Fuid%3D%5BUID%5D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /us?loc=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fsonobi-usync%3Fuid%3D%5BUID%5D HTTP/1.1
Host: sync.go.sonobi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Fri, 03 Feb 2023 17:01:08 GMT
Content-Type: text/plain; charset=utf8
Content-Length: 0
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, no-store, private
P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Pragma: no-cache
Tcn: Choice
Vary: negotiate,Accept-Encoding
X-Go-Server: go-iad-2-5-22
X-Xss-Protection: 0
Location: https://router.infolinks.com/dyn/sonobi-usync?uid=dbad6c31-523f-4628-8326-2b9dc1173769
Server: sonobi-go
Set-Cookie: __uis=dbad6c31-523f-4628-8326-2b9dc1173769; expires=Sun, 05 Mar 2023 17:01:08 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None
HAPLB8S=s8522|Y9091; path=/; domain=.go.sonobi.com; SameSite=None; secure
sync.1rx.io/usersync2/rmpssp?sub=infolinks&zcc=1&cb=1675443668254
302 Found 35 B URL HTTP/2 sync.1rx.io/usersync2/rmpssp?sub=infolinks&zcc=1&cb=1675443668254
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /usersync2/rmpssp?sub=infolinks&zcc=1&cb=1675443668254 HTTP/1.1
Host: sync.1rx.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Fri, 03 Feb 2023 17:01:08 GMT
content-type: text/html
cache-control: no-store, no-cache, must-revalidate
expires: 0
pragma: no-cache
location: https://router.infolinks.com/dyn/ur-usync?uid=OPTOUT
etag: OPTOUT
X-Firefox-Spdy: h2
www.pdfdrive.com/assets/img/pd-alerts.png
200 OK 18 kB URL HTTP/1.1 www.pdfdrive.com/assets/img/pd-alerts.png
IP
File type PNG image data, 436 x 82, 8-bit/color RGB, non-interlaced\012- data
Hash fa4e7fd95a24af64c1aae4393d8ba818
eeb87b94ddcd45effc8b1adbf02af88b00bad44f
ccd2fe5e49abda95a6bcd6a983c0e39f6fba176b9f3e0be80aa73e91379a080b
GET /assets/img/pd-alerts.png HTTP/1.1
Host: www.pdfdrive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/tomb-of-annihilation-d52202257.html
Cookie: pd_session=egafki3grvl56op9u9gan4esmfpn8vcs; dom3ic8zudi28v8lr6fgphwffqoz0j6c=084fe332-e4a5-4a57-a041-84d048a3bfd6%3A3%3A1; bitmedia_fid=eyJmaWQiOiI1MmIwMmZkNTMxNDI5YmZlYWI1ZDE1M2ZlMDUzZWU3MCIsImZpZG5vdWEiOiIwMjViNTlmYjg0NWQzMDVhODY5MWJlYzU3NDhkNWNlMiJ9; m5a4xojbcp2nx3gptmm633qal3gzmadn=shippingswimsuitflog.com; ppu_idelay_a2710803631d2a6fc90c289bfea08cdc=1; _ga=GA1.2.791748282.1675443699; _gid=GA1.2.167042429.1675443699; _gat=1; logglytrackingsession=49fa63c0-3065-475e-9bf8-eda42cf482c9
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:08 GMT
Content-Type: image/png
Content-Length: 18002
Connection: keep-alive
Last-Modified: Thu, 25 May 2017 05:20:16 GMT
ETag: "4652-55052604dbad2"
Accept-Ranges: bytes
X-Frame-Options: sameorigin
Cache-Control: max-age=300
Expires: Fri, 03 Feb 2023 17:05:34 GMT
X-Content-Type-Options: nosniff
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LJMLTkd0zWNZLrvAmbldUZyCKW0ZytJQSL2%2Bj9AF1gpdZMYRd8YO3t0UGOQ1PTNS8ezBzokT469TgjFS5ddpPnON6FiZ%2F710X4VKUSnRsKJR0Fb1MxypI24YJS7t5zfGyMU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 793cba0de9b80b65-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
ocsp.sectigo.com/
200 OK 471 B IP
Hash b4c7f61557aabbbc5a9905ee5ef984f2
eb474300858289d87afc27ee73e9de6e2f4ec13d
a329312a49a60656374192aafea83e8cf7849883af61e50a2dc3f0fe9718ac34
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:08 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 01 Feb 2023 02:15:48 GMT
Expires: Wed, 08 Feb 2023 02:15:47 GMT
Etag: "eb474300858289d87afc27ee73e9de6e2f4ec13d"
