tracking.tgmfr.com/aff_c?offer_id=2282&aff_id=1846&source=mappstreet2&aff_sub=1InEkYiEuJSRhZzwiKHNmf3BlZ2E_eQ_Pyi:9553::2049&aff_sub2=20090311_37_0_16dc_6c3e7c_1109_226_63134865_260019002000001d040000000000000b_9553_0_0_c9_ca_a_100035f_2_0_0
302 Found 719 B URL HTTP/1.1 tracking.tgmfr.com/aff_c?offer_id=2282&aff_id=1846&source=mappstreet2&aff_sub=1InEkYiEuJSRhZzwiKHNmf3BlZ2E_eQ_Pyi:9553::2049&aff_sub2=20090311_37_0_16dc_6c3e7c_1109_226_63134865_260019002000001d040000000000000b_9553_0_0_c9_ca_a_100035f_2_0_0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (585)
Hash c050914abc9adabf59287cad6f25c63a
a995d7ad4e013e81587c27cc88b754d4fabf92a5
134d86b043f7e562b6d9354cd3ca7e49ff908aa2ed4b05b82da3bb1759f3c207
GET /aff_c?offer_id=2282&aff_id=1846&source=mappstreet2&aff_sub=1InEkYiEuJSRhZzwiKHNmf3BlZ2E_eQ_Pyi:9553::2049&aff_sub2=20090311_37_0_16dc_6c3e7c_1109_226_63134865_260019002000001d040000000000000b_9553_0_0_c9_ca_a_100035f_2_0_0 HTTP/1.1
Host: tracking.tgmfr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 03 Sep 2022 22:27:13 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 719
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Location: https://vouchersavenue.com/soap-d/?lastname={lastname}&firstname={firstname}&gender={gender}&email={email}&birthdate={birthdate}&phone={phone}&address={address}&postal_code={postal_code}&locality={locality}&administrative_area_level_1={state}&source=mappstreet2&aff_sub=1InEkYiEuJSRhZzwiKHNmf3BlZ2E_eQ_Pyi:9553::2049&aff_sub2=20090311_37_0_16dc_6c3e7c_1109_226_63134865_260019002000001d040000000000000b_9553_0_0_c9_ca_a_100035f_2_0_0&aff_sub3=&hoid=102c67321b4c2cb4415fabe0bf1099
P3p: CP="NOI CUR OUR NOR INT"
Pragma: no-cache
Set-Cookie: enc_aff_session_2282=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; expires=Sun, 04 Sep 2022 22:27:13 GMT; path=/; SameSite=None; Secure
ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiI5Ni4wIiwibW9iaWxlX2NhcnJpZXIiOiI/IiwidXNlcl9hZ2VudCI6Ik1vemlsbGEvNS4wIChYMTE7IExpbnV4IFg4Nl82NDsgUnY6OTYuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC85Ni4wIiwiYWNjZXB0X2xhbmd1YWdlIjoiZW4tVVMsZW47cT0wLjUiLCJjb25uZWN0aW9uX3NwZWVkIjoiYnJvYWRiYW5kIn0=; expires=Tue, 29 Jul 2025 09:07:13 GMT; path=/; SameSite=None; Secure
Tracking_id: 102c67321b4c2cb4415fabe0bf1099
X-Robots-Tag: noindex, nofollow
Access-Control-Allow-Origin: *
X-Request-Id: 3e03b1c94e4b5157c97f305825cc4cc7
Access-Control-Allow-Headers: Tune-SDK-Version
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 91dd975a7b17b2922dd23c0e49314e40
57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sat, 03 Sep 2022 21:43:17 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fHLsBt5mWt2oukGn9N9egE5J6jDNw4Sah_O3aC_H1PaDkxFrscJWpg==
Age: 2636
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bcdebf7a2bad5db595e8a0c1abb2ddcb
249dda2fa5e37b8a8f3a8c797193bf0874b6eedc
9b43ec48b16f96449208a0094c4d660806a2a2d344b5862dbff4c393bf3f9f9f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9B43EC48B16F96449208A0094C4D660806A2A2D344B5862DBFF4C393BF3F9F9F"
Last-Modified: Thu, 01 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2537
Expires: Sat, 03 Sep 2022 23:09:30 GMT
Date: Sat, 03 Sep 2022 22:27:13 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sat, 03 Sep 2022 01:15:18 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: nd4B9p7AMP00Mbi2nu_huaJjTxv8dq9rARcOFgJqthPf4d5eQnQ9vQ==
age: 76316
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Sep 2022 22:27:13 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 27308962ae8908f64770b13286737fa9
121085a3ebc95141fe20c34eb7ef35c758c4259e
4b2b6dc4ec727c02f6a95f73e79bb533c8003f25f37d7b60db410babbed1434d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 03 Sep 2022 22:27:13 GMT
Last-Modified: Sat, 03 Sep 2022 22:25:30 GMT
Server: ECS (dcb/7EEA)
X-Cache: Miss from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Kg5DvbAbmndcz7W2C4tjlEeFgH5lJ4gizmr8pHdzmOvia-2BuavQtA==
Age: 103
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sat, 03 Sep 2022 21:38:16 GMT
Cache-Control: max-age=3600
Expires: Sat, 03 Sep 2022 21:45:45 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: NLqDd8iRnGJX9jVA4kWVQOnaeTkrkUFNEUDPg6ZArkRW23gSu2XgMQ==
Age: 2938
ocsp.digicert.com/
200 OK 471 B IP
Hash 4fc12f0a98aa28ccb56e0b56d7e40ded
f7efcfb8b4f4aa40268bada3fec380820a70ee35
a34aa9b7db949a583c3f1b4d87fed415a11d119c9615b5e710c3125173f8a277
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2497
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 22:27:14 GMT
Last-Modified: Sat, 03 Sep 2022 21:45:37 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
vouchersavenue.com/soap-d/?lastname={lastname}&firstname={firstname}&gender={gender}&email={email}&birthdate={birthdate}&phone={phone}&address={address}&postal_code={postal_code}&locality={locality}&administrative_area_level_1={state}&source=mappstreet2&aff_sub=1InEkYiEuJSRhZzwiKHNmf3BlZ2E_eQ_Pyi:9553::2049&aff_sub2=20090311_37_0_16dc_6c3e7c_1109_226_63134865_260019002000001d040000000000000b_9553_0_0_c9_ca_a_100035f_2_0_0&aff_sub3=&hoid=102c67321b4c2cb4415fabe0bf1099
302 Found 3.0 kB URL HTTP/2 vouchersavenue.com/soap-d/?lastname={lastname}&firstname={firstname}&gender={gender}&email={email}&birthdate={birthdate}&phone={phone}&address={address}&postal_code={postal_code}&locality={locality}&administrative_area_level_1={state}&source=mappstreet2&aff_sub=1InEkYiEuJSRhZzwiKHNmf3BlZ2E_eQ_Pyi:9553::2049&aff_sub2=20090311_37_0_16dc_6c3e7c_1109_226_63134865_260019002000001d040000000000000b_9553_0_0_c9_ca_a_100035f_2_0_0&aff_sub3=&hoid=102c67321b4c2cb4415fabe0bf1099
IP
Hash 54918305dd07456ea2742c6bdac8c901
6d934c44d9432380c75312a6ed369b2005a76e8f
dbefb89b8dfb6d2a1ce0c7831677986e453589f1aa8f6a748e4d08199ca1d804
GET /soap-d/?lastname={lastname}&firstname={firstname}&gender={gender}&email={email}&birthdate={birthdate}&phone={phone}&address={address}&postal_code={postal_code}&locality={locality}&administrative_area_level_1={state}&source=mappstreet2&aff_sub=1InEkYiEuJSRhZzwiKHNmf3BlZ2E_eQ_Pyi:9553::2049&aff_sub2=20090311_37_0_16dc_6c3e7c_1109_226_63134865_260019002000001d040000000000000b_9553_0_0_c9_ca_a_100035f_2_0_0&aff_sub3=&hoid=102c67321b4c2cb4415fabe0bf1099 HTTP/1.1
Host: vouchersavenue.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Sat, 03 Sep 2022 22:27:14 GMT
content-type: text/html; charset=UTF-8
location: https://vouchersavenue.com/soap-d?source=mappstreet2&aff_sub=1InEkYiEuJSRhZzwiKHNmf3BlZ2E_eQ_Pyi%3A9553%3A%3A2049&aff_sub2=20090311_37_0_16dc_6c3e7c_1109_226_63134865_260019002000001d040000000000000b_9553_0_0_c9_ca_a_100035f_2_0_0&hoid=102c67321b4c2cb4415fabe0bf1099
set-cookie: AWSALB=U6t5nQu7xnyxzNrCiZJjddVLNx/cX+zW8cFvgdiweVh0Pma4VjTzEVES5GopcBSXS6DYv3UbXDCFIn2UTiOavgdMsB5qgathUeQoVgJ+rUmrcO9Fpm1rqfzH8idt; Expires=Sat, 10 Sep 2022 22:27:14 GMT; Path=/
AWSALBCORS=U6t5nQu7xnyxzNrCiZJjddVLNx/cX+zW8cFvgdiweVh0Pma4VjTzEVES5GopcBSXS6DYv3UbXDCFIn2UTiOavgdMsB5qgathUeQoVgJ+rUmrcO9Fpm1rqfzH8idt; Expires=Sat, 10 Sep 2022 22:27:14 GMT; Path=/; SameSite=None; Secure
contest_session=7LrhXcuuMz1fAzq16upO2AjKKZJSAYfNV5v3ubtM; path=/; secure; httponly; samesite=none
server: nginx/1.23.1
x-powered-by: PHP/8.1.3
cache-control: no-cache, private
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e07db1f049d79f98e1be53c91276261a
383f59d7fbbdaebc1c7d485c01425e3ba2f72e86
1b447c532399ffaabdd797dc917e7196ec6cce2772bb54df9b01e64ec3ef6965
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1B447C532399FFAABDD797DC917E7196EC6CCE2772BB54DF9B01E64EC3EF6965"
Last-Modified: Thu, 01 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5791
Expires: Sun, 04 Sep 2022 00:03:45 GMT
Date: Sat, 03 Sep 2022 22:27:14 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: YISO4dF60sAglLD4StaTmQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: RqpLZN4NYCW5ZPKDdxK9TL9Yj7I=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e07db1f049d79f98e1be53c91276261a
383f59d7fbbdaebc1c7d485c01425e3ba2f72e86
1b447c532399ffaabdd797dc917e7196ec6cce2772bb54df9b01e64ec3ef6965
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1B447C532399FFAABDD797DC917E7196EC6CCE2772BB54DF9B01E64EC3EF6965"
Last-Modified: Thu, 01 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6868
Expires: Sun, 04 Sep 2022 00:21:42 GMT
Date: Sat, 03 Sep 2022 22:27:14 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e07db1f049d79f98e1be53c91276261a
383f59d7fbbdaebc1c7d485c01425e3ba2f72e86
1b447c532399ffaabdd797dc917e7196ec6cce2772bb54df9b01e64ec3ef6965
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1B447C532399FFAABDD797DC917E7196EC6CCE2772BB54DF9B01E64EC3EF6965"
Last-Modified: Thu, 01 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11611
Expires: Sun, 04 Sep 2022 01:40:45 GMT
Date: Sat, 03 Sep 2022 22:27:14 GMT
Connection: keep-alive
imgs.tagadamedia.com/media/us/23/1680x870-2385.jpg
200 OK 471 kB URL HTTP/2 imgs.tagadamedia.com/media/us/23/1680x870-2385.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, progressive, precision 8, 1680x870, components 3\012- data
Size 471 kB (471061 bytes)
Hash 259293596f63d62e4276bf458cc7b7b7
558d18ed47e47c461d3deeb3e10b9b7c2a7623d9
49f144bd0b44d955877e4f2abb5bf28877489d718da0c78fad85d43d6be267e2
GET /media/us/23/1680x870-2385.jpg HTTP/1.1
Host: imgs.tagadamedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 22:27:14 GMT
content-type: image/jpeg
content-length: 471061
server: BunnyCDN-DE-723
cdn-pullzone: 61945
cdn-uid: 5d127034-96a6-45e8-a482-4f40615f18db
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Mon, 08 Aug 2022 14:39:38 GMT
x-amz-id-2: HcsdzG3tCTFCi8eC7nWqIQDqCePuimfCzYvAx8OKzsyMPXjlEUdoH6DXChkg1dU8k/lQE66wJTM=
x-amz-request-id: 48XTJZVK2MH8XBDE
cdn-proxyver: 1.02
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 09/01/2022 09:54:16
cdn-edgestorageid: 722
cdn-status: 200
cdn-requestid: 4df38eee0dc600ffadce29c981165b6a
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
imgs.tagadamedia.com/media/us/23/750x350-2384.jpg
200 OK 211 kB URL HTTP/2 imgs.tagadamedia.com/media/us/23/750x350-2384.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, progressive, precision 8, 750x350, components 3\012- data
