Overview

URLamzn.to/40v7RIn
IP 67.199.248.12 (United States)
ASN#396982 GOOGLE-CLOUD-PLATFORM
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access public lock_open
Report completed2023-03-23 11:45:58 UTC
StatusLoading report..
IDS alerts2
Blocklist alert0
urlquery alerts No alerts detected
Tags None

Domain Summary (65)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03T13:26:46Z 2023-03-29T05:09:31Z 413 5882 34.160.144.191
s.amazon-adsystem.com (25) 283 2012-05-21T10:26:27Z 2023-03-29T14:50:17Z 13074 21633 52.46.128.147
uipglob.semasio.net (2) 1236 2017-01-30T06:02:25Z 2023-03-29T06:15:43Z 889 888 77.243.60.138
image2.pubmatic.com (1) 873 2012-05-21T15:21:02Z 2023-03-29T06:15:43Z 542 648 185.64.190.80
www.amazon.com (5) 514 2012-05-21T08:35:38Z 2023-03-29T06:15:39Z 3907 9007 13.32.12.128
unagi.amazon.com (4) 1350 2020-03-21T22:26:34Z 2023-03-29T06:15:41Z 2409 2360 52.46.137.137
ups.analytics.yahoo.com (4) 287 2019-05-09T17:57:40Z 2023-03-29T05:57:15Z 1652 2059 3.75.62.37
ocsp.globalsign.com (1) 2075 2012-07-20T19:46:16Z 2023-03-29T05:11:35Z 361 1888 104.18.21.226
ssum-sec.casalemedia.com (2) 509 2014-06-23T15:16:59Z 2023-03-29T06:15:43Z 890 1049 185.80.36.245
loadus.exelator.com (1) 1255 2012-05-21T13:26:52Z 2023-03-29T06:15:43Z 363 385 54.78.254.47
dsum-sec.casalemedia.com (2) 549 2014-06-26T23:28:31Z 2023-03-29T05:57:10Z 980 1100 185.80.36.245
m.media-amazon.com (21) 580 2018-06-22T13:41:03Z 2023-03-29T14:22:08Z 10739 660373 54.230.82.142
zerossl.ocsp.sectigo.com (1) 4049 2020-05-09T21:05:29Z 2023-03-29T05:34:13Z 348 1220 172.64.155.188
usersync.samplicio.us (1) 3225 2017-08-16T00:00:04Z 2023-03-29T09:05:53Z 408 303 3.217.39.149
dr3fr5q4g2ul9.cloudfront.net (1) 0 2021-06-03T06:17:20Z 2023-03-29T10:47:14Z 399 464 54.230.245.159
cm.g.doubleclick.net (4) 202 2012-05-22T11:58:28Z 2023-03-29T14:09:49Z 1620 3672 216.58.211.2
r3.o.lencr.org (6) 344 2020-12-02T09:52:13Z 2023-03-29T05:09:11Z 2028 5317 23.36.76.226
push.services.mozilla.com (1) 2140 2014-10-24T10:27:06Z 2023-03-29T05:09:32Z 606 127 52.35.90.146
completion.amazon.com (1) 2084 2012-07-01T11:43:45Z 2023-03-29T13:35:21Z 507 348 52.46.154.73
ads.samba.tv (1) 6008 2014-05-28T08:35:06Z 2023-03-29T10:30:23Z 412 1033 3.218.121.128
pixel.rubiconproject.com (1) 314 2012-10-09T05:17:38Z 2023-03-29T05:57:15Z 419 319 213.19.162.90
c1.adform.net (2) 588 2014-01-22T22:28:00Z 2023-03-29T06:15:43Z 941 1573 37.157.5.142
sync.search.spotxchange.com (2) 523 2012-05-22T10:29:33Z 2023-03-29T05:57:10Z 1006 1309 185.94.180.125
bs.serving-sys.com (1) 1258 2012-11-25T12:31:23Z 2023-03-29T05:26:27Z 443 1162 3.123.193.201
ocsp.godaddy.com (4) 698 2012-05-20T21:28:57Z 2023-03-29T05:12:39Z 1360 9143 192.124.249.41
eb2.3lift.com (1) 402 2014-09-24T17:03:42Z 2023-03-29T13:40:31Z 485 206 13.248.245.213
ocsp.digicert.com (14) 86 2012-05-21T09:02:23Z 2023-03-29T11:45:01Z 4774 11102 192.229.221.95
assoc-na.associates-amazon.com (1) 3027 2019-08-26T15:10:16Z 2023-03-29T14:02:20Z 431 414 52.94.243.89
x.bidswitch.net (2) 286 2012-10-04T01:30:53Z 2023-03-29T05:57:10Z 878 966 3.122.65.10
amzn.to (1) 267407 2017-01-30T06:39:32Z 2023-03-29T08:36:41Z 346 616 67.199.248.12
contile.services.mozilla.com (1) 1114 2021-05-27T20:32:35Z 2023-03-29T05:09:31Z 333 391 34.117.237.239
www.facebook.com (1) 99 2012-05-21T02:23:41Z 2021-02-04T00:31:35Z 540 2141 157.240.200.35
ocsp.r2m02.amazontrust.com (3) 0 2022-10-12T16:01:39Z 2023-03-29T09:11:13Z 1050 2958 54.230.80.227
dpm.demdex.net (2) 204 2012-05-22T07:45:05Z 2023-03-29T05:12:02Z 964 1430 54.228.21.106
usermatch.krxd.net (1) 1169 2017-01-30T05:56:38Z 2023-03-29T06:15:43Z 358 251 52.0.168.16
d2ef20sk9hi1u3.cloudfront.net (1) 0 2021-06-02T16:26:25Z 2023-03-29T15:33:56Z 400 464 18.66.17.153
match.360yield.com (4) 4313 2019-08-23T08:22:16Z 2023-03-29T06:15:43Z 2066 1887 52.28.192.20
beacon.krxd.net (1) 408 2012-05-22T06:25:40Z 2023-03-29T05:16:39Z 471 450 54.73.101.116
rtb-csync.smartadserver.com (1) 583 2012-12-17T17:38:47Z 2023-03-29T14:27:11Z 522 579 185.86.138.153
lciapi.ninthdecimal.com (1) 4279 2017-01-29T13:28:47Z 2023-03-29T14:41:49Z 471 884 45.79.172.232
lm.serving-sys.com (1) 2222 2018-12-18T15:45:57Z 2023-03-29T06:15:44Z 513 157 3.74.18.35
fls-na.amazon.com (17) 1217 2012-05-25T20:14:56Z 2023-03-29T12:59:02Z 13444 3758 34.195.218.50
pi.ispot.tv (1) 2721 2018-12-31T14:08:50Z 2023-03-29T13:10:04Z 432 576 151.101.66.132
ocsp.sectigo.com (1) 487 2019-11-29T12:50:24Z 2023-03-29T08:59:28Z 340 963 172.64.155.188
us-u.openx.net (2) 357 2013-08-30T21:43:55Z 2023-03-29T05:57:10Z 971 692 34.98.64.218
sync.taboola.com (1) 818 2020-03-24T14:47:58Z 2023-03-29T06:15:43Z 364 271 141.226.228.48
ocsp.r2m01.amazontrust.com (6) 0 2022-10-12T22:43:53Z 2023-03-29T09:11:41Z 2100 5974 54.230.80.227
ads.stickyadstv.com (2) 701 2013-02-11T14:53:55Z 2023-03-29T06:15:43Z 812 1420 95.101.10.8
ib.adnxs.com (4) 241 2012-05-20T21:01:49Z 2023-03-29T05:36:29Z 1880 4131 185.89.210.20
sb.scorecardresearch.com (2) 134 2021-05-06T00:31:54Z 2023-03-29T15:49:03Z 915 998 54.230.111.7
ocsp.pki.goog (2) 175 2018-07-01T08:43:07Z 2023-03-29T05:09:04Z 686 1400 142.250.74.163
firefox.settings.services.mozilla.com (2) 867 2020-06-04T22:08:41Z 2023-03-29T05:09:03Z 782 2374 35.241.9.150
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-22T01:36:00Z 2023-03-29T05:09:12Z 3246 42394 34.120.237.76
www.imdb.com (1) 2692 2012-05-21T07:55:14Z 2023-03-29T08:38:28Z 370 1214 54.230.219.13
odr.mookie1.com (1) 870 2016-02-05T19:38:17Z 2023-03-29T06:15:43Z 448 337 34.160.236.64
image6.pubmatic.com (2) 637 2015-10-14T12:06:42Z 2023-03-29T06:15:43Z 948 739 185.64.190.78
images-na.ssl-images-amazon.com (5) 842 2012-10-30T03:08:43Z 2023-03-29T06:15:39Z 2749 108298 54.230.82.142
token.rubiconproject.com (1) 671 2017-01-30T06:00:50Z 2023-03-29T06:15:43Z 365 351 213.19.162.90
sync-amazon.ads.yieldmo.com (1) 0 2023-03-21T21:19:03Z 2023-03-29T10:47:13Z 499 91 54.194.111.36
tags.bluekai.com (1) 443 2012-05-22T06:25:36Z 2023-03-29T06:15:43Z 435 655 184.24.45.23
status.geotrust.com (3) 3662 2017-12-01T09:55:31Z 2023-03-29T05:13:49Z 1029 2335 192.229.221.95
amazon.partners.tremorhub.com (1) 6002 2020-02-20T18:59:40Z 2023-03-29T10:47:13Z 452 573 54.85.161.91
public-prod-dspcookiematching.dmxleo.com (1) 1939 2017-12-15T19:19:04Z 2023-03-29T17:20:43Z 504 207 188.65.124.66
t.myvisualiq.net (2) 1332 2014-02-22T03:04:29Z 2023-03-29T06:15:43Z 896 956 3.123.112.172
cms.analytics.yahoo.com (1) 985 2014-03-17T21:01:38Z 2023-03-29T06:15:43Z 376 1436 212.82.100.182

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2023-03-23 11:45:54 UTC medium Client IP Internal IP ET DNS Query for .to TLD 
2023-03-23 11:45:54 UTC medium Client IP Internal IP ET DNS Query for .to TLD 

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 67.199.248.12
Date UQ / IDS / BL URL IP
2023-05-29 07:28:50 UTC 0 - 3 - 0 amzn.to/3EBuNMI 67.199.248.12
2023-05-29 01:05:16 UTC 0 - 3 - 0 mykargo.cc/ 67.199.248.12
2023-05-28 17:49:01 UTC 0 - 3 - 0 amzn.to/3J52zfN 67.199.248.12
2023-05-28 12:40:04 UTC 0 - 3 - 0 conta.cc/3WAv4bz 67.199.248.12
2023-05-27 20:39:07 UTC 0 - 3 - 0 amzn.to/41Yl0KC 67.199.248.12


Last 5 reports on ASN: GOOGLE-CLOUD-PLATFORM
Date UQ / IDS / BL URL IP
2023-05-29 15:57:39 UTC 0 - 0 - 3 mobileblog342.netlify.app/ 34.141.11.154
2023-05-29 15:14:41 UTC 0 - 0 - 3 sharfiles.com/getoxy/Downloader__2000001.exe/ 146.148.34.125
2023-05-29 15:12:41 UTC 0 - 0 - 3 sharfiles.com/getoxy/Downloader__2000001.exe 146.148.34.125
2023-05-29 13:08:02 UTC 0 - 6 - 0 r.mass-events.fr/mk/cl/f/TXTegEBlr5xOMDHs-Raf (...) 1.179.112.195
2023-05-29 12:58:33 UTC 0 - 0 - 3 sharfiles.com/api/firstscreenshown/d6c8fc5000 (...) 146.148.34.125


Last 5 reports on domain: amzn.to
Date UQ / IDS / BL URL IP
2023-05-29 07:28:50 UTC 0 - 3 - 0 amzn.to/3EBuNMI 67.199.248.12
2023-05-28 23:59:52 UTC 0 - 3 - 0 amzn.to/3AH7fVj 67.199.248.13
2023-05-28 17:49:01 UTC 0 - 3 - 0 amzn.to/3J52zfN 67.199.248.12
2023-05-28 14:51:22 UTC 0 - 4 - 0 amzn.to/3oybJLG 67.199.248.13
2023-05-27 20:39:07 UTC 0 - 3 - 0 amzn.to/41Yl0KC 67.199.248.12


No other reports with similar screenshot

JavaScript

Executed Scripts (62)

Executed Evals (0)

Executed Writes (1)
#1 JavaScript::Write (size: 69) - SHA256: 587cdc48d51a7732ad2019d0d9099c3d1c50ecbc25083cb607db301422373df1
< !DOCTYPE html > < html > < head > < title > < /title></head > < body > < /body></html >


HTTP Transactions (197)


Request Response
                                        
                                            GET /40v7RIn HTTP/1.1 
Host: amzn.to
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             67.199.248.12
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=utf-8
                                            
Server: nginx
Date: Thu, 23 Mar 2023 11:45:46 GMT
Content-Length: 137
Cache-Control: private, max-age=90
Content-Security-Policy: referrer always;
Location: https://www.amazon.com/vine/about?linkId=206610786
Referrer-Policy: unsafe-url
Set-Cookie: _bit=n2nbJK-e65d10540e0d256a81-00R; Domain=amzn.to; Expires=Tue, 19 Sep 2023 11:45:46 GMT
Strict-Transport-Security: max-age=1209600
Via: 1.1 google


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   137
Md5:    baa1ed721580f8a2e8c804ce8e9be624
Sha1:   e921e81c32d503714ce5d5ba89ed4a2b4286c6f8
Sha256: cfeba1737b8a4447943e8ba79b3371d67d9d78e262ba28cc1622d10742a875d0
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "469B97BF9F57401B3C9571039483589F2815F4794212B75C7C85CFEFE0AE71E9"
Last-Modified: Wed, 22 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6818
Expires: Thu, 23 Mar 2023 13:39:24 GMT
Date: Thu, 23 Mar 2023 11:45:46 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "59553A312D3FB34F1F0AEA469F7E7CC810FF9993481DDBD73EA5D461CF97ED51"
Last-Modified: Wed, 22 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7547
Expires: Thu, 23 Mar 2023 13:51:33 GMT
Date: Thu, 23 Mar 2023 11:45:46 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "8794223D5E8D4D276C35E2FDCC24BF99694240634DD749CD9B5BF874DEC055CF"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18749
Expires: Thu, 23 Mar 2023 16:58:15 GMT
Date: Thu, 23 Mar 2023 11:45:46 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Backoff, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 23 Mar 2023 11:27:32 GMT
age: 1094
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    bc86ef2a0cee04915bc360f5821adc8f
Sha1:   3658f9028cce204d38f7f48fcfaa2a8e4f54383a
Sha256: aeecd718d03811322457de4f20828bdba86b277e7e0e328cae9c0a8075638454
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: zKXPJl60t2Qkgft5P+24AplJh6HSufJFJkvpPp2sGq1ntf76wNsFnWymPcSHuY6mH+wMJUuRIwM=
x-amz-request-id: 6GQAFJR9Q1MXK6RA
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 23 Mar 2023 10:54:01 GMT
age: 3105
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    e7bace7c1e04d44012e37ddffe36e5d5
Sha1:   3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
Sha256: 6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Thu, 23 Mar 2023 11:45:46 GMT
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /images/G/01/gno/sprites/nav-sprite-global-1x-hm-dsk-reorg._CB405937547_.png HTTP/1.1 
Host: m.media-amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.amazon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.82.142
HTTP/2 200 OK
content-type: image/png
                                            
content-length: 10630
server: Server
date: Sun, 13 Nov 2022 06:55:48 GMT
x-amz-ir-id: da31d84f-2115-4985-a077-90e9f79ef178
expires: Sat, 08 Nov 2042 06:55:48 GMT
cache-control: max-age=630720000,public
surrogate-key: x-cache-734 /images/G/01/gno/sprites/nav-sprite-global-1x-hm-dsk-reorg
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-734,/images/G/01/gno/sprites/nav-sprite-global-1x-hm-dsk-reorg
access-control-allow-origin: *
last-modified: Thu, 13 Aug 2020 18:47:14 GMT
x-nginx-cache-status: MISS
accept-ranges: bytes
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
age: 11249399
server-timing: provider;desc="cf"
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PHupGS-fFDnr5I-Wud-SBdep7hKCNEppMPLXULO-Wnt8z-zVBmMT1Q==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 350 x 450, 8-bit colormap, non-interlaced\012- data
Size:   10630
Md5:    63349a7c82c19b297d13b635947e36d2
Sha1:   a627e636e05fff23b423db10f52813f8257dd61c
Sha256: d290bad14b077af43c094f8f42a92186f8bb08fad041fae1c550ff5bb72cd12b
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: ETag, Last-Modified, Retry-After, Content-Length, Alert, Cache-Control, Expires, Content-Type, Backoff, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 23 Mar 2023 11:14:33 GMT
age: 1874
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /images/G/01/personalization/ybh/loading-4x-gray._CB485916920_.gif HTTP/1.1 
Host: m.media-amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.amazon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.82.142
HTTP/2 200 OK
content-type: image/gif
                                            
content-length: 8865
server: Server
date: Thu, 12 May 2022 17:45:54 GMT
x-amz-ir-id: e748a237-80e0-4da2-ba66-b3473bcbcc91
expires: Tue, 06 May 2042 03:06:03 GMT
cache-control: max-age=630720000,public
surrogate-key: x-cache-872 /images/G/01/personalization/ybh/loading-4x-gray
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-872,/images/G/01/personalization/ybh/loading-4x-gray
access-control-allow-origin: *
last-modified: Fri, 17 Apr 2015 16:49:32 GMT
x-nginx-cache-status: HIT
accept-ranges: bytes
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
age: 27194393
server-timing: provider;desc="cf"
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7-eALvhoXHjlvb03m8-71N3Cmys840nOV_IYXap-xB1bcmgNvLD_5Q==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 64 x 64\012- data
Size:   8865
Md5:    b05b81750794ca693e9589c0a171634f
Sha1:   fa91375275e3e1c8fcd8f79bcae5d85593a33c67
Sha256: ff24d4b094ab1896672f4c8d387150c74bbb2493f7d01bea7c87247aa0ab3bb5
                                        