Cache-Control: max-age=378278,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 793cba0eddafb509-OSL
router.infolinks.com/dyn/r1-usync?uid=OPTOUT
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/r1-usync?uid=OPTOUT
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/r1-usync?uid=OPTOUT HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:01:08 GMT
content-type: image/gif
content-length: 35
cache-control: no-store, no-cache, private
set-cookie: R1USERCOOKIE=OPTOUT; Domain=infolinks.com; Expires=Thu, 04-May-2023 17:01:08 GMT; Path=/; SameSite=None; Secure
pragma: no-cache
expires: Thu, 03 Feb 2022 17:01:08 GMT
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 793cba0f590db523-OSL
X-Firefox-Spdy: h2
resources.infolinks.com/js/vidice/2.0/vidice.js
200 OK 88 kB URL HTTP/1.1 resources.infolinks.com/js/vidice/2.0/vidice.js
IP
File type Unicode text, UTF-8 text, with very long lines (46979), with CRLF line terminators
Hash 9ad896d19f9e04f44b116a452bf8b8b7
c72c409421b22a51242f9b95e2c7c9f913c460a0
0c67d4ec0d23ddc306fbfd0482fa6aef9c7d751b45b9d1fb1ac78c77c2bcacc6
GET /js/vidice/2.0/vidice.js HTTP/1.1
Host: resources.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:08 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 25 Jan 2022 09:20:02 GMT
ETag: W/"5344d-5d6649709d511"
Cache-Control: max-age=2592000
Expires: Sun, 05 Mar 2023 13:36:00 GMT
Via: 1.1 google
CF-Cache-Status: HIT
Age: 12308
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 793cba0ffabafabc-OSL
Content-Encoding: gzip
router.infolinks.com/dyn/zmn-usync?uid=
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/zmn-usync?uid=
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/zmn-usync?uid= HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:01:08 GMT
content-type: image/gif
content-length: 35
cache-control: no-store
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 793cba0f892fb523-OSL
X-Firefox-Spdy: h2
p.rfihub.com/cm?pub=43153&in=1
302 Found 0 B URL HTTP/1.1 p.rfihub.com/cm?pub=43153&in=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?pub=43153&in=1 HTTP/1.1
Host: p.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Fri, 03 Feb 2023 17:01:08 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: rud=H4sIAAAAAAAA_-MSNjU0MTCwMLE0MjYzNAFCcyNLIT5D3dxsyyB3z9zgDBcnJwCCBw6mJQAAAA; Path=/; Domain=.rfihub.com; Expires=Wed, 28 Feb 2024 17:01:08 GMT; Secure; SameSite=None
eud=H4sIAAAAAAAA_1slzmtoZm5qYmJsZmZhamgEAFRMBZsQAAAA; Path=/; Domain=.rfihub.com; Expires=Wed, 28 Feb 2024 17:01:08 GMT; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0MTCwMLE0MjYzNAFCcyNLIT5D3dxsyyB3z9zgDBcnJwCCBw6mJQAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
Location: https://router.infolinks.com/dyn/zeta-usync?uid=5140084923614141729
Content-Length: 0
Server: Jetty(9.3.29.v20201019)
ocsp.sectigo.com/
200 OK 471 B IP
Hash 9b065dd10769b4123608f9a5e4605f6a
99ed1febf2e2e6e51fe64dc9ff0e84bb494a2369
78b576dd0b15b786715efdd4a5d204643f51e27e72593679775be417a3ccfa53
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:08 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 02 Feb 2023 19:14:54 GMT
Expires: Thu, 09 Feb 2023 19:14:53 GMT
Etag: "99ed1febf2e2e6e51fe64dc9ff0e84bb494a2369"
Cache-Control: max-age=525824,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 793cba0f4dbafac0-OSL
router.infolinks.com/dyn/sonobi-usync?uid=dbad6c31-523f-4628-8326-2b9dc1173769
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/sonobi-usync?uid=dbad6c31-523f-4628-8326-2b9dc1173769
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/sonobi-usync?uid=dbad6c31-523f-4628-8326-2b9dc1173769 HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:01:08 GMT