Size 211 kB (210586 bytes)
Hash 7b6de2e6be6dafa21e89e986a61e558c
b885fc22239e61ee96d50991af1ce15e7f835d7e
3d15fabc0cf4f285c1fc05429b675d75d9657188ff1764895c5ca10a5d97f7de
GET /media/us/23/750x350-2384.jpg HTTP/1.1
Host: imgs.tagadamedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 22:27:14 GMT
content-type: image/jpeg
content-length: 210586
server: BunnyCDN-DE-723
cdn-pullzone: 61945
cdn-uid: 5d127034-96a6-45e8-a482-4f40615f18db
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Mon, 08 Aug 2022 14:39:38 GMT
x-amz-id-2: TXwIvHejgGqZHeaHzkWiuvslQJviZxjj99mPQsYcbGt4ZEvqad+q7CF2Wt/PPWNHJwJvHnWsefg=
x-amz-request-id: 48XXBAXDYC58RFA0
cdn-proxyver: 1.02
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 09/01/2022 09:54:16
cdn-edgestorageid: 864
cdn-status: 200
cdn-requestid: acee18b7f529180b5a914abdf95aec90
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
choices.consentframework.com/js/pa/26948/c/Ifv2D/cmp
200 OK 208 kB URL HTTP/1.1 choices.consentframework.com/js/pa/26948/c/Ifv2D/cmp
IP
File type Unicode text, UTF-8 text, with very long lines (65513), with no line terminators
Size 208 kB (208123 bytes)
Hash 3bc3ae89eb40e9f30f92940419a56d60
ac10651e7efda023cff622ccc6d7ca06a575fe70
26f29860ceb2f3001725c88495729f146f435263a3985b53a92edd9dfc64ecaf
GET /js/pa/26948/c/Ifv2D/cmp HTTP/1.1
Host: choices.consentframework.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sat, 03 Sep 2022 22:27:14 GMT
Content-Type: text/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: private, max-age=3600
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Content-Encoding: gzip
vouchersavenue.com/css/themes/snapchat.css?id=c0951b0b6419577652aa
200 OK 12 kB URL HTTP/2 vouchersavenue.com/css/themes/snapchat.css?id=c0951b0b6419577652aa
IP
File type ASCII text, with very long lines (11498), with no line terminators
Hash c0951b0b6419577652aaa78a89785b83
c496c9bb4397917836630ddaf3158abc433d3cb1
ea6968f66d05db51492d84f0faea5fac20ce494c6775614c5acb3e8e29e33d6f
Analyzer Verdict Alert fortinet Phishing
GET /css/themes/snapchat.css?id=c0951b0b6419577652aa HTTP/1.1
Host: vouchersavenue.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/soap-d/signup/1
Cookie: AWSALB=jzaJvDqBKBr1XIx5iR6r0qirR+onPInq85+f5JNoGyC9emVfpn93mJgbCYXeg+rKkcxMhCaOopGADxjT6pFLKpG5UKTZgofyPHfq2ExNhchFvaeRJ7I4MyL68hCJ; AWSALBCORS=jzaJvDqBKBr1XIx5iR6r0qirR+onPInq85+f5JNoGyC9emVfpn93mJgbCYXeg+rKkcxMhCaOopGADxjT6pFLKpG5UKTZgofyPHfq2ExNhchFvaeRJ7I4MyL68hCJ; contest_session=7LrhXcuuMz1fAzq16upO2AjKKZJSAYfNV5v3ubtM
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 22:27:14 GMT
content-type: text/css
content-length: 11498
set-cookie: AWSALB=18H8b7OXfsyhcAS62tx8gx9cgT7o2JmVRHF6fBu0ok02fZxU9qwqZF+KdGNOkvzc8uiX9EqvBtMqqzrol1oSUQxjzmPE0WCKSJNfIXuzlc3FMcwNy6IGT6eD3nqC; Expires=Sat, 10 Sep 2022 22:27:14 GMT; Path=/
AWSALBCORS=18H8b7OXfsyhcAS62tx8gx9cgT7o2JmVRHF6fBu0ok02fZxU9qwqZF+KdGNOkvzc8uiX9EqvBtMqqzrol1oSUQxjzmPE0WCKSJNfIXuzlc3FMcwNy6IGT6eD3nqC; Expires=Sat, 10 Sep 2022 22:27:14 GMT; Path=/; SameSite=None; Secure
server: nginx/1.23.1
last-modified: Sat, 03 Sep 2022 04:19:57 GMT
etag: "6312d5ed-2cea"
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
vouchersavenue.com/ehawktalon.js
200 OK 44 kB URL HTTP/2 vouchersavenue.com/ehawktalon.js
IP
File type Unicode text, UTF-8 text, with very long lines (32046)
Hash c220ef9c60efe1d6dd5cd2b1bdb13e69
c7d6622fdd3f96b59ea0b224fa32d64e17cadf09
6168d2efb0d3eb49178246a7e68b1d3dc71e0314c46876aa10eb258bb61f6171
Analyzer Verdict Alert fortinet Phishing
GET /ehawktalon.js HTTP/1.1
Host: vouchersavenue.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/soap-d/signup/1
Cookie: AWSALB=jzaJvDqBKBr1XIx5iR6r0qirR+onPInq85+f5JNoGyC9emVfpn93mJgbCYXeg+rKkcxMhCaOopGADxjT6pFLKpG5UKTZgofyPHfq2ExNhchFvaeRJ7I4MyL68hCJ; AWSALBCORS=jzaJvDqBKBr1XIx5iR6r0qirR+onPInq85+f5JNoGyC9emVfpn93mJgbCYXeg+rKkcxMhCaOopGADxjT6pFLKpG5UKTZgofyPHfq2ExNhchFvaeRJ7I4MyL68hCJ; contest_session=7LrhXcuuMz1fAzq16upO2AjKKZJSAYfNV5v3ubtM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 22:27:14 GMT
content-type: application/javascript
content-length: 43847
set-cookie: AWSALB=aLCY5GU9lW/PO97+S0WKWHUD7CQY/dGjzQujzpeIyXhHdZSR02qRznF/EnTTgyb1jSJ5THtZNc8nqj9vGd5KntcpqRnsCDH2HEXWFlujS7Ts4FAE+B5Oxvox6Pel; Expires=Sat, 10 Sep 2022 22:27:14 GMT; Path=/
AWSALBCORS=aLCY5GU9lW/PO97+S0WKWHUD7CQY/dGjzQujzpeIyXhHdZSR02qRznF/EnTTgyb1jSJ5THtZNc8nqj9vGd5KntcpqRnsCDH2HEXWFlujS7Ts4FAE+B5Oxvox6Pel; Expires=Sat, 10 Sep 2022 22:27:14 GMT; Path=/; SameSite=None; Secure
server: nginx/1.23.1
last-modified: Tue, 02 Aug 2022 09:45:52 GMT
etag: "62e8f250-ab47"
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9439a7cde73fea464c1463febdda0556
6a0030d4f26b2e9658700708c82e7ce6120ce93c
c3a5a489f4ef8c8cce54dbd819c5cf573740317ea3718ccd6804a03374739199
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 22:27:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Montserrat:500,800
200 OK 993 B URL HTTP/2 fonts.googleapis.com/css?family=Montserrat:500,800
IP
Hash d1e5a161cee17b9ad75b94c17beb54a1
87480f23c41dad6a8c8d12bfcc30f61259790548
085078baf314a91b40224339ea117bec7c2e22d1064a88e67c3cfc9e35c14837
GET /css?family=Montserrat:500,800 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 03 Sep 2022 22:27:14 GMT
date: Sat, 03 Sep 2022 22:27:14 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
vouchersavenue.com/js/app.js?id=49053d5a4c8f531827d5
200 OK 962 kB URL HTTP/2 vouchersavenue.com/js/app.js?id=49053d5a4c8f531827d5
IP
File type Unicode text, UTF-8 text, with very long lines (61143), with no line terminators
Size 962 kB (962038 bytes)
Hash 49053d5a4c8f531827d5b0f2986c723b
f29007457ef7c41ff256b1581ad4431116a9479e
5dd640493f898ffc6a399e61b064723407ccb7206a13278826b993dcbb691829
Analyzer Verdict Alert fortinet Phishing
GET /js/app.js?id=49053d5a4c8f531827d5 HTTP/1.1
Host: vouchersavenue.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/soap-d/signup/1
Cookie: AWSALB=jzaJvDqBKBr1XIx5iR6r0qirR+onPInq85+f5JNoGyC9emVfpn93mJgbCYXeg+rKkcxMhCaOopGADxjT6pFLKpG5UKTZgofyPHfq2ExNhchFvaeRJ7I4MyL68hCJ; AWSALBCORS=jzaJvDqBKBr1XIx5iR6r0qirR+onPInq85+f5JNoGyC9emVfpn93mJgbCYXeg+rKkcxMhCaOopGADxjT6pFLKpG5UKTZgofyPHfq2ExNhchFvaeRJ7I4MyL68hCJ; contest_session=7LrhXcuuMz1fAzq16upO2AjKKZJSAYfNV5v3ubtM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 22:27:14 GMT
content-type: application/javascript
content-length: 962038
set-cookie: AWSALB=osBe5EbEJryUdk1ELKUag3cD9lGMSwMxTC3eyTnx53uCmos4h/OrOJVDv7Wt7887EKV8wWYjvpbZNquw6l3mYH8p7I9QprwTkEUi7kRU000eOLpCiB42xb8NLZsR; Expires=Sat, 10 Sep 2022 22:27:14 GMT; Path=/
AWSALBCORS=osBe5EbEJryUdk1ELKUag3cD9lGMSwMxTC3eyTnx53uCmos4h/OrOJVDv7Wt7887EKV8wWYjvpbZNquw6l3mYH8p7I9QprwTkEUi7kRU000eOLpCiB42xb8NLZsR; Expires=Sat, 10 Sep 2022 22:27:14 GMT; Path=/; SameSite=None; Secure
server: nginx/1.23.1
last-modified: Sat, 03 Sep 2022 04:19:57 GMT
etag: "6312d5ed-eadf6"
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash cc6ea3e01d1d6b8c4b28ff64d3b795a7
017457c6f5a63157102485a956c667aad36d33ef
e6fe903f67363d3e92b929e274f0de7c2f6a15b6df1806198199440ed0fe221e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 22:27:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 98125354dbaa891018a9429a7aae3ea1
a692cc9a073c9666971db41444342fc9d7dab2e2
771b96e4fb485d1ef041ee20fc060bb5b4b521043ec7a51ceaccefcbe837bd4f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 22:27:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-P645S3F
200 OK 66 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-P645S3F
IP
File type ASCII text, with very long lines (63457)
Hash b68a25af57a6a23fac5c8fd0b7dd156e
7ffcc11931749b1d21bd96fc0c54209453e2ea0b
401f9137c84ebee55b3692663f2776b8e422322f4f01214c30fdca117622a3a0
GET /gtm.js?id=GTM-P645S3F HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 03 Sep 2022 22:27:15 GMT
expires: Sat, 03 Sep 2022 22:27:15 GMT
cache-control: private, max-age=900
last-modified: Sat, 03 Sep 2022 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 65904
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 98125354dbaa891018a9429a7aae3ea1
a692cc9a073c9666971db41444342fc9d7dab2e2
771b96e4fb485d1ef041ee20fc060bb5b4b521043ec7a51ceaccefcbe837bd4f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 22:27:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Hash ac0d2859ea5f8fd6bcb3c305c08ec184
7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://vouchersavenue.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Sep 2022 16:40:18 GMT
expires: Fri, 01 Sep 2023 16:40:18 GMT
cache-control: public, max-age=31536000
age: 193617
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
vouchersavenue.com/images/arrow.png?7f2569fbaa873919c1f0c3d4904688e9
200 OK 520 B URL HTTP/2 vouchersavenue.com/images/arrow.png?7f2569fbaa873919c1f0c3d4904688e9
IP
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash 7f2569fbaa873919c1f0c3d4904688e9
ea31ae54e1b95971175a2e288b23373af312334d
a559b0b063bf93ec5697e973d579dc0f943b912307d5793f29413311494d120d
GET /images/arrow.png?7f2569fbaa873919c1f0c3d4904688e9 HTTP/1.1
Host: vouchersavenue.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/css/themes/snapchat.css?id=c0951b0b6419577652aa
Cookie: AWSALB=aLCY5GU9lW/PO97+S0WKWHUD7CQY/dGjzQujzpeIyXhHdZSR02qRznF/EnTTgyb1jSJ5THtZNc8nqj9vGd5KntcpqRnsCDH2HEXWFlujS7Ts4FAE+B5Oxvox6Pel; AWSALBCORS=aLCY5GU9lW/PO97+S0WKWHUD7CQY/dGjzQujzpeIyXhHdZSR02qRznF/EnTTgyb1jSJ5THtZNc8nqj9vGd5KntcpqRnsCDH2HEXWFlujS7Ts4FAE+B5Oxvox6Pel; contest_session=7LrhXcuuMz1fAzq16upO2AjKKZJSAYfNV5v3ubtM
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 22:27:15 GMT
content-type: image/png
content-length: 520
set-cookie: AWSALB=J2HwXmU8sqGAXiuOBTKPLwlQB1bWJ0F3ezMutu+CrOqnKql6hENpbOxbjMFHZNE+C3Ug1d1LgSTknpBDXI5n7crwWEJ2PweCeEASAhx8ra7J6bQudE650J4MihWh; Expires=Sat, 10 Sep 2022 22:27:15 GMT; Path=/
AWSALBCORS=J2HwXmU8sqGAXiuOBTKPLwlQB1bWJ0F3ezMutu+CrOqnKql6hENpbOxbjMFHZNE+C3Ug1d1LgSTknpBDXI5n7crwWEJ2PweCeEASAhx8ra7J6bQudE650J4MihWh; Expires=Sat, 10 Sep 2022 22:27:15 GMT; Path=/; SameSite=None; Secure
server: nginx/1.23.1
last-modified: Sat, 03 Sep 2022 04:19:57 GMT