                                            GET /images/G/01/vine/website/vine_logo_title.png HTTP/1.1 
Host: m.media-amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.amazon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.82.142
HTTP/2 200 OK
content-type: image/png
                                            
content-length: 287050
server: Server
x-amz-ir-id: 169ba2e0-6882-43f5-861a-36adff2aa98d
surrogate-key: x-cache-182 /images/G/01/vine/website/vine_logo_title
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-182,/images/G/01/vine/website/vine_logo_title
access-control-allow-origin: *
last-modified: Mon, 29 Apr 2019 22:52:09 GMT
x-nginx-cache-status: HIT
accept-ranges: bytes
date: Thu, 23 Mar 2023 11:45:47 GMT
expires: Thu, 23 Mar 2023 15:17:26 GMT
cache-control: max-age=86400,public
vary: Accept-Encoding
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
age: 4892
server-timing: provider;desc="cf"
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1w2dlr8RQHAJALUa0w_V_Lu4uBSlgPpiH09wVe_A7JjznfxgvgQcPw==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 2979 x 945, 8-bit/color RGB, non-interlaced\012- data
Size:   287050
Md5:    157b4dfea01007e204eebf223ffb6567
Sha1:   1c71eec944734a8c50fef4d4f0685c32bc37f3d7
Sha256: 6dfe478240ce23632178f0e2abab8b09c7c3ab6629286d2f15ca514739996012
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "B6129B9D1848F75265DCA4446C5399927BDAF15C7B49C083765847B0FE276EAF"
Last-Modified: Wed, 22 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6792
Expires: Thu, 23 Mar 2023 13:38:59 GMT
Date: Thu, 23 Mar 2023 11:45:47 GMT
Connection: keep-alive

                                        
                                            GET /images/S/sash/fe2UeLQmJ11kKHN.png HTTP/1.1 
Host: m.media-amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://images-na.ssl-images-amazon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.82.142
HTTP/2 200 OK
content-type: image/png
                                            
content-length: 59234
server: Server
date: Mon, 16 May 2022 13:56:05 GMT
x-amz-ir-id: 5168bfd1-2730-4b85-9a1f-e098d2b50399
expires: Sun, 11 May 2042 13:56:05 GMT
cache-control: max-age=630720000,public
surrogate-key: x-cache-111 /images/S/sash/fe2UeLQmJ11kKHN
timing-allow-origin: https://www.amazon.in, https://www.amazon.com
edge-cache-tag: x-cache-111,/images/S/sash/fe2UeLQmJ11kKHN
access-control-allow-origin: *
last-modified: Fri, 06 May 2022 16:03:28 GMT
x-nginx-cache-status: MISS
accept-ranges: bytes
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
age: 26862582
server-timing: provider;desc="cf"
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ztAuOZ-aP_gTMSBtSRs1-lK8mGTNv9k6knbxoD3sETExwtPpJYG9oA==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 194 x 295, 8-bit/color RGBA, non-interlaced\012- data
Size:   59234
Md5:    836f0a84d012d58e055f060bbe60f2b5
Sha1:   3ded10bebc62e1cd724574ad8d7c7fcfd13c77e5
Sha256: 2ce18237ee8094ab137b910ce33aa1cdd7904c1dad5f238734ad5e307c5be08b
                                        
                                            POST / HTTP/1.1 
Host: ocsp.r2m02.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.80.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=153987
Date: Thu, 23 Mar 2023 11:45:47 GMT
Etag: "641bec6b-1d7"
Expires: Sat, 25 Mar 2023 06:32:14 GMT
Last-Modified: Thu, 23 Mar 2023 06:06:35 GMT
Server: ECAcc (nya/7968)
X-Cache: Miss from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Aw5qpuXiYi0DefeEjGlTMsPIyi-UQkBGloxFLAyhx3pkcARxKS1O_g==
Age: 1539

                                        
                                            GET /1/batch/1/OP/ATVPDKIKX0DER:146-8523946-5252900:0YXYKSS90BAP1G6PM4F1$uedata=s:%2Frd%2Fuedata%3Fstaticb%26id%3D0YXYKSS90BAP1G6PM4F1:0 HTTP/1.1 
Host: fls-na.amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.amazon.com/
Cookie: session-id=146-8523946-5252900; session-id-time=2082787201l; i18n-prefs=USD; sp-cdn="L5Z9:NO"
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                        
                                             34.195.218.50
HTTP/2 200 OK
content-type: image/gif
                                            
date: Thu, 23 Mar 2023 11:45:47 GMT
content-length: 43
x-amzn-requestid: 1568b38d-e0a3-4d27-8f7a-497659e503ce
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    e68cc604cab69bf03b8cd228d940f5ef
Sha1:   15c0c62c4c7c917b5dd82a8e1e439211a44b9e98
Sha256: a3a64aea2e96ec58a163ddb8d4cf86cf236178ed2d225b8f44154bc1b010ddce
                                        
                                            GET /1/batch/1/OP/ATVPDKIKX0DER:146-8523946-5252900:0YXYKSS90BAP1G6PM4F1$uedata=s:%2Fuedata%2Fuedata%3Fstaticb%26id%3D0YXYKSS90BAP1G6PM4F1:0 HTTP/1.1 
Host: fls-na.amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.amazon.com/
Cookie: session-id=146-8523946-5252900; session-id-time=2082787201l; i18n-prefs=USD; sp-cdn="L5Z9:NO"
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                        
                                             34.195.218.50
HTTP/2 200 OK
content-type: image/gif
                                            
date: Thu, 23 Mar 2023 11:45:47 GMT
content-length: 43
x-amzn-requestid: 49b7b375-2ab3-48b0-9775-905fc3ed74e9
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    e68cc604cab69bf03b8cd228d940f5ef
Sha1:   15c0c62c4c7c917b5dd82a8e1e439211a44b9e98
Sha256: a3a64aea2e96ec58a163ddb8d4cf86cf236178ed2d225b8f44154bc1b010ddce
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: q+P3dol5/gNJDsyxMFzrWA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             52.35.90.146
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: qD13r/DzcmvTE8utz/KdWDI/Ges=

                                        
                                            GET /abid/um?s=146-8523946-5252900&m=ATVPDKIKX0DER HTTP/1.1 
Host: assoc-na.associates-amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.amazon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             52.94.243.89
HTTP/1.1 200 OK
                                            
Server: Server
Date: Thu, 23 Mar 2023 11:45:48 GMT
Content-Length: 0
Connection: keep-alive
x-amz-rid: 9P96CPE3QRNPB5H4S0Q8
Set-Cookie: abid=46c38725-08f6-5409-f6d0-c4d8a16ddcd1;Version=1;Domain=.associates-amazon.com;Path=/;Max-Age=2419200;HttpOnly;Secure;SameSite=None
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.amazon.com/vine/about?linkId=206610786
Cookie: session-id=146-8523946-5252900; session-id-time=2082787201l; i18n-prefs=USD; sp-cdn="L5Z9:NO"; csm-hit=tb:s-0YXYKSS90BAP1G6PM4F1|1679571955484&t:1679571955485
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             13.32.12.128
HTTP/2 200 OK
content-type: image/x-icon
                                            
content-length: 2488
server: Server
x-amz-rid: G71EXH8TAEBYHY4TY4TW
accept-ranges: bytes
content-encoding: gzip
last-modified: Tue, 21 Sep 2010 17:37:41 GMT
strict-transport-security: max-age=47474747; includeSubDomains; preload
x-frame-options: SAMEORIGIN
date: Thu, 23 Mar 2023 11:44:44 GMT
etag: "4486-490c87c5a6340-gzip"
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f9fdc7f95aba4b520d73ade0f850d634.cloudfront.net (CloudFront)
x-amz-cf-pop: VIE50-C2
x-amz-cf-id: bxL68jK32vLd5dkPjpgPcVyV_w4T7ukf6gA6Ao97C0_y0eiASa_uHA==
age: 65
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  MS Windows icon resource - 4 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Size:   2488
Md5:    dd0f22c6687a4565d8fde536579b3de2
Sha1:   7883b263e10adc8ad5d6a8ebd4f1a85192260726
Sha256: 83e8be472d761136375ca866e882b34355e67d6f0236cb4a31897c745ad019fd
                                        
                                            GET /images/S/sash/pDxWAF1pBB0dzGB.woff2 HTTP/1.1 
Host: m.media-amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.amazon.com
Connection: keep-alive
Referer: https://m.media-amazon.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.82.142
HTTP/2 200 OK
content-type: application/font-woff2; charset=utf-8
                                            
content-length: 16616
server: Server
date: Thu, 08 Dec 2022 06:49:18 GMT
x-amz-ir-id: 7e78e8e2-12c0-4cac-b6ee-e26c0e628bd3
expires: Sat, 29 Nov 2042 16:36:42 GMT
cache-control: max-age=630720000,public
surrogate-key: x-cache-102 /images/S/sash/pDxWAF1pBB0dzGB
timing-allow-origin: https://www.amazon.in, https://www.amazon.com
edge-cache-tag: x-cache-102,/images/S/sash/pDxWAF1pBB0dzGB
access-control-allow-origin: *
last-modified: Fri, 30 Oct 2020 21:19:16 GMT
x-nginx-cache-status: HIT
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
age: 9089790
server-timing: provider;desc="cf"
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TR2yo8FdYOSCGlOxxf6k2i1o9WrCt3eXykPPD6A1NMlrmxSd8hm4WA==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 16616, version 1.655\012- data
Size:   16616
Md5:    4afcd3b79b78d33386f497877a29c518
Sha1:   cc7ebaa05a2cd3b02c0929ac0475a44ab30b7efa
Sha256: cded49f94fc16dc0a14923975e159fbf4b14844593e612c1342c9e34e2f96821
                                        
                                            GET /images/S/sash/KFPk-9IF4FqAqY-.woff2 HTTP/1.1 
Host: m.media-amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.amazon.com
Connection: keep-alive
Referer: https://m.media-amazon.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.82.142
HTTP/2 200 OK
content-type: application/font-woff2; charset=utf-8
                                            
content-length: 16460
server: Server
date: Mon, 14 Nov 2022 09:28:28 GMT
x-amz-ir-id: ba242a97-1687-4d1f-9976-1d5847b826d1
expires: Fri, 07 Nov 2042 01:33:25 GMT
cache-control: max-age=630720000,public
surrogate-key: x-cache-834 /images/S/sash/KFPk-9IF4FqAqY-
timing-allow-origin: https://www.amazon.in, https://www.amazon.com
edge-cache-tag: x-cache-834,/images/S/sash/KFPk-9IF4FqAqY-
access-control-allow-origin: *
last-modified: Fri, 30 Oct 2020 21:19:26 GMT
x-nginx-cache-status: HIT
accept-ranges: bytes
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
age: 11153840
server-timing: provider;desc="cf"
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZwaRFv7J53otygqAO0tlAnr-T_3ENNGrpRD77ypRSTey1fzuKVF-rw==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 16460, version 1.655\012- data
Size:   16460
Md5:    15e17f26c664ee0518f82972282e6ff3
Sha1:   46b91bda68161c14e554a779643ef4957431987b
Sha256: 4065b43ba3db8da5390ba0708555889f78e86483fe0226ef79ea22d07c306b89
                                        
                                            GET /images/S/sash/Dv1WQ5DdeMS5qP7.woff2 HTTP/1.1 
Host: m.media-amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.amazon.com
Connection: keep-alive
Referer: https://m.media-amazon.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.82.142
HTTP/2 200 OK
content-type: application/font-woff2
                                            
content-length: 27920
server: Server
date: Wed, 11 Jan 2023 07:09:56 GMT
x-amz-ir-id: 59d5777e-d118-44a6-9e66-b85766e16c3e
expires: Sat, 06 Dec 2042 07:04:35 GMT
cache-control: max-age=630720000,public
surrogate-key: x-cache-477 /images/S/sash/Dv1WQ5DdeMS5qP7
timing-allow-origin: https://www.amazon.in, https://www.amazon.com
edge-cache-tag: x-cache-477,/images/S/sash/Dv1WQ5DdeMS5qP7
access-control-allow-origin: *
last-modified: Fri, 30 Oct 2020 14:51:27 GMT
x-nginx-cache-status: HIT
accept-ranges: bytes
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
age: 6150952
server-timing: provider;desc="cf"
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: eoYgnSGKgTRUJ4v8IVY5v8Mvf5VPItuNRq2embxzxY3SNTVx35D3vw==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 27920, version 1.19661\012- data
Size:   27920
Md5:    0f85a003b4d8afbfedd8118278061c34
Sha1:   245045fa7de5df027437f47209a5add3b48108a1
Sha256: aff8dae3b2dd2a0fd5c5ce60670cbbca15a1f5bfafcd70d13ad002ef920920f3
                                        
                                            GET /images/S/sash/VjTR4RqBzY0mUYx.woff2 HTTP/1.1 
Host: m.media-amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.amazon.com
Connection: keep-alive
Referer: https://m.media-amazon.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.82.142
HTTP/2 200 OK
content-type: application/font-woff2; charset=utf-8
                                            
content-length: 21508
server: Server
date: Tue, 06 Sep 2022 06:06:08 GMT
x-amz-ir-id: e92e412d-02bb-46c1-bbec-f9b715f2f4a1
expires: Sat, 23 Aug 2042 16:10:04 GMT
cache-control: max-age=630720000,public
surrogate-key: x-cache-635 /images/S/sash/VjTR4RqBzY0mUYx
timing-allow-origin: https://www.amazon.in, https://www.amazon.com
edge-cache-tag: x-cache-635,/images/S/sash/VjTR4RqBzY0mUYx
access-control-allow-origin: *
last-modified: Fri, 04 Dec 2020 06:52:43 GMT
x-nginx-cache-status: HIT
accept-ranges: bytes
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
age: 17127580
server-timing: provider;desc="cf"
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6l9cnx-eXfWagMNu-SoYaRBmfCVWZccolEVzrwEQ5IkZ39nKlDLR5w==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 21508, version 1.0\012- data
Size:   21508
Md5:    49a8476c4c1cbbe861d58ee73146477f
Sha1:   fac44c6a6eb11604f6cb0a9901566fafc93080e3
Sha256: 5d2e0937afadfe093eb3ffdb36ac561da423f81a9dfbc0a875ce29d32584b6f4
                                        
                                            GET /images/S/sash/WOnTLzkiaEccV7F.woff2 HTTP/1.1 
Host: m.media-amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.amazon.com
Connection: keep-alive
Referer: https://m.media-amazon.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.82.142
HTTP/2 200 OK
content-type: application/font-woff2; charset=utf-8
                                            
content-length: 17336
server: Server
date: Sun, 06 Nov 2022 10:07:44 GMT
x-amz-ir-id: d3dad8eb-f637-4c05-9e0f-a344dfdc1e8b
expires: Thu, 04 Sep 2042 09:00:28 GMT
cache-control: max-age=630720000,public
surrogate-key: x-cache-819 /images/S/sash/WOnTLzkiaEccV7F
timing-allow-origin: https://www.amazon.in, https://www.amazon.com
edge-cache-tag: x-cache-819,/images/S/sash/WOnTLzkiaEccV7F
access-control-allow-origin: *
last-modified: Fri, 30 Oct 2020 21:19:21 GMT
x-nginx-cache-status: HIT
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
age: 11842684
server-timing: provider;desc="cf"
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vUbCSjfanDrxEikGFI3up2BYcJappK9YWJ5-wokaRcFBBQf8RJTpZQ==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 17336, version 1.655\012- data
Size:   17336
Md5:    b39e082c6b983705892045fd87e0b9a8
Sha1:   9cc1bb64eb270135f1adf3a4881c2ee5e7c37be5
Sha256: cb0f25ca005489d2399434c33762f291bd8746714eae3aa72de20aca08edc458
                                        