content-type: image/gif
content-length: 35
cache-control: no-store, no-cache, private
set-cookie: SONOBIUSERCOOKIE=dbad6c31-523f-4628-8326-2b9dc1173769; Domain=infolinks.com; Expires=Thu, 04-May-2023 17:01:08 GMT; Path=/; SameSite=None; Secure
pragma: no-cache
expires: Thu, 03 Feb 2022 17:01:08 GMT
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 793cba0fe9a2b523-OSL
X-Firefox-Spdy: h2
rt3020.infolinks.com/action/getads.htm?hks=%5B%7B%22lid%22%3A%22d_IL_INSEARCH%22%2C%22bdc%22%3A1%2C%22prod_t%22%3A%22d%22%2C%22garc%22%3A0%2C%22sdata%22%3A%22books%22%2C%22scs%22%3A%22L_Tpg-Pf53%22%7D%5D&rid=2f85c69f-91ba-40db-8bda-04fdc432bbee&jsv=1845.006-3.025&sr=1280X1002&rts=1675443699955&cfv=-1&cb=getAdsResponse&os=Windows&ov=10&br=Firefox&bv=105.0&dv=p&ce=t&purl=http%3A%2F%2Fwww.pdfdrive.com%2Ftomb-of-annihilation-d52202257.html&tzo=-0000&c=c&strg=true&rsd=JcNQDd0JPbipsPsb10EpAX5gi5iYMAMFkFnImo7ibY1bf4JhBN1fvkeQ_bnu0QKYYSVuFQ6S-Um1ceqmn7tNBft6KD9391BGbSI_IL_A_DWuArVQ4de3p6Et8X1CetJ031rjCySdNcSe7b4tXJZq-DHLtsnVCzmj&rsk=34&rcs=oukqb5a9j4j4F2GWvYA2Gw&cuid=607e3daf-6d69-4736-afce-fc2dc5020756&hbnr=false
200 OK 143 B URL HTTP/1.1 rt3020.infolinks.com/action/getads.htm?hks=%5B%7B%22lid%22%3A%22d_IL_INSEARCH%22%2C%22bdc%22%3A1%2C%22prod_t%22%3A%22d%22%2C%22garc%22%3A0%2C%22sdata%22%3A%22books%22%2C%22scs%22%3A%22L_Tpg-Pf53%22%7D%5D&rid=2f85c69f-91ba-40db-8bda-04fdc432bbee&jsv=1845.006-3.025&sr=1280X1002&rts=1675443699955&cfv=-1&cb=getAdsResponse&os=Windows&ov=10&br=Firefox&bv=105.0&dv=p&ce=t&purl=http%3A%2F%2Fwww.pdfdrive.com%2Ftomb-of-annihilation-d52202257.html&tzo=-0000&c=c&strg=true&rsd=JcNQDd0JPbipsPsb10EpAX5gi5iYMAMFkFnImo7ibY1bf4JhBN1fvkeQ_bnu0QKYYSVuFQ6S-Um1ceqmn7tNBft6KD9391BGbSI_IL_A_DWuArVQ4de3p6Et8X1CetJ031rjCySdNcSe7b4tXJZq-DHLtsnVCzmj&rsk=34&rcs=oukqb5a9j4j4F2GWvYA2Gw&cuid=607e3daf-6d69-4736-afce-fc2dc5020756&hbnr=false
IP
Hash a4762e9463093495a96e8551726a8572
e0050b8e3e178795b4bbbf26b1d3a5762d9b63dd
1ec699604ad6a96ac311f5ca9338d6f1951f35d927c1364e0c1b85c59bfd1ae4
GET /action/getads.htm?hks=%5B%7B%22lid%22%3A%22d_IL_INSEARCH%22%2C%22bdc%22%3A1%2C%22prod_t%22%3A%22d%22%2C%22garc%22%3A0%2C%22sdata%22%3A%22books%22%2C%22scs%22%3A%22L_Tpg-Pf53%22%7D%5D&rid=2f85c69f-91ba-40db-8bda-04fdc432bbee&jsv=1845.006-3.025&sr=1280X1002&rts=1675443699955&cfv=-1&cb=getAdsResponse&os=Windows&ov=10&br=Firefox&bv=105.0&dv=p&ce=t&purl=http%3A%2F%2Fwww.pdfdrive.com%2Ftomb-of-annihilation-d52202257.html&tzo=-0000&c=c&strg=true&rsd=JcNQDd0JPbipsPsb10EpAX5gi5iYMAMFkFnImo7ibY1bf4JhBN1fvkeQ_bnu0QKYYSVuFQ6S-Um1ceqmn7tNBft6KD9391BGbSI_IL_A_DWuArVQ4de3p6Et8X1CetJ031rjCySdNcSe7b4tXJZq-DHLtsnVCzmj&rsk=34&rcs=oukqb5a9j4j4F2GWvYA2Gw&cuid=607e3daf-6d69-4736-afce-fc2dc5020756&hbnr=false HTTP/1.1
Host: rt3020.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pdfdrive.com/
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:08 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Application-Context: application:prod
Cache-Control: no-cache,no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="NON DSP NID OUR COR"
Content-Language: en-US
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 793cba0f3a3bb4f7-OSL
Content-Encoding: gzip
s.cpx.to/ca.png?ref=http%3A%2F%2Fwww.pdfdrive.com%2Ftomb-of-annihilation-d52202257.html&pid=12306&adnxs_uid=0
200 OK 95 B URL HTTP/1.1 s.cpx.to/ca.png?ref=http%3A%2F%2Fwww.pdfdrive.com%2Ftomb-of-annihilation-d52202257.html&pid=12306&adnxs_uid=0
IP
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9606fa62df0ffe87253f3baf418f0e42