etag: "6312d5ed-208"
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash cc6ea3e01d1d6b8c4b28ff64d3b795a7
017457c6f5a63157102485a956c667aad36d33ef
e6fe903f67363d3e92b929e274f0de7c2f6a15b6df1806198199440ed0fe221e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 22:27:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 98125354dbaa891018a9429a7aae3ea1
a692cc9a073c9666971db41444342fc9d7dab2e2
771b96e4fb485d1ef041ee20fc060bb5b4b521043ec7a51ceaccefcbe837bd4f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 22:27:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2589
Expires: Sat, 03 Sep 2022 23:10:24 GMT
Date: Sat, 03 Sep 2022 22:27:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2589
Expires: Sat, 03 Sep 2022 23:10:24 GMT
Date: Sat, 03 Sep 2022 22:27:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2589
Expires: Sat, 03 Sep 2022 23:10:24 GMT
Date: Sat, 03 Sep 2022 22:27:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2589
Expires: Sat, 03 Sep 2022 23:10:24 GMT
Date: Sat, 03 Sep 2022 22:27:15 GMT
Connection: keep-alive
vouchersavenue.com/soap-d/facebook/page-view
200 OK 546 B URL HTTP/2 vouchersavenue.com/soap-d/facebook/page-view
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash a019646139d04813b5bc3512808fb448
fcc236da00eea05791a3af2c29273dddc7b03bd0
4d73e49075b51804497a0d4e9e3c09b4686c7aa1948b0665ec33b5d5dae1f915
Analyzer Verdict Alert fortinet Phishing
GET /soap-d/facebook/page-view HTTP/1.1
Host: vouchersavenue.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/soap-d/signup/1
Cookie: AWSALB=aLCY5GU9lW/PO97+S0WKWHUD7CQY/dGjzQujzpeIyXhHdZSR02qRznF/EnTTgyb1jSJ5THtZNc8nqj9vGd5KntcpqRnsCDH2HEXWFlujS7Ts4FAE+B5Oxvox6Pel; AWSALBCORS=aLCY5GU9lW/PO97+S0WKWHUD7CQY/dGjzQujzpeIyXhHdZSR02qRznF/EnTTgyb1jSJ5THtZNc8nqj9vGd5KntcpqRnsCDH2HEXWFlujS7Ts4FAE+B5Oxvox6Pel; contest_session=7LrhXcuuMz1fAzq16upO2AjKKZJSAYfNV5v3ubtM
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 22:27:15 GMT
content-type: image/gif
set-cookie: AWSALB=9ZDxMj6F4N9h7qJ4FOFwvtjxb+LkH3yKhTUSBef6CTBlkaQXYUny7ottqrBdBRqha2epEk0tWUIaA94ONGn0ZKXvgeyzNA293lnEPQFqxfGg7eWpIxNHt+3PfHUM; Expires=Sat, 10 Sep 2022 22:27:15 GMT; Path=/
AWSALBCORS=9ZDxMj6F4N9h7qJ4FOFwvtjxb+LkH3yKhTUSBef6CTBlkaQXYUny7ottqrBdBRqha2epEk0tWUIaA94ONGn0ZKXvgeyzNA293lnEPQFqxfGg7eWpIxNHt+3PfHUM; Expires=Sat, 10 Sep 2022 22:27:15 GMT; Path=/; SameSite=None; Secure
contest_session=7LrhXcuuMz1fAzq16upO2AjKKZJSAYfNV5v3ubtM; path=/; secure; httponly; samesite=none
server: nginx/1.23.1
x-powered-by: PHP/8.1.3
cache-control: no-cache, private
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55a1dd43-45fc-44ee-98c0-7d02bbb304e8.jpeg
200 OK 2.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55a1dd43-45fc-44ee-98c0-7d02bbb304e8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 805c1612e6c8fb3c982d4771e2834337
3cff738f27f14e9cad6e9ecf905bade182359090
f8273376b33895f655f207bc3753f4c9b3887c9ec5dd149549009bfc2086ff2e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55a1dd43-45fc-44ee-98c0-7d02bbb304e8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2892
x-amzn-requestid: b627015a-7ace-47d7-ac63-634f5bb22738
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wifEj8IAMFgmw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c7a9-767a955409370ca961a4ffc6;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:31:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: FZu5otl_OWF_fb0hgUfw0WL1FBpEgQRTRAreyc-DiZ9cWgj29gISLg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:58:33 GMT
age: 1722
etag: "3cff738f27f14e9cad6e9ecf905bade182359090"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7142280-0dbd-4c8e-a960-d357c9143af6.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7142280-0dbd-4c8e-a960-d357c9143af6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 10318189f33f071dda64249ab9c8c5bb
e5b5b649a243e5c004d9923d19d4421d1ea96d23
3e775a1990e4d185024faf2fdff7a5eb9063f7ee19784f32fb4f7f10643c8102
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7142280-0dbd-4c8e-a960-d357c9143af6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5652
x-amzn-requestid: 05fffcb2-43c0-4acf-81b2-1b914459e1e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wwHErUIAMFmNw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c800-47fe166763992ab271a87aa4;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:32:48 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: oU-qOKW_Jy8MV0HLQWofKsOi_qseUcyZRoP5LoyLsCclpCgf6NHiBA==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 22:02:43 GMT
age: 1472
etag: "e5b5b649a243e5c004d9923d19d4421d1ea96d23"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a800f15-3953-4184-a77c-3696aba95488.jpeg
200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a800f15-3953-4184-a77c-3696aba95488.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5012bd324b91ad44151392700e27a369
1d17869c30cdeb7643fe3bcc976c21136799b4e6
11e23381d21ca461bb31fc1b832f53613de1316b09dde72b4deda55067011e8a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a800f15-3953-4184-a77c-3696aba95488.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6122
x-amzn-requestid: c8e3c2f9-8314-40ea-82ce-ac203aea0cd3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wjlE-8IAMFzlw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c7b0-0ef61461611d547c76354cbe;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:31:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: AAUkXiBhpePC2kD2EIuNxUPcfBq8XCUTsNgB3ERDm4tfdN3gBMiQ9Q==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 22:02:43 GMT
age: 1472
etag: "1d17869c30cdeb7643fe3bcc976c21136799b4e6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F75330c10-c792-473d-a3d2-0529a16f1fc2.jpeg
200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F75330c10-c792-473d-a3d2-0529a16f1fc2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ff702bc582048928c5ecab8a6fa55d84
8e125792ea9dde5788e65d6491ba2eceade062d8
0c94940760d4c137f502da7310bc02f04a9adb5c8e2ea3c90370521e8a467e3a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F75330c10-c792-473d-a3d2-0529a16f1fc2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6081
x-amzn-requestid: 030b9f1e-39af-44c8-80fa-23d0fb333fed
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wxNEE-IAMFfSA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c807-0ba8976b2f8934403cae41fa;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:32:55 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: tA4QlopZnxFfzQRdMl298-JMAWGHA7aaFHmYZz0FC5TwVWZQn9_olg==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:56:46 GMT
age: 1829
etag: "8e125792ea9dde5788e65d6491ba2eceade062d8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc410b0d8-b008-47cc-bbf7-a762c06e0fcd.png
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc410b0d8-b008-47cc-bbf7-a762c06e0fcd.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6bb4b1d74f1443bc3328301ab3ae6464
2768253dacaaad6cb498c6b2eb7694208b0ce0a6
07dcc95dab7757402998a5a61b540c965ce95c8bd51a814a09438981693b563a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc410b0d8-b008-47cc-bbf7-a762c06e0fcd.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8688
x-amzn-requestid: 1c5fbc89-8ce8-4792-b713-f2c0ceeab737
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wifFJYoAMFi0g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c7a9-214311e155c661ff77d89906;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:31:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: wd9SF3txQNTVUaSPcKQ_nQfPt1pBjFbuHzSZiQjfbGBSb-i7J8Rgjg==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:44:29 GMT
age: 2566
etag: "2768253dacaaad6cb498c6b2eb7694208b0ce0a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48ddd9c9-1923-443a-8dbf-f936630b1f9b.jpeg
200 OK 4.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48ddd9c9-1923-443a-8dbf-f936630b1f9b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7602d55b1969744668194d6433ad2490
c9e50dd6d25825a3fff305261dc8f85a7113150a
9ab721edb038aad74dabe751f7790fe21915884893ea9f471e407ae526495701
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48ddd9c9-1923-443a-8dbf-f936630b1f9b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4615
x-amzn-requestid: a28cc354-9caf-45e8-805e-a9d076f4c55d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wxXFsZIAMFbVQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c808-118caff17f74408d6ba251b9;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:32:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: WHCYmwxGwIVneoRpk4rVJ_GVWnEhyayaW_Uj9ejqyTsOFab8oJ9RGA==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:47:53 GMT
etag: "c9e50dd6d25825a3fff305261dc8f85a7113150a"
content-type: image/jpeg
age: 2362
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash dc9d5d4a71c7b215e062d955a48656ed
d6fda565a7861539c38017daa24421aa3290d0a3
ce620b05cd4a642d5327bde9f7c9677c7d129253e9da936c8a1f1999ef8722d2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3522
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 22:27:15 GMT
Last-Modified: Sat, 03 Sep 2022 21:28:34 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
js.cookieless-data.com/GS.d?pa=26948&uf_bday=&uf_gender=&cmp=0&u=https%3A%2F%2Fvouchersavenue.com%2Fsoap-d%2Fsignup%2F1&r=&rand=1662244033012&gdpr=1&gdpr_consent=CPeufoAPeufoABcAIBENCfCgAAAAAH_AABpwIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARKAJMNW4gC7MscCbQMIoEQIwrCQqAUAEFAMLRAYAODgp2VgE-sIWACAUARgRAhxBRgwCAAASAJCIAJAiwQCIAiAQAAgARAIQAETAIKACwMAgABANAxACgAECQgyICIpTAgKgSCA1sqEEoK9DTCAOs8AKBRGxUACJJABSAAJCwcAwRICViyQJMUb5AAAA&globalscope=false&cookieless_optout=0&tbp=true