                                            GET /images/S/sash/2SazJx$EeTHfhMN.woff2 HTTP/1.1 
Host: m.media-amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.amazon.com
Connection: keep-alive
Referer: https://m.media-amazon.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.82.142
HTTP/2 200 OK
content-type: application/font-woff2; charset=utf-8
                                            
content-length: 17448
server: Server
date: Wed, 07 Dec 2022 06:33:56 GMT
x-amz-ir-id: 319b84b7-4bf9-4c6a-83ad-fb3d9a8e4744
expires: Sat, 14 Jun 2042 05:08:17 GMT
cache-control: max-age=630720000,public
surrogate-key: x-cache-862 /images/S/sash/2SazJx$EeTHfhMN
timing-allow-origin: https://www.amazon.in, https://www.amazon.com
edge-cache-tag: x-cache-862,/images/S/sash/2SazJx$EeTHfhMN
access-control-allow-origin: *
last-modified: Wed, 30 Dec 2020 18:15:52 GMT
x-nginx-cache-status: HIT
accept-ranges: bytes
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
age: 9177112
server-timing: provider;desc="cf"
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BLhrfnm6-EW9G6Z5m25GmKce5TP4jrsrMGFtj0pFpS6pzDbHqUJD7g==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 17448, version 1.655\012- data
Size:   17448
Md5:    48b83f7b9cf25c402ac0946a957f74ba
Sha1:   80ff7aba37dd1ff5a6b90233a19e3a780a96dc2f
Sha256: e27466d19d5b9459f659faca4609650719f1aa6e9abcd5bab91e1a3ba63ac2f0
                                        
                                            GET /images/S/sash/ozb5-CLHQWI6Soc.woff2 HTTP/1.1 
Host: m.media-amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.amazon.com
Connection: keep-alive
Referer: https://m.media-amazon.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.82.142
HTTP/2 200 OK
content-type: application/font-woff2
                                            
content-length: 29240
server: Server
date: Wed, 26 Oct 2022 10:34:27 GMT
x-amz-ir-id: f9bac5bb-dc14-408d-9fa3-50c826db2f76
expires: Mon, 20 Oct 2042 11:23:01 GMT
cache-control: max-age=630720000,public
surrogate-key: x-cache-964 /images/S/sash/ozb5-CLHQWI6Soc
timing-allow-origin: https://www.amazon.in, https://www.amazon.com
edge-cache-tag: x-cache-964,/images/S/sash/ozb5-CLHQWI6Soc
access-control-allow-origin: *
last-modified: Tue, 17 Nov 2020 23:26:47 GMT
x-nginx-cache-status: HIT
accept-ranges: bytes
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
age: 12791481
server-timing: provider;desc="cf"
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: haM-tqDetdsGIVWa-ZyoHj_ITpfMT_S_rHMUk-AqUGDJVbm9SThxkg==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 29240, version 1.19661\012- data
Size:   29240
Md5:    c58d60f633a61a473a746505b4373194
Sha1:   32110b329b0ff64b386960bcec4e61964edeaa17
Sha256: 823e37b5143b1b90333e54b872bdb8d40b9f12ad98547d30874fa6350d09a9f3
                                        
                                            GET /images/S/sash/KwhNPG8Jz-Vz2X7.woff2 HTTP/1.1 
Host: m.media-amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.amazon.com
Connection: keep-alive
Referer: https://m.media-amazon.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.82.142
HTTP/2 200 OK
content-type: application/font-woff2; charset=utf-8
                                            
content-length: 23220
server: Server
date: Sun, 30 Oct 2022 07:39:55 GMT
x-amz-ir-id: ff70e50e-5b59-4064-9e7a-ddf3461156ba
expires: Sat, 25 Oct 2042 07:39:55 GMT
cache-control: max-age=630720000,public
surrogate-key: x-cache-994 /images/S/sash/KwhNPG8Jz-Vz2X7
timing-allow-origin: https://www.amazon.in, https://www.amazon.com
edge-cache-tag: x-cache-994,/images/S/sash/KwhNPG8Jz-Vz2X7
access-control-allow-origin: *
last-modified: Fri, 04 Dec 2020 06:52:41 GMT
x-nginx-cache-status: MISS
accept-ranges: bytes
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
age: 12456353
server-timing: provider;desc="cf"
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: EmzO0DjFqyBouxR3RSdI5UN_5oNKkYZuuvbKNJGlp6b3iFQvfAuptA==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 23220, version 1.0\012- data
Size:   23220
Md5:    3a49bfc56868e37d88af0a8c98502af0
Sha1:   70056995a9f3a8af43162ecb4d14399f0a1258f2
Sha256: 2931b4fef361fb14cebe167b5c0827f3c00d0651b4ae34af1ebda1bcc261c254
                                        
                                            GET /images/I/11Y+5x+kkTL._RC|51Am7NcREVL.js,11yKORv-GTL.js,11GgN1+C7hL.js,01+z+uIeJ-L.js,01VRMV3FBdL.js,21SDJtBU-PL.js,012FVc3131L.js,11rRjDLdAVL.js,516j7qaWchL.js,11kWu3cNjYL.js,11wr1I7-WYL.js,11OREnu1epL.js,11Wm6BwZ+6L.js,21ssiLNIZvL.js,0190vxtlzcL.js,51+N26vFcBL.js,01JYHc2oIlL.js,31nfKXylf6L.js,01ezj5Rkz1L.js,11bEz2VIYrL.js,31o2NGTXThL.js,01rpauTep4L.js,01XC3MnuvfL.js_.js?AUIClients/AmazonUI&MFdCk5El HTTP/1.1 
Host: m.media-amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.amazon.com
Connection: keep-alive
Referer: https://www.amazon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.82.142
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                            
server: Server
date: Tue, 14 Mar 2023 01:19:33 GMT
x-amz-ir-id: a7116326-22e6-4088-8f71-8060535355db
expires: Mon, 09 Mar 2043 01:18:55 GMT
cache-control: max-age=630720000,public
surrogate-key: x-cache-474 /images/I/11Y+5x+kkTL
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-474,/images/I/11Y+5x+kkTL
access-control-allow-origin: *
last-modified: Fri, 29 May 2020 23:37:04 GMT
x-nginx-cache-status: HIT
content-encoding: br
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
age: 815174
server-timing: provider;desc="cf"
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7nRdRYpMI6YwSjetafuZy2FcgfEUWUnGWgr1_Igt57zCRnj7PYq1TA==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (573)
Size:   60757
Md5:    2101277048e315cbd5017364938dddf2
Sha1:   72f301a285dfa71a1dc9e4b09ea212c5da09ad6f
Sha256: 73bdd193a360aab8348badcc298a99445fddc7468b3cc920dac8cdd54fb0e0a6
                                        
                                            GET /images/I/51EIwpasq4L.js?AUIClients/CardJsRuntimeBuzzCopyBuild HTTP/1.1 
Host: m.media-amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.amazon.com
Connection: keep-alive
Referer: https://www.amazon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.82.142
HTTP/2 200 OK
content-type: application/x-javascript
                                            
server: Server
date: Wed, 08 Mar 2023 10:45:51 GMT
x-amz-ir-id: d00c5d7f-fccb-4e0c-803a-b56afb1cc1cd
expires: Mon, 02 Mar 2043 18:21:11 GMT
cache-control: max-age=630720000,public
surrogate-key: x-cache-384 /images/I/51EIwpasq4L
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-384,/images/I/51EIwpasq4L
access-control-allow-origin: *
last-modified: Fri, 03 Mar 2023 22:01:48 GMT
x-nginx-cache-status: HIT
content-encoding: gzip
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
age: 1299596
server-timing: provider;desc="cf"
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: V_DC0mkdoc43CFNf0pvtqFzTY-HlEeAaFjoWYDCWhu_vuxhePvLZxw==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   15109
Md5:    8ca63f61a2951cc6c5347c51a7974b86
Sha1:   ddf0c6aa981a986d86ea7b82ec9fa5529bdd82be
Sha256: 75f13fd5bbbd3a917c51c94947e11212080fd1eea0287e29a68255eb55f82c70
                                        
                                            GET /images/G/01/javascripts/lib/popover/images/snake._CB485935611_.gif HTTP/1.1 
Host: m.media-amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.amazon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.82.142
HTTP/2 200 OK
content-type: image/gif
                                            
content-length: 1698
server: Server
date: Sat, 03 Sep 2022 07:35:53 GMT
x-amz-ir-id: a7697959-0af7-4b3b-b73e-6b7f6f357a51
expires: Wed, 27 Aug 2042 15:19:21 GMT
cache-control: max-age=630720000,public
surrogate-key: x-cache-136 /images/G/01/javascripts/lib/popover/images/snake
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-136,/images/G/01/javascripts/lib/popover/images/snake
access-control-allow-origin: *
last-modified: Fri, 28 May 2010 22:22:17 GMT
x-nginx-cache-status: HIT
accept-ranges: bytes
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
age: 17381395
server-timing: provider;desc="cf"
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZN9BMwZVecRgno0mZcpFaGIyhXSXigeY42bSHgpGZl98UbIk9pZIgw==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 16\012- data
Size:   1698
Md5:    b6865a5842dae8a773056b0335f901e1
Sha1:   be3ef410749c7817f5469e7b57aec884446a801f
Sha256: 67bcc900dba12d5df3e836531821a46c55e5c4fb0db1d1b99a8b7880918b6896
                                        
                                            GET /1/batch/1/OP/ATVPDKIKX0DER:146-8523946-5252900:0YXYKSS90BAP1G6PM4F1$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.244468.0%26id%3D0YXYKSS90BAP1G6PM4F1%26ic%3D2%26m%3D1%26sc%3Dcsa%3AmutObsActive%26pc%3D870%26at%3D870%26t%3D1679571956034%26csmtags%3Daui%3Asw%3Abrowser%3Aregister%3Aunsupported%7CmutObsActive%26pty%3DVine%26spty%3Dabout%26pti%3Dundefined%26tid%3D0YXYKSS90BAP1G6PM4F1%26aftb%3D1:869 HTTP/1.1 
Host: fls-na.amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.amazon.com/
Cookie: session-id=146-8523946-5252900; session-id-time=2082787201l; i18n-prefs=USD; sp-cdn="L5Z9:NO"
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                        
                                             34.195.218.50
HTTP/2 200 OK
content-type: image/gif
                                            
date: Thu, 23 Mar 2023 11:45:48 GMT
content-length: 43
x-amzn-requestid: 7116360a-f86b-45cb-bd2e-fee136704fe8
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    e68cc604cab69bf03b8cd228d940f5ef
Sha1:   15c0c62c4c7c917b5dd82a8e1e439211a44b9e98
Sha256: a3a64aea2e96ec58a163ddb8d4cf86cf236178ed2d225b8f44154bc1b010ddce
                                        
                                            GET /1/batch/1/OP/ATVPDKIKX0DER:146-8523946-5252900:0YXYKSS90BAP1G6PM4F1$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.244468.0%26id%3D0YXYKSS90BAP1G6PM4F1%26ic%3D2%26m%3D1%26sc%3Dcsa%3AmutObsActive%26pc%3D871%26at%3D871%26t%3D1679571956035%26csmtags%3DmutObsActive%26pty%3DVine%26spty%3Dabout%26pti%3Dundefined%26tid%3D0YXYKSS90BAP1G6PM4F1%26aftb%3D1:870 HTTP/1.1 
Host: fls-na.amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.amazon.com/
Cookie: session-id=146-8523946-5252900; session-id-time=2082787201l; i18n-prefs=USD; sp-cdn="L5Z9:NO"
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                        
                                             34.195.218.50
HTTP/2 200 OK
content-type: image/gif
                                            
date: Thu, 23 Mar 2023 11:45:48 GMT
content-length: 43
x-amzn-requestid: 88f42c71-4b9a-4546-a05b-dd3cc48dc124
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    e68cc604cab69bf03b8cd228d940f5ef
Sha1:   15c0c62c4c7c917b5dd82a8e1e439211a44b9e98
Sha256: a3a64aea2e96ec58a163ddb8d4cf86cf236178ed2d225b8f44154bc1b010ddce
                                        
                                            GET /1/batch/1/OP/ATVPDKIKX0DER:146-8523946-5252900:0YXYKSS90BAP1G6PM4F1$uedata=s:%2Frd%2Fuedata%3Fat%26v%3D0.244468.0%26id%3D0YXYKSS90BAP1G6PM4F1%26ic%3D2%26m%3D1%26sc%3Dadblk_no%26pc%3D969%26at%3D969%26t%3D1679571956133%26csmtags%3Dadblk_no%26pty%3DVine%26spty%3Dabout%26pti%3Dundefined%26tid%3D0YXYKSS90BAP1G6PM4F1%26aftb%3D1:970 HTTP/1.1 
Host: fls-na.amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.amazon.com/
Cookie: session-id=146-8523946-5252900; session-id-time=2082787201l; i18n-prefs=USD; sp-cdn="L5Z9:NO"
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                        
                                             34.195.218.50
HTTP/2 200 OK
content-type: image/gif
                                            
date: Thu, 23 Mar 2023 11:45:48 GMT
content-length: 43
x-amzn-requestid: 63074876-8903-4fdd-a487-bb8efacaa90e
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    e68cc604cab69bf03b8cd228d940f5ef
Sha1:   15c0c62c4c7c917b5dd82a8e1e439211a44b9e98
Sha256: a3a64aea2e96ec58a163ddb8d4cf86cf236178ed2d225b8f44154bc1b010ddce
                                        
                                            GET /1/batch/1/OP/ATVPDKIKX0DER:146-8523946-5252900:0YXYKSS90BAP1G6PM4F1$uedata=s:%2Frd%2Fuedata%3Fld%26v%3D0.244468.0%26id%3D0YXYKSS90BAP1G6PM4F1%26ctb%3D1%26ic%3D2%26sc0%3Daui%3Asw%3Appft%3Acallback_ricb%26bb0%3D694%26pc0%3D1018%26ld0%3D1018%26t0%3D1679571956182%26pty%3DVine%26spty%3Dabout%26pti%3Dundefined%26tid%3D0YXYKSS90BAP1G6PM4F1%26aftb%3D1:1017 HTTP/1.1 
Host: fls-na.amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.amazon.com/
Cookie: session-id=146-8523946-5252900; session-id-time=2082787201l; i18n-prefs=USD; sp-cdn="L5Z9:NO"
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                        
                                             34.195.218.50
HTTP/2 200 OK
content-type: image/gif
                                            
date: Thu, 23 Mar 2023 11:45:48 GMT
content-length: 43
x-amzn-requestid: 8408aec1-3e74-4e0a-a2c7-cc6e5164ff30
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    e68cc604cab69bf03b8cd228d940f5ef
Sha1:   15c0c62c4c7c917b5dd82a8e1e439211a44b9e98
Sha256: a3a64aea2e96ec58a163ddb8d4cf86cf236178ed2d225b8f44154bc1b010ddce
                                        
                                            GET /rd/uedata?ld&v=0.244468.0&id=0YXYKSS90BAP1G6PM4F1&ic=2&sw=1280&sh=1024&vw=1268&vh=939&m=1&sc=0YXYKSS90BAP1G6PM4F1&ue=4&bb=321&ns=332&be=361&ne=532&fcp=465&pc=812&tc=-653&na_=-653&ul_=-1679571955164&_ul=-1679571955164&rd_=-1679571955164&_rd=-1679571955164&fe_=-358&lk_=-350&_lk=-286&co_=-286&_co=-202&sc_=-247&rq_=-202&rs_=-15&_rs=-15&dl_=-7&di_=453&de_=529&_de=531&_dc=811&ld_=811&_ld=-1679571955164&ntd=-1&ty=0&rc=0&hob=3&hoe=4&ld=813&t=1679571955977&ctb=1&rt=__ld:18-6-3-8-4-5-1&csmtags=aui|aui:aui_build_date:3.23.1-2023-03-21|mutObsYes|ewc:unpersist|ewc:unpersist:emptycart|ewc:bview|ewc|ewc:unrec|ewc:cartsize:0|ewc:aui|navbar|fls-na-amazon-com|perfYes|cf_cdn_fr|cf_cdn_mp&viz=visible:4&pty=Vine&spty=about&pti=undefined&tid=0YXYKSS90BAP1G6PM4F1&aftb=1 HTTP/1.1 
Host: www.amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.amazon.com/vine/about?linkId=206610786
Cookie: session-id=146-8523946-5252900; session-id-time=2082787201l; i18n-prefs=USD; sp-cdn="L5Z9:NO"; csm-hit=tb:s-0YXYKSS90BAP1G6PM4F1|1679571955484&t:1679571955485
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             13.32.12.128
HTTP/2 200 OK
content-type: text/html
                                            
server: Server
date: Thu, 23 Mar 2023 11:45:48 GMT
x-amz-rid: YBPDKFFJYARSAE4NDET5
strict-transport-security: max-age=47474747; includeSubDomains; preload
vary: Content-Type,Accept-Encoding,User-Agent
last-modified: Tue, 14 Mar 2023 19:30:56 GMT
etag: "47-5f6e14435bc00-gzip"
accept-ranges: bytes
content-encoding: gzip
x-frame-options: SAMEORIGIN
x-cache: Miss from cloudfront
via: 1.1 f9fdc7f95aba4b520d73ade0f850d634.cloudfront.net (CloudFront)
x-amz-cf-pop: VIE50-C2
x-amz-cf-id: 3ISPLUBwS_pGlHsQYFHieNZeos-ZjU8EAh18oqPq5nvduASUw5awUQ==
X-Firefox-Spdy: h2

