everydaysubjects.com/education/how-to-prepare-for-your-exam/
104.21.42.103301 Moved Permanently 162 B URL HTTP/1.1 everydaysubjects.com/education/how-to-prepare-for-your-exam/
IP 104.21.42.103:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /education/how-to-prepare-for-your-exam/ HTTP/1.1
Host: everydaysubjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 18 Jan 2023 09:30:46 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://everydaysubjects.com/education/how-to-prepare-for-your-exam/
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RDVaJe3BPVtbG4RxD%2BcJLMYkEv7uhs32p7DptzJNRos5SPkTCbf1p6ddNZFWtnZHbRW5flnXMrYnmiNAjfvfWxjASwoi2AiLAmrOFpaVfKj5NyS0uPuuaqP9HiD7xzdpfBUfP1CJWA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78b650586d63b4f7-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash bb0c8d0984a1f09a012961a54cda03c6
1a8ad450a0241554ee4fc7d02fac7b83529e60f6
eee3ca879a67cc25ea89cb83de9521eea1b82845705c3e82169d4787ecb7dd3a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EEE3CA879A67CC25EA89CB83DE9521EEA1B82845705C3E82169D4787ECB7DD3A"
Last-Modified: Mon, 16 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2611
Expires: Wed, 18 Jan 2023 10:14:17 GMT
Date: Wed, 18 Jan 2023 09:30:46 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 4b8b051d555b46b1e9e64faebf91b4ab
bdab7f1f4146f0e7c16665692e4f1edd83c10a24
e069730519f658e767ec8edb57edd8e2b1ccb18d4f0ade0920654eac18f83456
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E069730519F658E767EC8EDB57EDD8E2B1CCB18D4F0ADE0920654EAC18F83456"
Last-Modified: Tue, 17 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16401
Expires: Wed, 18 Jan 2023 14:04:07 GMT
Date: Wed, 18 Jan 2023 09:30:46 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 18 Jan 2023 08:49:19 GMT
content-type: application/json
age: 2487
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 6c8239f3894cfba54d1f3a9ea1c85db5
a70f2b3bf79f2aa26b0cc0340dd182565c3eb946
64dc0508d3fcea1ec92fb60310e9b3f5454c0b69f61e8453fd443bc46ab9471b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "64DC0508D3FCEA1EC92FB60310E9B3F5454C0B69F61E8453FD443BC46AB9471B"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16234
Expires: Wed, 18 Jan 2023 14:01:20 GMT
Date: Wed, 18 Jan 2023 09:30:46 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: bXMJUgTH5By5FSQZVKMotnO7EnYgvY/GjcuX6l9uozmb0KeTsURrLjx/RjKfgE/qSjcgEFVF/y8=
x-amz-request-id: EEFBQGXCTPX7BS90
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 18 Jan 2023 08:45:20 GMT
age: 2726
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
e1.o.lencr.org/
23.36.77.32200 OK 344 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 058a73266b4d12635146fd24ebc13eeb
9aace49f50938f0313e91bbffb399e1ce519ef11
d83d7239af81028c1075a24b02f16cf206cded41a29597af7482ad997813cacf
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "D83D7239AF81028C1075A24B02F16CF206CDED41A29597AF7482AD997813CACF"
Last-Modified: Tue, 17 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16728
Expires: Wed, 18 Jan 2023 14:09:34 GMT
Date: Wed, 18 Jan 2023 09:30:46 GMT
Connection: keep-alive
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 18 Jan 2023 09:30:46 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
e1.o.lencr.org/
23.36.77.32200 OK 344 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 058a73266b4d12635146fd24ebc13eeb
9aace49f50938f0313e91bbffb399e1ce519ef11
d83d7239af81028c1075a24b02f16cf206cded41a29597af7482ad997813cacf
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "D83D7239AF81028C1075A24B02F16CF206CDED41A29597AF7482AD997813CACF"
Last-Modified: Tue, 17 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16727
Expires: Wed, 18 Jan 2023 14:09:34 GMT
Date: Wed, 18 Jan 2023 09:30:47 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
172.217.21.163200 OK 471 B IP 172.217.21.163:0
Hash 2b02c407fd912449a1b278f0bf3d8574
817bcff5b7c0444426b19027c772bddce84cf130
67ceddcf2eef43f1c11fc85c1398c39b5ff875a93dafbf9c4526e6d3bc5eb52a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 09:30:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
172.217.21.163200 OK 472 B IP 172.217.21.163:0
Hash 773596e36fe4af70225f1ee08e977461
5595433fd09a22008b2c739f6626aef116ad5285
fb18080471e9a54e7d1c060d2e26b023f09c135e0d195e48917cd064549d7fdc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 09:30:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 97e33851448646bc0ebaa9b70a93681b
9c5decd311a97442640656516ce1e3ca39d6efee
0237d6c1000367991c6528c74de50d7be1a640bb3b9d80ebecc7aef5f29d0ab8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0237D6C1000367991C6528C74DE50D7BE1A640BB3B9D80EBECC7AEF5F29D0AB8"
Last-Modified: Tue, 17 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6895
Expires: Wed, 18 Jan 2023 11:25:42 GMT
Date: Wed, 18 Jan 2023 09:30:47 GMT
Connection: keep-alive
www.googletagmanager.com/gtag/js?id=UA-131252345-52
142.250.74.72200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-131252345-52
IP 142.250.74.72:0
File type ASCII text, with very long lines (1921)
Hash 291fa3b5effb7aa959d9cbb3c03067f8
7ca6bc6f3dd0ad3cbf2f9e8b40acba6c9d25c5b5
71f32b23fa02e4e815672765861fe5c04546c78728de7ac3f6a89609fae8b423
GET /gtag/js?id=UA-131252345-52 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://everydaysubjects.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 18 Jan 2023 09:30:47 GMT
expires: Wed, 18 Jan 2023 09:30:47 GMT
cache-control: private, max-age=900
last-modified: Wed, 18 Jan 2023 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44169
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
172.217.21.163200 OK 472 B IP 172.217.21.163:0
Hash 773596e36fe4af70225f1ee08e977461
5595433fd09a22008b2c739f6626aef116ad5285
fb18080471e9a54e7d1c060d2e26b023f09c135e0d195e48917cd064549d7fdc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 09:30:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
172.217.21.163200 OK 471 B IP 172.217.21.163:0
Hash 2b02c407fd912449a1b278f0bf3d8574
817bcff5b7c0444426b19027c772bddce84cf130
67ceddcf2eef43f1c11fc85c1398c39b5ff875a93dafbf9c4526e6d3bc5eb52a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 09:30:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.admidainsight.com/tabu/display.js
151.139.128.10200 OK 3.8 kB URL HTTP/2 static.admidainsight.com/tabu/display.js
IP 151.139.128.10:0
File type HTML document, ASCII text, with very long lines (9325)
Hash d24a54239721e5e7c2f7667bf66bd3af
0043d29fdc28a135c596bb27cf93636361343d51
dc46eda8050088ad3c9b2e903aa606d04252c7915a54471100546ea7128f9037
GET /tabu/display.js HTTP/1.1
Host: static.admidainsight.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://everydaysubjects.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 18 Jan 2023 09:30:47 GMT
content-encoding: gzip
content-length: 3771
content-type: application/javascript
last-modified: Tue, 08 Nov 2022 10:04:25 GMT
accept-ranges: bytes
server: nginx
etag: W/"636a29a9-24a2"
cache-control: max-age=86400
x-sp-metadata: HS256.CNeUn54GEocBCiRlNjllMmZhMi0yNGVmLTQ0MjctODUwMi03ZDcxMWFiZTljYzkQ6LGIuPTC7AIaBgjH+J6eBiIMOTEuOTAuNDIuMTU0KOeMATADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GisIARIkMDkzNDhhNmQtNzgxMi00YTA2LTkwYmEtYmY5NDQxMDBiZmRjGLsdIhgIAhIUY2RzMDcxLnNrMS5od2Nkbi5uZXQ=.MOpni7iGNf5LJJTcQzc9s4Hh5YwrV8neDZiYJ9x/UpM=
x-hw: 1674034247.cds017.sk1.hn,1674034247.cds071.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 5.2 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
Hash 5a5d30a0e8ef3c8ce389ce3b16d47732
a36facd9f80c3b2ec375970c7361d0ecaf507713
063995eb41454aeb8cc05394d13e0738983de9dd09cda06ec311803e68f460e5
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Pragma, Content-Length, Alert, Expires, ETag, Last-Modified, Backoff, Content-Type, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 18 Jan 2023 08:48:57 GMT
age: 2510
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
static.admidainsight.com/webpush/scripts/v1.2/webpush.js
151.139.128.10200 OK 10 kB URL HTTP/2 static.admidainsight.com/webpush/scripts/v1.2/webpush.js
IP 151.139.128.10:0
File type ASCII text, with very long lines (23987)
Hash 1e7a2d7544e8c79ee2a35ee89afc2c0d
475cd19d9dfb96c57cfd7a8c038e55c06e7e8667
1a589344dfcf9c50c17418688e3cce499f60646e400e92cf1fea9ad12e58d08e
GET /webpush/scripts/v1.2/webpush.js HTTP/1.1
Host: static.admidainsight.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://everydaysubjects.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 09:30:47 GMT
content-encoding: gzip
content-length: 10330
content-type: application/javascript
last-modified: Mon, 05 Sep 2022 08:01:34 GMT
accept-ranges: bytes
server: nginx
etag: W/"6315acde-5df1"
cache-control: max-age=86400
x-sp-metadata: HS256.CNeUn54GEocBCiQ4MDk0ZjI2Mi0wOGNlLTQxMmMtOWExYS0zN2I4M2Y1MjIzY2QQ6LGIuPTC7AIaBgjH+J6eBiIMOTEuOTAuNDIuMTU0KOeMATADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GisIARIkYTFjZGYxNDEtMGE2Yy00MzljLTgyOGMtNmRlZjdhZDViYTBkGNpQIhgIAhIUY2RzMjEzLnNrMS5od2Nkbi5uZXQ=./RK0oOacgv1sOVHAFceVfpjbT5kS+g7LQrZAieSSfcI=
x-hw: 1674034247.cds017.sk1.hn,1674034247.cds213.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
172.217.21.163200 OK 471 B IP 172.217.21.163:0
Hash d547e6cc07ecb62b49cfb14f223d3b87
7f316e0778cf7e132cf376b92d1f9860e06894f5
4ceb4872fc5aa21ce6cdba296ce83f68d1b46836df05886eb76e0607358ba42c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 09:30:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
172.217.21.163200 OK 471 B IP 172.217.21.163:0
Hash d547e6cc07ecb62b49cfb14f223d3b87
7f316e0778cf7e132cf376b92d1f9860e06894f5
4ceb4872fc5aa21ce6cdba296ce83f68d1b46836df05886eb76e0607358ba42c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 09:30:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
172.217.21.163200 OK 471 B IP 172.217.21.163:0
Hash d547e6cc07ecb62b49cfb14f223d3b87
7f316e0778cf7e132cf376b92d1f9860e06894f5
4ceb4872fc5aa21ce6cdba296ce83f68d1b46836df05886eb76e0607358ba42c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 09:30:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjsGyN.woff2
142.250.74.35200 OK 30 kB URL HTTP/2 fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjsGyN.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 29752, version 1.0\012- data
Hash ab1fc8621287e4ea9319a3136812cf80
fb4ed2e52e2a8d7ac50a7618a0c2ea5507a24ef3
7c00752ce82d6abaed0b9766d35b906b16675facdbe24115b410d1fab975effa
GET /s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://everydaysubjects.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 29752
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 17 Jan 2023 10:03:33 GMT
expires: Wed, 17 Jan 2024 10:03:33 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Apr 2022 17:05:11 GMT
content-type: font/woff2
age: 84434
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2
142.250.74.35200 OK 35 kB URL HTTP/2 fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 34852, version 1.0\012- data
Hash 0e8eefb4549a2edf26c560cb9845952e
8d0b1718aacad934fd0043c87cbc54aa091396bf
7f653b3ce9d3277457fc6da4edb246ae2f6c913f088c42dcb8cd2e96267aa21a
GET /s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://everydaysubjects.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 34852
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 16 Jan 2023 00:48:21 GMT
expires: Tue, 16 Jan 2024 00:48:21 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Apr 2022 16:31:23 GMT
content-type: font/woff2
age: 204146
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/playfairdisplay/v30/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDXbtM.woff2
142.250.74.35200 OK 20 kB URL HTTP/2 fonts.gstatic.com/s/playfairdisplay/v30/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDXbtM.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 19860, version 1.0\012- data
Hash a95e391373ad634c3b7dbaf77de3f40e
ddc4638bc28c21a400fcd2df94448743f198a257
fa3d5a0422c9b413abb4c78f8ff80de8a8ed58766f7110c82febf5296e899b47
GET /s/playfairdisplay/v30/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDXbtM.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://everydaysubjects.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 17 Jan 2023 15:34:17 GMT
expires: Wed, 17 Jan 2024 15:34:17 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 18 Jul 2022 19:06:33 GMT
content-type: font/woff2
age: 64590
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 8720730dce33d0026a1a354ac93d4a7d
ed5f086bc646a4d93d2344b19ff7821c96e44f7c
b2892fda88242fbc4d58dd1f3bb159ca02cbf98b77c57dde66fba98d183c0136
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1556
Cache-Control: max-age=86518
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 09:30:47 GMT
Etag: "63c66529-1d7"
Expires: Thu, 19 Jan 2023 09:32:45 GMT
Last-Modified: Tue, 17 Jan 2023 09:06:49 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
172.217.21.163200 OK 471 B IP 172.217.21.163:0
Hash d547e6cc07ecb62b49cfb14f223d3b87
7f316e0778cf7e132cf376b92d1f9860e06894f5
4ceb4872fc5aa21ce6cdba296ce83f68d1b46836df05886eb76e0607358ba42c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 09:30:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
js.wpadmngr.com/npc/sdk/wp-banners.js
45.133.44.25200 OK 0 B URL HTTP/2 js.wpadmngr.com/npc/sdk/wp-banners.js
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npc/sdk/wp-banners.js HTTP/1.1
Host: js.wpadmngr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://everydaysubjects.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 09:30:47 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: nginx/1.18.0
last-modified: Fri, 20 Aug 2021 15:14:31 GMT
etag: "611fc6d7-0"
expires: Wed, 18 Jan 2023 09:35:47 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 10a7bd5d972b06cdf500f5a8f0bf7bd2
9a153ea6134a3c60e1336d8eb8f001ae13b93230
f7d606a963ef999d936ab66a3f97bbd4441659c398df9a9ce8a90938f8e1c038
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F7D606A963EF999D936AB66A3F97BBD4441659C398DF9A9CE8A90938F8E1C038"
Last-Modified: Mon, 16 Jan 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14812
Expires: Wed, 18 Jan 2023 13:37:39 GMT
Date: Wed, 18 Jan 2023 09:30:47 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 10a7bd5d972b06cdf500f5a8f0bf7bd2
9a153ea6134a3c60e1336d8eb8f001ae13b93230
f7d606a963ef999d936ab66a3f97bbd4441659c398df9a9ce8a90938f8e1c038
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F7D606A963EF999D936AB66A3F97BBD4441659C398DF9A9CE8A90938F8E1C038"
Last-Modified: Mon, 16 Jan 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14812
Expires: Wed, 18 Jan 2023 13:37:39 GMT
Date: Wed, 18 Jan 2023 09:30:47 GMT
Connection: keep-alive
push.services.mozilla.com/
52.27.19.5101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.27.19.5:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: GBEa/RJCwYxGYTikSFBr6w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: tKaNg8BhZqFsyOpwuwb/hoOBq2U=
www.google-analytics.com/analytics.js
142.250.74.110200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.110:0
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://everydaysubjects.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Wed, 18 Jan 2023 08:41:07 GMT
expires: Wed, 18 Jan 2023 10:41:07 GMT
cache-control: public, max-age=7200
age: 2981
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 7f27df08e893181e7e603be381eeee0f
01ffb354559ca6c0ed731762527edc8390455938
2934a46e7ccf38894d414a0bc02c44b4eb8e3c30ad729d5d3539b53bf4af547f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2934A46E7CCF38894D414A0BC02C44B4EB8E3C30AD729D5D3539B53BF4AF547F"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5602
Expires: Wed, 18 Jan 2023 11:04:10 GMT
Date: Wed, 18 Jan 2023 09:30:48 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 7f27df08e893181e7e603be381eeee0f
01ffb354559ca6c0ed731762527edc8390455938
2934a46e7ccf38894d414a0bc02c44b4eb8e3c30ad729d5d3539b53bf4af547f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2934A46E7CCF38894D414A0BC02C44B4EB8E3C30AD729D5D3539B53BF4AF547F"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5602
Expires: Wed, 18 Jan 2023 11:04:10 GMT
Date: Wed, 18 Jan 2023 09:30:48 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 2bcc6745dba25b73abd705c2ef146e83
cac22f15ec91ce5a86cac11f97b6017f312293cc
9b0d82c712c4da7832fe4a6acaa401e65509c339e16cb200b5c05a5ff3369748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9B0D82C712C4DA7832FE4A6ACAA401E65509C339E16CB200B5C05A5FF3369748"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=805
Expires: Wed, 18 Jan 2023 09:44:13 GMT
Date: Wed, 18 Jan 2023 09:30:48 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 89f5e07d40c8dd66d42eb0d0075cfa79
f3f3242ef292bd04afb012fae81dcf0fefe9da6f
4220aaa6ee47a39b9e024c478cba65c8f4531bc6db62ebfa3b051d27e2c72441
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4220AAA6EE47A39B9E024C478CBA65C8F4531BC6DB62EBFA3B051D27E2C72441"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8193
Expires: Wed, 18 Jan 2023 11:47:21 GMT
Date: Wed, 18 Jan 2023 09:30:48 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash b2cdbf3ac2efe027f27282dea57e9493
cb8029d99724261aa69efc27fe24605133224049
7fa5ac63b6c85d33557278b5e4abfe79ecf11f3851ba54a8833b0f64614b5be8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7FA5AC63B6C85D33557278B5E4ABFE79ECF11F3851BA54A8833B0F64614B5BE8"
Last-Modified: Tue, 17 Jan 2023 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8887
Expires: Wed, 18 Jan 2023 11:58:55 GMT
Date: Wed, 18 Jan 2023 09:30:48 GMT
Connection: keep-alive
everydaysubjects.com/education/how-to-prepare-for-your-exam/
104.21.42.103200 OK 9.9 kB URL HTTP/2 everydaysubjects.com/education/how-to-prepare-for-your-exam/
IP 104.21.42.103:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32510)
Hash d2952d0603f4ef166d8cfb4be958a5cf
cad70a75dffafc7b9d4b683a22ab224858678868
d6e0e86e53c43f7d3465331b42ad78dfbb2dc45905e862de1365ed6cd56970c3
GET /education/how-to-prepare-for-your-exam/ HTTP/1.1
Host: everydaysubjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Wed, 18 Jan 2023 09:30:47 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33, PleskLin
link: <https://everydaysubjects.com/wp-json/>; rel="https://api.w.org/", <https://everydaysubjects.com/wp-json/wp/v2/posts/169>; rel="alternate"; type="application/json", <https://everydaysubjects.com/?p=169>; rel=shortlink
vary: Accept-Encoding
x-cache-status: HIT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o70lGZJ3AWySzwX0gKHsQ%2FlgIN1xAxJcGLu85Nb9GEsat0DmVoePOAOn0ZBWH4f410dOKYX3YE%2FuHr5%2FB2bUGIr8aIUZ7tpRr%2FngOQtUDRhBF%2FAWXBHf8yXV9SHzWiN7fWfM6ZYPvQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78b6505afb08b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
na.nawpush.com/tags/35034?version_name=a
45.133.44.25200 OK 2.5 kB URL HTTP/2 na.nawpush.com/tags/35034?version_name=a
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JSON data\012- , ASCII text, with very long lines (2544), with no line terminators
Hash f008066c4f9a6a8f31883fb05b634fad
90d5da29f54d17c16567206a66e2702dbd8ec945
ac8299a86ad212b58b0e32954b34cea3aa15785ccf410343deab2e24609ee8a0
GET /tags/35034?version_name=a HTTP/1.1
Host: na.nawpush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://everydaysubjects.com
Connection: keep-alive
Referer: https://everydaysubjects.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 18 Jan 2023 09:30:48 GMT
content-type: application/json
server: nginx/1.18.0
cache-control: max-age=300, public
x-proxy-cache: MISS
access-control-allow-origin: *
X-Firefox-Spdy: h2
na.nawpush.com/tags/25733?version_name=b
45.133.44.25200 OK 3.0 kB URL HTTP/2 na.nawpush.com/tags/25733?version_name=b
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JSON data\012- , ASCII text, with very long lines (2956), with no line terminators
Hash 63a11843be2a0b5f163f083da73fd5a7
67a55f934d28842baf4ce790a5235b5821cfd152
d94b10c7844055610969d45b971998181bb6a5f67dca7b31c722195ceebd10b6
GET /tags/25733?version_name=b HTTP/1.1
Host: na.nawpush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://everydaysubjects.com
Connection: keep-alive
Referer: https://everydaysubjects.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 18 Jan 2023 09:30:48 GMT
content-type: application/json
server: nginx/1.18.0
cache-control: max-age=300, public
x-proxy-cache: MISS
access-control-allow-origin: *
X-Firefox-Spdy: h2
0df37fdfdc.68d7fdb8cf.com/in/track?data=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
45.133.44.25200 OK 6.6 kB URL HTTP/2 0df37fdfdc.68d7fdb8cf.com/in/track?data=eyJ3bCI6MCwic3ViaWQiOjAsInVzZXJfaWQiOiI3MDAwNjk5MzY4MzUxMTE5MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMjEuMSIsInRhZ19pZCI6MzUwMzQsInNjcmVlbl9yZXNvbHV0aW9uIjoiMTI4MHgxMDI0IiwiYWRibG9jayI6MCwidGltZXpvbmVfb2xzb24iOiJVVEMiLCJ1dG1fc291cmNlIjoiIiwidXRtX21lZGl1bSI6IiIsInV0bV9jYW1wYWlnbiI6IiIsInV0bV9jb250ZW50IjoiIiwibW0iOjAsImluaXRfc3RhcnRfbGF0ZW5jeSI6MS4xNywiaXNfdjIiOjAsImlzX3YyX2VtcHR5IjowLCJ1c2VyX2tleXdvcmRzIjoiSG93JTJDVG8lMkNQcmVwYXJlJTJDRm9yJTJDWW91ciUyQ0V4YW0lMkNFdmVyeURheVN1YmplY3RzJTJDWW91J3ZlJTJDYmVlbiUyQ3N0dWR5aW5nJTJDYW5kJTJDcHJlcGFyaW5nJTJDZm9yJTJDeW91ciUyQ3VwY29taW5nJTJDZXhhbSUyQ2FsbCUyQ3NlbWVzdGVyJTJDcmlnaHQlMkNXZWxsJTJDbm93JTJDaXQncyUyQ3RpbWUlMkN0byUyQ3B1dCUyQ2luJTJDdGhlJTJDZWZmb3J0JTJDdG8lMkNkbyUyQ3dlbGwuIn0=
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
Hash d6f4384d1f593d88fadc792cb0da22f5
0ba3eae688f19eadaefdd82004772a3eed676bbc
203b2b19c66434ec9c12b8b61a1c34aaedff1958b266918ce033168618b1a044
Analyzer Verdict Alert quad9 Sinkholed
GET /in/track?data=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 HTTP/1.1
Host: 0df37fdfdc.68d7fdb8cf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://everydaysubjects.com
Connection: keep-alive
Referer: https://everydaysubjects.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 18 Jan 2023 09:30:48 GMT
content-length: 0
server: nginx/1.18.0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 7b413e1bc39764c7f70763898ef7132c
6c15d9b595d9332e85b3f46f90a1d4302693faa0
578da6e9164fa50c80006428a559fc6c8e145f7ddb92515d8af74a18e20072d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "578DA6E9164FA50C80006428A559FC6C8E145F7DDB92515D8AF74A18E20072D1"
Last-Modified: Mon, 16 Jan 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2223
Expires: Wed, 18 Jan 2023 10:07:51 GMT
Date: Wed, 18 Jan 2023 09:30:48 GMT
Connection: keep-alive
js.wpshsdk.com/npc/sdk/push.m.js?v=1
45.133.44.25200 OK 26 kB URL HTTP/2 js.wpshsdk.com/npc/sdk/push.m.js?v=1
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type Unicode text, UTF-8 text, with very long lines (63644), with no line terminators
Hash 3e43ff6476b2303131a0436eb5756693
48b7cd7097a4e36c57ac5bc2b4671acd980303db
22fab9fa9f48df3c1550fcdc947549cc34547b15011993b596e3a94ab9273b17
GET /npc/sdk/push.m.js?v=1 HTTP/1.1
Host: js.wpshsdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://everydaysubjects.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 18 Jan 2023 09:30:48 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Wed, 11 Jan 2023 09:42:43 GMT
etag: W/"63be8493-f953"
content-encoding: gzip
expires: Wed, 18 Jan 2023 09:35:48 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
fp.metricswpsh.com/fp?tag_id=35034
157.90.84.242200 OK 28 B URL HTTP/1.1 fp.metricswpsh.com/fp?tag_id=35034
IP 157.90.84.242:0
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text
Hash e3af49472d683a217237a6ebaf79bcb7
378db4d7e6171a2676ee15c80b4475d7f5ec9742
7714898d715fb8b1ce7a1de73e0e7c9f6394acc8a08cf1a3b342a7829d4de84a
POST /fp?tag_id=35034 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 22284
Origin: https://everydaysubjects.com
Connection: keep-alive
Referer: https://everydaysubjects.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Wed, 18 Jan 2023 09:30:49 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 28