200 OK 0 B URL HTTP/1.1 js.cookieless-data.com/GS.d?pa=26948&uf_bday=&uf_gender=&cmp=0&u=https%3A%2F%2Fvouchersavenue.com%2Fsoap-d%2Fsignup%2F1&r=&rand=1662244033012&gdpr=1&gdpr_consent=CPeufoAPeufoABcAIBENCfCgAAAAAH_AABpwIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARKAJMNW4gC7MscCbQMIoEQIwrCQqAUAEFAMLRAYAODgp2VgE-sIWACAUARgRAhxBRgwCAAASAJCIAJAiwQCIAiAQAAgARAIQAETAIKACwMAgABANAxACgAECQgyICIpTAgKgSCA1sqEEoK9DTCAOs8AKBRGxUACJJABSAAJCwcAwRICViyQJMUb5AAAA&globalscope=false&cookieless_optout=0&tbp=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /GS.d?pa=26948&uf_bday=&uf_gender=&cmp=0&u=https%3A%2F%2Fvouchersavenue.com%2Fsoap-d%2Fsignup%2F1&r=&rand=1662244033012&gdpr=1&gdpr_consent=CPeufoAPeufoABcAIBENCfCgAAAAAH_AABpwIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARKAJMNW4gC7MscCbQMIoEQIwrCQqAUAEFAMLRAYAODgp2VgE-sIWACAUARgRAhxBRgwCAAASAJCIAJAiwQCIAiAQAAgARAIQAETAIKACwMAgABANAxACgAECQgyICIpTAgKgSCA1sqEEoK9DTCAOs8AKBRGxUACJJABSAAJCwcAwRICViyQJMUb5AAAA&globalscope=false&cookieless_optout=0&tbp=true HTTP/1.1
Host: js.cookieless-data.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sat, 03 Sep 2022 22:27:15 GMT
Content-Length: 0
Connection: keep-alive
Expires: Tue, 01 Jan 2000 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
X-Xss-Protection: 0
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
P3p: CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
ocsp.digicert.com/
200 OK 279 B IP
Hash 20999cbb820d65e9c966c22cb72b016a
363e1c7b70a9ea52cf8c169d222b01dff5277226
9e96dcfd3be5ce826b8ae538cbed6ce79440f659d190986aa3868773fc37dabd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6549
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 22:27:16 GMT
Last-Modified: Sat, 03 Sep 2022 20:38:07 GMT
Server: ECS (amb/6B7A)
X-Cache: HIT
Content-Length: 279
choices.consentframework.com/api/v1/public/user-action
200 OK 0 B URL HTTP/1.1 choices.consentframework.com/api/v1/public/user-action
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v1/public/user-action HTTP/1.1
Host: choices.consentframework.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://vouchersavenue.com/
Origin: https://vouchersavenue.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sat, 03 Sep 2022 22:27:16 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
choices.consentframework.com/api/v1/public/consent-string
200 OK 0 B URL HTTP/1.1 choices.consentframework.com/api/v1/public/consent-string
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v1/public/consent-string HTTP/1.1
Host: choices.consentframework.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://vouchersavenue.com/
Origin: https://vouchersavenue.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sat, 03 Sep 2022 22:27:16 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
choices.consentframework.com/api/v1/public/user-action
200 OK 0 B URL HTTP/1.1 choices.consentframework.com/api/v1/public/user-action
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v1/public/user-action HTTP/1.1
Host: choices.consentframework.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vouchersavenue.com/
Content-Type: application/json
Origin: https://vouchersavenue.com
Content-Length: 159
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sat, 03 Sep 2022 22:27:16 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
choices.consentframework.com/api/v1/public/consent-string
200 OK 242 B URL HTTP/1.1 choices.consentframework.com/api/v1/public/consent-string
IP
File type JSON data\012- , ASCII text, with very long lines (444), with no line terminators
Hash c94e897aaef974eb5c900b9061b53353
dcdf5fdcfedd6b43969589ccd2bc490e763b8dea
275e7e214927e76ca51ae198bf623f60dbb80e9540e612ded723445ee2fab098
POST /api/v1/public/consent-string HTTP/1.1
Host: choices.consentframework.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vouchersavenue.com/
Content-Type: application/json
Origin: https://vouchersavenue.com
Content-Length: 517
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sat, 03 Sep 2022 22:27:16 GMT
Content-Type: application/json; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c601b855785ac53fc964e4dc0b6ee8fd
90336863030aca7c22df57c9f6502c84c2e1d763
a55381c0aa2808324e81b1856053b866d19c235edcaf0dc7fe888a937c1624f8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A55381C0AA2808324E81B1856053B866D19C235EDCAF0DC7FE888A937C1624F8"
Last-Modified: Sat, 03 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18305
Expires: Sun, 04 Sep 2022 03:32:21 GMT
Date: Sat, 03 Sep 2022 22:27:16 GMT
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 1c6237b3a647802fa29b20122e058da7
e334229392e129f6b74b96b5e9742e30a3ed5388
9a29129bdac984e185b5322063d75d61b5c3aeeba92e3ee8f071927a40d1c87d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 03 Sep 2022 22:27:16 GMT
Last-Modified: Sat, 03 Sep 2022 20:48:41 GMT
Server: ECS (nyb/1D11)
X-Cache: Miss from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ztkrItGMwkHIqUvV-yWGClsJzYbisCNoY9i3EW5n-FW350aCknI1cg==
Age: 5915
data.perfmaker.net/website/614210c6324d8/tag.js
200 OK 1.3 kB URL HTTP/1.1 data.perfmaker.net/website/614210c6324d8/tag.js
IP
File type ASCII text, with very long lines (655)
Hash 342718526995a9dbcf4f496ec7c20c79
5c877cd27e45c47a2b4b0c57c240773401f7a518
7e9de7571998a7b49acf7dcd9769794d3faa193aea43b2839b968f4debbe6798
GET /website/614210c6324d8/tag.js HTTP/1.1
Host: data.perfmaker.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
X-Powered-By: Express
Vary: Origin, Accept-Encoding
Access-Control-Allow-Credentials: true
Content-Type: application/javascript; charset=utf-8
ETag: W/"fac-zLB1TE4YzCgpVXb3kXKQ9Bfr0f4"
Content-Encoding: gzip
Date: Sat, 03 Sep 2022 22:27:16 GMT
Connection: close
Transfer-Encoding: chunked
Set-Cookie: sid=s5; path=/
Cache-control: private
api.trustedform.com/trustedform.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=16622440332260.35092910551434864
301 Moved Permanently 134 B URL HTTP/2 api.trustedform.com/trustedform.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=16622440332260.35092910551434864
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /trustedform.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=16622440332260.35092910551434864 HTTP/1.1
Host: api.trustedform.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: awselb/2.0
date: Sat, 03 Sep 2022 22:27:16 GMT
content-type: text/html
content-length: 134
location: https://cdn.trustedform.com:443/bootstrap.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=16622440332260.35092910551434864
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Sat, 03 Sep 2022 20:41:12 GMT
expires: Sat, 03 Sep 2022 22:41:12 GMT
cache-control: public, max-age=7200
age: 6364
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1278db78948279716d72ac203ad8fb0d
1746b9863b781ed9a0c26a126b9b80d36c903974
8d9e31a35490bc2ebef4c4c2152c89b62491c0cdfc31ec0594bc21fd2e9f43f6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 22:27:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/conversion_async.js
200 OK 16 kB URL HTTP/2 www.google.com/pagead/conversion_async.js
IP
File type ASCII text, with very long lines (1623)
Hash 4738d969770682feba80f04bf171d65b
be0e0ceb91bf5ed0c64b0f3f2cc2c99c6d4cd6b7
1daca97cf9e8078299f94c50346e45fead45bf908ca97ded912f26986c1c4e9a
GET /pagead/conversion_async.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Sat, 03 Sep 2022 22:27:16 GMT
expires: Sat, 03 Sep 2022 22:27:16 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 15579141248118922429
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 15687
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 51df98c169fb7de773301d014bcea4b8
9bdf9bdb9b5eee378e9ac4ec68ca07c665ae4819
c8336f3a2e16c9390b610c612ce9be7c19286f04a6328a29200cbf65db5801c8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 22:27:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/jAc1Y0BkrUA
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/jAc1Y0BkrUA
IP
Hash 8ae8a1cc7cb07fb6954d9fec70ee041c
db2b5aa16fa12b908c2af4e3e69a81fbeefce170
89ff74ac5a554c79a60fc9557ba7d2641716c5109c6d4649f60a2b7d1953c425
POST /s/gts1d4/jAc1Y0BkrUA HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 22:27:16 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tag.perfmaker.net/version/perfmaker-v1.45.0/perfmaker.2.js
200 OK 76 kB URL HTTP/2 tag.perfmaker.net/version/perfmaker-v1.45.0/perfmaker.2.js
IP
File type ASCII text, with very long lines (65465)
Hash 7db8cf90197a1c47a5e47aeff5ae7396
4a3c7df0244fcf98c6f08f6084ce2ab2e3316f62
cf97e04141a1d3a4077aab9474133128587010986ea2693d69c0e2c148710f67
GET /version/perfmaker-v1.45.0/perfmaker.2.js HTTP/1.1
Host: tag.perfmaker.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsB6KezyMPSGvxdMs1XyhPPE7kzIHj07yPmM3mJlPY3uDvY1Rr0eh39g7ArQJSUhCou3mfzkorDIl5g9UxmqIX3KQ
x-goog-generation: 1655727023554594
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 75956
content-encoding: gzip
x-goog-hash: crc32c=brhtKA==, md5=fbjPkBl6HEel5Hrv9a5zlg==
x-goog-storage-class: STANDARD
accept-ranges: bytes
vary: Accept-Encoding
content-length: 75956
server: UploadServer
date: Sat, 03 Sep 2022 22:19:43 GMT
age: 453
last-modified: Mon, 20 Jun 2022 12:10:23 GMT
etag: "7db8cf90197a1c47a5e47aeff5ae7396"
content-type: application/javascript; charset=utf-8
cache-control: public,max-age=3600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/jAc1Y0BkrUA
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/jAc1Y0BkrUA
IP
Hash 8ae8a1cc7cb07fb6954d9fec70ee041c
db2b5aa16fa12b908c2af4e3e69a81fbeefce170
89ff74ac5a554c79a60fc9557ba7d2641716c5109c6d4649f60a2b7d1953c425
POST /s/gts1d4/jAc1Y0BkrUA HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 22:27:16 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 099cb62aafe515895d0d84b9adc3c7c2
c83988e4c878a8e408f8b26e97098b71ddcd1d9c
833be83526f85fa589d56ddb51df7f794ac2aa8c5ea4f6743ebdf17ef2039e39
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=103834
Date: Sat, 03 Sep 2022 22:27:16 GMT
Etag: "6312bf28-1d7"
Expires: Mon, 05 Sep 2022 03:17:50 GMT
Last-Modified: Sat, 03 Sep 2022 02:42:48 GMT
Server: ECS (dcb/7EC6)
X-Cache: Miss from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: xfuMAhMYvZv8UUBDQdcypYFGMg1M8ur4VVfLhbvwmxtcx6GfhIADmA==
Age: 2103
analytics.tiktok.com/i18n/pixel/identify.js
200 OK 31 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/identify.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash a355b4e6d466a125e47f46259f981be9
7b26fa3d17e498c9252e7c8959c5cf7517462ae5
0429592d6a7dd59582a799d31b4195964ce7a9402a75e3711b75436a83ddd826
