flingsingle.com/
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: flingsingle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Server: Varnish
Retry-After: 0
Location: https://flingsingle.com/
Accept-Ranges: bytes
Date: Wed, 30 Nov 2022 02:42:01 GMT
X-Served-By: cache-bma1673-BMA
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1669776121.398020,VS0,VE0
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a5daf4dc99951793ae2315d4795e8146
4427507ca4d3a5632cc8f598afbc85e2195d00bd
94fb64c1c826ed7099283c0bedb3cea7ac7e1d9526794cb9fad6e761f5989d32
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94FB64C1C826ED7099283C0BEDB3CEA7AC7E1D9526794CB9FAD6E761F5989D32"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10748
Expires: Wed, 30 Nov 2022 05:41:09 GMT
Date: Wed, 30 Nov 2022 02:42:01 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 4ed065cb23b5fca1a179dd73b3c5b7b2
4422eb24688f5e056fc1b18b127c7f63b1dbf5e0
b723d770d0dec7441d8505dc5a4e7d34f55c9f564ec52f20d9b70c7c3a0d9d35
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1332
Cache-Control: max-age=115882
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 02:42:01 GMT
Etag: "6385df6f-1d7"
Expires: Thu, 01 Dec 2022 10:53:23 GMT
Last-Modified: Tue, 29 Nov 2022 10:31:11 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9fce5679881bf302a8978a0b462f01a9
b699fe030ea13ac73813e655c42ed9b531925e2b
a3ec545a8f9364ac9062eddb41279e1465687a1b60f9c1dec6b3a3df8b033eb3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3EC545A8F9364AC9062EDDB41279E1465687A1B60F9C1DEC6B3A3DF8B033EB3"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3929
Expires: Wed, 30 Nov 2022 03:47:30 GMT
Date: Wed, 30 Nov 2022 02:42:01 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 30 Nov 2022 02:19:39 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1342
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: C5uQvVwHG7C6hd/qcMx2IuWMIL78jtPTmY3LtoXjcejuyd2i3dH0b1lSzFZYxhTqT/cdPFQvxNw=
x-amz-request-id: GPZCCAB7Q75H5EBS
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 30 Nov 2022 01:45:02 GMT
age: 3419
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 02:42:01 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
flingsingle.com/
200 OK 181 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash f4ec9254758f9b70093c10668e93a01b
5645023631091f088df987ace78ab0cb30aca36c
930c097c099d770ed3caf097e6303a0d0852ed380d2d3df307d5fd0528af3ef7
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: flingsingle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/html; charset=utf-8
etag: "7b6319b1c074b17e553333899f5b8538425b351815198cfc6f731e7f4446d11b-br"
last-modified: Tue, 29 Nov 2022 10:03:37 GMT
strict-transport-security: max-age=31556926
accept-ranges: bytes
date: Wed, 30 Nov 2022 02:42:01 GMT
x-served-by: cache-bma1661-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669776122.735814,VS0,VE104
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 181
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/xNQXiVJki-c
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/xNQXiVJki-c
IP
Hash 86b18149d98292b89945a07869eb1a59
8c013027e3dd82dc37c00b77cf54662398044a2e
27c25391cf2a150734f92c4b37892e9591cb35c52523029a114873b46f460243
POST /s/gts1d4/xNQXiVJki-c HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 02:42:02 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ttk.tautraking.com/f4f9aeb4-2fce-4a55-9512-9914344b370d?campid=directtosite&s1=root&affid=2144
302 Found 0 B URL HTTP/2 ttk.tautraking.com/f4f9aeb4-2fce-4a55-9512-9914344b370d?campid=directtosite&s1=root&affid=2144
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /f4f9aeb4-2fce-4a55-9512-9914344b370d?campid=directtosite&s1=root&affid=2144 HTTP/1.1
Host: ttk.tautraking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 30 Nov 2022 02:42:02 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://etphoneme.com/?a=2144&c=78153&s2=w27n4hulk0oc92rkilcpu7am&s3=root&s1=root&s4=VLS-w27n4hulk0oc92rkilcpu7am
pragma: no-cache
set-cookie: f4f9aeb4-2fce-4a55-9512-9914344b370d-v4=871Z1l8ZxTPzCSxNuJ0vTC753Jnom3HAelP4E1XSGaI; Max-Age=86400; Expires=Thu, 01-Dec-2022 02:42:02 GMT; Domain=ttk.tautraking.com; Path=/; Secure; HttpOnly;SameSite=None
cc-v4=59dYwwtQEwnIUSwHlW4SnuHaebJ8d1lJLM7F30RGWjaRxJHJxxz0Oi835I1xJGuEFEI%2FnQ6axuYO0%2FWY13X%2F5wF7D3MStfNRCdqNTvUPsBwithes3%2FYyVRaOuV42JtlUpF3YJAxKm8e3T%2FJnSAV9ng%3D%3D; Max-Age=31536000; Expires=Thu, 30-Nov-2023 02:42:02 GMT; Domain=ttk.tautraking.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 30 Nov 2022 02:08:56 GMT
cache-control: public,max-age=3600
age: 1986
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 59a9c6bfff5371c23d56569c84ffe5bb
2006ae0f9395bf60b7e1f1bf34792d12d594c0e4
f92fffe6b01cb0a2e080fc43245b4a3d211dfc078342f43ec778ca58743f7114
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Wed, 30 Nov 2022 02:42:02 GMT
Server: ECS (dcb/7F82)
X-Cache: Miss from cloudfront
Via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: IIfuMlOW_y85UE4bW2spMYjssr5tOiJvRzIzi_oqT67Iodft96WuMw==
ocsp.digicert.com/
200 OK 471 B IP
Hash 3c8c689bd654417640d85f3da51af313
85123b6d46230a23d03768bf304b386e5d301305
516138ca79703b45e904d32d7dde1c1e9fd35995b9f1bb1331c547542745676d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1334
Cache-Control: max-age=110820
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 02:42:02 GMT
Etag: "6385cba8-1d7"
Expires: Thu, 01 Dec 2022 09:29:02 GMT
Last-Modified: Tue, 29 Nov 2022 09:06:48 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: VT1bUcyim9XWvM12c41tsg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: hV2XTz4Dw6jYoKNK2UKV/tcG1Q4=
etphoneme.com/?a=2144&c=78153&s2=w27n4hulk0oc92rkilcpu7am&s3=root&s1=root&s4=VLS-w27n4hulk0oc92rkilcpu7am
302 Found 0 B URL HTTP/2 etphoneme.com/?a=2144&c=78153&s2=w27n4hulk0oc92rkilcpu7am&s3=root&s1=root&s4=VLS-w27n4hulk0oc92rkilcpu7am
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?a=2144&c=78153&s2=w27n4hulk0oc92rkilcpu7am&s3=root&s1=root&s4=VLS-w27n4hulk0oc92rkilcpu7am HTTP/1.1
Host: etphoneme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 30 Nov 2022 02:42:03 GMT
content-length: 0
location: https://odbzwk.astonlshingdates.com/c/1e3a4e532f1c7040?s1=154299&s2=1651505&j6=1&j8=1&j9=1&s3=2144&s5=root&click_id=3518281939
server: nginx/1.18.0