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://everydaysubjects.com
Set-Cookie: id=1323332626345049837; Expires=Thu, 18 Jan 2024 09:30:49 GMT; Secure; SameSite=None
Vary: Origin
nereserv.com/in/dip?site=native-push&wl=0&event_id=caadca21-6e7c-46cd-aa70-e29885e42efa&subid=2037588575&sid=2887838487&spot_id=18008&created_at=2023-01-18&timezone=0&ver=8.19.0&is_native=1
157.90.84.246200 OK 0 B URL HTTP/2 nereserv.com/in/dip?site=native-push&wl=0&event_id=caadca21-6e7c-46cd-aa70-e29885e42efa&subid=2037588575&sid=2887838487&spot_id=18008&created_at=2023-01-18&timezone=0&ver=8.19.0&is_native=1
IP 157.90.84.246:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/dip?site=native-push&wl=0&event_id=caadca21-6e7c-46cd-aa70-e29885e42efa&subid=2037588575&sid=2887838487&spot_id=18008&created_at=2023-01-18&timezone=0&ver=8.19.0&is_native=1 HTTP/1.1
Host: nereserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://everydaysubjects.com
Connection: keep-alive
Referer: https://everydaysubjects.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 18 Jan 2023 09:30:49 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
fp.metricswpsh.com/fp?tag_id=25733
157.90.84.242200 OK 28 B URL HTTP/1.1 fp.metricswpsh.com/fp?tag_id=25733
IP 157.90.84.242:0
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text
Hash e3af49472d683a217237a6ebaf79bcb7
378db4d7e6171a2676ee15c80b4475d7f5ec9742
7714898d715fb8b1ce7a1de73e0e7c9f6394acc8a08cf1a3b342a7829d4de84a
POST /fp?tag_id=25733 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 22286
Origin: https://everydaysubjects.com
Connection: keep-alive
Referer: https://everydaysubjects.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Wed, 18 Jan 2023 09:30:49 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 28
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://everydaysubjects.com
Set-Cookie: id=1470009034853157613; Expires=Thu, 18 Jan 2024 09:30:49 GMT; Secure; SameSite=None
Vary: Origin
nereserv.com/in/dip?site=native-push&wl=0&event_id=081f403d-b0ee-4157-9d40-46d02497de99&subid=575679908&sid=97814272&spot_id=22433&created_at=2023-01-18&timezone=0&ver=8.19.0&is_native=1
157.90.84.246200 OK 0 B URL HTTP/2 nereserv.com/in/dip?site=native-push&wl=0&event_id=081f403d-b0ee-4157-9d40-46d02497de99&subid=575679908&sid=97814272&spot_id=22433&created_at=2023-01-18&timezone=0&ver=8.19.0&is_native=1
IP 157.90.84.246:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/dip?site=native-push&wl=0&event_id=081f403d-b0ee-4157-9d40-46d02497de99&subid=575679908&sid=97814272&spot_id=22433&created_at=2023-01-18&timezone=0&ver=8.19.0&is_native=1 HTTP/1.1
Host: nereserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://everydaysubjects.com
Connection: keep-alive
Referer: https://everydaysubjects.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 18 Jan 2023 09:30:49 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
nereserv.com/in/dip?site=native-push&wl=0&event_id=e851a4b4-fd8b-4063-908b-12f8bb6fe52c&subid=47122152&sid=2472770445&spot_id=22337&created_at=2023-01-18&timezone=0&ver=8.19.0&is_native=1
157.90.84.246200 OK 0 B URL HTTP/2 nereserv.com/in/dip?site=native-push&wl=0&event_id=e851a4b4-fd8b-4063-908b-12f8bb6fe52c&subid=47122152&sid=2472770445&spot_id=22337&created_at=2023-01-18&timezone=0&ver=8.19.0&is_native=1
IP 157.90.84.246:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/dip?site=native-push&wl=0&event_id=e851a4b4-fd8b-4063-908b-12f8bb6fe52c&subid=47122152&sid=2472770445&spot_id=22337&created_at=2023-01-18&timezone=0&ver=8.19.0&is_native=1 HTTP/1.1
Host: nereserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://everydaysubjects.com
Connection: keep-alive
Referer: https://everydaysubjects.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 18 Jan 2023 09:30:49 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash fd4f22ec84dd5dc24de01729e629e2b0
9d21d63ee6c9318f818524e937d51e041edc5ca1
2a64bbeca22abc62653f7bb829562434fcc79ec22e833b654b72368cffe569cd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A64BBECA22ABC62653F7BB829562434FCC79EC22E833B654B72368CFFE569CD"
Last-Modified: Tue, 17 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5498
Expires: Wed, 18 Jan 2023 11:02:27 GMT
Date: Wed, 18 Jan 2023 09:30:49 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 6cfc390c95e65230e6798520be7df960
084d7efc24649c68fb6a0da6929585873796ec2a
ca8ad2a520681efa3bd19dc19b9414ae238d6ec5cf8d443103cabd16099c2117
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CA8AD2A520681EFA3BD19DC19B9414AE238D6EC5CF8D443103CABD16099C2117"
Last-Modified: Tue, 17 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5787
Expires: Wed, 18 Jan 2023 11:07:16 GMT
Date: Wed, 18 Jan 2023 09:30:49 GMT
Connection: keep-alive
js.natsdk.com/npc/sdk/native.m.js
45.133.44.24200 OK 15 kB URL HTTP/2 js.natsdk.com/npc/sdk/native.m.js
IP 45.133.44.24:0
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (45618), with no line terminators
Hash 537af9728cefbc837681a504e734998d
be689e112c962a6deb33b4cce31900c88a0a6943
94be201b5c9ea50937dc7863a9933795d7777cdcbd7a606c92c69163579a2d53
GET /npc/sdk/native.m.js HTTP/1.1
Host: js.natsdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://everydaysubjects.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 18 Jan 2023 09:30:48 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 20 Dec 2022 14:01:44 GMT
etag: W/"63a1c048-b232"
content-encoding: gzip
expires: Wed, 18 Jan 2023 09:35:48 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 6cfc390c95e65230e6798520be7df960
084d7efc24649c68fb6a0da6929585873796ec2a
ca8ad2a520681efa3bd19dc19b9414ae238d6ec5cf8d443103cabd16099c2117
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CA8AD2A520681EFA3BD19DC19B9414AE238D6EC5CF8D443103CABD16099C2117"
Last-Modified: Tue, 17 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5787
Expires: Wed, 18 Jan 2023 11:07:16 GMT
Date: Wed, 18 Jan 2023 09:30:49 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 6cfc390c95e65230e6798520be7df960
084d7efc24649c68fb6a0da6929585873796ec2a
ca8ad2a520681efa3bd19dc19b9414ae238d6ec5cf8d443103cabd16099c2117
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CA8AD2A520681EFA3BD19DC19B9414AE238D6EC5CF8D443103CABD16099C2117"
Last-Modified: Tue, 17 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5787
Expires: Wed, 18 Jan 2023 11:07:16 GMT
Date: Wed, 18 Jan 2023 09:30:49 GMT
Connection: keep-alive
ba182692bb.0c1d501ba1.com/in/multy
157.90.84.246204 No Content 0 B URL HTTP/2 ba182692bb.0c1d501ba1.com/in/multy
IP 157.90.84.246:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /in/multy HTTP/1.1
Host: ba182692bb.0c1d501ba1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://everydaysubjects.com/
Origin: https://everydaysubjects.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.20.1
date: Wed, 18 Jan 2023 09:30:49 GMT
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 6cfc390c95e65230e6798520be7df960
084d7efc24649c68fb6a0da6929585873796ec2a
ca8ad2a520681efa3bd19dc19b9414ae238d6ec5cf8d443103cabd16099c2117
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CA8AD2A520681EFA3BD19DC19B9414AE238D6EC5CF8D443103CABD16099C2117"
Last-Modified: Tue, 17 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5787
Expires: Wed, 18 Jan 2023 11:07:16 GMT
Date: Wed, 18 Jan 2023 09:30:49 GMT
Connection: keep-alive
ba182692bb.0c1d501ba1.com/in/multy
157.90.84.246204 No Content 0 B URL HTTP/2 ba182692bb.0c1d501ba1.com/in/multy
IP 157.90.84.246:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /in/multy HTTP/1.1
Host: ba182692bb.0c1d501ba1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://everydaysubjects.com/
Origin: https://everydaysubjects.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.20.1
date: Wed, 18 Jan 2023 09:30:49 GMT
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F861225b5-aa80-4ecb-b68c-3a62a2e3d376.gif
34.120.237.76200 OK 25 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F861225b5-aa80-4ecb-b68c-3a62a2e3d376.gif
IP 34.120.237.76:0
File type GIF image data, version 89a, 296 x 148\012- data
Hash e9e29acd071f93411556a2a1cbb076fa
6cc5c64b7e82cc5bdc148be6f4760e98cb06f414
a1d23e683f912c5c9a334df441908c7d522ae8f41c91dbb0e99e6bf5162bc54e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F861225b5-aa80-4ecb-b68c-3a62a2e3d376.gif HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 24970
x-amzn-requestid: 65ccc511-17aa-468c-a607-f531ccba1e91
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e0K86HLgIAMFfxA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c4beb8-798eaf875ae85c5e1d73e183;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 03:04:24 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7j81MDyPkCWO5SwMKCSmfqcnvTOrH1sfFgciUIB1g3gTRCdcsyb6ew==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 03:22:17 GMT
age: 22112
etag: "6cc5c64b7e82cc5bdc148be6f4760e98cb06f414"
content-type: image/gif
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff787bd82-2d8d-4bec-acc1-41aaf9447696.jpeg
34.120.237.76200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff787bd82-2d8d-4bec-acc1-41aaf9447696.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b31599f58472f3dad80798d36e5e1fa2
877be61cdea3bf743e69c716135829bf59e23d90
7cab652e997afe30417eef7d79a277147306f4ced65a8d7eaefcb83c1218c99d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff787bd82-2d8d-4bec-acc1-41aaf9447696.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7560
x-amzn-requestid: 4060d084-eecd-45c3-9299-a34dd8a56f00
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e6A1HELioAMFRSA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c714ed-6b58cbc5370ea60e62d06e44;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 21:36:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: -4Rcf0WPMmWVRvIwb4PNqMzgrJuxsPVP3ujV2T-azhkMAFJTcPbBvg==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 21:51:55 GMT
age: 41934
etag: "877be61cdea3bf743e69c716135829bf59e23d90"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5040d384-c89f-4aa4-8652-aea8a1600738.jpeg
34.120.237.76200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5040d384-c89f-4aa4-8652-aea8a1600738.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 18d44fef1be0f8ba8ae6e29788478e47
a881d39e5e2aea041f30b476f1e3d7d135ca691b
a7bd1b6e2615f6fa898d55cdd6370330b89aba74348cc3b020df81a3ee51b9d0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5040d384-c89f-4aa4-8652-aea8a1600738.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9819
x-amzn-requestid: ed88b40e-5e06-41f9-a1ba-a3bef07eb12a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e0LT4G5qoAMFwFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c4bf4b-513cb0eb6ec4f22f23a26da7;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 03:06:51 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: x6xEfCqpXziyWiy0ZxXVp8yRH_munH9cmIGQa7oB8Qf-0wLOjyPo-g==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 04:26:22 GMT
age: 18267
etag: "a881d39e5e2aea041f30b476f1e3d7d135ca691b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F053123e4-9914-4404-b1e9-cb5f3e38b7a2.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F053123e4-9914-4404-b1e9-cb5f3e38b7a2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5caa7df39f82600c651046957ab6b62d
d6d6fbd676b74e487ee06248c48da87e178223e7
df3090d2e7c7c6e970fe498609d74c63e04aa80d55a26c956d1e3be5bebfafbc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F053123e4-9914-4404-b1e9-cb5f3e38b7a2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11781
x-amzn-requestid: 522a0799-2025-43cd-9d7e-08cdaa5acf11
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e0vQMGZRIAMFfjg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c4f8cd-697804fd5b8b3cff7d2d5a7e;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 07:12:13 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ZcErvrIx9oHVckDiZ1etMYXpi2eeCZ7Z1AmcW8ZNui8IsPLFsPhpTw==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 07:26:45 GMT
age: 7444
etag: "d6d6fbd676b74e487ee06248c48da87e178223e7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe52164e3-afec-433e-87ab-adb17222f1cd.jpeg
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe52164e3-afec-433e-87ab-adb17222f1cd.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8656702f08344d3a4658bc43a9074a1f
fba424e1d09cbdc839ca320458b51715dafbbccc
0b0ac963c377b07f843637348f3d7c41d2aca89540ab8c2b80ef5fbbf466fee8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe52164e3-afec-433e-87ab-adb17222f1cd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13848
x-amzn-requestid: 160148de-85b1-4456-a580-e079f391f979
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e6A0gErTIAMF_eQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c714e9-52efcd642bd209373b16cf72;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 21:36:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ARZobaKhEsHSEJdma3SXwCn_IKwRJaDbgjHfq_p_0HypKFWoqJIOJw==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 21:52:59 GMT
age: 41870
etag: "fba424e1d09cbdc839ca320458b51715dafbbccc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F86f138af-59eb-444d-882b-80f5918f4405.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F86f138af-59eb-444d-882b-80f5918f4405.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 402bdd90bc2557de4f317d4d0ec892ed
b205b0bb74fabcf1612f22db53c197b63ae4ce0c
2fa402a38832c3efe15d5fee9116b36aeea5a0012ba4e8d6477b4fa9a0368598
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F86f138af-59eb-444d-882b-80f5918f4405.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11028
x-amzn-requestid: 2b2b0030-a54b-42d1-a680-69e23c4320bd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e4AteE7uIAMFSvw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c647ef-5abf38ea140446ec294cdf6c;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 07:02:07 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Mc_9uoVTGY4V5GIqVfkGHM9HhrS4mLKl58w3ET46LAwEg2BD1eqKWQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 07:21:18 GMT
age: 7771
etag: "b205b0bb74fabcf1612f22db53c197b63ae4ce0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash d0275c123d7dc747a3c16b1809a12969
0c3a4bc5715fd238b0b167539c6cbfca8c6acb40
e4a71526e5e4c2dee945b9448d96d5430a3bc05fb3e8e05af72f1fbfa7fcec4f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E4A71526E5E4C2DEE945B9448D96D5430A3BC05FB3E8E05AF72F1FBFA7FCEC4F"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2145
Expires: Wed, 18 Jan 2023 10:06:34 GMT
Date: Wed, 18 Jan 2023 09:30:49 GMT
Connection: keep-alive
js.wpushsdk.com/npc/sdk/wpu/npush.m.js
45.133.44.24200 OK 77 kB URL HTTP/2 js.wpushsdk.com/npc/sdk/wpu/npush.m.js
IP 45.133.44.24:0
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash a386f0af96bf36e39d9d2ef1a5ed920b
2b2e2746e961bc17663a9c8ac2dc1cb4474038a6
f21fbb0b8f28a4f470f8f6f0c2ed23449ec634ed6272961414b5d06b2579cfc2
GET /npc/sdk/wpu/npush.m.js HTTP/1.1
Host: js.wpushsdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://everydaysubjects.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 18 Jan 2023 09:30:48 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 17 Jan 2023 14:42:02 GMT
etag: W/"63c6b3ba-4b951"
content-encoding: gzip
expires: Wed, 18 Jan 2023 09:35:48 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8beae62b31a372111263662164f8821b
1e9071f63d394a3bf1c8c17e3a3f9d1a3185f842
e8fe8cccd746ea305754cee7bcbb9a50f42890b3fb367efc546aca1ce342690a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8FE8CCCD746EA305754CEE7BCBB9A50F42890B3FB367EFC546ACA1CE342690A"
Last-Modified: Tue, 17 Jan 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12663
Expires: Wed, 18 Jan 2023 13:01:52 GMT
Date: Wed, 18 Jan 2023 09:30:49 GMT
Connection: keep-alive
3963d6fe9c.201b418371.com/get/?go=1&data=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
116.202.60.158200 OK 2.7 kB URL HTTP/2 3963d6fe9c.201b418371.com/get/?go=1&data=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
IP 116.202.60.158:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2746)
Hash f894243be8b80b976c7142848320a6e8
57ffc96da47cdfba3f40ae758fae9f197e5ba6b6
d4498b997e7dbf17b7cfde00510f63a55a18378c6a4984f1e3de58509523e70d
GET /get/?go=1&data=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 HTTP/1.1
Host: 3963d6fe9c.201b418371.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://everydaysubjects.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Wed, 18 Jan 2023 09:30:49 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash d82826385b388005c45564e6dbd0e7c8
62b2399d5977ab120bfcf32bfc54df5394e64bc8
3021604b4eb2da54975a89365af4adcbe9150d98a702352e2b6bb961cc738e30
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 09:30:49 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 18 Jan 2023 01:40:49 GMT
Expires: Wed, 25 Jan 2023 01:40:48 GMT
Etag: "62b2399d5977ab120bfcf32bfc54df5394e64bc8"
Cache-Control: max-age=575998,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78b6506e1cceb4f7-OSL
rtb-eu.rtbadzesto.com/win?i=ytNY6xeKq*o_0&f=imp
77.245.57.78200 OK 42 B URL HTTP/1.1 rtb-eu.rtbadzesto.com/win?i=ytNY6xeKq*o_0&f=imp
IP 77.245.57.78:0
ASN #36057 WEBAIR-INTERNET-MTL
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /win?i=ytNY6xeKq*o_0&f=imp HTTP/1.1
Host: rtb-eu.rtbadzesto.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3963d6fe9c.201b418371.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 18 Jan 2023 09:30:49 GMT
Content-Type: image/gif
Content-Length: 42
Connection: keep-alive
Cache-Control: no-store
Age: 0
Pragma: no-cache
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 7e138263bce641063674905bf9e09759
824c38cb2f51490679637b4a35bb39ba666c2a78
42c00ab625ddbb901f6318267925a476350234923cafe77c91f557bb2c75397e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6121
Cache-Control: max-age=170274
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 09:30:50 GMT
Etag: "63c79a83-1d7"
Expires: Fri, 20 Jan 2023 08:48:44 GMT
Last-Modified: Wed, 18 Jan 2023 07:06:43 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
preroll.hostave3.net/notifications/zeropixel.png
104.21.235.4200 OK 42 B URL HTTP/2 preroll.hostave3.net/notifications/zeropixel.png
IP 104.21.235.4:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /notifications/zeropixel.png HTTP/1.1
Host: preroll.hostave3.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://3963d6fe9c.201b418371.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 18 Jan 2023 09:30:50 GMT
content-type: image/png
content-length: 42
last-modified: Tue, 11 Sep 2018 08:40:52 GMT
etag: "5b977f94-2a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 701520
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OBbHTc%2BUMMaWtcdOGik6J3%2FyjUVfiJFc1Jp9rfLjcQ%2BYslCtaR3PbQ5jYV3hTZNpNfNFvTtPz5SxTqVq5MLV8uwcd6jIA%2BRgEPPvHzDJ3QkG5Rd7ynR%2FgCNLCFJinSDcSCJc%2B84hSg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 78b6506ede817783-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 6dc5a52ed2b9326a80814a64d2df1a4f
ec12ee1c8b10f3b2a09eaaebd673e911404d1dd5
0410986be7ea9b4caaac0848f8ca4982bdd307404567def6eaff9659c67fb798
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0410986BE7EA9B4CAAAC0848F8CA4982BDD307404567DEF6EAFF9659C67FB798"
Last-Modified: Mon, 16 Jan 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3560
Expires: Wed, 18 Jan 2023 10:30:10 GMT
Date: Wed, 18 Jan 2023 09:30:50 GMT
Connection: keep-alive
btds.zog.link/in/va?spot_id=42967&view=1&tag_ab=b
109.206.175.85200 OK 2 B URL HTTP/2 btds.zog.link/in/va?spot_id=42967&view=1&tag_ab=b
IP 109.206.175.85:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /in/va?spot_id=42967&view=1&tag_ab=b HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://everydaysubjects.com
Connection: keep-alive
Referer: https://everydaysubjects.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 18 Jan 2023 09:30:50 GMT
content-type: application/json
content-length: 2
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
set-cookie: 1840.0=1; expires=Thu, 19 Jan 2023 09:30:50 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
ba182692bb.0c1d501ba1.com/in/multy
157.90.84.246200 OK 18 kB URL HTTP/2 ba182692bb.0c1d501ba1.com/in/multy
IP 157.90.84.246:0
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (17710), with no line terminators
Hash 703f8cc63c53535e327f88d69fed201d
ab182ff4b3841a193b618a66a6d1da68d62840b5
47bd3efccb8a31578626728cc2b1d5311b482cb58165912b3f4d274887dc746b
POST /in/multy HTTP/1.1
Host: ba182692bb.0c1d501ba1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 950
Origin: https://everydaysubjects.com
Connection: keep-alive
Referer: https://everydaysubjects.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 18 Jan 2023 09:30:50 GMT
content-type: application/json
content-length: 17721
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
ba182692bb.0c1d501ba1.com/in/multy
157.90.84.246200 OK 16 kB URL HTTP/2 ba182692bb.0c1d501ba1.com/in/multy
IP 157.90.84.246:0
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (16532), with no line terminators
Hash b5f675a425fda087eb662af3633baccc
8e41a0168317afe9672e59cba26d4c1a0fce87e1
b4c9170ad86082a4718178e82707b71ab3e1236bba400751cd088d5b5bff3dc0
POST /in/multy HTTP/1.1
Host: ba182692bb.0c1d501ba1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 953
Origin: https://everydaysubjects.com
Connection: keep-alive
Referer: https://everydaysubjects.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 18 Jan 2023 09:30:50 GMT
content-type: application/json
content-length: 16543
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
ba182692bb.0c1d501ba1.com/in/multy
157.90.84.246200 OK 36 kB URL HTTP/2 ba182692bb.0c1d501ba1.com/in/multy
IP 157.90.84.246:0
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (35577), with no line terminators
Hash befeb7e480eff763ca0c1f292d8947db
e1190da4a80b4a84c1f22f7d5485768ff41e5988
af899dcda3b485bc0deca0454ffcecf0cb239612cadb763e5b19b3249688b013
POST /in/multy HTTP/1.1
Host: ba182692bb.0c1d501ba1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 951
Origin: https://everydaysubjects.com
Connection: keep-alive
Referer: https://everydaysubjects.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 18 Jan 2023 09:30:50 GMT
content-type: application/json
content-length: 35580
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
ba182692bb.0c1d501ba1.com/in/show/?mid=1380995864601332078&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=575679908&sid=97814272&cid=14198&price=0.000553&is_cpm=0&cpm=0&ecpm=0.01854447816091954&crid=&crtid=8fc5a3949d58ed66158a5da3a7b48b19&tcid=0&out_id=1&ver=8.19.0&ver_c=&refdom=everydaysubjects.com&hostname=auc-inpage-hz-1-b&site_id=3122433&spot_id=22433&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2023-01-18&is_native=2&auction_queue=0&burl=DwE1suZB0GO5aVOQzEYs21B0d7IcYqZ6rF9cSdBLa76RnZVU2hKf1g&pop_winurl=&ip=91.90.42.154&testab=0&px_id=5322433&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB1-5&min_cpm=0.0024027590752052548&placement_type_id=&skin_test=0&verify_hash=259120107f9528a2918e0fc38da0c4e3&score=0&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D575679908%26spot_id%3D22433%26is_adult%3D0%26p%3Dhttps%253A%252F%252Feverydaysubjects.com%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=a&original_bid=0.000553&user_fp=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=bAHOoDpLPz9l7auPmiPYL-IvsAQHxWqmfbneeThTbWVffF7UjOjjGrTnyuKDNY3YhP-kjktI4OgPl9q_s0fw7CgkpngkZmA7WHy-U__lhiGzYi4xQPSYtzWcIjVeytNBnKAq8qwkmw7X7NzzrtiKzt2VvMk0FrdSgFL2v86Ljx_0pLqgig&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FUS%2FUS_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp&skin_id=1&vertical_id=14&real_bid=0.000553&pr=&user_keywords=&auc_type=1&aid=3563&ext_cid=0&device_theme=light&keywords=&label_ids=89,14,83&conditions=dch_ip,tz_offset&need_redirect_show=0&mlf=1&cpa=3210f820-d252-4207-952f-2dd47994170e&mlc=1&format=compact-slide-b_r-body