GET /i18n/pixel/identify.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 202209032227163DA0475AF6ED9611C6FD
x-tt-trace-host: 014c3d3a48b720cad047ee4725ef00c61e3b5abc4166c8e729682c4aeb7a9b45fae2a174c26d217faf273644538df3dd3309b3ee02fb7c794641c4f9a6322888bc38082fa8fa68cb893b2d6821d8bef2d675262d6fb41b87d1ca42e599d8df3d33
content-encoding: gzip
x-origin-response-time: 11,23.221.225.228
x-akamai-request-id: 10ee1aaf.b6d75ec
expires: Sat, 03 Sep 2022 22:27:16 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sat, 03 Sep 2022 22:27:16 GMT
x-cache: TCP_MISS from a104-84-152-230.deploy.akamaitechnologies.com (AkamaiGHost/10.9.3-43949849) (-)
vary: Accept-Encoding
x-cache-remote: TCP_MISS from a23-221-225-228.deploy.akamaitechnologies.com (AkamaiGHost/10.9.3-43949849) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=101, origin; dur=11, inner; dur=1
x-parent-response-time: 111,104.84.152.230
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 5c0e635efc3897c1ec4c12a006cc5737
77642e0afdb421c68b13d7077e0ab4f8a70324e0
479fcd6bf2e602ca9564fafa8b78d80e66c19b44ee1a221b29bc9785082195bf
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 03 Sep 2022 22:27:17 GMT
Last-Modified: Sat, 03 Sep 2022 20:48:01 GMT
Server: ECS (nyb/1D10)
X-Cache: Miss from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Fel6Zb93T_OERfu2ID9VH1HGcICVyE2xeEVcpeDF99YQSURsiPnd0g==
Age: 5956
data.perfmaker.net/data/website/614210c6324d8/settings/ba389e6ca12b34742ec839169697ad31893505af
200 OK 2.7 kB URL HTTP/1.1 data.perfmaker.net/data/website/614210c6324d8/settings/ba389e6ca12b34742ec839169697ad31893505af
IP
File type ASCII text, with very long lines (20833), with no line terminators
Hash 22d7b64b965edead235e221648ec90ac
93bb7ad905243dd2b48cbb0c9cdf2de5f75cea52
36cd675e7b072b65585a522ed0370324be5f6f0705a1521b3f524b59b82dbf04
GET /data/website/614210c6324d8/settings/ba389e6ca12b34742ec839169697ad31893505af HTTP/1.1
Host: data.perfmaker.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vouchersavenue.com/
Origin: https://vouchersavenue.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Origin: https://vouchersavenue.com
Vary: Origin, Accept-Encoding
Access-Control-Allow-Credentials: true
Content-Type: application/json; charset=utf-8
ETag: W/"5161-ZiIex+XA24AJXP9tZk2UDAR1a6w"
Content-Encoding: gzip
Date: Sat, 03 Sep 2022 22:27:17 GMT
Connection: close
Transfer-Encoding: chunked
Set-Cookie: sid=s6; path=/
Cache-control: private
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 750
Origin: https://vouchersavenue.com
Connection: keep-alive
Referer: https://vouchersavenue.com/
Cookie: _ttp=2EHEJNMY4cuAkAoAwtXfsXxMgo6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/octet-stream
content-length: 0
access-control-allow-origin: *
x-tt-logid: 20220903222717ECD8C3F0E5DC091AFBB3
x-tt-trace-host: 014c3d3a48b720cad047ee4725ef00c61e3b5abc4166c8e729682c4aeb7a9b45fa195fb17f80eb5d7e707b5d0351a978d4b9a2395c1c1771409a9106e1e80b5f63bbca62799968dd3ac26a557c19c43cc23ce61522ee281e280e4f999a84106cfa
x-origin-response-time: 17,23.220.107.18
x-akamai-request-id: 2167b61b.b6d76e0
expires: Sat, 03 Sep 2022 22:27:17 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sat, 03 Sep 2022 22:27:17 GMT
x-cache: TCP_MISS from a104-84-152-230.deploy.akamaitechnologies.com (AkamaiGHost/10.9.3-43949849) (-)
x-cache-remote: TCP_MISS from a23-220-107-18.deploy.akamaitechnologies.com (AkamaiGHost/10.9.3-43949849) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=106, origin; dur=17, inner; dur=14
x-parent-response-time: 117,104.84.152.230
X-Firefox-Spdy: h2
trc.pushnami.com/api/push/track
204 No Content 0 B URL HTTP/2 trc.pushnami.com/api/push/track
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/push/track HTTP/1.1
Host: trc.pushnami.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: key
Referer: https://vouchersavenue.com/
Origin: https://vouchersavenue.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 03 Sep 2022 22:27:17 GMT
access-control-allow-origin: *
access-control-allow-methods: POST
access-control-allow-headers: Accept,Authorization,Content-Type,If-None-Match,key
access-control-max-age: 86400
access-control-expose-headers: WWW-Authenticate,Server-Authorization
cache-control: no-cache
X-Firefox-Spdy: h2
trc.pushnami.com/api/push/track
200 OK 2 B URL HTTP/2 trc.pushnami.com/api/push/track
IP
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /api/push/track HTTP/1.1
Host: trc.pushnami.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vouchersavenue.com/
content-type: application/x-www-form-urlencoded
key: 5cc0bb93e04a8c20b5240228
Origin: https://vouchersavenue.com
Content-Length: 76
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 22:27:17 GMT
content-type: text/html; charset=utf-8
content-length: 2
access-control-allow-origin: *
access-control-expose-headers: WWW-Authenticate,Server-Authorization
cache-control: no-cache
X-Firefox-Spdy: h2
d2m2wsoho8qq12.cloudfront.net/iframe.html?token=655B9084-9889-CE28-963A-C911605ADA92&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.11.9&lck=BEB516A1-60ED-00CC-73EB-A6A318CFA8E9&lac=A223F9AF-E7A0-7D87-DD28-D0C442307BFE
200 OK 1.4 kB URL HTTP/1.1 d2m2wsoho8qq12.cloudfront.net/iframe.html?token=655B9084-9889-CE28-963A-C911605ADA92&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.11.9&lck=BEB516A1-60ED-00CC-73EB-A6A318CFA8E9&lac=A223F9AF-E7A0-7D87-DD28-D0C442307BFE
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash ef825b8a88a51cd76a51d08dfc1d4f99
5bf247bd91a4be0c3b76a70ec8e5e462de0e9f3b
2ac453ec379c3e7b0fa69b810ecf2d6771de3e7611a2599a20f8e8ce9a240af1
GET /iframe.html?token=655B9084-9889-CE28-963A-C911605ADA92&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.11.9&lck=BEB516A1-60ED-00CC-73EB-A6A318CFA8E9&lac=A223F9AF-E7A0-7D87-DD28-D0C442307BFE HTTP/1.1
Host: d2m2wsoho8qq12.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sat, 03 Sep 2022 03:33:09 GMT
Server: nginx
Last-Modified: Thu, 02 Jun 2022 15:26:15 GMT
ETag: W/"6298d697-dbb"
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Content-Encoding: gzip
X-Cache: Hit from cloudfront
Via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: wVaX2i6tK0hO9XUhoypSB-Cld_dion5xUdIa5vAepAEshwUzhAm92A==
Age: 68048
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3f5b4e778429d4ba70b497cc9fbb1127
db17f774a14f160caa77eb0222152767a364bba7
64da763bf84ec2d6284a112f50392f15a8b11122f3875317c52bd6c5e8e8d894
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 22:27:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/973571488/?random=1662244034092&cv=9&fst=1662244034092&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg8v0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fvouchersavenue.com%2Fsoap-d%2Fsignup%2F1&tiba=Vouchers%20Avenue%20%3A%20Soap-D&auid=1315937788.1662244033&hn=www.google.com&async=1&rfmt=3&fmt=4
200 OK 1.0 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/973571488/?random=1662244034092&cv=9&fst=1662244034092&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg8v0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fvouchersavenue.com%2Fsoap-d%2Fsignup%2F1&tiba=Vouchers%20Avenue%20%3A%20Soap-D&auid=1315937788.1662244033&hn=www.google.com&async=1&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2242), with no line terminators
Hash 1b6c3cd722db56eb5bd0ee8a3e5837d3
759268cd9e6d23924be447cafca166e05614308b
558030cc234a009899d23049a144ac1b81e05378c3baec009aa11f6f533c055b
GET /pagead/viewthroughconversion/973571488/?random=1662244034092&cv=9&fst=1662244034092&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg8v0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fvouchersavenue.com%2Fsoap-d%2Fsignup%2F1&tiba=Vouchers%20Avenue%20%3A%20Soap-D&auid=1315937788.1662244033&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 03 Sep 2022 22:27:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1028
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sat, 03-Sep-2022 22:42:17 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3f5b4e778429d4ba70b497cc9fbb1127
db17f774a14f160caa77eb0222152767a364bba7
64da763bf84ec2d6284a112f50392f15a8b11122f3875317c52bd6c5e8e8d894
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 22:27:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s.yimg.com/wi/config/10015244.json
200 OK 22 B URL HTTP/2 s.yimg.com/wi/config/10015244.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 14293ad9ad0ffaf9f7a3acf1b0793b66
718dea6b65b9516e5e33fac53451056397deb255
73a1b438b0221511fb3dde18e019f5ab045811b2248d25d424e40980c683a9dc
GET /wi/config/10015244.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vouchersavenue.com
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
x-amz-request-id: 3BQWPWG8ZKNV7ERQ
x-amz-id-2: ax0a5TifjI25B1LKvyldtv4+4oqNpOYQNV8dMYYv1Q16VcYRES80oZIJ9CCDCl/z0y2zxbjEZ+4=
content-type: application/json
date: Sat, 03 Sep 2022 22:27:17 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
age: 0
content-encoding: gzip
content-length: 22
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash d76568059511630d1ab800e84f4524b6
014781a90c91bfb09fe469c00ae48aab89de754f
75f622d0656d170e2e4c92abb99179eee6c260902b4df03b54da8d80088ff8d0
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 03 Sep 2022 22:27:17 GMT
Last-Modified: Sat, 03 Sep 2022 20:43:11 GMT
Server: ECS (nyb/1D13)
X-Cache: Miss from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: s4BOjh-DujnXsTR-Q7N3b3XvyjNaOTbxC5ZMRMjv27dqLCtlLwXEXg==
Age: 6246
pwrkr.s3.amazonaws.com/push-worker-sdk-TAGA2958.js
200 OK 222 B URL HTTP/1.1 pwrkr.s3.amazonaws.com/push-worker-sdk-TAGA2958.js
IP
Hash c86f20d2163476bfa9d8c8ddb4d9ab5b
c79017b2c0c8a134d646d43eab957c1a0dae504e
88535ddc6ee6525237614935cf4a2a3ac15797263a4468a65082ab4b788d94c1
GET /push-worker-sdk-TAGA2958.js HTTP/1.1
Host: pwrkr.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: Mw1yRzXC8RoHu7MJJaAXireWTrctFHPHCufQ6M7eRV9Fh1t4DUJ7ZWhoKYDWyqQ6316gz+yGXT8=
x-amz-request-id: 3BQG6C5S7B9XVQYH
Date: Sat, 03 Sep 2022 22:27:18 GMT
Last-Modified: Wed, 30 Mar 2022 18:54:24 GMT
ETag: "c86f20d2163476bfa9d8c8ddb4d9ab5b"
x-amz-version-id: qXUXhRDuiTMcAHML6mtY_O8jIrrAfEra