                                        
                                            GET /images/I/61ZS63EQSsL.js?AUIClients/AmazonUIjQuery HTTP/1.1 
Host: m.media-amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.amazon.com
Connection: keep-alive
Referer: https://www.amazon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.82.142
HTTP/2 200 OK
content-type: application/x-javascript
                                            
server: Server
date: Tue, 24 Jan 2023 01:14:03 GMT
x-amz-ir-id: 28aa6072-7e1d-4297-bab7-fedde8c576d9
expires: Mon, 19 Jan 2043 01:13:57 GMT
cache-control: max-age=630720000,public
surrogate-key: x-cache-243 /images/I/61ZS63EQSsL
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-243,/images/I/61ZS63EQSsL
access-control-allow-origin: *
last-modified: Fri, 23 Sep 2022 19:39:05 GMT
x-nginx-cache-status: HIT
content-encoding: br
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
age: 5049104
server-timing: cdn-cache-hit,cdn-pop;desc="OSL50-P1",cdn-rid;desc="a0UEHhqTWnkHmqxYnJnkYw-TqN7uDL4RFoimhMs8CxU6BkeXfZGXiA==",cdn-hit-layer;desc="EDGE",cdn-downstream-fbl;dur=1,provider;desc="cf"
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: a0UEHhqTWnkHmqxYnJnkYw-TqN7uDL4RFoimhMs8CxU6BkeXfZGXiA==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (562)
Size:   29569
Md5:    c2044cc2c9b431e81e052e582f6b86a1
Sha1:   e8e5323fb2ecd4346e742e5507d7e54dfd37c853
Sha256: aac493b5aca92e4495fda72d87ad906c027f3ad126869ec90107ff0121e91681
                                        
                                            HEAD /api/2017/suggestions HTTP/1.1 
Host: completion.amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.amazon.com
Connection: keep-alive
Referer: https://www.amazon.com/
Cookie: session-id=146-8523946-5252900; session-id-time=2082787201l; i18n-prefs=USD; sp-cdn="L5Z9:NO"
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

                                        
                                             52.46.154.73
HTTP/1.1 204 No Content
                                            
Server: Server
Date: Thu, 23 Mar 2023 11:45:48 GMT
Connection: keep-alive
x-amz-rid: TVP8G4HJQVCDFCG9CAZM
Access-Control-Allow-Origin: https://www.amazon.com
Access-Control-Allow-Credentials: true
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

                                        
                                            GET /iu3?d=amazon.com&slot=navFooter&a2=0101a43a0bf0951a00c4af7f2157ecf5f29bc484afa62dab6132fb202c1c4dafe881&old_oo=0&ts=1679571947199&s=Afr9E66LtP9OmVVuyaaXaWdLf7DwY23FvjgVKFm6ZG2n&gdpr_consent=&gdpr_consent_avl=&cb=1679571947199 HTTP/1.1 
Host: s.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.amazon.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             52.46.128.147
HTTP/1.1 302 Found
                                            
Server: Server
Date: Thu, 23 Mar 2023 11:45:48 GMT
Content-Length: 0
Connection: keep-alive
x-amz-rid: WC3897FD2W49SYH2GX9M
Set-Cookie: ad-id=AwbkFaLfYUP3iiKGk_x2VJQ|t; Domain=.amazon-adsystem.com; Expires=Sun, 01-Oct-2023 11:45:48 GMT; Path=/; Secure; HttpOnly; SameSite=None
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Location: https://s.amazon-adsystem.com/iu3?d=amazon.com&slot=navFooter&a2=0101a43a0bf0951a00c4af7f2157ecf5f29bc484afa62dab6132fb202c1c4dafe881&old_oo=0&ts=1679571947199&s=Afr9E66LtP9OmVVuyaaXaWdLf7DwY23FvjgVKFm6ZG2n&gdpr_consent=&gdpr_consent_avl=&cb=1679571947199&dcc=t
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

                                        
                                            POST /1/events/com.amazon.csm.csa.prod HTTP/1.1 
Host: unagi.amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1735
Origin: https://www.amazon.com
Connection: keep-alive
Referer: https://www.amazon.com/
Cookie: session-id=146-8523946-5252900; session-id-time=2082787201l; i18n-prefs=USD; sp-cdn="L5Z9:NO"
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                        
                                             52.46.137.137
HTTP/1.1 200
Content-Type: application/json
                                            
Server: Server
Date: Thu, 23 Mar 2023 11:45:48 GMT
Content-Length: 22
Connection: keep-alive
x-amz-rid: VNSJXZH5DZKC204QFMV0
x-amzn-RequestId: 440bf093-34dd-4200-a1b9-4b1e462e6297
Access-Control-Allow-Origin: https://www.amazon.com
Content-Encoding: gzip
Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date
Access-Control-Allow-Credentials: true
Vary: Origin,Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   22
Md5:    49fced5a15e8763d46199088fad93fca
Sha1:   8b3f69bdb1250e55ab9968a157416c8968369ec3
Sha256: 09819ee7c805183bdc1c2cb02e46b868c31b426baa5bbede8b56ae6163af04be
                                        
                                            GET /iu3?d=amazon.com&slot=navFooter&a2=0101a43a0bf0951a00c4af7f2157ecf5f29bc484afa62dab6132fb202c1c4dafe881&old_oo=0&ts=1679571947199&s=Afr9E66LtP9OmVVuyaaXaWdLf7DwY23FvjgVKFm6ZG2n&gdpr_consent=&gdpr_consent_avl=&cb=1679571947199&dcc=t HTTP/1.1 
Host: s.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.amazon.com/
Connection: keep-alive
Cookie: ad-id=AwbkFaLfYUP3iiKGk_x2VJQ|t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             52.46.128.147
HTTP/1.1 200 OK
Content-Type: text/html;charset=ISO-8859-1
                                            
Server: Server
Date: Thu, 23 Mar 2023 11:45:48 GMT
Content-Length: 1482
Connection: keep-alive
x-amz-rid: 42RJ4DC98RSR654BD2PS
Set-Cookie: ad-id=AwbkFaLfYUP3iiKGk_x2VJQ; Domain=.amazon-adsystem.com; Expires=Sun, 01-Oct-2023 11:45:48 GMT; Path=/; Secure; HttpOnly; SameSite=None ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sat, 01-Apr-2028 11:45:48 GMT; Path=/; Secure; HttpOnly; SameSite=None
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (1417)
Size:   1482
Md5:    151ca379a9d05d7c97918e63c14b4e45
Sha1:   a1d6e8e914033088b8167283f00ed14252c31330
Sha256: a3d42e0e9191a56c14b67e4c786fb503ac8799a8f638cf25f80a25060a35d675
                                        
                                            GET /images/I/412HK5CgpXL._RC|715gJL4znLL.js,01QvReFeJyL.js,01phmzCOwJL.js,01eOvPdxG7L.js,71yRGR0uBKL.js,41gNKoK0s7L.js,115pV8Rl02L.js,01+pnQJuQ0L.js,21+aV0AEB8L.js,11k47yUMOjL.js,41rU9l+NGKL.js,51t-JTxfnwL.js,317BC63dC8L.js,11lEMI5MhIL.js,31UsGkeqBUL.js,01LEzWzrPZL.js,01AqeWA7PKL.js_.js?AUIClients/NavDesktopUberAsset&MuOMtsI6 HTTP/1.1 
Host: images-na.ssl-images-amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.amazon.com
Connection: keep-alive
Referer: https://www.amazon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.82.142
HTTP/2 200 OK
content-type: application/x-javascript
                                            
server: Server
date: Tue, 21 Mar 2023 20:14:25 GMT
x-amz-ir-id: 2a86871d-8aac-44ee-b1a2-d3c4621986d9
expires: Sun, 15 Mar 2043 16:12:19 GMT
cache-control: max-age=630720000,public
surrogate-key: x-cache-039 /images/I/412HK5CgpXL
timing-allow-origin: https://www.amazon.com
edge-cache-tag: x-cache-039,/images/I/412HK5CgpXL
access-control-allow-origin: *
last-modified: Wed, 22 Feb 2023 20:45:43 GMT
x-nginx-cache-status: HIT
content-encoding: br
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
age: 142282
server-timing: provider;desc="cf"
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sB9AEUBrP-ocVoBLlB4NOwAUr7-3gOFkZqBTZPe0qrwn7cKQayhcDw==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (596)
Size:   104423
Md5:    194d5acba56d3a69e15ab8d4480f0473
Sha1:   379913dd985b3f8a875601ed0f54b1ebe93a61ee
Sha256: 36996356870c409a0b5c098b49e830dc3e041779d05360373655cc63b1aebf3c
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8050
Expires: Thu, 23 Mar 2023 13:59:59 GMT
Date: Thu, 23 Mar 2023 11:45:49 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8050
Expires: Thu, 23 Mar 2023 13:59:59 GMT
Date: Thu, 23 Mar 2023 11:45:49 GMT
Connection: keep-alive

                                        
                                            GET /rd/uedata?at&v=0.244468.0&id=0YXYKSS90BAP1G6PM4F1&ic=2&m=1&sc=adblk_no&pc=969&at=969&t=1679571956133&csmtags=adblk_no&pty=Vine&spty=about&pti=undefined&tid=0YXYKSS90BAP1G6PM4F1&aftb=1 HTTP/1.1 
Host: www.amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.amazon.com/vine/about?linkId=206610786
Cookie: session-id=146-8523946-5252900; session-id-time=2082787201l; i18n-prefs=USD; sp-cdn="L5Z9:NO"; csm-hit=tb:s-0YXYKSS90BAP1G6PM4F1|1679571955484&t:1679571956135&adb:adblk_no
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             13.32.12.128
HTTP/2 200 OK
content-type: text/html
                                            
server: Server
date: Thu, 23 Mar 2023 11:45:48 GMT
x-amz-rid: X7BMT6D8Q9JKNPM3B2Z5
strict-transport-security: max-age=47474747; includeSubDomains; preload
vary: Content-Type,Accept-Encoding,User-Agent
last-modified: Tue, 14 Mar 2023 19:30:56 GMT
etag: "47-5f6e14435bc00-gzip"
accept-ranges: bytes
content-encoding: gzip
x-frame-options: SAMEORIGIN
x-cache: Miss from cloudfront
via: 1.1 f9fdc7f95aba4b520d73ade0f850d634.cloudfront.net (CloudFront)
x-amz-cf-pop: VIE50-C2
x-amz-cf-id: E2bZI5b82TrUzJs7qhR8d6LC3h-aj8ZqIz-MzZLly_f6F0Y_msrJ3A==
X-Firefox-Spdy: h2

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a816157-9568-4e7f-a034-14b2f1982949.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 4912
x-amzn-requestid: d8fcf495-12af-42ae-ad69-0ea07b1a8669
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM8H3Fl1IAMFYgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b73cb-01cbd1981a57e53b3d3cde93;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:31:55 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: 4xGMCVWy2EXLLN8keteGLQvQjOp6KH97rkn_FK10eyng0-5EudcOig==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 174acb08636ac7d9e9a778bbf1bcbc52.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:43:33 GMT
etag: "d07fe53e4ac41048497b2732c017f6666c3eda9e"
age: 50536
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4912
Md5:    f4a771935927950222124e14b56046df
Sha1:   d07fe53e4ac41048497b2732c017f6666c3eda9e
Sha256: 4e8388626074646c2336711be0a170ceab367c343648a32d2389dd87640251d0
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 4000
x-amzn-requestid: 68dc01d7-3eed-48f6-8532-8efaa96cc1ec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJpraEqyoAMFgNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2315-3852cc8961365a560d1fa02f;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:17 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Ncagzm12kJaHQtYhhjUUhcfXVfbwMdonoNYqpK-QXEmLfyyENgFnFA==
via: 1.1 288c777a01e22425da9494dad7a69734.cloudfront.net (CloudFront), 1.1 42ef990e439ae115ff739f04e3945234.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 02:49:25 GMT
age: 32184
etag: "b798268806dc2f79f033e5872676019faf0e0cc1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4000
Md5:    85351059b67b0a42eda7e69a31b3b4b4
Sha1:   b798268806dc2f79f033e5872676019faf0e0cc1
Sha256: 86e163b7159b197d6358ab01333ac6da221de0ebe1c5da8d5cef2977d38625fe
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fea5d4e17-e42c-49fb-a54b-d7d97ad50ba4.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7083
x-amzn-requestid: 352ae6e5-476d-430b-adf0-84d4a739967b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B6fGcE1foAMFbRQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64141228-7dc6c3cb72cd40965006ab76;Sampled=0
x-amzn-remapped-date: Fri, 17 Mar 2023 07:09:28 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: bgeeN4oUpN5wPo6UnQKqKTGDiuLWu-ioS9UtrO5a6m5SI7WyiRNLcA==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 6bdc2963c9ed59b475ec36c35e5932a4.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 09:43:54 GMT
age: 7315
etag: "76213c7d5c759471ed3823888860f918ac7e8f13"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7083
Md5:    40d24dfcd9f0afe0e4077384f16cc494
Sha1:   76213c7d5c759471ed3823888860f918ac7e8f13
Sha256: fbbbef0498ddf14bc9b204273a3cd416c357dceed20339c3e8c64a16b0be3caf
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93c300c4-e707-428c-9ae5-d4699c20a7ef.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 5950
x-amzn-requestid: ce85112e-428d-4ca1-9dac-1d6c8c6dc74a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CKyF9EI3oAMFtyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a96f2-05c5948d6f74948b1c67d68c;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 05:49:38 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: lnMR6Lh4T37cFhMwb1qXIxjoPBghVFOGUz7HTt65DegMaxlElZxfjQ==
via: 1.1 59456abf79b201034ab5c9cfef7355e2.cloudfront.net (CloudFront), 1.1 599f04a365a179d553682d476509c388.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:43:32 GMT
age: 56796
etag: "0917d2c376f8d2af2a436a33ce2bfe1cbdb8b239"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5950
Md5:    800c2662fd6ab8829a02b7d63084c38d
Sha1:   0917d2c376f8d2af2a436a33ce2bfe1cbdb8b239
Sha256: 76545e9f75dc558fdb7b54550934c7775318fb4150a9309f60e65d982d2e576e
                                        
                                            GET /v3/pr?exlist=n-xr-HMT_n-id-HMT_n-eq-HMT2_ns_n-ix-HMT_bsw_bk_n-y-HMT_n-visualiq_n-telaria_n-dm2-HMT_gem_fw_imdb_n-kr-new_n-improvedigital2_n-lucid_n-samba.tv_n-rb-HMT3_n-fw-HMT1_adelphic_adb_mp_af_sx_n-sk_g_kr_n-comscr.com_ox_index_n-tl-HMT_n-semasio-ecm_an_n-pm-HMT_rb_n-g-hmt_nsln_fbca_nd_n-ispot_n-ym-HMT_pm_n-ox-hmt_tbl&fv=1.0&ex-pl-fbca=TT-YSKnbQIOpy22DH792Ng&a=cm&ex-pl-n-kr-new=tH7CFexKTbOhSrmCWwFKPA&dmt=1&gdpr_consent=&ex-pl-n-g-hmt=0DhG676-SXSItlc_hg0S_g&ep=ttam_T219Ay-cPciHbT10v90YgbuEnsdn30ucER-ZCfBJscpajynFcw5LsxPBvSPSqLfg4VU6rLsCh-CXkvkyfj__DmVrCKqEpbWmSLkoKLupRrv9tbvwn6DeYwC8M_0_5M0S7NVPxmmGz99rBoLyHqChTK8O2sZTMp4ZC9PVvI1at2-5TdpYafOpbiAh0leQ7IGIIxzWLWWr9OHnQqoJC_dLE5aukR1nQqVjKiQH-fg4k-KpYPfNrHRF47lvIp2gz-UBLF17lTWLVvc8rjG5SaiIrLKkbD_UPc6KDfeOtAeoaz1wCFegVwk4YOAJhu5Eh58jfj4RyVVQSRddrfUe8fGm8SpYT625_yQzVL0SsdKD7ce0ARzst_ZKiiJUctdTMK50PZDd3JwFStg83jo0Ixkifl96pA45XzHJ6BxeGq70poFRz9D7WGO24apIDRYZDXJZNDuIV-3LEZRKdrU5XIs8QvEUFVRwQsASCAhmo50dXnVF-OXK3FmtwBefLQccxxqvguJN7QbVLUbRI3TV6bexpuOuamzBh3WQSYeReKVznGluDqOf-k2xjlKI-gAHZt4_ayS1mpktfQjX7R_2AM14e1iWFHncT6VGu2dJVzglsyaKHEWuFrFGH2LsTHwYigcF3rErBHDLz-7HUSNeN3j__wjr4GKBkyP6ynWcqjkUYbCbJ8RkRk-Vpzris03XgcXZkGmxwdprYI6mKA9Z7E4tZX4C-WolzSnqNHhn7XmpponACf8vhUwJmwHkZYh5M_UMAQRolVSAjjmoRvAZQ HTTP/1.1 
Host: s.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s.amazon-adsystem.com/
Cookie: ad-id=AwbkFaLfYUP3iiKGk_x2VJQ; ad-privacy=0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             52.46.128.147
HTTP/1.1 200 OK
Content-Type: text/html;charset=ISO-8859-1
                                            