157.90.84.246200 OK 0 B URL HTTP/2 ba182692bb.0c1d501ba1.com/in/show/?mid=1380995864601332078&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=575679908&sid=97814272&cid=14198&price=0.000553&is_cpm=0&cpm=0&ecpm=0.01854447816091954&crid=&crtid=8fc5a3949d58ed66158a5da3a7b48b19&tcid=0&out_id=1&ver=8.19.0&ver_c=&refdom=everydaysubjects.com&hostname=auc-inpage-hz-1-b&site_id=3122433&spot_id=22433&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2023-01-18&is_native=2&auction_queue=0&burl=DwE1suZB0GO5aVOQzEYs21B0d7IcYqZ6rF9cSdBLa76RnZVU2hKf1g&pop_winurl=&ip=91.90.42.154&testab=0&px_id=5322433&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB1-5&min_cpm=0.0024027590752052548&placement_type_id=&skin_test=0&verify_hash=259120107f9528a2918e0fc38da0c4e3&score=0&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D575679908%26spot_id%3D22433%26is_adult%3D0%26p%3Dhttps%253A%252F%252Feverydaysubjects.com%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=a&original_bid=0.000553&user_fp=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=bAHOoDpLPz9l7auPmiPYL-IvsAQHxWqmfbneeThTbWVffF7UjOjjGrTnyuKDNY3YhP-kjktI4OgPl9q_s0fw7CgkpngkZmA7WHy-U__lhiGzYi4xQPSYtzWcIjVeytNBnKAq8qwkmw7X7NzzrtiKzt2VvMk0FrdSgFL2v86Ljx_0pLqgig&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FUS%2FUS_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp&skin_id=1&vertical_id=14&real_bid=0.000553&pr=&user_keywords=&auc_type=1&aid=3563&ext_cid=0&device_theme=light&keywords=&label_ids=89,14,83&conditions=dch_ip,tz_offset&need_redirect_show=0&mlf=1&cpa=3210f820-d252-4207-952f-2dd47994170e&mlc=1&format=compact-slide-b_r-body
IP 157.90.84.246:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/show/?mid=1380995864601332078&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=575679908&sid=97814272&cid=14198&price=0.000553&is_cpm=0&cpm=0&ecpm=0.01854447816091954&crid=&crtid=8fc5a3949d58ed66158a5da3a7b48b19&tcid=0&out_id=1&ver=8.19.0&ver_c=&refdom=everydaysubjects.com&hostname=auc-inpage-hz-1-b&site_id=3122433&spot_id=22433&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2023-01-18&is_native=2&auction_queue=0&burl=DwE1suZB0GO5aVOQzEYs21B0d7IcYqZ6rF9cSdBLa76RnZVU2hKf1g&pop_winurl=&ip=91.90.42.154&testab=0&px_id=5322433&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB1-5&min_cpm=0.0024027590752052548&placement_type_id=&skin_test=0&verify_hash=259120107f9528a2918e0fc38da0c4e3&score=0&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D575679908%26spot_id%3D22433%26is_adult%3D0%26p%3Dhttps%253A%252F%252Feverydaysubjects.com%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=a&original_bid=0.000553&user_fp=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=bAHOoDpLPz9l7auPmiPYL-IvsAQHxWqmfbneeThTbWVffF7UjOjjGrTnyuKDNY3YhP-kjktI4OgPl9q_s0fw7CgkpngkZmA7WHy-U__lhiGzYi4xQPSYtzWcIjVeytNBnKAq8qwkmw7X7NzzrtiKzt2VvMk0FrdSgFL2v86Ljx_0pLqgig&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FUS%2FUS_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp&skin_id=1&vertical_id=14&real_bid=0.000553&pr=&user_keywords=&auc_type=1&aid=3563&ext_cid=0&device_theme=light&keywords=&label_ids=89,14,83&conditions=dch_ip,tz_offset&need_redirect_show=0&mlf=1&cpa=3210f820-d252-4207-952f-2dd47994170e&mlc=1&format=compact-slide-b_r-body HTTP/1.1
Host: ba182692bb.0c1d501ba1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://everydaysubjects.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 18 Jan 2023 09:30:50 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
ba182692bb.0c1d501ba1.com/in/show/?mid=1380995864601332078&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=575679908&sid=97814272&cid=12822&price=0.05447&is_cpm=0&cpm=0&ecpm=1.3456399655712223&crid=&crtid=17d43f81cc073548090aad9c92420bae&tcid=0&out_id=0&ver=8.19.0&ver_c=&refdom=everydaysubjects.com&hostname=auc-inpage-hz-1-b&site_id=3122433&spot_id=22433&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1674106249&created_at=2023-01-18&is_native=1&auction_queue=0&burl=uZxf5TFDVNYVFLHBywEnzIzAO1khqiXDOVD44Tkm5mhQ8JVNtzGNOA&pop_winurl=&ip=91.90.42.154&testab=0&px_id=3122433&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=mq&uniq=ce907f2c394b3ec9a5c6a06f6f7c0895f4699e55a1cbe1cab376ca739bd37c49&exp=1440&resp_type=&iabcat=IAB1-5&min_cpm=0.002315945755566505&placement_type_id=&skin_test=0&verify_hash=414fc61d073bac8605b5e70bfaad6ff4&score=0&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D575679908%26spot_id%3D22433%26is_adult%3D0%26p%3Dhttps%253A%252F%252Feverydaysubjects.com%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=a&original_bid=0.05447&user_fp=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=_85htGqir1DmQ9K7iezBv9ddlevcxqnRDqt9nlWhzOk2G9iGZDJbn7HaFpXTpz5ORfxD7eu4RMLVD7KLPkIqglrIkbmNpjK99GHX96mpj8IaONjzR99Zatv69hnB6g-HQQfoD_i_xXTwlinWSe4gTtIJsh6V58q5NxxNpxk3TsRr1qoFWgltjH7oMsXCeXFD-kGOrY9dEceBrGlcFffpntMfryMIlUSPYeBD15U9QoFHOEJtLqPKylN7kqirEpI3nrpqm4eXxQWr5aFxbYXGQANyn_Y54ZVKeZro6dfl-w8gKyUkkudgp3BayJ_m6II8PA34T5h1op9yxLswyGcBCAfy9JPfTtSIuduh5xXUECMbQ0MIunSHYnZCBCKbPiEVtwcjp4S4QA7GobePPzw3u9qdK3VlcQogOCanSWAEwgwwqyDnOjX2AVZMDrTOaYljq-Pw477wK0-qYwddAvCPABzFHFpM0aro8DIvhXFC6Tpc-d0zvb1IE-Nr-3zdjcyGulVCmWcQC12kPGkrzRj5NQ_0LgE9OySDfFMIXzjsME98hf0b08QFausXZv9sFDe7JvV7Hk1MfTk15S00c1k-E5aFevYpHoh8bDmEiyYrW5JR0DCjAq-gsJcnCbm5N-Wh6JiUStBS2_YZSWfksE59-7TOCn5WGHAUME1xp_9iy6JtA2N8jfGT7fa2ImeaqrmEACPRzoFqm4IYIeQOU_97vD39neZIIdjs7ErP4kZAC4wVNqy32cSePrTtfMwzW7T4gst_LXg6Eg2bDLY0-p3et25C1DXnXJX1yECssDPBdiVV2ZHnoMD8QD1ohsSxd871EwzxbXUCJAL7EAFnvf3PGJ6NoFYTGhLhLR6eDOHxkMNUHPloepoh0kiLx65dIlqXgZLNH28H09Dtn0lIKmpJVMBps0O_JAyxHoP9zD_Mx13mT_4uI3HoHhtHgtC5kQkEXAY9mppv92KsJIeFw5l9YPJ3iKH7BOfqi-Or3pqXICGs4No85HlrGsk8K4TrrO1we42JzCvtZPCXQCVzpteQRgO2nNPNWmD5vaol5lreMnvzHRP_puvTHvp2KylrEfqFlgY2ZbqXSC8sO7m-5di922fJV119XxFjZkxaaZm_iHMAXtrunH4TCcmn4HthP6m5Z9CtRAWov5i1ze8MGnI&image_url=https%3A%2F%2Feu.doctorpost.net%2Fmetrics%2Fsave.img%3Fevent%3Dtracked_impressions%26bid-id%3Dv2-1674034249297-7-9306-1178228-1c5f5ea3-40be-69dd-ae36-2874264e44e9%26price%3D0%26img%3Dhttps%253A%252F%252Ftrack.trackingtraffo.com%252Fpush%252Fim%253Fauth%253Dpz6u78%2526c%253DGXKoP9JzWLSQ_rPbQOAM8CedzO63FAIU3njUcZ6F2y_B0B_nFzHQao1bpxt0rUIm_lEW7xCJ7g0AY8nkLKtge5ULC7Q1YKnE7ePFtiiIRDFL1et-wCnS4B0G3b1QnnRLEWAhH2E9oZ4TOwWwPfvtyyGEoLyjxkWPbYiPZrniQjP9N0L40_YOOo8jdpTbQaMvfxDJKXucNZOxuuNF-4mxCAtjdDc9lgO2OwKQW1jDtMNWhy3bYa7sWSHeVSYOn-gjDb3cr_BemTVyUdJxhLWENbdSwtCd2T2Iloclw98VLBP8-JAkEueGr0ZTYJlD8_3_XL4Iw6XQdnmvUvSDnX4VOn70Q70YsZetDEj7qvNGXqSaTsoFvDNIJQuARLsH4EOJDLWPhJUmLSQe4t3pS5wZD9U7NztKwJrlAtR9VFHr6f3H5fMrVX5fQ5zjsFDiGqGVagYjgRnQDDqNiEvBM7e1dZ3zjmAjqgWktF59HAAaTSvNPzyiUz0YG602bQib3s6wTcpwnmQFJlCNTxqjydbkgTlWWYrHosJo_9t-uJozT_ul9aSq1xBGcNkqNiooh7TlMdj9kb6g12mjDKIxIcNC50v9IPjgwbllShVwgw&skin_id=1&vertical_id=15&real_bid=0.041631420999999995&pr=&user_keywords=&auc_type=1&aid=3251&ext_cid=0&device_theme=light&keywords=&label_ids=15,83,101,106&conditions=dch_ip,tz_offset&need_redirect_show=0&cpa=d0c27bb5-4917-4930-b6e8-7a31487299b2&format=compact-slide-b_r-body
157.90.84.246200 OK 0 B URL HTTP/2 ba182692bb.0c1d501ba1.com/in/show/?mid=1380995864601332078&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=575679908&sid=97814272&cid=12822&price=0.05447&is_cpm=0&cpm=0&ecpm=1.3456399655712223&crid=&crtid=17d43f81cc073548090aad9c92420bae&tcid=0&out_id=0&ver=8.19.0&ver_c=&refdom=everydaysubjects.com&hostname=auc-inpage-hz-1-b&site_id=3122433&spot_id=22433&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1674106249&created_at=2023-01-18&is_native=1&auction_queue=0&burl=uZxf5TFDVNYVFLHBywEnzIzAO1khqiXDOVD44Tkm5mhQ8JVNtzGNOA&pop_winurl=&ip=91.90.42.154&testab=0&px_id=3122433&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=mq&uniq=ce907f2c394b3ec9a5c6a06f6f7c0895f4699e55a1cbe1cab376ca739bd37c49&exp=1440&resp_type=&iabcat=IAB1-5&min_cpm=0.002315945755566505&placement_type_id=&skin_test=0&verify_hash=414fc61d073bac8605b5e70bfaad6ff4&score=0&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D575679908%26spot_id%3D22433%26is_adult%3D0%26p%3Dhttps%253A%252F%252Feverydaysubjects.com%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=a&original_bid=0.05447&user_fp=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=_85htGqir1DmQ9K7iezBv9ddlevcxqnRDqt9nlWhzOk2G9iGZDJbn7HaFpXTpz5ORfxD7eu4RMLVD7KLPkIqglrIkbmNpjK99GHX96mpj8IaONjzR99Zatv69hnB6g-HQQfoD_i_xXTwlinWSe4gTtIJsh6V58q5NxxNpxk3TsRr1qoFWgltjH7oMsXCeXFD-kGOrY9dEceBrGlcFffpntMfryMIlUSPYeBD15U9QoFHOEJtLqPKylN7kqirEpI3nrpqm4eXxQWr5aFxbYXGQANyn_Y54ZVKeZro6dfl-w8gKyUkkudgp3BayJ_m6II8PA34T5h1op9yxLswyGcBCAfy9JPfTtSIuduh5xXUECMbQ0MIunSHYnZCBCKbPiEVtwcjp4S4QA7GobePPzw3u9qdK3VlcQogOCanSWAEwgwwqyDnOjX2AVZMDrTOaYljq-Pw477wK0-qYwddAvCPABzFHFpM0aro8DIvhXFC6Tpc-d0zvb1IE-Nr-3zdjcyGulVCmWcQC12kPGkrzRj5NQ_0LgE9OySDfFMIXzjsME98hf0b08QFausXZv9sFDe7JvV7Hk1MfTk15S00c1k-E5aFevYpHoh8bDmEiyYrW5JR0DCjAq-gsJcnCbm5N-Wh6JiUStBS2_YZSWfksE59-7TOCn5WGHAUME1xp_9iy6JtA2N8jfGT7fa2ImeaqrmEACPRzoFqm4IYIeQOU_97vD39neZIIdjs7ErP4kZAC4wVNqy32cSePrTtfMwzW7T4gst_LXg6Eg2bDLY0-p3et25C1DXnXJX1yECssDPBdiVV2ZHnoMD8QD1ohsSxd871EwzxbXUCJAL7EAFnvf3PGJ6NoFYTGhLhLR6eDOHxkMNUHPloepoh0kiLx65dIlqXgZLNH28H09Dtn0lIKmpJVMBps0O_JAyxHoP9zD_Mx13mT_4uI3HoHhtHgtC5kQkEXAY9mppv92KsJIeFw5l9YPJ3iKH7BOfqi-Or3pqXICGs4No85HlrGsk8K4TrrO1we42JzCvtZPCXQCVzpteQRgO2nNPNWmD5vaol5lreMnvzHRP_puvTHvp2KylrEfqFlgY2ZbqXSC8sO7m-5di922fJV119XxFjZkxaaZm_iHMAXtrunH4TCcmn4HthP6m5Z9CtRAWov5i1ze8MGnI&image_url=https%3A%2F%2Feu.doctorpost.net%2Fmetrics%2Fsave.img%3Fevent%3Dtracked_impressions%26bid-id%3Dv2-1674034249297-7-9306-1178228-1c5f5ea3-40be-69dd-ae36-2874264e44e9%26price%3D0%26img%3Dhttps%253A%252F%252Ftrack.trackingtraffo.com%252Fpush%252Fim%253Fauth%253Dpz6u78%2526c%253DGXKoP9JzWLSQ_rPbQOAM8CedzO63FAIU3njUcZ6F2y_B0B_nFzHQao1bpxt0rUIm_lEW7xCJ7g0AY8nkLKtge5ULC7Q1YKnE7ePFtiiIRDFL1et-wCnS4B0G3b1QnnRLEWAhH2E9oZ4TOwWwPfvtyyGEoLyjxkWPbYiPZrniQjP9N0L40_YOOo8jdpTbQaMvfxDJKXucNZOxuuNF-4mxCAtjdDc9lgO2OwKQW1jDtMNWhy3bYa7sWSHeVSYOn-gjDb3cr_BemTVyUdJxhLWENbdSwtCd2T2Iloclw98VLBP8-JAkEueGr0ZTYJlD8_3_XL4Iw6XQdnmvUvSDnX4VOn70Q70YsZetDEj7qvNGXqSaTsoFvDNIJQuARLsH4EOJDLWPhJUmLSQe4t3pS5wZD9U7NztKwJrlAtR9VFHr6f3H5fMrVX5fQ5zjsFDiGqGVagYjgRnQDDqNiEvBM7e1dZ3zjmAjqgWktF59HAAaTSvNPzyiUz0YG602bQib3s6wTcpwnmQFJlCNTxqjydbkgTlWWYrHosJo_9t-uJozT_ul9aSq1xBGcNkqNiooh7TlMdj9kb6g12mjDKIxIcNC50v9IPjgwbllShVwgw&skin_id=1&vertical_id=15&real_bid=0.041631420999999995&pr=&user_keywords=&auc_type=1&aid=3251&ext_cid=0&device_theme=light&keywords=&label_ids=15,83,101,106&conditions=dch_ip,tz_offset&need_redirect_show=0&cpa=d0c27bb5-4917-4930-b6e8-7a31487299b2&format=compact-slide-b_r-body
IP 157.90.84.246:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/show/?mid=1380995864601332078&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=575679908&sid=97814272&cid=12822&price=0.05447&is_cpm=0&cpm=0&ecpm=1.3456399655712223&crid=&crtid=17d43f81cc073548090aad9c92420bae&tcid=0&out_id=0&ver=8.19.0&ver_c=&refdom=everydaysubjects.com&hostname=auc-inpage-hz-1-b&site_id=3122433&spot_id=22433&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1674106249&created_at=2023-01-18&is_native=1&auction_queue=0&burl=uZxf5TFDVNYVFLHBywEnzIzAO1khqiXDOVD44Tkm5mhQ8JVNtzGNOA&pop_winurl=&ip=91.90.42.154&testab=0&px_id=3122433&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=mq&uniq=ce907f2c394b3ec9a5c6a06f6f7c0895f4699e55a1cbe1cab376ca739bd37c49&exp=1440&resp_type=&iabcat=IAB1-5&min_cpm=0.002315945755566505&placement_type_id=&skin_test=0&verify_hash=414fc61d073bac8605b5e70bfaad6ff4&score=0&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D575679908%26spot_id%3D22433%26is_adult%3D0%26p%3Dhttps%253A%252F%252Feverydaysubjects.com%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=a&original_bid=0.05447&user_fp=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=_85htGqir1DmQ9K7iezBv9ddlevcxqnRDqt9nlWhzOk2G9iGZDJbn7HaFpXTpz5ORfxD7eu4RMLVD7KLPkIqglrIkbmNpjK99GHX96mpj8IaONjzR99Zatv69hnB6g-HQQfoD_i_xXTwlinWSe4gTtIJsh6V58q5NxxNpxk3TsRr1qoFWgltjH7oMsXCeXFD-kGOrY9dEceBrGlcFffpntMfryMIlUSPYeBD15U9QoFHOEJtLqPKylN7kqirEpI3nrpqm4eXxQWr5aFxbYXGQANyn_Y54ZVKeZro6dfl-w8gKyUkkudgp3BayJ_m6II8PA34T5h1op9yxLswyGcBCAfy9JPfTtSIuduh5xXUECMbQ0MIunSHYnZCBCKbPiEVtwcjp4S4QA7GobePPzw3u9qdK3VlcQogOCanSWAEwgwwqyDnOjX2AVZMDrTOaYljq-Pw477wK0-qYwddAvCPABzFHFpM0aro8DIvhXFC6Tpc-d0zvb1IE-Nr-3zdjcyGulVCmWcQC12kPGkrzRj5NQ_0LgE9OySDfFMIXzjsME98hf0b08QFausXZv9sFDe7JvV7Hk1MfTk15S00c1k-E5aFevYpHoh8bDmEiyYrW5JR0DCjAq-gsJcnCbm5N-Wh6JiUStBS2_YZSWfksE59-7TOCn5WGHAUME1xp_9iy6JtA2N8jfGT7fa2ImeaqrmEACPRzoFqm4IYIeQOU_97vD39neZIIdjs7ErP4kZAC4wVNqy32cSePrTtfMwzW7T4gst_LXg6Eg2bDLY0-p3et25C1DXnXJX1yECssDPBdiVV2ZHnoMD8QD1ohsSxd871EwzxbXUCJAL7EAFnvf3PGJ6NoFYTGhLhLR6eDOHxkMNUHPloepoh0kiLx65dIlqXgZLNH28H09Dtn0lIKmpJVMBps0O_JAyxHoP9zD_Mx13mT_4uI3HoHhtHgtC5kQkEXAY9mppv92KsJIeFw5l9YPJ3iKH7BOfqi-Or3pqXICGs4No85HlrGsk8K4TrrO1we42JzCvtZPCXQCVzpteQRgO2nNPNWmD5vaol5lreMnvzHRP_puvTHvp2KylrEfqFlgY2ZbqXSC8sO7m-5di922fJV119XxFjZkxaaZm_iHMAXtrunH4TCcmn4HthP6m5Z9CtRAWov5i1ze8MGnI&image_url=https%3A%2F%2Feu.doctorpost.net%2Fmetrics%2Fsave.img%3Fevent%3Dtracked_impressions%26bid-id%3Dv2-1674034249297-7-9306-1178228-1c5f5ea3-40be-69dd-ae36-2874264e44e9%26price%3D0%26img%3Dhttps%253A%252F%252Ftrack.trackingtraffo.com%252Fpush%252Fim%253Fauth%253Dpz6u78%2526c%253DGXKoP9JzWLSQ_rPbQOAM8CedzO63FAIU3njUcZ6F2y_B0B_nFzHQao1bpxt0rUIm_lEW7xCJ7g0AY8nkLKtge5ULC7Q1YKnE7ePFtiiIRDFL1et-wCnS4B0G3b1QnnRLEWAhH2E9oZ4TOwWwPfvtyyGEoLyjxkWPbYiPZrniQjP9N0L40_YOOo8jdpTbQaMvfxDJKXucNZOxuuNF-4mxCAtjdDc9lgO2OwKQW1jDtMNWhy3bYa7sWSHeVSYOn-gjDb3cr_BemTVyUdJxhLWENbdSwtCd2T2Iloclw98VLBP8-JAkEueGr0ZTYJlD8_3_XL4Iw6XQdnmvUvSDnX4VOn70Q70YsZetDEj7qvNGXqSaTsoFvDNIJQuARLsH4EOJDLWPhJUmLSQe4t3pS5wZD9U7NztKwJrlAtR9VFHr6f3H5fMrVX5fQ5zjsFDiGqGVagYjgRnQDDqNiEvBM7e1dZ3zjmAjqgWktF59HAAaTSvNPzyiUz0YG602bQib3s6wTcpwnmQFJlCNTxqjydbkgTlWWYrHosJo_9t-uJozT_ul9aSq1xBGcNkqNiooh7TlMdj9kb6g12mjDKIxIcNC50v9IPjgwbllShVwgw&skin_id=1&vertical_id=15&real_bid=0.041631420999999995&pr=&user_keywords=&auc_type=1&aid=3251&ext_cid=0&device_theme=light&keywords=&label_ids=15,83,101,106&conditions=dch_ip,tz_offset&need_redirect_show=0&cpa=d0c27bb5-4917-4930-b6e8-7a31487299b2&format=compact-slide-b_r-body HTTP/1.1
Host: ba182692bb.0c1d501ba1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://everydaysubjects.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 18 Jan 2023 09:30:50 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
ba182692bb.0c1d501ba1.com/in/show/?mid=4336467070445248628&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=2037588575&sid=2887838487&cid=11653&price=0.00073&is_cpm=0&cpm=0&ecpm=0.04181970703500912&crid=&crtid=8fc5a3949d58ed66158a5da3a7b48b19&tcid=0&out_id=1&ver=8.19.0&ver_c=&refdom=everydaysubjects.com&hostname=auc-inpage-hz-3-b&site_id=3118008&spot_id=18008&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1674120649&created_at=2023-01-18&is_native=2&auction_queue=0&burl=pQsFUJGtB_2jdnDIzVQo2GvgP9M1PzU41OHzu7LmxjBXjKycbPYdig&pop_winurl=&ip=91.90.42.154&testab=0&px_id=3118008&adblock=0&auction_host=&mm=0&yc=0&render_type=hq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB1-5&min_cpm=0.004104675854573534&placement_type_id=&skin_test=0&verify_hash=b8e1b4946867ec321e24eaa0fc03459d&score=0&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D2037588575%26spot_id%3D18008%26is_adult%3D0%26p%3Dhttps%253A%252F%252Feverydaysubjects.com%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=b&original_bid=0.00073&user_fp=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=mxGMBAkSYaxq_Sg4WCNs10PZRe64eALloLCjESBsq8D8RMaQYjxxAu0pda7E6AF04gVPLHZFpd9rBDXGkkoB8MI9j6nS7meDYlq4c8nNWgbesVEjHp1KzV2ywYLKr773nIhgubowkqO_pQEEbIjNNorOuzJDxRpcEvsgssPsRDMKh6afAg&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FUS%2FUS_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp&skin_id=1&vertical_id=0&real_bid=0.00073&pr=&user_keywords=&auc_type=1&aid=161&ext_cid=0&device_theme=light&keywords=&label_ids=76,83,0,89,95&conditions=dch_ip,tz_offset&need_redirect_show=0&mlf=1&cpa=feb88363-bfcc-4119-8a13-a53a62bfb35c&mlc=1&format=compact-slide-b_r-body
157.90.84.246200 OK 0 B URL HTTP/2 ba182692bb.0c1d501ba1.com/in/show/?mid=4336467070445248628&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=2037588575&sid=2887838487&cid=11653&price=0.00073&is_cpm=0&cpm=0&ecpm=0.04181970703500912&crid=&crtid=8fc5a3949d58ed66158a5da3a7b48b19&tcid=0&out_id=1&ver=8.19.0&ver_c=&refdom=everydaysubjects.com&hostname=auc-inpage-hz-3-b&site_id=3118008&spot_id=18008&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1674120649&created_at=2023-01-18&is_native=2&auction_queue=0&burl=pQsFUJGtB_2jdnDIzVQo2GvgP9M1PzU41OHzu7LmxjBXjKycbPYdig&pop_winurl=&ip=91.90.42.154&testab=0&px_id=3118008&adblock=0&auction_host=&mm=0&yc=0&render_type=hq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB1-5&min_cpm=0.004104675854573534&placement_type_id=&skin_test=0&verify_hash=b8e1b4946867ec321e24eaa0fc03459d&score=0&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D2037588575%26spot_id%3D18008%26is_adult%3D0%26p%3Dhttps%253A%252F%252Feverydaysubjects.com%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=b&original_bid=0.00073&user_fp=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=mxGMBAkSYaxq_Sg4WCNs10PZRe64eALloLCjESBsq8D8RMaQYjxxAu0pda7E6AF04gVPLHZFpd9rBDXGkkoB8MI9j6nS7meDYlq4c8nNWgbesVEjHp1KzV2ywYLKr773nIhgubowkqO_pQEEbIjNNorOuzJDxRpcEvsgssPsRDMKh6afAg&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FUS%2FUS_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp&skin_id=1&vertical_id=0&real_bid=0.00073&pr=&user_keywords=&auc_type=1&aid=161&ext_cid=0&device_theme=light&keywords=&label_ids=76,83,0,89,95&conditions=dch_ip,tz_offset&need_redirect_show=0&mlf=1&cpa=feb88363-bfcc-4119-8a13-a53a62bfb35c&mlc=1&format=compact-slide-b_r-body
IP 157.90.84.246:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/show/?mid=4336467070445248628&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=2037588575&sid=2887838487&cid=11653&price=0.00073&is_cpm=0&cpm=0&ecpm=0.04181970703500912&crid=&crtid=8fc5a3949d58ed66158a5da3a7b48b19&tcid=0&out_id=1&ver=8.19.0&ver_c=&refdom=everydaysubjects.com&hostname=auc-inpage-hz-3-b&site_id=3118008&spot_id=18008&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1674120649&created_at=2023-01-18&is_native=2&auction_queue=0&burl=pQsFUJGtB_2jdnDIzVQo2GvgP9M1PzU41OHzu7LmxjBXjKycbPYdig&pop_winurl=&ip=91.90.42.154&testab=0&px_id=3118008&adblock=0&auction_host=&mm=0&yc=0&render_type=hq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB1-5&min_cpm=0.004104675854573534&placement_type_id=&skin_test=0&verify_hash=b8e1b4946867ec321e24eaa0fc03459d&score=0&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D2037588575%26spot_id%3D18008%26is_adult%3D0%26p%3Dhttps%253A%252F%252Feverydaysubjects.com%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=b&original_bid=0.00073&user_fp=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=mxGMBAkSYaxq_Sg4WCNs10PZRe64eALloLCjESBsq8D8RMaQYjxxAu0pda7E6AF04gVPLHZFpd9rBDXGkkoB8MI9j6nS7meDYlq4c8nNWgbesVEjHp1KzV2ywYLKr773nIhgubowkqO_pQEEbIjNNorOuzJDxRpcEvsgssPsRDMKh6afAg&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FUS%2FUS_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp&skin_id=1&vertical_id=0&real_bid=0.00073&pr=&user_keywords=&auc_type=1&aid=161&ext_cid=0&device_theme=light&keywords=&label_ids=76,83,0,89,95&conditions=dch_ip,tz_offset&need_redirect_show=0&mlf=1&cpa=feb88363-bfcc-4119-8a13-a53a62bfb35c&mlc=1&format=compact-slide-b_r-body HTTP/1.1
Host: ba182692bb.0c1d501ba1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://everydaysubjects.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 18 Jan 2023 09:30:50 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
ba182692bb.0c1d501ba1.com/in/show/?mid=4336467070445248628&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=2037588575&sid=2887838487&cid=13468&price=0.020934&is_cpm=0&cpm=0&ecpm=0.13067693403640088&crid=&crtid=17d43f81cc073548090aad9c92420bae&tcid=0&out_id=0&ver=8.19.0&ver_c=&refdom=everydaysubjects.com&hostname=auc-inpage-hz-3-b&site_id=3118008&spot_id=18008&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1674120649&created_at=2023-01-18&is_native=1&auction_queue=0&burl=kfKiCsBr8-rV7hb-ZrY-Hv7Uh65GlwduyXxNnWnYP_h1Iu0XESHYOA&pop_winurl=&ip=91.90.42.154&testab=0&px_id=7318008&adblock=0&auction_host=&mm=0&yc=0&render_type=hq&campaign_type=hq&uniq=cb0628e2d4006996633921536d89db02acf0e72aa3369a112eae92e7059d4a1a&exp=4&resp_type=&iabcat=IAB1-5&min_cpm=0.0004472676187737007&placement_type_id=&skin_test=0&verify_hash=46ccfddc6f65d159256eefb3d58718c4&score=0&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D2037588575%26spot_id%3D18008%26is_adult%3D0%26p%3Dhttps%253A%252F%252Feverydaysubjects.com%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=b&original_bid=0.020934&user_fp=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=NeV0bJzveCoVckSb4dnVZcU_pBK1MshRiYLbGnZ4HfJ8viQvKj7erRqKoudv-ct8P5Y0lx2OoObAzWvV3TkE-9QRbU4AGgvp5g4YBj5sVDlQkeSws73EQWzpBTdHme_KT67CNqzxJedr4vkJXlYIrrC6VUgbVlUoCOwUxZPbweNn9cmhUaxh_bk7a6s3jcxWRJrvu5mgfZhmf5IxqZTTqHWvS6scB8PhnFFDTlL_KbwtwlWlouvYgtXDb5JbvhEugeJxDGk6y2Zt-ZBGmKbYDAT96IOZ9TF0qjO7paH4YDT7jSpkn96FB0-2sMZ9tXpmoA_d446sD2esQRub4h11ziKrH7qoG-prHFhN6IdPQ1yPbtTIc7LOm9t4VwXK5zmcllJxOORglvTWf3PGD-No73zmqAcFYC2NJXAM3oNsjQZuGWfqBiBf6jcx3nAUzV0MKuUFZy9jGitnaWUGuXfBMHrPyS_z3VeJeq5l7IRWHpjHvc2MLFYcTSw6Hgpt2_XEX0amas7iqL4eurvk0N_40izgQarqSdQSZUN4Z_n6qThuOk0LeNMa2XQM5RY7b2S1yciwZ40zgP12BhaJEsVLSgmXDNiuwu9PYhC55krJRPt_VndA_LJ11NRigni9JVgM0VGQ6fA-EcGrT7NOi9Qx7E3WL3A39YaGds2mVV3kFQ6cBcE-C_PtdMutjB4GKLANKLx0QuPOLeXBVejQ4Urun9e-y18gbsRe9ymiOoyVMUoo8ZE&image_url=https%3A%2F%2Fi33-rtb.informcheck.net%2Fpgo%2F2-9970%2Fare3zr3dt7ofsacoj4aaaaaabxkiabe2fjnfwipseyaaaaiaaaaaaaaaaaaa&skin_id=1&vertical_id=15&real_bid=0.020934&pr=&user_keywords=&auc_type=1&aid=319&ext_cid=0&device_theme=light&keywords=&label_ids=83,90,15&conditions=dch_ip,tz_offset&need_redirect_show=0&cpa=1fac403a-751f-4484-b409-90b942d22e06&format=compact-slide-b_r-body
157.90.84.246200 OK 0 B URL HTTP/2 ba182692bb.0c1d501ba1.com/in/show/?mid=4336467070445248628&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=2037588575&sid=2887838487&cid=13468&price=0.020934&is_cpm=0&cpm=0&ecpm=0.13067693403640088&crid=&crtid=17d43f81cc073548090aad9c92420bae&tcid=0&out_id=0&ver=8.19.0&ver_c=&refdom=everydaysubjects.com&hostname=auc-inpage-hz-3-b&site_id=3118008&spot_id=18008&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1674120649&created_at=2023-01-18&is_native=1&auction_queue=0&burl=kfKiCsBr8-rV7hb-ZrY-Hv7Uh65GlwduyXxNnWnYP_h1Iu0XESHYOA&pop_winurl=&ip=91.90.42.154&testab=0&px_id=7318008&adblock=0&auction_host=&mm=0&yc=0&render_type=hq&campaign_type=hq&uniq=cb0628e2d4006996633921536d89db02acf0e72aa3369a112eae92e7059d4a1a&exp=4&resp_type=&iabcat=IAB1-5&min_cpm=0.0004472676187737007&placement_type_id=&skin_test=0&verify_hash=46ccfddc6f65d159256eefb3d58718c4&score=0&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D2037588575%26spot_id%3D18008%26is_adult%3D0%26p%3Dhttps%253A%252F%252Feverydaysubjects.com%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=b&original_bid=0.020934&user_fp=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=NeV0bJzveCoVckSb4dnVZcU_pBK1MshRiYLbGnZ4HfJ8viQvKj7erRqKoudv-ct8P5Y0lx2OoObAzWvV3TkE-9QRbU4AGgvp5g4YBj5sVDlQkeSws73EQWzpBTdHme_KT67CNqzxJedr4vkJXlYIrrC6VUgbVlUoCOwUxZPbweNn9cmhUaxh_bk7a6s3jcxWRJrvu5mgfZhmf5IxqZTTqHWvS6scB8PhnFFDTlL_KbwtwlWlouvYgtXDb5JbvhEugeJxDGk6y2Zt-ZBGmKbYDAT96IOZ9TF0qjO7paH4YDT7jSpkn96FB0-2sMZ9tXpmoA_d446sD2esQRub4h11ziKrH7qoG-prHFhN6IdPQ1yPbtTIc7LOm9t4VwXK5zmcllJxOORglvTWf3PGD-No73zmqAcFYC2NJXAM3oNsjQZuGWfqBiBf6jcx3nAUzV0MKuUFZy9jGitnaWUGuXfBMHrPyS_z3VeJeq5l7IRWHpjHvc2MLFYcTSw6Hgpt2_XEX0amas7iqL4eurvk0N_40izgQarqSdQSZUN4Z_n6qThuOk0LeNMa2XQM5RY7b2S1yciwZ40zgP12BhaJEsVLSgmXDNiuwu9PYhC55krJRPt_VndA_LJ11NRigni9JVgM0VGQ6fA-EcGrT7NOi9Qx7E3WL3A39YaGds2mVV3kFQ6cBcE-C_PtdMutjB4GKLANKLx0QuPOLeXBVejQ4Urun9e-y18gbsRe9ymiOoyVMUoo8ZE&image_url=https%3A%2F%2Fi33-rtb.informcheck.net%2Fpgo%2F2-9970%2Fare3zr3dt7ofsacoj4aaaaaabxkiabe2fjnfwipseyaaaaiaaaaaaaaaaaaa&skin_id=1&vertical_id=15&real_bid=0.020934&pr=&user_keywords=&auc_type=1&aid=319&ext_cid=0&device_theme=light&keywords=&label_ids=83,90,15&conditions=dch_ip,tz_offset&need_redirect_show=0&cpa=1fac403a-751f-4484-b409-90b942d22e06&format=compact-slide-b_r-body
