urlquery - report: snlg-glo.echopriority.com/t/clk

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
so-glo.yoptv33.com (1)	0	2022-06-02 19:12:53 UTC	2022-09-27 15:39:11 UTC	52.58.131.39	Unknown ranking
img-getpocket.cdn.mozilla.net (7)	1631	2017-09-01 03:40:57 UTC	2022-09-29 04:10:37 UTC	34.120.237.76
go.redanemone.xyz (2)	72592	2020-01-16 10:48:25 UTC	2022-09-29 04:49:43 UTC	198.134.116.30
r3.o.lencr.org (11)	344	2020-12-02 08:52:13 UTC	2022-09-28 04:36:09 UTC	23.36.77.32
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03 12:26:46 UTC	2022-09-29 05:03:41 UTC	143.204.55.49
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2022-09-28 04:36:06 UTC	34.117.237.239
snlg-glo.echopriority.com (1)	0	2022-06-03 08:29:24 UTC	2022-09-29 08:06:06 UTC	3.71.126.115	Unknown ranking
ocsp.sca1b.amazontrust.com (1)	1015	2017-03-03 15:20:51 UTC	2019-03-27 04:05:54 UTC	143.204.42.165
ocsp.godaddy.com (1)	698	2012-05-20 19:28:57 UTC	2022-09-29 04:12:12 UTC	192.124.249.24
go.monetizer.mobi (6)	0	2016-04-21 22:02:55 UTC	2022-09-29 04:38:55 UTC	198.143.165.221	Unknown ranking
www.wewillserv.com (3)	277919	2022-01-13 13:49:54 UTC	2022-09-28 18:15:23 UTC	51.68.82.147
admoustache.go2affise.com (1)	84756	2017-05-04 20:13:42 UTC	2022-09-28 18:15:23 UTC	34.147.1.177
t3.hightid.com (1)	0	2022-08-03 13:42:14 UTC	2022-09-28 18:18:02 UTC	51.161.115.163	Unknown ranking
myofferplus.com (1)	0	2016-05-08 22:20:02 UTC	2022-09-28 18:18:02 UTC	172.67.217.200	Unknown ranking
firefox.settings.services.mozilla.com (2)	867	2020-05-28 17:26:30 UTC	2022-09-29 05:05:36 UTC	143.204.55.36
push.services.mozilla.com (1)	2140	2015-09-03 10:29:36 UTC	2022-09-28 05:02:28 UTC	54.70.239.215
cdn.addlnk.com (1)	246074	2020-10-20 09:38:38 UTC	2022-09-28 18:18:02 UTC	172.67.191.221
ocsp.digicert.com (1)	86	2012-05-21 07:02:23 UTC	2022-09-29 04:12:37 UTC	93.184.220.29
60.us.tealwinds.xyz (1)	0	2022-07-26 09:37:57 UTC	2022-09-28 18:18:03 UTC	23.235.251.114	Domain (tealwinds.xyz) ranked at: 178693
redir.findthewind.xyz (1)	0	2022-08-11 09:16:56 UTC	2022-09-29 04:49:59 UTC	198.211.113.186	Unknown ranking
t2.hightid.com (1)	0	2022-08-03 13:42:14 UTC	2022-09-27 20:28:03 UTC	51.161.115.163	Unknown ranking
serve.paradisesummer.xyz (1)	102112	2019-02-08 16:10:33 UTC	2022-09-28 20:16:20 UTC	198.134.116.30

Scan Date	Severity	Indicator	Comment
2022-09-29	2	snlg-glo.echopriority.com/t/clk	Malware

Date	UQ / IDS / BL	URL	IP
2022-10-08 15:29:14 +0000	0 - 0 - 3	rmut-glo.passionsearchnews.com/t/clk?id=qk49u (...)	52.58.131.39
2022-10-08 04:55:17 +0000	0 - 0 - 4	rmut-glo.passionsearchnews.com/t/clk	52.58.131.39
2022-10-08 02:30:39 +0000	0 - 0 - 2	rmut-glo.passionsearchnews.com/t/clk?id=qk49u (...)	52.58.131.39
2022-10-07 05:04:20 +0000	0 - 0 - 1	lltl-glo.usethisprice.com/t/clk	52.58.131.39
2022-10-06 12:58:27 +0000	0 - 0 - 1	rmut-glo.azurservers.com/t/clk	52.58.131.39

Date	UQ / IDS / BL	URL	IP
2023-01-30 19:02:22 +0000	0 - 5 - 0	tvi.promotionsandsurvey.site/c/ad0a3413b4338d (...)	52.19.101.114
2023-01-30 19:02:21 +0000	0 - 10 - 0	money4you.ua/?utm_source=pdlprofit&utm_medium (...)	3.67.182.52
2023-01-30 19:01:43 +0000	0 - 6 - 0	orcd.co/fejl40	52.42.154.92
2023-01-30 18:57:19 +0000	0 - 0 - 5	as.svcrencst.com/	15.197.130.221
2023-01-30 18:56:51 +0000	0 - 0 - 1	walter-larence.com/ffcefbf5-6845-4a5c-8806-9b (...)	18.193.146.82

Date	UQ / IDS / BL	URL	IP
2023-01-09 07:08:22 +0000	0 - 0 - 1	snlg-glo.echopriority.com/t/clk	18.196.163.193
2022-12-17 08:00:27 +0000	0 - 0 - 1	snlg-glo.echopriority.com/t/clk	3.64.141.64
2022-09-29 08:06:32 +0000	0 - 0 - 1	snlg-glo.echopriority.com/t/clk	52.58.131.39
2022-09-03 08:08:19 +0000	0 - 0 - 1	snlg-glo.echopriority.com/t/clk	18.184.136.84
2022-09-01 08:08:18 +0000	0 - 0 - 1	snlg-glo.echopriority.com/t/clk	18.194.228.220

Date	UQ / IDS / BL	URL	IP
2022-12-14 12:10:54 +0000	0 - 0 - 3	curatedpromedia.com/it-central-station-14059- (...)	50.19.16.20
2022-09-28 04:35:02 +0000	0 - 0 - 0	dontlosefaith.xyz	163.44.185.234
2022-09-18 11:06:40 +0000	0 - 0 - 1	pollo.trffcsource.com/l.php?p=c:ta9_53qhga_kr (...)	51.83.143.92
2022-10-25 16:33:40 +0000	0 - 0 - 6	nu-glo.servedandprotected.com/t/clk?id=dqwduj (...)	52.28.59.112
2022-10-08 05:29:19 +0000	0 - 0 - 4	so-glo.yoptv33.com/t/clk?id=DQqT5fxjrUGKRmCl& (...)	3.64.246.59