set-cookie: sid=KvgpdWOfJzmG3UlmVLRPy/0m++BcZzJ4MeF3H5To+tBRf7crlknX8g==; Domain=etphoneme.com; Path=/; Secure; HttpOnly; SameSite=None
trk=HaJXQlDBXXJRmKsv+8lP5/0m++BcZzJ4MeF3H5To+tBRf7crlknX8g==; Max-Age=63158399; Expires=Sat, 30-Nov-2024 02:42:02 GMT; Domain=etphoneme.com; Path=/; Secure; HttpOnly; SameSite=None
c7819=KvgpdWOfJznKWR4gX7ogPszRK63wM8y6eAIIq0oA60G3ODUbDyLjrw==; Max-Age=2591999; Expires=Fri, 30-Dec-2022 02:42:02 GMT; Domain=etphoneme.com; Path=/; Secure; HttpOnly; SameSite=None
pt30=9cc358e396b540c2af93b38ef5324ebc; Max-Age=2592000; Expires=Fri, 30-Dec-2022 02:42:03 GMT; Domain=etphoneme.com; Path=/; Secure; HttpOnly; SameSite=None
ptc=9cc358e396b540c2af93b38ef5324ebc; Max-Age=157680000; Expires=Mon, 29-Nov-2027 02:42:03 GMT; Domain=etphoneme.com; Path=/; Secure; HttpOnly; SameSite=None
ptbs=9cc358e396b540c2af93b38ef5324ebc; Domain=etphoneme.com; Path=/; Secure; HttpOnly; SameSite=None
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16458
Expires: Wed, 30 Nov 2022 07:16:21 GMT
Date: Wed, 30 Nov 2022 02:42:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16458
Expires: Wed, 30 Nov 2022 07:16:21 GMT
Date: Wed, 30 Nov 2022 02:42:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16458
Expires: Wed, 30 Nov 2022 07:16:21 GMT
Date: Wed, 30 Nov 2022 02:42:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16458
Expires: Wed, 30 Nov 2022 07:16:21 GMT
Date: Wed, 30 Nov 2022 02:42:03 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48df8a6f-5803-4ce0-ab84-1efc8ca3e251.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48df8a6f-5803-4ce0-ab84-1efc8ca3e251.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8825a2c5c0d98323f489e0b816b7f1d8
05f46985ea4ace57460120876da8e19db08857b3
1d12590a78b32146d6f1d107fb93bdb6cb45228d15babd087c0111495d7138e1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48df8a6f-5803-4ce0-ab84-1efc8ca3e251.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8885
x-amzn-requestid: 67e1ba67-b4fb-42c8-985d-f34164101c7b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhIGGtloAMFxjw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867bcd-295995bb1123430c55659fe3;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:38:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vOFoi7vW7NluI5wQB03BGh9efp_jvCoH1sUh4s1ubG_JAC6KcDkHxg==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 22:15:52 GMT
age: 15971
etag: "05f46985ea4ace57460120876da8e19db08857b3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2fcfcea6-8f79-45f4-b081-2b90a5d95f8f.jpeg
200 OK 5.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2fcfcea6-8f79-45f4-b081-2b90a5d95f8f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash acb1e555533322dbfeb8e0d8c956c43d
e1eec39299f081b53c647953b57da4f2f1ba10bc
579d2fd6aab6bba72a405bb1d0259856878adc90671a88b2b0edf5a284dba1f9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2fcfcea6-8f79-45f4-b081-2b90a5d95f8f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5492
x-amzn-requestid: 4b09d9a8-09fa-40e5-a996-8a6ad9f8283e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgE9E5TIAMF6ug=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a1f-2f17467d7a6318796d01fd2e;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:11 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 6QhRECWKI2TAlt2bgVuKlQPCeyzkes1_5i5kJ4FQYD591KBADY9qVg==
via: 1.1 42ef990e439ae115ff739f04e3945234.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:52:45 GMT
age: 17358
etag: "e1eec39299f081b53c647953b57da4f2f1ba10bc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29e8368b-e5a8-4256-a456-b724e13819e4.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29e8368b-e5a8-4256-a456-b724e13819e4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f621857774e4b4adda95f58081644859
639165dc66d171b8266f22cd495181427112bc80
341fd33d3d9486079c182d60e21c355244b6597e6e09ba51ecee2e331b38ca2e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29e8368b-e5a8-4256-a456-b724e13819e4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10068
x-amzn-requestid: 7f386e94-3c17-44a1-a36b-3d0eeff4623d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhGvEQQoAMFihA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867bc4-5069acfd038ffb2c124b7bd8;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:38:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Bh6VQ3BLEXcZKHFyJxHVGQWVQm-w2s0786t8SQOcHQUaNvSFc1rg-A==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:52:51 GMT
etag: "639165dc66d171b8266f22cd495181427112bc80"
content-type: image/jpeg
age: 17352
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F250668cd-c9db-4014-b576-3aaad4eb9150.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F250668cd-c9db-4014-b576-3aaad4eb9150.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 59baec8db5ced0210ab766ea5636a5fd
f7cf3a0f89751a02fbcf8d21f505f24a74e8b30b
33ff55891f18c22970804f1b8b2ba6821ddfd7426b01486410bd43f2b4295a8d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F250668cd-c9db-4014-b576-3aaad4eb9150.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5785
x-amzn-requestid: ee77265b-8e90-4035-8ef1-92a2d26aaefa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgDaHdWoAMFqmw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a15-0d10d74030e7aee74804b654;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:01 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QhUrNKIJUxXTYFTgfCwizAd9L4PdLMVLbqv1sHmmnrWya0xz1MTSiw==
via: 1.1 38eecd3ca21bf068d69a2f9cfe668d14.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 22:08:46 GMT
etag: "f7cf3a0f89751a02fbcf8d21f505f24a74e8b30b"
content-type: image/jpeg
age: 16397
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2730750-552d-4852-8ce1-503874565f75.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2730750-552d-4852-8ce1-503874565f75.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 05196ec43964cf559caa0c0279148d62
6170d6776615503e3e29f86783febc3e3e78ca66
47f3a5cde661987e3496ce110a0170b10087dd9ba8d4fd691c4830587ba3fa3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2730750-552d-4852-8ce1-503874565f75.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9051
x-amzn-requestid: 1032dd9c-a15e-4e8a-9c81-07419e8caf67