IP 157.90.84.246:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/show/?mid=4336467070445248628&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=2037588575&sid=2887838487&cid=13468&price=0.020934&is_cpm=0&cpm=0&ecpm=0.13067693403640088&crid=&crtid=17d43f81cc073548090aad9c92420bae&tcid=0&out_id=0&ver=8.19.0&ver_c=&refdom=everydaysubjects.com&hostname=auc-inpage-hz-3-b&site_id=3118008&spot_id=18008&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1674120649&created_at=2023-01-18&is_native=1&auction_queue=0&burl=kfKiCsBr8-rV7hb-ZrY-Hv7Uh65GlwduyXxNnWnYP_h1Iu0XESHYOA&pop_winurl=&ip=91.90.42.154&testab=0&px_id=7318008&adblock=0&auction_host=&mm=0&yc=0&render_type=hq&campaign_type=hq&uniq=cb0628e2d4006996633921536d89db02acf0e72aa3369a112eae92e7059d4a1a&exp=4&resp_type=&iabcat=IAB1-5&min_cpm=0.0004472676187737007&placement_type_id=&skin_test=0&verify_hash=46ccfddc6f65d159256eefb3d58718c4&score=0&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D2037588575%26spot_id%3D18008%26is_adult%3D0%26p%3Dhttps%253A%252F%252Feverydaysubjects.com%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=b&original_bid=0.020934&user_fp=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=NeV0bJzveCoVckSb4dnVZcU_pBK1MshRiYLbGnZ4HfJ8viQvKj7erRqKoudv-ct8P5Y0lx2OoObAzWvV3TkE-9QRbU4AGgvp5g4YBj5sVDlQkeSws73EQWzpBTdHme_KT67CNqzxJedr4vkJXlYIrrC6VUgbVlUoCOwUxZPbweNn9cmhUaxh_bk7a6s3jcxWRJrvu5mgfZhmf5IxqZTTqHWvS6scB8PhnFFDTlL_KbwtwlWlouvYgtXDb5JbvhEugeJxDGk6y2Zt-ZBGmKbYDAT96IOZ9TF0qjO7paH4YDT7jSpkn96FB0-2sMZ9tXpmoA_d446sD2esQRub4h11ziKrH7qoG-prHFhN6IdPQ1yPbtTIc7LOm9t4VwXK5zmcllJxOORglvTWf3PGD-No73zmqAcFYC2NJXAM3oNsjQZuGWfqBiBf6jcx3nAUzV0MKuUFZy9jGitnaWUGuXfBMHrPyS_z3VeJeq5l7IRWHpjHvc2MLFYcTSw6Hgpt2_XEX0amas7iqL4eurvk0N_40izgQarqSdQSZUN4Z_n6qThuOk0LeNMa2XQM5RY7b2S1yciwZ40zgP12BhaJEsVLSgmXDNiuwu9PYhC55krJRPt_VndA_LJ11NRigni9JVgM0VGQ6fA-EcGrT7NOi9Qx7E3WL3A39YaGds2mVV3kFQ6cBcE-C_PtdMutjB4GKLANKLx0QuPOLeXBVejQ4Urun9e-y18gbsRe9ymiOoyVMUoo8ZE&image_url=https%3A%2F%2Fi33-rtb.informcheck.net%2Fpgo%2F2-9970%2Fare3zr3dt7ofsacoj4aaaaaabxkiabe2fjnfwipseyaaaaiaaaaaaaaaaaaa&skin_id=1&vertical_id=15&real_bid=0.020934&pr=&user_keywords=&auc_type=1&aid=319&ext_cid=0&device_theme=light&keywords=&label_ids=83,90,15&conditions=dch_ip,tz_offset&need_redirect_show=0&cpa=1fac403a-751f-4484-b409-90b942d22e06&format=compact-slide-b_r-body HTTP/1.1
Host: ba182692bb.0c1d501ba1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://everydaysubjects.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 18 Jan 2023 09:30:50 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
ba182692bb.0c1d501ba1.com/in/show/?mid=3857410771166495562&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=47122152&sid=2472770445&cid=13353&price=0.000316574&is_cpm=0&cpm=0&ecpm=0.01813566018479586&crid=&crtid=8fc5a3949d58ed66158a5da3a7b48b19&tcid=0&out_id=1&ver=8.19.0&ver_c=&refdom=everydaysubjects.com&hostname=auc-inpage-hz-4-b&site_id=3122337&spot_id=22337&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1674055849&created_at=2023-01-18&is_native=2&auction_queue=0&burl=7TIoB8AqFsOlY-UqZOdqdKKtrFqEe8ZiIyaOcqAyHgehD87htFy6jSbhFaav23bjG1kHkl5XSw0kuKgJROExI2FNWXGvTZCZZcibWRw8sAt6DuqDkQ&pop_winurl=&ip=91.90.42.154&testab=0&px_id=5322337&adblock=0&auction_host=&mm=0&yc=0&render_type=hq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB1-5&min_cpm=0.004104675854573534&placement_type_id=&skin_test=0&verify_hash=b8df3cf36c369f6ae1210dfcdd1c5815&score=0&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D47122152%26spot_id%3D22337%26is_adult%3D0%26p%3Dhttps%253A%252F%252Feverydaysubjects.com%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=a&original_bid=0.000316574&user_fp=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=Mi2UEB4Q_F1qdg944hpKuWLDo2U72sS9n1azSQQ-li6rXAyV3PjMbNQXGxcdr2mlcKGQvcZmahZkHQDWox1aeUmIEjulwuCnapB9RAkX3N7ZcPwrIyKStWBp67BT0dy7tBzA5AnQaXh4qFV4H0cSEgzSoH-5kp02sH3QHH3qy-WOJ380Zg&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FUS%2FUS_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp&skin_id=1&vertical_id=0&real_bid=0.000316574&pr=&user_keywords=&auc_type=1&aid=61&ext_cid=0&device_theme=light&keywords=&label_ids=89,0,83&conditions=dch_ip,tz_offset&need_redirect_show=0&mlf=1&cpa=84abb7cc-65bb-4c3a-964e-abba7a5983a1&mlc=1&format=compact-slide-b_r-body
157.90.84.246200 OK 0 B URL HTTP/2 ba182692bb.0c1d501ba1.com/in/show/?mid=3857410771166495562&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=47122152&sid=2472770445&cid=13353&price=0.000316574&is_cpm=0&cpm=0&ecpm=0.01813566018479586&crid=&crtid=8fc5a3949d58ed66158a5da3a7b48b19&tcid=0&out_id=1&ver=8.19.0&ver_c=&refdom=everydaysubjects.com&hostname=auc-inpage-hz-4-b&site_id=3122337&spot_id=22337&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1674055849&created_at=2023-01-18&is_native=2&auction_queue=0&burl=7TIoB8AqFsOlY-UqZOdqdKKtrFqEe8ZiIyaOcqAyHgehD87htFy6jSbhFaav23bjG1kHkl5XSw0kuKgJROExI2FNWXGvTZCZZcibWRw8sAt6DuqDkQ&pop_winurl=&ip=91.90.42.154&testab=0&px_id=5322337&adblock=0&auction_host=&mm=0&yc=0&render_type=hq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB1-5&min_cpm=0.004104675854573534&placement_type_id=&skin_test=0&verify_hash=b8df3cf36c369f6ae1210dfcdd1c5815&score=0&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D47122152%26spot_id%3D22337%26is_adult%3D0%26p%3Dhttps%253A%252F%252Feverydaysubjects.com%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=a&original_bid=0.000316574&user_fp=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=Mi2UEB4Q_F1qdg944hpKuWLDo2U72sS9n1azSQQ-li6rXAyV3PjMbNQXGxcdr2mlcKGQvcZmahZkHQDWox1aeUmIEjulwuCnapB9RAkX3N7ZcPwrIyKStWBp67BT0dy7tBzA5AnQaXh4qFV4H0cSEgzSoH-5kp02sH3QHH3qy-WOJ380Zg&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FUS%2FUS_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp&skin_id=1&vertical_id=0&real_bid=0.000316574&pr=&user_keywords=&auc_type=1&aid=61&ext_cid=0&device_theme=light&keywords=&label_ids=89,0,83&conditions=dch_ip,tz_offset&need_redirect_show=0&mlf=1&cpa=84abb7cc-65bb-4c3a-964e-abba7a5983a1&mlc=1&format=compact-slide-b_r-body
IP 157.90.84.246:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/show/?mid=3857410771166495562&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=47122152&sid=2472770445&cid=13353&price=0.000316574&is_cpm=0&cpm=0&ecpm=0.01813566018479586&crid=&crtid=8fc5a3949d58ed66158a5da3a7b48b19&tcid=0&out_id=1&ver=8.19.0&ver_c=&refdom=everydaysubjects.com&hostname=auc-inpage-hz-4-b&site_id=3122337&spot_id=22337&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1674055849&created_at=2023-01-18&is_native=2&auction_queue=0&burl=7TIoB8AqFsOlY-UqZOdqdKKtrFqEe8ZiIyaOcqAyHgehD87htFy6jSbhFaav23bjG1kHkl5XSw0kuKgJROExI2FNWXGvTZCZZcibWRw8sAt6DuqDkQ&pop_winurl=&ip=91.90.42.154&testab=0&px_id=5322337&adblock=0&auction_host=&mm=0&yc=0&render_type=hq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB1-5&min_cpm=0.004104675854573534&placement_type_id=&skin_test=0&verify_hash=b8df3cf36c369f6ae1210dfcdd1c5815&score=0&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D47122152%26spot_id%3D22337%26is_adult%3D0%26p%3Dhttps%253A%252F%252Feverydaysubjects.com%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=a&original_bid=0.000316574&user_fp=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=Mi2UEB4Q_F1qdg944hpKuWLDo2U72sS9n1azSQQ-li6rXAyV3PjMbNQXGxcdr2mlcKGQvcZmahZkHQDWox1aeUmIEjulwuCnapB9RAkX3N7ZcPwrIyKStWBp67BT0dy7tBzA5AnQaXh4qFV4H0cSEgzSoH-5kp02sH3QHH3qy-WOJ380Zg&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FUS%2FUS_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp&skin_id=1&vertical_id=0&real_bid=0.000316574&pr=&user_keywords=&auc_type=1&aid=61&ext_cid=0&device_theme=light&keywords=&label_ids=89,0,83&conditions=dch_ip,tz_offset&need_redirect_show=0&mlf=1&cpa=84abb7cc-65bb-4c3a-964e-abba7a5983a1&mlc=1&format=compact-slide-b_r-body HTTP/1.1
Host: ba182692bb.0c1d501ba1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://everydaysubjects.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 18 Jan 2023 09:30:50 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
ba182692bb.0c1d501ba1.com/in/show/?mid=3857410771166495562&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=47122152&sid=2472770445&cid=13468&price=0.01677676&is_cpm=0&cpm=0&ecpm=0.10472607050083735&crid=&crtid=797b6e15210af5b5ac8adb7c40138032&tcid=0&out_id=0&ver=8.19.0&ver_c=&refdom=everydaysubjects.com&hostname=auc-inpage-hz-4-b&site_id=3122337&spot_id=22337&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1674120649&created_at=2023-01-18&is_native=1&auction_queue=0&burl=NcssKqn9Wg4kEBzJEYSc7qQs38b2MLm5LxMQCgQopLafLW6vFZdYAQ&pop_winurl=&ip=91.90.42.154&testab=0&px_id=7322337&adblock=0&auction_host=&mm=0&yc=0&render_type=hq&campaign_type=hq&uniq=cb0628e2d4006996633921536d89db02acf0e72aa3369a112eae92e7059d4a1a&exp=4&resp_type=&iabcat=IAB1-5&min_cpm=0.0004472676187737007&placement_type_id=&skin_test=0&verify_hash=cc94f8a2f21b8c2179f3bc2abf545539&score=0&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D47122152%26spot_id%3D22337%26is_adult%3D0%26p%3Dhttps%253A%252F%252Feverydaysubjects.com%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=a&original_bid=0.01677676&user_fp=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=SUytSTI-Fop7OA5BIfSZR1Gw6YJPuonE7Q2Jb9QCJFU6QCRjuK8SkzqefZKO9aBXK0oZ-Fu_U-s7tGLJDLkp6tjpqZWpi4xqfNVJoBAR25Jahs9gLPaBQER4KFske23Gc3gpQr5vP0lrcBOunatFOksteOxZ3pEtc6cxgQN9PPdeH4JpqpKL19PbCDRIHaP8MPtM3OYugUokZmcJ3J5vfwUItYbeId0w1AuF415d9IW-8muXl_gcqwantmMbiwJ_ZGO4MEYOG9gFAT3z4kWV3LPZ39vUDwLBZA7jk8fL1Rf871kYC_SGlgZCYvHjuoDj4FxZbNGl3Oznr_slhmZTgBg6yK2UWLOpIS-LBMuE93pGdf1nWxlZ84TBCErUpC5TslJS5sG0vc-qDLWgOhbdR5jkvhKvFYN77f3S2XcQ3dC26kMAoH1u0pHl7bzftipV6k55qxtHYrd2fy-RICoFcHNa2q-nw8ShUQxdfz5SmIZhi4sU9dfOX6fRgqhpCcIfZLicwqDZ2SphOM2vFj5p__JP2MKzavDyvAOHOjTXlqaTZC6lhIm2O0vyFc8-V49fjbLA0kAgiZk6r_413__le4Z9sH4Otx80wmS2bZBxkI7trltWB9HW2eU817bbnLnLzxzGoNVMwoGAYYYw1ACch8rw4lBahIqJx_Fe3QMYyHsrKRslQyNQJjd0uICSDlQ9c3B4C9eJ2vge8GBLgzFstSZZIKiyZIZFgUn5ZWAumo_e181GVSLa334IuESa-lgFGnBBq8Me5fITmSyfb0mEkeFDLnnANMtLLUaeFMrb19VWBiAtylSN5mgwZ0B0IFLoiFbN7-z_i7Ky_lFDo2mEcX2_pcpXzr0QhumUuErCnlQ8Go7BGcchOOg7FXHJsTFo8QKazUD73QgqGqQ8b4VX-RWV3bs3fy3fK589KbJvJwRtmHvN6AR24AFewzraZ4aJbHrJwM_WI5sIA6hl6-53qkjYG0FtbONNuU6lfxNx026mICQ-gxuK0fEykSGQhCthHienAe4gENqKHIf2NCrsaK3jApz20sw6zF-NnPDUQYDGHeX7dlDJ9sD_keiNl6c7F1ZoD3EVn1_F6A0XmDZeV-xIY1risF0a-kqUsLR0_EG7yh7rpoeALKVyBNcDafVoLMIzq_vBKx3bTkKBXjx_dFILtKNd1Tfy0rJfc-hIbXUSbBr9dgMOjMZpKM9kk6ZUeu3r4sIKmO0zt_4KEWbBTYr0kUzkjRI4NPviaGeVIQWjkOXMmewYEJyybPOWw_mNhs5KE1cEFMJrhgp_ZROkqA9zXF-vve32FHUuJxk8an5GG6hqW-aaWeVQopKiubKWS0IiRmHXdFAoAfk655Cq22anWYemQuuy8YooMLf5y8w-YMTzcvMkm5JQMOy36FF43wx_54qKmtjDzGvF7hO6xX9XD1mpmzjF47AR3nVdJJtDAuqPWjayCA6MZw6qF-UzBLOHnkB9-uGzW4y-zgUImaxAxqVtmx1-RVq6438I3UW7Bee6FSPo_WXVMzwbeASX5pDL9BcgG11A3rsmnOILkKd9bbRGXcjQ8brVradecmyBWAjDSPfwyASkOuAi5s7dbTjdoPBVlx4vqt3xw5xdR89F7bgFBSMQ-0KEVWqMjFwOBsCe7MAAwJv-ioI4WNXB2xS-Tad9d8ShlnYjH62o86eKn9azC7PCso_qRWKLLKDXWfL_zypkxVmE9ZHwf26G9FUUrHGirO6Js9yFTcTidWVVWKPC99h0WH2ypOD9aVEN_KR1iQ0juvJeFPETmQ8arJOEFwkxARxptWKG8DkPp8a6VBN9mtJjsOQGKIiLFCuqkZsPBdgAplPa_3Uhq6MggxideCBe0JS9JnTNYe-OEkG7N5C4DfIGyilvnf2sBLW8Z5_ry1OHybMyoV8wSWOnFDj2Li1CAHnWr3_SN8W43v-13dim7sTTyD9QgDLqiDZvOJuUNr5dIsuOr7h0VoWuxf1V8IxmToZoeVuxMorm3n9pHz3k8HeQGTL-vIxvxHmfFufATtYqPRJcdX17v3yTip6_NYJktgTlDlVOXvWk-Fa38XUeXIpJFEOjJcQ7oLVj912NtFxOytH7F3QGGxMbsVX8sGFR5RxylZV8emJS8uBNvxRVJLjnI3SvAkBXkPbhYaZd3P2YICTEBb1KMbLPf1bvBVgZrkvGMEEyWNxsWn1Sm4b3OaF-zuwvD0z2EAgeGE53Z3gVKZj9ZKcI-ZjPB7ryzahJchf__ragkUS1XZRVAZbaE-PJgVyghhw3-PtnCtEYiSo8Es8d5pUVLSeUSlus7BMtt_bUAqIHwX2PUY9_QOt4ILM_EufygvjcI1nEW9s27WhkpY38z60GL0Ixt98lT5GpHGj94lhC_a34RU-IlKROoE6AQ1IZVMmDBhR_QJ1e1s80enpb8j0uFGM6l-OEhA5Lvlp13HVsxW8qmwNLXB4rSVoVUjSPRl1ohO5nzH_fMjpOkyMtzszlnjx5MGuXEVDteXaNIk4bFB2cRX9lIqMGG12Dhc-hZt3zmRgk_RJkuwdmeNS5Sh4K0XpV3rU29EUfPUF7eXGCyHKzTR-Z9La4DkwhvB3HX7By8twj0az_sYKy50y_4IRFh0WewJUNcb6SB7y2qgZkrPBNpuByZI6IQXmcrhliO5xWA8u0tMsaICIHeQSM2YjHVY5lZ9L-Yu1j82pVK6fL6nUIhcOUFtFtgKG5fUtJITDk0dtEynljn1nbAxn-gfUEodW2uM0yfhdjmxe5o83R13U8RUpUJIqQeyVDe1yF9GLUfkrKuD0q0LTdSLBOdTOlMaTi_JVxWB5bSWUcjYuZEjJpCcK7B4jXwa--j9I86lOHZensR0VE5L7xIQfCMBGNEEbbAswgwnHz7tWbPTj7Smqw2SLCEKf1l8NacgaBJn8LS1238iNxYT1Usp-w9F8qd-i1g-KjXtOSY5wzjGH4hL1O2yYzc3Oh6Wh39xJRr9DVOP6SJtQeRYF23Ag-4_De8gkGlee76-nITODn-0VS21xRRK_Q5ygaHSEL4JAiDG8_G2Lb6kSVXRTsy7DCE02jAxSSm6nq9ubXEFoIbbwwA6KfxWA-rg3EaBuJrg5Wf8casVzqcHNyoiFzSq72ik1Zr2NQqFvDSnC6CmBt1jp1-uVbhtpRzFPdsnuJSWwzh3x4s2sOilhu_GghANWFZ-YmPcnZkLVZm9SGqvKFK_ZQFcsOaXP5Ywf7xFvoOxIrjJ7gggWJ5-qgUw7BqPjX4r1n1JloIcMvGfBHB2JULwh6jZbUqVNhcogfS5LHO3v35YLsaEIvxABGvz1sDaEZYQEDZm3yS_tuv2f2pDtXvkbME5mdCq3LTJ5s0uY&image_url=https%3A%2F%2Ftrack.primerclicks.com%2Fpush%2Fim%3Fauth%3D5grf6p%26c%3DclWR6PSdHjOdXuOgm9n8uYjO4W8meJt282MjtZ8olYOgT15huotNmzU39-3iRxyjohWQPt8Eip3mvAvwEBsn9UrtUf0ffAytajdNfP29JJSm0Xcgm1X2wyN50Wzr2FZLjrWaEbxZi-YEIgBCDcYd5FVvkOLNnsZ9vZe1PpsFi_EeQFk5J1llA5HvgEHVzbpKHi3lfzeEk4hEYem0mbOv6ZRHCK39FMiRmwri3SQHGN2QAkyArut9aX79-LUXg-FDtNWMCHc404bWNmmJhosHxKWiuGzT0gMDEn_k_2M6Fmsr6n0GIWjoyVFOwTeRihFmZ2yCx5DXITiYcFUtZ971W-2U_hHqRVxCl4-JwtiI4qe3owabdAm5pYUXFVfQnq3S45E2wPPH3vkZzc-Hp197Xw9fZ1KmpAWf4udQsrWTUHg1nvZicMC1mIDatHB-fPlqDZ18ye_tsEf24nfHd4N4UXzQ5okOo7OiCTfd4SQ3KdDvSIYe3qfjprnFP58T8fXa_BWiFHp73OsHMHV7ocyJALCBDPbptb_k9JOTuiMUg6wxtqCQfLp8IwKyaMXlJZyo0p2VTr5uOmZ-GMw9eLvoPSBq93Q_Q6BzlXG4nxgwOQDBrnId9SlTwJspEeWY8agbUbNB2Hf1IEtUE9qaoTB4Ge67lbNxvjoLJUfOruP6J9AVK8qZvetvEhqWQrRqCA7Hs1TVhidkXeay3Cyt53u89p0Ph_BveeYkCNjVKpmR5z1-YslNkJy-2Ljqtcy3ehDOFf2z2krLQezNfE1qDlBms7TfYRej2gMD_cm_gg-Ck4Lgo3rPMk-Pn6LjXniriL7q3yaaef6sJr5cAaCynppgJBxWpqr1EclP0ij8ZIWVzPBUMLmPZQ66nzVvea_klbYfZr2LTXXr3kCtdkEleJJ365jsFMd3r3t4ilvieW1X4oRojRIaA0Mr61kpe_BIsS0eBmPwFDYX-6rSStUTWbthTLTqAmAMr6bFD2-b75HA62J3Gwf25dNh_KRN7TcBUKhB_TsSKeZi0ZnC0bm4zEk1pe_BaHTwjZ1n5WYJD5KOW0Vk6_X-4BQ-jT_Ud3WPfQsPaSCBXb622Oh7BtWVJ0daft3W8fdPAfNJWvodcH3GWHZdrdxsLg4Bey-PC52W8d-G6siMdwgFykEpT1L7lUPReJ2SmLiVdGUy8w-i5ztNdAnDvyS4yUQgbe27eGx-w7MBCBa2RUPM9OhC7bqdyiPRimNT9_DYwrug2yciAdKNL_M9lworBvfLjq5cHvcULNSFSj-7yY_5Ax2YrE1ykqq_-1N_oUc6MdmAquWMumJR1JLTM36brjfMXDIp5joX7RvkARveezs9Bg1PC4HeEuwR0_QG8GVM2k3dBNPlcNg-JfUaG4T_OwrwtuBw2UmBTxYogIle4uVQ-8Yu_0aeGRyR6Gef3sVBOQGHOMso3YwlxqAZolKsKJcACy8jQu1-rxMtcXFMphwA1vTXIRaYrAfbu_db0gUCAJbKHrhGOoIqJl1iQEYwPO54F1sMoNQ&skin_id=1&vertical_id=15&real_bid=0.01677676&pr=&user_keywords=&auc_type=1&aid=319&ext_cid=0&device_theme=light&keywords=&label_ids=83,90,15&conditions=dch_ip,tz_offset&need_redirect_show=0&cpa=0a117426-8515-439f-b9da-53ea5e2b432d&format=compact-slide-b_r-body
157.90.84.246200 OK 0 B URL HTTP/2 ba182692bb.0c1d501ba1.com/in/show/?mid=3857410771166495562&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=47122152&sid=2472770445&cid=13468&price=0.01677676&is_cpm=0&cpm=0&ecpm=0.10472607050083735&crid=&crtid=797b6e15210af5b5ac8adb7c40138032&tcid=0&out_id=0&ver=8.19.0&ver_c=&refdom=everydaysubjects.com&hostname=auc-inpage-hz-4-b&site_id=3122337&spot_id=22337&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1674120649&created_at=2023-01-18&is_native=1&auction_queue=0&burl=NcssKqn9Wg4kEBzJEYSc7qQs38b2MLm5LxMQCgQopLafLW6vFZdYAQ&pop_winurl=&ip=91.90.42.154&testab=0&px_id=7322337&adblock=0&auction_host=&mm=0&yc=0&render_type=hq&campaign_type=hq&uniq=cb0628e2d4006996633921536d89db02acf0e72aa3369a112eae92e7059d4a1a&exp=4&resp_type=&iabcat=IAB1-5&min_cpm=0.0004472676187737007&placement_type_id=&skin_test=0&verify_hash=cc94f8a2f21b8c2179f3bc2abf545539&score=0&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D47122152%26spot_id%3D22337%26is_adult%3D0%26p%3Dhttps%253A%252F%252Feverydaysubjects.com%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=a&original_bid=0.01677676&user_fp=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=SUytSTI-Fop7OA5BIfSZR1Gw6YJPuonE7Q2Jb9QCJFU6QCRjuK8SkzqefZKO9aBXK0oZ-Fu_U-s7tGLJDLkp6tjpqZWpi4xqfNVJoBAR25Jahs9gLPaBQER4KFske23Gc3gpQr5vP0lrcBOunatFOksteOxZ3pEtc6cxgQN9PPdeH4JpqpKL19PbCDRIHaP8MPtM3OYugUokZmcJ3J5vfwUItYbeId0w1AuF415d9IW-8muXl_gcqwantmMbiwJ_ZGO4MEYOG9gFAT3z4kWV3LPZ39vUDwLBZA7jk8fL1Rf871kYC_SGlgZCYvHjuoDj4FxZbNGl3Oznr_slhmZTgBg6yK2UWLOpIS-LBMuE93pGdf1nWxlZ84TBCErUpC5TslJS5sG0vc-qDLWgOhbdR5jkvhKvFYN77f3S2XcQ3dC26kMAoH1u0pHl7bzftipV6k55qxtHYrd2fy-RICoFcHNa2q-nw8ShUQxdfz5SmIZhi4sU9dfOX6fRgqhpCcIfZLicwqDZ2SphOM2vFj5p__JP2MKzavDyvAOHOjTXlqaTZC6lhIm2O0vyFc8-V49fjbLA0kAgiZk6r_413__le4Z9sH4Otx80wmS2bZBxkI7trltWB9HW2eU817bbnLnLzxzGoNVMwoGAYYYw1ACch8rw4lBahIqJx_Fe3QMYyHsrKRslQyNQJjd0uICSDlQ9c3B4C9eJ2vge8GBLgzFstSZZIKiyZIZFgUn5ZWAumo_e181GVSLa334IuESa-lgFGnBBq8Me5fITmSyfb0mEkeFDLnnANMtLLUaeFMrb19VWBiAtylSN5mgwZ0B0IFLoiFbN7-z_i7Ky_lFDo2mEcX2_pcpXzr0QhumUuErCnlQ8Go7BGcchOOg7FXHJsTFo8QKazUD73QgqGqQ8b4VX-RWV3bs3fy3fK589KbJvJwRtmHvN6AR24AFewzraZ4aJbHrJwM_WI5sIA6hl6-53qkjYG0FtbONNuU6lfxNx026mICQ-gxuK0fEykSGQhCthHienAe4gENqKHIf2NCrsaK3jApz20sw6zF-NnPDUQYDGHeX7dlDJ9sD_keiNl6c7F1ZoD3EVn1_F6A0XmDZeV-xIY1risF0a-kqUsLR0_EG7yh7rpoeALKVyBNcDafVoLMIzq_vBKx3bTkKBXjx_dFILtKNd1Tfy0rJfc-hIbXUSbBr9dgMOjMZpKM9kk6ZUeu3r4sIKmO0zt_4KEWbBTYr0kUzkjRI4NPviaGeVIQWjkOXMmewYEJyybPOWw_mNhs5KE1cEFMJrhgp_ZROkqA9zXF-vve32FHUuJxk8an5GG6hqW-aaWeVQopKiubKWS0IiRmHXdFAoAfk655Cq22anWYemQuuy8YooMLf5y8w-YMTzcvMkm5JQMOy36FF43wx_54qKmtjDzGvF7hO6xX9XD1mpmzjF47AR3nVdJJtDAuqPWjayCA6MZw6qF-UzBLOHnkB9-uGzW4y-zgUImaxAxqVtmx1-RVq6438I3UW7Bee6FSPo_WXVMzwbeASX5pDL9BcgG11A3rsmnOILkKd9bbRGXcjQ8brVradecmyBWAjDSPfwyASkOuAi5s7dbTjdoPBVlx4vqt3xw5xdR89F7bgFBSMQ-0KEVWqMjFwOBsCe7MAAwJv-ioI4WNXB2xS-Tad9d8ShlnYjH62o86eKn9azC7PCso_qRWKLLKDXWfL_zypkxVmE9ZHwf26G9FUUrHGirO6Js9yFTcTidWVVWKPC99h0WH2ypOD9aVEN_KR1iQ0juvJeFPETmQ8arJOEFwkxARxptWKG8DkPp8a6VBN9mtJjsOQGKIiLFCuqkZsPBdgAplPa_3Uhq6MggxideCBe0JS9JnTNYe-OEkG7N5C4DfIGyilvnf2sBLW8Z5_ry1OHybMyoV8wSWOnFDj2Li1CAHnWr3_SN8W43v-13dim7sTTyD9QgDLqiDZvOJuUNr5dIsuOr7h0VoWuxf1V8IxmToZoeVuxMorm3n9pHz3k8HeQGTL-vIxvxHmfFufATtYqPRJcdX17v3yTip6_NYJktgTlDlVOXvWk-Fa38XUeXIpJFEOjJcQ7oLVj912NtFxOytH7F3QGGxMbsVX8sGFR5RxylZV8emJS8uBNvxRVJLjnI3SvAkBXkPbhYaZd3P2YICTEBb1KMbLPf1bvBVgZrkvGMEEyWNxsWn1Sm4b3OaF-zuwvD0z2EAgeGE53Z3gVKZj9ZKcI-ZjPB7ryzahJchf__ragkUS1XZRVAZbaE-PJgVyghhw3-PtnCtEYiSo8Es8d5pUVLSeUSlus7BMtt_bUAqIHwX2PUY9_QOt4ILM_EufygvjcI1nEW9s27WhkpY38z60GL0Ixt98lT5GpHGj94lhC_a34RU-IlKROoE6AQ1IZVMmDBhR_QJ1e1s80enpb8j0uFGM6l-OEhA5Lvlp13HVsxW8qmwNLXB4rSVoVUjSPRl1ohO5nzH_fMjpOkyMtzszlnjx5MGuXEVDteXaNIk4bFB2cRX9lIqMGG12Dhc-hZt3zmRgk_RJkuwdmeNS5Sh4K0XpV3rU29EUfPUF7eXGCyHKzTR-Z9La4DkwhvB3HX7By8twj0az_sYKy50y_4IRFh0WewJUNcb6SB7y2qgZkrPBNpuByZI6IQXmcrhliO5xWA8u0tMsaICIHeQSM2YjHVY5lZ9L-Yu1j82pVK6fL6nUIhcOUFtFtgKG5fUtJITDk0dtEynljn1nbAxn-gfUEodW2uM0yfhdjmxe5o83R13U8RUpUJIqQeyVDe1yF9GLUfkrKuD0q0LTdSLBOdTOlMaTi_JVxWB5bSWUcjYuZEjJpCcK7B4jXwa--j9I86lOHZensR0VE5L7xIQfCMBGNEEbbAswgwnHz7tWbPTj7Smqw2SLCEKf1l8NacgaBJn8LS1238iNxYT1Usp-w9F8qd-i1g-KjXtOSY5wzjGH4hL1O2yYzc3Oh6Wh39xJRr9DVOP6SJtQeRYF23Ag-4_De8gkGlee76-nITODn-0VS21xRRK_Q5ygaHSEL4JAiDG8_G2Lb6kSVXRTsy7DCE02jAxSSm6nq9ubXEFoIbbwwA6KfxWA-rg3EaBuJrg5Wf8casVzqcHNyoiFzSq72ik1Zr2NQqFvDSnC6CmBt1jp1-uVbhtpRzFPdsnuJSWwzh3x4s2sOilhu_GghANWFZ-YmPcnZkLVZm9SGqvKFK_ZQFcsOaXP5Ywf7xFvoOxIrjJ7gggWJ5-qgUw7BqPjX4r1n1JloIcMvGfBHB2JULwh6jZbUqVNhcogfS5LHO3v35YLsaEIvxABGvz1sDaEZYQEDZm3yS_tuv2f2pDtXvkbME5mdCq3LTJ5s0uY&image_url=https%3A%2F%2Ftrack.primerclicks.com%2Fpush%2Fim%3Fauth%3D5grf6p%26c%3DclWR6PSdHjOdXuOgm9n8uYjO4W8meJt282MjtZ8olYOgT15huotNmzU39-3iRxyjohWQPt8Eip3mvAvwEBsn9UrtUf0ffAytajdNfP29JJSm0Xcgm1X2wyN50Wzr2FZLjrWaEbxZi-YEIgBCDcYd5FVvkOLNnsZ9vZe1PpsFi_EeQFk5J1llA5HvgEHVzbpKHi3lfzeEk4hEYem0mbOv6ZRHCK39FMiRmwri3SQHGN2QAkyArut9aX79-LUXg-FDtNWMCHc404bWNmmJhosHxKWiuGzT0gMDEn_k_2M6Fmsr6n0GIWjoyVFOwTeRihFmZ2yCx5DXITiYcFUtZ971W-2U_hHqRVxCl4-JwtiI4qe3owabdAm5pYUXFVfQnq3S45E2wPPH3vkZzc-Hp197Xw9fZ1KmpAWf4udQsrWTUHg1nvZicMC1mIDatHB-fPlqDZ18ye_tsEf24nfHd4N4UXzQ5okOo7OiCTfd4SQ3KdDvSIYe3qfjprnFP58T8fXa_BWiFHp73OsHMHV7ocyJALCBDPbptb_k9JOTuiMUg6wxtqCQfLp8IwKyaMXlJZyo0p2VTr5uOmZ-GMw9eLvoPSBq93Q_Q6BzlXG4nxgwOQDBrnId9SlTwJspEeWY8agbUbNB2Hf1IEtUE9qaoTB4Ge67lbNxvjoLJUfOruP6J9AVK8qZvetvEhqWQrRqCA7Hs1TVhidkXeay3Cyt53u89p0Ph_BveeYkCNjVKpmR5z1-YslNkJy-2Ljqtcy3ehDOFf2z2krLQezNfE1qDlBms7TfYRej2gMD_cm_gg-Ck4Lgo3rPMk-Pn6LjXniriL7q3yaaef6sJr5cAaCynppgJBxWpqr1EclP0ij8ZIWVzPBUMLmPZQ66nzVvea_klbYfZr2LTXXr3kCtdkEleJJ365jsFMd3r3t4ilvieW1X4oRojRIaA0Mr61kpe_BIsS0eBmPwFDYX-6rSStUTWbthTLTqAmAMr6bFD2-b75HA62J3Gwf25dNh_KRN7TcBUKhB_TsSKeZi0ZnC0bm4zEk1pe_BaHTwjZ1n5WYJD5KOW0Vk6_X-4BQ-jT_Ud3WPfQsPaSCBXb622Oh7BtWVJ0daft3W8fdPAfNJWvodcH3GWHZdrdxsLg4Bey-PC52W8d-G6siMdwgFykEpT1L7lUPReJ2SmLiVdGUy8w-i5ztNdAnDvyS4yUQgbe27eGx-w7MBCBa2RUPM9OhC7bqdyiPRimNT9_DYwrug2yciAdKNL_M9lworBvfLjq5cHvcULNSFSj-7yY_5Ax2YrE1ykqq_-1N_oUc6MdmAquWMumJR1JLTM36brjfMXDIp5joX7RvkARveezs9Bg1PC4HeEuwR0_QG8GVM2k3dBNPlcNg-JfUaG4T_OwrwtuBw2UmBTxYogIle4uVQ-8Yu_0aeGRyR6Gef3sVBOQGHOMso3YwlxqAZolKsKJcACy8jQu1-rxMtcXFMphwA1vTXIRaYrAfbu_db0gUCAJbKHrhGOoIqJl1iQEYwPO54F1sMoNQ&skin_id=1&vertical_id=15&real_bid=0.01677676&pr=&user_keywords=&auc_type=1&aid=319&ext_cid=0&device_theme=light&keywords=&label_ids=83,90,15&conditions=dch_ip,tz_offset&need_redirect_show=0&cpa=0a117426-8515-439f-b9da-53ea5e2b432d&format=compact-slide-b_r-body