Server: Server
Date: Thu, 23 Mar 2023 11:45:49 GMT
Content-Length: 7457
Connection: keep-alive
x-amz-rid: 55DGRCYVY6V8XS5M4TC5
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   7457
Md5:    fa0a00e7406fa419096b869333e582b4
Sha1:   331c988b36aed0eae7fa807905a03345f1ab9f16
Sha256: 330b918796a0c6318fee4b9427a513b28e6a81e822120ef744e022af5a5bd507
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a7546f8-3d34-4fb4-b63f-8e8098b48c30.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7419
x-amzn-requestid: bc02abbe-706d-42af-b963-0163b07b87c9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B9xbnE7OIAMFW2g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641562b0-247606a3713a20d25cf83763;Sampled=0
x-amzn-remapped-date: Sat, 18 Mar 2023 07:05:20 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 3hcFsEgTbzbZ7idbLT-fhzhzhO6nT7xNDgHvY4iF8Hd934YYbjviLA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 618052a0d9c86c1a3bf663f82d041d1c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 18:52:41 GMT
age: 60788
etag: "3518e8a18807209e94011806a96492e0d86ee9c9"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7419
Md5:    f777f840a3fc7e500c57a7cbdf88f26d
Sha1:   3518e8a18807209e94011806a96492e0d86ee9c9
Sha256: 44aa32fa1bf15785a4dd8cd6184772fb268113cbf459f5f30a70ff5ca66c9e05
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5be1b286-007a-44a5-a6fd-872190ecfa0b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6692
x-amzn-requestid: 3a0f6a8d-89b1-43f4-8a15-8749bdbc047b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM9d9FcOoAMFaFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b75f2-3540256d6be3d4f85bba65ea;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:41:06 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: PNAVsyfdAHjn5F6Rt1uz1U46QCIGvTCqZatbAurr6Ilu0quHWExuSw==
via: 1.1 e92cc925fc8895560cd0628c67f58828.cloudfront.net (CloudFront), 1.1 aabd01c4a20dae837d162bd972422efc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:43:34 GMT
age: 50535
etag: "156ef59e53564a4f2b27002b2695fafecd578d82"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6692
Md5:    c05bfdf1411a931d8ea9adc64b07bc74
Sha1:   156ef59e53564a4f2b27002b2695fafecd578d82
Sha256: 15d17c0df2d2b0625ecf5f576a7ff630ae8b923b28be354ad23aec6a284a801a
                                        
                                            GET /ads/idsync?cid=a706a6beb&ex=imdb.com HTTP/1.1 
Host: www.imdb.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.219.13
HTTP/2 302 Found
                                            
content-length: 0
location: https://s.amazon-adsystem.com/ecm3?rcode=1&ex=imdb.com
server: Server
date: Thu, 23 Mar 2023 11:45:49 GMT
x-amz-rid: HJ1K8EJE3V1PAVTZ8J2C
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy-report-only: default-src https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com; script-src https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com 'unsafe-inline' 'unsafe-eval'; style-src https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com 'unsafe-inline'; report-uri /1/batch/2/OE/mid=ATVPDKIKX0DER:sid=:rid=HJ1K8EJE3V1PAVTZ8J2C:sn=www.imdb.com
strict-transport-security: max-age=31536000; includeSubDomains
x-robots-tag: noindex, nofollow
vary: Content-Type,Accept-Encoding,User-Agent
x-cache: Miss from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: PoIt_cXnkwJuZV6OERX1A4QBKfhDKLg5Sm0pwk3Qcl6M9dFE4UZxgw==
X-Firefox-Spdy: h2

                                        
                                            POST /1/batch/1/OE/ HTTP/1.1 
Host: fls-na.amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 8276
Origin: https://www.amazon.com
Connection: keep-alive
Referer: https://www.amazon.com/
Cookie: session-id=146-8523946-5252900; session-id-time=2082787201l; i18n-prefs=USD; sp-cdn="L5Z9:NO"; ubid-main=133-5438518-6231760
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                        
                                             34.195.218.50
HTTP/2 204 No Content
                                            
date: Thu, 23 Mar 2023 11:45:49 GMT
x-amzn-requestid: 69faee36-ebd4-4e87-804e-88dcf5483d24
access-control-allow-origin: *
access-control-expose-headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date
X-Firefox-Spdy: h2

                                        
                                            GET /v2/TC-3673-1.gif?redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dispot.tv%26id%3D%7BISID%7D HTTP/1.1 
Host: pi.ispot.tv
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             151.101.66.132
HTTP/2 302 Found
                                            
retry-after: 0
location: https://s.amazon-adsystem.com/ecm3?ex=ispot.tv&id=bc494572e3c2196b182457bcf369376853e088e636d47f5198ec19f79f392360
accept-ranges: bytes
date: Thu, 23 Mar 2023 11:45:49 GMT
set-cookie: pt=v2:bc494572e3c2196b182457bcf369376853e088e636d47f5198ec19f79f392360|294d233fc2c8f6dde0916d8a56c7b2d101fe74353aace9a589814bcec2148130; Domain=ispot.tv; Path=/; Expires=Sat, 22 Mar 2025 11:45:49 GMT; SameSite=None; Secure
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /ecm3?rcode=1&ex=imdb.com HTTP/1.1 
Host: s.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: ad-id=AwbkFaLfYUP3iiKGk_x2VJQ; ad-privacy=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             52.46.128.147
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: Server
Date: Thu, 23 Mar 2023 11:45:49 GMT
Content-Length: 43
Connection: keep-alive
x-amz-rid: 30C6ZCEC38M2EYF105T6
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    6851dbf491ae442da3314f19e8aff085
Sha1:   ecfec27263608c4ae7cd4f8e0cebb1b061df2ac3
Sha256: c21e2c1246fe45a6750ae6208db2b5965ff6ed63eb80d2ecec3be9c83813428e
                                        
                                            GET /portal-migration/hz/glow/get-rendered-toaster?pageType=Vine&aisTransitionState=in&rancorLocationSource=IP_GEOLOCATION&_=1679571956025 HTTP/1.1 
Host: www.amazon.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.amazon.com/vine/about?linkId=206610786
Cookie: session-id=146-8523946-5252900; session-id-time=2082787201l; i18n-prefs=USD; sp-cdn="L5Z9:NO"; csm-hit=tb:s-0YXYKSS90BAP1G6PM4F1|1679571955484&t:1679571955485
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             13.32.12.128
HTTP/2 200 OK
content-type: text/html;charset=UTF-8
                                            
server: Server
date: Thu, 23 Mar 2023 11:45:48 GMT
x-amz-rid: SAQ31K0G1P9KYQXD3NYX
set-cookie: ubid-main=133-5438518-6231760; Domain=.amazon.com; Expires=Fri, 22-Mar-2024 11:45:48 GMT; Path=/; Secure
x-xss-protection: 1;
accept-ch: ect,rtt,downlink,device-memory,sec-ch-device-memory,viewport-width,sec-ch-viewport-width,dpr,sec-ch-dpr
content-encoding: gzip
x-content-type-options: nosniff
content-security-policy-report-only: default-src 'self' blob: https: data: mediastream: 'unsafe-eval' 'unsafe-inline';report-uri https://metrics.media-amazon.com/
content-language: en-US
accept-ch-lifetime: 86400
content-security-policy: upgrade-insecure-requests;report-uri https://metrics.media-amazon.com/
strict-transport-security: max-age=47474747; includeSubDomains; preload
vary: Content-Type,Accept-Encoding,User-Agent
x-frame-options: SAMEORIGIN
x-cache: Miss from cloudfront
via: 1.1 f9fdc7f95aba4b520d73ade0f850d634.cloudfront.net (CloudFront)
x-amz-cf-pop: VIE50-C2
x-amz-cf-id: hcGrhiUspiNdFqwCkIicy9Ze_22esatOAJQ-d2jEGyW96OvjEXUxwQ==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1304
Md5:    5b46e31d4aa1dd32c03aefbabe36c796
Sha1:   ac6565b8642793719538acc82d44282710820eb2
Sha256: 5459f3c701c4046ff47a76618ca7c88377e864733384fa4056817e47682904d6
                                        
                                            POST / HTTP/1.1 
Host: zerossl.ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:45:49 GMT
Content-Length: 728
Connection: keep-alive
Last-Modified: Thu, 23 Mar 2023 09:19:05 GMT
Expires: Thu, 30 Mar 2023 09:19:04 GMT
Etag: "c4577a47988bea1f4e530aa02270ad9c972137d8"
Cache-Control: max-age=595394,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ac66e2bc8fafabc-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.r2m01.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.80.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=104454
Date: Thu, 23 Mar 2023 11:45:49 GMT
Etag: "641b2e9a-1d7"
Expires: Fri, 24 Mar 2023 16:46:43 GMT
Last-Modified: Wed, 22 Mar 2023 16:36:42 GMT
Server: ECAcc (nya/1C20)
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 6wcGqmCO-WkE89MHtBZfW-IKQ2sISlf9KFL-1fPW4JOjdt1rZL1siw==
Age: 602

                                        
                                            GET /dspreply?dspId=1868&dspUserId=ZzxjUZDyTN2d5lJ1ctebJA&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DdailymotionHMT2&id=&gdpr_consent= HTTP/1.1 
Host: public-prod-dspcookiematching.dmxleo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             188.65.124.66
HTTP/2 200 OK
                                            
date: Thu, 23 Mar 2023 11:45:49 GMT
content-length: 0
strict-transport-security: max-age=15724800; includeSubDomains
x-dm-lb-name: ingress-nginx-nginx-in-cluster-trt7k
X-Firefox-Spdy: h2

                                        
                                            GET /ecm3?ex=ispot.tv&id=bc494572e3c2196b182457bcf369376853e088e636d47f5198ec19f79f392360 HTTP/1.1 
Host: s.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: ad-id=AwbkFaLfYUP3iiKGk_x2VJQ; ad-privacy=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             52.46.128.147
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: Server
Date: Thu, 23 Mar 2023 11:45:49 GMT
Content-Length: 43
Connection: keep-alive
x-amz-rid: JR7DPS8DCXZ1WR2DJ0J9
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    6851dbf491ae442da3314f19e8aff085
Sha1:   ecfec27263608c4ae7cd4f8e0cebb1b061df2ac3
Sha256: c21e2c1246fe45a6750ae6208db2b5965ff6ed63eb80d2ecec3be9c83813428e
                                        
                                            POST / HTTP/1.1 
Host: ocsp.r2m01.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.80.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=86798
Date: Thu, 23 Mar 2023 11:45:49 GMT
Etag: "641ad35f-1d7"
Expires: Fri, 24 Mar 2023 11:52:27 GMT
Last-Modified: Wed, 22 Mar 2023 10:07:27 GMT
Server: ECAcc (nya/79E6)
X-Cache: Miss from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: MjHf98bpirDil8_WV7k0kE7qjNtfyYkcAgg6L_6USM8ck7JIjvLMpQ==
Age: 6300

                                        
                                            GET /amazon/pixel.gif?https://s.amazon-adsystem.com/ecm3?ex=luc.id&id= HTTP/1.1 
Host: usersync.samplicio.us
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             3.217.39.149
HTTP/2 200 OK
                                            
date: Thu, 23 Mar 2023 11:45:49 GMT
content-length: 0
location: https://s.amazon-adsystem.com/ecm3?ex=luc.id&id=
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
x-ratelimit-limit: 0
x-ratelimit-remaining: 0
x-ratelimit-reset: 0
X-Firefox-Spdy: h2

                                        
                                            GET /cookie_sync?https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsamba.tv%26id%3D HTTP/1.1 
Host: ads.samba.tv
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             3.218.121.128
HTTP/2 302 Found
content-type: text/html; charset=utf-8
                                            
date: Thu, 23 Mar 2023 11:45:49 GMT
content-length: 94
location: https://s.amazon-adsystem.com/ecm3?ex=samba.tv&id=10f0cc250aa9db44b
accept-ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
access-control-allow-headers: Content-Type, Authorization
access-control-allow-methods: HEAD,OPTIONS,GET
access-control-allow-origin: *
content-security-policy: default-src 'self'
critical-ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
set-cookie: sambapxid=10f0cc250aa9db44b; Expires=Tue, 23 Apr 2024 11:45:49 GMT; Secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains
vary: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   94
Md5:    fb72a28861cd2dca6d7a03bbf87cf862
Sha1:   a5aae84f97e296577c9888d246efd54e305539fd
Sha256: 3a4988ae1d7071910919a102aa4d119c9da80112a24ae419ca0f3a08b171facc
                                        
                                            GET /?156b1f59-dedf-54e9-29a1-a81697713b81 HTTP/1.1 
Host: dr3fr5q4g2ul9.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.amazon.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.245.159
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
content-length: 0
date: Thu, 02 Feb 2023 03:06:33 GMT
last-modified: Wed, 26 May 2021 23:25:20 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dDMi6OJlTe3KzWfOMGAztYGPLoTEfa_fYtG3yCSTXgB7t2S7snQJmw==
age: 4264757
X-Firefox-Spdy: h2

                                        
                                            GET /?156b1f59-dedf-54e9-29a1-a81697713b81 HTTP/1.1 
Host: d2ef20sk9hi1u3.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.amazon.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             18.66.17.153
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
content-length: 0
date: Thu, 12 Jan 2023 14:03:10 GMT
last-modified: Wed, 26 May 2021 23:25:20 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a17242a6cf9be61e0412ecea1610cbde.cloudfront.net (CloudFront)
x-amz-cf-pop: VIE50-P1
x-amz-cf-id: rVPCFk0ajSG56wSNPrYUUOhYez6azYoOTU_DLKlfEcFr13g6M0bTkg==
age: 6039760
X-Firefox-Spdy: h2

                                        
                                            GET /ecm3?ex=samba.tv&id=10f0cc250aa9db44b HTTP/1.1 
Host: s.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: ad-id=AwbkFaLfYUP3iiKGk_x2VJQ; ad-privacy=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             52.46.128.147
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: Server
Date: Thu, 23 Mar 2023 11:45:49 GMT
Content-Length: 43
Connection: keep-alive
x-amz-rid: RQG3M2N06H10E5QQGVKM
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    6851dbf491ae442da3314f19e8aff085
Sha1:   ecfec27263608c4ae7cd4f8e0cebb1b061df2ac3
Sha256: c21e2c1246fe45a6750ae6208db2b5965ff6ed63eb80d2ecec3be9c83813428e
                                        
                                            GET /user-matching?id=2545&gdpr_consent= HTTP/1.1 
Host: ads.stickyadstv.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             95.101.10.8
HTTP/1.1 302 Moved Temporarily
                                            
Server: nginx
Content-Length: 0
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
x-sticky-vk: 1679571950033004-369
Location: https://s.amazon-adsystem.com/ecm3?id=cda3296152eb42786fbb835428b19a54&ex=freewheel.tv&gdpr=0&gdpr_consent=&userId=
Expires: Thu, 23 Mar 2023 11:45:50 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 23 Mar 2023 11:45:50 GMT
Connection: keep-alive
Set-Cookie: UID=cda3296152eb42786fbb835428b19a54; Domain=ads.stickyadstv.com; Expires=Sat, 22-Apr-2023 11:45:50 GMT; Path=/ uid-bp-30833=1; Domain=ads.stickyadstv.com; Expires=Thu, 06-Apr-2023 11:45:50 GMT; Path=/

                                        
                                            GET /user-registering?dataProviderId=961&userId=_Ztbm8IMS5-R7s_IcQZCFA&redirectId=2545&gdpr_consent= HTTP/1.1 
Host: ads.stickyadstv.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             95.101.10.8
HTTP/1.1 302 Moved Temporarily
                                            