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 222
create.leadid.com/2.11.9/SaveDom?msn=2&pid=ff50ffce-9f26-462c-abba-b0dfe0902720&token=655B9084-9889-CE28-963A-C911605ADA92&_=337790108
200 OK 491 B URL HTTP/2 create.leadid.com/2.11.9/SaveDom?msn=2&pid=ff50ffce-9f26-462c-abba-b0dfe0902720&token=655B9084-9889-CE28-963A-C911605ADA92&_=337790108
IP
Hash 91718fbbc861f6b949b966398a281986
fcbf9fc0fa933d0ae3e45f1d29410fcd97fac19d
060bab6662da86fe5bba8bd2d812f8b3f91e32130cf69f03f7ab38debc0a187f
POST /2.11.9/SaveDom?msn=2&pid=ff50ffce-9f26-462c-abba-b0dfe0902720&token=655B9084-9889-CE28-963A-C911605ADA92&_=337790108 HTTP/1.1
Host: create.leadid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 494
Origin: https://vouchersavenue.com
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 22:27:17 GMT
content-type: text/plain;charset=UTF-8
server: nginx
set-cookie: rgisanonymous=false; expires=Mon, 03-Oct-2022 22:27:17 GMT; Max-Age=2592000; path=/
rguserid=270086c5-8e09-49d0-89a1-0367c7efd2de; expires=Mon, 03-Oct-2022 22:27:17 GMT; Max-Age=2592000; path=/
rguuid=true; expires=Mon, 03-Oct-2022 22:27:17 GMT; Max-Age=2592000; path=/
rgisanonymous=true; expires=Mon, 03-Oct-2022 22:27:17 GMT; Max-Age=2592000; path=/
cache-control: no-cache, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type
access-control-max-age: 1728000
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/973571488/?random=1662244034092&cv=9&fst=1662242400000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg8v0&sendb=1&frm=0&url=https%3A%2F%2Fvouchersavenue.com%2Fsoap-d%2Fsignup%2F1&tiba=Vouchers%20Avenue%20%3A%20Soap-D&async=1&fmt=3&is_vtc=1&random=4129710706&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/973571488/?random=1662244034092&cv=9&fst=1662242400000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg8v0&sendb=1&frm=0&url=https%3A%2F%2Fvouchersavenue.com%2Fsoap-d%2Fsignup%2F1&tiba=Vouchers%20Avenue%20%3A%20Soap-D&async=1&fmt=3&is_vtc=1&random=4129710706&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/973571488/?random=1662244034092&cv=9&fst=1662242400000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg8v0&sendb=1&frm=0&url=https%3A%2F%2Fvouchersavenue.com%2Fsoap-d%2Fsignup%2F1&tiba=Vouchers%20Avenue%20%3A%20Soap-D&async=1&fmt=3&is_vtc=1&random=4129710706&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 03 Sep 2022 22:27:18 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.trustedform.com/bootstrap.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=16622440332260.35092910551434864
200 OK 3.8 kB URL HTTP/2 cdn.trustedform.com/bootstrap.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=16622440332260.35092910551434864
IP
Hash cd7e5e3e967a18df08ed41776e28e794
05cd2c6a4c5cd8caed704f2c0b75037bd02dbd0e
cf3165f26ae6ff6d8e6d840061fde6d013f784f7755f713c635a0ba123ab28b2
GET /bootstrap.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=16622440332260.35092910551434864 HTTP/1.1
Host: cdn.trustedform.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vouchersavenue.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Sat, 03 Sep 2022 22:27:18 GMT
last-modified: Tue, 16 Aug 2022 18:53:06 GMT
x-amz-version-id: 9tpprjSXF1V1i663qaS1L8y.yb5CQ2dA
etag: W/"97d91c9803cec4e7981c0f415c2c1923"
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: t7qtMuqNds_FYy1b9GsbYjT3dv95bSl3B7K_gFr_qU47TEqGfBOdqg==
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 6272b04267579e42de52568efa033a25
666dae2443b5c3678a7efd26b4fc6f7b74331fae
b5ed66f55cc8be5b901857149a6a03f15e98fc851aff5b0f52a32c46289572ae
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 03 Sep 2022 22:27:18 GMT
Last-Modified: Sat, 03 Sep 2022 22:26:29 GMT
Server: ECS (dcb/7EA3)
X-Cache: Miss from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: d7wYSVTKEMXZBn6CG3NgO8Q2xAozChj1eIixqYy6lKP9M8plq-q81g==
Age: 50
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash f5977d5bb43719960e09620597101f13
158f9890be30615480fda739176328951276321e
786ed81a140a5146dc127ae299789676b8669d3a728ae6643f82fd62d9a002c7
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 03 Sep 2022 22:27:18 GMT
Last-Modified: Sat, 03 Sep 2022 21:04:27 GMT
Server: ECS (nyb/1D24)
X-Cache: Miss from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: UXouvecsGwP6POugPnDKUgIYuYz9wmF3UXEF1z8ud3RKoMrMNOWUqA==
Age: 4971
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-61353733-5&cid=1527670603.1662244034&jid=1889470270&gjid=1511825099&_gid=138205994.1662244034&_u=KGBAAEACQAAAAC~&z=1226656758
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-61353733-5&cid=1527670603.1662244034&jid=1889470270&gjid=1511825099&_gid=138205994.1662244034&_u=KGBAAEACQAAAAC~&z=1226656758
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-61353733-5&cid=1527670603.1662244034&jid=1889470270&gjid=1511825099&_gid=138205994.1662244034&_u=KGBAAEACQAAAAC~&z=1226656758 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://vouchersavenue.com
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://vouchersavenue.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sat, 03 Sep 2022 22:27:18 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s3.amazonaws.com/pushext.com/sdk-v3.03.js
200 OK 28 kB URL HTTP/1.1 s3.amazonaws.com/pushext.com/sdk-v3.03.js
IP
File type ASCII text, with CRLF line terminators
Hash ddcd86ed61e2264d6ebcfd75102f02ee
e0eccfc8ea444bd5eabcf38e22240b4db80fe34a
d568a00003589ad112ddf1f8a27c4cbf7b63a80b1df39a26d1ebc2f185417e53
GET /pushext.com/sdk-v3.03.js HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: rZ1GbHXpfAu5ZzStdCUiFIQXpUT75+3ik1Uk3RWb3ped1lzxCDedi7Af9mRjJZUvJHcDUmY6f5c=
x-amz-request-id: R5APVBV25F88C1Q6
Date: Sat, 03 Sep 2022 22:27:19 GMT
Last-Modified: Wed, 30 Mar 2022 18:55:32 GMT
ETag: "ddcd86ed61e2264d6ebcfd75102f02ee"
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 28274
api.trustedform.com/certs
201 Created 475 B URL HTTP/2 api.trustedform.com/certs
IP
File type JSON data\012- , ASCII text, with very long lines (475), with no line terminators
Hash 9d84cef93eb9d727492591b4b45074a1
b58537ed8c339e378c645f2116afa624920d2b46
9e284165b1d97293a013e59f202eff685f369436517b001d4cedf5b3d22f39f3
POST /certs HTTP/1.1
Host: api.trustedform.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 589
Origin: https://vouchersavenue.com
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 201 Created
date: Sat, 03 Sep 2022 22:27:18 GMT
content-type: application/json; charset=utf-8
content-length: 475
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers:
cache-control: max-age=0, private, must-revalidate
server: Cowboy
X-Firefox-Spdy: h2
api.trustedform.com/certs/eeee2fdb59b1dabc6e267ebbe8100418f4918722/snapshot
204 No Content 0 B URL HTTP/2 api.trustedform.com/certs/eeee2fdb59b1dabc6e267ebbe8100418f4918722/snapshot
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /certs/eeee2fdb59b1dabc6e267ebbe8100418f4918722/snapshot HTTP/1.1
Host: api.trustedform.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 53487
Origin: https://vouchersavenue.com
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 03 Sep 2022 22:27:19 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers:
cache-control: max-age=0, private, must-revalidate
server: Cowboy
X-Firefox-Spdy: h2
api.trustedform.com/certs/eeee2fdb59b1dabc6e267ebbe8100418f4918722/fingerprints
204 No Content 0 B URL HTTP/2 api.trustedform.com/certs/eeee2fdb59b1dabc6e267ebbe8100418f4918722/fingerprints
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /certs/eeee2fdb59b1dabc6e267ebbe8100418f4918722/fingerprints HTTP/1.1
Host: api.trustedform.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 778
Origin: https://vouchersavenue.com
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 03 Sep 2022 22:27:19 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers:
cache-control: max-age=0, private, must-revalidate
server: Cowboy
X-Firefox-Spdy: h2
api.trustedform.com/certs/eeee2fdb59b1dabc6e267ebbe8100418f4918722/events
204 No Content 0 B URL HTTP/2 api.trustedform.com/certs/eeee2fdb59b1dabc6e267ebbe8100418f4918722/events
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /certs/eeee2fdb59b1dabc6e267ebbe8100418f4918722/events HTTP/1.1
Host: api.trustedform.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 350
Origin: https://vouchersavenue.com
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 03 Sep 2022 22:27:21 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers:
cache-control: max-age=0, private, must-revalidate
server: Cowboy
X-Firefox-Spdy: h2
cdn.trustedform.com/trustedform-1.8.27.js
200 OK 37 kB URL HTTP/2 cdn.trustedform.com/trustedform-1.8.27.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash afde9a0e402c0e0eeb2300b00d9055b9
bb87bbcde63639b617298ea44bad7e5790cdb3e0
af4af35d3062eb4757502f20e184a434014a0f7e18309846c8a9bfa01d75ac7e
GET /trustedform-1.8.27.js HTTP/1.1
Host: cdn.trustedform.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 16 Aug 2022 18:53:06 GMT
x-amz-version-id: 6olc5v40B1RpRJGb5GYISB93fSUp4tqK
server: AmazonS3
content-encoding: gzip
date: Sat, 03 Sep 2022 22:27:19 GMT
etag: W/"2f557edcc84fd346c897a4d565e57ac0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jJssLLfRG4HaapJpfD6NN5LfqRzjwwhPbgNl8D4-Eq9YAKBeShYkpw==
age: 25
X-Firefox-Spdy: h2
api.trustedform.com/certs/eeee2fdb59b1dabc6e267ebbe8100418f4918722/events
204 No Content 0 B URL HTTP/2 api.trustedform.com/certs/eeee2fdb59b1dabc6e267ebbe8100418f4918722/events
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /certs/eeee2fdb59b1dabc6e267ebbe8100418f4918722/events HTTP/1.1
Host: api.trustedform.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 3726
Origin: https://vouchersavenue.com
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 03 Sep 2022 22:27:22 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers:
cache-control: max-age=0, private, must-revalidate
server: Cowboy
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/sdk.js?sdkid=BRK97NBJ857475I0MEDG
200 OK 0 B URL HTTP/2 analytics.tiktok.com/i18n/pixel/sdk.js?sdkid=BRK97NBJ857475I0MEDG
IP
ASN #20940 Akamai International B.V.