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhGvEMNIAMFaKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867bc4-1005c20a33320dbf6567ca31;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:38:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: IMaVlQblNnh9mFKwb2LG7hw7h_f1_nVYqO4aEUqY01a2HofnnQqcFQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:49:31 GMT
age: 17552
etag: "6170d6776615503e3e29f86783febc3e3e78ca66"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4f88ec5-5875-45d1-bcd3-d997040d6d42.jpeg
200 OK 3.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4f88ec5-5875-45d1-bcd3-d997040d6d42.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ceb8e975fb408de32c43f55febaa6414
453067f6ab356aa87a3ad3b56e33545376597852
e0ecbb6052b4fef75f58da8dae589c81ab9ec9d304de08f26c144a2c3ce9eaac
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4f88ec5-5875-45d1-bcd3-d997040d6d42.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3719
x-amzn-requestid: 6fab3454-fedd-4a1e-ae47-468ddd6233bc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgDaGQ4IAMFUkQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a15-4b313cf054d6301e71cdc0c1;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: phw8DXQgjOyH5g4gvbqgZk-2sHr2n9cHVr4lqqPXfXtyhG32gs2pIg==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:52:45 GMT
age: 17358
etag: "453067f6ab356aa87a3ad3b56e33545376597852"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d5a5f5f1d97cb998890d1755570f3fe4
5f7c51904430f437d6354b42e19f03244d9649f4
9e3db25ba6f6edff36f3c8b44b575cf12a7f06319fa718f31c6bcba580948b47
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9E3DB25BA6F6EDFF36F3C8B44B575CF12A7F06319FA718F31C6BCBA580948B47"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Wed, 30 Nov 2022 08:42:04 GMT
Date: Wed, 30 Nov 2022 02:42:04 GMT
Connection: keep-alive
odbzwk.astonlshingdates.com/c/1e3a4e532f1c7040?s1=154299&s2=1651505&j6=1&j8=1&j9=1&s3=2144&s5=root&click_id=3518281939
302 Found 128 B URL HTTP/2 odbzwk.astonlshingdates.com/c/1e3a4e532f1c7040?s1=154299&s2=1651505&j6=1&j8=1&j9=1&s3=2144&s5=root&click_id=3518281939
IP
File type HTML document, ASCII text
Hash 0c83e1bbf8582610610228721ee9bb74
cb56c039718dd29427065d3660be2212911d443e
9cc833c94c9f9aebcb73c16bec23faa902f6ddf5472a6ff01e112add8910eef7
GET /c/1e3a4e532f1c7040?s1=154299&s2=1651505&j6=1&j8=1&j9=1&s3=2144&s5=root&click_id=3518281939 HTTP/1.1
Host: odbzwk.astonlshingdates.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 30 Nov 2022 02:42:04 GMT
content-type: text/html; charset=utf-8
content-length: 128
location: https://go.cindy-bangs.com/go.php?t=51568&aid=142802&sid=154299&clickid=vvnmz6386c2fc000394d1
set-cookie: unique_id=6386c2fc00063aae; Path=/; Expires=Sun, 29 Jan 2023 02:42:04 GMT; Secure; SameSite=None
unique_id2=6386c2fc0007de18; Path=/; Expires=Tue, 28 Feb 2023 02:42:04 GMT; Secure; SameSite=None
6386c2fc0007de18_c=1; Path=/; Expires=Tue, 28 Feb 2023 02:42:04 GMT; Secure; SameSite=None
ref_token=154299; Path=/; Expires=Fri, 30 Dec 2022 02:42:04 GMT; Secure; SameSite=None
impression=; Path=/; Expires=Wed, 30 Nov 2022 02:42:04 GMT; Secure; SameSite=None
tid=vvnmz6386c2fc000394d1; Path=/; Expires=Thu, 04 Nov 2027 02:42:04 GMT; Secure; SameSite=None
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9c51c1383d816bb304d3170b6c7b3063
966c575b4767ffa11d491eac3838d908effb3e52
93b9eaf7bfd0a9f2e921db3cccc741bc9d49f05b14b3c40e1d1a522d4252ac52
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "93B9EAF7BFD0A9F2E921DB3CCCC741BC9D49F05B14B3C40E1D1A522D4252AC52"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1687
Expires: Wed, 30 Nov 2022 03:10:11 GMT
Date: Wed, 30 Nov 2022 02:42:04 GMT
Connection: keep-alive
go.cindy-bangs.com/go.php?t=51568&aid=142802&sid=154299&clickid=vvnmz6386c2fc000394d1
200 OK 570 B URL HTTP/1.1 go.cindy-bangs.com/go.php?t=51568&aid=142802&sid=154299&clickid=vvnmz6386c2fc000394d1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (448)
Hash 6bb104ccf872d36817188431097a784a
30542524fb5116cc8cdcf8004a6d7e9a8c9c8132
2ab8fe2408127621c7f2b126c7a4fa963fd4fa7ece66cf5bc519c3f29f40d724
GET /go.php?t=51568&aid=142802&sid=154299&clickid=vvnmz6386c2fc000394d1 HTTP/1.1
Host: go.cindy-bangs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Wed, 30 Nov 2022 02:42:04 GMT
server: Apache
set-cookie: bd_ovtu=1; expires=Thu, 01-Dec-2022 02:42:04 GMT; Max-Age=86400; path=/; domain=.cindy-bangs.com
bdreff=NONE; expires=Mon, 29-May-2023 02:42:04 GMT; Max-Age=15552000; path=/; domain=.cindy-bangs.com
tour=49866; expires=Mon, 29-May-2023 02:42:04 GMT; Max-Age=15552000; path=/; domain=.cindy-bangs.com
affsubid=142802-154299; expires=Mon, 29-May-2023 02:42:04 GMT; Max-Age=15552000; path=/; domain=.cindy-bangs.com
bdvisit=142802; expires=Thu, 01-Dec-2022 02:42:04 GMT; Max-Age=86400; path=/; domain=.cindy-bangs.com
bdcounter=1; expires=Thu, 01-Dec-2022 02:42:04 GMT; Max-Age=86400; path=/; domain=.cindy-bangs.com
xk=c021d0456a17b312ccc20ceacf6c6c12; expires=Mon, 29-May-2023 02:42:04 GMT; Max-Age=15552000; path=/; domain=.cindy-bangs.com
cache-control: no-store, no-cache, must-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT
x-robots-tag: otherbot: noindex, nofollow, googlebot: noindex, nofollow
vary: Accept-Encoding
content-encoding: gzip
content-length: 570
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
go.cindy-bangs.com/native.history.js
200 OK 6.5 kB URL HTTP/1.1 go.cindy-bangs.com/native.history.js
IP
File type ASCII text, with very long lines (22102), with no line terminators
Hash 8353bbacfdb868f80448dcdb30c2e2d2
7232562be4f0f7a1aaa403c9d6c5d2ed17345cfd
fd7be3058aae52c67b43703962b3b6039b0ac2709a82a68a150aebae3e19ae38
GET /native.history.js HTTP/1.1
Host: go.cindy-bangs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.cindy-bangs.com/go.php?t=51568&aid=142802&sid=154299&clickid=vvnmz6386c2fc000394d1
Cookie: bd_ovtu=1; bdreff=NONE; tour=49866; affsubid=142802-154299; bdvisit=142802; bdcounter=1; xk=c021d0456a17b312ccc20ceacf6c6c12
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
date: Wed, 30 Nov 2022 02:42:05 GMT
server: Apache
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
content-length: 6519
x-content-type-options: nosniff
go.cindy-bangs.com/go.min.js
200 OK 221 B URL HTTP/1.1 go.cindy-bangs.com/go.min.js
IP
File type ASCII text, with very long lines (305)
Hash 77d3c60f4f2cc6ab7f7c0f9187dfd6fe
7a8ce851238850aeadfb637638c52891aeb53c42