Server: nginx
Content-Length: 0
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
x-sticky-vk: 1679571950023054-353
Location: https://s.amazon-adsystem.com/ecm3?id=ad83e28adb18e528ba8d5eed359bbcc&ex=freewheel.tv&gdpr={gdpr}&gdpr_consent={gdpr_consent}&userId=_Ztbm8IMS5-R7s_IcQZCFA
Expires: Thu, 23 Mar 2023 11:45:50 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 23 Mar 2023 11:45:50 GMT
Connection: keep-alive
Set-Cookie: UID=ad83e28adb18e528ba8d5eed359bbcc; Domain=ads.stickyadstv.com; Expires=Sat, 22-Apr-2023 11:45:50 GMT; Path=/ uid-bp-30833=_Ztbm8IMS5-R7s_IcQZCFA; Domain=ads.stickyadstv.com; Expires=Thu, 06-Apr-2023 11:45:50 GMT; Path=/

                                        
                                            GET /site/36840?redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dbluekai.com%26id%3D%24_BK_UUID HTTP/1.1 
Host: tags.bluekai.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             184.24.45.23
HTTP/2 302 Found
                                            
content-length: 0
location: https://s.amazon-adsystem.com/ecm3?ex=bluekai.com&id=$_BK_UUID
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV", policyref="http://tags.bluekai.com/w3c/p3p.xml"
date: Thu, 23 Mar 2023 11:45:50 GMT
set-cookie: bku=b/X99mTfcsH2LTRi; Path=/; Domain=.bluekai.com; Expires=Sat, 23 Sep 2023 11:45:50 GMT; Secure; SameSite=None bkpa=KJy9RQY5d02pSUHknp1tmexywlJkjsk0wVC65cOpJEBOJEJsJEJsz08CqVabqtT+RVHpKUB6jV6rRt2+JEJsjVB+10DpHZPTJEBWRZhNjV+CSu8Mqt6k1MjojYDpHYD0Ba2YuN2PPDkW9y9ZOH2a; Path=/; Domain=.bluekai.com; Expires=Sat, 23 Sep 2023 11:45:50 GMT; Secure; SameSite=None
X-Firefox-Spdy: h2

                                        
                                            GET /setuid/a9?entity=188&code=Z5huTvgXRB2JMDe-avTjBA&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DxandrHMT%26id%3D%24UID&gdpr_consent= HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             185.89.210.20
HTTP/1.1 307 Redirection
Content-Type: text/html; charset=utf-8
                                            
Server: nginx/1.21.3
Date: Thu, 23 Mar 2023 11:45:50 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fsetuid%2Fa9%3Fentity%3D188%26code%3DZ5huTvgXRB2JMDe-avTjBA%26redir%3Dhttps%253A%252F%252Fs.amazon-adsystem.com%252Fecm3%253Fex%253DxandrHMT%2526id%253D%2524UID%26gdpr_consent%3D
AN-X-Request-Uuid: 91b39e09-4557-48d7-b096-6a54e379f2b5
Set-Cookie: uuid2=876310354587318896; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Jun-2023 11:45:50 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 944.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

                                        
                                            GET /getuid?https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fid=%24UID&ex=appnexus.com&gdpr_consent= HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             185.89.210.20
HTTP/1.1 307 Redirection
Content-Type: text/html; charset=utf-8
                                            
Server: nginx/1.21.3
Date: Thu, 23 Mar 2023 11:45:50 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fs.amazon-adsystem.com%252Fecm3%253Fid%3D%2524UID%26ex%3Dappnexus.com%26gdpr_consent%3D
AN-X-Request-Uuid: 5d0ca1eb-e180-4899-bb02-05ee941e78bc
Set-Cookie: uuid2=4152547536274401631; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Jun-2023 11:45:50 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 944.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             192.229.221.95
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5190
Cache-Control: 'max-age=158059'
Date: Thu, 23 Mar 2023 11:45:50 GMT
Last-Modified: Thu, 23 Mar 2023 10:19:20 GMT
Server: ECAcc (ska/F6AF)
X-Cache: HIT
Content-Length: 727

                                        
                                            GET /bounce?%2Fsetuid%2Fa9%3Fentity%3D188%26code%3DZ5huTvgXRB2JMDe-avTjBA%26redir%3Dhttps%253A%252F%252Fs.amazon-adsystem.com%252Fecm3%253Fex%253DxandrHMT%2526id%253D%2524UID%26gdpr_consent%3D HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             185.89.210.20
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                            
Server: nginx/1.21.3
Date: Thu, 23 Mar 2023 11:45:50 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://s.amazon-adsystem.com/ecm3?ex=xandrHMT&id=Z5huTvgXRB2JMDe-avTjBA
AN-X-Request-Uuid: 78d145bb-049e-47df-b88d-9256a1f5503d
Set-Cookie: anj=dTM7k!M4/YF7/.XF']wIg2E?dwTS:Q!]tbPl1M]o$IyEVU[XNi:ZTGwL>6o^SiI:I[gz=O<A$M:cv='[*=lDf#BI7y)N[UD!!!w0*5!YM; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Jun-2023 11:45:50 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 944.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

                                        
                                            POST / HTTP/1.1 
Host: ocsp.r2m01.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.80.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=137909
Date: Thu, 23 Mar 2023 11:45:50 GMT
Etag: "641ba1e2-1d7"
Expires: Sat, 25 Mar 2023 02:04:19 GMT
Last-Modified: Thu, 23 Mar 2023 00:48:34 GMT
Server: ECAcc (nya/789C)
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: MrjdZZ-2732T0Kq4L-t4M5sYmZFPgPzA_JeFu_s4V9cWjm2iGQSfiA==
Age: 4545

                                        
                                            GET /sync?prid=AMZNPNR1&ao=0&red=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dvisualiq%26id%3D%24%7BUUID%7D HTTP/1.1 
Host: t.myvisualiq.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             3.123.112.172
HTTP/1.1 302 Moved Temporarily
                                            
Cache-Control: no-cache, no-store, must-revalidate
Date: Thu, 23 Mar 2023 11:45:50 GMT
Location: https://t.myvisualiq.net/ul_cb/sync?prid=AMZNPNR1&ao=0&red=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dvisualiq%26id%3D%24%7BUUID%7D
Set-Cookie: tuuid=c2abb277-17d4-4739-b27e-de5ac772b5a1; path=/; expires=Sat, 22-Mar-2025 11:45:50 GMT; domain=.myvisualiq.net c=1679571950; path=/; expires=Sat, 22-Mar-2025 11:45:50 GMT; domain=.myvisualiq.net tuuid_lu=1679571950; path=/; expires=Sat, 22-Mar-2025 11:45:50 GMT; domain=.myvisualiq.net
Content-Length: 0
Connection: keep-alive

                                        
                                            GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fs.amazon-adsystem.com%252Fecm3%253Fid%3D%2524UID%26ex%3Dappnexus.com%26gdpr_consent%3D HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             185.89.210.20
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                            
Server: nginx/1.21.3
Date: Thu, 23 Mar 2023 11:45:50 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://s.amazon-adsystem.com/ecm3?id=0&ex=appnexus.com&gdpr_consent=
AN-X-Request-Uuid: 8c938114-3733-4087-a030-67aadd6007bc
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 944.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             192.229.221.95
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5445
Cache-Control: max-age=89184
Date: Thu, 23 Mar 2023 11:45:50 GMT
Etag: "641ae009-1d7"
Expires: Fri, 24 Mar 2023 12:32:14 GMT
Last-Modified: Wed, 22 Mar 2023 11:01:29 GMT
Server: ECAcc (ska/F7A5)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /match?publisher_dsp_id=416&external_user_id=5mVsSPuYT8yzymyhfPh0CQ&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DimprovedigitalHMT%26id%3D%7BPUB_USER_ID%7D&gdpr_consent= HTTP/1.1 
Host: match.360yield.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             52.28.192.20
HTTP/2 302 Found
content-type: text/plain
                                            
date: Thu, 23 Mar 2023 11:45:50 GMT
content-length: 0
location: https://match.360yield.com/ul_cb/match?publisher_dsp_id=416&external_user_id=5mVsSPuYT8yzymyhfPh0CQ&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DimprovedigitalHMT%26id%3D%7BPUB_USER_ID%7D&gdpr_consent=
set-cookie: tuuid=804028a7-43c7-4223-abb4-62c155e26d21; Expires=Wed, 21 Jun 2023 11:45:50 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure tuuid_lu=1679571950; Expires=Wed, 21 Jun 2023 11:45:50 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
X-Firefox-Spdy: h2

                                        
                                            GET /ecm3?id=cda3296152eb42786fbb835428b19a54&ex=freewheel.tv&gdpr=0&gdpr_consent=&userId= HTTP/1.1 
Host: s.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: ad-id=AwbkFaLfYUP3iiKGk_x2VJQ; ad-privacy=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             52.46.128.147
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: Server
Date: Thu, 23 Mar 2023 11:45:50 GMT
Content-Length: 43
Connection: keep-alive
x-amz-rid: WVGZPA1G3T3BGZW5YW6Y
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    6851dbf491ae442da3314f19e8aff085
Sha1:   ecfec27263608c4ae7cd4f8e0cebb1b061df2ac3
Sha256: c21e2c1246fe45a6750ae6208db2b5965ff6ed63eb80d2ecec3be9c83813428e
                                        
                                            GET /ecm3?id=ad83e28adb18e528ba8d5eed359bbcc&ex=freewheel.tv&gdpr={gdpr}&gdpr_consent={gdpr_consent}&userId=_Ztbm8IMS5-R7s_IcQZCFA HTTP/1.1 
Host: s.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: ad-id=AwbkFaLfYUP3iiKGk_x2VJQ; ad-privacy=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             52.46.128.147
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: Server
Date: Thu, 23 Mar 2023 11:45:50 GMT
Content-Length: 43
Connection: keep-alive
x-amz-rid: 2KQH5A8NP6Q25B2GDT2T
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    6851dbf491ae442da3314f19e8aff085
Sha1:   ecfec27263608c4ae7cd4f8e0cebb1b061df2ac3
Sha256: c21e2c1246fe45a6750ae6208db2b5965ff6ed63eb80d2ecec3be9c83813428e
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             192.229.221.95
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 3984
Cache-Control: max-age=152859
Date: Thu, 23 Mar 2023 11:45:50 GMT
Etag: "641bde79-1d7"
Expires: Sat, 25 Mar 2023 06:13:29 GMT
Last-Modified: Thu, 23 Mar 2023 05:07:05 GMT
Server: ECAcc (ska/F776)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /ups/58516/sync?_origin=1&redir=true&uid=vhTqbaxnSli9A_WJU-NEOA HTTP/1.1 
Host: ups.analytics.yahoo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             3.75.62.37
HTTP/2 302 Found
                                            
date: Thu, 23 Mar 2023 11:45:50 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/58516/sync?_origin=1&redir=true&uid=vhTqbaxnSli9A_WJU-NEOA&verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBO47HGQCEA8u8rGWeAp-h5iwy5XCLOMFEgEBAQGNHWQmZAAAAAAA_eMAAA&S=AQAAArFG700lkZbyG6tQ--nZroI; Expires=Fri, 22 Mar 2024 17:45:50 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             192.229.221.95
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 1547
Cache-Control: max-age=147885
Date: Thu, 23 Mar 2023 11:45:50 GMT
Etag: "641bd490-139"
Expires: Sat, 25 Mar 2023 04:50:35 GMT
Last-Modified: Thu, 23 Mar 2023 04:24:48 GMT
Server: ECAcc (ska/F7A3)
X-Cache: HIT
Content-Length: 313

                                        
                                            GET /match?publisher_dsp_id=416&external_user_id=ABCD&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fid%3D%7BPUB_USER_ID%7D%26ex%3Dimprovedigital.com&gdpr_consent= HTTP/1.1 
Host: match.360yield.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             52.28.192.20
HTTP/2 302 Found
content-type: text/plain
                                            
date: Thu, 23 Mar 2023 11:45:50 GMT
content-length: 0
location: https://match.360yield.com/ul_cb/match?publisher_dsp_id=416&external_user_id=ABCD&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fid%3D%7BPUB_USER_ID%7D%26ex%3Dimprovedigital.com&gdpr_consent=
set-cookie: tuuid=1c9cab78-a99b-44b6-a780-0ee45306d4a4; Expires=Wed, 21 Jun 2023 11:45:50 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure tuuid_lu=1679571950; Expires=Wed, 21 Jun 2023 11:45:50 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
X-Firefox-Spdy: h2

                                        
                                            GET /token?pid=2179&pt=n&puid=i97OcQCQTlSZG9qU4Suw1g&rk=usync-na&gdpr_consent= HTTP/1.1 
Host: pixel.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             213.19.162.90
HTTP/1.1 302 Found
                                            
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: 49049ff336235ad60cb44abcb1cec1d6
Location: https://s.amazon-adsystem.com/ecm3?ex=rubiconprojectHMT&id=i97OcQCQTlSZG9qU4Suw1g
content-length: 0

                                        
                                            GET /cms?partner_id=AMAZON&ex=gemini HTTP/1.1 
Host: cms.analytics.yahoo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             212.82.100.182
HTTP/2 302 Found
content-type: text/html
                                            
date: Thu, 23 Mar 2023 11:45:50 GMT
strict-transport-security: max-age=31536000
via: http/1.1 spdc0106.pbp.ir2.yahoo.com (ApacheTrafficServer)
server: ATS
cache-control: no-store
location: https://ups.analytics.yahoo.com/ups/58725/cms?partner_id=AMAZON&ex=gemini
content-language: en
set-cookie: A1=d=AQABBO47HGQCEEq0J7bgQLFEeAIL_VyjedwFEv__AP8AAAAAAPmbzSMAAAAAgA&S=AQAAAuDVmxNT4-q6iKfN77z9D2Y; Expires=Fri, 22 Mar 2024 17:45:50 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly A3=d=AQABBO47HGQCEEq0J7bgQLFEeAIL_VyjedwFEv__AP8AAAAAAPmbzSMAAAAAgA&S=AQAAAuDVmxNT4-q6iKfN77z9D2Y; Expires=Fri, 22 Mar 2024 17:45:50 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly A1S=d=AQABBO47HGQCEEq0J7bgQLFEeAIL_VyjedwFEv__AP8AAAAAAPmbzSMAAAAAgA&S=AQAAAuDVmxNT4-q6iKfN77z9D2Y&j=GDPR; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure B=doud3bhi1oeve&b=3&s=sr; Expires=Fri, 22 Mar 2024 17:45:50 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/
content-length: 355
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   355
Md5:    7046b937f8c18a8866de9a7105a6ccb4
Sha1:   efa79a9d6bdbf26ebec86e75e610c2d6f95c9cd1
Sha256: 09408eea1ecbaf6abc5d6b919215303d2d5261a29f949814f9dad105cc39cf7d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             192.229.221.95
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4033
Cache-Control: max-age=161174
Date: Thu, 23 Mar 2023 11:45:50 GMT
Etag: "641bfec3-1d7"
Expires: Sat, 25 Mar 2023 08:32:04 GMT
Last-Modified: Thu, 23 Mar 2023 07:24:51 GMT
Server: ECAcc (ska/F757)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /ul_cb/sync?prid=AMZNPNR1&ao=0&red=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dvisualiq%26id%3D%24%7BUUID%7D HTTP/1.1 
Host: t.myvisualiq.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             3.123.112.172
HTTP/1.1 302 Moved Temporarily
                                            
access-control-allow-origin: *
Cache-Control: no-cache, no-store, must-revalidate
cross-origin-resource-policy: cross-origin
Date: Thu, 23 Mar 2023 11:45:50 GMT
Location: https://s.amazon-adsystem.com/ecm3?ex=visualiq&id=0-89809776-29fc-49fa-bbe7-d2654378c0f9
Content-Length: 0
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             192.229.221.95
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 3344
Cache-Control: 'max-age=158059'
Date: Thu, 23 Mar 2023 11:45:50 GMT
Last-Modified: Thu, 23 Mar 2023 10:50:06 GMT
Server: ECAcc (ska/F73A)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /redir/?partnerid=144&partneruserid=H0WbG2HFSUeAMUZ9gZshPg&redirurl=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DequativHMT%26id%3D%26sspid%3DSMART_USER_ID&gdpr_consent= HTTP/1.1 
Host: rtb-csync.smartadserver.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             185.86.138.153
HTTP/1.1 302 Found
                                            
content-length: 0
date: Thu, 23 Mar 2023 11:45:49 GMT
cache-control: no-cache,no-store
location: https://s.amazon-adsystem.com/ecm3?ex=equativHMT&id=&sspid=6422086928230736214
pragma: no-cache
set-cookie: pid=6422086928230736214; expires=Tue, 23 Apr 2024 11:45:50 GMT; domain=smartadserver.com; path=/ TestIfCookieP=ok; expires=Tue, 23 Apr 2024 11:45:50 GMT; domain=smartadserver.com; path=/ csync=144:H0WbG2HFSUeAMUZ9gZshPg; expires=Sat, 23 Mar 2024 11:45:50 GMT; domain=smartadserver.com; path=/
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             192.229.221.95
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 3852
Cache-Control: max-age=115611
Date: Thu, 23 Mar 2023 11:45:50 GMT
Etag: "641b4d7d-1d7"
Expires: Fri, 24 Mar 2023 19:52:41 GMT
Last-Modified: Wed, 22 Mar 2023 18:48:29 GMT
Server: ECAcc (ska/F6D2)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /t/v2?tagid=V2_393725&AMAZON_REGION_SPECIFIC_ENDPOINT=s.amazon-adsystem.com&src.visitorID=UGKtd6GsT-G12XUbUk7sAg HTTP/1.1 
Host: odr.mookie1.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.236.64
HTTP/2 200 OK
content-type: image/gif
                                            
server: nginx
date: Thu, 23 Mar 2023 11:45:50 GMT
content-length: 42
last-modified: Tue, 28 Jun 2022 14:08:50 GMT
etag: "62bb0b72-2a"
accept-ranges: bytes
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    32023bb33cfb2a1990a4ef2d85b6ac16
Sha1:   23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
Sha256: 99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
                                        