GET /i18n/pixel/sdk.js?sdkid=BRK97NBJ857475I0MEDG HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 20220903222716FF30A127FBB66B1EA621
x-tt-trace-host: 014c3d3a48b720cad047ee4725ef00c61e3b5abc4166c8e729682c4aeb7a9b45fa7d4d4ca2fb35c1e25050068ff4789fe2b3f1894ae6b7c84e05173c84958d548b46fef4ac8f6c8a9a55d52f3109288f9a75e0f6407af0226689a4b998e0d8e5e4
content-encoding: gzip
x-origin-response-time: 7,23.220.107.15
x-akamai-request-id: 35f2b86d.b6d72c6
expires: Sat, 03 Sep 2022 22:27:16 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sat, 03 Sep 2022 22:27:16 GMT
x-cache: TCP_MISS from a104-84-152-230.deploy.akamaitechnologies.com (AkamaiGHost/10.9.3-43949849) (-)
vary: Accept-Encoding
x-cache-remote: TCP_MISS from a23-220-107-15.deploy.akamaitechnologies.com (AkamaiGHost/10.9.3-43949849) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=101, origin; dur=7, inner; dur=3
x-parent-response-time: 108,104.84.152.230
X-Firefox-Spdy: h2
vouchersavenue.com/service-worker.js
200 OK 0 B URL HTTP/2 vouchersavenue.com/service-worker.js
IP
Analyzer Verdict Alert fortinet Phishing
GET /service-worker.js HTTP/1.1
Host: vouchersavenue.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: AWSALB=smxWECjYk/YJYVDVrNUD6Dj4DwnpbPQw4spqFh9XFXUl6WU/8CTs1MvaFfDvPr7wr1YFW0qyYkUdp4Xox3Ej/gzbXM43Pp/e+f5m0QTN0edaucyTZc4wSfc2NIBb; AWSALBCORS=smxWECjYk/YJYVDVrNUD6Dj4DwnpbPQw4spqFh9XFXUl6WU/8CTs1MvaFfDvPr7wr1YFW0qyYkUdp4Xox3Ej/gzbXM43Pp/e+f5m0QTN0edaucyTZc4wSfc2NIBb; contest_session=7LrhXcuuMz1fAzq16upO2AjKKZJSAYfNV5v3ubtM; _gcl_au=1.1.1315937788.1662244033; _ga=GA1.2.1527670603.1662244034; _gid=GA1.2.138205994.1662244034
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 22:27:16 GMT
content-type: application/x-javascript
set-cookie: AWSALB=fK/s+q5XjO1jwkNkR1TMp8lMqu9RnPAORVUmCBAxvrLDZfk4248cugXFc2wYKlmi7/cSm76WHtp2xak3AaEeagV9z8lB0XZfNrf2TFYl6/UGEPjRh3SuVCBPaoaG; Expires=Sat, 10 Sep 2022 22:27:16 GMT; Path=/
AWSALBCORS=fK/s+q5XjO1jwkNkR1TMp8lMqu9RnPAORVUmCBAxvrLDZfk4248cugXFc2wYKlmi7/cSm76WHtp2xak3AaEeagV9z8lB0XZfNrf2TFYl6/UGEPjRh3SuVCBPaoaG; Expires=Sat, 10 Sep 2022 22:27:16 GMT; Path=/; SameSite=None; Secure
contest_session=7LrhXcuuMz1fAzq16upO2AjKKZJSAYfNV5v3ubtM; path=/; secure; httponly; samesite=none
server: nginx/1.23.1
x-powered-by: PHP/8.1.3
cache-control: no-cache, private
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
create.leadid.com/2.11.9/InitFormData?msn=3&pid=ff50ffce-9f26-462c-abba-b0dfe0902720&token=655B9084-9889-CE28-963A-C911605ADA92&_=337790109
200 OK 0 B URL HTTP/2 create.leadid.com/2.11.9/InitFormData?msn=3&pid=ff50ffce-9f26-462c-abba-b0dfe0902720&token=655B9084-9889-CE28-963A-C911605ADA92&_=337790109
IP
POST /2.11.9/InitFormData?msn=3&pid=ff50ffce-9f26-462c-abba-b0dfe0902720&token=655B9084-9889-CE28-963A-C911605ADA92&_=337790109 HTTP/1.1
Host: create.leadid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 67424
Origin: https://vouchersavenue.com
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 22:27:18 GMT
content-type: text/plain;charset=UTF-8
server: nginx
set-cookie: rgisanonymous=false; expires=Mon, 03-Oct-2022 22:27:18 GMT; Max-Age=2592000; path=/
rguserid=5ceb8356-1b2a-4bee-8326-ec86d47c6dda; expires=Mon, 03-Oct-2022 22:27:18 GMT; Max-Age=2592000; path=/
rguuid=true; expires=Mon, 03-Oct-2022 22:27:18 GMT; Max-Age=2592000; path=/
rgisanonymous=true; expires=Mon, 03-Oct-2022 22:27:18 GMT; Max-Age=2592000; path=/
cache-control: no-cache, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type
access-control-max-age: 1728000
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
api.pushnami.com/scripts/v2/pushnami-sw/5cc0bb93e04a8c20b5240228
200 OK 0 B URL HTTP/2 api.pushnami.com/scripts/v2/pushnami-sw/5cc0bb93e04a8c20b5240228
IP
GET /scripts/v2/pushnami-sw/5cc0bb93e04a8c20b5240228 HTTP/1.1
Host: api.pushnami.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Sat, 03 Sep 2022 22:17:26 GMT
cache-control: no-cache
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _33Ry2vHeH4uNCsD6Ni2cvfbu032rib7HwWjMpYeNE0CNpZHLe00IA==
age: 592
X-Firefox-Spdy: h2
create.leadid.com/2.11.9/SaveDeviceId.js?lac=A223F9AF-E7A0-7D87-DD28-D0C442307BFE&lck=BEB516A1-60ED-00CC-73EB-A6A318CFA8E9&methods=48&token=655B9084-9889-CE28-963A-C911605ADA92&uuid=c0e4620def204ea0a55eba5be5eeea77
200 OK 0 B URL HTTP/2 create.leadid.com/2.11.9/SaveDeviceId.js?lac=A223F9AF-E7A0-7D87-DD28-D0C442307BFE&lck=BEB516A1-60ED-00CC-73EB-A6A318CFA8E9&methods=48&token=655B9084-9889-CE28-963A-C911605ADA92&uuid=c0e4620def204ea0a55eba5be5eeea77
IP
GET /2.11.9/SaveDeviceId.js?lac=A223F9AF-E7A0-7D87-DD28-D0C442307BFE&lck=BEB516A1-60ED-00CC-73EB-A6A318CFA8E9&methods=48&token=655B9084-9889-CE28-963A-C911605ADA92&uuid=c0e4620def204ea0a55eba5be5eeea77 HTTP/1.1
Host: create.leadid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://deviceid.trueleadid.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 22:27:18 GMT
content-type: text/javascript;charset=UTF-8
server: nginx
set-cookie: rgisanonymous=false; expires=Mon, 03-Oct-2022 22:27:18 GMT; Max-Age=2592000; path=/
rguserid=28de339f-9a4a-490d-81e1-1a5024966a7c; expires=Mon, 03-Oct-2022 22:27:18 GMT; Max-Age=2592000; path=/
rguuid=true; expires=Mon, 03-Oct-2022 22:27:18 GMT; Max-Age=2592000; path=/
rgisanonymous=true; expires=Mon, 03-Oct-2022 22:27:18 GMT; Max-Age=2592000; path=/
cache-control: no-cache, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type
access-control-max-age: 1728000
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
psp.pushnami.com/api/psp
200 OK 0 B IP
OPTIONS /api/psp HTTP/1.1
Host: psp.pushnami.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: key
Referer: https://vouchersavenue.com/
Origin: https://vouchersavenue.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Sep 2022 22:27:19 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: https://vouchersavenue.com
access-control-allow-credentials: true
access-control-expose-headers: content-type, content-length, etag
access-control-max-age: 600
access-control-allow-headers: key
access-control-allow-methods: POST
cache-control: no-cache
vary: accept-encoding
content-encoding: gzip
X-Firefox-Spdy: h2
api.pushnami.com/scripts/v1/pushnami-adv/5cc0bb93e04a8c20b5240228
200 OK 0 B URL HTTP/2 api.pushnami.com/scripts/v1/pushnami-adv/5cc0bb93e04a8c20b5240228
IP
GET /scripts/v1/pushnami-adv/5cc0bb93e04a8c20b5240228 HTTP/1.1
Host: api.pushnami.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Sat, 03 Sep 2022 22:23:22 GMT
cache-control: no-cache
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7HQbzoxkjA47jxQrw07H5NBu581VYbpGHfslA3mzV78B41iLI-Z2Xg==
age: 234
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/config.js?sdkid=BRK97NBJ857475I0MEDG&hostname=vouchersavenue.com
200 OK 0 B URL HTTP/2 analytics.tiktok.com/i18n/pixel/config.js?sdkid=BRK97NBJ857475I0MEDG&hostname=vouchersavenue.com
IP
ASN #20940 Akamai International B.V.