Request	Response
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 143.204.55.36 HASH: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551 143.204.55.36 HTTP/1.1 200 OK Content-Type: application/json Content-Length: 939 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert Cache-Control: max-age=3600 Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Date: Thu, 29 Sep 2022 07:15:52 GMT X-Content-Type-Options: nosniff X-Cache: Hit from cloudfront Via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: SDTQ42y8CLFQIZjEaQRfXS6-rHp25LDTxAx4fSX2TJt3v41wQXBt4Q== Age: 3029 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 2d12f67fe57a87e7366b662d153a5582 Sha1: d7b02d81cc74f24a251d9363e0f4b0a149264ec1 Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: a382476d14b6ae14003333e7acdfbbd9ae8775d4c1a7d5c31116f33987043cff 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "A382476D14B6AE14003333E7ACDFBBD9AE8775D4C1A7D5C31116F33987043CFF" Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=15984 Expires: Thu, 29 Sep 2022 12:32:45 GMT Date: Thu, 29 Sep 2022 08:06:21 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 6dd4587c98aef98ad0939030a6976a7f Sha1: 92dc5966ac2deb0c3ac7fdd02bf8d28f9239801e Sha256: a382476d14b6ae14003333e7acdfbbd9ae8775d4c1a7d5c31116f33987043cff
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 143.204.55.49 HASH: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770 143.204.55.49 HTTP/2 200 OK content-type: binary/octet-stream content-length: 5348 last-modified: Sat, 10 Sep 2022 18:47:45 GMT content-disposition: attachment accept-ranges: bytes server: AmazonS3 date: Thu, 29 Sep 2022 05:28:28 GMT etag: "6113f8408c59aebe188d6af273b90743" x-cache: Hit from cloudfront via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-C1 x-amz-cf-id: NIFCKN5sFwP9lAeNEgGZgVzmdtUW3Uy6wkjnqd91QPCoFZM-y6ht0Q== age: 9474 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 6113f8408c59aebe188d6af273b90743 Sha1: 7398873bf00f99944eaa77ad3ebc0d43c23dba6b Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Thu, 29 Sep 2022 08:06:21 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 143.204.55.36 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 143.204.55.36 HTTP/1.1 200 OK Content-Type: application/json Content-Length: 329 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Cache-Control: max-age=3600, max-age=3600 Date: Thu, 29 Sep 2022 07:29:33 GMT Expires: Thu, 29 Sep 2022 07:40:10 GMT ETag: "1648230346554" X-Cache: Hit from cloudfront Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: FwOUSEdbPdu8TrkkpZFGPajqNcqLuJSTgl5I-DB0IUs6kogeCK1QXQ== Age: 2209 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 09604aed7cbca7971bfcb5afcb53591600b944f28eff21aa65dc601e78cdda53 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 3328 Cache-Control: 'max-age=158059' Date: Thu, 29 Sep 2022 08:06:22 GMT Last-Modified: Thu, 29 Sep 2022 07:10:54 GMT Server: ECS (ska/F714) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 3526d5ce1381ba26cbc553db057e1915 Sha1: fe01c920696448e8bf12e6fff877bce8281d34a2 Sha256: 09604aed7cbca7971bfcb5afcb53591600b944f28eff21aa65dc601e78cdda53
GET /t/clk HTTP/1.1 Host: snlg-glo.echopriority.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: snlg-glo.echopriority.com/t/clk FQDN: snlg-glo.echopriority.com IP: 3.71.126.115 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 3.71.126.115 HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Thu, 29 Sep 2022 08:06:22 GMT Content-Length: 0 Connection: keep-alive Server: nginx/1.12.2 Location: https://so-glo.yoptv33.com/t/clk?id=DQqT5fxjrUGKRmCl&rl=Dkxpn&rcode=R09&rseq=R09,R99,R98 Vary: Cookie, Origin --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Alerts: Blocklists: - fortinet: Malware
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: 0r7MUTi0lvkIdynO8UfLdw== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 54.70.239.215 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 54.70.239.215 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: kwwFExfXJL9s2yzcOwZrZyqld+I= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: ocsp.sca1b.amazontrust.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.sca1b.amazontrust.com/ FQDN: ocsp.sca1b.amazontrust.com IP: 143.204.42.165 HASH: 20cf6e71997e684f4a17529b731a3e7791e856cc9827f5b03c1b88d2fd30e815 143.204.42.165 HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Cache-Control: 'max-age=158059' Date: Thu, 29 Sep 2022 08:06:22 GMT Server: ECS (dcb/7EEA) X-Cache: Miss from cloudfront Via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: FNNR5sQTt9tTo6F8z8SHSFqJmLGAMJtnS1UHK86CiIIiL9SX1Km5dg== --- Additional Info --- Magic: data Size: 471 Md5: 91a892ff56f96cfc5a38cad8f74a4f66 Sha1: 3589ecb06202d1c522526ce81a458a09efb45700 Sha256: 20cf6e71997e684f4a17529b731a3e7791e856cc9827f5b03c1b88d2fd30e815
GET /t/clk?id=DQqT5fxjrUGKRmCl&rl=Dkxpn&rcode=R09&rseq=R09,R99,R98 HTTP/1.1 Host: so-glo.yoptv33.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	URL: so-glo.yoptv33.com/t/clk?id=DQqT5fxjrUGKRmCl&rl=Dkxpn&r (...) FQDN: so-glo.yoptv33.com IP: 52.58.131.39 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 52.58.131.39 HTTP/2 302 Found content-type: text/html; charset=utf-8 date: Thu, 29 Sep 2022 08:06:22 GMT content-length: 0 location: https://go.monetizer.mobi/?utm_medium=ec4eee60be986151ad56a07d62a9c3fe7802b9db&utm_campaign=mainstream2021&1=1&cid=4ef9afa2-961c-45fb-9ab6-28be1113c77e server: nginx/1.12.2 cache-control: no-transform x-frame-options: SAMEORIGIN vary: Cookie, Origin set-cookie: uip="[\"6Lnl0RA3\"\054 {\"lg3J9\": \"zkERRW3\"}]:1odoYo:NX37IpldZbk_eaufJOt_t3TL9O4"; expires=Sat, 29 Oct 2022 08:06:22 GMT; Max-Age=2592000; Path=/ ydt_69a756d9a2a44370a5365f82fbdfa6e5="[\"4ef9afa2-961c-45fb-9ab6-28be1113c77e\"]:1odoYo:A9-gBpx2eHGOZfGV-SFUnlszGT4"; expires=Sat, 29 Oct 2022 10:06:22 GMT; Max-Age=2599200; Path=/; SameSite=None; Secure X-Firefox-Spdy: h2 --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "25F075EFFBD8ACDED8F38D69EA17F673DE3E197B635274D4C52411EF577FE8E7" Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2861 Expires: Thu, 29 Sep 2022 08:54:04 GMT Date: Thu, 29 Sep 2022 08:06:23 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 47f245f9a098439e59436f81d4c03415 Sha1: 950b3eadfd6fc7f859130fa2c63934c6ccd49889 Sha256: 25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "25F075EFFBD8ACDED8F38D69EA17F673DE3E197B635274D4C52411EF577FE8E7" Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2861 Expires: Thu, 29 Sep 2022 08:54:04 GMT Date: Thu, 29 Sep 2022 08:06:23 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 47f245f9a098439e59436f81d4c03415 Sha1: 950b3eadfd6fc7f859130fa2c63934c6ccd49889 Sha256: 25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "25F075EFFBD8ACDED8F38D69EA17F673DE3E197B635274D4C52411EF577FE8E7" Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2861 Expires: Thu, 29 Sep 2022 08:54:04 GMT Date: Thu, 29 Sep 2022 08:06:23 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 47f245f9a098439e59436f81d4c03415 Sha1: 950b3eadfd6fc7f859130fa2c63934c6ccd49889 Sha256: 25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "25F075EFFBD8ACDED8F38D69EA17F673DE3E197B635274D4C52411EF577FE8E7" Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2861 Expires: Thu, 29 Sep 2022 08:54:04 GMT Date: Thu, 29 Sep 2022 08:06:23 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 47f245f9a098439e59436f81d4c03415 Sha1: 950b3eadfd6fc7f859130fa2c63934c6ccd49889 Sha256: 25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "25F075EFFBD8ACDED8F38D69EA17F673DE3E197B635274D4C52411EF577FE8E7" Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2861 Expires: Thu, 29 Sep 2022 08:54:04 GMT Date: Thu, 29 Sep 2022 08:06:23 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 47f245f9a098439e59436f81d4c03415 Sha1: 950b3eadfd6fc7f859130fa2c63934c6ccd49889 Sha256: 25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5cbaf6d-fc16-4449-8b54-1d55f68eff4f.