fe8520ab0bf1622350513d685ece5faf70b4e8c1
bf27786b4381176350787d768bf5f7c5310ba640aa48ee98a3d2c310ddd971ab
GET /ca.png?ref=http%3A%2F%2Fwww.pdfdrive.com%2Ftomb-of-annihilation-d52202257.html&pid=12306&adnxs_uid=0 HTTP/1.1
Host: s.cpx.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:08 GMT
Content-Type: image/png
Content-Length: 95
Connection: keep-alive
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: default-src 'self'
x-permitted-cross-domain-policies: none
cache-control: no-store, must-revalidate, private, max-age=0, no-store, must-revalidate, private, max-age=0
pragma: no-cache, no-cache
set-cookie: cpSess=ba81308d47bb4e5; Expires=Sat, 03 Feb 2024 17:01:08 GMT; Domain=.cpx.to; Path=/; Secure; HttpOnly; SameSite=None
p3p: CP="NOI DEV ADM"
expires: Fri, 03 Feb 2023 17:01:08 UTC
ocsp.sectigo.com/
200 OK 471 B IP
Hash 9a366aadea9a372ea5d1ee2b655aba1f
f8ff89c9dd0beda0df93d7bb0fc248884afe8fe5
846893d916b5dac30fcbfb9c813166823e21b5daf0245612364dfea87d0eb070
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 17:01:08 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 01 Feb 2023 01:57:50 GMT
Expires: Wed, 08 Feb 2023 01:57:49 GMT
Etag: "f8ff89c9dd0beda0df93d7bb0fc248884afe8fe5"
Cache-Control: max-age=377200,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 793cba0fa9a3b4fd-OSL
ssp.disqus.com/redirectuser?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fdisus%3Fuid%3D%24UID&partner=infolinks
302 Found 0 B URL HTTP/2 ssp.disqus.com/redirectuser?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fdisus%3Fuid%3D%24UID&partner=infolinks
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirectuser?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fdisus%3Fuid%3D%24UID&partner=infolinks HTTP/1.1
Host: ssp.disqus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 03 Feb 2023 17:01:08 GMT
content-length: 0
location: https://cs.iqzone.com/a6da5bf591376177b08e1eb90117169d.gif?puid=ua-bd93c5a6-a48a-3062-a9eb-49db1b2d204a&gdpr=&gdpr_consent=&us_privacy=&redir=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D18%26buyeruid%3D%5BUID%5D%26r%3DCid1YS1iZDkzYzVhNi1hNDhhLTMwNjItYTllYi00OWRiMWIyZDIwNGEQ____________ASpSaHR0cHM6Ly9yb3V0ZXIuaW5mb2xpbmtzLmNvbS9keW4vZGlzdXM_dWlkPXVhLWJkOTNjNWE2LWE0OGEtMzA2Mi1hOWViLTQ5ZGIxYjJkMjA0YTICGgY4AQ==
cache-control: no-store
pragma: no-cache
expires: 0
set-cookie: zeta-ssp-user-id=ua-bd93c5a6-a48a-3062-a9eb-49db1b2d204a; Max-Age=31536000; Expires=Sat, 03 Feb 2024 17:01:08 GMT; Path=/; Domain=disqus.com; Secure; SameSite=None
X-Firefox-Spdy: h2
ssc-cms.33across.com/ps/?ri=0010b00002CpYhEAAV&ru=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2F33a-usync%3Fuid%3D33XUSERID33X
204 No Content 0 B URL HTTP/2 ssc-cms.33across.com/ps/?ri=0010b00002CpYhEAAV&ru=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2F33a-usync%3Fuid%3D33XUSERID33X
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ps/?ri=0010b00002CpYhEAAV&ru=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2F33a-usync%3Fuid%3D33XUSERID33X HTTP/1.1
Host: ssc-cms.33across.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
x-33x-status: 2000208
server: 33XP020
date: Fri, 03 Feb 2023 17:01:08 GMT
X-Firefox-Spdy: h2
router.infolinks.com/dyn/zeta-usync?uid=5140084923614141729
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/zeta-usync?uid=5140084923614141729
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/zeta-usync?uid=5140084923614141729 HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:01:08 GMT
content-type: image/gif
content-length: 35