GET /i18n/pixel/config.js?sdkid=BRK97NBJ857475I0MEDG&hostname=vouchersavenue.com HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 20220903222716859B9E910C211B15F048
x-tt-trace-host: 014c3d3a48b720cad047ee4725ef00c61eea492f996f999f36ffae997e4229eda3faaaed5e4f93d0e940fec3b6fb687197ccbbd0d2ee0af57da49f99d18675c20cfbdb98146c27a767850a5d7d17a82c81ad3ebefb691a905b58ba0071699c7ce3
content-encoding: gzip
x-origin-response-time: 7,72.247.190.102
x-akamai-request-id: 19d458e4.b6d75fd
expires: Sat, 03 Sep 2022 22:27:16 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sat, 03 Sep 2022 22:27:16 GMT
x-cache: TCP_MISS from a104-84-152-230.deploy.akamaitechnologies.com (AkamaiGHost/10.9.3-43949849) (-)
vary: Accept-Encoding
set-cookie: _ttp=2EHEJNMY4cuAkAoAwtXfsXxMgo6; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-cache-remote: TCP_MISS from a72-247-190-102.deploy.akamaitechnologies.com (AkamaiGHost/10.9.3-43949849) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=102, origin; dur=7, inner; dur=3
x-parent-response-time: 109,104.84.152.230
X-Firefox-Spdy: h2
create.leadid.com/2.11.9/GenerateToken?msn=1&pid=ff50ffce-9f26-462c-abba-b0dfe0902720&_=337790107
200 OK 0 B URL HTTP/2 create.leadid.com/2.11.9/GenerateToken?msn=1&pid=ff50ffce-9f26-462c-abba-b0dfe0902720&_=337790107
IP
POST /2.11.9/GenerateToken?msn=1&pid=ff50ffce-9f26-462c-abba-b0dfe0902720&_=337790107 HTTP/1.1
Host: create.leadid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 185
Origin: https://vouchersavenue.com
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Sep 2022 22:27:17 GMT
content-type: text/plain;charset=UTF-8
server: nginx
set-cookie: rgisanonymous=false; expires=Mon, 03-Oct-2022 22:27:17 GMT; Max-Age=2592000; path=/
rguserid=67ec403b-0e22-4073-a13c-f077f6b6f393; expires=Mon, 03-Oct-2022 22:27:17 GMT; Max-Age=2592000; path=/
rguuid=true; expires=Mon, 03-Oct-2022 22:27:17 GMT; Max-Age=2592000; path=/
rgisanonymous=true; expires=Mon, 03-Oct-2022 22:27:17 GMT; Max-Age=2592000; path=/
cache-control: no-cache, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type
access-control-max-age: 1728000
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
api.pushnami.com/scripts/v1/hub
200 OK 0 B URL HTTP/2 api.pushnami.com/scripts/v1/hub
IP
GET /scripts/v1/hub HTTP/1.1
Host: api.pushnami.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
date: Sat, 03 Sep 2022 22:10:44 GMT
access-control-allow-origin: *
access-control-allow-methods: GET,PUT,POST,DELETE
access-control-allow-headers: X-Requested-With
content-security-policy: default-src 'unsafe-inline' *
x-content-security-policy: default-src 'unsafe-inline' *
x-webkit-csp: default-src 'unsafe-inline' *
cache-control: no-cache
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LyXcNPBtwFQCwXgoQf8H2wm-NHCxhko7FUp6Eg4knTBU8md9UGfVDQ==
age: 994
X-Firefox-Spdy: h2
psp.pushnami.com/api/psp
200 OK 0 B IP
POST /api/psp HTTP/1.1
Host: psp.pushnami.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vouchersavenue.com/
content-type: application/x-www-form-urlencoded
key: 5cc0bb93e04a8c20b5240228
Origin: https://vouchersavenue.com
Content-Length: 46
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 22:27:19 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: https://vouchersavenue.com
access-control-allow-credentials: true
cache-control: no-cache
vary: accept-encoding
content-encoding: gzip
X-Firefox-Spdy: h2
vouchersavenue.com/soap-d/signup/1
200 OK 0 B URL HTTP/2 vouchersavenue.com/soap-d/signup/1
IP
Analyzer Verdict Alert fortinet Phishing
GET /soap-d/signup/1 HTTP/1.1
Host: vouchersavenue.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: AWSALB=/tcTS8gZx7ipEC2NuVY3gDlX4xS3SttWLDg5FOKZKxppuzY0i/TTcypZzKFzlSm39jKZ6lj3SKvzlbsIQORC7E7j9qoxmTrlFXWkT9AfFgYt2gW8pHktSxLp+nMj; AWSALBCORS=/tcTS8gZx7ipEC2NuVY3gDlX4xS3SttWLDg5FOKZKxppuzY0i/TTcypZzKFzlSm39jKZ6lj3SKvzlbsIQORC7E7j9qoxmTrlFXWkT9AfFgYt2gW8pHktSxLp+nMj; contest_session=7LrhXcuuMz1fAzq16upO2AjKKZJSAYfNV5v3ubtM
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 22:27:14 GMT
content-type: text/html; charset=UTF-8
set-cookie: AWSALB=jzaJvDqBKBr1XIx5iR6r0qirR+onPInq85+f5JNoGyC9emVfpn93mJgbCYXeg+rKkcxMhCaOopGADxjT6pFLKpG5UKTZgofyPHfq2ExNhchFvaeRJ7I4MyL68hCJ; Expires=Sat, 10 Sep 2022 22:27:14 GMT; Path=/
AWSALBCORS=jzaJvDqBKBr1XIx5iR6r0qirR+onPInq85+f5JNoGyC9emVfpn93mJgbCYXeg+rKkcxMhCaOopGADxjT6pFLKpG5UKTZgofyPHfq2ExNhchFvaeRJ7I4MyL68hCJ; Expires=Sat, 10 Sep 2022 22:27:14 GMT; Path=/; SameSite=None; Secure
contest_session=7LrhXcuuMz1fAzq16upO2AjKKZJSAYfNV5v3ubtM; path=/; secure; httponly; samesite=none
server: nginx/1.23.1
x-powered-by: PHP/8.1.3
cache-control: no-cache, private
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
create.lidstatic.com/campaign/beb516a1-60ed-00cc-73eb-a6a318cfa8e9.js?snippet_version=2
200 OK 0 B URL HTTP/2 create.lidstatic.com/campaign/beb516a1-60ed-00cc-73eb-a6a318cfa8e9.js?snippet_version=2
IP
GET /campaign/beb516a1-60ed-00cc-73eb-a6a318cfa8e9.js?snippet_version=2 HTTP/1.1
Host: create.lidstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Sep 2022 22:27:16 GMT
content-type: text/javascript
x-amz-id-2: DaF8S1L711GNwDWa6Cxm3fpBspQvdWcnMEBsbdlnhZLa2tDa8ai2F2WJy43Zy0L9jMpGelNosuw=
x-amz-request-id: F98K3W92KHPP71Q5
x-amz-replication-status: COMPLETED
last-modified: Fri, 12 Nov 2021 01:06:02 GMT
etag: W/"a26a2a7efa03d037874965870726da4a"
cache-control: max-age=1800
x-amz-version-id: C0ArZgU5VyyGfHMzwlfuO_22EOgyVHi9
cf-cache-status: REVALIDATED
vary: Accept-Encoding
server: cloudflare
cf-ray: 7451e969882b1691-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
deviceid.trueleadid.com/iframe.html?token=655B9084-9889-CE28-963A-C911605ADA92&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.11.9&lck=BEB516A1-60ED-00CC-73EB-A6A318CFA8E9&lac=A223F9AF-E7A0-7D87-DD28-D0C442307BFE
200 OK 0 B URL HTTP/2 deviceid.trueleadid.com/iframe.html?token=655B9084-9889-CE28-963A-C911605ADA92&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.11.9&lck=BEB516A1-60ED-00CC-73EB-A6A318CFA8E9&lac=A223F9AF-E7A0-7D87-DD28-D0C442307BFE
IP
GET /iframe.html?token=655B9084-9889-CE28-963A-C911605ADA92&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.11.9&lck=BEB516A1-60ED-00CC-73EB-A6A318CFA8E9&lac=A223F9AF-E7A0-7D87-DD28-D0C442307BFE HTTP/1.1
Host: deviceid.trueleadid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d2m2wsoho8qq12.cloudfront.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Sep 2022 22:27:18 GMT
content-type: text/html
server: nginx
last-modified: Mon, 13 Jun 2022 14:52:50 GMT
etag: W/"62a74f42-1049"
expires: Sun, 04 Sep 2022 22:27:18 GMT
p3p: CP="NOI DSP COR NID CUR ADM DEV OUR BUS"
cache-control: max-age=86400, public
content-encoding: gzip
X-Firefox-Spdy: h2
imgs.tagadamedia.com/media/us/20/450x70-2094.svg
200 OK 0 B URL HTTP/2 imgs.tagadamedia.com/media/us/20/450x70-2094.svg
IP
ASN #60068 Datacamp Limited
GET /media/us/20/450x70-2094.svg HTTP/1.1
Host: imgs.tagadamedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 22:27:14 GMT
content-type: image/svg+xml
vary: Accept-Encoding
server: BunnyCDN-DE-723
cdn-pullzone: 61945
cdn-uid: 5d127034-96a6-45e8-a482-4f40615f18db
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Mon, 24 Jan 2022 11:51:37 GMT
x-amz-id-2: /E7Ryl6kd+l4YU9U0SJGtdqG+6JuIZmnu/l65ADXNeNcTHnyIB3XTcw18vGteh4ZdJXP/ZurEfQ=
x-amz-request-id: DM4Z62XC492T3S0Y
cdn-proxyver: 1.02
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 08/08/2022 20:01:30
cdn-edgestorageid: 601
cdn-status: 200
cdn-requestid: d56969279bed223eea0a2e66540d07cc
cdn-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
vouchersavenue.com/css/app.css?id=b245adff1dd0b543463a
200 OK 0 B URL HTTP/2 vouchersavenue.com/css/app.css?id=b245adff1dd0b543463a
IP
Analyzer Verdict Alert fortinet Phishing
GET /css/app.css?id=b245adff1dd0b543463a HTTP/1.1
Host: vouchersavenue.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vouchersavenue.com/soap-d/signup/1
Cookie: AWSALB=jzaJvDqBKBr1XIx5iR6r0qirR+onPInq85+f5JNoGyC9emVfpn93mJgbCYXeg+rKkcxMhCaOopGADxjT6pFLKpG5UKTZgofyPHfq2ExNhchFvaeRJ7I4MyL68hCJ; AWSALBCORS=jzaJvDqBKBr1XIx5iR6r0qirR+onPInq85+f5JNoGyC9emVfpn93mJgbCYXeg+rKkcxMhCaOopGADxjT6pFLKpG5UKTZgofyPHfq2ExNhchFvaeRJ7I4MyL68hCJ; contest_session=7LrhXcuuMz1fAzq16upO2AjKKZJSAYfNV5v3ubtM
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 22:27:14 GMT
content-type: text/css
content-length: 245026
set-cookie: AWSALB=UIx3xURIE8UB0YdX2JUsoYv1jxcLamaDegARxOHjEO1ZQLw1wRRHixQfe67XVhjT20BMRETNJnNi4DvxM3uDajqS9bOK3lHNNTVVeJO5WP3yaLw2M5DefyQ3Gye3; Expires=Sat, 10 Sep 2022 22:27:14 GMT; Path=/
AWSALBCORS=UIx3xURIE8UB0YdX2JUsoYv1jxcLamaDegARxOHjEO1ZQLw1wRRHixQfe67XVhjT20BMRETNJnNi4DvxM3uDajqS9bOK3lHNNTVVeJO5WP3yaLw2M5DefyQ3Gye3; Expires=Sat, 10 Sep 2022 22:27:14 GMT; Path=/; SameSite=None; Secure
server: nginx/1.23.1
last-modified: Sat, 03 Sep 2022 04:19:57 GMT
etag: "6312d5ed-3bd22"
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
52.16.134.146
54.231.170.80
51.158.29.12
23.36.76.226
185.59.220.198
188.125.94.206
93.184.220.29
104.22.38.182