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 511f5aa33750cd4a02cf3968bf165ffa521e77cb4fb7135b516d7ad14e8b9d01 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 14073 x-amzn-requestid: 4ff72590-e28d-4d4b-af1a-4d62e75e3d66 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ZMKnpEsJoAMFlBQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6334be30-38b014a25551aa0a2ab04ccf;Sampled=0 x-amzn-remapped-date: Wed, 28 Sep 2022 21:35:44 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: dyDhatfeYzzSQpRY7JpOIu3VhjlI8IOWcKCLCBWYaxJ1CYgCxqdQjA== via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google date: Wed, 28 Sep 2022 21:49:42 GMT age: 37001 etag: "72603efba82d649ce5a7a0ca45dc830c0d9ef012" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 14073 Md5: 11594ce7500d8776bfd5162b17f87d72 Sha1: 72603efba82d649ce5a7a0ca45dc830c0d9ef012 Sha256: 511f5aa33750cd4a02cf3968bf165ffa521e77cb4fb7135b516d7ad14e8b9d01
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F75de31dd-bbf0-4a21-bfac-94f0062f4da4.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: b5e79054f165f38b99f93a8128284f82076523988aeb102b85dd8ff1a2870d00 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10023 x-amzn-requestid: 0cb6b9a1-0707-4094-b197-5a0add2df717 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ZMK4dHJLIAMFWmg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6334be9c-2d8bbb17157900f126c5bb3c;Sampled=0 x-amzn-remapped-date: Wed, 28 Sep 2022 21:37:32 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: wZ2hBqHAdwimAVV3p-CJFrb9zQ-CTN5ar9CB-cu0mZoENYUFTKKPWQ== via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 ddaf46a95abcfc80e8eae76235e2127c.cloudfront.net (CloudFront), 1.1 google date: Wed, 28 Sep 2022 22:04:58 GMT age: 36085 etag: "e1067a2dfbc22e7eb196046d57bd1e17604dba75" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10023 Md5: f4505f57697072468da82e0b536d0d5b Sha1: e1067a2dfbc22e7eb196046d57bd1e17604dba75 Sha256: b5e79054f165f38b99f93a8128284f82076523988aeb102b85dd8ff1a2870d00
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb46b76b4-e585-46c3-bf03-5bfe9273000c.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 8c25b9129fc01f6ffad911994e91436ab0026ed0b54568757a20ab7f92584467 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 3332 x-amzn-requestid: fb6cb616-5b4d-4aaf-a891-50b4de8b6f95 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ZJ_6AGNYIAMFSHQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6333e03f-377fe02d1cc7ad2b3a15ca1a;Sampled=0 x-amzn-remapped-date: Wed, 28 Sep 2022 05:48:47 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: nJJZxZlapt4k5988yU-V94pBBH2SmfSZ0Zb_oJXA07mppg0lF04wLg== via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google date: Wed, 28 Sep 2022 17:18:10 GMT age: 53293 etag: "4fc0699c763f67a2602b4b3f46b8b4013d2049c6" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 3332 Md5: 6ac86079d2901fb11bfaff81d91bb2d2 Sha1: 4fc0699c763f67a2602b4b3f46b8b4013d2049c6 Sha256: 8c25b9129fc01f6ffad911994e91436ab0026ed0b54568757a20ab7f92584467
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9d0e9057-f203-4080-95b8-652ecd15effa.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 90a37acc6beda1aa98a98cb84e00a7e469d6d919a14f4709c5f67a83ae95278d 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7859 x-amzn-requestid: 34d0718f-46d4-446f-bb06-8449bd8f4287 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ZIlO4FcBoAMFy0w= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63334f2b-58ae81c9077e4f1575750f15;Sampled=0 x-amzn-remapped-date: Tue, 27 Sep 2022 19:29:47 GMT x-amz-cf-pop: SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: LwYd0qn4P-zh1W4GvU8vNEo3_TZHEqtErAj3UKx7a82LIDaBsiXE-w== via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google date: Wed, 28 Sep 2022 19:04:20 GMT age: 46923 etag: "35ec6e80d324bb215796c590a7ffafbaea55d88e" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7859 Md5: c62a6368c456e9614ca4c8e360a2ef12 Sha1: 35ec6e80d324bb215796c590a7ffafbaea55d88e Sha256: 90a37acc6beda1aa98a98cb84e00a7e469d6d919a14f4709c5f67a83ae95278d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe91221c7-ce03-4ea5-9826-7a53eaafc5e6.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: eabd1bfef29cad4045d688a909b9a8c88818d80bb432ce642d055583cf66d77d 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9002 x-amzn-requestid: 0623931b-a4d6-49de-ba32-d071c08eddbd x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ZMKoiGKRIAMFhYQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6334be36-1573e2e91c85617424db019f;Sampled=0 x-amzn-remapped-date: Wed, 28 Sep 2022 21:35:50 GMT x-amz-cf-pop: SEA73-P2, SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: mmSMfKcxGrh9meSHTynf1wRZLrzc4wejFbKSO6qaJ3hn8h4-QwAAcQ== via: 1.1 2a44ef7b9d28e74c78ffadeedcbb887c.cloudfront.net (CloudFront), 1.1 ead78c395f4bede3ec6cd7ea180e3d3a.cloudfront.net (CloudFront), 1.1 google date: Wed, 28 Sep 2022 21:50:26 GMT age: 36957 etag: "d76293673a7aa2861b069ced614cdcdb84fed6d3" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9002 Md5: c80d7ce8a9d3fba54855e05731db759c Sha1: d76293673a7aa2861b069ced614cdcdb84fed6d3 Sha256: eabd1bfef29cad4045d688a909b9a8c88818d80bb432ce642d055583cf66d77d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99f26bb4-2c5c-44ef-86d3-90fd05ec1ce0.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 99984d108bf31d733414f7f1352e17225ac21ac2dbfb4b1e7fa7ae80e5b6b822 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9654 x-amzn-requestid: 7961f184-9476-43de-bf35-8ccb50ee1760 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ZGVYsHA6oAMFvRA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63326904-05f567f7606462ac44f89987;Sampled=0 x-amzn-remapped-date: Tue, 27 Sep 2022 03:07:48 GMT x-amz-cf-pop: SEA73-P1 x-cache: Miss from cloudfront x-amz-cf-id: XaB4TwXv4xy0Sy3dncNYZWEPEnHY5BkEHR7fZDK59APYkzH9DPdT7A== via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google date: Thu, 29 Sep 2022 04:20:40 GMT age: 13543 etag: "44cc19b21912d07f82a88af5b2fa6d3e370459bf" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9654 Md5: 36ae9444071dd70dcf86802c370ffda9 Sha1: 44cc19b21912d07f82a88af5b2fa6d3e370459bf Sha256: 99984d108bf31d733414f7f1352e17225ac21ac2dbfb4b1e7fa7ae80e5b6b822
GET /favicon.ico HTTP/1.1 Host: go.monetizer.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://go.monetizer.mobi/?utm_term=7148710139195818023&ver=4viyaptcjo&utm_content=e6c2c6dcd68fd49594fc9695a6a79597828bb8888e8f8ebdb2c6b0c4b6b78587b2bb88b0bdb68cbd82b280b3b6b6bcb4aaaba9a9aeafacada293a1919697f8f4848f9b8a8f9f89c09291898c87959de5cbfbf8cbcaffcec9f2f3f085848291f5cafac8f8fcf7fccdf3f3f2f5c6c7c4c5dae8edebe8ebebebebebe6e2e0efece61b84 Cookie: u=fb322d59fb105746007a9a2c8040d3fc Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: go.monetizer.mobi/favicon.ico FQDN: go.monetizer.mobi IP: 198.143.165.221 HASH: b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc 198.143.165.221 HTTP/2 200 OK content-type: image/x-icon server: nginx date: Thu, 29 Sep 2022 08:06:23 GMT content-length: 1150 last-modified: Wed, 31 Jul 2019 07:48:51 GMT etag: "5d4147e3-47e" expires: Fri, 30 Sep 2022 08:06:23 GMT cache-control: max-age=86400 strict-transport-security: max-age=31536000; includeSubdomains; accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data Size: 1150 Md5: 91abe01116ab422c598e9c8af72cf4da Sha1: 0f2815fe8e067d48537ad168225ab4674271fa27 Sha256: b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc
GET /sw.js?v=1664438781006 HTTP/1.1 Host: go.monetizer.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Service-Worker: script Connection: keep-alive Cookie: u=fb322d59fb105746007a9a2c8040d3fc Sec-Fetch-Dest: serviceworker Sec-Fetch-Mode: same-origin Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers	URL: go.monetizer.mobi/sw.js?v=1664438781006 FQDN: go.monetizer.mobi IP: 198.143.165.221 HASH: 70d55f6e4bab19ae4b3cc61642e88a78a599b060c72d10c15c5f937e34305ee9 198.143.165.221 HTTP/2 200 OK content-type: application/javascript server: nginx date: Thu, 29 Sep 2022 08:06:23 GMT content-length: 775 last-modified: Fri, 23 Sep 2022 11:12:42 GMT vary: Accept-Encoding etag: "632d94aa-307" content-encoding: gzip content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src ; style-src 'unsafe-inline'; X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text Size: 775 Md5: de06f24ba6d6b0c514015a9847dace54 Sha1: c9662e4339d4f72af3526b21d4d6d68df21b0ba9 Sha256: 70d55f6e4bab19ae4b3cc61642e88a78a599b060c72d10c15c5f937e34305ee9
GET /?sl=5467509-4538f&data1=Track1&data2=Track2&tag=M7148710139195818023&website=797-403c551a&placement=797&utm_content=e6c2c6dcd68fd49594fc9695a6a79597828bb8888e8f8ebdb2c6b0c4b6b78587b2bb88b0bdb68cbd82b380b3b6b6bcb4aaaba9a9aeafacada293a1919697f8f4848f9b8a8f9f89c09291898c87959de5cbfbf8cbcaffcec9f2f3f085848291f5cafac8f8fcf7fccdf3f3f2f5c6c7c4c5dae8edebe8ebebebebebe6e2e0efece61b85 HTTP/1.1 Host: www.wewillserv.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://go.monetizer.mobi/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: www.wewillserv.com/?sl=5467509-4538f&data1=Track1&data2 (...) FQDN: www.wewillserv.com IP: 51.68.82.147 HASH: 142a2956716752c543a0e12a5ada634072490b432e02eebfbcffb03760a26bdc 51.68.82.147 HTTP/1.1 200 OK Content-Type: text/html Date: Thu, 29 Sep 2022 08:06:24 GMT Transfer-Encoding: chunked Connection: keep-alive Cache-Control: no-transform --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3751) Size: 5152 Md5: 85912cfae82f28436933b5943b0f3187 Sha1: 33d1b4d436c2e3306178c4af632d0e010ad43638 Sha256: 142a2956716752c543a0e12a5ada634072490b432e02eebfbcffb03760a26bdc
GET /proc.php?76278d19336741689460c525def26b9a514dcb50 HTTP/1.1 Host: go.monetizer.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://go.monetizer.mobi/?utm_term=7148710139195818023&ver=4viyaptcjo&utm_content=e6c2c6dcd68fd49594fc9695a6a79597828bb8888e8f8ebdb2c6b0c4b6b78587b2bb88b0bdb68cbd82b280b3b6b6bcb4aaaba9a9aeafacada293a1919697f8f4848f9b8a8f9f89c09291898c87959de5cbfbf8cbcaffcec9f2f3f085848291f5cafac8f8fcf7fccdf3f3f2f5c6c7c4c5dae8edebe8ebebebebebe6e2e0efece61b84 Cookie: u=fb322d59fb105746007a9a2c8040d3fc Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin TE: trailers	URL: go.monetizer.mobi/proc.php?76278d19336741689460c525def2 (...) FQDN: go.monetizer.mobi IP: 198.143.165.221 HASH: ecf19a360780434c21ea17e43127d8acc927707b7dfdd42a96612a0ffc80c6a3 198.143.165.221 HTTP/2 200 OK content-type: text/html; charset=UTF-8 server: nginx date: Thu, 29 Sep 2022 08:06:24 GMT location: https://www.wewillserv.com/?sl=5467509-4538f&data1=Track1&data2=Track2&tag=M7148710139195818023&website=797-403c551a&placement=797 vary: Accept-Encoding x-powered-by: PHP/8.1.9 cache-control: no-store, no-cache, must-revalidate, max-age=0 pragma: no-cache expires: Thu, 01 Jan 1970 00:00:00 GMT strict-transport-security: max-age=31536000; includeSubdomains; content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3576), with no line terminators Size: 1550 Md5: 7998dd01c8812d9dd798907c97005eed Sha1: 612aa87417010236fb164f08db384eac59474dc4 Sha256: ecf19a360780434c21ea17e43127d8acc927707b7dfdd42a96612a0ffc80c6a3
GET /?sl=5467509-4538f&data1=Track1&data2=Track2&tag=M7148710139195818023&website=797-403c551a&placement=797&utm_content=e6c2c6dcd68fd49594fc9695a6a79597828bb8888e8f8ebdb2c6b0c4b6b78587b2bb88b0bdb68cbd82b380b3b6b6bcb4aaaba9a9aeafacada293a1919697f8f4848f9b8a8f9f89c09291898c87959de5cbfbf8cbcaffcec9f2f3f085848291f5cafac8f8fcf7fccdf3f3f2f5c6c7c4c5dae8edebe8ebebebebebe6e2e0efece61b85&eyeg=3&eyer=0.3805740683138612&eyei=0&eyew=1280&eyeh=939&eyetd=220&eyef=go.monetizer.mobi HTTP/1.1 Host: www.wewillserv.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin	URL: www.wewillserv.com/?sl=5467509-4538f&data1=Track1&data2 (...) FQDN: www.wewillserv.com IP: 51.68.82.147 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 51.68.82.147 HTTP/1.1 302 Found Date: Thu, 29 Sep 2022 08:06:24 GMT Content-Length: 0 Connection: keep-alive Cache-Control: no-transform Location: https://admoustache.go2affise.com/sl?id=5f0efd61dabed1d602e0fe6a&pid=503&sub1=330005991c0cc852aa6ab18dda43785484a4a0929-202209-flb5467509-4538fM7148710139195818023sl_5467509-4538f8ac645e04719f7cb05e428046bff327f726048aa797-403c551a797 --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1 Host: www.wewillserv.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: www.wewillserv.com/favicon.ico FQDN: www.wewillserv.com IP: 51.68.82.147 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 51.68.82.147 HTTP/1.1 204 No Content Server: openresty Date: Thu, 29 Sep 2022 08:06:24 GMT Connection: keep-alive --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sw.js?v=1664438781006 HTTP/1.1 Host: go.monetizer.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Service-Worker: script Connection: keep-alive Cookie: u=fb322d59fb105746007a9a2c8040d3fc Sec-Fetch-Dest: serviceworker Sec-Fetch-Mode: same-origin Sec-Fetch-Site: same-origin If-Modified-Since: Fri, 23 Sep 2022 11:12:42 GMT If-None-Match: "632d94aa-307" Cache-Control: max-age=0 TE: trailers	URL: go.monetizer.mobi/sw.js?v=1664438781006 FQDN: go.monetizer.mobi IP: 198.143.165.221 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 198.143.165.221 HTTP/2 304 Not Modified server: nginx date: Thu, 29 Sep 2022 08:06:25 GMT last-modified: Fri, 23 Sep 2022 11:12:42 GMT vary: Accept-Encoding etag: "632d94aa-307" content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src ; style-src 'unsafe-inline'; X-Firefox-Spdy: h2 --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sl?id=5f0efd61dabed1d602e0fe6a&pid=503&sub1=330005991c0cc852aa6ab18dda43785484a4a0929-202209-flb5467509-4538fM7148710139195818023sl_5467509-4538f8ac645e04719f7cb05e428046bff327f726048aa797-403c551a797 HTTP/1.1 Host: admoustache.go2affise.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: admoustache.go2affise.com/sl?id=5f0efd61dabed1d602e0fe6 (...) FQDN: admoustache.go2affise.com IP: 34.147.1.177 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 34.147.1.177 HTTP/2 302 Found server: nginx date: Thu, 29 Sep 2022 08:06:25 GMT content-length: 0 location: https://myofferplus.com/rc/a91581ead4?affclick=633552012aba9c0001d5797a&pubid=503 set-cookie: afclick=633552012aba9c0001d5797a; expires=Fri, 29 Sep 2023 08:06:25 GMT; secure; SameSite=None access-control-allow-origin: * X-Firefox-Spdy: h2 --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 4bc4e2ac30b4b527557263bcdf6cfd7d91020ae766b3d53e7dc178762b79ef41 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "4BC4E2AC30B4B527557263BCDF6CFD7D91020AE766B3D53E7DC178762B79EF41" Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=16137 Expires: Thu, 29 Sep 2022 12:35:23 GMT Date: Thu, 29 Sep 2022 08:06:26 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: a2d6c1f03cd4e277f75569d4e9f976ed Sha1: 0c1e63b66bf7bcc40fb50ba796c12ff21f2d9229 Sha256: 4bc4e2ac30b4b527557263bcdf6cfd7d91020ae766b3d53e7dc178762b79ef41