cache-control: no-store, no-cache, private
set-cookie: ZTUSERCOOKIE=5140084923614141729; Domain=infolinks.com; Expires=Thu, 04-May-2023 17:01:08 GMT; Path=/; SameSite=None; Secure
pragma: no-cache
expires: Thu, 03 Feb 2022 17:01:08 GMT
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 793cba107a69b523-OSL
X-Firefox-Spdy: h2
ap.lijit.com/pixel?redir=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fsovrn-usync%3Fuid%3D%24UID
204 No Content 0 B URL HTTP/1.1 ap.lijit.com/pixel?redir=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fsovrn-usync%3Fuid%3D%24UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel?redir=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fsovrn-usync%3Fuid%3D%24UID HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Fri, 03 Feb 2023 17:01:09 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, DELETE, PUT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type
X-Sovrn-Pod: ad_ap7ams1
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash fe01cc1b056d4af5e7adf70d36cab0db
2e9b996f8df56b5a675b275ae138013d6bd61a6e
8790ce38494d8f24b026b34a394f105a45fce3a9fd9075bfda436175dae3235c
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 03 Feb 2023 17:01:09 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 02 Feb 2023 21:40:42 GMT
Expires: Fri, 03 Feb 2023 21:40:42 GMT
ETag: "2e9b996f8df56b5a675b275ae138013d6bd61a6e"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
sync.1rx.io/usersync2/infolinks
302 Found 0 B URL HTTP/2 sync.1rx.io/usersync2/infolinks
IP
GET /usersync2/infolinks HTTP/1.1
Host: sync.1rx.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 03 Feb 2023 17:01:08 GMT
content-type: text/html
cache-control: no-store, no-cache, must-revalidate
expires: 0
pragma: no-cache
set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-2d1df19c-4de9-413f-880c-e61f539f49f0-003%22%2C%22zdxidn%22%3A%222109%22%7D; path=/; expires=Sat, 03 Feb 2024 17:01:08 GMT; domain=.1rx.io; samesite=none; secure; httponly
p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why"
location: https://sync.1rx.io/usersync2/infolinks?zcc=1&cb=1675443668300
etag: RX2d1df19c4de9413f880ce61f539f49f0003
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
200 OK 0 B URL HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
IP
GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.pdfdrive.com
Connection: keep-alive
Referer: http://www.pdfdrive.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:01:05 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 01/30/2022 11:18:43
cdn-edgestorageid: 756
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-proxyver: 1.02
cdn-requestid: a133e4ef2cffecfc80ed65d424c47483
cdn-cache: HIT
cf-cache-status: HIT
age: 20892167
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 793cb9fe7df1b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
resources.infolinks.com/js/1845.006-3.025/in_search.js
200 OK 0 B URL HTTP/2 resources.infolinks.com/js/1845.006-3.025/in_search.js
IP
GET /js/1845.006-3.025/in_search.js HTTP/1.1
Host: resources.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.pdfdrive.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:01:08 GMT
content-type: application/javascript
last-modified: Wed, 25 Jan 2023 14:23:04 GMT
etag: W/"37760-5f3175edcf88e"
cache-control: max-age=2592000
expires: Sun, 05 Mar 2023 15:18:32 GMT
via: 1.1 google
cf-cache-status: HIT
age: 6156
vary: Accept-Encoding
server: cloudflare
cf-ray: 793cba0e4fa6b523-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
200 OK 0 B URL HTTP/2 gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