98de9958ac1d81fdeea1f165dfe95f2da4d7e592f452d7c8ca699a1c914e3f2e
GET /go.min.js HTTP/1.1
Host: go.cindy-bangs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.cindy-bangs.com/go.php?t=51568&aid=142802&sid=154299&clickid=vvnmz6386c2fc000394d1
Cookie: bd_ovtu=1; bdreff=NONE; tour=49866; affsubid=142802-154299; bdvisit=142802; bdcounter=1; xk=c021d0456a17b312ccc20ceacf6c6c12
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
date: Wed, 30 Nov 2022 02:42:05 GMT
server: Apache
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
content-length: 221
x-content-type-options: nosniff
go.cindy-bangs.com/favicon.ico
200 OK 198 B URL HTTP/1.1 go.cindy-bangs.com/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 2 colors\012- data
Hash c6acedaff906029fc5455d9ec52c7f42
92cbd806ca421aa2c9ff5e1ff76bbc20913a2f81
9deb629637088856fe61dc868bf40a7d21ed942e4117659f3d6c3408f59b906b
GET /favicon.ico HTTP/1.1
Host: go.cindy-bangs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.cindy-bangs.com/go.php?t=51568&aid=142802&sid=154299&clickid=vvnmz6386c2fc000394d1
Cookie: bd_ovtu=1; bdreff=NONE; tour=49866; affsubid=142802-154299; bdvisit=142802; bdcounter=1; xk=c021d0456a17b312ccc20ceacf6c6c12
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
date: Wed, 30 Nov 2022 02:42:05 GMT
server: Apache
last-modified: Tue, 29 Nov 2022 09:56:31 GMT
etag: "c6-5ee9900a264a5"
accept-ranges: bytes
content-length: 198
content-type: image/vnd.microsoft.icon
x-content-type-options: nosniff
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 6d1dfb6fcfb729e2d4f5f7a9a1600b73
ea9b5a730721b972a438dbec0adb91a7b72c97bd
6be506c7d8473727b9627e078b18e78b6ed532dfd2941cd51e7a4cd20284cb4a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=105552
Date: Wed, 30 Nov 2022 02:42:06 GMT
Etag: "6385bc4e-1d7"
Expires: Thu, 01 Dec 2022 08:01:18 GMT
Last-Modified: Tue, 29 Nov 2022 08:01:18 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fGofMF7Jx_K9L1fMf2pd3d4iHU9wfhPBO0medump-OqHM6oLxOjkeA==
secure.cmvrclicks000.com/track/MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4wLjAuMA?_ocid=%7C142802_49866_154299&subaff=142802&xk=c021d0456a17b312ccc20ceacf6c6c12&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php%3Ft%3D51568%26aid%3D142802%26sid%3D154299%26clickid%3Dvvnmz6386c2fc000394d1%26hts_id%3D319aca28-b02a-4f1e-9659-a11e8d955afd&clickid=vvnmz6386c2fc000394d1&i18n_country=NO&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd
302 Found 0 B URL HTTP/2 secure.cmvrclicks000.com/track/MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4wLjAuMA?_ocid=%7C142802_49866_154299&subaff=142802&xk=c021d0456a17b312ccc20ceacf6c6c12&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php%3Ft%3D51568%26aid%3D142802%26sid%3D154299%26clickid%3Dvvnmz6386c2fc000394d1%26hts_id%3D319aca28-b02a-4f1e-9659-a11e8d955afd&clickid=vvnmz6386c2fc000394d1&i18n_country=NO&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track/MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4wLjAuMA?_ocid=%7C142802_49866_154299&subaff=142802&xk=c021d0456a17b312ccc20ceacf6c6c12&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php%3Ft%3D51568%26aid%3D142802%26sid%3D154299%26clickid%3Dvvnmz6386c2fc000394d1%26hts_id%3D319aca28-b02a-4f1e-9659-a11e8d955afd&clickid=vvnmz6386c2fc000394d1&i18n_country=NO&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd HTTP/1.1
Host: secure.cmvrclicks000.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.cindy-bangs.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 30 Nov 2022 02:42:06 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=66386c2fe549825.99533249&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_154299&subaff=142802&xk=c021d0456a17b312ccc20ceacf6c6c12&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=154299&clickid=vvnmz6386c2fc000394d1&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&clickid=vvnmz6386c2fc000394d1&i18n_country=NO&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
set-cookie: AWSALB=76AnzVOymBjw0h4knn+NF9MiE/ZnJBw0twbKInBn5sz2fRt2ys1Vf3/wa6hjuRsMB4n6r9UvoByZKrwyhHnzAw9zKPXTZPvMqYjqtEPMS395F0l8w+VbcyIBMZN1; Expires=Wed, 07 Dec 2022 02:42:06 GMT; Path=/
AWSALBCORS=76AnzVOymBjw0h4knn+NF9MiE/ZnJBw0twbKInBn5sz2fRt2ys1Vf3/wa6hjuRsMB4n6r9UvoByZKrwyhHnzAw9zKPXTZPvMqYjqtEPMS395F0l8w+VbcyIBMZN1; Expires=Wed, 07 Dec 2022 02:42:06 GMT; Path=/; SameSite=None; Secure
PHPSESSID=61dn0an22vao9oi76jjpaeh003; path=/
offerit_unique_344_304_960=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA; Max-Age=86400; Expires=Thursday, 01 Dec 2022 2:42:06 UTC; path=/; domain=cmvrclicks000.com
ocode_344_960=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA; Max-Age=2592000; Expires=Friday, 30 Dec 2022 2:42:06 UTC; path=/; domain=cmvrclicks000.com
ocode_344=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA; Max-Age=2592000; Expires=Friday, 30 Dec 2022 2:42:06 UTC; path=/; domain=cmvrclicks000.com
offerit_344_960_cookie=https%3A%2F%2Fgo.cindy-bangs.com%2F; Max-Age=2592000; Expires=Friday, 30 Dec 2022 2:42:06 UTC; path=/; domain=cmvrclicks000.com
offerit_344_960=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA|||66386c2fe549825.99533249; Max-Age=2592000; Expires=Friday, 30 Dec 2022 2:42:06 UTC; path=/; domain=cmvrclicks000.com
server: Apache/2.4.54 (Ubuntu)
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-origin: *
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/assets/css/main.css
200 OK 2.3 kB URL HTTP/2 hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/assets/css/main.css
IP
ASN #60068 Datacamp Limited
Hash 7f1c850dc7dfc379ba0ec87bc7118397
e8f8f9f17012a55f2a504451e7c599e98a22bb68
b865ccb60335b6d30a58d946332f93cca85bbd14f0493f54228b54c8d0512fc2
GET /lander/sk_version1_no_trial_na/assets/css/main.css HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=66386c2fe549825.99533249&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_154299&subaff=142802&xk=c021d0456a17b312ccc20ceacf6c6c12&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=154299&clickid=vvnmz6386c2fc000394d1&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&clickid=vvnmz6386c2fc000394d1&i18n_country=NO&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 02:42:06 GMT
content-type: text/css
last-modified: Wed, 23 Nov 2022 17:17:05 GMT
etag: W/"637e5591-1c00"
access-control-allow-origin: *