GET /s.php?p=c%3As_8942pggbfij953c&d=631f396258fd6b044f727c62&pid=puba993c1fe580048869e2b840d7309f3da&s=8063a697 HTTP/1.1 Host: t3.hightid.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://myofferplus.com/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: t3.hightid.com/s.php?p=c%3As_8942pggbfij953c&d=631f3962 (...) FQDN: t3.hightid.com IP: 51.161.115.163 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 51.161.115.163 HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Server: nginx Date: Thu, 29 Sep 2022 08:06:26 GMT Content-Length: 0 Connection: keep-alive Round: 125rsbtsf2 Raund: 1je Location: https://60.us.tealwinds.xyz/feed/?link=true&tid=60&subid=60.8063a697&ref=https%3A%2F%2Fmyofferplus.com%2F&s1=633552024c3e283b7d1d32dd --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 9b1ce66f1eb236b34219e7777d570a051cbcb4669651b9597da940f8e7130a68 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "9B1CE66F1EB236B34219E7777D570A051CBCB4669651B9597DA940F8E7130A68" Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=21579 Expires: Thu, 29 Sep 2022 14:06:06 GMT Date: Thu, 29 Sep 2022 08:06:27 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: d63f3cc430fb8003cc093b688f7bebbf Sha1: e53d8645b0af7a53c91cb26fb2c3726c6da85199 Sha256: 9b1ce66f1eb236b34219e7777d570a051cbcb4669651b9597da940f8e7130a68
GET /feed/?link=true&tid=60&subid=60.8063a697&ref=https%3A%2F%2Fmyofferplus.com%2F&s1=633552024c3e283b7d1d32dd HTTP/1.1 Host: 60.us.tealwinds.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://myofferplus.com/ Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: 60.us.tealwinds.xyz/feed/?link=true&tid=60&subid=60.806 (...) FQDN: 60.us.tealwinds.xyz IP: 23.235.251.114 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 23.235.251.114 HTTP/1.1 301 Moved Permanently Cache-Control: no-cache Location: https://redir.findthewind.xyz/click/invalid/?tid=60&subid=60.8063a697 Date: Thu, 29 Sep 2022 08:06:28 GMT Connection: keep-alive Keep-Alive: timeout=5 Transfer-Encoding: chunked --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 6e4591d673d5b711eed17ff9e66144f9087d4796c78739fd8d4d463efc6c2293 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "6E4591D673D5B711EED17FF9E66144F9087D4796C78739FD8D4D463EFC6C2293" Last-Modified: Tue, 27 Sep 2022 22:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=16278 Expires: Thu, 29 Sep 2022 12:37:46 GMT Date: Thu, 29 Sep 2022 08:06:28 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 40ff70f729bb5e253344f4c120df4d3a Sha1: 4b38cd4e1ffb9b61458a1cfdf507258309d51f9b Sha256: 6e4591d673d5b711eed17ff9e66144f9087d4796c78739fd8d4d463efc6c2293
GET /click/invalid/?tid=60&subid=60.8063a697 HTTP/1.1 Host: redir.findthewind.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://myofferplus.com/ Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: redir.findthewind.xyz/click/invalid/?tid=60&subid=60.80 (...) FQDN: redir.findthewind.xyz IP: 198.211.113.186 HASH: df43f6e5a58e1ca9311c35ef28909a40e8cdaa4b74f005005074edfae88c6864 198.211.113.186 HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 X-Powered-By: Express Surrogate-Control: no-store Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate Pragma: no-cache Expires: 0 Location: https://t2.hightid.com/l.php?p=c:j1z0vtg886aak8nuk&d=6332b03dd7475723f76f5a35&s=60 Vary: Accept Content-Length: 224 Date: Thu, 29 Sep 2022 08:06:28 GMT Connection: keep-alive Keep-Alive: timeout=5 --- Additional Info --- Magic: HTML document, ASCII text, with no line terminators Size: 224 Md5: 24bd1ebbe2164d9406933c6eaed43a1a Sha1: 9b08f45b5fbabd159967ba97e3af0d5cb8dc7984 Sha256: df43f6e5a58e1ca9311c35ef28909a40e8cdaa4b74f005005074edfae88c6864
GET /l.php?p=c:j1z0vtg886aak8nuk&d=6332b03dd7475723f76f5a35&s=60 HTTP/1.1 Host: t2.hightid.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://myofferplus.com/ Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: t2.hightid.com/l.php?p=c:j1z0vtg886aak8nuk&d=6332b03dd7 (...) FQDN: t2.hightid.com IP: 51.161.115.163 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 51.161.115.163 HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Server: nginx Date: Thu, 29 Sep 2022 08:06:28 GMT Content-Length: 0 Connection: keep-alive Round: 126krdjzga Raund: 1m1 Location: https://go.redanemone.xyz/redirect?feed=384272&url=t2.hightid.com&subid=384272.60.&pub_clickid=6335520435dd2b3676770171&query=no.linux.firefox --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 5f6e1585dbc7998edc196de900a68ec8278ba680e9cb1bb114a0c56f27d86fc5 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "5F6E1585DBC7998EDC196DE900A68EC8278BA680E9CB1BB114A0C56F27D86FC5" Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=18919 Expires: Thu, 29 Sep 2022 13:21:48 GMT Date: Thu, 29 Sep 2022 08:06:29 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: b1e9cd49b43b7ac4e275b5ac87b65ebb Sha1: 6eb147a1af994755a19649bcadba248ba6941fc7 Sha256: 5f6e1585dbc7998edc196de900a68ec8278ba680e9cb1bb114a0c56f27d86fc5
GET /redirect?feed=384272&url=t2.hightid.com&subid=384272.60.&pub_clickid=6335520435dd2b3676770171&query=no.linux.firefox HTTP/1.1 Host: go.redanemone.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://myofferplus.com/ Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: go.redanemone.xyz/redirect?feed=384272&url=t2.hightid.c (...) FQDN: go.redanemone.xyz IP: 198.134.116.30 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 198.134.116.30 HTTP/1.1 302 Found Server: nginx Date: Thu, 29 Sep 2022 08:06:29 GMT Content-Length: 0 Connection: keep-alive Cache-Control: no-store Age: 0 Set-Cookie: x3328552=497849460; Domain=.redanemone.xyz Location: https://serve.paradisesummer.xyz/filter?q=no.linux.firefox&i=N2FHFKRXKO8_0&ci=3379504167676553556&t=471401178&h=23&pub_clickid=6335520435dd2b3676770171 Pragma: no-cache --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 0bf20715aac5c13b2c3756076c41ebee01e695ab92d1178fffa07cfec8ead631 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "0BF20715AAC5C13B2C3756076C41EBEE01E695AB92D1178FFFA07CFEC8EAD631" Last-Modified: Thu, 29 Sep 2022 01:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=21600 Expires: Thu, 29 Sep 2022 14:06:30 GMT Date: Thu, 29 Sep 2022 08:06:30 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: f68cc7fba045d1f4d6b5e53f863b29f7 Sha1: 964c52259c9aba216687e54944fdb96d1c206fcc Sha256: 0bf20715aac5c13b2c3756076c41ebee01e695ab92d1178fffa07cfec8ead631
GET /filter?q=no.linux.firefox&i=N2FHFKRXKO8_0&ci=3379504167676553556&t=471401178&h=23&pub_clickid=6335520435dd2b3676770171 HTTP/1.1 Host: serve.paradisesummer.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://myofferplus.com/ Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: serve.paradisesummer.xyz/filter?q=no.linux.firefox&i=N2 (...) FQDN: serve.paradisesummer.xyz IP: 198.134.116.30 HASH: a74dfac4cf6995484ea31aae9316f094862d6aaf2df7588f224bcaca4abea83b 198.134.116.30 HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Server: nginx Date: Thu, 29 Sep 2022 08:06:30 GMT Content-Length: 5421 Connection: keep-alive Cache-Control: no-store Age: 0 Set-Cookie: c-866324272=497849460 x3328552=497849460; Domain=.paradisesummer.xyz Pragma: no-cache --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (534) Size: 5421 Md5: 922a6b37a24306bb00fd21ab8ba5ee3d Sha1: bee16942b2ce79e3fa78446b51fdc8b1e810e9cd Sha256: a74dfac4cf6995484ea31aae9316f094862d6aaf2df7588f224bcaca4abea83b