IP
GET /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.pdfdrive.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:01:07 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
server-processing-duration-in-ticks: 819318
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
static.bmcdn3.com/css/img.css?v=v1.25.15
200 OK 0 B URL HTTP/2 static.bmcdn3.com/css/img.css?v=v1.25.15
IP
GET /css/img.css?v=v1.25.15 HTTP/1.1
Host: static.bmcdn3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.bmcdn3.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:01:07 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=27236
etag: W/"6399ae7d-6a64"
last-modified: Wed, 14 Dec 2022 11:07:41 GMT
cache-control: max-age=16070400
cf-cache-status: HIT
age: 6435
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zNmFtsP64iNdUZU0v0Lf11%2BmexzfAKxls63yVbOiHAr86uZ2iFsYOrTK7sO%2FInUmOFq3XzZk8GmBbfU49M7HCEfqVB7Tc4G6ODC3JO%2FUejyqW6Vn16P6H3EGzwixrzawZ25k"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 793cba090907b50f-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.bmcdn3.com/trl/62a84efecc5fbd1c36e2fd65/?sourceRef=http%3A%2F%2Fwww.pdfdrive.com%2Ftomb-of-annihilation-d52202257.html&displayHost=http%3A%2F%2Fcdn.bmcdn3.com%2F&loadTime=2000&badCode=Jm5ic3A7&badType=replaced&version=1675443698071
200 OK 0 B URL HTTP/2 cdn.bmcdn3.com/trl/62a84efecc5fbd1c36e2fd65/?sourceRef=http%3A%2F%2Fwww.pdfdrive.com%2Ftomb-of-annihilation-d52202257.html&displayHost=http%3A%2F%2Fcdn.bmcdn3.com%2F&loadTime=2000&badCode=Jm5ic3A7&badType=replaced&version=1675443698071
IP
GET /trl/62a84efecc5fbd1c36e2fd65/?sourceRef=http%3A%2F%2Fwww.pdfdrive.com%2Ftomb-of-annihilation-d52202257.html&displayHost=http%3A%2F%2Fcdn.bmcdn3.com%2F&loadTime=2000&badCode=Jm5ic3A7&badType=replaced&version=1675443698071 HTTP/1.1
Host: cdn.bmcdn3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.pdfdrive.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:01:06 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1ll1QrRSPqigVJ7bK6gBG8LhpXq97oXuf5KcTc%2B8THEJNgvTcfX8nfun8RP0JTebmWPzn9EA3EK%2B2Z9J5TLXfdAnGqNC6jOJHAKN5uwI%2FGAO4Y2Mypo5BND%2FOT6R89H8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 793cba02f822b50f-OSL
X-Firefox-Spdy: h2
ssum-sec.casalemedia.com/usermatch?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D&s=191306&C=1
200 OK 0 B URL HTTP/2 ssum-sec.casalemedia.com/usermatch?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D&s=191306&C=1
IP
GET /usermatch?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D&s=191306&C=1 HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 17:01:08 GMT
content-type: text/html
cf-ray: 793cba0d8cf0b521-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DOXbSON4QTiKMN9CIczWQ4NyJl0WKZtMx4UDPD9%2BXFSWpbZ0LS%2F8uKvgZyqR1jc2mLxiGts5LQg5ED0F0o4b1i0BxChHG3nmA7abrfFLChcrXGQDszEVuwa1KE81SjkPWBPSCQmn3S45yQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
sync.1rx.io/usersync2/infolinks?zcc=1&cb=1675443668300
302 Found 0 B URL HTTP/2 sync.1rx.io/usersync2/infolinks?zcc=1&cb=1675443668300
IP
GET /usersync2/infolinks?zcc=1&cb=1675443668300 HTTP/1.1
Host: sync.1rx.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Fri, 03 Feb 2023 17:01:08 GMT
content-type: text/html
cache-control: no-store, no-cache, must-revalidate
expires: 0
pragma: no-cache
location: https://router.infolinks.com/dyn/r1-usync?uid=OPTOUT
etag: OPTOUT
X-Firefox-Spdy: h2
104.26.6.150
95.217.115.48
178.250.0.157
104.17.25.14
141.226.228.48
91.228.74.206
23.38.200.22
3.126.56.137
52.212.11.14
188.114.98.234