IP 157.90.84.246:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/show/?mid=3857410771166495562&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=47122152&sid=2472770445&cid=13468&price=0.01677676&is_cpm=0&cpm=0&ecpm=0.10472607050083735&crid=&crtid=797b6e15210af5b5ac8adb7c40138032&tcid=0&out_id=0&ver=8.19.0&ver_c=&refdom=everydaysubjects.com&hostname=auc-inpage-hz-4-b&site_id=3122337&spot_id=22337&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1674120649&created_at=2023-01-18&is_native=1&auction_queue=0&burl=NcssKqn9Wg4kEBzJEYSc7qQs38b2MLm5LxMQCgQopLafLW6vFZdYAQ&pop_winurl=&ip=91.90.42.154&testab=0&px_id=7322337&adblock=0&auction_host=&mm=0&yc=0&render_type=hq&campaign_type=hq&uniq=cb0628e2d4006996633921536d89db02acf0e72aa3369a112eae92e7059d4a1a&exp=4&resp_type=&iabcat=IAB1-5&min_cpm=0.0004472676187737007&placement_type_id=&skin_test=0&verify_hash=cc94f8a2f21b8c2179f3bc2abf545539&score=0&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D47122152%26spot_id%3D22337%26is_adult%3D0%26p%3Dhttps%253A%252F%252Feverydaysubjects.com%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=a&original_bid=0.01677676&user_fp=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=SUytSTI-Fop7OA5BIfSZR1Gw6YJPuonE7Q2Jb9QCJFU6QCRjuK8SkzqefZKO9aBXK0oZ-Fu_U-s7tGLJDLkp6tjpqZWpi4xqfNVJoBAR25Jahs9gLPaBQER4KFske23Gc3gpQr5vP0lrcBOunatFOksteOxZ3pEtc6cxgQN9PPdeH4JpqpKL19PbCDRIHaP8MPtM3OYugUokZmcJ3J5vfwUItYbeId0w1AuF415d9IW-8muXl_gcqwantmMbiwJ_ZGO4MEYOG9gFAT3z4kWV3LPZ39vUDwLBZA7jk8fL1Rf871kYC_SGlgZCYvHjuoDj4FxZbNGl3Oznr_slhmZTgBg6yK2UWLOpIS-LBMuE93pGdf1nWxlZ84TBCErUpC5TslJS5sG0vc-qDLWgOhbdR5jkvhKvFYN77f3S2XcQ3dC26kMAoH1u0pHl7bzftipV6k55qxtHYrd2fy-RICoFcHNa2q-nw8ShUQxdfz5SmIZhi4sU9dfOX6fRgqhpCcIfZLicwqDZ2SphOM2vFj5p__JP2MKzavDyvAOHOjTXlqaTZC6lhIm2O0vyFc8-V49fjbLA0kAgiZk6r_413__le4Z9sH4Otx80wmS2bZBxkI7trltWB9HW2eU817bbnLnLzxzGoNVMwoGAYYYw1ACch8rw4lBahIqJx_Fe3QMYyHsrKRslQyNQJjd0uICSDlQ9c3B4C9eJ2vge8GBLgzFstSZZIKiyZIZFgUn5ZWAumo_e181GVSLa334IuESa-lgFGnBBq8Me5fITmSyfb0mEkeFDLnnANMtLLUaeFMrb19VWBiAtylSN5mgwZ0B0IFLoiFbN7-z_i7Ky_lFDo2mEcX2_pcpXzr0QhumUuErCnlQ8Go7BGcchOOg7FXHJsTFo8QKazUD73QgqGqQ8b4VX-RWV3bs3fy3fK589KbJvJwRtmHvN6AR24AFewzraZ4aJbHrJwM_WI5sIA6hl6-53qkjYG0FtbONNuU6lfxNx026mICQ-gxuK0fEykSGQhCthHienAe4gENqKHIf2NCrsaK3jApz20sw6zF-NnPDUQYDGHeX7dlDJ9sD_keiNl6c7F1ZoD3EVn1_F6A0XmDZeV-xIY1risF0a-kqUsLR0_EG7yh7rpoeALKVyBNcDafVoLMIzq_vBKx3bTkKBXjx_dFILtKNd1Tfy0rJfc-hIbXUSbBr9dgMOjMZpKM9kk6ZUeu3r4sIKmO0zt_4KEWbBTYr0kUzkjRI4NPviaGeVIQWjkOXMmewYEJyybPOWw_mNhs5KE1cEFMJrhgp_ZROkqA9zXF-vve32FHUuJxk8an5GG6hqW-aaWeVQopKiubKWS0IiRmHXdFAoAfk655Cq22anWYemQuuy8YooMLf5y8w-YMTzcvMkm5JQMOy36FF43wx_54qKmtjDzGvF7hO6xX9XD1mpmzjF47AR3nVdJJtDAuqPWjayCA6MZw6qF-UzBLOHnkB9-uGzW4y-zgUImaxAxqVtmx1-RVq6438I3UW7Bee6FSPo_WXVMzwbeASX5pDL9BcgG11A3rsmnOILkKd9bbRGXcjQ8brVradecmyBWAjDSPfwyASkOuAi5s7dbTjdoPBVlx4vqt3xw5xdR89F7bgFBSMQ-0KEVWqMjFwOBsCe7MAAwJv-ioI4WNXB2xS-Tad9d8ShlnYjH62o86eKn9azC7PCso_qRWKLLKDXWfL_zypkxVmE9ZHwf26G9FUUrHGirO6Js9yFTcTidWVVWKPC99h0WH2ypOD9aVEN_KR1iQ0juvJeFPETmQ8arJOEFwkxARxptWKG8DkPp8a6VBN9mtJjsOQGKIiLFCuqkZsPBdgAplPa_3Uhq6MggxideCBe0JS9JnTNYe-OEkG7N5C4DfIGyilvnf2sBLW8Z5_ry1OHybMyoV8wSWOnFDj2Li1CAHnWr3_SN8W43v-13dim7sTTyD9QgDLqiDZvOJuUNr5dIsuOr7h0VoWuxf1V8IxmToZoeVuxMorm3n9pHz3k8HeQGTL-vIxvxHmfFufATtYqPRJcdX17v3yTip6_NYJktgTlDlVOXvWk-Fa38XUeXIpJFEOjJcQ7oLVj912NtFxOytH7F3QGGxMbsVX8sGFR5RxylZV8emJS8uBNvxRVJLjnI3SvAkBXkPbhYaZd3P2YICTEBb1KMbLPf1bvBVgZrkvGMEEyWNxsWn1Sm4b3OaF-zuwvD0z2EAgeGE53Z3gVKZj9ZKcI-ZjPB7ryzahJchf__ragkUS1XZRVAZbaE-PJgVyghhw3-PtnCtEYiSo8Es8d5pUVLSeUSlus7BMtt_bUAqIHwX2PUY9_QOt4ILM_EufygvjcI1nEW9s27WhkpY38z60GL0Ixt98lT5GpHGj94lhC_a34RU-IlKROoE6AQ1IZVMmDBhR_QJ1e1s80enpb8j0uFGM6l-OEhA5Lvlp13HVsxW8qmwNLXB4rSVoVUjSPRl1ohO5nzH_fMjpOkyMtzszlnjx5MGuXEVDteXaNIk4bFB2cRX9lIqMGG12Dhc-hZt3zmRgk_RJkuwdmeNS5Sh4K0XpV3rU29EUfPUF7eXGCyHKzTR-Z9La4DkwhvB3HX7By8twj0az_sYKy50y_4IRFh0WewJUNcb6SB7y2qgZkrPBNpuByZI6IQXmcrhliO5xWA8u0tMsaICIHeQSM2YjHVY5lZ9L-Yu1j82pVK6fL6nUIhcOUFtFtgKG5fUtJITDk0dtEynljn1nbAxn-gfUEodW2uM0yfhdjmxe5o83R13U8RUpUJIqQeyVDe1yF9GLUfkrKuD0q0LTdSLBOdTOlMaTi_JVxWB5bSWUcjYuZEjJpCcK7B4jXwa--j9I86lOHZensR0VE5L7xIQfCMBGNEEbbAswgwnHz7tWbPTj7Smqw2SLCEKf1l8NacgaBJn8LS1238iNxYT1Usp-w9F8qd-i1g-KjXtOSY5wzjGH4hL1O2yYzc3Oh6Wh39xJRr9DVOP6SJtQeRYF23Ag-4_De8gkGlee76-nITODn-0VS21xRRK_Q5ygaHSEL4JAiDG8_G2Lb6kSVXRTsy7DCE02jAxSSm6nq9ubXEFoIbbwwA6KfxWA-rg3EaBuJrg5Wf8casVzqcHNyoiFzSq72ik1Zr2NQqFvDSnC6CmBt1jp1-uVbhtpRzFPdsnuJSWwzh3x4s2sOilhu_GghANWFZ-YmPcnZkLVZm9SGqvKFK_ZQFcsOaXP5Ywf7xFvoOxIrjJ7gggWJ5-qgUw7BqPjX4r1n1JloIcMvGfBHB2JULwh6jZbUqVNhcogfS5LHO3v35YLsaEIvxABGvz1sDaEZYQEDZm3yS_tuv2f2pDtXvkbME5mdCq3LTJ5s0uY&image_url=https%3A%2F%2Ftrack.primerclicks.com%2Fpush%2Fim%3Fauth%3D5grf6p%26c%3DclWR6PSdHjOdXuOgm9n8uYjO4W8meJt282MjtZ8olYOgT15huotNmzU39-3iRxyjohWQPt8Eip3mvAvwEBsn9UrtUf0ffAytajdNfP29JJSm0Xcgm1X2wyN50Wzr2FZLjrWaEbxZi-YEIgBCDcYd5FVvkOLNnsZ9vZe1PpsFi_EeQFk5J1llA5HvgEHVzbpKHi3lfzeEk4hEYem0mbOv6ZRHCK39FMiRmwri3SQHGN2QAkyArut9aX79-LUXg-FDtNWMCHc404bWNmmJhosHxKWiuGzT0gMDEn_k_2M6Fmsr6n0GIWjoyVFOwTeRihFmZ2yCx5DXITiYcFUtZ971W-2U_hHqRVxCl4-JwtiI4qe3owabdAm5pYUXFVfQnq3S45E2wPPH3vkZzc-Hp197Xw9fZ1KmpAWf4udQsrWTUHg1nvZicMC1mIDatHB-fPlqDZ18ye_tsEf24nfHd4N4UXzQ5okOo7OiCTfd4SQ3KdDvSIYe3qfjprnFP58T8fXa_BWiFHp73OsHMHV7ocyJALCBDPbptb_k9JOTuiMUg6wxtqCQfLp8IwKyaMXlJZyo0p2VTr5uOmZ-GMw9eLvoPSBq93Q_Q6BzlXG4nxgwOQDBrnId9SlTwJspEeWY8agbUbNB2Hf1IEtUE9qaoTB4Ge67lbNxvjoLJUfOruP6J9AVK8qZvetvEhqWQrRqCA7Hs1TVhidkXeay3Cyt53u89p0Ph_BveeYkCNjVKpmR5z1-YslNkJy-2Ljqtcy3ehDOFf2z2krLQezNfE1qDlBms7TfYRej2gMD_cm_gg-Ck4Lgo3rPMk-Pn6LjXniriL7q3yaaef6sJr5cAaCynppgJBxWpqr1EclP0ij8ZIWVzPBUMLmPZQ66nzVvea_klbYfZr2LTXXr3kCtdkEleJJ365jsFMd3r3t4ilvieW1X4oRojRIaA0Mr61kpe_BIsS0eBmPwFDYX-6rSStUTWbthTLTqAmAMr6bFD2-b75HA62J3Gwf25dNh_KRN7TcBUKhB_TsSKeZi0ZnC0bm4zEk1pe_BaHTwjZ1n5WYJD5KOW0Vk6_X-4BQ-jT_Ud3WPfQsPaSCBXb622Oh7BtWVJ0daft3W8fdPAfNJWvodcH3GWHZdrdxsLg4Bey-PC52W8d-G6siMdwgFykEpT1L7lUPReJ2SmLiVdGUy8w-i5ztNdAnDvyS4yUQgbe27eGx-w7MBCBa2RUPM9OhC7bqdyiPRimNT9_DYwrug2yciAdKNL_M9lworBvfLjq5cHvcULNSFSj-7yY_5Ax2YrE1ykqq_-1N_oUc6MdmAquWMumJR1JLTM36brjfMXDIp5joX7RvkARveezs9Bg1PC4HeEuwR0_QG8GVM2k3dBNPlcNg-JfUaG4T_OwrwtuBw2UmBTxYogIle4uVQ-8Yu_0aeGRyR6Gef3sVBOQGHOMso3YwlxqAZolKsKJcACy8jQu1-rxMtcXFMphwA1vTXIRaYrAfbu_db0gUCAJbKHrhGOoIqJl1iQEYwPO54F1sMoNQ&skin_id=1&vertical_id=15&real_bid=0.01677676&pr=&user_keywords=&auc_type=1&aid=319&ext_cid=0&device_theme=light&keywords=&label_ids=83,90,15&conditions=dch_ip,tz_offset&need_redirect_show=0&cpa=0a117426-8515-439f-b9da-53ea5e2b432d&format=compact-slide-b_r-body HTTP/1.1
Host: ba182692bb.0c1d501ba1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://everydaysubjects.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 18 Jan 2023 09:30:50 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
q.adrta.com/s/gta/r.js?v=22.110&rcb=180194&cb=9493e5c13c26ea71f9b99da2d91498f9
52.0.192.14200 OK 711 B URL HTTP/2 q.adrta.com/s/gta/r.js?v=22.110&rcb=180194&cb=9493e5c13c26ea71f9b99da2d91498f9
IP 52.0.192.14:0
Hash 105e788bee23d6336b88b64181780794
97fc4029fe801627b9466a68b283a4ede4f27d77
88fd7f32c2d2cf30c66cc277e82718e3562d8720eb5e3c9d758e48b065c66257
GET /s/gta/r.js?v=22.110&rcb=180194&cb=9493e5c13c26ea71f9b99da2d91498f9 HTTP/1.1
Host: q.adrta.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3963d6fe9c.201b418371.com/
Cookie: __aavi=14697071354566510293; __aavt=1674034250168; __aasi=14485482706031312353; __aast=1674034250168
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 09:30:50 GMT
content-type: application/javascript; charset=utf-8
server: nginx
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash cda8d06ef38c3d65f4853b7d057858a7
c108465a87aede134ac7ff88370be3b4f5fc491b
4b00f56fc57058d8f248cf2eb16fac0d5916bb9e7250f0b463d1e3f3f279abdb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4B00F56FC57058D8F248CF2EB16FAC0D5916BB9E7250F0B463D1E3F3F279ABDB"
Last-Modified: Tue, 17 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10286
Expires: Wed, 18 Jan 2023 12:22:16 GMT
Date: Wed, 18 Jan 2023 09:30:50 GMT
Connection: keep-alive
static.bookmsg.com/creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp?mlf=1&cpa=4c9d3cac-390a-4dc4-b261-53ffb82de2a2&mlc=1&format=compact-slide-b_r-body
159.69.161.134200 OK 590 B URL HTTP/2 static.bookmsg.com/creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp?mlf=1&cpa=4c9d3cac-390a-4dc4-b261-53ffb82de2a2&mlc=1&format=compact-slide-b_r-body
IP 159.69.161.134:0
ASN #24940 Hetzner Online GmbH
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash debce753f1ce6652c1637491fd72b1b1
fd102eb3f058f7a43b0f9ec03541681699f5895e
c2443b0a74b25158756abb7aa12832e5442adab247aab6e24514f54396c72579
GET /creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp?mlf=1&cpa=4c9d3cac-390a-4dc4-b261-53ffb82de2a2&mlc=1&format=compact-slide-b_r-body HTTP/1.1
Host: static.bookmsg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://everydaysubjects.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Wed, 18 Jan 2023 09:30:50 GMT
content-type: image/webp
content-length: 590
last-modified: Tue, 24 Nov 2020 14:24:12 GMT
etag: "5fbd178c-24e"
cache-control: public, max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
static.bookmsg.com/creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp
159.69.161.134200 OK 590 B URL HTTP/2 static.bookmsg.com/creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp
IP 159.69.161.134:0
ASN #24940 Hetzner Online GmbH
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash debce753f1ce6652c1637491fd72b1b1
fd102eb3f058f7a43b0f9ec03541681699f5895e
c2443b0a74b25158756abb7aa12832e5442adab247aab6e24514f54396c72579
GET /creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp HTTP/1.1
Host: static.bookmsg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://everydaysubjects.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Wed, 18 Jan 2023 09:30:50 GMT
content-type: image/webp
content-length: 590
last-modified: Tue, 24 Nov 2020 14:24:12 GMT
etag: "5fbd178c-24e"
cache-control: public, max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
static.bookmsg.com/creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp?mlf=1&cpa=f989d9e3-866e-4e3a-a9f9-42783b6081b9&mlc=1&format=compact-slide-b_r-body
159.69.161.134200 OK 590 B URL HTTP/2 static.bookmsg.com/creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp?mlf=1&cpa=f989d9e3-866e-4e3a-a9f9-42783b6081b9&mlc=1&format=compact-slide-b_r-body
IP 159.69.161.134:0
ASN #24940 Hetzner Online GmbH
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash debce753f1ce6652c1637491fd72b1b1
fd102eb3f058f7a43b0f9ec03541681699f5895e
c2443b0a74b25158756abb7aa12832e5442adab247aab6e24514f54396c72579
GET /creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp?mlf=1&cpa=f989d9e3-866e-4e3a-a9f9-42783b6081b9&mlc=1&format=compact-slide-b_r-body HTTP/1.1
Host: static.bookmsg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://everydaysubjects.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Wed, 18 Jan 2023 09:30:50 GMT
content-type: image/webp
content-length: 590
last-modified: Tue, 24 Nov 2020 14:24:12 GMT
etag: "5fbd178c-24e"
cache-control: public, max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
pix.adrta.com/cdnf.js?v=22.110
143.204.55.124200 OK 11 kB URL HTTP/2 pix.adrta.com/cdnf.js?v=22.110
IP 143.204.55.124:0
File type ASCII text, with very long lines (31858), with no line terminators
Hash 2ceaad92c8aa1bb6ba5336ef4c8ee8bf
3682c8dfc4fd1a7a1b3dce6b2043f512cd1ce76c
21460655f3710570dd8ee162bf8c3d713732e71010fa407a641ad2e80fcc6d33
GET /cdnf.js?v=22.110 HTTP/1.1
Host: pix.adrta.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3963d6fe9c.201b418371.com/
Cookie: __aavi=14697071354566510293; __aavt=1674034250168; __aasi=14485482706031312353; __aast=1674034250168
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 21 Nov 2022 08:58:43 GMT
x-amz-version-id: Xnn_PUyruVbClLXjAUevk3KGgl_dQaDB
server: AmazonS3
content-encoding: gzip
date: Wed, 18 Jan 2023 08:35:20 GMT
etag: W/"4904e2e0b3f728c31a78c805552ba248"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 1yMOLGLBNucMT7wUGObEOdlTQltAEsO9eZVHEtepFq7oUy3hAVXLXA==
age: 3330
X-Firefox-Spdy: h2
eu.doctorpost.net/metrics/save.img?event=tracked_impressions&bid-id=v2-1674034249297-7-9306-1178228-1c5f5ea3-40be-69dd-ae36-2874264e44e9&price=0&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fim%3Fauth%3Dpz6u78%26c%3DGXKoP9JzWLSQ_rPbQOAM8CedzO63FAIU3njUcZ6F2y_B0B_nFzHQao1bpxt0rUIm_lEW7xCJ7g0AY8nkLKtge5ULC7Q1YKnE7ePFtiiIRDFL1et-wCnS4B0G3b1QnnRLEWAhH2E9oZ4TOwWwPfvtyyGEoLyjxkWPbYiPZrniQjP9N0L40_YOOo8jdpTbQaMvfxDJKXucNZOxuuNF-4mxCAtjdDc9lgO2OwKQW1jDtMNWhy3bYa7sWSHeVSYOn-gjDb3cr_BemTVyUdJxhLWENbdSwtCd2T2Iloclw98VLBP8-JAkEueGr0ZTYJlD8_3_XL4Iw6XQdnmvUvSDnX4VOn70Q70YsZetDEj7qvNGXqSaTsoFvDNIJQuARLsH4EOJDLWPhJUmLSQe4t3pS5wZD9U7NztKwJrlAtR9VFHr6f3H5fMrVX5fQ5zjsFDiGqGVagYjgRnQDDqNiEvBM7e1dZ3zjmAjqgWktF59HAAaTSvNPzyiUz0YG602bQib3s6wTcpwnmQFJlCNTxqjydbkgTlWWYrHosJo_9t-uJozT_ul9aSq1xBGcNkqNiooh7TlMdj9kb6g12mjDKIxIcNC50v9IPjgwbllShVwgw
149.6.163.14302 Found 0 B URL HTTP/2 eu.doctorpost.net/metrics/save.img?event=tracked_impressions&bid-id=v2-1674034249297-7-9306-1178228-1c5f5ea3-40be-69dd-ae36-2874264e44e9&price=0&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fim%3Fauth%3Dpz6u78%26c%3DGXKoP9JzWLSQ_rPbQOAM8CedzO63FAIU3njUcZ6F2y_B0B_nFzHQao1bpxt0rUIm_lEW7xCJ7g0AY8nkLKtge5ULC7Q1YKnE7ePFtiiIRDFL1et-wCnS4B0G3b1QnnRLEWAhH2E9oZ4TOwWwPfvtyyGEoLyjxkWPbYiPZrniQjP9N0L40_YOOo8jdpTbQaMvfxDJKXucNZOxuuNF-4mxCAtjdDc9lgO2OwKQW1jDtMNWhy3bYa7sWSHeVSYOn-gjDb3cr_BemTVyUdJxhLWENbdSwtCd2T2Iloclw98VLBP8-JAkEueGr0ZTYJlD8_3_XL4Iw6XQdnmvUvSDnX4VOn70Q70YsZetDEj7qvNGXqSaTsoFvDNIJQuARLsH4EOJDLWPhJUmLSQe4t3pS5wZD9U7NztKwJrlAtR9VFHr6f3H5fMrVX5fQ5zjsFDiGqGVagYjgRnQDDqNiEvBM7e1dZ3zjmAjqgWktF59HAAaTSvNPzyiUz0YG602bQib3s6wTcpwnmQFJlCNTxqjydbkgTlWWYrHosJo_9t-uJozT_ul9aSq1xBGcNkqNiooh7TlMdj9kb6g12mjDKIxIcNC50v9IPjgwbllShVwgw
IP 149.6.163.14:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /metrics/save.img?event=tracked_impressions&bid-id=v2-1674034249297-7-9306-1178228-1c5f5ea3-40be-69dd-ae36-2874264e44e9&price=0&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fim%3Fauth%3Dpz6u78%26c%3DGXKoP9JzWLSQ_rPbQOAM8CedzO63FAIU3njUcZ6F2y_B0B_nFzHQao1bpxt0rUIm_lEW7xCJ7g0AY8nkLKtge5ULC7Q1YKnE7ePFtiiIRDFL1et-wCnS4B0G3b1QnnRLEWAhH2E9oZ4TOwWwPfvtyyGEoLyjxkWPbYiPZrniQjP9N0L40_YOOo8jdpTbQaMvfxDJKXucNZOxuuNF-4mxCAtjdDc9lgO2OwKQW1jDtMNWhy3bYa7sWSHeVSYOn-gjDb3cr_BemTVyUdJxhLWENbdSwtCd2T2Iloclw98VLBP8-JAkEueGr0ZTYJlD8_3_XL4Iw6XQdnmvUvSDnX4VOn70Q70YsZetDEj7qvNGXqSaTsoFvDNIJQuARLsH4EOJDLWPhJUmLSQe4t3pS5wZD9U7NztKwJrlAtR9VFHr6f3H5fMrVX5fQ5zjsFDiGqGVagYjgRnQDDqNiEvBM7e1dZ3zjmAjqgWktF59HAAaTSvNPzyiUz0YG602bQib3s6wTcpwnmQFJlCNTxqjydbkgTlWWYrHosJo_9t-uJozT_ul9aSq1xBGcNkqNiooh7TlMdj9kb6g12mjDKIxIcNC50v9IPjgwbllShVwgw HTTP/1.1
Host: eu.doctorpost.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: openresty/1.15.8.3
date: Wed, 18 Jan 2023 09:30:50 GMT
content-length: 0
set-cookie: user_id=f532f176-e224-a2cc-7ce2-cd2d161714c2
location: https://track.trackingtraffo.com/push/im?auth=pz6u78&c=GXKoP9JzWLSQ_rPbQOAM8CedzO63FAIU3njUcZ6F2y_B0B_nFzHQao1bpxt0rUIm_lEW7xCJ7g0AY8nkLKtge5ULC7Q1YKnE7ePFtiiIRDFL1et-wCnS4B0G3b1QnnRLEWAhH2E9oZ4TOwWwPfvtyyGEoLyjxkWPbYiPZrniQjP9N0L40_YOOo8jdpTbQaMvfxDJKXucNZOxuuNF-4mxCAtjdDc9lgO2OwKQW1jDtMNWhy3bYa7sWSHeVSYOn-gjDb3cr_BemTVyUdJxhLWENbdSwtCd2T2Iloclw98VLBP8-JAkEueGr0ZTYJlD8_3_XL4Iw6XQdnmvUvSDnX4VOn70Q70YsZetDEj7qvNGXqSaTsoFvDNIJQuARLsH4EOJDLWPhJUmLSQe4t3pS5wZD9U7NztKwJrlAtR9VFHr6f3H5fMrVX5fQ5zjsFDiGqGVagYjgRnQDDqNiEvBM7e1dZ3zjmAjqgWktF59HAAaTSvNPzyiUz0YG602bQib3s6wTcpwnmQFJlCNTxqjydbkgTlWWYrHosJo_9t-uJozT_ul9aSq1xBGcNkqNiooh7TlMdj9kb6g12mjDKIxIcNC50v9IPjgwbllShVwgw
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 45c5bf81a1b2358a3b6a93e1778c29b2
6dc0c35b116386fd39dd5ebd3474ca32d2c8dd34
a54993ad59e46dd5fb8dea50044c531a5462b606eee9b82825728df7a446b0a4
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 09:30:50 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 16 Jan 2023 17:21:52 GMT
Expires: Mon, 23 Jan 2023 17:21:51 GMT
Etag: "6dc0c35b116386fd39dd5ebd3474ca32d2c8dd34"
Cache-Control: max-age=459660,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78b65072bba9b4f7-OSL
fancycrab.net/imp?a=4tgt&e=gAAAAABjx7xJx7tohwTcqwj2iCaAYFD2xsGwgl7L9GB3KqrHsq36PU18pIMSA_DxvzBfVTTfjeGHoiSLnvpKiW2Gt3sbyCLQCrduT21xQqBMqejWrSHLGKov3YkNe_A8O_nqrYX2J-SPlGRQbXs479wYy6PLw_gjHZyUIW3TM61QVIrVSFbnIrhsz_ZqwnMvyJDPFBPV-OexNgnH6cL9yu0W9IyegBAXBy0OT_6qoCSr2NeHCbe4k2SQDoh2YTgORBo4H6yPo2xd_02b4iMiWndxG1QT9NnpFgCC3K1JCtMmAork_7jmGnNc4f1-NBs5M83XotBeQiIWqMnLWmePwaZrcBnymUgFYz2MEraSt75OSSpqiETalF6qlVfw9cAQqV75JRX3mocdZzpJIj3xld6wPhx0D7650bZiceMGKX9gF8I0NVjmlTRS9b464O9t4l6fUNAXm1DZsUmBaBFC-j5fBpFQ9ZSNdg%3D%3D&cpa=cd1ad212-fa95-4d1b-9321-566344ca3031&format=compact-slide-b_r-body
168.119.67.98302 Found 126 B URL HTTP/2 fancycrab.net/imp?a=4tgt&e=gAAAAABjx7xJx7tohwTcqwj2iCaAYFD2xsGwgl7L9GB3KqrHsq36PU18pIMSA_DxvzBfVTTfjeGHoiSLnvpKiW2Gt3sbyCLQCrduT21xQqBMqejWrSHLGKov3YkNe_A8O_nqrYX2J-SPlGRQbXs479wYy6PLw_gjHZyUIW3TM61QVIrVSFbnIrhsz_ZqwnMvyJDPFBPV-OexNgnH6cL9yu0W9IyegBAXBy0OT_6qoCSr2NeHCbe4k2SQDoh2YTgORBo4H6yPo2xd_02b4iMiWndxG1QT9NnpFgCC3K1JCtMmAork_7jmGnNc4f1-NBs5M83XotBeQiIWqMnLWmePwaZrcBnymUgFYz2MEraSt75OSSpqiETalF6qlVfw9cAQqV75JRX3mocdZzpJIj3xld6wPhx0D7650bZiceMGKX9gF8I0NVjmlTRS9b464O9t4l6fUNAXm1DZsUmBaBFC-j5fBpFQ9ZSNdg%3D%3D&cpa=cd1ad212-fa95-4d1b-9321-566344ca3031&format=compact-slide-b_r-body
IP 168.119.67.98:0
ASN #24940 Hetzner Online GmbH
File type HTML document, ASCII text
Hash 50cb9c6328a638b03d68d0d6078ed72a
db05aaba7245a1293665bc21d69a04c8d5676f6d
4ff49a7cdb9d2019c449290a38893ada2b2e47f08a9209aa01705c71315adffc
GET /imp?a=4tgt&e=gAAAAABjx7xJx7tohwTcqwj2iCaAYFD2xsGwgl7L9GB3KqrHsq36PU18pIMSA_DxvzBfVTTfjeGHoiSLnvpKiW2Gt3sbyCLQCrduT21xQqBMqejWrSHLGKov3YkNe_A8O_nqrYX2J-SPlGRQbXs479wYy6PLw_gjHZyUIW3TM61QVIrVSFbnIrhsz_ZqwnMvyJDPFBPV-OexNgnH6cL9yu0W9IyegBAXBy0OT_6qoCSr2NeHCbe4k2SQDoh2YTgORBo4H6yPo2xd_02b4iMiWndxG1QT9NnpFgCC3K1JCtMmAork_7jmGnNc4f1-NBs5M83XotBeQiIWqMnLWmePwaZrcBnymUgFYz2MEraSt75OSSpqiETalF6qlVfw9cAQqV75JRX3mocdZzpJIj3xld6wPhx0D7650bZiceMGKX9gF8I0NVjmlTRS9b464O9t4l6fUNAXm1DZsUmBaBFC-j5fBpFQ9ZSNdg%3D%3D&cpa=cd1ad212-fa95-4d1b-9321-566344ca3031&format=compact-slide-b_r-body HTTP/1.1
Host: fancycrab.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.19.1
date: Wed, 18 Jan 2023 09:30:50 GMT
content-type: text/html; charset=utf-8
content-length: 126
location: https://i33-rtb.informcheck.net/pgo/3-9970/are3zr3dt7ofsacoj4aaaaaabxkiabe2fjnfwipseyaaaaiaaaaaaaaaaaaa
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 4ea0ace169deb70636e80d200ba6c3a3
116cc169545674dc05139b7fe4f1d2acf126930e
f03cf720c3f891b57404d496d955488bbec8dfc128c39833f1a68a4667f49a05
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F03CF720C3F891B57404D496D955488BBEC8DFC128C39833F1A68A4667F49A05"
Last-Modified: Mon, 16 Jan 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10628
Expires: Wed, 18 Jan 2023 12:27:58 GMT
Date: Wed, 18 Jan 2023 09:30:50 GMT
Connection: keep-alive
i33-rtb.informcheck.net/pgo/2-9970/are3zr3dt7ofsacoj4aaaaaabxkiabe2fjnfwipseyaaaaiaaaaaaaaaaaaa
188.72.227.92302 Found 142 B URL HTTP/2 i33-rtb.informcheck.net/pgo/2-9970/are3zr3dt7ofsacoj4aaaaaabxkiabe2fjnfwipseyaaaaiaaaaaaaaaaaaa
IP 188.72.227.92:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /pgo/2-9970/are3zr3dt7ofsacoj4aaaaaabxkiabe2fjnfwipseyaaaaiaaaaaaaaaaaaa HTTP/1.1
Host: i33-rtb.informcheck.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 18 Jan 2023 09:30:50 GMT
content-type: text/html
content-length: 142
location: https://eu.doctorpost.net/metrics/save.img?event=tracked_impressions&bid-id=v2-1674034249309-7-3692-1178228-b1155e94-ff99-56c3-9a72-fc1ed25de156&price=0&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fim%3Fauth%3Dpz6u78%26c%3D_YfcG4f3FqHIRSyrP39RM53ywBXtjmJJ0OERndapX1DtVmcVjDK09RRZfhwECKc3AAsWYjy-uKAoOqqT7RcVcpMp404dwop54hAuGqqXCB1MIHTooPWNNkkurPN-SaXMZKfbz91LsrqUetVk8fPyzI1Lefv-VoV8ZaIgcH5TXzn3rRrmxfohwTAydKTvPgJoh2bhgjmQOfnXpt1XsaR5ojoK_gkfuA0YhbrzVFEOvUCM9lPGxNBV4iWcEdWNdJGxINYS3vQMJmOkrXYdrOhyQkbe84a3bW9nGK_7ZQZmatWg-Z3j8aEQ5kaDyilwH2LKmEJDAcksMTq4A1K8ZWVxxoyO-VHE6k4J5joloJqMr-16Hgkxssw67Mh3lmuxu6W3xZN1y-w2jhu5mxBo9nBfAeU7JbzOXm58AQHX8I9eWPxlF-L046bQgHLPjm9JJuxCdCU5I68GYm--mQtYIueHgI4z0EeEOMHUZMP7cVsq7YwfzaVzG3r7bB6O9dpu8z_PCeWtV325CeuF8oDsVLXA32YO8Df6kAaqLaADccrKPB9hs_l3zpZpoL12v9lYM6AVllmeGVw2GQzCi1r9eMLK_qQHI-8QXJ-AElXnmw
set-cookie: SbzHYw3UgAQAAAAA_img=1; Expires=Wed, 18-Jan-23 15:30:50 GMT; Domain=newsinform.net; Path=/
_trd_=e914662882f72d; Expires=Thu, 18-Jan-24 09:30:50 GMT; Domain=.informcheck.net; Path=/; Secure; SameSite=None
_uqt1545788062=1; Expires=Thu, 19-Jan-23 00:00:00 GMT; Domain=.informcheck.net; Path=/; Secure; SameSite=None
_uqp2860138748=1; Expires=Thu, 19-Jan-23 00:00:00 GMT; Domain=.informcheck.net; Path=/; Secure; SameSite=None
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 45c5bf81a1b2358a3b6a93e1778c29b2
6dc0c35b116386fd39dd5ebd3474ca32d2c8dd34
a54993ad59e46dd5fb8dea50044c531a5462b606eee9b82825728df7a446b0a4
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 09:30:50 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 16 Jan 2023 17:21:52 GMT
Expires: Mon, 23 Jan 2023 17:21:51 GMT
Etag: "6dc0c35b116386fd39dd5ebd3474ca32d2c8dd34"
Cache-Control: max-age=459660,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78b65072b858b512-OSL
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash a25dc01568483bf153072f0a9b7f32b2
99289a7dfce9ae2307568f9c313384d2f23c4a4b
70dd663918f1830d23e826107499896940083ce768411dc3b51a8085cefe6d78
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 09:30:50 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 16 Jan 2023 11:21:31 GMT
Expires: Mon, 23 Jan 2023 11:21:30 GMT
Etag: "99289a7dfce9ae2307568f9c313384d2f23c4a4b"
Cache-Control: max-age=438039,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78b65073dd2bb4f7-OSL
eu.doctorpost.net/metrics/save.img?event=tracked_impressions&bid-id=v2-1674034249309-7-3692-1178228-b1155e94-ff99-56c3-9a72-fc1ed25de156&price=0&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fim%3Fauth%3Dpz6u78%26c%3D_YfcG4f3FqHIRSyrP39RM53ywBXtjmJJ0OERndapX1DtVmcVjDK09RRZfhwECKc3AAsWYjy-uKAoOqqT7RcVcpMp404dwop54hAuGqqXCB1MIHTooPWNNkkurPN-SaXMZKfbz91LsrqUetVk8fPyzI1Lefv-VoV8ZaIgcH5TXzn3rRrmxfohwTAydKTvPgJoh2bhgjmQOfnXpt1XsaR5ojoK_gkfuA0YhbrzVFEOvUCM9lPGxNBV4iWcEdWNdJGxINYS3vQMJmOkrXYdrOhyQkbe84a3bW9nGK_7ZQZmatWg-Z3j8aEQ5kaDyilwH2LKmEJDAcksMTq4A1K8ZWVxxoyO-VHE6k4J5joloJqMr-16Hgkxssw67Mh3lmuxu6W3xZN1y-w2jhu5mxBo9nBfAeU7JbzOXm58AQHX8I9eWPxlF-L046bQgHLPjm9JJuxCdCU5I68GYm--mQtYIueHgI4z0EeEOMHUZMP7cVsq7YwfzaVzG3r7bB6O9dpu8z_PCeWtV325CeuF8oDsVLXA32YO8Df6kAaqLaADccrKPB9hs_l3zpZpoL12v9lYM6AVllmeGVw2GQzCi1r9eMLK_qQHI-8QXJ-AElXnmw
149.6.163.14302 Found 0 B URL HTTP/2 eu.doctorpost.net/metrics/save.img?event=tracked_impressions&bid-id=v2-1674034249309-7-3692-1178228-b1155e94-ff99-56c3-9a72-fc1ed25de156&price=0&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fim%3Fauth%3Dpz6u78%26c%3D_YfcG4f3FqHIRSyrP39RM53ywBXtjmJJ0OERndapX1DtVmcVjDK09RRZfhwECKc3AAsWYjy-uKAoOqqT7RcVcpMp404dwop54hAuGqqXCB1MIHTooPWNNkkurPN-SaXMZKfbz91LsrqUetVk8fPyzI1Lefv-VoV8ZaIgcH5TXzn3rRrmxfohwTAydKTvPgJoh2bhgjmQOfnXpt1XsaR5ojoK_gkfuA0YhbrzVFEOvUCM9lPGxNBV4iWcEdWNdJGxINYS3vQMJmOkrXYdrOhyQkbe84a3bW9nGK_7ZQZmatWg-Z3j8aEQ5kaDyilwH2LKmEJDAcksMTq4A1K8ZWVxxoyO-VHE6k4J5joloJqMr-16Hgkxssw67Mh3lmuxu6W3xZN1y-w2jhu5mxBo9nBfAeU7JbzOXm58AQHX8I9eWPxlF-L046bQgHLPjm9JJuxCdCU5I68GYm--mQtYIueHgI4z0EeEOMHUZMP7cVsq7YwfzaVzG3r7bB6O9dpu8z_PCeWtV325CeuF8oDsVLXA32YO8Df6kAaqLaADccrKPB9hs_l3zpZpoL12v9lYM6AVllmeGVw2GQzCi1r9eMLK_qQHI-8QXJ-AElXnmw
IP 149.6.163.14:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /metrics/save.img?event=tracked_impressions&bid-id=v2-1674034249309-7-3692-1178228-b1155e94-ff99-56c3-9a72-fc1ed25de156&price=0&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fim%3Fauth%3Dpz6u78%26c%3D_YfcG4f3FqHIRSyrP39RM53ywBXtjmJJ0OERndapX1DtVmcVjDK09RRZfhwECKc3AAsWYjy-uKAoOqqT7RcVcpMp404dwop54hAuGqqXCB1MIHTooPWNNkkurPN-SaXMZKfbz91LsrqUetVk8fPyzI1Lefv-VoV8ZaIgcH5TXzn3rRrmxfohwTAydKTvPgJoh2bhgjmQOfnXpt1XsaR5ojoK_gkfuA0YhbrzVFEOvUCM9lPGxNBV4iWcEdWNdJGxINYS3vQMJmOkrXYdrOhyQkbe84a3bW9nGK_7ZQZmatWg-Z3j8aEQ5kaDyilwH2LKmEJDAcksMTq4A1K8ZWVxxoyO-VHE6k4J5joloJqMr-16Hgkxssw67Mh3lmuxu6W3xZN1y-w2jhu5mxBo9nBfAeU7JbzOXm58AQHX8I9eWPxlF-L046bQgHLPjm9JJuxCdCU5I68GYm--mQtYIueHgI4z0EeEOMHUZMP7cVsq7YwfzaVzG3r7bB6O9dpu8z_PCeWtV325CeuF8oDsVLXA32YO8Df6kAaqLaADccrKPB9hs_l3zpZpoL12v9lYM6AVllmeGVw2GQzCi1r9eMLK_qQHI-8QXJ-AElXnmw HTTP/1.1
Host: eu.doctorpost.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty/1.15.8.3
date: Wed, 18 Jan 2023 09:30:50 GMT
content-length: 0
set-cookie: user_id=53cd2739-1212-5912-82f2-93dd784f62de
location: https://track.trackingtraffo.com/push/im?auth=pz6u78&c=_YfcG4f3FqHIRSyrP39RM53ywBXtjmJJ0OERndapX1DtVmcVjDK09RRZfhwECKc3AAsWYjy-uKAoOqqT7RcVcpMp404dwop54hAuGqqXCB1MIHTooPWNNkkurPN-SaXMZKfbz91LsrqUetVk8fPyzI1Lefv-VoV8ZaIgcH5TXzn3rRrmxfohwTAydKTvPgJoh2bhgjmQOfnXpt1XsaR5ojoK_gkfuA0YhbrzVFEOvUCM9lPGxNBV4iWcEdWNdJGxINYS3vQMJmOkrXYdrOhyQkbe84a3bW9nGK_7ZQZmatWg-Z3j8aEQ5kaDyilwH2LKmEJDAcksMTq4A1K8ZWVxxoyO-VHE6k4J5joloJqMr-16Hgkxssw67Mh3lmuxu6W3xZN1y-w2jhu5mxBo9nBfAeU7JbzOXm58AQHX8I9eWPxlF-L046bQgHLPjm9JJuxCdCU5I68GYm--mQtYIueHgI4z0EeEOMHUZMP7cVsq7YwfzaVzG3r7bB6O9dpu8z_PCeWtV325CeuF8oDsVLXA32YO8Df6kAaqLaADccrKPB9hs_l3zpZpoL12v9lYM6AVllmeGVw2GQzCi1r9eMLK_qQHI-8QXJ-AElXnmw
X-Firefox-Spdy: h2
i33-rtb.informcheck.net/pgo/3-9970/are3zr3dt7ofsacoj4aaaaaabxkiabe2fjnfwipseyaaaaiaaaaaaaaaaaaa
188.72.227.92302 Found 142 B URL HTTP/2 i33-rtb.informcheck.net/pgo/3-9970/are3zr3dt7ofsacoj4aaaaaabxkiabe2fjnfwipseyaaaaiaaaaaaaaaaaaa
IP 188.72.227.92:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /pgo/3-9970/are3zr3dt7ofsacoj4aaaaaabxkiabe2fjnfwipseyaaaaiaaaaaaaaaaaaa HTTP/1.1
Host: i33-rtb.informcheck.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 18 Jan 2023 09:30:50 GMT
content-type: text/html
content-length: 142