x-accel-expires: @1670787034
server: CDN77-Turbo
x-77-nzt: AdRmOI3WO/D/JGUAAA
x-77-nzt-ray: c1a0773715c56610fec28663536f8a27
x-cache: HIT
x-age: 25892
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/img/devices-320x182.png
200 OK 71 kB URL HTTP/2 hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/img/devices-320x182.png
IP
ASN #60068 Datacamp Limited
File type PNG image data, 320 x 182, 8-bit/color RGBA, non-interlaced\012- data
Hash 2fd5b4ca3cabbdd5e8659c27234986e9
77157492a9b87e90bccffe986ae241e325cdedaf
6d7f381516d512b6647e1a7c3dd3ad5776758ca40fcbc1802e037d6ac8568f58
GET /lander/sk_version1_no_trial_na/img/devices-320x182.png HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=66386c2fe549825.99533249&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_154299&subaff=142802&xk=c021d0456a17b312ccc20ceacf6c6c12&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=154299&clickid=vvnmz6386c2fc000394d1&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&clickid=vvnmz6386c2fc000394d1&i18n_country=NO&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 02:42:06 GMT
content-type: image/png
content-length: 71017
last-modified: Wed, 23 Nov 2022 17:17:05 GMT
etag: "637e5591-11569"
access-control-allow-origin: *
x-accel-expires: @1670787034
server: CDN77-Turbo
x-77-nzt: AdRmOI3lan3/JGUAAA
x-77-nzt-ray: c1a0773715c56610fec28663eb5d2629
x-cache: HIT
x-age: 25892
x-77-pop: frankfurtDE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/_vendor/jquery-2.2.4.min.js
200 OK 30 kB URL HTTP/2 hello.fuckbookmobile.com/_vendor/jquery-2.2.4.min.js
IP
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (32065)
Hash 98dbe07217524b0812993d4a4602de58
f5679b99d0f1aa5db3d0686028659041c5d5b9ca
2f0231c3b76ee935f3c2dd4bb32d819a691785ce2654ee73735f493ce1afc026
GET /_vendor/jquery-2.2.4.min.js HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=66386c2fe549825.99533249&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_154299&subaff=142802&xk=c021d0456a17b312ccc20ceacf6c6c12&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=154299&clickid=vvnmz6386c2fc000394d1&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&clickid=vvnmz6386c2fc000394d1&i18n_country=NO&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 02:42:06 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 23 Nov 2022 16:47:16 GMT
etag: W/"637e4e94-14e49"
access-control-allow-origin: *
x-accel-expires: @1670261390
server: CDN77-Turbo
x-77-nzt: AdRmOI25O6P/cGoIAA
x-77-nzt-ray: c1a0773715c56610fec28663d7bd1128
x-cache: HIT
x-age: 551536
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/assets/js/popwin.js
200 OK 1.0 kB URL HTTP/2 hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/assets/js/popwin.js
IP
ASN #60068 Datacamp Limited
Hash 81f631329dd444f662338bd47c6cff71
315390f41f16df34b309cf945e33f25f15eec547
8713b3715bef66a78ebc89397122cfa3557af8306892d05d46a25c29a535177c
GET /lander/sk_version1_no_trial_na/assets/js/popwin.js HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=66386c2fe549825.99533249&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_154299&subaff=142802&xk=c021d0456a17b312ccc20ceacf6c6c12&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=154299&clickid=vvnmz6386c2fc000394d1&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&clickid=vvnmz6386c2fc000394d1&i18n_country=NO&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 02:42:06 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 23 Nov 2022 17:17:05 GMT
etag: W/"637e5591-7f1"
access-control-allow-origin: *
x-accel-expires: @1670787035
server: CDN77-Turbo
x-77-nzt: AdRmOI3O17f/I2UAAA
x-77-nzt-ray: c1a0773715c56610fec286633f465d28
x-cache: HIT
x-age: 25891
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 49eee25f3ccd585a29e34e80cf5bb160
73eca8be91deedd049304862759a3d8084c0b07e
531e5685527861b3ed7e8e3865c5a6a40d3f92f5c9d89df3f385dab72406fb56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 02:42:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 608e4d04a251ebcd51660e801f388303
fcb9aa48fd6ed504a1a9fed7990c5ccde63e6a1d
cc1a34cd0a99e301df97cf184ab0ded2e229659f86f43e4eff479dee221695dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 02:42:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 49eee25f3ccd585a29e34e80cf5bb160
73eca8be91deedd049304862759a3d8084c0b07e
531e5685527861b3ed7e8e3865c5a6a40d3f92f5c9d89df3f385dab72406fb56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 02:42:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hello.fuckbookmobile.com/_fuckbook/Api.js
200 OK 206 kB URL HTTP/2 hello.fuckbookmobile.com/_fuckbook/Api.js
IP
ASN #60068 Datacamp Limited
Size 206 kB (205606 bytes)
Hash d118620ea583a1c35dad7d41ff45d840
cc817a9cdb4b66f9bc004040ef9f803ecce5728d
7b1b83d98093fec2bde1b270fcdaf9c3a2473c4068f7280b90688aa96c782e55
GET /_fuckbook/Api.js HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=66386c2fe549825.99533249&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_154299&subaff=142802&xk=c021d0456a17b312ccc20ceacf6c6c12&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=154299&clickid=vvnmz6386c2fc000394d1&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&clickid=vvnmz6386c2fc000394d1&i18n_country=NO&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 02:42:06 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 23 Nov 2022 16:47:16 GMT
etag: W/"637e4e94-4cf"
access-control-allow-origin: *
x-accel-expires: @1670261390
server: CDN77-Turbo
x-77-nzt: AdRmOI1OFhv/cGoIAA
x-77-nzt-ray: c1a0773715c56610fec2866392fbea28
x-cache: HIT
x-age: 551536
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Nunito|Roboto
200 OK 79 kB URL HTTP/2 fonts.googleapis.com/css?family=Nunito|Roboto
IP
Hash 54841cc62b3736db10c87b7337ae0c70
e55bcd4acbd46886897b77248755b93df95cb6ad
3d5ff30e48e8f4b0cdc1ed4b0ced95479a0b585c3f4e3b0469f15a8185b4fd1f
GET /css?family=Nunito|Roboto HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 30 Nov 2022 02:42:06 GMT
date: Wed, 30 Nov 2022 02:42:06 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/assets/js/jquery-ui.effects_min.js
200 OK 16 kB URL HTTP/2 hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/assets/js/jquery-ui.effects_min.js
IP
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (24498)
Hash 251fcef468592be1d8f9f47a202b6ab3
35419c2cce9c0481029c60bac195214082f9aab2