GET /click2?i=N2FHFKRXKO8_0&ci=3379504167676553556&j=rv%3Db%26ss%3D1280x1024%26ws%3D1280x939%26wp%3D0x0%26ce%3D1%26ck%3Djc%26cv%3D5221%26cs%3D1%26fr%3D0%26hc%3D0%26fl%3Dnull%26jv%3Dnull%26sc%3D24%26hr%3D12%26rf%3Dmyofferplus.com%26lo%3Dserve.paradisesummer.xyz%26mb%3D0%26hb%3D0%26pl%3DLinux%2Bx86_64%26ua%3DMozilla%252F5.0%2B%28X11%253B%2BLinux%2Bx86_64%253B%2Brv%253A96.0%29%2BGecko%252F20100101%2BFirefox%252F96.0%26nd%3D0%26to%3Dnull&pub_clickid=6335520435dd2b3676770171 HTTP/1.1 Host: go.redanemone.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://serve.paradisesummer.xyz/ Cookie: x3328552=497849460 Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: go.redanemone.xyz/click2?i=N2FHFKRXKO8_0&ci=33795041676 (...) FQDN: go.redanemone.xyz IP: 198.134.116.30 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 198.134.116.30 HTTP/1.1 302 Found Server: nginx Date: Thu, 29 Sep 2022 08:06:30 GMT Content-Length: 0 Connection: keep-alive Cache-Control: no-store Age: 0 Location: https://www.forza.idescargarapk.com/get.php?code=TkdXUDhMNFpITTFjUXB5YWpsN01TZz09&clickid=fccB7MlSOI8&campaignid=934057&siteid=436757.310821_384272&publishid=436757&country=no&os=Linux&browser=FIREFOX_96.0&referrer=https%3A%2F%2Fserve.paradisesummer.xyz%2F&device=Desktop&carrier=Blix+Solutions&connection=&bid=0.0002 Pragma: no-cache --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6362b4f1-5935-43c9-9147-6d019a1ea6cd.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 967e070aec3942c64cc6c4cfdc13d430825c9e5c26dbec5bb3d66237d5978dfc 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 4235 x-amzn-requestid: 60825c64-7743-4b16-b80d-d1195ccb0f23 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ZMK2nFsDoAMFRwg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6334be90-1898e5d9111db7c843c1ebb4;Sampled=0 x-amzn-remapped-date: Wed, 28 Sep 2022 21:37:20 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: C-XC9qsktkENdI6lWZp5RQjeEvrrFMUfBq1mA5dxEjRq5tkfL5Jsxw== via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google date: Wed, 28 Sep 2022 22:04:55 GMT age: 36095 etag: "2bbcd6305b4da3204bf1c04b6db23d44cfc84fbb" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 4235 Md5: 30471179bd7cdeecea2fa4ea98701aef Sha1: 2bbcd6305b4da3204bf1c04b6db23d44cfc84fbb Sha256: 967e070aec3942c64cc6c4cfdc13d430825c9e5c26dbec5bb3d66237d5978dfc
POST / HTTP/1.1 Host: ocsp.godaddy.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 75 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.godaddy.com/ FQDN: ocsp.godaddy.com IP: 192.124.249.24 HASH: 7afe8db4798d32ecd94f8ea88e32de515d63ea80c7afab259fd5a5a98ec54ae4 192.124.249.24 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: Sucuri/Cloudproxy Date: Thu, 29 Sep 2022 08:06:30 GMT Content-Length: 1777 Connection: keep-alive X-Sucuri-ID: 19024 Content-Transfer-Encoding: Binary Cache-Control: public, no-transform, must-revalidate Last-Modified: Wed, 28 Sep 2022 23:44:48 GMT Expires: Thu, 29 Sep 2022 23:44:48 GMT ETag: "53982e03dcc14e4e1484e77c103563d3ebf29928" P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA" --- Additional Info --- Magic: data Size: 1777 Md5: 4df50ef44a1104faa2b472b584c63137 Sha1: 53982e03dcc14e4e1484e77c103563d3ebf29928 Sha256: 7afe8db4798d32ecd94f8ea88e32de515d63ea80c7afab259fd5a5a98ec54ae4
GET /?utm_medium=ec4eee60be986151ad56a07d62a9c3fe7802b9db&utm_campaign=mainstream2021&1=1&cid=4ef9afa2-961c-45fb-9ab6-28be1113c77e HTTP/1.1 Host: go.monetizer.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	URL: go.monetizer.mobi/?utm_medium=ec4eee60be986151ad56a07d6 (...) FQDN: go.monetizer.mobi IP: 198.143.165.221 198.143.165.221 HTTP/2 200 OK content-type: text/html; charset=UTF-8 server: nginx date: Thu, 29 Sep 2022 08:06:23 GMT location: https://go.monetizer.mobi/?utm_term=7148710139195818023&ver=4viyaptcjo vary: Accept-Encoding x-powered-by: PHP/8.1.9 cache-control: no-store, no-cache, must-revalidate, max-age=0 pragma: no-cache expires: Thu, 01 Jan 1970 00:00:00 GMT set-cookie: u=fb322d59fb105746007a9a2c8040d3fc; expires=Fri, 29-Sep-2023 08:06:23 GMT; Max-Age=31536000; path=/ strict-transport-security: max-age=31536000; includeSubdomains; content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info ---
GET /?utm_term=7148710139195818023&ver=4viyaptcjo&utm_content=e6c2c6dcd68fd49594fc9695a6a79597828bb8888e8f8ebdb2c6b0c4b6b78587b2bb88b0bdb68cbd82b280b3b6b6bcb4aaaba9a9aeafacada293a1919697f8f4848f9b8a8f9f89c09291898c87959de5cbfbf8cbcaffcec9f2f3f085848291f5cafac8f8fcf7fccdf3f3f2f5c6c7c4c5dae8edebe8ebebebebebe6e2e0efece61b84 HTTP/1.1 Host: go.monetizer.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://go.monetizer.mobi/?utm_medium=ec4eee60be986151ad56a07d62a9c3fe7802b9db&utm_campaign=mainstream2021&1=1&cid=4ef9afa2-961c-45fb-9ab6-28be1113c77e Cookie: u=fb322d59fb105746007a9a2c8040d3fc Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin TE: trailers	URL: go.monetizer.mobi/?utm_term=7148710139195818023&ver=4vi (...) FQDN: go.monetizer.mobi IP: 198.143.165.221 198.143.165.221 HTTP/2 200 OK content-type: text/html; charset=utf-8 server: nginx date: Thu, 29 Sep 2022 08:06:23 GMT vary: Accept-Encoding x-powered-by: PHP/8.1.9 cache-control: no-store, no-cache, must-revalidate, max-age=0 pragma: no-cache expires: Thu, 01 Jan 1970 00:00:00 GMT strict-transport-security: max-age=31536000; includeSubdomains; content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info ---
GET /rc/a91581ead4?affclick=633552012aba9c0001d5797a&pubid=503 HTTP/1.1 Host: myofferplus.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: myofferplus.com/rc/a91581ead4?affclick=633552012aba9c00 (...) FQDN: myofferplus.com IP: 172.67.217.200 172.67.217.200 HTTP/2 200 OK content-type: text/html; charset=utf-8 date: Thu, 29 Sep 2022 08:06:25 GMT set-cookie: AWSALB=QEPnoWLnRGdWDzmUbv75HfMbOGkahOOx7bkz8mxo1dt5u1tIVDpI/IYnRBcDtz9XRBIlvrs0H/lTF6TOa+E27m6bNhvH2i3qnQSM+L064+Mu0jpMMcwbEenCug6k; Expires=Thu, 06 Oct 2022 08:06:25 GMT; Path=/ AWSALBCORS=QEPnoWLnRGdWDzmUbv75HfMbOGkahOOx7bkz8mxo1dt5u1tIVDpI/IYnRBcDtz9XRBIlvrs0H/lTF6TOa+E27m6bNhvH2i3qnQSM+L064+Mu0jpMMcwbEenCug6k; Expires=Thu, 06 Oct 2022 08:06:25 GMT; Path=/; SameSite=None vary: Accept-Encoding, Accept-Language, Cookie content-language: en cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BZa39KBT%2FCN7D%2B%2BRq%2F0ESHWNTCDs0eUNlPpzp2PE6iiB81WlsPPVIwQQTDI%2BskVnMOfN345cI%2BwAJ3YEKXLKmEZT2D%2B6Z4PprIYkou5cVTRplb%2BFOTIrel63478OrDOFIvc%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 7523382a1d91b4e8-OSL content-encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info ---
GET /redirect.css HTTP/1.1 Host: cdn.addlnk.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://myofferplus.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn.addlnk.com/redirect.css FQDN: cdn.addlnk.com IP: 172.67.191.221 172.67.191.221 HTTP/2 200 OK content-type: text/css date: Thu, 29 Sep 2022 08:06:25 GMT cf-bgj: minify cf-polished: origSize=1680 etag: W/"3ae56d32551602b41f9046c14d1cfde2" last-modified: Wed, 13 Mar 2019 00:03:12 GMT x-amz-id-2: BUW6rlWHZvzQnvJHp4gBkVRIGc8DfdhWdOpgruWqMqu7ownlHIapox/IYSueiBqz+QseNtzP+2A= x-amz-request-id: KYXF7EGSHW20KRRM cf-cache-status: HIT age: 1833 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fl5t3duufopukxvWUCPE73KVBc7endx6T3lplAArysFfrjbLmjMx2H5GQFlj0G2X4PwQOe77wWquV3obm5ZHa%2F1fI%2Fc%2BNDmoQXQOg%2BT8MWdXTPfzmzgzNgPAQWZIpF1uVg%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 7523382b5d871c12-OSL content-encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info ---