location: https://eu.doctorpost.net/metrics/save.img?event=impressions&bid-id=v2-1674034249309-7-3692-1178228-b1155e94-ff99-56c3-9a72-fc1ed25de156&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fic%3Fauth%3Dpz6u78%26c%3Don_I_t2pMV2XjeTmkpRGlD2PUClnwMecEoLvRFSiIkzzIYW8-ClI1Uts6gSgDcpvBdwNJYnXkN-NWJUOk85GiC0nFJzy5sEGaN8eNTXI3rIHASoZwsYyQDU2QvyIum9PLysYbpizVgJN-CXUlt6EkSl5dsaH2Bjj7nP97l0x5V-cHc6F3Mwo63dgMff5SxvtkzDGsOCyx1xgp_klIYrwevuXpYg8YeWn9ccElpe8dswABHnWHTSfFWIsIFTRXCreVZPva2XrKRtF-CEG58kicrZeJ3r5GnpwZYud6e_tI1pssUC7wiS6xHfSKHk4t4_TpLB2mkflASzabx-eaOFute_yUqggz1ZFbAyyKES8qLLkJtLLWqhXgSy6QsCTiyBne17EioeMGi-Rn9hXVxLA8TvkLf-85qZuzxSaEv14SU9pb-X5gxLoxePtol2-8ovOT30MXG4K3173njYq346N3EjIGekmJgg5o9ZY17Lh2PFJ9OM5Dj0yubfIHDL9LHQXlgffv0yi4fSziSTpx07etUWW4B0DZRLy4juBkr0CDWKLuk5S-jc6rqjXYoJTDnAJ1dzctWVrolW4UXaSf_-IpAjpPNuUPvq7c5F_qaM4OofaNOE8
set-cookie: SbzHYw3UgAQAAAAA_img=1; Expires=Wed, 18-Jan-23 15:30:50 GMT; Domain=newsinform.net; Path=/
_trd_=bc3a9d40f95283; Expires=Thu, 18-Jan-24 09:30:50 GMT; Domain=.informcheck.net; Path=/; Secure; SameSite=None
access-control-allow-origin: *
X-Firefox-Spdy: h2
fancycrab.net/imp?a=4tgt&e=gAAAAABjx7xJ7mPV52LxYbIDrAB7FZMVZWYbNP4_tlDFVtfsX15dZqX5mKFpmRMxPyhm7csCKwL0c3nHZJNyjwwhQua28mryNT3_qknmIp6mdK1hVhFQL8GvuD2jFhKSxxJ3zZFB9R0fqJ0tw88LlU9kXMrShu6haM9bTsP7vOBRosAsOgMV6MT4uaswLqHIyv5Au9u4D0ab0hyFwZol5jPeAgAYhHsvX6Z4nnzT-KP5gzZ9IaZtrQebD4xJXFwRcr7VlBvgn64d3ejLKkV1j7scPyoYAlC7DRt8Zb40q28GpTBBFGhdlCGjjby3San-d2DEhodI_qHtF5AY8jCbP2zX9K5ikc9GtVI7_MY3tkiL46W4G2iJV2hT9nVUdSuBQTWb0kbgkN-9ZIIHlLHdfzHuSrPtY_HkYg9KtTr7ovHv-FClp7ZuZU2Z_2QDsaEWjZ2Tr1Htx-r_dftHbgswPCNQleZh0os2r9PozuQGVDSmMhOdFbr4yPhYh5rLYjJy01YBf9L_2SaM5RWnluFwaJJaH_MxZIn7l8m-dqIX-8jPzYCL4DZXniqIWMZCe9K2pl2j7zA5yWiBauclGm1Z_T1xd6oZR-rdbGTsXgKIrIhz-lBvCDhv53cVnAOPtN3DiedK_jKwlcdH7cdp9lebA9PyqAvYhku3HqhSPPIgl1PAc4PsR9-a1LkaXAmm-pEjXJwEQGrpC-Uwx5vJFoEgNHGZ50iVvLA03JgI0x381OqYSj8D623K390GT0OOnyWpxlZxi_wj4p8sutb-_cjW88jPz0Mk03uPrFhrxRjqw6Y5CsZpgpZOHd4RfZSxv7DaYAAwdleC1HIlGVij8xnKWGQpHqCzN7qL5g-8MnVeacRHI3nxyISrzbMEW5_mYdi7Tjg_V8zyUNcfVl9261r_46wHJPw7Sg2Y7S3BNQRMF8N55G0cEG3_IYi3jO51gtwidf0pDVWIU3_w1KtX3KFa-IC5snmFF80otmDjPrzM00GFT35KalpEnwVpOW3HU8Iu7K2xT_W003RToHndvpR-yB4ru4uA3weDY7m01p0jY_EqVJgFleKFSDyAxxP6QfTcycQ0tucfXSXRQ4dOcpG5oKSyRckMHfgdg-v-AlY-becEUqoTIJwRCMjvg15pKyfz_nriZWXJIr2CMRBnzHDVuC7wIrk6dFfv-RquCEWHvefx5k5m1REfVhrZSKsoXx715GYMVQMV1qyvE3xS03RUeQtFlr7qDVxRhWzhzkLam2SNC0NwpPCIHt3Aw-VsI_xf_ZXO1cTatYGD40Fq4sPPPzvI09ssZgSNgRnpKbhZ8JXqRJoME1TthuYjAftrU0kR7aaxebPajPe-WjUzjdMUxpMaVtcx4-okPE1WmVv0BtOclWJjdWX_wy3kBMiQKmUMhbLFOT0o9H0XxRCHAQNMuPwgkuT0kU_skCrdaMJtbrvZRgNj2Fyd2V3Qzk5YjqPdegpUUBXVoYXjbMZfrxQELbbPUQ8dRXAk7JAX0af6G0XjZV_e2R9Oi68xrybTCThq1qYYVe6EMJj5h53Pegt1XO5mOhmCOab_9HNQ46A6ffZbFAtwORaaUvGVAym-CHk0lW1nxdqKt4xe_bFg56x4426RiNePgm-vzMFbushzTBGIa63FWFDMB2bxEp9Hni3dNC8eLasDC4ii0ol112BEMm0eXHVAUbYRxzKwNtyt6bqRBQq1lN3O7q6KxUwg3L3etX9wSDQs2D5k1Ay2d1rX2kZQ5wV0od4MeKcUId5TJ5bIOvxgtvzh7E07NPJfuyH7qViKMUYLwO55w0AecclwWHHIEE0ZatjlWc7-VvefpvluJU5lQ0dCqwrb9tvRptpOmd-pEd5jveJkvVjA5_tFGPUNhSwZf_bSEMIzJ4pj9VK3rZddoc2KYXP9giZsvbIxnE9p7q1r6pgi5-XeqwaIp2wAG8C0LuHz3owGrYoHYhjaQcisWYc0osDrlBLFZG2wKcuwpIezjgxVKDaj_3LKhaAhR17nGBGitn_DJUugNz9bYu3rXzw1vq6glR84O5n5_W_G-0YHapOS1Q_M2YzYHMf5WG9k4I18ZpC1St60U7vUUVZbvS6kzKhunqfYPiRgvvko38HbQIPP98vKllj7-GXQp3B87lh5kTjh6jlYj-bPiojz3kt_839vKBr9kTBeTWVXnJY2YrXR5TeyA_ZPATV0ggE2z4fp4WWJ5tdziQ6alruadc-S_FdVTijTxTR-fOfN_UOEccFjkaQXzAuXbnl9e2dyYJf6c1mRw_I1vJh_wLoIlp9TQuQmQB4x5TH455u3uPOHD1kCrowAiPn1-OH1UmVqNsZNuecjmnEkMeX4bFzkHqpyR2sC2VcFcrmP_jDBYTND6ClVCEPtIUdNvhwZ49B2LPeKK5u4sjZWkYRXhrEGX2kkM2FS4NOmvtyvuHb5brZSENDZ&cpa=2ed3e22a-56e6-4abd-8ce3-04020d897f1b&format=compact-slide-b_r-body
168.119.67.98302 Found 1.6 kB URL HTTP/2 fancycrab.net/imp?a=4tgt&e=gAAAAABjx7xJ7mPV52LxYbIDrAB7FZMVZWYbNP4_tlDFVtfsX15dZqX5mKFpmRMxPyhm7csCKwL0c3nHZJNyjwwhQua28mryNT3_qknmIp6mdK1hVhFQL8GvuD2jFhKSxxJ3zZFB9R0fqJ0tw88LlU9kXMrShu6haM9bTsP7vOBRosAsOgMV6MT4uaswLqHIyv5Au9u4D0ab0hyFwZol5jPeAgAYhHsvX6Z4nnzT-KP5gzZ9IaZtrQebD4xJXFwRcr7VlBvgn64d3ejLKkV1j7scPyoYAlC7DRt8Zb40q28GpTBBFGhdlCGjjby3San-d2DEhodI_qHtF5AY8jCbP2zX9K5ikc9GtVI7_MY3tkiL46W4G2iJV2hT9nVUdSuBQTWb0kbgkN-9ZIIHlLHdfzHuSrPtY_HkYg9KtTr7ovHv-FClp7ZuZU2Z_2QDsaEWjZ2Tr1Htx-r_dftHbgswPCNQleZh0os2r9PozuQGVDSmMhOdFbr4yPhYh5rLYjJy01YBf9L_2SaM5RWnluFwaJJaH_MxZIn7l8m-dqIX-8jPzYCL4DZXniqIWMZCe9K2pl2j7zA5yWiBauclGm1Z_T1xd6oZR-rdbGTsXgKIrIhz-lBvCDhv53cVnAOPtN3DiedK_jKwlcdH7cdp9lebA9PyqAvYhku3HqhSPPIgl1PAc4PsR9-a1LkaXAmm-pEjXJwEQGrpC-Uwx5vJFoEgNHGZ50iVvLA03JgI0x381OqYSj8D623K390GT0OOnyWpxlZxi_wj4p8sutb-_cjW88jPz0Mk03uPrFhrxRjqw6Y5CsZpgpZOHd4RfZSxv7DaYAAwdleC1HIlGVij8xnKWGQpHqCzN7qL5g-8MnVeacRHI3nxyISrzbMEW5_mYdi7Tjg_V8zyUNcfVl9261r_46wHJPw7Sg2Y7S3BNQRMF8N55G0cEG3_IYi3jO51gtwidf0pDVWIU3_w1KtX3KFa-IC5snmFF80otmDjPrzM00GFT35KalpEnwVpOW3HU8Iu7K2xT_W003RToHndvpR-yB4ru4uA3weDY7m01p0jY_EqVJgFleKFSDyAxxP6QfTcycQ0tucfXSXRQ4dOcpG5oKSyRckMHfgdg-v-AlY-becEUqoTIJwRCMjvg15pKyfz_nriZWXJIr2CMRBnzHDVuC7wIrk6dFfv-RquCEWHvefx5k5m1REfVhrZSKsoXx715GYMVQMV1qyvE3xS03RUeQtFlr7qDVxRhWzhzkLam2SNC0NwpPCIHt3Aw-VsI_xf_ZXO1cTatYGD40Fq4sPPPzvI09ssZgSNgRnpKbhZ8JXqRJoME1TthuYjAftrU0kR7aaxebPajPe-WjUzjdMUxpMaVtcx4-okPE1WmVv0BtOclWJjdWX_wy3kBMiQKmUMhbLFOT0o9H0XxRCHAQNMuPwgkuT0kU_skCrdaMJtbrvZRgNj2Fyd2V3Qzk5YjqPdegpUUBXVoYXjbMZfrxQELbbPUQ8dRXAk7JAX0af6G0XjZV_e2R9Oi68xrybTCThq1qYYVe6EMJj5h53Pegt1XO5mOhmCOab_9HNQ46A6ffZbFAtwORaaUvGVAym-CHk0lW1nxdqKt4xe_bFg56x4426RiNePgm-vzMFbushzTBGIa63FWFDMB2bxEp9Hni3dNC8eLasDC4ii0ol112BEMm0eXHVAUbYRxzKwNtyt6bqRBQq1lN3O7q6KxUwg3L3etX9wSDQs2D5k1Ay2d1rX2kZQ5wV0od4MeKcUId5TJ5bIOvxgtvzh7E07NPJfuyH7qViKMUYLwO55w0AecclwWHHIEE0ZatjlWc7-VvefpvluJU5lQ0dCqwrb9tvRptpOmd-pEd5jveJkvVjA5_tFGPUNhSwZf_bSEMIzJ4pj9VK3rZddoc2KYXP9giZsvbIxnE9p7q1r6pgi5-XeqwaIp2wAG8C0LuHz3owGrYoHYhjaQcisWYc0osDrlBLFZG2wKcuwpIezjgxVKDaj_3LKhaAhR17nGBGitn_DJUugNz9bYu3rXzw1vq6glR84O5n5_W_G-0YHapOS1Q_M2YzYHMf5WG9k4I18ZpC1St60U7vUUVZbvS6kzKhunqfYPiRgvvko38HbQIPP98vKllj7-GXQp3B87lh5kTjh6jlYj-bPiojz3kt_839vKBr9kTBeTWVXnJY2YrXR5TeyA_ZPATV0ggE2z4fp4WWJ5tdziQ6alruadc-S_FdVTijTxTR-fOfN_UOEccFjkaQXzAuXbnl9e2dyYJf6c1mRw_I1vJh_wLoIlp9TQuQmQB4x5TH455u3uPOHD1kCrowAiPn1-OH1UmVqNsZNuecjmnEkMeX4bFzkHqpyR2sC2VcFcrmP_jDBYTND6ClVCEPtIUdNvhwZ49B2LPeKK5u4sjZWkYRXhrEGX2kkM2FS4NOmvtyvuHb5brZSENDZ&cpa=2ed3e22a-56e6-4abd-8ce3-04020d897f1b&format=compact-slide-b_r-body
IP 168.119.67.98:0
ASN #24940 Hetzner Online GmbH
File type HTML document, ASCII text, with very long lines (1604)
Hash 8df32b3db083cb3fbed11aa425d9f141
5fddcea804abcde12700f2cfc550c70d870a5594
053b2a20a5f66b3c2472e362ec3489a027c536a1889f975f1c7bfba509e692d6
GET /imp?a=4tgt&e=gAAAAABjx7xJ7mPV52LxYbIDrAB7FZMVZWYbNP4_tlDFVtfsX15dZqX5mKFpmRMxPyhm7csCKwL0c3nHZJNyjwwhQua28mryNT3_qknmIp6mdK1hVhFQL8GvuD2jFhKSxxJ3zZFB9R0fqJ0tw88LlU9kXMrShu6haM9bTsP7vOBRosAsOgMV6MT4uaswLqHIyv5Au9u4D0ab0hyFwZol5jPeAgAYhHsvX6Z4nnzT-KP5gzZ9IaZtrQebD4xJXFwRcr7VlBvgn64d3ejLKkV1j7scPyoYAlC7DRt8Zb40q28GpTBBFGhdlCGjjby3San-d2DEhodI_qHtF5AY8jCbP2zX9K5ikc9GtVI7_MY3tkiL46W4G2iJV2hT9nVUdSuBQTWb0kbgkN-9ZIIHlLHdfzHuSrPtY_HkYg9KtTr7ovHv-FClp7ZuZU2Z_2QDsaEWjZ2Tr1Htx-r_dftHbgswPCNQleZh0os2r9PozuQGVDSmMhOdFbr4yPhYh5rLYjJy01YBf9L_2SaM5RWnluFwaJJaH_MxZIn7l8m-dqIX-8jPzYCL4DZXniqIWMZCe9K2pl2j7zA5yWiBauclGm1Z_T1xd6oZR-rdbGTsXgKIrIhz-lBvCDhv53cVnAOPtN3DiedK_jKwlcdH7cdp9lebA9PyqAvYhku3HqhSPPIgl1PAc4PsR9-a1LkaXAmm-pEjXJwEQGrpC-Uwx5vJFoEgNHGZ50iVvLA03JgI0x381OqYSj8D623K390GT0OOnyWpxlZxi_wj4p8sutb-_cjW88jPz0Mk03uPrFhrxRjqw6Y5CsZpgpZOHd4RfZSxv7DaYAAwdleC1HIlGVij8xnKWGQpHqCzN7qL5g-8MnVeacRHI3nxyISrzbMEW5_mYdi7Tjg_V8zyUNcfVl9261r_46wHJPw7Sg2Y7S3BNQRMF8N55G0cEG3_IYi3jO51gtwidf0pDVWIU3_w1KtX3KFa-IC5snmFF80otmDjPrzM00GFT35KalpEnwVpOW3HU8Iu7K2xT_W003RToHndvpR-yB4ru4uA3weDY7m01p0jY_EqVJgFleKFSDyAxxP6QfTcycQ0tucfXSXRQ4dOcpG5oKSyRckMHfgdg-v-AlY-becEUqoTIJwRCMjvg15pKyfz_nriZWXJIr2CMRBnzHDVuC7wIrk6dFfv-RquCEWHvefx5k5m1REfVhrZSKsoXx715GYMVQMV1qyvE3xS03RUeQtFlr7qDVxRhWzhzkLam2SNC0NwpPCIHt3Aw-VsI_xf_ZXO1cTatYGD40Fq4sPPPzvI09ssZgSNgRnpKbhZ8JXqRJoME1TthuYjAftrU0kR7aaxebPajPe-WjUzjdMUxpMaVtcx4-okPE1WmVv0BtOclWJjdWX_wy3kBMiQKmUMhbLFOT0o9H0XxRCHAQNMuPwgkuT0kU_skCrdaMJtbrvZRgNj2Fyd2V3Qzk5YjqPdegpUUBXVoYXjbMZfrxQELbbPUQ8dRXAk7JAX0af6G0XjZV_e2R9Oi68xrybTCThq1qYYVe6EMJj5h53Pegt1XO5mOhmCOab_9HNQ46A6ffZbFAtwORaaUvGVAym-CHk0lW1nxdqKt4xe_bFg56x4426RiNePgm-vzMFbushzTBGIa63FWFDMB2bxEp9Hni3dNC8eLasDC4ii0ol112BEMm0eXHVAUbYRxzKwNtyt6bqRBQq1lN3O7q6KxUwg3L3etX9wSDQs2D5k1Ay2d1rX2kZQ5wV0od4MeKcUId5TJ5bIOvxgtvzh7E07NPJfuyH7qViKMUYLwO55w0AecclwWHHIEE0ZatjlWc7-VvefpvluJU5lQ0dCqwrb9tvRptpOmd-pEd5jveJkvVjA5_tFGPUNhSwZf_bSEMIzJ4pj9VK3rZddoc2KYXP9giZsvbIxnE9p7q1r6pgi5-XeqwaIp2wAG8C0LuHz3owGrYoHYhjaQcisWYc0osDrlBLFZG2wKcuwpIezjgxVKDaj_3LKhaAhR17nGBGitn_DJUugNz9bYu3rXzw1vq6glR84O5n5_W_G-0YHapOS1Q_M2YzYHMf5WG9k4I18ZpC1St60U7vUUVZbvS6kzKhunqfYPiRgvvko38HbQIPP98vKllj7-GXQp3B87lh5kTjh6jlYj-bPiojz3kt_839vKBr9kTBeTWVXnJY2YrXR5TeyA_ZPATV0ggE2z4fp4WWJ5tdziQ6alruadc-S_FdVTijTxTR-fOfN_UOEccFjkaQXzAuXbnl9e2dyYJf6c1mRw_I1vJh_wLoIlp9TQuQmQB4x5TH455u3uPOHD1kCrowAiPn1-OH1UmVqNsZNuecjmnEkMeX4bFzkHqpyR2sC2VcFcrmP_jDBYTND6ClVCEPtIUdNvhwZ49B2LPeKK5u4sjZWkYRXhrEGX2kkM2FS4NOmvtyvuHb5brZSENDZ&cpa=2ed3e22a-56e6-4abd-8ce3-04020d897f1b&format=compact-slide-b_r-body HTTP/1.1
Host: fancycrab.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.19.1
date: Wed, 18 Jan 2023 09:30:50 GMT
content-type: text/html; charset=utf-8
content-length: 1606
location: https://track.primerclicks.com/push/ic?auth=5grf6p&c=dilR8bNl9_S-Nd0VHll2i48XMa-G0BRDWwhwy8yan4meFpd3LP_ZFacSjLqci1HFV1L0sReZYVeEBFXVrNCTGrhZPzAM9CLOLniKMTyh5C9z64T0hbipTgfgkjbgsvpz0SFhFy0O-4aEnbBThtY-9iyHKzVdCnB-vsSOQHcAqqNkJjha5dDtu0ieaINO32DiTB5c4-Bt0hC2U-Lf3HrYeAczlwDUo9xmvzcjxnDxkguG2jbM6NSOP3A8ai3aBlH4RRXAQzyyE0Z4dWKN--cwx9Mg3-0GEOzHGaAhRXBmL1-khYhxkVB1vE_KvAvo5wjYtGE55HhMZOc8xKyT_AeTNMi30txmqiUYPUNM6dLrkpjZlmHZYSBa_do-w_HGVOkwP-rzFeIEEmADNlkkni2X2J8swVTLWocaP2T8QxuLip2OLseVQ7FHDWfms17hRIFI7uyRgl4VOx8VYyXGOmjh0-382jWgLedsCb9vHvkGwN_fRHzLPclV7dHegDENkw7cFBLtGE1VJvDRKeN7zLBsL4Z7YW7lcvcVcIvZ7u-4VFQUkiAXNjBH2UBlz7R2AhAiUGfJYVp-HN9fI2bYsc2Ihq7dY2cGHfi14b4DQ_Lgx-yALFk2IrUT6RFOZGUSp5jQsqn-iN-S-KAV9kbxzCaNh4BDpnd46mxvW37zovvxHYbB3ISZ2-1e7eUovASsDJByde8UGjJvtoHVNYyOOaYYYkhyVts98JwdovtIeKqZ5aVpj60kRioE1KfVEvKwsL0PZDBSDRKea36X787oi9o8b4kuUYxANM8XNf5kjcIsWKBVUsToczpsLLAVyuu0Skk3QRCYJmIQOvaIqMkb4c6-mX5BeGXaMwcvjucuuyGAPZMMqoygFC_ckdzoI2iDoGV5A_PmPG6dRcjuXUsdIJwsB_CoPM80AeCtsTMMTG7QXqmpIhuUxOHlD47ALXKFK2ubb-PIylr5FLYxuS_-0UyQd73aBkrMrBge6fnJdFyfBfS_pxlLdIt0hM2oMi_Rr5JcTzaS7hUOSsoFwrtIJm5NNWHEDGCqkAO2klH8abMihkpoHrS_p8kHvrC_yXOPfC-im2IxSCgdnVFcSqFkMIv05udmJT_fbyprg1E43qcGzeE7FJaIWbmtnGNrWU0HR8wotb2cZ6ylbCcXHW4oot6T4QnBBzAzOZ1so8QvJs_Qdg_d82RyegiGruZy3_AWosZMfZUsVpu2QVHQtlF53301dd88OWgAE2b1SXLGoNDqhOnRMS7Whp1Y3JwEwNWy-_q8J69yHyqVEoQm5Lnb62sJJpLfXm5RJI6hgrsongdAzVNxzJMggurFiJGJ5MygCJoAV8zjZ7hWcuKJDtXDiVn7_T40FF-wch0sYTJ5i1VJVj_VhVdYGNvASDTCGaViv3yfH_F9uQkCffzzOY7MeKsQkOHLFs6YMQ8TdSvk3LXCZlbqzquRvP17mFCRLGsixvLnKafm6G-PuKyPYOSmdM3UCwx5N__wfEuZYPsXGry1VJOodRYgUZ4P7Q
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
eu.doctorpost.net/metrics/save.img?event=impressions&bid-id=v2-1674034249309-7-3692-1178228-b1155e94-ff99-56c3-9a72-fc1ed25de156&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fic%3Fauth%3Dpz6u78%26c%3Don_I_t2pMV2XjeTmkpRGlD2PUClnwMecEoLvRFSiIkzzIYW8-ClI1Uts6gSgDcpvBdwNJYnXkN-NWJUOk85GiC0nFJzy5sEGaN8eNTXI3rIHASoZwsYyQDU2QvyIum9PLysYbpizVgJN-CXUlt6EkSl5dsaH2Bjj7nP97l0x5V-cHc6F3Mwo63dgMff5SxvtkzDGsOCyx1xgp_klIYrwevuXpYg8YeWn9ccElpe8dswABHnWHTSfFWIsIFTRXCreVZPva2XrKRtF-CEG58kicrZeJ3r5GnpwZYud6e_tI1pssUC7wiS6xHfSKHk4t4_TpLB2mkflASzabx-eaOFute_yUqggz1ZFbAyyKES8qLLkJtLLWqhXgSy6QsCTiyBne17EioeMGi-Rn9hXVxLA8TvkLf-85qZuzxSaEv14SU9pb-X5gxLoxePtol2-8ovOT30MXG4K3173njYq346N3EjIGekmJgg5o9ZY17Lh2PFJ9OM5Dj0yubfIHDL9LHQXlgffv0yi4fSziSTpx07etUWW4B0DZRLy4juBkr0CDWKLuk5S-jc6rqjXYoJTDnAJ1dzctWVrolW4UXaSf_-IpAjpPNuUPvq7c5F_qaM4OofaNOE8
149.6.163.14302 Found 0 B URL HTTP/2 eu.doctorpost.net/metrics/save.img?event=impressions&bid-id=v2-1674034249309-7-3692-1178228-b1155e94-ff99-56c3-9a72-fc1ed25de156&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fic%3Fauth%3Dpz6u78%26c%3Don_I_t2pMV2XjeTmkpRGlD2PUClnwMecEoLvRFSiIkzzIYW8-ClI1Uts6gSgDcpvBdwNJYnXkN-NWJUOk85GiC0nFJzy5sEGaN8eNTXI3rIHASoZwsYyQDU2QvyIum9PLysYbpizVgJN-CXUlt6EkSl5dsaH2Bjj7nP97l0x5V-cHc6F3Mwo63dgMff5SxvtkzDGsOCyx1xgp_klIYrwevuXpYg8YeWn9ccElpe8dswABHnWHTSfFWIsIFTRXCreVZPva2XrKRtF-CEG58kicrZeJ3r5GnpwZYud6e_tI1pssUC7wiS6xHfSKHk4t4_TpLB2mkflASzabx-eaOFute_yUqggz1ZFbAyyKES8qLLkJtLLWqhXgSy6QsCTiyBne17EioeMGi-Rn9hXVxLA8TvkLf-85qZuzxSaEv14SU9pb-X5gxLoxePtol2-8ovOT30MXG4K3173njYq346N3EjIGekmJgg5o9ZY17Lh2PFJ9OM5Dj0yubfIHDL9LHQXlgffv0yi4fSziSTpx07etUWW4B0DZRLy4juBkr0CDWKLuk5S-jc6rqjXYoJTDnAJ1dzctWVrolW4UXaSf_-IpAjpPNuUPvq7c5F_qaM4OofaNOE8
IP 149.6.163.14:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /metrics/save.img?event=impressions&bid-id=v2-1674034249309-7-3692-1178228-b1155e94-ff99-56c3-9a72-fc1ed25de156&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fic%3Fauth%3Dpz6u78%26c%3Don_I_t2pMV2XjeTmkpRGlD2PUClnwMecEoLvRFSiIkzzIYW8-ClI1Uts6gSgDcpvBdwNJYnXkN-NWJUOk85GiC0nFJzy5sEGaN8eNTXI3rIHASoZwsYyQDU2QvyIum9PLysYbpizVgJN-CXUlt6EkSl5dsaH2Bjj7nP97l0x5V-cHc6F3Mwo63dgMff5SxvtkzDGsOCyx1xgp_klIYrwevuXpYg8YeWn9ccElpe8dswABHnWHTSfFWIsIFTRXCreVZPva2XrKRtF-CEG58kicrZeJ3r5GnpwZYud6e_tI1pssUC7wiS6xHfSKHk4t4_TpLB2mkflASzabx-eaOFute_yUqggz1ZFbAyyKES8qLLkJtLLWqhXgSy6QsCTiyBne17EioeMGi-Rn9hXVxLA8TvkLf-85qZuzxSaEv14SU9pb-X5gxLoxePtol2-8ovOT30MXG4K3173njYq346N3EjIGekmJgg5o9ZY17Lh2PFJ9OM5Dj0yubfIHDL9LHQXlgffv0yi4fSziSTpx07etUWW4B0DZRLy4juBkr0CDWKLuk5S-jc6rqjXYoJTDnAJ1dzctWVrolW4UXaSf_-IpAjpPNuUPvq7c5F_qaM4OofaNOE8 HTTP/1.1
Host: eu.doctorpost.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty/1.15.8.3
date: Wed, 18 Jan 2023 09:30:50 GMT
content-length: 0
location: https://track.trackingtraffo.com/push/ic?auth=pz6u78&c=on_I_t2pMV2XjeTmkpRGlD2PUClnwMecEoLvRFSiIkzzIYW8-ClI1Uts6gSgDcpvBdwNJYnXkN-NWJUOk85GiC0nFJzy5sEGaN8eNTXI3rIHASoZwsYyQDU2QvyIum9PLysYbpizVgJN-CXUlt6EkSl5dsaH2Bjj7nP97l0x5V-cHc6F3Mwo63dgMff5SxvtkzDGsOCyx1xgp_klIYrwevuXpYg8YeWn9ccElpe8dswABHnWHTSfFWIsIFTRXCreVZPva2XrKRtF-CEG58kicrZeJ3r5GnpwZYud6e_tI1pssUC7wiS6xHfSKHk4t4_TpLB2mkflASzabx-eaOFute_yUqggz1ZFbAyyKES8qLLkJtLLWqhXgSy6QsCTiyBne17EioeMGi-Rn9hXVxLA8TvkLf-85qZuzxSaEv14SU9pb-X5gxLoxePtol2-8ovOT30MXG4K3173njYq346N3EjIGekmJgg5o9ZY17Lh2PFJ9OM5Dj0yubfIHDL9LHQXlgffv0yi4fSziSTpx07etUWW4B0DZRLy4juBkr0CDWKLuk5S-jc6rqjXYoJTDnAJ1dzctWVrolW4UXaSf_-IpAjpPNuUPvq7c5F_qaM4OofaNOE8
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 2c5182c656ab86c87aab57e9173150a7
f63829e033f8bda599350fd49adcd9fc74aeb6d1
9af4b1c4acff0e234dec9444a4b06b4b4d6a7e9029fe46ad6dc6fa0e28feaabe
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 09:30:51 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 18 Jan 2023 06:28:16 GMT
Expires: Wed, 25 Jan 2023 06:28:15 GMT
Etag: "f63829e033f8bda599350fd49adcd9fc74aeb6d1"
Cache-Control: max-age=593244,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78b65073d9dcb512-OSL
track.primerclicks.com/push/im?auth=5grf6p&c=clWR6PSdHjOdXuOgm9n8uYjO4W8meJt282MjtZ8olYOgT15huotNmzU39-3iRxyjohWQPt8Eip3mvAvwEBsn9UrtUf0ffAytajdNfP29JJSm0Xcgm1X2wyN50Wzr2FZLjrWaEbxZi-YEIgBCDcYd5FVvkOLNnsZ9vZe1PpsFi_EeQFk5J1llA5HvgEHVzbpKHi3lfzeEk4hEYem0mbOv6ZRHCK39FMiRmwri3SQHGN2QAkyArut9aX79-LUXg-FDtNWMCHc404bWNmmJhosHxKWiuGzT0gMDEn_k_2M6Fmsr6n0GIWjoyVFOwTeRihFmZ2yCx5DXITiYcFUtZ971W-2U_hHqRVxCl4-JwtiI4qe3owabdAm5pYUXFVfQnq3S45E2wPPH3vkZzc-Hp197Xw9fZ1KmpAWf4udQsrWTUHg1nvZicMC1mIDatHB-fPlqDZ18ye_tsEf24nfHd4N4UXzQ5okOo7OiCTfd4SQ3KdDvSIYe3qfjprnFP58T8fXa_BWiFHp73OsHMHV7ocyJALCBDPbptb_k9JOTuiMUg6wxtqCQfLp8IwKyaMXlJZyo0p2VTr5uOmZ-GMw9eLvoPSBq93Q_Q6BzlXG4nxgwOQDBrnId9SlTwJspEeWY8agbUbNB2Hf1IEtUE9qaoTB4Ge67lbNxvjoLJUfOruP6J9AVK8qZvetvEhqWQrRqCA7Hs1TVhidkXeay3Cyt53u89p0Ph_BveeYkCNjVKpmR5z1-YslNkJy-2Ljqtcy3ehDOFf2z2krLQezNfE1qDlBms7TfYRej2gMD_cm_gg-Ck4Lgo3rPMk-Pn6LjXniriL7q3yaaef6sJr5cAaCynppgJBxWpqr1EclP0ij8ZIWVzPBUMLmPZQ66nzVvea_klbYfZr2LTXXr3kCtdkEleJJ365jsFMd3r3t4ilvieW1X4oRojRIaA0Mr61kpe_BIsS0eBmPwFDYX-6rSStUTWbthTLTqAmAMr6bFD2-b75HA62J3Gwf25dNh_KRN7TcBUKhB_TsSKeZi0ZnC0bm4zEk1pe_BaHTwjZ1n5WYJD5KOW0Vk6_X-4BQ-jT_Ud3WPfQsPaSCBXb622Oh7BtWVJ0daft3W8fdPAfNJWvodcH3GWHZdrdxsLg4Bey-PC52W8d-G6siMdwgFykEpT1L7lUPReJ2SmLiVdGUy8w-i5ztNdAnDvyS4yUQgbe27eGx-w7MBCBa2RUPM9OhC7bqdyiPRimNT9_DYwrug2yciAdKNL_M9lworBvfLjq5cHvcULNSFSj-7yY_5Ax2YrE1ykqq_-1N_oUc6MdmAquWMumJR1JLTM36brjfMXDIp5joX7RvkARveezs9Bg1PC4HeEuwR0_QG8GVM2k3dBNPlcNg-JfUaG4T_OwrwtuBw2UmBTxYogIle4uVQ-8Yu_0aeGRyR6Gef3sVBOQGHOMso3YwlxqAZolKsKJcACy8jQu1-rxMtcXFMphwA1vTXIRaYrAfbu_db0gUCAJbKHrhGOoIqJl1iQEYwPO54F1sMoNQ
88.214.195.83302 Found 0 B URL HTTP/1.1 track.primerclicks.com/push/im?auth=5grf6p&c=clWR6PSdHjOdXuOgm9n8uYjO4W8meJt282MjtZ8olYOgT15huotNmzU39-3iRxyjohWQPt8Eip3mvAvwEBsn9UrtUf0ffAytajdNfP29JJSm0Xcgm1X2wyN50Wzr2FZLjrWaEbxZi-YEIgBCDcYd5FVvkOLNnsZ9vZe1PpsFi_EeQFk5J1llA5HvgEHVzbpKHi3lfzeEk4hEYem0mbOv6ZRHCK39FMiRmwri3SQHGN2QAkyArut9aX79-LUXg-FDtNWMCHc404bWNmmJhosHxKWiuGzT0gMDEn_k_2M6Fmsr6n0GIWjoyVFOwTeRihFmZ2yCx5DXITiYcFUtZ971W-2U_hHqRVxCl4-JwtiI4qe3owabdAm5pYUXFVfQnq3S45E2wPPH3vkZzc-Hp197Xw9fZ1KmpAWf4udQsrWTUHg1nvZicMC1mIDatHB-fPlqDZ18ye_tsEf24nfHd4N4UXzQ5okOo7OiCTfd4SQ3KdDvSIYe3qfjprnFP58T8fXa_BWiFHp73OsHMHV7ocyJALCBDPbptb_k9JOTuiMUg6wxtqCQfLp8IwKyaMXlJZyo0p2VTr5uOmZ-GMw9eLvoPSBq93Q_Q6BzlXG4nxgwOQDBrnId9SlTwJspEeWY8agbUbNB2Hf1IEtUE9qaoTB4Ge67lbNxvjoLJUfOruP6J9AVK8qZvetvEhqWQrRqCA7Hs1TVhidkXeay3Cyt53u89p0Ph_BveeYkCNjVKpmR5z1-YslNkJy-2Ljqtcy3ehDOFf2z2krLQezNfE1qDlBms7TfYRej2gMD_cm_gg-Ck4Lgo3rPMk-Pn6LjXniriL7q3yaaef6sJr5cAaCynppgJBxWpqr1EclP0ij8ZIWVzPBUMLmPZQ66nzVvea_klbYfZr2LTXXr3kCtdkEleJJ365jsFMd3r3t4ilvieW1X4oRojRIaA0Mr61kpe_BIsS0eBmPwFDYX-6rSStUTWbthTLTqAmAMr6bFD2-b75HA62J3Gwf25dNh_KRN7TcBUKhB_TsSKeZi0ZnC0bm4zEk1pe_BaHTwjZ1n5WYJD5KOW0Vk6_X-4BQ-jT_Ud3WPfQsPaSCBXb622Oh7BtWVJ0daft3W8fdPAfNJWvodcH3GWHZdrdxsLg4Bey-PC52W8d-G6siMdwgFykEpT1L7lUPReJ2SmLiVdGUy8w-i5ztNdAnDvyS4yUQgbe27eGx-w7MBCBa2RUPM9OhC7bqdyiPRimNT9_DYwrug2yciAdKNL_M9lworBvfLjq5cHvcULNSFSj-7yY_5Ax2YrE1ykqq_-1N_oUc6MdmAquWMumJR1JLTM36brjfMXDIp5joX7RvkARveezs9Bg1PC4HeEuwR0_QG8GVM2k3dBNPlcNg-JfUaG4T_OwrwtuBw2UmBTxYogIle4uVQ-8Yu_0aeGRyR6Gef3sVBOQGHOMso3YwlxqAZolKsKJcACy8jQu1-rxMtcXFMphwA1vTXIRaYrAfbu_db0gUCAJbKHrhGOoIqJl1iQEYwPO54F1sMoNQ
IP 88.214.195.83:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /push/im?auth=5grf6p&c=clWR6PSdHjOdXuOgm9n8uYjO4W8meJt282MjtZ8olYOgT15huotNmzU39-3iRxyjohWQPt8Eip3mvAvwEBsn9UrtUf0ffAytajdNfP29JJSm0Xcgm1X2wyN50Wzr2FZLjrWaEbxZi-YEIgBCDcYd5FVvkOLNnsZ9vZe1PpsFi_EeQFk5J1llA5HvgEHVzbpKHi3lfzeEk4hEYem0mbOv6ZRHCK39FMiRmwri3SQHGN2QAkyArut9aX79-LUXg-FDtNWMCHc404bWNmmJhosHxKWiuGzT0gMDEn_k_2M6Fmsr6n0GIWjoyVFOwTeRihFmZ2yCx5DXITiYcFUtZ971W-2U_hHqRVxCl4-JwtiI4qe3owabdAm5pYUXFVfQnq3S45E2wPPH3vkZzc-Hp197Xw9fZ1KmpAWf4udQsrWTUHg1nvZicMC1mIDatHB-fPlqDZ18ye_tsEf24nfHd4N4UXzQ5okOo7OiCTfd4SQ3KdDvSIYe3qfjprnFP58T8fXa_BWiFHp73OsHMHV7ocyJALCBDPbptb_k9JOTuiMUg6wxtqCQfLp8IwKyaMXlJZyo0p2VTr5uOmZ-GMw9eLvoPSBq93Q_Q6BzlXG4nxgwOQDBrnId9SlTwJspEeWY8agbUbNB2Hf1IEtUE9qaoTB4Ge67lbNxvjoLJUfOruP6J9AVK8qZvetvEhqWQrRqCA7Hs1TVhidkXeay3Cyt53u89p0Ph_BveeYkCNjVKpmR5z1-YslNkJy-2Ljqtcy3ehDOFf2z2krLQezNfE1qDlBms7TfYRej2gMD_cm_gg-Ck4Lgo3rPMk-Pn6LjXniriL7q3yaaef6sJr5cAaCynppgJBxWpqr1EclP0ij8ZIWVzPBUMLmPZQ66nzVvea_klbYfZr2LTXXr3kCtdkEleJJ365jsFMd3r3t4ilvieW1X4oRojRIaA0Mr61kpe_BIsS0eBmPwFDYX-6rSStUTWbthTLTqAmAMr6bFD2-b75HA62J3Gwf25dNh_KRN7TcBUKhB_TsSKeZi0ZnC0bm4zEk1pe_BaHTwjZ1n5WYJD5KOW0Vk6_X-4BQ-jT_Ud3WPfQsPaSCBXb622Oh7BtWVJ0daft3W8fdPAfNJWvodcH3GWHZdrdxsLg4Bey-PC52W8d-G6siMdwgFykEpT1L7lUPReJ2SmLiVdGUy8w-i5ztNdAnDvyS4yUQgbe27eGx-w7MBCBa2RUPM9OhC7bqdyiPRimNT9_DYwrug2yciAdKNL_M9lworBvfLjq5cHvcULNSFSj-7yY_5Ax2YrE1ykqq_-1N_oUc6MdmAquWMumJR1JLTM36brjfMXDIp5joX7RvkARveezs9Bg1PC4HeEuwR0_QG8GVM2k3dBNPlcNg-JfUaG4T_OwrwtuBw2UmBTxYogIle4uVQ-8Yu_0aeGRyR6Gef3sVBOQGHOMso3YwlxqAZolKsKJcACy8jQu1-rxMtcXFMphwA1vTXIRaYrAfbu_db0gUCAJbKHrhGOoIqJl1iQEYwPO54F1sMoNQ HTTP/1.1
Host: track.primerclicks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.20.0
Date: Wed, 18 Jan 2023 09:30:51 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Location: https://us.freshpops.net/metrics/save.img?event=tracked_impressions&bid-id=v2-1674034249365-7-9429-1178228-ae708a06-d4d5-3a0e-d8fb-141d73bc06ce&price=0&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fim%3Fauth%3Dpz6u78%26c%3D6pYV8f1Nf0nWnUvdTDvMtyaeyOQK_Mw0LZzs-zi3YCkKkXQnBK0D3NlediPytwn4ky1TVD-5QMCYICO2ORKxnoDNXz0DZk8YZSlVkik1VzBqqE1gFk4KEEzW0F0zQPt9DNEtahf3B2YV4x4jn0l2I0VRH3C82dAgGXqoD8q_WgZGvJctZ0E_99RgscxQbN7TXVCmeq0-3yzrlvvVryTHocmYD6EDLdwgs-GaMbBXNeCpfrVPVJPixMhOj7owDl3QX7GbkFtpCw6tY0ysqMuLi6K-tvSOfwCCGbviAQscFaKlNcyvXrWKLfPPbpxDGCei1j-oY6AUkM6S9Y9v9EPMA1FfQhELv_fdI5B-3cNbFxgb9X7x3d92nbNCsihIf5NOr6SyT62nt-Y0yWNaPvOXWbxDiTABl3PA4Xk95SnR3LwDLuYGYSl_JRVxqcnuiVHfl1IzyGYk8WnQis2ykVpwacdpvdjL2I3-NzvST2wsx3x1ro8HRXinQ17UFDjkF8GootY5HlSNKJ3i922wA7hnEgHODA8jDDJkkHwzjR45LmWoFij4fJx2SBsyQELw0kfrPIfpNyv2aPtuITfH-tYndlg4HZyE88Gj6rJwrg
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 2c5182c656ab86c87aab57e9173150a7
f63829e033f8bda599350fd49adcd9fc74aeb6d1
9af4b1c4acff0e234dec9444a4b06b4b4d6a7e9029fe46ad6dc6fa0e28feaabe
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 09:30:51 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 18 Jan 2023 06:28:16 GMT
Expires: Wed, 25 Jan 2023 06:28:15 GMT
Etag: "f63829e033f8bda599350fd49adcd9fc74aeb6d1"
Cache-Control: max-age=593243,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78b65073ecfeb518-OSL
track.trackingtraffo.com/push/ic?auth=pz6u78&c=oUr-PQgPjyFpzd-i4r6VveKyYER0JwHARuILpg5tSP1DFl_queTfHGT5sJPA1PWd3OBjj6kreMFDzQU_h1EjZC0dZDBEVsdjeASLf8LxrbMMrkFO-EC4dbhutbZHk-3LNBU4Xgee6QW856M3IuQzMteA_KuiWLLJawbW8d4rVRTzX05I3CdS9ao7pb5sDQqOSLIcOqavSDmKXbmanuiKZD9fZgqdLBPyAY9FJ1-Wytti6uJNPkHshXBxAYKKgTnacE1IbOnJh2p1fMYNAsHnEP7uwXr64jscnct0qaqrBcJ7ZqHSUr6vD-PwV4foF2l7XyfwtbPh3dcTiOGHfVaup10G5PJRsdHwA-WC_GoltO5dA5av_vGqzKoXJd8ElIHnBfhtmS5uW-QAAD0PPJ4PNnQ5XHZ7tZ7n3WDZHaDZ7lFjFJbkHoxAs38OiBTtv2SfJNYBp3l3LmLGMXd4RPembEx7ZvplaqQVJp4YZzy83APm1LUVu5_Z5c2mjL5AM7sEcaLjg6A3rgu9oMbsQUkAPD2LEfepRkxe-MSzTC6t55oYheJr0hJCSHV3e6Ar6CgjO2VnI4Puqv_o6BtA8ipQCP2O2SmP6TtTFvbai2Xqm7LpcIsN
88.214.206.175302 Found 0 B URL HTTP/1.1 track.trackingtraffo.com/push/ic?auth=pz6u78&c=oUr-PQgPjyFpzd-i4r6VveKyYER0JwHARuILpg5tSP1DFl_queTfHGT5sJPA1PWd3OBjj6kreMFDzQU_h1EjZC0dZDBEVsdjeASLf8LxrbMMrkFO-EC4dbhutbZHk-3LNBU4Xgee6QW856M3IuQzMteA_KuiWLLJawbW8d4rVRTzX05I3CdS9ao7pb5sDQqOSLIcOqavSDmKXbmanuiKZD9fZgqdLBPyAY9FJ1-Wytti6uJNPkHshXBxAYKKgTnacE1IbOnJh2p1fMYNAsHnEP7uwXr64jscnct0qaqrBcJ7ZqHSUr6vD-PwV4foF2l7XyfwtbPh3dcTiOGHfVaup10G5PJRsdHwA-WC_GoltO5dA5av_vGqzKoXJd8ElIHnBfhtmS5uW-QAAD0PPJ4PNnQ5XHZ7tZ7n3WDZHaDZ7lFjFJbkHoxAs38OiBTtv2SfJNYBp3l3LmLGMXd4RPembEx7ZvplaqQVJp4YZzy83APm1LUVu5_Z5c2mjL5AM7sEcaLjg6A3rgu9oMbsQUkAPD2LEfepRkxe-MSzTC6t55oYheJr0hJCSHV3e6Ar6CgjO2VnI4Puqv_o6BtA8ipQCP2O2SmP6TtTFvbai2Xqm7LpcIsN
IP 88.214.206.175:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /push/ic?auth=pz6u78&c=oUr-PQgPjyFpzd-i4r6VveKyYER0JwHARuILpg5tSP1DFl_queTfHGT5sJPA1PWd3OBjj6kreMFDzQU_h1EjZC0dZDBEVsdjeASLf8LxrbMMrkFO-EC4dbhutbZHk-3LNBU4Xgee6QW856M3IuQzMteA_KuiWLLJawbW8d4rVRTzX05I3CdS9ao7pb5sDQqOSLIcOqavSDmKXbmanuiKZD9fZgqdLBPyAY9FJ1-Wytti6uJNPkHshXBxAYKKgTnacE1IbOnJh2p1fMYNAsHnEP7uwXr64jscnct0qaqrBcJ7ZqHSUr6vD-PwV4foF2l7XyfwtbPh3dcTiOGHfVaup10G5PJRsdHwA-WC_GoltO5dA5av_vGqzKoXJd8ElIHnBfhtmS5uW-QAAD0PPJ4PNnQ5XHZ7tZ7n3WDZHaDZ7lFjFJbkHoxAs38OiBTtv2SfJNYBp3l3LmLGMXd4RPembEx7ZvplaqQVJp4YZzy83APm1LUVu5_Z5c2mjL5AM7sEcaLjg6A3rgu9oMbsQUkAPD2LEfepRkxe-MSzTC6t55oYheJr0hJCSHV3e6Ar6CgjO2VnI4Puqv_o6BtA8ipQCP2O2SmP6TtTFvbai2Xqm7LpcIsN HTTP/1.1
Host: track.trackingtraffo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 18 Jan 2023 09:30:51 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Location: https://ads.trackingtraffo.com/creatives/k1qy286gxmd5g3dpr397nw5v/1659514995116-National Casino black.png
sn-us6.aceex.io/?ttpw=impres&prc=0.00079&crd=1134|31688a2f9069bff0164c427b7dc5a249&traf=bann&hh=ddba5e0dca0c0e32c115f0c76573a562
80.77.87.49200 OK 43 B URL HTTP/1.1 sn-us6.aceex.io/?ttpw=impres&prc=0.00079&crd=1134|31688a2f9069bff0164c427b7dc5a249&traf=bann&hh=ddba5e0dca0c0e32c115f0c76573a562
IP 80.77.87.49:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /?ttpw=impres&prc=0.00079&crd=1134|31688a2f9069bff0164c427b7dc5a249&traf=bann&hh=ddba5e0dca0c0e32c115f0c76573a562 HTTP/1.1