a4727e47c27f0ab280f2d5097eda7479bfe88c4e47879fdf12feb9048e1a4bda
GET /lander/sk_version1_no_trial_na/assets/js/jquery-ui.effects_min.js HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=66386c2fe549825.99533249&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_154299&subaff=142802&xk=c021d0456a17b312ccc20ceacf6c6c12&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=154299&clickid=vvnmz6386c2fc000394d1&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&clickid=vvnmz6386c2fc000394d1&i18n_country=NO&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 02:42:06 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 23 Nov 2022 17:17:05 GMT
etag: W/"637e5591-614f"
access-control-allow-origin: *
x-accel-expires: @1670787034
server: CDN77-Turbo
x-77-nzt: AdRmOI0m71v/JGUAAA
x-77-nzt-ray: c1a0773715c56610fec286632be46c28
x-cache: HIT
x-age: 25892
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/assets/js/ff_actions.js
200 OK 16 kB URL HTTP/2 hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/assets/js/ff_actions.js
IP
ASN #60068 Datacamp Limited
Hash 428a46f1d6aa2c60308047062551f0cc
b66a7bd0a3f0ee573680a53db76d55520d11aac0
ffbbd63a8bcc2125625c30369e01aa604ed9377038ea6cabdb035147ea236abe
GET /lander/sk_version1_no_trial_na/assets/js/ff_actions.js HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=66386c2fe549825.99533249&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_154299&subaff=142802&xk=c021d0456a17b312ccc20ceacf6c6c12&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=154299&clickid=vvnmz6386c2fc000394d1&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&clickid=vvnmz6386c2fc000394d1&i18n_country=NO&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 02:42:06 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 23 Nov 2022 17:17:05 GMT
etag: W/"637e5591-183d"
access-control-allow-origin: *
x-accel-expires: @1670787034
server: CDN77-Turbo
x-77-nzt: AdRmOI3j4dL/JGUAAA
x-77-nzt-ray: c1a0773715c56610fec2866346dda428
x-cache: HIT
x-age: 25892
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://hello.fuckbookmobile.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:33:54 GMT
expires: Thu, 23 Nov 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 544092
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 49eee25f3ccd585a29e34e80cf5bb160
73eca8be91deedd049304862759a3d8084c0b07e
531e5685527861b3ed7e8e3865c5a6a40d3f92f5c9d89df3f385dab72406fb56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 02:42:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/img/favicon.png
200 OK 5.5 kB URL HTTP/2 hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/img/favicon.png
IP
ASN #60068 Datacamp Limited
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 7aa82907f14594b39d542a8c2c712b75
04b579e833a108940f7bf0dbc0c60eeccb67d88a
52abce52b791723efcaac09b21381e5727332fe2c5c9d62e4e7b807633e09372
GET /lander/sk_version1_no_trial_na/img/favicon.png HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=66386c2fe549825.99533249&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_154299&subaff=142802&xk=c021d0456a17b312ccc20ceacf6c6c12&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=154299&clickid=vvnmz6386c2fc000394d1&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&clickid=vvnmz6386c2fc000394d1&i18n_country=NO&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 02:42:06 GMT
content-type: image/png
content-length: 5506
last-modified: Wed, 23 Nov 2022 17:17:05 GMT
etag: "637e5591-1582"
access-control-allow-origin: *
x-accel-expires: @1670787038
server: CDN77-Turbo
x-77-nzt: AdRmOI0A2Ov/IGUAAA
x-77-nzt-ray: c1a0773715c56610fec28663a4d0cb37
x-cache: HIT
x-age: 25888
x-77-pop: frankfurtDE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f50fd635895870df33a17fe377a6a038
dd65dfbbc810b095432cfd59f971af04a9e31ab7
ebd9b6c3f67865c297d08802839c940994424000df3bf8a3f1316b8e13666e94
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 02:42:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Wed, 30 Nov 2022 02:41:08 GMT
expires: Wed, 30 Nov 2022 04:41:08 GMT
cache-control: public, max-age=7200
age: 58
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f50fd635895870df33a17fe377a6a038
dd65dfbbc810b095432cfd59f971af04a9e31ab7
ebd9b6c3f67865c297d08802839c940994424000df3bf8a3f1316b8e13666e94
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 02:42:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/assets/js/api-form-mapper.js
200 OK 0 B URL HTTP/2 hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/assets/js/api-form-mapper.js
IP
ASN #60068 Datacamp Limited
GET /lander/sk_version1_no_trial_na/assets/js/api-form-mapper.js HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=66386c2fe549825.99533249&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_154299&subaff=142802&xk=c021d0456a17b312ccc20ceacf6c6c12&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=154299&clickid=vvnmz6386c2fc000394d1&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&clickid=vvnmz6386c2fc000394d1&i18n_country=NO&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 02:42:06 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 23 Nov 2022 17:17:05 GMT
etag: W/"637e5591-8a1"
access-control-allow-origin: *
x-accel-expires: @1670787034
server: CDN77-Turbo
x-77-nzt: AdRmOI3xmur/JGUAAA
x-77-nzt-ray: c1a0773715c56610fec286631151ae28
x-cache: HIT
x-age: 25892
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/_fuckbook/CommonMapper.js
200 OK 0 B URL HTTP/2 hello.fuckbookmobile.com/_fuckbook/CommonMapper.js
IP
ASN #60068 Datacamp Limited
GET /_fuckbook/CommonMapper.js HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=66386c2fe549825.99533249&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_154299&subaff=142802&xk=c021d0456a17b312ccc20ceacf6c6c12&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=154299&clickid=vvnmz6386c2fc000394d1&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&clickid=vvnmz6386c2fc000394d1&i18n_country=NO&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 02:42:06 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 23 Nov 2022 16:47:16 GMT
etag: W/"637e4e94-185"
access-control-allow-origin: *
x-accel-expires: @1670261390
server: CDN77-Turbo
x-77-nzt: AdRmOI1jCbH/cGoIAA
x-77-nzt-ray: c1a0773715c56610fec286631b2ce528