                                            GET /p?c1=9&c2=27552257&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dcomscore.com%26id%3D%25AX_UUID%25 HTTP/1.1 
Host: sb.scorecardresearch.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.7
HTTP/2 302 Found
                                            
content-length: 0
date: Thu, 23 Mar 2023 11:45:50 GMT
location: /p2?c1=9&c2=27552257&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dcomscore.com%26id%3D%25AX_UUID%25
set-cookie: UID=13Da2f6562fc3ee9c0996b91679571950; domain=.scorecardresearch.com; path=/; max-age=62208000
accept-ch: UA, Platform, Arch, Model, Mobile
x-cache: Miss from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QIrih6uFCJqq_cG99iR_WEbgBT2IJZJQdIPINhrpSFJDQOVhYKkoww==
X-Firefox-Spdy: h2

                                        
                                            GET /ecm3?ex=bluekai.com&id=$_BK_UUID HTTP/1.1 
Host: s.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: ad-id=AwbkFaLfYUP3iiKGk_x2VJQ; ad-privacy=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             52.46.128.147
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: Server
Date: Thu, 23 Mar 2023 11:45:50 GMT
Content-Length: 43
Connection: keep-alive
x-amz-rid: ZWWKZWYRAKY0Z1268W0N
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    6851dbf491ae442da3314f19e8aff085
Sha1:   ecfec27263608c4ae7cd4f8e0cebb1b061df2ac3
Sha256: c21e2c1246fe45a6750ae6208db2b5965ff6ed63eb80d2ecec3be9c83813428e
                                        
                                            GET /usermatch.gif?partner=amzn&partner_uid=tH7CFexKTbOhSrmCWwFKPA&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dkrux.com%26id%3D HTTP/1.1 
Host: beacon.krxd.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.73.101.116
HTTP/2 204 No Content
                                            
date: Thu, 23 Mar 2023 11:45:50 GMT
set-cookie: _kuid_=Pc6EeKX1; Expires=Tue, 19-Sep-23 11:45:50 GMT; Max-Age=15552000; Domain=.krxd.net; Path=/
cache-control: private, no-cache, no-store
p3p: policyref="https://cdn.krxd.net/kruxcontent/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC"
x-served-by: beacon-n001-dub-prod.krxd.net
x-request-time: D=30 t=1679571950
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             192.229.221.95
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4193
Cache-Control: max-age=153060
Date: Thu, 23 Mar 2023 11:45:50 GMT
Etag: "641bde71-1d7"
Expires: Sat, 25 Mar 2023 06:16:50 GMT
Last-Modified: Thu, 23 Mar 2023 05:06:57 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /v1/lci/sync/adv-amzn/c-23445/?rdr=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3F%26ex%3Dninthdecimal.com%26id%3D%24%7BND_UID%7D HTTP/1.1 
Host: lciapi.ninthdecimal.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             45.79.172.232
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: openresty/1.15.8.2
Date: Thu, 23 Mar 2023 11:45:50 GMT
Content-Length: 151
Connection: keep-alive
Location: https://s.amazon-adsystem.com/ecm3?&ex=ninthdecimal.com&id=E8AC4F2DEE3B1C64982C274702AED02F
Expires: Thu, 23 Mar 2023 11:45:49 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.homedepot.com
Access-Control-Expose-Headers: User-NDAT
Cache-Control: no-cache, private
P3P: CP="This is not a P3P policy! See http://www.ninthdecimal.com/privacy-policy-terms-of-service for more info."
Set-Cookie: ndat=LU+s6GQcO+5HJyyYL9CuAg==; expires=Tue, 19-Sep-23 11:45:50 GMT; domain=.ninthdecimal.com; path=/;Secure;SameSite=None


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   151
Md5:    afb7eb75a581b5f074bc3fa20faeef92
Sha1:   ec5fb2028abee0f37b16f20258b484df356baa7f
Sha256: ba445aec58030a41fdafe0392713f5391fde6c0f1548006e4ffe5f9322473f97
                                        
                                            POST / HTTP/1.1 
Host: status.geotrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             192.229.221.95
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4040
Cache-Control: 'max-age=158059'
Date: Thu, 23 Mar 2023 11:45:50 GMT
Last-Modified: Thu, 23 Mar 2023 10:38:30 GMT
Server: ECAcc (ska/F6D2)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /ecm3?id=216613104464001973833&ex=neustar.biz HTTP/1.1 
Host: s.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: ad-id=AwbkFaLfYUP3iiKGk_x2VJQ; ad-privacy=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             52.46.128.147
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: Server
Date: Thu, 23 Mar 2023 11:45:50 GMT
Content-Length: 43
Connection: keep-alive
x-amz-rid: XJ03E3S70TYY6JF0B60S
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    6851dbf491ae442da3314f19e8aff085
Sha1:   ecfec27263608c4ae7cd4f8e0cebb1b061df2ac3
Sha256: c21e2c1246fe45a6750ae6208db2b5965ff6ed63eb80d2ecec3be9c83813428e
                                        
                                            GET /serving/cookie/match?party=1153&redirect_url=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dadform.net%26id%3D%24%7BUUID%7D HTTP/1.1 
Host: c1.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             37.157.5.142
HTTP/2 302 Found
                                            
server: nginx
date: Thu, 23 Mar 2023 11:45:50 GMT
content-length: 0
location: https://c1.adform.net/serving/cookie/match?CC=1&party=1153&redirect_url=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dadform.net%26id%3D%24%7BUUID%7D
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
set-cookie: C=1; expires=Sun, 23 Apr 2023 11:45:50 GMT; domain=adform.net; path=/
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:45:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ibs:dpid=139200&dpuuid=o2rKQFK1Q6ySyWUZmVanoQ&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dadobe.com%26id%3D%24%7BDD_UUID%7D HTTP/1.1 
Host: dpm.demdex.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.228.21.106
HTTP/1.1 302 Found
                                            
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-2-v046-0a5fb53d3.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=139200&dpuuid=o2rKQFK1Q6ySyWUZmVanoQ&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dadobe.com%26id%3D%24%7BDD_UUID%7D
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=61316928294828957751622342855096688139; Max-Age=15552000; Expires=Tue, 19 Sep 2023 11:45:50 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: x5TFzw7CQgE=
Content-Length: 0
Connection: keep-alive

                                        
                                            GET /partner?adv_id=7922&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dspotx.com%26id%3D%24SPOTX_USER_ID&gdpr_consent= HTTP/1.1 
Host: sync.search.spotxchange.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             185.94.180.125
HTTP/1.1 302 Found
Content-Type: text/plain
                                            
Server: nginx
Date: Thu, 23 Mar 2023 11:45:50 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=426aeb50-c970-11ed-a1c1-191344880306; expires=Thu, 20-Apr-2023 11:45:50 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?adv_id=7922&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dspotx.com%26id%3D%24SPOTX_USER_ID&gdpr_consent=&__user_check__=1&sync_id=426aeb8b-c970-11ed-a1c1-191344880306
X-fe: 128
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0

                                        
                                            GET /pixel?google_nid=a9&google_cm&ex=doubleclick.net HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.211.2
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
                                            
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_nid=a9&google_cm=&ex=doubleclick.net&google_tc=
date: Thu, 23 Mar 2023 11:45:50 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
server: HTTP server (unknown)
content-length: 298
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 23-Mar-2023 12:00:50 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Size:   298
Md5:    1eb4743dc3619413b60a2062377f32ff
Sha1:   d38059ba79af43744b6855e6484403b3f43e0a73
Sha256: 24b27127f875e47df48996afa64166e46e4744d379dd74a4b6e98fea538dedd2
                                        
                                            POST / HTTP/1.1 
Host: status.geotrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             192.229.221.95
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4176
Cache-Control: max-age=98319
Date: Thu, 23 Mar 2023 11:45:50 GMT
Etag: "641b08ad-1d7"
Expires: Fri, 24 Mar 2023 15:04:29 GMT
Last-Modified: Wed, 22 Mar 2023 13:54:53 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:45:50 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 21 Mar 2023 13:56:50 GMT
Expires: Tue, 28 Mar 2023 13:56:49 GMT
Etag: "90c94c5db696d151dcdbfa8fcbc7c43cf7ad6ca3"
Cache-Control: max-age=439258,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ac66e324b7d0b02-OSL

                                        
                                            GET /w/1.0/cm?id=e818ca1e-0c23-caa8-0dd3-096b0ada08b7&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dopenx.com%26id%3D%7BOPENX_ID%7D&gdpr_consent= HTTP/1.1 
Host: us-u.openx.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.98.64.218
HTTP/2 200 OK
content-type: text/html
                                            
vary: Accept, Accept-Encoding
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Thu, 23 Mar 2023 11:45:50 GMT
content-length: 56
content-encoding: gzip
cache-control: private, max-age=0, no-cache
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   56
Md5:    15669dda86db3cbff7835fa202dc0b16
Sha1:   ce788cab9c1aa7e458a3971a59702c410b37e64d
Sha256: 5cc3f958039a8885c4e9526e22d454da47d579b9a02861e7a60b41fa0ba910df
                                        
                                            GET /ecm3?ex=visualiq&id=0-89809776-29fc-49fa-bbe7-d2654378c0f9 HTTP/1.1 
Host: s.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: ad-id=AwbkFaLfYUP3iiKGk_x2VJQ; ad-privacy=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             52.46.128.147
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: Server
Date: Thu, 23 Mar 2023 11:45:50 GMT
Content-Length: 43
Connection: keep-alive
x-amz-rid: S8QB7VWF05Y88VJPYZ4A
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    6851dbf491ae442da3314f19e8aff085
Sha1:   ecfec27263608c4ae7cd4f8e0cebb1b061df2ac3
Sha256: c21e2c1246fe45a6750ae6208db2b5965ff6ed63eb80d2ecec3be9c83813428e
                                        
                                            GET /sync_a9/https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dbidswitch.com%26id%3D%24%7BUUID%7D HTTP/1.1 
Host: x.bidswitch.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             3.122.65.10
HTTP/2 302 Found
                                            
date: Thu, 23 Mar 2023 11:45:50 GMT
content-length: 0
location: https://x.bidswitch.net/ul_cb/sync_a9/https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dbidswitch.com%26id%3D%24%7BUUID%7D
cache-control: no-cache, no-store, must-revalidate
set-cookie: tuuid=92373fef-4bb3-4302-b60a-2a64c23444e8; path=/; expires=Fri, 22-Mar-2024 11:45:50 GMT; domain=.bidswitch.net; samesite=none; secure c=1679571950; path=/; expires=Fri, 22-Mar-2024 11:45:50 GMT; domain=.bidswitch.net; samesite=none; secure tuuid_lu=1679571950; path=/; expires=Fri, 22-Mar-2024 11:45:50 GMT; domain=.bidswitch.net; samesite=none; secure c=1679571950; path=/; expires=Fri, 22-Mar-2024 11:45:50 GMT; domain=.bidswitch.net; samesite=none; secure
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.r2m02.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.80.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 23 Mar 2023 11:45:50 GMT
Last-Modified: Thu, 23 Mar 2023 09:58:27 GMT
Server: ECAcc (bsa/EB4C)
X-Cache: Miss from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: M3AC-connTlMH2yMIjOE6yjmT4dYzriMjKUCqzyL-lS60-LHGwUS_w==
Age: 6443

                                        
                                            GET /ecm3?&ex=ninthdecimal.com&id=E8AC4F2DEE3B1C64982C274702AED02F HTTP/1.1 
Host: s.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: ad-id=AwbkFaLfYUP3iiKGk_x2VJQ; ad-privacy=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             52.46.128.147
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: Server
Date: Thu, 23 Mar 2023 11:45:50 GMT
Content-Length: 43
Connection: keep-alive
x-amz-rid: 7JYFEHSCE3FHR194E26C
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    6851dbf491ae442da3314f19e8aff085
Sha1:   ecfec27263608c4ae7cd4f8e0cebb1b061df2ac3
Sha256: c21e2c1246fe45a6750ae6208db2b5965ff6ed63eb80d2ecec3be9c83813428e
                                        
                                            POST / HTTP/1.1 
Host: ocsp.r2m01.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.80.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 23 Mar 2023 11:45:50 GMT
Last-Modified: Thu, 23 Mar 2023 10:40:04 GMT
Server: ECAcc (nya/1C5E)
X-Cache: Miss from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: KrlP0N-wAj1gj51qEnoBt1eJkzcK-ifjWtLgjs8ZYGD6cJbf0SAd1Q==
Age: 3946

                                        
                                            GET /Serving?cn=cs&rtu=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsizmek%26id%3D%5B%25tp_UserID%25%5D HTTP/1.1 
Host: bs.serving-sys.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             3.123.193.201
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
                                            
date: Thu, 23 Mar 2023 11:45:50 GMT
content-length: 365
location: https://lm.serving-sys.com/lm/acs?json={"GUID":"bd1eb202-a3d8-46c7-94bf-dc9b544614b9","Time":"20230323T114550.794987"}&rtu=https://s.amazon-adsystem.com/ecm3?ex=sizmek&id=[%tp_UserID%]
cache-control: private
pragma: no-cache
expires: Sun, 05-Jun-2005 22:00:00 GMT
server: Microsoft-IIS/10.0
set-cookie: r1=1679571950_1; SameSite=None; Secure eyeblaster=; expires=Mon, 01-Jan-2000 00:00:00 GMT; domain=.serving-sys.com; path=/; SameSite=None; Secure u2=bd1eb202-a3d8-46c7-94bf-dc9b544614b94LL060; expires=Sat, 22-Apr-2023 11:45:00 GMT; domain=.serving-sys.com; path=/; SameSite=None; Secure
x-powered-by: ASP.NET
p3p: CP="NOI DEVa OUR BUS UNI"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (322)
Size:   365
Md5:    ec71da3d6cb1b3978d736e42272d1463
Sha1:   af3a8f1094deaed4326e9e5f838f943d3fa34c0e
Sha256: a472b3305f2ecfba42474cffd97697306ec1340a0721344664b76883c99f1a56
                                        
                                            GET /pixel?google_nid=a9&google_hm=0DhG676-SXSItlc_hg0S_g& HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.211.2
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
                                            
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_nid=a9&google_hm=0DhG676-SXSItlc_hg0S_g&google_tc=
date: Thu, 23 Mar 2023 11:45:50 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
server: HTTP server (unknown)
content-length: 297
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 23-Mar-2023 12:00:50 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Size:   297
Md5:    8ebe522df9c25cb6191fb11d8d1bf352
Sha1:   496c4fbe421e010edd71d04df389560cab8579eb
Sha256: 6c55a7c6a848e26ee2d7fff4bef31ebaf0db68b6fef88b6d18cc5c0ffa3a7455
                                        
                                            POST /gsgccr3dvtlsca2020 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 11:45:50 GMT
Content-Length: 1414
Connection: keep-alive
Expires: Mon, 27 Mar 2023 08:17:36 GMT
ETag: "0ff891dbf8433d17ff2bfa40670db8cdfd0690fc"
Last-Modified: Thu, 23 Mar 2023 08:17:37 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1465
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac66e3428c8b51d-OSL


--- Additional Info ---
Magic:  data
Size:   1414
Md5:    e9bef1fa97cfe47d659e0b3f4a49d04c
Sha1:   0ff891dbf8433d17ff2bfa40670db8cdfd0690fc
Sha256: bad29c0e72d952562ca2fe4aebffaf71830b7aac3246dc600671841eb3944f70
                                        
                                            GET /pixel?google_nid=a9&google_cm=&ex=doubleclick.net&google_tc= HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             216.58.211.2
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
                                            
location: https://s.amazon-adsystem.com/ecm3?ex=doubleclick.net&google_error=3
date: Thu, 23 Mar 2023 11:45:50 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
server: HTTP server (unknown)
content-length: 269
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Size:   269
Md5:    fbf0d138420e5fcaf0ccb5e6052d2db0
Sha1:   d25ee7313866f4f55550f6b6dfa35da380c676ec
Sha256: 99a164b5263800f0d7d6fbfae9d0dec4e9895ef0118a08c17065f1464ec6ec31
                                        