                                        
                                            GET /v1/ HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         143.204.55.36

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/json

                                        

                                        
                                            
Content-Length: 939 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Access-Control-Allow-Origin: * 

                                        
                                            
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert 

                                        
                                            
Cache-Control: max-age=3600 

                                        
                                            
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
Date: Thu, 29 Sep 2022 07:15:52 GMT 

                                        
                                            
X-Content-Type-Options: nosniff 

                                        
                                            
X-Cache: Hit from cloudfront 

                                        
                                            
Via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-C1 

                                        
                                            
X-Amz-Cf-Id: SDTQ42y8CLFQIZjEaQRfXS6-rHp25LDTxAx4fSX2TJt3v41wQXBt4Q== 

                                        
                                            
Age: 3029 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators

                                                Size:   939

                                                Md5:    2d12f67fe57a87e7366b662d153a5582

                                                Sha1:   d7b02d81cc74f24a251d9363e0f4b0a149264ec1

                                                Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 

                                        
                                            
Host: content-signature-2.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         143.204.55.49

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: binary/octet-stream

                                        

                                        
                                            
content-length: 5348 

                                        
                                            
last-modified: Sat, 10 Sep 2022 18:47:45 GMT 

                                        
                                            
content-disposition: attachment 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
date: Thu, 29 Sep 2022 05:28:28 GMT 

                                        
                                            
etag: "6113f8408c59aebe188d6af273b90743" 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront) 

                                        
                                            
x-amz-cf-pop: OSL50-C1 

                                        
                                            
x-amz-cf-id: NIFCKN5sFwP9lAeNEgGZgVzmdtUW3Uy6wkjnqd91QPCoFZM-y6ht0Q== 

                                        
                                            
age: 9474 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PEM certificate\012- , ASCII text

                                                Size:   5348

                                                Md5:    6113f8408c59aebe188d6af273b90743

                                                Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b

                                                Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: application/json 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: application/json 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         143.204.55.36

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/json

                                        

                                        
                                            
Content-Length: 329 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Access-Control-Allow-Origin: * 

                                        
                                            
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After 

                                        
                                            
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT 

                                        
                                            