x-cache: HIT
x-age: 551536
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/_vendor/fetch.js
200 OK 0 B URL HTTP/2 hello.fuckbookmobile.com/_vendor/fetch.js
IP
ASN #60068 Datacamp Limited
GET /_vendor/fetch.js HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=66386c2fe549825.99533249&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_154299&subaff=142802&xk=c021d0456a17b312ccc20ceacf6c6c12&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=154299&clickid=vvnmz6386c2fc000394d1&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&clickid=vvnmz6386c2fc000394d1&i18n_country=NO&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 02:42:06 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 23 Nov 2022 16:47:16 GMT
etag: W/"637e4e94-32d4"
access-control-allow-origin: *
x-accel-expires: @1670261390
server: CDN77-Turbo
x-77-nzt: AdRmOI3rO9D/cGoIAA
x-77-nzt-ray: c1a0773715c56610fec28663e397fc28
x-cache: HIT
x-age: 551536
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/_vendor/ga.js
200 OK 0 B URL HTTP/2 hello.fuckbookmobile.com/_vendor/ga.js
IP
ASN #60068 Datacamp Limited
GET /_vendor/ga.js HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=66386c2fe549825.99533249&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_154299&subaff=142802&xk=c021d0456a17b312ccc20ceacf6c6c12&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=154299&clickid=vvnmz6386c2fc000394d1&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&clickid=vvnmz6386c2fc000394d1&i18n_country=NO&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 02:42:06 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 23 Nov 2022 16:47:16 GMT
etag: W/"637e4e94-19e"
access-control-allow-origin: *
x-accel-expires: @1670261390
server: CDN77-Turbo
x-77-nzt: AdRmOI2r8Oz/cGoIAA
x-77-nzt-ray: c1a0773715c56610fec2866393ea0a29
x-cache: HIT
x-age: 551536
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/_scripts/general.js
200 OK 0 B URL HTTP/2 hello.fuckbookmobile.com/_scripts/general.js
IP
ASN #60068 Datacamp Limited
GET /_scripts/general.js HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=66386c2fe549825.99533249&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_154299&subaff=142802&xk=c021d0456a17b312ccc20ceacf6c6c12&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=154299&clickid=vvnmz6386c2fc000394d1&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&clickid=vvnmz6386c2fc000394d1&i18n_country=NO&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 02:42:06 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 23 Nov 2022 16:47:16 GMT
etag: W/"637e4e94-308"
access-control-allow-origin: *
x-accel-expires: @1670261390
server: CDN77-Turbo
x-77-nzt: AdRmOI3uhET/cGoIAA
x-77-nzt-ray: c1a0773715c56610fec2866359ef3329
x-cache: HIT
x-age: 551536
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/assets/css/bootstrap.min.css
200 OK 0 B URL HTTP/2 hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/assets/css/bootstrap.min.css
IP
ASN #60068 Datacamp Limited
GET /lander/sk_version1_no_trial_na/assets/css/bootstrap.min.css HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=66386c2fe549825.99533249&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_154299&subaff=142802&xk=c021d0456a17b312ccc20ceacf6c6c12&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=154299&clickid=vvnmz6386c2fc000394d1&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&clickid=vvnmz6386c2fc000394d1&i18n_country=NO&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 02:42:06 GMT
content-type: text/css
last-modified: Wed, 23 Nov 2022 17:17:05 GMT
etag: W/"637e5591-22682"
access-control-allow-origin: *
x-accel-expires: @1670787034
server: CDN77-Turbo
x-77-nzt: AdRmOI3mtI3/JGUAAA
x-77-nzt-ray: c1a0773715c56610fec2866333e0b227
x-cache: HIT
x-age: 25892
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/assets/js/universalPS.js
200 OK 0 B URL HTTP/2 hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/assets/js/universalPS.js
IP
ASN #60068 Datacamp Limited
GET /lander/sk_version1_no_trial_na/assets/js/universalPS.js HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=66386c2fe549825.99533249&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_154299&subaff=142802&xk=c021d0456a17b312ccc20ceacf6c6c12&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=154299&clickid=vvnmz6386c2fc000394d1&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&clickid=vvnmz6386c2fc000394d1&i18n_country=NO&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 02:42:06 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 23 Nov 2022 17:17:05 GMT
etag: W/"637e5591-3f26"
access-control-allow-origin: *
x-accel-expires: @1670787034
server: CDN77-Turbo
x-77-nzt: AdRmOI2Cecb/JGUAAA
x-77-nzt-ray: c1a0773715c56610fec286635ad89028
x-cache: HIT
x-age: 25892
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/_webpack/bundle.js
200 OK 0 B URL HTTP/2 hello.fuckbookmobile.com/_webpack/bundle.js
IP
ASN #60068 Datacamp Limited
GET /_webpack/bundle.js HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=66386c2fe549825.99533249&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_154299&subaff=142802&xk=c021d0456a17b312ccc20ceacf6c6c12&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=154299&clickid=vvnmz6386c2fc000394d1&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&clickid=vvnmz6386c2fc000394d1&i18n_country=NO&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 02:42:06 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 23 Nov 2022 16:47:16 GMT
etag: W/"637e4e94-25bd"
access-control-allow-origin: *
x-accel-expires: @1670261390
server: CDN77-Turbo
x-77-nzt: AdRmOI1lCoP/cGoIAA
x-77-nzt-ray: c1a0773715c56610fec28663a769d728
x-cache: HIT
x-age: 551536
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/_vendor/promise.js
200 OK 0 B URL HTTP/2 hello.fuckbookmobile.com/_vendor/promise.js
IP
ASN #60068 Datacamp Limited
GET /_vendor/promise.js HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=66386c2fe549825.99533249&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_154299&subaff=142802&xk=c021d0456a17b312ccc20ceacf6c6c12&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=154299&clickid=vvnmz6386c2fc000394d1&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&clickid=vvnmz6386c2fc000394d1&i18n_country=NO&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 02:42:06 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 23 Nov 2022 16:47:16 GMT