                                            GET /token?pid=2179&pt=n HTTP/1.1 
Host: token.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             213.19.162.90
HTTP/1.1 302 Found
                                            
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: 17c962550296893d145ef1b8078fc6d6
Location: https://s.amazon-adsystem.com/ecm3?id=N5rto0YAKUkTSxUwdhvescWWwYjZzChgQG1x_JmYjWc&ex=rubiconproject.com&status=ok
content-length: 0

                                        
                                            GET /p2?c1=9&c2=27552257&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dcomscore.com%26id%3D%25AX_UUID%25 HTTP/1.1 
Host: sb.scorecardresearch.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.111.7
HTTP/2 302 Found
                                            
content-length: 0
location: https://s.amazon-adsystem.com/ecm3?ex=comscore.com&id=73ff9d413353fa9df263b19a9474997b
date: Thu, 23 Mar 2023 11:45:50 GMT
accept-ch: UA, Platform, Arch, Model, Mobile
x-cache: Miss from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Xf9oURBTlieQeR3W6FQSRlZik2BpB85AW2tL060ioHLarw-r3zyWXw==
X-Firefox-Spdy: h2

                                        
                                            GET /ul_cb/match?publisher_dsp_id=416&external_user_id=5mVsSPuYT8yzymyhfPh0CQ&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DimprovedigitalHMT%26id%3D%7BPUB_USER_ID%7D&gdpr_consent= HTTP/1.1 
Host: match.360yield.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             52.28.192.20
HTTP/2 200 OK
content-type: image/gif
                                            
date: Thu, 23 Mar 2023 11:45:50 GMT
content-length: 43
access-control-allow-origin: *
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /ul_cb/match?publisher_dsp_id=416&external_user_id=ABCD&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fid%3D%7BPUB_USER_ID%7D%26ex%3Dimprovedigital.com&gdpr_consent= HTTP/1.1 
Host: match.360yield.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             52.28.192.20
HTTP/2 200 OK
content-type: image/gif
                                            
date: Thu, 23 Mar 2023 11:45:50 GMT
content-length: 43
access-control-allow-origin: *
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             192.229.221.95
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 3725
Cache-Control: max-age=165164
Date: Thu, 23 Mar 2023 11:45:50 GMT
Etag: "641c0f8d-1d7"
Expires: Sat, 25 Mar 2023 09:38:34 GMT
Last-Modified: Thu, 23 Mar 2023 08:36:29 GMT
Server: ECAcc (ska/F6AF)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /ups/58516/sync?_origin=1&redir=true&uid=vhTqbaxnSli9A_WJU-NEOA&verify=true HTTP/1.1 
Host: ups.analytics.yahoo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             3.75.62.37
HTTP/2 204 No Content
                                            
date: Thu, 23 Mar 2023 11:45:50 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBO47HGQCEMD80I4BxXcOWmzRuU8tRDkFEgEBAQGNHWQmZAAAAAAA_eMAAA&S=AQAAAupiDt9VX1Dv21qorxMJyKg; Expires=Fri, 22 Mar 2024 17:45:50 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.r2m01.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.80.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=148834
Date: Thu, 23 Mar 2023 11:45:50 GMT
Etag: "641bcee7-1d7"
Expires: Sat, 25 Mar 2023 05:06:24 GMT
Last-Modified: Thu, 23 Mar 2023 04:00:39 GMT
Server: ECAcc (bsa/EACC)
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: o30ZXVn_h6Z8gfQDtFvZUMcWvAWbOQA3Nm_Zr7BNpdQ29NRXThw3mg==
Age: 3945

                                        
                                            GET /ul_cb/sync_a9/https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dbidswitch.com%26id%3D%24%7BUUID%7D HTTP/1.1 
Host: x.bidswitch.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             3.122.65.10
HTTP/2 200 OK
content-type: image/gif
                                            
date: Thu, 23 Mar 2023 11:45:50 GMT
content-length: 43
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /ups/58725/cms?partner_id=AMAZON&ex=gemini HTTP/1.1 
Host: ups.analytics.yahoo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             3.75.62.37
HTTP/2 302 Found
                                            
date: Thu, 23 Mar 2023 11:45:50 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/58725/cms?partner_id=AMAZON&ex=gemini&verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBO47HGQCEHDP3sPBV3IwTCyr3bxtY80FEgEBAQGNHWQmZAAAAAAA_eMAAA&S=AQAAAiflK-vehGoUV3Xrxf0MiVc; Expires=Fri, 22 Mar 2024 17:45:50 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2

                                        
                                            GET /partner?adv_id=7922&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dspotx.com%26id%3D%24SPOTX_USER_ID&gdpr_consent=&__user_check__=1&sync_id=426aeb8b-c970-11ed-a1c1-191344880306 HTTP/1.1 
Host: sync.search.spotxchange.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             185.94.180.125
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: nginx
Date: Thu, 23 Mar 2023 11:45:50 GMT
Content-Length: 43
Connection: keep-alive
Set-Cookie: audience=427f2ed4-c970-11ed-b1c7-143d56a10406; expires=Thu, 20-Apr-2023 11:45:50 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 112
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    55fade2068e7503eae8d7ddf5eb6bd09
Sha1:   317496a096d6c86486a71d4521994bcd171a6bb3
Sha256: e586a84d8523747f42e510d78e141015b6424cf67d612854e892a7bcedc8ec9e
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             192.124.249.41
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: Sucuri/Cloudproxy
Date: Thu, 23 Mar 2023 11:45:50 GMT
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Wed, 22 Mar 2023 21:57:17 GMT
Expires: Thu, 23 Mar 2023 21:57:17 GMT
ETag: "c5ebaf628d12f21541a3fc28d3a96fa632172794"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"


--- Additional Info ---
Magic:  data
Size:   1778
Md5:    f162dc523c1ba2ae45d6cf2223d1f175
Sha1:   c5ebaf628d12f21541a3fc28d3a96fa632172794
Sha256: 54984c798174436def781af75890855c88e9632c40f66820d4a5041e6618e2d2
                                        
                                            GET /demconf.jpg?et:ibs%7cdata:dpid=139200&dpuuid=o2rKQFK1Q6ySyWUZmVanoQ&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dadobe.com%26id%3D%24%7BDD_UUID%7D HTTP/1.1 
Host: dpm.demdex.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.228.21.106
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
DCS: dcs-prod-irl1-1-v046-077489ad8.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-TID: 46H2kUCWR9Y=
Content-Length: 59
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   59
Md5:    1251cd5e5c2def4c046309375f87c1c1
Sha1:   e02d6b0c6a5c495c15985e2832e335eda8528c80
Sha256: 4e7010cc46fa361c88e57e3346d27421cf3b8a8bf5f39b43fc45997c60cb1c13
                                        
                                            GET /pixel?google_nid=a9&google_hm=0DhG676-SXSItlc_hg0S_g&google_tc= HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             216.58.211.2
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
                                            
location: https://s.amazon-adsystem.com/ecm3?ex=googleHMT&google_error=3
date: Thu, 23 Mar 2023 11:45:50 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
server: HTTP server (unknown)
content-length: 263
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Size:   263
Md5:    f0ca1ea607a79011f5be83110ecdfdac
Sha1:   a32feb601b2881d64f0e7a146e607120725a58dc
Sha256: 26aaf87498835752027dae5e9fa373147f99b712d0b51ded4ca3a5c597029e4a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             192.229.221.95
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 6347
Cache-Control: max-age=101569
Date: Thu, 23 Mar 2023 11:45:50 GMT
Etag: "641b0ce4-1d7"
Expires: Fri, 24 Mar 2023 15:58:39 GMT
Last-Modified: Wed, 22 Mar 2023 14:12:52 GMT
Server: ECAcc (ska/F7A5)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /xuid?mid=8341&xuid=i23uTwioQDulxv_SI3MmSA&dongle=az46&rdir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DtripleliftHMT%26id%3D%24UID&gdpr_consent= HTTP/1.1 
Host: eb2.3lift.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             13.248.245.213
HTTP/2 200 OK
content-type: image/gif
                                            
date: Thu, 23 Mar 2023 11:45:50 GMT
content-length: 37
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   37
Md5:    3eacd0132310ea44cad756b378a3bc07
Sha1:   e2216a7e9b73f5cb0279351c78ce61c33475cea7
Sha256: bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
                                        
                                            GET /usermatchredir?s=184155&cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dindex%26id%3D__UID__ HTTP/1.1 
Host: ssum-sec.casalemedia.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             185.80.36.245
HTTP/1.1 302 Found
                                            
Date: Thu, 23 Mar 2023 11:45:50 GMT
Server: Apache
Cache-Control: no-cache
Expires: 0
Location: /usermatchredir?cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dindex%26id%3D__UID__&s=184155&C=1
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 0
Set-Cookie: CMID=ZBw77hRFCvKp3T5XZwKPYwAA; Path=/; Domain=casalemedia.com; Expires=Fri, 22 Mar 2024 11:45:50 GMT; Max-Age=31536000; Secure; SameSite=None CMPS=5301; Path=/; Domain=casalemedia.com; Expires=Wed, 21 Jun 2023 11:45:50 GMT; Max-Age=7776000; Secure; SameSite=None CMPRO=5301; Path=/; Domain=casalemedia.com; Expires=Wed, 21 Jun 2023 11:45:50 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=500
Connection: Keep-Alive

                                        
                                            GET /w/1.0/sd?id=537072986&val=lFJx3bmcR4yct10nceHM_Q&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3DopenxHMT%26id%3D%7BOPENX_RTB_USERID%7D&gdpr_consent= HTTP/1.1 
Host: us-u.openx.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.98.64.218
HTTP/2 204 No Content
content-type: image/gif
                                            
vary: Accept
server: OXGW/0.0.0
date: Thu, 23 Mar 2023 11:45:50 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

                                        
                                            GET /ups/58725/cms?partner_id=AMAZON&ex=gemini&verify=true HTTP/1.1 
Host: ups.analytics.yahoo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             3.75.62.37
HTTP/2 204 No Content
                                            
date: Thu, 23 Mar 2023 11:45:50 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBO47HGQCEBWun_6Q0B-zhb0Aoy5hpkgFEgEBAQGNHWQmZAAAAAAA_eMAAA&S=AQAAAj_1PksdKoQsFZ0GiYGhxY8; Expires=Fri, 22 Mar 2024 17:45:50 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2

                                        
                                            GET /ecm3?id=0&ex=appnexus.com&gdpr_consent= HTTP/1.1 
Host: s.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: ad-id=AwbkFaLfYUP3iiKGk_x2VJQ; ad-privacy=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             52.46.128.147
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: Server
Date: Thu, 23 Mar 2023 11:45:50 GMT
Content-Length: 43
Connection: keep-alive
x-amz-rid: BM9NDR560AQ4KTGKMC97
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    6851dbf491ae442da3314f19e8aff085
Sha1:   ecfec27263608c4ae7cd4f8e0cebb1b061df2ac3
Sha256: c21e2c1246fe45a6750ae6208db2b5965ff6ed63eb80d2ecec3be9c83813428e
                                        
                                            GET /sync?UIAM&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dtelaria.com%26id%3D%5BPARTNER_ID%5D HTTP/1.1 
Host: amazon.partners.tremorhub.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.85.161.91
HTTP/2 302 Found
                                            
date: Thu, 23 Mar 2023 11:45:50 GMT
content-length: 0
location: https://s.amazon-adsystem.com/ecm3?ex=telaria.com&id=56ecd4010e9248648a1ac4c1f5b7fe7e
server: Apache-Coyote/1.1
p3p: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/'
set-cookie: tvid=adcf759d3f1f4d75b7253d44c922a08d; Domain=.tremorhub.com; Expires=Fri, 22-Mar-2024 17:34:10 GMT; Path=/; Secure; SameSite=None tv_UIAM=56ecd4010e9248648a1ac4c1f5b7fe7e; Domain=.tremorhub.com; Expires=Sat, 22-Mar-2025 23:22:30 GMT; Path=/; Secure; SameSite=None
X-Firefox-Spdy: h2

                                        
                                            GET /ecm3?ex=rubiconprojectHMT&id=i97OcQCQTlSZG9qU4Suw1g HTTP/1.1 
Host: s.amazon-adsystem.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: ad-id=AwbkFaLfYUP3iiKGk_x2VJQ; ad-privacy=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             52.46.128.147
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: Server
Date: Thu, 23 Mar 2023 11:45:50 GMT
Content-Length: 43
Connection: keep-alive
x-amz-rid: 1FT19BR99Q93Y3T8CY92
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    6851dbf491ae442da3314f19e8aff085
Sha1:   ecfec27263608c4ae7cd4f8e0cebb1b061df2ac3
Sha256: c21e2c1246fe45a6750ae6208db2b5965ff6ed63eb80d2ecec3be9c83813428e
                                        
                                            GET /AdServer/UCookieSetPug?rd=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dpubmatic.com%26id%3D%23PM_USER_ID&gdpr_consent= HTTP/1.1 
Host: image6.pubmatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             185.64.190.78
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
                                            
location: /AdServer/UCookieSetPug?rd=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dpubmatic.com%26id%3D%23PM_USER_ID&gdpr_consent=&rdf=1
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
set-cookie: KTPCACOOKIE=YES; domain=pubmatic.com; path=/; max-age=86400; secure;
date: Thu, 23 Mar 2023 11:45:50 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /amazon/1/get?_url=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsemasio%26id%3D%24%7BUIPID%28%29%7D HTTP/1.1 
Host: uipglob.semasio.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             77.243.60.138
HTTP/1.1 302 Found
                                            
location: /amazon/1/get2?_url=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsemasio%26id%3D%24%7BUIPID%28%29%7D
uip-response-status: Ok
frontend-id: 1
set-cookie: SEUNCY=11431A692E2474D9; Expires=Fri, 22 Mar 2024 11:46:01 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Sat, 01 Jan 2011 12:00:00 GMT
p3p: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT"
pragma: no-cache
date: Thu, 23 Mar 2023 11:46:01 GMT
content-length: 0
routing-server-id: -1
access-control-allow-origin: *

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             192.229.221.95
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4374
Cache-Control: 'max-age=158059'
Date: Thu, 23 Mar 2023 11:45:50 GMT
Last-Modified: Thu, 23 Mar 2023 10:32:56 GMT
Server: ECAcc (ska/F776)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /fr/r.php?p=558293300959460&e=TT-YSKnbQIOpy22DH792Ng&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dfbca%26id%3DTT-YSKnbQIOpy22DH792Ng&s=1679571949&h=NUhMUmtEMFdtKzBFbWtwTrsV2ntXu7VX_TsrzgQOfKBdOflg HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             157.240.200.35
HTTP/2 302 Found
content-type: text/html; charset="utf-8"
                                            
location: https://s.amazon-adsystem.com/ecm3?ex=fbca&id=TT-YSKnbQIOpy22DH792Ng
date: Thu, 23 Mar 2023 04:45:50 PDT
x-fb-rlafr: 0
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com *.fbcdn.net 'unsafe-eval';script-src *.facebook.com *.fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=0
expires: Thu, 23 Mar 2023 04:45:50 PDT
x-content-type-options: nosniff
x-xss-protection: 0
strict-transport-security: max-age=15552000; preload
x-fb-debug: DppsjLwFRJD5iHBvO9dL0/Im0B/fkI6LKYGBUBmnkrccm8Y/gDUYyR39rNBsY30jT25lOK0OF2VQmHdXEAYVaw==
content-length: 0
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             192.229.221.95
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5188
Cache-Control: max-age=99346
Date: Thu, 23 Mar 2023 11:45:50 GMT
Etag: "641b08bc-1d7"
Expires: Fri, 24 Mar 2023 15:21:36 GMT
Last-Modified: Wed, 22 Mar 2023 13:55:08 GMT
Server: ECAcc (ska/F7A3)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /AdServer/UCookieSetPug?rd=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dpubmatic.com%26id%3D%23PM_USER_ID&gdpr_consent=&rdf=1 HTTP/1.1 
Host: image6.pubmatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.64.190.78
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
date: Thu, 23 Mar 2023 11:45:50 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             192.229.221.95
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4033
Cache-Control: max-age=161174
Date: Thu, 23 Mar 2023 11:45:50 GMT
Etag: "641bfec3-1d7"
Expires: Sat, 25 Mar 2023 08:32:04 GMT
Last-Modified: Thu, 23 Mar 2023 07:24:51 GMT
Server: ECAcc (ska/F757)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /load/?p=204&g=8888&j=0 HTTP/1.1 
Host: loadus.exelator.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.78.254.47
HTTP/2 204 No Content
                                            
server: nginx
date: Thu, 23 Mar 2023 11:45:50 GMT
cache-control: no-cache
x-powered-by: Undertow/1
access-control-allow-credentials: true
p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA, policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA
X-Firefox-Spdy: h2

                                        
                                            GET /usermatchredir?cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dindex%26id%3D__UID__&s=184155&C=1 HTTP/1.1 
Host: ssum-sec.casalemedia.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             185.80.36.245
HTTP/1.1 302 Found