Host: sn-us6.aceex.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3963d6fe9c.201b418371.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Wed, 18 Jan 2023 09:30:51 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
track.trackingtraffo.com/push/im?auth=pz6u78&c=GXKoP9JzWLSQ_rPbQOAM8CedzO63FAIU3njUcZ6F2y_B0B_nFzHQao1bpxt0rUIm_lEW7xCJ7g0AY8nkLKtge5ULC7Q1YKnE7ePFtiiIRDFL1et-wCnS4B0G3b1QnnRLEWAhH2E9oZ4TOwWwPfvtyyGEoLyjxkWPbYiPZrniQjP9N0L40_YOOo8jdpTbQaMvfxDJKXucNZOxuuNF-4mxCAtjdDc9lgO2OwKQW1jDtMNWhy3bYa7sWSHeVSYOn-gjDb3cr_BemTVyUdJxhLWENbdSwtCd2T2Iloclw98VLBP8-JAkEueGr0ZTYJlD8_3_XL4Iw6XQdnmvUvSDnX4VOn70Q70YsZetDEj7qvNGXqSaTsoFvDNIJQuARLsH4EOJDLWPhJUmLSQe4t3pS5wZD9U7NztKwJrlAtR9VFHr6f3H5fMrVX5fQ5zjsFDiGqGVagYjgRnQDDqNiEvBM7e1dZ3zjmAjqgWktF59HAAaTSvNPzyiUz0YG602bQib3s6wTcpwnmQFJlCNTxqjydbkgTlWWYrHosJo_9t-uJozT_ul9aSq1xBGcNkqNiooh7TlMdj9kb6g12mjDKIxIcNC50v9IPjgwbllShVwgw
88.214.206.175302 Found 0 B URL HTTP/1.1 track.trackingtraffo.com/push/im?auth=pz6u78&c=GXKoP9JzWLSQ_rPbQOAM8CedzO63FAIU3njUcZ6F2y_B0B_nFzHQao1bpxt0rUIm_lEW7xCJ7g0AY8nkLKtge5ULC7Q1YKnE7ePFtiiIRDFL1et-wCnS4B0G3b1QnnRLEWAhH2E9oZ4TOwWwPfvtyyGEoLyjxkWPbYiPZrniQjP9N0L40_YOOo8jdpTbQaMvfxDJKXucNZOxuuNF-4mxCAtjdDc9lgO2OwKQW1jDtMNWhy3bYa7sWSHeVSYOn-gjDb3cr_BemTVyUdJxhLWENbdSwtCd2T2Iloclw98VLBP8-JAkEueGr0ZTYJlD8_3_XL4Iw6XQdnmvUvSDnX4VOn70Q70YsZetDEj7qvNGXqSaTsoFvDNIJQuARLsH4EOJDLWPhJUmLSQe4t3pS5wZD9U7NztKwJrlAtR9VFHr6f3H5fMrVX5fQ5zjsFDiGqGVagYjgRnQDDqNiEvBM7e1dZ3zjmAjqgWktF59HAAaTSvNPzyiUz0YG602bQib3s6wTcpwnmQFJlCNTxqjydbkgTlWWYrHosJo_9t-uJozT_ul9aSq1xBGcNkqNiooh7TlMdj9kb6g12mjDKIxIcNC50v9IPjgwbllShVwgw
IP 88.214.206.175:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /push/im?auth=pz6u78&c=GXKoP9JzWLSQ_rPbQOAM8CedzO63FAIU3njUcZ6F2y_B0B_nFzHQao1bpxt0rUIm_lEW7xCJ7g0AY8nkLKtge5ULC7Q1YKnE7ePFtiiIRDFL1et-wCnS4B0G3b1QnnRLEWAhH2E9oZ4TOwWwPfvtyyGEoLyjxkWPbYiPZrniQjP9N0L40_YOOo8jdpTbQaMvfxDJKXucNZOxuuNF-4mxCAtjdDc9lgO2OwKQW1jDtMNWhy3bYa7sWSHeVSYOn-gjDb3cr_BemTVyUdJxhLWENbdSwtCd2T2Iloclw98VLBP8-JAkEueGr0ZTYJlD8_3_XL4Iw6XQdnmvUvSDnX4VOn70Q70YsZetDEj7qvNGXqSaTsoFvDNIJQuARLsH4EOJDLWPhJUmLSQe4t3pS5wZD9U7NztKwJrlAtR9VFHr6f3H5fMrVX5fQ5zjsFDiGqGVagYjgRnQDDqNiEvBM7e1dZ3zjmAjqgWktF59HAAaTSvNPzyiUz0YG602bQib3s6wTcpwnmQFJlCNTxqjydbkgTlWWYrHosJo_9t-uJozT_ul9aSq1xBGcNkqNiooh7TlMdj9kb6g12mjDKIxIcNC50v9IPjgwbllShVwgw HTTP/1.1
Host: track.trackingtraffo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 18 Jan 2023 09:30:51 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Location: https://ads.trackingtraffo.com/creatives/k1qy286gxmd5g3dpr397nw5v/1659514995125-national-casino.png
ipv6.adrta.com/?callback=_1674034250452
44.240.194.87200 OK 0 B URL HTTP/2 ipv6.adrta.com/?callback=_1674034250452
IP 44.240.194.87:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?callback=_1674034250452 HTTP/1.1
Host: ipv6.adrta.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3963d6fe9c.201b418371.com/
Cookie: __aavi=14697071354566510293; __aavt=1674034250168; __aasi=14485482706031312353; __aast=1674034250168
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 18 Jan 2023 09:30:51 GMT
content-length: 0
server: nginx
X-Firefox-Spdy: h2
ads.trackingtraffo.com/creatives/k1qy286gxmd5g3dpr397nw5v/1659514995116-National%20Casino%20black.png
142.132.194.196200 OK 4.5 kB URL HTTP/1.1 ads.trackingtraffo.com/creatives/k1qy286gxmd5g3dpr397nw5v/1659514995116-National%20Casino%20black.png
IP 142.132.194.196:0
ASN #24940 Hetzner Online GmbH
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 58be17b22d6e1178a54c92cf862c817e
b821bc2f016751647df49e49863077e927a70322
9cc4f3f40313b08baf54c956685ac7a21ac8a3573908b9763865c6f613ce1b5f
GET /creatives/k1qy286gxmd5g3dpr397nw5v/1659514995116-National%20Casino%20black.png HTTP/1.1
Host: ads.trackingtraffo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 18 Jan 2023 09:30:51 GMT
Content-Type: image/png
Content-Length: 4456
Last-Modified: Wed, 03 Aug 2022 08:23:15 GMT
Connection: keep-alive
ETag: "62ea3073-1168"
Accept-Ranges: bytes
ads.trackingtraffo.com/creatives/k1qy286gxmd5g3dpr397nw5v/1659514995125-national-casino.png
142.132.194.196200 OK 4.6 kB URL HTTP/1.1 ads.trackingtraffo.com/creatives/k1qy286gxmd5g3dpr397nw5v/1659514995125-national-casino.png
IP 142.132.194.196:0
ASN #24940 Hetzner Online GmbH
File type PNG image data, 433 x 176, 8-bit colormap, non-interlaced\012- data
Hash edffdc6a4138205965ac7c1440fbfb50
9cff09cdfdc1e054c431e6cbf4c12e4ec681e601
83ff002a01d8c1668fc4a851cc3eb1c24b929c4aced7ff7eb32b9ae3711c7498
GET /creatives/k1qy286gxmd5g3dpr397nw5v/1659514995125-national-casino.png HTTP/1.1
Host: ads.trackingtraffo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 18 Jan 2023 09:30:51 GMT
Content-Type: image/png
Content-Length: 4596
Last-Modified: Wed, 03 Aug 2022 08:23:15 GMT
Connection: keep-alive
ETag: "62ea3073-11f4"
Accept-Ranges: bytes
track.trackingtraffo.com/push/im?auth=pz6u78&c=_YfcG4f3FqHIRSyrP39RM53ywBXtjmJJ0OERndapX1DtVmcVjDK09RRZfhwECKc3AAsWYjy-uKAoOqqT7RcVcpMp404dwop54hAuGqqXCB1MIHTooPWNNkkurPN-SaXMZKfbz91LsrqUetVk8fPyzI1Lefv-VoV8ZaIgcH5TXzn3rRrmxfohwTAydKTvPgJoh2bhgjmQOfnXpt1XsaR5ojoK_gkfuA0YhbrzVFEOvUCM9lPGxNBV4iWcEdWNdJGxINYS3vQMJmOkrXYdrOhyQkbe84a3bW9nGK_7ZQZmatWg-Z3j8aEQ5kaDyilwH2LKmEJDAcksMTq4A1K8ZWVxxoyO-VHE6k4J5joloJqMr-16Hgkxssw67Mh3lmuxu6W3xZN1y-w2jhu5mxBo9nBfAeU7JbzOXm58AQHX8I9eWPxlF-L046bQgHLPjm9JJuxCdCU5I68GYm--mQtYIueHgI4z0EeEOMHUZMP7cVsq7YwfzaVzG3r7bB6O9dpu8z_PCeWtV325CeuF8oDsVLXA32YO8Df6kAaqLaADccrKPB9hs_l3zpZpoL12v9lYM6AVllmeGVw2GQzCi1r9eMLK_qQHI-8QXJ-AElXnmw
88.214.206.175302 Found 0 B URL HTTP/1.1 track.trackingtraffo.com/push/im?auth=pz6u78&c=_YfcG4f3FqHIRSyrP39RM53ywBXtjmJJ0OERndapX1DtVmcVjDK09RRZfhwECKc3AAsWYjy-uKAoOqqT7RcVcpMp404dwop54hAuGqqXCB1MIHTooPWNNkkurPN-SaXMZKfbz91LsrqUetVk8fPyzI1Lefv-VoV8ZaIgcH5TXzn3rRrmxfohwTAydKTvPgJoh2bhgjmQOfnXpt1XsaR5ojoK_gkfuA0YhbrzVFEOvUCM9lPGxNBV4iWcEdWNdJGxINYS3vQMJmOkrXYdrOhyQkbe84a3bW9nGK_7ZQZmatWg-Z3j8aEQ5kaDyilwH2LKmEJDAcksMTq4A1K8ZWVxxoyO-VHE6k4J5joloJqMr-16Hgkxssw67Mh3lmuxu6W3xZN1y-w2jhu5mxBo9nBfAeU7JbzOXm58AQHX8I9eWPxlF-L046bQgHLPjm9JJuxCdCU5I68GYm--mQtYIueHgI4z0EeEOMHUZMP7cVsq7YwfzaVzG3r7bB6O9dpu8z_PCeWtV325CeuF8oDsVLXA32YO8Df6kAaqLaADccrKPB9hs_l3zpZpoL12v9lYM6AVllmeGVw2GQzCi1r9eMLK_qQHI-8QXJ-AElXnmw
IP 88.214.206.175:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /push/im?auth=pz6u78&c=_YfcG4f3FqHIRSyrP39RM53ywBXtjmJJ0OERndapX1DtVmcVjDK09RRZfhwECKc3AAsWYjy-uKAoOqqT7RcVcpMp404dwop54hAuGqqXCB1MIHTooPWNNkkurPN-SaXMZKfbz91LsrqUetVk8fPyzI1Lefv-VoV8ZaIgcH5TXzn3rRrmxfohwTAydKTvPgJoh2bhgjmQOfnXpt1XsaR5ojoK_gkfuA0YhbrzVFEOvUCM9lPGxNBV4iWcEdWNdJGxINYS3vQMJmOkrXYdrOhyQkbe84a3bW9nGK_7ZQZmatWg-Z3j8aEQ5kaDyilwH2LKmEJDAcksMTq4A1K8ZWVxxoyO-VHE6k4J5joloJqMr-16Hgkxssw67Mh3lmuxu6W3xZN1y-w2jhu5mxBo9nBfAeU7JbzOXm58AQHX8I9eWPxlF-L046bQgHLPjm9JJuxCdCU5I68GYm--mQtYIueHgI4z0EeEOMHUZMP7cVsq7YwfzaVzG3r7bB6O9dpu8z_PCeWtV325CeuF8oDsVLXA32YO8Df6kAaqLaADccrKPB9hs_l3zpZpoL12v9lYM6AVllmeGVw2GQzCi1r9eMLK_qQHI-8QXJ-AElXnmw HTTP/1.1
Host: track.trackingtraffo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 18 Jan 2023 09:30:51 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Location: https://ads.trackingtraffo.com/creatives/k1qy286gxmd5g3dpr397nw5v/1659514995125-national-casino.png
track.primerclicks.com/push/ic?auth=5grf6p&c=dilR8bNl9_S-Nd0VHll2i48XMa-G0BRDWwhwy8yan4meFpd3LP_ZFacSjLqci1HFV1L0sReZYVeEBFXVrNCTGrhZPzAM9CLOLniKMTyh5C9z64T0hbipTgfgkjbgsvpz0SFhFy0O-4aEnbBThtY-9iyHKzVdCnB-vsSOQHcAqqNkJjha5dDtu0ieaINO32DiTB5c4-Bt0hC2U-Lf3HrYeAczlwDUo9xmvzcjxnDxkguG2jbM6NSOP3A8ai3aBlH4RRXAQzyyE0Z4dWKN--cwx9Mg3-0GEOzHGaAhRXBmL1-khYhxkVB1vE_KvAvo5wjYtGE55HhMZOc8xKyT_AeTNMi30txmqiUYPUNM6dLrkpjZlmHZYSBa_do-w_HGVOkwP-rzFeIEEmADNlkkni2X2J8swVTLWocaP2T8QxuLip2OLseVQ7FHDWfms17hRIFI7uyRgl4VOx8VYyXGOmjh0-382jWgLedsCb9vHvkGwN_fRHzLPclV7dHegDENkw7cFBLtGE1VJvDRKeN7zLBsL4Z7YW7lcvcVcIvZ7u-4VFQUkiAXNjBH2UBlz7R2AhAiUGfJYVp-HN9fI2bYsc2Ihq7dY2cGHfi14b4DQ_Lgx-yALFk2IrUT6RFOZGUSp5jQsqn-iN-S-KAV9kbxzCaNh4BDpnd46mxvW37zovvxHYbB3ISZ2-1e7eUovASsDJByde8UGjJvtoHVNYyOOaYYYkhyVts98JwdovtIeKqZ5aVpj60kRioE1KfVEvKwsL0PZDBSDRKea36X787oi9o8b4kuUYxANM8XNf5kjcIsWKBVUsToczpsLLAVyuu0Skk3QRCYJmIQOvaIqMkb4c6-mX5BeGXaMwcvjucuuyGAPZMMqoygFC_ckdzoI2iDoGV5A_PmPG6dRcjuXUsdIJwsB_CoPM80AeCtsTMMTG7QXqmpIhuUxOHlD47ALXKFK2ubb-PIylr5FLYxuS_-0UyQd73aBkrMrBge6fnJdFyfBfS_pxlLdIt0hM2oMi_Rr5JcTzaS7hUOSsoFwrtIJm5NNWHEDGCqkAO2klH8abMihkpoHrS_p8kHvrC_yXOPfC-im2IxSCgdnVFcSqFkMIv05udmJT_fbyprg1E43qcGzeE7FJaIWbmtnGNrWU0HR8wotb2cZ6ylbCcXHW4oot6T4QnBBzAzOZ1so8QvJs_Qdg_d82RyegiGruZy3_AWosZMfZUsVpu2QVHQtlF53301dd88OWgAE2b1SXLGoNDqhOnRMS7Whp1Y3JwEwNWy-_q8J69yHyqVEoQm5Lnb62sJJpLfXm5RJI6hgrsongdAzVNxzJMggurFiJGJ5MygCJoAV8zjZ7hWcuKJDtXDiVn7_T40FF-wch0sYTJ5i1VJVj_VhVdYGNvASDTCGaViv3yfH_F9uQkCffzzOY7MeKsQkOHLFs6YMQ8TdSvk3LXCZlbqzquRvP17mFCRLGsixvLnKafm6G-PuKyPYOSmdM3UCwx5N__wfEuZYPsXGry1VJOodRYgUZ4P7Q
88.214.195.83302 Found 0 B URL HTTP/1.1 track.primerclicks.com/push/ic?auth=5grf6p&c=dilR8bNl9_S-Nd0VHll2i48XMa-G0BRDWwhwy8yan4meFpd3LP_ZFacSjLqci1HFV1L0sReZYVeEBFXVrNCTGrhZPzAM9CLOLniKMTyh5C9z64T0hbipTgfgkjbgsvpz0SFhFy0O-4aEnbBThtY-9iyHKzVdCnB-vsSOQHcAqqNkJjha5dDtu0ieaINO32DiTB5c4-Bt0hC2U-Lf3HrYeAczlwDUo9xmvzcjxnDxkguG2jbM6NSOP3A8ai3aBlH4RRXAQzyyE0Z4dWKN--cwx9Mg3-0GEOzHGaAhRXBmL1-khYhxkVB1vE_KvAvo5wjYtGE55HhMZOc8xKyT_AeTNMi30txmqiUYPUNM6dLrkpjZlmHZYSBa_do-w_HGVOkwP-rzFeIEEmADNlkkni2X2J8swVTLWocaP2T8QxuLip2OLseVQ7FHDWfms17hRIFI7uyRgl4VOx8VYyXGOmjh0-382jWgLedsCb9vHvkGwN_fRHzLPclV7dHegDENkw7cFBLtGE1VJvDRKeN7zLBsL4Z7YW7lcvcVcIvZ7u-4VFQUkiAXNjBH2UBlz7R2AhAiUGfJYVp-HN9fI2bYsc2Ihq7dY2cGHfi14b4DQ_Lgx-yALFk2IrUT6RFOZGUSp5jQsqn-iN-S-KAV9kbxzCaNh4BDpnd46mxvW37zovvxHYbB3ISZ2-1e7eUovASsDJByde8UGjJvtoHVNYyOOaYYYkhyVts98JwdovtIeKqZ5aVpj60kRioE1KfVEvKwsL0PZDBSDRKea36X787oi9o8b4kuUYxANM8XNf5kjcIsWKBVUsToczpsLLAVyuu0Skk3QRCYJmIQOvaIqMkb4c6-mX5BeGXaMwcvjucuuyGAPZMMqoygFC_ckdzoI2iDoGV5A_PmPG6dRcjuXUsdIJwsB_CoPM80AeCtsTMMTG7QXqmpIhuUxOHlD47ALXKFK2ubb-PIylr5FLYxuS_-0UyQd73aBkrMrBge6fnJdFyfBfS_pxlLdIt0hM2oMi_Rr5JcTzaS7hUOSsoFwrtIJm5NNWHEDGCqkAO2klH8abMihkpoHrS_p8kHvrC_yXOPfC-im2IxSCgdnVFcSqFkMIv05udmJT_fbyprg1E43qcGzeE7FJaIWbmtnGNrWU0HR8wotb2cZ6ylbCcXHW4oot6T4QnBBzAzOZ1so8QvJs_Qdg_d82RyegiGruZy3_AWosZMfZUsVpu2QVHQtlF53301dd88OWgAE2b1SXLGoNDqhOnRMS7Whp1Y3JwEwNWy-_q8J69yHyqVEoQm5Lnb62sJJpLfXm5RJI6hgrsongdAzVNxzJMggurFiJGJ5MygCJoAV8zjZ7hWcuKJDtXDiVn7_T40FF-wch0sYTJ5i1VJVj_VhVdYGNvASDTCGaViv3yfH_F9uQkCffzzOY7MeKsQkOHLFs6YMQ8TdSvk3LXCZlbqzquRvP17mFCRLGsixvLnKafm6G-PuKyPYOSmdM3UCwx5N__wfEuZYPsXGry1VJOodRYgUZ4P7Q
IP 88.214.195.83:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /push/ic?auth=5grf6p&c=dilR8bNl9_S-Nd0VHll2i48XMa-G0BRDWwhwy8yan4meFpd3LP_ZFacSjLqci1HFV1L0sReZYVeEBFXVrNCTGrhZPzAM9CLOLniKMTyh5C9z64T0hbipTgfgkjbgsvpz0SFhFy0O-4aEnbBThtY-9iyHKzVdCnB-vsSOQHcAqqNkJjha5dDtu0ieaINO32DiTB5c4-Bt0hC2U-Lf3HrYeAczlwDUo9xmvzcjxnDxkguG2jbM6NSOP3A8ai3aBlH4RRXAQzyyE0Z4dWKN--cwx9Mg3-0GEOzHGaAhRXBmL1-khYhxkVB1vE_KvAvo5wjYtGE55HhMZOc8xKyT_AeTNMi30txmqiUYPUNM6dLrkpjZlmHZYSBa_do-w_HGVOkwP-rzFeIEEmADNlkkni2X2J8swVTLWocaP2T8QxuLip2OLseVQ7FHDWfms17hRIFI7uyRgl4VOx8VYyXGOmjh0-382jWgLedsCb9vHvkGwN_fRHzLPclV7dHegDENkw7cFBLtGE1VJvDRKeN7zLBsL4Z7YW7lcvcVcIvZ7u-4VFQUkiAXNjBH2UBlz7R2AhAiUGfJYVp-HN9fI2bYsc2Ihq7dY2cGHfi14b4DQ_Lgx-yALFk2IrUT6RFOZGUSp5jQsqn-iN-S-KAV9kbxzCaNh4BDpnd46mxvW37zovvxHYbB3ISZ2-1e7eUovASsDJByde8UGjJvtoHVNYyOOaYYYkhyVts98JwdovtIeKqZ5aVpj60kRioE1KfVEvKwsL0PZDBSDRKea36X787oi9o8b4kuUYxANM8XNf5kjcIsWKBVUsToczpsLLAVyuu0Skk3QRCYJmIQOvaIqMkb4c6-mX5BeGXaMwcvjucuuyGAPZMMqoygFC_ckdzoI2iDoGV5A_PmPG6dRcjuXUsdIJwsB_CoPM80AeCtsTMMTG7QXqmpIhuUxOHlD47ALXKFK2ubb-PIylr5FLYxuS_-0UyQd73aBkrMrBge6fnJdFyfBfS_pxlLdIt0hM2oMi_Rr5JcTzaS7hUOSsoFwrtIJm5NNWHEDGCqkAO2klH8abMihkpoHrS_p8kHvrC_yXOPfC-im2IxSCgdnVFcSqFkMIv05udmJT_fbyprg1E43qcGzeE7FJaIWbmtnGNrWU0HR8wotb2cZ6ylbCcXHW4oot6T4QnBBzAzOZ1so8QvJs_Qdg_d82RyegiGruZy3_AWosZMfZUsVpu2QVHQtlF53301dd88OWgAE2b1SXLGoNDqhOnRMS7Whp1Y3JwEwNWy-_q8J69yHyqVEoQm5Lnb62sJJpLfXm5RJI6hgrsongdAzVNxzJMggurFiJGJ5MygCJoAV8zjZ7hWcuKJDtXDiVn7_T40FF-wch0sYTJ5i1VJVj_VhVdYGNvASDTCGaViv3yfH_F9uQkCffzzOY7MeKsQkOHLFs6YMQ8TdSvk3LXCZlbqzquRvP17mFCRLGsixvLnKafm6G-PuKyPYOSmdM3UCwx5N__wfEuZYPsXGry1VJOodRYgUZ4P7Q HTTP/1.1
Host: track.primerclicks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.20.0
Date: Wed, 18 Jan 2023 09:30:51 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Location: https://us.freshpops.net/metrics/save.img?event=impressions&bid-id=v2-1674034249365-7-9429-1178228-ae708a06-d4d5-3a0e-d8fb-141d73bc06ce&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fic%3Fauth%3Dpz6u78%26c%3DPQRTlPVZ4dHKtIjSixkBrEkkKeDi5jD6U77beNGMdDH1OAdD5fMlSaq9hcLcTQ4IKzeFIQOwLnUunL_cgmy8D45H7ADjLcsNR3kg2uVoEe3Jynxq8h-GuGICyNZ8F9VpE0Vb5kamko5vQo3MUVdIZgpxJqDmztuqUW1vV2hfbjBRspTstuZ2lDVCVufq4S5O-TvjIwMRio4v16k8Ln1vV-bIwl_hYKMaGGlBGRO1983lg40BR9V839rWDclEa-o6mWsBSAXV-o7nwbs-A8pJTQuu0W-nfa09VEC-1gbLvdNpl4c8Kkt1MAAaMnCW9QRNPOgnFQIJw42uB7T45sLIpwx-NQEbj-Tt7oXWMKubP3KWc71zSHeMgpHMzuuF-r5ZUZTrOizidVKHmlZlzXrM0pSEjH9GqiJ3VaJsR5K5zzsgDwAEIc2_td2IAhNU58tPgmyMVXxb__Z7-fJvukdKo_wCbouSW91M1Ea7mYzt-ZeExBOs8coFEa1NGQEfMNKrM9p5bQ8qXoLEVTO0P5lyZktitLY2u7cVYzofqhDz6bq_ngKiRiJHZBd24aFK_4OcJkC1gOVcWIYeKlENc4nQh4A0C8m_Pr76BO3tqd6dmOkIk5EV
track.trackingtraffo.com/push/ic?auth=pz6u78&c=on_I_t2pMV2XjeTmkpRGlD2PUClnwMecEoLvRFSiIkzzIYW8-ClI1Uts6gSgDcpvBdwNJYnXkN-NWJUOk85GiC0nFJzy5sEGaN8eNTXI3rIHASoZwsYyQDU2QvyIum9PLysYbpizVgJN-CXUlt6EkSl5dsaH2Bjj7nP97l0x5V-cHc6F3Mwo63dgMff5SxvtkzDGsOCyx1xgp_klIYrwevuXpYg8YeWn9ccElpe8dswABHnWHTSfFWIsIFTRXCreVZPva2XrKRtF-CEG58kicrZeJ3r5GnpwZYud6e_tI1pssUC7wiS6xHfSKHk4t4_TpLB2mkflASzabx-eaOFute_yUqggz1ZFbAyyKES8qLLkJtLLWqhXgSy6QsCTiyBne17EioeMGi-Rn9hXVxLA8TvkLf-85qZuzxSaEv14SU9pb-X5gxLoxePtol2-8ovOT30MXG4K3173njYq346N3EjIGekmJgg5o9ZY17Lh2PFJ9OM5Dj0yubfIHDL9LHQXlgffv0yi4fSziSTpx07etUWW4B0DZRLy4juBkr0CDWKLuk5S-jc6rqjXYoJTDnAJ1dzctWVrolW4UXaSf_-IpAjpPNuUPvq7c5F_qaM4OofaNOE8
88.214.206.175302 Found 0 B URL HTTP/1.1 track.trackingtraffo.com/push/ic?auth=pz6u78&c=on_I_t2pMV2XjeTmkpRGlD2PUClnwMecEoLvRFSiIkzzIYW8-ClI1Uts6gSgDcpvBdwNJYnXkN-NWJUOk85GiC0nFJzy5sEGaN8eNTXI3rIHASoZwsYyQDU2QvyIum9PLysYbpizVgJN-CXUlt6EkSl5dsaH2Bjj7nP97l0x5V-cHc6F3Mwo63dgMff5SxvtkzDGsOCyx1xgp_klIYrwevuXpYg8YeWn9ccElpe8dswABHnWHTSfFWIsIFTRXCreVZPva2XrKRtF-CEG58kicrZeJ3r5GnpwZYud6e_tI1pssUC7wiS6xHfSKHk4t4_TpLB2mkflASzabx-eaOFute_yUqggz1ZFbAyyKES8qLLkJtLLWqhXgSy6QsCTiyBne17EioeMGi-Rn9hXVxLA8TvkLf-85qZuzxSaEv14SU9pb-X5gxLoxePtol2-8ovOT30MXG4K3173njYq346N3EjIGekmJgg5o9ZY17Lh2PFJ9OM5Dj0yubfIHDL9LHQXlgffv0yi4fSziSTpx07etUWW4B0DZRLy4juBkr0CDWKLuk5S-jc6rqjXYoJTDnAJ1dzctWVrolW4UXaSf_-IpAjpPNuUPvq7c5F_qaM4OofaNOE8
IP 88.214.206.175:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /push/ic?auth=pz6u78&c=on_I_t2pMV2XjeTmkpRGlD2PUClnwMecEoLvRFSiIkzzIYW8-ClI1Uts6gSgDcpvBdwNJYnXkN-NWJUOk85GiC0nFJzy5sEGaN8eNTXI3rIHASoZwsYyQDU2QvyIum9PLysYbpizVgJN-CXUlt6EkSl5dsaH2Bjj7nP97l0x5V-cHc6F3Mwo63dgMff5SxvtkzDGsOCyx1xgp_klIYrwevuXpYg8YeWn9ccElpe8dswABHnWHTSfFWIsIFTRXCreVZPva2XrKRtF-CEG58kicrZeJ3r5GnpwZYud6e_tI1pssUC7wiS6xHfSKHk4t4_TpLB2mkflASzabx-eaOFute_yUqggz1ZFbAyyKES8qLLkJtLLWqhXgSy6QsCTiyBne17EioeMGi-Rn9hXVxLA8TvkLf-85qZuzxSaEv14SU9pb-X5gxLoxePtol2-8ovOT30MXG4K3173njYq346N3EjIGekmJgg5o9ZY17Lh2PFJ9OM5Dj0yubfIHDL9LHQXlgffv0yi4fSziSTpx07etUWW4B0DZRLy4juBkr0CDWKLuk5S-jc6rqjXYoJTDnAJ1dzctWVrolW4UXaSf_-IpAjpPNuUPvq7c5F_qaM4OofaNOE8 HTTP/1.1
Host: track.trackingtraffo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 18 Jan 2023 09:30:51 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Location: https://ads.trackingtraffo.com/creatives/k1qy286gxmd5g3dpr397nw5v/1659514995116-National Casino black.png
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 0cba2f4872944fe37819d4c3b2549384
b58fdc72892ece6d1a3c913d1840c7bc8d7b329b
e958c93c4b804b798e124c8726e15d91ec6451ed43dd869c2c44aa34cd9187f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E958C93C4B804B798E124C8726E15D91EC6451ED43DD869C2C44AA34CD9187F9"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7237
Expires: Wed, 18 Jan 2023 11:31:28 GMT
Date: Wed, 18 Jan 2023 09:30:51 GMT
Connection: keep-alive
us.freshpops.net/metrics/save.img?event=tracked_impressions&bid-id=v2-1674034249365-7-9429-1178228-ae708a06-d4d5-3a0e-d8fb-141d73bc06ce&price=0&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fim%3Fauth%3Dpz6u78%26c%3D6pYV8f1Nf0nWnUvdTDvMtyaeyOQK_Mw0LZzs-zi3YCkKkXQnBK0D3NlediPytwn4ky1TVD-5QMCYICO2ORKxnoDNXz0DZk8YZSlVkik1VzBqqE1gFk4KEEzW0F0zQPt9DNEtahf3B2YV4x4jn0l2I0VRH3C82dAgGXqoD8q_WgZGvJctZ0E_99RgscxQbN7TXVCmeq0-3yzrlvvVryTHocmYD6EDLdwgs-GaMbBXNeCpfrVPVJPixMhOj7owDl3QX7GbkFtpCw6tY0ysqMuLi6K-tvSOfwCCGbviAQscFaKlNcyvXrWKLfPPbpxDGCei1j-oY6AUkM6S9Y9v9EPMA1FfQhELv_fdI5B-3cNbFxgb9X7x3d92nbNCsihIf5NOr6SyT62nt-Y0yWNaPvOXWbxDiTABl3PA4Xk95SnR3LwDLuYGYSl_JRVxqcnuiVHfl1IzyGYk8WnQis2ykVpwacdpvdjL2I3-NzvST2wsx3x1ro8HRXinQ17UFDjkF8GootY5HlSNKJ3i922wA7hnEgHODA8jDDJkkHwzjR45LmWoFij4fJx2SBsyQELw0kfrPIfpNyv2aPtuITfH-tYndlg4HZyE88Gj6rJwrg
38.100.129.10302 Found 0 B URL HTTP/2 us.freshpops.net/metrics/save.img?event=tracked_impressions&bid-id=v2-1674034249365-7-9429-1178228-ae708a06-d4d5-3a0e-d8fb-141d73bc06ce&price=0&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fim%3Fauth%3Dpz6u78%26c%3D6pYV8f1Nf0nWnUvdTDvMtyaeyOQK_Mw0LZzs-zi3YCkKkXQnBK0D3NlediPytwn4ky1TVD-5QMCYICO2ORKxnoDNXz0DZk8YZSlVkik1VzBqqE1gFk4KEEzW0F0zQPt9DNEtahf3B2YV4x4jn0l2I0VRH3C82dAgGXqoD8q_WgZGvJctZ0E_99RgscxQbN7TXVCmeq0-3yzrlvvVryTHocmYD6EDLdwgs-GaMbBXNeCpfrVPVJPixMhOj7owDl3QX7GbkFtpCw6tY0ysqMuLi6K-tvSOfwCCGbviAQscFaKlNcyvXrWKLfPPbpxDGCei1j-oY6AUkM6S9Y9v9EPMA1FfQhELv_fdI5B-3cNbFxgb9X7x3d92nbNCsihIf5NOr6SyT62nt-Y0yWNaPvOXWbxDiTABl3PA4Xk95SnR3LwDLuYGYSl_JRVxqcnuiVHfl1IzyGYk8WnQis2ykVpwacdpvdjL2I3-NzvST2wsx3x1ro8HRXinQ17UFDjkF8GootY5HlSNKJ3i922wA7hnEgHODA8jDDJkkHwzjR45LmWoFij4fJx2SBsyQELw0kfrPIfpNyv2aPtuITfH-tYndlg4HZyE88Gj6rJwrg
IP 38.100.129.10:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /metrics/save.img?event=tracked_impressions&bid-id=v2-1674034249365-7-9429-1178228-ae708a06-d4d5-3a0e-d8fb-141d73bc06ce&price=0&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fim%3Fauth%3Dpz6u78%26c%3D6pYV8f1Nf0nWnUvdTDvMtyaeyOQK_Mw0LZzs-zi3YCkKkXQnBK0D3NlediPytwn4ky1TVD-5QMCYICO2ORKxnoDNXz0DZk8YZSlVkik1VzBqqE1gFk4KEEzW0F0zQPt9DNEtahf3B2YV4x4jn0l2I0VRH3C82dAgGXqoD8q_WgZGvJctZ0E_99RgscxQbN7TXVCmeq0-3yzrlvvVryTHocmYD6EDLdwgs-GaMbBXNeCpfrVPVJPixMhOj7owDl3QX7GbkFtpCw6tY0ysqMuLi6K-tvSOfwCCGbviAQscFaKlNcyvXrWKLfPPbpxDGCei1j-oY6AUkM6S9Y9v9EPMA1FfQhELv_fdI5B-3cNbFxgb9X7x3d92nbNCsihIf5NOr6SyT62nt-Y0yWNaPvOXWbxDiTABl3PA4Xk95SnR3LwDLuYGYSl_JRVxqcnuiVHfl1IzyGYk8WnQis2ykVpwacdpvdjL2I3-NzvST2wsx3x1ro8HRXinQ17UFDjkF8GootY5HlSNKJ3i922wA7hnEgHODA8jDDJkkHwzjR45LmWoFij4fJx2SBsyQELw0kfrPIfpNyv2aPtuITfH-tYndlg4HZyE88Gj6rJwrg HTTP/1.1
Host: us.freshpops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: openresty/1.15.8.3
date: Wed, 18 Jan 2023 09:30:51 GMT
content-length: 0
set-cookie: user_id=fdd077d6-505a-19fb-c282-e432c730528c
location: https://track.trackingtraffo.com/push/im?auth=pz6u78&c=6pYV8f1Nf0nWnUvdTDvMtyaeyOQK_Mw0LZzs-zi3YCkKkXQnBK0D3NlediPytwn4ky1TVD-5QMCYICO2ORKxnoDNXz0DZk8YZSlVkik1VzBqqE1gFk4KEEzW0F0zQPt9DNEtahf3B2YV4x4jn0l2I0VRH3C82dAgGXqoD8q_WgZGvJctZ0E_99RgscxQbN7TXVCmeq0-3yzrlvvVryTHocmYD6EDLdwgs-GaMbBXNeCpfrVPVJPixMhOj7owDl3QX7GbkFtpCw6tY0ysqMuLi6K-tvSOfwCCGbviAQscFaKlNcyvXrWKLfPPbpxDGCei1j-oY6AUkM6S9Y9v9EPMA1FfQhELv_fdI5B-3cNbFxgb9X7x3d92nbNCsihIf5NOr6SyT62nt-Y0yWNaPvOXWbxDiTABl3PA4Xk95SnR3LwDLuYGYSl_JRVxqcnuiVHfl1IzyGYk8WnQis2ykVpwacdpvdjL2I3-NzvST2wsx3x1ro8HRXinQ17UFDjkF8GootY5HlSNKJ3i922wA7hnEgHODA8jDDJkkHwzjR45LmWoFij4fJx2SBsyQELw0kfrPIfpNyv2aPtuITfH-tYndlg4HZyE88Gj6rJwrg
X-Firefox-Spdy: h2
track.trackingtraffo.com/push/im?auth=pz6u78&c=6pYV8f1Nf0nWnUvdTDvMtyaeyOQK_Mw0LZzs-zi3YCkKkXQnBK0D3NlediPytwn4ky1TVD-5QMCYICO2ORKxnoDNXz0DZk8YZSlVkik1VzBqqE1gFk4KEEzW0F0zQPt9DNEtahf3B2YV4x4jn0l2I0VRH3C82dAgGXqoD8q_WgZGvJctZ0E_99RgscxQbN7TXVCmeq0-3yzrlvvVryTHocmYD6EDLdwgs-GaMbBXNeCpfrVPVJPixMhOj7owDl3QX7GbkFtpCw6tY0ysqMuLi6K-tvSOfwCCGbviAQscFaKlNcyvXrWKLfPPbpxDGCei1j-oY6AUkM6S9Y9v9EPMA1FfQhELv_fdI5B-3cNbFxgb9X7x3d92nbNCsihIf5NOr6SyT62nt-Y0yWNaPvOXWbxDiTABl3PA4Xk95SnR3LwDLuYGYSl_JRVxqcnuiVHfl1IzyGYk8WnQis2ykVpwacdpvdjL2I3-NzvST2wsx3x1ro8HRXinQ17UFDjkF8GootY5HlSNKJ3i922wA7hnEgHODA8jDDJkkHwzjR45LmWoFij4fJx2SBsyQELw0kfrPIfpNyv2aPtuITfH-tYndlg4HZyE88Gj6rJwrg
88.214.206.175302 Found 0 B URL HTTP/1.1 track.trackingtraffo.com/push/im?auth=pz6u78&c=6pYV8f1Nf0nWnUvdTDvMtyaeyOQK_Mw0LZzs-zi3YCkKkXQnBK0D3NlediPytwn4ky1TVD-5QMCYICO2ORKxnoDNXz0DZk8YZSlVkik1VzBqqE1gFk4KEEzW0F0zQPt9DNEtahf3B2YV4x4jn0l2I0VRH3C82dAgGXqoD8q_WgZGvJctZ0E_99RgscxQbN7TXVCmeq0-3yzrlvvVryTHocmYD6EDLdwgs-GaMbBXNeCpfrVPVJPixMhOj7owDl3QX7GbkFtpCw6tY0ysqMuLi6K-tvSOfwCCGbviAQscFaKlNcyvXrWKLfPPbpxDGCei1j-oY6AUkM6S9Y9v9EPMA1FfQhELv_fdI5B-3cNbFxgb9X7x3d92nbNCsihIf5NOr6SyT62nt-Y0yWNaPvOXWbxDiTABl3PA4Xk95SnR3LwDLuYGYSl_JRVxqcnuiVHfl1IzyGYk8WnQis2ykVpwacdpvdjL2I3-NzvST2wsx3x1ro8HRXinQ17UFDjkF8GootY5HlSNKJ3i922wA7hnEgHODA8jDDJkkHwzjR45LmWoFij4fJx2SBsyQELw0kfrPIfpNyv2aPtuITfH-tYndlg4HZyE88Gj6rJwrg
IP 88.214.206.175:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /push/im?auth=pz6u78&c=6pYV8f1Nf0nWnUvdTDvMtyaeyOQK_Mw0LZzs-zi3YCkKkXQnBK0D3NlediPytwn4ky1TVD-5QMCYICO2ORKxnoDNXz0DZk8YZSlVkik1VzBqqE1gFk4KEEzW0F0zQPt9DNEtahf3B2YV4x4jn0l2I0VRH3C82dAgGXqoD8q_WgZGvJctZ0E_99RgscxQbN7TXVCmeq0-3yzrlvvVryTHocmYD6EDLdwgs-GaMbBXNeCpfrVPVJPixMhOj7owDl3QX7GbkFtpCw6tY0ysqMuLi6K-tvSOfwCCGbviAQscFaKlNcyvXrWKLfPPbpxDGCei1j-oY6AUkM6S9Y9v9EPMA1FfQhELv_fdI5B-3cNbFxgb9X7x3d92nbNCsihIf5NOr6SyT62nt-Y0yWNaPvOXWbxDiTABl3PA4Xk95SnR3LwDLuYGYSl_JRVxqcnuiVHfl1IzyGYk8WnQis2ykVpwacdpvdjL2I3-NzvST2wsx3x1ro8HRXinQ17UFDjkF8GootY5HlSNKJ3i922wA7hnEgHODA8jDDJkkHwzjR45LmWoFij4fJx2SBsyQELw0kfrPIfpNyv2aPtuITfH-tYndlg4HZyE88Gj6rJwrg HTTP/1.1
Host: track.trackingtraffo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 18 Jan 2023 09:30:51 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Location: https://ads.trackingtraffo.com/creatives/k1qy286gxmd5g3dpr397nw5v/1659515047166-national-casino.png
ads.trackingtraffo.com/creatives/k1qy286gxmd5g3dpr397nw5v/1659515047166-national-casino.png
142.132.194.196200 OK 4.6 kB URL HTTP/1.1 ads.trackingtraffo.com/creatives/k1qy286gxmd5g3dpr397nw5v/1659515047166-national-casino.png
IP 142.132.194.196:0
ASN #24940 Hetzner Online GmbH
File type PNG image data, 433 x 176, 8-bit colormap, non-interlaced\012- data
Hash edffdc6a4138205965ac7c1440fbfb50
9cff09cdfdc1e054c431e6cbf4c12e4ec681e601
83ff002a01d8c1668fc4a851cc3eb1c24b929c4aced7ff7eb32b9ae3711c7498
GET /creatives/k1qy286gxmd5g3dpr397nw5v/1659515047166-national-casino.png HTTP/1.1
Host: ads.trackingtraffo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 18 Jan 2023 09:30:51 GMT
Content-Type: image/png
Content-Length: 4596
Last-Modified: Wed, 03 Aug 2022 08:24:07 GMT
Connection: keep-alive
ETag: "62ea30a7-11f4"
Accept-Ranges: bytes
us.freshpops.net/metrics/save.img?event=impressions&bid-id=v2-1674034249365-7-9429-1178228-ae708a06-d4d5-3a0e-d8fb-141d73bc06ce&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fic%3Fauth%3Dpz6u78%26c%3DPQRTlPVZ4dHKtIjSixkBrEkkKeDi5jD6U77beNGMdDH1OAdD5fMlSaq9hcLcTQ4IKzeFIQOwLnUunL_cgmy8D45H7ADjLcsNR3kg2uVoEe3Jynxq8h-GuGICyNZ8F9VpE0Vb5kamko5vQo3MUVdIZgpxJqDmztuqUW1vV2hfbjBRspTstuZ2lDVCVufq4S5O-TvjIwMRio4v16k8Ln1vV-bIwl_hYKMaGGlBGRO1983lg40BR9V839rWDclEa-o6mWsBSAXV-o7nwbs-A8pJTQuu0W-nfa09VEC-1gbLvdNpl4c8Kkt1MAAaMnCW9QRNPOgnFQIJw42uB7T45sLIpwx-NQEbj-Tt7oXWMKubP3KWc71zSHeMgpHMzuuF-r5ZUZTrOizidVKHmlZlzXrM0pSEjH9GqiJ3VaJsR5K5zzsgDwAEIc2_td2IAhNU58tPgmyMVXxb__Z7-fJvukdKo_wCbouSW91M1Ea7mYzt-ZeExBOs8coFEa1NGQEfMNKrM9p5bQ8qXoLEVTO0P5lyZktitLY2u7cVYzofqhDz6bq_ngKiRiJHZBd24aFK_4OcJkC1gOVcWIYeKlENc4nQh4A0C8m_Pr76BO3tqd6dmOkIk5EV