etag: W/"637e4e94-185b"
access-control-allow-origin: *
x-accel-expires: @1670261390
server: CDN77-Turbo
x-77-nzt: AdRmOI171xX/cGoIAA
x-77-nzt-ray: c1a0773715c56610fec286632c22f228
x-cache: HIT
x-age: 551536
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/_scripts/close-button-redirect.js
200 OK 0 B URL HTTP/2 hello.fuckbookmobile.com/_scripts/close-button-redirect.js
IP
ASN #60068 Datacamp Limited
GET /_scripts/close-button-redirect.js HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=66386c2fe549825.99533249&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_154299&subaff=142802&xk=c021d0456a17b312ccc20ceacf6c6c12&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=154299&clickid=vvnmz6386c2fc000394d1&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&clickid=vvnmz6386c2fc000394d1&i18n_country=NO&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 02:42:06 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 23 Nov 2022 16:47:16 GMT
etag: W/"637e4e94-269"
access-control-allow-origin: *
x-accel-expires: @1670261390
server: CDN77-Turbo
x-77-nzt: AdRmOI3glmj/cGoIAA
x-77-nzt-ray: c1a0773715c56610fec286630f363b29
x-cache: HIT
x-age: 551536
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=66386c2fe549825.99533249&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_154299&subaff=142802&xk=c021d0456a17b312ccc20ceacf6c6c12&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=154299&clickid=vvnmz6386c2fc000394d1&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&clickid=vvnmz6386c2fc000394d1&i18n_country=NO&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
200 OK 0 B URL HTTP/2 hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=66386c2fe549825.99533249&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_154299&subaff=142802&xk=c021d0456a17b312ccc20ceacf6c6c12&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=154299&clickid=vvnmz6386c2fc000394d1&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&clickid=vvnmz6386c2fc000394d1&i18n_country=NO&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
IP
ASN #60068 Datacamp Limited
GET /lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=66386c2fe549825.99533249&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_154299&subaff=142802&xk=c021d0456a17b312ccc20ceacf6c6c12&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=154299&clickid=vvnmz6386c2fc000394d1&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&clickid=vvnmz6386c2fc000394d1&i18n_country=NO&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://go.cindy-bangs.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 02:42:06 GMT
content-type: text/html
last-modified: Wed, 23 Nov 2022 17:17:05 GMT
etag: W/"637e5591-362b"
access-control-allow-origin: *
x-accel-expires: @1670711578
server: CDN77-Turbo
x-77-nzt: AdRmOI3Xba7/5IsBAA
x-77-nzt-ray: c1a0773715c56610fec286638a213322
x-cache: HIT
x-age: 101348
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/_fuckbook/loader.css
200 OK 0 B URL HTTP/2 hello.fuckbookmobile.com/_fuckbook/loader.css
IP
ASN #60068 Datacamp Limited
GET /_fuckbook/loader.css HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=66386c2fe549825.99533249&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_154299&subaff=142802&xk=c021d0456a17b312ccc20ceacf6c6c12&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=154299&clickid=vvnmz6386c2fc000394d1&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&clickid=vvnmz6386c2fc000394d1&i18n_country=NO&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 02:42:06 GMT
content-type: text/css
last-modified: Wed, 23 Nov 2022 16:47:16 GMT
etag: W/"637e4e94-2ba"
access-control-allow-origin: *
x-accel-expires: @1670261517
server: CDN77-Turbo
x-77-nzt: AdRmOI2TK0T/8WkIAA
x-77-nzt-ray: c1a0773715c56610fec28663b7a40b28
x-cache: HIT
x-age: 551409
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/_fuckbook/Config-fuckbook_trial.js
200 OK 0 B URL HTTP/2 hello.fuckbookmobile.com/_fuckbook/Config-fuckbook_trial.js
IP
ASN #60068 Datacamp Limited
GET /_fuckbook/Config-fuckbook_trial.js HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=66386c2fe549825.99533249&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_154299&subaff=142802&xk=c021d0456a17b312ccc20ceacf6c6c12&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=154299&clickid=vvnmz6386c2fc000394d1&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&clickid=vvnmz6386c2fc000394d1&i18n_country=NO&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 02:42:06 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 23 Nov 2022 16:47:16 GMT
etag: W/"637e4e94-73"
access-control-allow-origin: *
x-accel-expires: @1670261390
server: CDN77-Turbo
x-77-nzt: AdRmOI04ZbD/cGoIAA
x-77-nzt-ray: c1a0773715c56610fec28663517fba28
x-cache: HIT
x-age: 551536
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/img/logo.svg
200 OK 0 B URL HTTP/2 hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/img/logo.svg
IP
ASN #60068 Datacamp Limited
GET /lander/sk_version1_no_trial_na/img/logo.svg HTTP/1.1
Host: hello.fuckbookmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hello.fuckbookmobile.com/lander/sk_version1_no_trial_na/?af=231&af_source=offerit&oid=66386c2fe549825.99533249&utm_source=231&utm_medium=fbpps&utm_content=home&utm_campaign=cummission&_ocid=%7C142802_49866_154299&subaff=142802&xk=c021d0456a17b312ccc20ceacf6c6c12&bn=38&gu=http%3A%2F%2Fgo.cindy-bangs.com%2Fgo.php&t=51568&aid=142802&sid=154299&clickid=vvnmz6386c2fc000394d1&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&clickid=vvnmz6386c2fc000394d1&i18n_country=NO&hts_id=319aca28-b02a-4f1e-9659-a11e8d955afd&ocode=MjMxLjU0NDEyMS4zMDQuOTQxLjAuMC4wLjAuMC4xMjczNTY0MS4wLjA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 02:42:06 GMT
content-type: image/svg+xml
last-modified: Wed, 23 Nov 2022 17:17:05 GMT
etag: W/"637e5591-2cc9"
access-control-allow-origin: *
x-accel-expires: @1670787034
server: CDN77-Turbo
x-77-nzt: AdRmOI0Q0of/JGUAAA
x-77-nzt-ray: c1a0773715c56610fec286631c351129
x-cache: HIT
x-age: 25892
x-77-pop: frankfurtDE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
199.36.158.100
18.195.123.247
23.36.77.32
52.19.101.114
93.184.220.29