38.100.129.10302 Found 0 B URL HTTP/2 us.freshpops.net/metrics/save.img?event=impressions&bid-id=v2-1674034249365-7-9429-1178228-ae708a06-d4d5-3a0e-d8fb-141d73bc06ce&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fic%3Fauth%3Dpz6u78%26c%3DPQRTlPVZ4dHKtIjSixkBrEkkKeDi5jD6U77beNGMdDH1OAdD5fMlSaq9hcLcTQ4IKzeFIQOwLnUunL_cgmy8D45H7ADjLcsNR3kg2uVoEe3Jynxq8h-GuGICyNZ8F9VpE0Vb5kamko5vQo3MUVdIZgpxJqDmztuqUW1vV2hfbjBRspTstuZ2lDVCVufq4S5O-TvjIwMRio4v16k8Ln1vV-bIwl_hYKMaGGlBGRO1983lg40BR9V839rWDclEa-o6mWsBSAXV-o7nwbs-A8pJTQuu0W-nfa09VEC-1gbLvdNpl4c8Kkt1MAAaMnCW9QRNPOgnFQIJw42uB7T45sLIpwx-NQEbj-Tt7oXWMKubP3KWc71zSHeMgpHMzuuF-r5ZUZTrOizidVKHmlZlzXrM0pSEjH9GqiJ3VaJsR5K5zzsgDwAEIc2_td2IAhNU58tPgmyMVXxb__Z7-fJvukdKo_wCbouSW91M1Ea7mYzt-ZeExBOs8coFEa1NGQEfMNKrM9p5bQ8qXoLEVTO0P5lyZktitLY2u7cVYzofqhDz6bq_ngKiRiJHZBd24aFK_4OcJkC1gOVcWIYeKlENc4nQh4A0C8m_Pr76BO3tqd6dmOkIk5EV
IP 38.100.129.10:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /metrics/save.img?event=impressions&bid-id=v2-1674034249365-7-9429-1178228-ae708a06-d4d5-3a0e-d8fb-141d73bc06ce&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fic%3Fauth%3Dpz6u78%26c%3DPQRTlPVZ4dHKtIjSixkBrEkkKeDi5jD6U77beNGMdDH1OAdD5fMlSaq9hcLcTQ4IKzeFIQOwLnUunL_cgmy8D45H7ADjLcsNR3kg2uVoEe3Jynxq8h-GuGICyNZ8F9VpE0Vb5kamko5vQo3MUVdIZgpxJqDmztuqUW1vV2hfbjBRspTstuZ2lDVCVufq4S5O-TvjIwMRio4v16k8Ln1vV-bIwl_hYKMaGGlBGRO1983lg40BR9V839rWDclEa-o6mWsBSAXV-o7nwbs-A8pJTQuu0W-nfa09VEC-1gbLvdNpl4c8Kkt1MAAaMnCW9QRNPOgnFQIJw42uB7T45sLIpwx-NQEbj-Tt7oXWMKubP3KWc71zSHeMgpHMzuuF-r5ZUZTrOizidVKHmlZlzXrM0pSEjH9GqiJ3VaJsR5K5zzsgDwAEIc2_td2IAhNU58tPgmyMVXxb__Z7-fJvukdKo_wCbouSW91M1Ea7mYzt-ZeExBOs8coFEa1NGQEfMNKrM9p5bQ8qXoLEVTO0P5lyZktitLY2u7cVYzofqhDz6bq_ngKiRiJHZBd24aFK_4OcJkC1gOVcWIYeKlENc4nQh4A0C8m_Pr76BO3tqd6dmOkIk5EV HTTP/1.1
Host: us.freshpops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: openresty/1.15.8.3
date: Wed, 18 Jan 2023 09:30:51 GMT
content-length: 0
location: https://track.trackingtraffo.com/push/ic?auth=pz6u78&c=PQRTlPVZ4dHKtIjSixkBrEkkKeDi5jD6U77beNGMdDH1OAdD5fMlSaq9hcLcTQ4IKzeFIQOwLnUunL_cgmy8D45H7ADjLcsNR3kg2uVoEe3Jynxq8h-GuGICyNZ8F9VpE0Vb5kamko5vQo3MUVdIZgpxJqDmztuqUW1vV2hfbjBRspTstuZ2lDVCVufq4S5O-TvjIwMRio4v16k8Ln1vV-bIwl_hYKMaGGlBGRO1983lg40BR9V839rWDclEa-o6mWsBSAXV-o7nwbs-A8pJTQuu0W-nfa09VEC-1gbLvdNpl4c8Kkt1MAAaMnCW9QRNPOgnFQIJw42uB7T45sLIpwx-NQEbj-Tt7oXWMKubP3KWc71zSHeMgpHMzuuF-r5ZUZTrOizidVKHmlZlzXrM0pSEjH9GqiJ3VaJsR5K5zzsgDwAEIc2_td2IAhNU58tPgmyMVXxb__Z7-fJvukdKo_wCbouSW91M1Ea7mYzt-ZeExBOs8coFEa1NGQEfMNKrM9p5bQ8qXoLEVTO0P5lyZktitLY2u7cVYzofqhDz6bq_ngKiRiJHZBd24aFK_4OcJkC1gOVcWIYeKlENc4nQh4A0C8m_Pr76BO3tqd6dmOkIk5EV
X-Firefox-Spdy: h2
track.trackingtraffo.com/push/ic?auth=pz6u78&c=PQRTlPVZ4dHKtIjSixkBrEkkKeDi5jD6U77beNGMdDH1OAdD5fMlSaq9hcLcTQ4IKzeFIQOwLnUunL_cgmy8D45H7ADjLcsNR3kg2uVoEe3Jynxq8h-GuGICyNZ8F9VpE0Vb5kamko5vQo3MUVdIZgpxJqDmztuqUW1vV2hfbjBRspTstuZ2lDVCVufq4S5O-TvjIwMRio4v16k8Ln1vV-bIwl_hYKMaGGlBGRO1983lg40BR9V839rWDclEa-o6mWsBSAXV-o7nwbs-A8pJTQuu0W-nfa09VEC-1gbLvdNpl4c8Kkt1MAAaMnCW9QRNPOgnFQIJw42uB7T45sLIpwx-NQEbj-Tt7oXWMKubP3KWc71zSHeMgpHMzuuF-r5ZUZTrOizidVKHmlZlzXrM0pSEjH9GqiJ3VaJsR5K5zzsgDwAEIc2_td2IAhNU58tPgmyMVXxb__Z7-fJvukdKo_wCbouSW91M1Ea7mYzt-ZeExBOs8coFEa1NGQEfMNKrM9p5bQ8qXoLEVTO0P5lyZktitLY2u7cVYzofqhDz6bq_ngKiRiJHZBd24aFK_4OcJkC1gOVcWIYeKlENc4nQh4A0C8m_Pr76BO3tqd6dmOkIk5EV
88.214.206.175302 Found 0 B URL HTTP/1.1 track.trackingtraffo.com/push/ic?auth=pz6u78&c=PQRTlPVZ4dHKtIjSixkBrEkkKeDi5jD6U77beNGMdDH1OAdD5fMlSaq9hcLcTQ4IKzeFIQOwLnUunL_cgmy8D45H7ADjLcsNR3kg2uVoEe3Jynxq8h-GuGICyNZ8F9VpE0Vb5kamko5vQo3MUVdIZgpxJqDmztuqUW1vV2hfbjBRspTstuZ2lDVCVufq4S5O-TvjIwMRio4v16k8Ln1vV-bIwl_hYKMaGGlBGRO1983lg40BR9V839rWDclEa-o6mWsBSAXV-o7nwbs-A8pJTQuu0W-nfa09VEC-1gbLvdNpl4c8Kkt1MAAaMnCW9QRNPOgnFQIJw42uB7T45sLIpwx-NQEbj-Tt7oXWMKubP3KWc71zSHeMgpHMzuuF-r5ZUZTrOizidVKHmlZlzXrM0pSEjH9GqiJ3VaJsR5K5zzsgDwAEIc2_td2IAhNU58tPgmyMVXxb__Z7-fJvukdKo_wCbouSW91M1Ea7mYzt-ZeExBOs8coFEa1NGQEfMNKrM9p5bQ8qXoLEVTO0P5lyZktitLY2u7cVYzofqhDz6bq_ngKiRiJHZBd24aFK_4OcJkC1gOVcWIYeKlENc4nQh4A0C8m_Pr76BO3tqd6dmOkIk5EV
IP 88.214.206.175:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /push/ic?auth=pz6u78&c=PQRTlPVZ4dHKtIjSixkBrEkkKeDi5jD6U77beNGMdDH1OAdD5fMlSaq9hcLcTQ4IKzeFIQOwLnUunL_cgmy8D45H7ADjLcsNR3kg2uVoEe3Jynxq8h-GuGICyNZ8F9VpE0Vb5kamko5vQo3MUVdIZgpxJqDmztuqUW1vV2hfbjBRspTstuZ2lDVCVufq4S5O-TvjIwMRio4v16k8Ln1vV-bIwl_hYKMaGGlBGRO1983lg40BR9V839rWDclEa-o6mWsBSAXV-o7nwbs-A8pJTQuu0W-nfa09VEC-1gbLvdNpl4c8Kkt1MAAaMnCW9QRNPOgnFQIJw42uB7T45sLIpwx-NQEbj-Tt7oXWMKubP3KWc71zSHeMgpHMzuuF-r5ZUZTrOizidVKHmlZlzXrM0pSEjH9GqiJ3VaJsR5K5zzsgDwAEIc2_td2IAhNU58tPgmyMVXxb__Z7-fJvukdKo_wCbouSW91M1Ea7mYzt-ZeExBOs8coFEa1NGQEfMNKrM9p5bQ8qXoLEVTO0P5lyZktitLY2u7cVYzofqhDz6bq_ngKiRiJHZBd24aFK_4OcJkC1gOVcWIYeKlENc4nQh4A0C8m_Pr76BO3tqd6dmOkIk5EV HTTP/1.1
Host: track.trackingtraffo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 18 Jan 2023 09:30:51 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Location: https://ads.trackingtraffo.com/creatives/k1qy286gxmd5g3dpr397nw5v/1659515047164-National Casino black.png
ads.trackingtraffo.com/creatives/k1qy286gxmd5g3dpr397nw5v/1659515047164-National%20Casino%20black.png
142.132.194.196200 OK 4.5 kB URL HTTP/1.1 ads.trackingtraffo.com/creatives/k1qy286gxmd5g3dpr397nw5v/1659515047164-National%20Casino%20black.png
IP 142.132.194.196:0
ASN #24940 Hetzner Online GmbH
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 58be17b22d6e1178a54c92cf862c817e
b821bc2f016751647df49e49863077e927a70322
9cc4f3f40313b08baf54c956685ac7a21ac8a3573908b9763865c6f613ce1b5f
GET /creatives/k1qy286gxmd5g3dpr397nw5v/1659515047164-National%20Casino%20black.png HTTP/1.1
Host: ads.trackingtraffo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 18 Jan 2023 09:30:51 GMT
Content-Type: image/png
Content-Length: 4456
Last-Modified: Wed, 03 Aug 2022 08:24:07 GMT
Connection: keep-alive
ETag: "62ea30a7-1168"
Accept-Ranges: bytes
3963d6fe9c.201b418371.com/get/?go=1&data=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
116.202.60.158302 Found 0 B URL HTTP/2 3963d6fe9c.201b418371.com/get/?go=1&data=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
IP 116.202.60.158:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /get/?go=1&data=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 HTTP/1.1
Host: 3963d6fe9c.201b418371.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://everydaysubjects.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Wed, 18 Jan 2023 09:30:52 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://rtbrennab.com/banner/in/show/?mid=1871992458681999070&pid=0&site=42968&sc=NO&usage_type=&subid=1117578092&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=everydaysubjects.com&hostname=auc-banner-hz-5&site_id=0&spot_id=42968&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB1&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=45.77960009098576&ml=&tag_ab=b&ttl=&space_id=1695&banner_width=1&banner_height=1&accel=0&gyr=0&iabcat=IAB1&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D42968%26source%3D1117578092%26idzone%3D0%26w%3D1%26h%3D1%26mo%3D%26ve%3D%26site_id%3D42968%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DHow%252CTo%252CPrepare%252CFor%252CYour%252CExam%252CEveryDaySubjects%252CYou%27ve%252Cbeen%252Cstudying%252Cand%252Cpreparing%252Cfor%252Cyour%252Cupcoming%252Cexam%252Call%252Csemester%252Cright%252CWell%252Cnow%252Cit%27s%252Ctime%252Cto%252Cput%252Cin%252Cthe%252Ceffort%252Cto%252Cdo%252Cwell.%2C%26spot_id%3D42968%26p%3Dhttps%253A%252F%252Feverydaysubjects.com%252Feducation%252Fhow-to-prepare-for-your-exam%252F%26katds_labels%3D4%2C5%2C6%2C7%2C8%2C9%2C46%2C47%2C54%2C55%2C61%2C109%26btype%3D0%26score%3D45.77960009098576%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=How%2CTo%2CPrepare%2CFor%2CYour%2CExam%2CEveryDaySubjects%2CYou've%2Cbeen%2Cstudying%2Cand%2Cpreparing%2Cfor%2Cyour%2Cupcoming%2Cexam%2Call%2Csemester%2Cright%2CWell%2Cnow%2Cit's%2Ctime%2Cto%2Cput%2Cin%2Cthe%2Ceffort%2Cto%2Cdo%2Cwell.,&stratagem=nlabel-a&ssp=3972
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=1871992458681999070&pid=0&site=42968&sc=NO&usage_type=&subid=1117578092&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=everydaysubjects.com&hostname=auc-banner-hz-5&site_id=0&spot_id=42968&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB1&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=45.77960009098576&ml=&tag_ab=b&ttl=&space_id=1695&banner_width=1&banner_height=1&accel=0&gyr=0&iabcat=IAB1&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D42968%26source%3D1117578092%26idzone%3D0%26w%3D1%26h%3D1%26mo%3D%26ve%3D%26site_id%3D42968%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DHow%252CTo%252CPrepare%252CFor%252CYour%252CExam%252CEveryDaySubjects%252CYou%27ve%252Cbeen%252Cstudying%252Cand%252Cpreparing%252Cfor%252Cyour%252Cupcoming%252Cexam%252Call%252Csemester%252Cright%252CWell%252Cnow%252Cit%27s%252Ctime%252Cto%252Cput%252Cin%252Cthe%252Ceffort%252Cto%252Cdo%252Cwell.%2C%26spot_id%3D42968%26p%3Dhttps%253A%252F%252Feverydaysubjects.com%252Feducation%252Fhow-to-prepare-for-your-exam%252F%26katds_labels%3D4%2C5%2C6%2C7%2C8%2C9%2C46%2C47%2C54%2C55%2C61%2C109%26btype%3D0%26score%3D45.77960009098576%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=How%2CTo%2CPrepare%2CFor%2CYour%2CExam%2CEveryDaySubjects%2CYou%27ve%2Cbeen%2Cstudying%2Cand%2Cpreparing%2Cfor%2Cyour%2Cupcoming%2Cexam%2Call%2Csemester%2Cright%2CWell%2Cnow%2Cit%27s%2Ctime%2Cto%2Cput%2Cin%2Cthe%2Ceffort%2Cto%2Cdo%2Cwell.,&stratagem=nlabel-a&ssp=3972
162.55.139.130302 Found 0 B URL HTTP/2 rtbrennab.com/banner/in/show/?mid=1871992458681999070&pid=0&site=42968&sc=NO&usage_type=&subid=1117578092&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=everydaysubjects.com&hostname=auc-banner-hz-5&site_id=0&spot_id=42968&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB1&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=45.77960009098576&ml=&tag_ab=b&ttl=&space_id=1695&banner_width=1&banner_height=1&accel=0&gyr=0&iabcat=IAB1&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D42968%26source%3D1117578092%26idzone%3D0%26w%3D1%26h%3D1%26mo%3D%26ve%3D%26site_id%3D42968%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DHow%252CTo%252CPrepare%252CFor%252CYour%252CExam%252CEveryDaySubjects%252CYou%27ve%252Cbeen%252Cstudying%252Cand%252Cpreparing%252Cfor%252Cyour%252Cupcoming%252Cexam%252Call%252Csemester%252Cright%252CWell%252Cnow%252Cit%27s%252Ctime%252Cto%252Cput%252Cin%252Cthe%252Ceffort%252Cto%252Cdo%252Cwell.%2C%26spot_id%3D42968%26p%3Dhttps%253A%252F%252Feverydaysubjects.com%252Feducation%252Fhow-to-prepare-for-your-exam%252F%26katds_labels%3D4%2C5%2C6%2C7%2C8%2C9%2C46%2C47%2C54%2C55%2C61%2C109%26btype%3D0%26score%3D45.77960009098576%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=How%2CTo%2CPrepare%2CFor%2CYour%2CExam%2CEveryDaySubjects%2CYou%27ve%2Cbeen%2Cstudying%2Cand%2Cpreparing%2Cfor%2Cyour%2Cupcoming%2Cexam%2Call%2Csemester%2Cright%2CWell%2Cnow%2Cit%27s%2Ctime%2Cto%2Cput%2Cin%2Cthe%2Ceffort%2Cto%2Cdo%2Cwell.,&stratagem=nlabel-a&ssp=3972
IP 162.55.139.130:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=1871992458681999070&pid=0&site=42968&sc=NO&usage_type=&subid=1117578092&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=everydaysubjects.com&hostname=auc-banner-hz-5&site_id=0&spot_id=42968&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB1&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=45.77960009098576&ml=&tag_ab=b&ttl=&space_id=1695&banner_width=1&banner_height=1&accel=0&gyr=0&iabcat=IAB1&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D42968%26source%3D1117578092%26idzone%3D0%26w%3D1%26h%3D1%26mo%3D%26ve%3D%26site_id%3D42968%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DHow%252CTo%252CPrepare%252CFor%252CYour%252CExam%252CEveryDaySubjects%252CYou%27ve%252Cbeen%252Cstudying%252Cand%252Cpreparing%252Cfor%252Cyour%252Cupcoming%252Cexam%252Call%252Csemester%252Cright%252CWell%252Cnow%252Cit%27s%252Ctime%252Cto%252Cput%252Cin%252Cthe%252Ceffort%252Cto%252Cdo%252Cwell.%2C%26spot_id%3D42968%26p%3Dhttps%253A%252F%252Feverydaysubjects.com%252Feducation%252Fhow-to-prepare-for-your-exam%252F%26katds_labels%3D4%2C5%2C6%2C7%2C8%2C9%2C46%2C47%2C54%2C55%2C61%2C109%26btype%3D0%26score%3D45.77960009098576%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=How%2CTo%2CPrepare%2CFor%2CYour%2CExam%2CEveryDaySubjects%2CYou%27ve%2Cbeen%2Cstudying%2Cand%2Cpreparing%2Cfor%2Cyour%2Cupcoming%2Cexam%2Call%2Csemester%2Cright%2CWell%2Cnow%2Cit%27s%2Ctime%2Cto%2Cput%2Cin%2Cthe%2Ceffort%2Cto%2Cdo%2Cwell.,&stratagem=nlabel-a&ssp=3972 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://everydaysubjects.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.16.0
date: Wed, 18 Jan 2023 09:30:52 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://btds.zog.link/in/912/?sid=42968&source=1117578092&idzone=0&w=1&h=1&mo=&ve=&site_id=42968&utm1=&utm2=&utm3=&utm4=&ad_tags=How%2CTo%2CPrepare%2CFor%2CYour%2CExam%2CEveryDaySubjects%2CYou've%2Cbeen%2Cstudying%2Cand%2Cpreparing%2Cfor%2Cyour%2Cupcoming%2Cexam%2Call%2Csemester%2Cright%2CWell%2Cnow%2Cit's%2Ctime%2Cto%2Cput%2Cin%2Cthe%2Ceffort%2Cto%2Cdo%2Cwell.,&spot_id=42968&p=https%3A%2F%2Feverydaysubjects.com%2Feducation%2Fhow-to-prepare-for-your-exam%2F&katds_labels=4,5,6,7,8,9,46,47,54,55,61,109&btype=0&score=45.77960009098576&bf=0.0001
X-Firefox-Spdy: h2
ocsp.godaddy.com/
192.124.249.22200 OK 1.8 kB IP 192.124.249.22:0
Hash fa69d7859819908a0da8f72d12bc37fb
e266b5f9d5cb3ea59f81b35ad8c27d187a742a0d
84d469ea53e31d7f1ed81d414810ee53d91af48ec4b4f63d4a0d72bada340e12
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 18 Jan 2023 09:30:52 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 17 Jan 2023 21:05:20 GMT
Expires: Wed, 18 Jan 2023 21:05:20 GMT
ETag: "e266b5f9d5cb3ea59f81b35ad8c27d187a742a0d"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
btds.zog.link/in/912/?sid=42968&source=1117578092&idzone=0&w=1&h=1&mo=&ve=&site_id=42968&utm1=&utm2=&utm3=&utm4=&ad_tags=How%2CTo%2CPrepare%2CFor%2CYour%2CExam%2CEveryDaySubjects%2CYou%27ve%2Cbeen%2Cstudying%2Cand%2Cpreparing%2Cfor%2Cyour%2Cupcoming%2Cexam%2Call%2Csemester%2Cright%2CWell%2Cnow%2Cit%27s%2Ctime%2Cto%2Cput%2Cin%2Cthe%2Ceffort%2Cto%2Cdo%2Cwell.,&spot_id=42968&p=https%3A%2F%2Feverydaysubjects.com%2Feducation%2Fhow-to-prepare-for-your-exam%2F&katds_labels=4,5,6,7,8,9,46,47,54,55,61,109&btype=0&score=45.77960009098576&bf=0.0001
109.206.175.85302 Found 0 B URL HTTP/2 btds.zog.link/in/912/?sid=42968&source=1117578092&idzone=0&w=1&h=1&mo=&ve=&site_id=42968&utm1=&utm2=&utm3=&utm4=&ad_tags=How%2CTo%2CPrepare%2CFor%2CYour%2CExam%2CEveryDaySubjects%2CYou%27ve%2Cbeen%2Cstudying%2Cand%2Cpreparing%2Cfor%2Cyour%2Cupcoming%2Cexam%2Call%2Csemester%2Cright%2CWell%2Cnow%2Cit%27s%2Ctime%2Cto%2Cput%2Cin%2Cthe%2Ceffort%2Cto%2Cdo%2Cwell.,&spot_id=42968&p=https%3A%2F%2Feverydaysubjects.com%2Feducation%2Fhow-to-prepare-for-your-exam%2F&katds_labels=4,5,6,7,8,9,46,47,54,55,61,109&btype=0&score=45.77960009098576&bf=0.0001
IP 109.206.175.85:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/912/?sid=42968&source=1117578092&idzone=0&w=1&h=1&mo=&ve=&site_id=42968&utm1=&utm2=&utm3=&utm4=&ad_tags=How%2CTo%2CPrepare%2CFor%2CYour%2CExam%2CEveryDaySubjects%2CYou%27ve%2Cbeen%2Cstudying%2Cand%2Cpreparing%2Cfor%2Cyour%2Cupcoming%2Cexam%2Call%2Csemester%2Cright%2CWell%2Cnow%2Cit%27s%2Ctime%2Cto%2Cput%2Cin%2Cthe%2Ceffort%2Cto%2Cdo%2Cwell.,&spot_id=42968&p=https%3A%2F%2Feverydaysubjects.com%2Feducation%2Fhow-to-prepare-for-your-exam%2F&katds_labels=4,5,6,7,8,9,46,47,54,55,61,109&btype=0&score=45.77960009098576&bf=0.0001 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://everydaysubjects.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.20.1
date: Wed, 18 Jan 2023 09:30:52 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://cdn.1vag.com/1x1.png
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
vary: *
set-cookie: 912.0=1; expires=Thu, 19 Jan 2023 09:30:52 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 7ac025a8a1bb7b83516822833ac38205
cd1677eeb7fafb9a87487e278af0041b44151432
8b62a7464cf6e4dc399d1c759ae629c648e9539fcc936346cf01ae255eea8cfc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B62A7464CF6E4DC399D1C759AE629C648E9539FCC936346CF01AE255EEA8CFC"
Last-Modified: Mon, 16 Jan 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11499
Expires: Wed, 18 Jan 2023 12:42:31 GMT
Date: Wed, 18 Jan 2023 09:30:52 GMT
Connection: keep-alive
cdn.1vag.com/1x1.png
45.133.44.25200 OK 68 B IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /1x1.png HTTP/1.1
Host: cdn.1vag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://everydaysubjects.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 18 Jan 2023 09:30:52 GMT
content-type: image/png
content-length: 68
server: nginx/1.20.1
last-modified: Wed, 15 Apr 2020 13:30:15 GMT
etag: "5e970c67-44"
cache-control: max-age=3600
x-request-id: e0cea73041c202c45e6ab3a8b14597f5
expires: Wed, 18 Jan 2023 10:30:52 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Ubuntu%3A300%2C400%2C400i%2C700%7CPlayfair+Display&ver=6.1.1
142.250.74.106200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Ubuntu%3A300%2C400%2C400i%2C700%7CPlayfair+Display&ver=6.1.1
IP 142.250.74.106:0
GET /css?family=Ubuntu%3A300%2C400%2C400i%2C700%7CPlayfair+Display&ver=6.1.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://everydaysubjects.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 18 Jan 2023 09:30:47 GMT
date: Wed, 18 Jan 2023 09:30:47 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
js.wpadmngr.com/static/adManager.m.js
45.133.44.25200 OK 0 B URL HTTP/2 js.wpadmngr.com/static/adManager.m.js
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
GET /static/adManager.m.js HTTP/1.1
Host: js.wpadmngr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://everydaysubjects.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 09:30:47 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Fri, 13 Jan 2023 14:07:40 GMT
etag: W/"63c165ac-188ee"
content-encoding: gzip
expires: Wed, 18 Jan 2023 09:35:47 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
js.cabnnr.com/banner-admanager/build.m.js
45.133.44.25200 OK 0 B URL HTTP/2 js.cabnnr.com/banner-admanager/build.m.js
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
GET /banner-admanager/build.m.js HTTP/1.1
Host: js.cabnnr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://everydaysubjects.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 18 Jan 2023 09:30:48 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 06 Dec 2022 14:48:02 GMT
etag: W/"638f5622-d077"
content-encoding: gzip
expires: Wed, 18 Jan 2023 09:35:48 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
q.adrta.com/s/gta/aa.js?cb=9493e5c13c26ea71f9b99da2d91498f9
52.0.192.14200 OK 0 B URL HTTP/2 q.adrta.com/s/gta/aa.js?cb=9493e5c13c26ea71f9b99da2d91498f9
IP 52.0.192.14:0
GET /s/gta/aa.js?cb=9493e5c13c26ea71f9b99da2d91498f9 HTTP/1.1
Host: q.adrta.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3963d6fe9c.201b418371.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 18 Jan 2023 09:30:50 GMT
content-type: application/javascript; charset=utf-8
server: nginx
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
set-cookie: __aavi=14697071354566510293; Max-Age=62899200; Domain=adrta.com; Path=/; Expires=Wed, 15 Jan 2025 09:30:50 GMT; Secure; SameSite=None
__aavt=1674034250168; Max-Age=62899200; Domain=adrta.com; Path=/; Expires=Wed, 15 Jan 2025 09:30:50 GMT; Secure; SameSite=None
__aasi=14485482706031312353; Domain=adrta.com; Path=/; Secure; SameSite=None
__aast=1674034250168; Domain=adrta.com; Path=/; Secure; SameSite=None
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
adrta.com/i?cb=41856007&__aasv=22.111&__aaii=4137103520931786374&__aait=1674034250279&__aavz=0&__aaib=0&__aaai=1&__aaaa=0&__aafl=0&__aaaf=0&__aaag=0&__aahd=%7B%22plugin%22%3A1%7D&__aaax=0&__aaay=0&__aapf=0&__aaec=2&__aaup=1&__aaae=0&__aaat=0&__aaav=0&__aaas=0&__aaah=0&__aaph=0&__aapw=0&__aapc=0&__aap1=0&__aap2=0&__aap3=0&__aap4=0&__aap5=0&__aass=1280x1024&__aacb=9493e5c13c26ea71f9b99da2d91498f9&__aaxf=91.90.42.154%2C%2010.1.6.183&__aaci=gta&paid=gta&avid=1134&caid=4977700&plid=71151156&publisherId=176751&siteId=20ca77a90180&priceBid=0.00079&kv1=300x250&kv3=f81d80af9cbeb0011316fbba3da8002b32251f7a&kv4=91.90.42.154&kv5=a&kv6=everydaysubjects.com&kv7=cranberry&kv10=Blix%20Solutions&kv11=73463833876c03175d3a&kv12=adzone_1499&kv15=NOR&kv16=59.905&kv17=10.7487&kv18=null&kv19=null&kv23=Blix%20Solutions&kv24=Desktop_banner&kv25=everydaysubjects.com&kv26=Windows&kv27=Mozilla/5.0%20(Windows%20NT%2010.0&%20Win64&%20x64&%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&kv28={{DEVICE_MAKE}}_{{DEVICE_MODEL}}&kv2=everydaysubjects.com&__aapu=https%3A%2F%2F3963d6fe9c.201b418371.com%2Fget%2F&__aapr=https%3A%2F%2Feverydaysubjects.com%2F
35.173.68.75200 OK 0 B URL HTTP/2 adrta.com/i?cb=41856007&__aasv=22.111&__aaii=4137103520931786374&__aait=1674034250279&__aavz=0&__aaib=0&__aaai=1&__aaaa=0&__aafl=0&__aaaf=0&__aaag=0&__aahd=%7B%22plugin%22%3A1%7D&__aaax=0&__aaay=0&__aapf=0&__aaec=2&__aaup=1&__aaae=0&__aaat=0&__aaav=0&__aaas=0&__aaah=0&__aaph=0&__aapw=0&__aapc=0&__aap1=0&__aap2=0&__aap3=0&__aap4=0&__aap5=0&__aass=1280x1024&__aacb=9493e5c13c26ea71f9b99da2d91498f9&__aaxf=91.90.42.154%2C%2010.1.6.183&__aaci=gta&paid=gta&avid=1134&caid=4977700&plid=71151156&publisherId=176751&siteId=20ca77a90180&priceBid=0.00079&kv1=300x250&kv3=f81d80af9cbeb0011316fbba3da8002b32251f7a&kv4=91.90.42.154&kv5=a&kv6=everydaysubjects.com&kv7=cranberry&kv10=Blix%20Solutions&kv11=73463833876c03175d3a&kv12=adzone_1499&kv15=NOR&kv16=59.905&kv17=10.7487&kv18=null&kv19=null&kv23=Blix%20Solutions&kv24=Desktop_banner&kv25=everydaysubjects.com&kv26=Windows&kv27=Mozilla/5.0%20(Windows%20NT%2010.0&%20Win64&%20x64&%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&kv28={{DEVICE_MAKE}}_{{DEVICE_MODEL}}&kv2=everydaysubjects.com&__aapu=https%3A%2F%2F3963d6fe9c.201b418371.com%2Fget%2F&__aapr=https%3A%2F%2Feverydaysubjects.com%2F
IP 35.173.68.75:0
GET /i?cb=41856007&__aasv=22.111&__aaii=4137103520931786374&__aait=1674034250279&__aavz=0&__aaib=0&__aaai=1&__aaaa=0&__aafl=0&__aaaf=0&__aaag=0&__aahd=%7B%22plugin%22%3A1%7D&__aaax=0&__aaay=0&__aapf=0&__aaec=2&__aaup=1&__aaae=0&__aaat=0&__aaav=0&__aaas=0&__aaah=0&__aaph=0&__aapw=0&__aapc=0&__aap1=0&__aap2=0&__aap3=0&__aap4=0&__aap5=0&__aass=1280x1024&__aacb=9493e5c13c26ea71f9b99da2d91498f9&__aaxf=91.90.42.154%2C%2010.1.6.183&__aaci=gta&paid=gta&avid=1134&caid=4977700&plid=71151156&publisherId=176751&siteId=20ca77a90180&priceBid=0.00079&kv1=300x250&kv3=f81d80af9cbeb0011316fbba3da8002b32251f7a&kv4=91.90.42.154&kv5=a&kv6=everydaysubjects.com&kv7=cranberry&kv10=Blix%20Solutions&kv11=73463833876c03175d3a&kv12=adzone_1499&kv15=NOR&kv16=59.905&kv17=10.7487&kv18=null&kv19=null&kv23=Blix%20Solutions&kv24=Desktop_banner&kv25=everydaysubjects.com&kv26=Windows&kv27=Mozilla/5.0%20(Windows%20NT%2010.0&%20Win64&%20x64&%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&kv28={{DEVICE_MAKE}}_{{DEVICE_MODEL}}&kv2=everydaysubjects.com&__aapu=https%3A%2F%2F3963d6fe9c.201b418371.com%2Fget%2F&__aapr=https%3A%2F%2Feverydaysubjects.com%2F HTTP/1.1
Host: adrta.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3963d6fe9c.201b418371.com/
Cookie: __aavi=14697071354566510293; __aavt=1674034250168; __aasi=14485482706031312353; __aast=1674034250168
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 18 Jan 2023 09:30:50 GMT
content-type: text/javascript;charset=ISO-8859-1
server: nginx
pragma: no-cache
cache-control: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
js.wpushsdk.com/npc/sdk/wpu/csub.m.js
45.133.44.24200 OK 0 B URL HTTP/2 js.wpushsdk.com/npc/sdk/wpu/csub.m.js
IP 45.133.44.24:0
ASN #39572 DataWeb Global Group B.V.
GET /npc/sdk/wpu/csub.m.js HTTP/1.1
Host: js.wpushsdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://everydaysubjects.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 18 Jan 2023 09:30:48 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Wed, 07 Dec 2022 08:28:22 GMT
etag: W/"63904ea6-16019"
content-encoding: gzip
expires: Wed, 18 Jan 2023 09:35:48 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2