Strict-Transport-Security: max-age=31536000 

                                        
                                            
X-Content-Type-Options: nosniff 

                                        
                                            
Cache-Control: max-age=3600, max-age=3600 

                                        
                                            
Date: Thu, 29 Sep 2022 07:29:33 GMT 

                                        
                                            
Expires: Thu, 29 Sep 2022 07:40:10 GMT 

                                        
                                            
ETag: "1648230346554" 

                                        
                                            
X-Cache: Hit from cloudfront 

                                        
                                            
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-C1 

                                        
                                            
X-Amz-Cf-Id: FwOUSEdbPdu8TrkkpZFGPajqNcqLuJSTgl5I-DB0IUs6kogeCK1QXQ== 

                                        
                                            
Age: 2209 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators

                                                Size:   329

                                                Md5:    0333b0655111aa68de771adfcc4db243

                                                Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb

                                                Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.sca1b.amazontrust.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         143.204.42.165

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Content-Length: 471 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Cache-Control: 'max-age=158059' 

                                        
                                            
Date: Thu, 29 Sep 2022 08:06:22 GMT 

                                        
                                            
Server: ECS (dcb/7EEA) 

                                        
                                            
X-Cache: Miss from cloudfront 

                                        
                                            
Via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-C1 

                                        
                                            
X-Amz-Cf-Id: FNNR5sQTt9tTo6F8z8SHSFqJmLGAMJtnS1UHK86CiIIiL9SX1Km5dg== 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    91a892ff56f96cfc5a38cad8f74a4f66

                                                Sha1:   3589ecb06202d1c522526ce81a458a09efb45700

                                                Sha256: 20cf6e71997e684f4a17529b731a3e7791e856cc9827f5b03c1b88d2fd30e815

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "25F075EFFBD8ACDED8F38D69EA17F673DE3E197B635274D4C52411EF577FE8E7" 

                                        
                                            
Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=2861 

                                        
                                            
Expires: Thu, 29 Sep 2022 08:54:04 GMT 

                                        
                                            
Date: Thu, 29 Sep 2022 08:06:23 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    47f245f9a098439e59436f81d4c03415

                                                Sha1:   950b3eadfd6fc7f859130fa2c63934c6ccd49889

                                                Sha256: 25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "25F075EFFBD8ACDED8F38D69EA17F673DE3E197B635274D4C52411EF577FE8E7" 

                                        
                                            
Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=2861 

                                        
                                            
Expires: Thu, 29 Sep 2022 08:54:04 GMT 

                                        
                                            
Date: Thu, 29 Sep 2022 08:06:23 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    47f245f9a098439e59436f81d4c03415

                                                Sha1:   950b3eadfd6fc7f859130fa2c63934c6ccd49889

                                                Sha256: 25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "25F075EFFBD8ACDED8F38D69EA17F673DE3E197B635274D4C52411EF577FE8E7" 

                                        
                                            
Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=2861 

                                        
                                            
Expires: Thu, 29 Sep 2022 08:54:04 GMT 

                                        
                                            
Date: Thu, 29 Sep 2022 08:06:23 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    47f245f9a098439e59436f81d4c03415

                                                Sha1:   950b3eadfd6fc7f859130fa2c63934c6ccd49889

                                                Sha256: 25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F75de31dd-bbf0-4a21-bfac-94f0062f4da4.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 10023 

                                        
                                            
x-amzn-requestid: 0cb6b9a1-0707-4094-b197-5a0add2df717 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: ZMK4dHJLIAMFWmg= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-6334be9c-2d8bbb17157900f126c5bb3c;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Wed, 28 Sep 2022 21:37:32 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: wZ2hBqHAdwimAVV3p-CJFrb9zQ-CTN5ar9CB-cu0mZoENYUFTKKPWQ== 

                                        
                                            
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 ddaf46a95abcfc80e8eae76235e2127c.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Wed, 28 Sep 2022 22:04:58 GMT 

                                        
                                            
age: 36085 

                                        
                                            
etag: "e1067a2dfbc22e7eb196046d57bd1e17604dba75" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   10023

                                                Md5:    f4505f57697072468da82e0b536d0d5b

                                                Sha1:   e1067a2dfbc22e7eb196046d57bd1e17604dba75

                                                Sha256: b5e79054f165f38b99f93a8128284f82076523988aeb102b85dd8ff1a2870d00

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9d0e9057-f203-4080-95b8-652ecd15effa.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 7859 

                                        
                                            
x-amzn-requestid: 34d0718f-46d4-446f-bb06-8449bd8f4287 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: ZIlO4FcBoAMFy0w= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63334f2b-58ae81c9077e4f1575750f15;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Tue, 27 Sep 2022 19:29:47 GMT 

                                        
                                            
x-amz-cf-pop: SEA73-P1 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: LwYd0qn4P-zh1W4GvU8vNEo3_TZHEqtErAj3UKx7a82LIDaBsiXE-w== 

                                        
                                            
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Wed, 28 Sep 2022 19:04:20 GMT 

                                        
                                            
age: 46923 

                                        
                                            
etag: "35ec6e80d324bb215796c590a7ffafbaea55d88e" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   7859

                                                Md5:    c62a6368c456e9614ca4c8e360a2ef12

                                                Sha1:   35ec6e80d324bb215796c590a7ffafbaea55d88e

                                                Sha256: 90a37acc6beda1aa98a98cb84e00a7e469d6d919a14f4709c5f67a83ae95278d

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99f26bb4-2c5c-44ef-86d3-90fd05ec1ce0.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 9654 

                                        
                                            
x-amzn-requestid: 7961f184-9476-43de-bf35-8ccb50ee1760 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: ZGVYsHA6oAMFvRA= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63326904-05f567f7606462ac44f89987;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Tue, 27 Sep 2022 03:07:48 GMT 

                                        
                                            
x-amz-cf-pop: SEA73-P1 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: XaB4TwXv4xy0Sy3dncNYZWEPEnHY5BkEHR7fZDK59APYkzH9DPdT7A== 

                                        
                                            
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Thu, 29 Sep 2022 04:20:40 GMT 

                                        
                                            
age: 13543 

                                        
                                            
etag: "44cc19b21912d07f82a88af5b2fa6d3e370459bf" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   9654

                                                Md5:    36ae9444071dd70dcf86802c370ffda9

                                                Sha1:   44cc19b21912d07f82a88af5b2fa6d3e370459bf

                                                Sha256: 99984d108bf31d733414f7f1352e17225ac21ac2dbfb4b1e7fa7ae80e5b6b822

                                        
                                            GET /sw.js?v=1664438781006 HTTP/1.1 

                                        
                                            
Host: go.monetizer.mobi

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Service-Worker: script 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Cookie: u=fb322d59fb105746007a9a2c8040d3fc 

                                        
                                            
Sec-Fetch-Dest: serviceworker 

                                        
                                            
Sec-Fetch-Mode: same-origin 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
TE: trailers

                                         198.143.165.221

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/javascript

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Thu, 29 Sep 2022 08:06:23 GMT 

                                        
                                            
content-length: 775 

                                        
                                            
last-modified: Fri, 23 Sep 2022 11:12:42 GMT 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
etag: "632d94aa-307" 

                                        
                                            
content-encoding: gzip 

                                        
                                            
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline'; 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text

                                                Size:   775

                                                Md5:    de06f24ba6d6b0c514015a9847dace54

                                                Sha1:   c9662e4339d4f72af3526b21d4d6d68df21b0ba9

                                                Sha256: 70d55f6e4bab19ae4b3cc61642e88a78a599b060c72d10c15c5f937e34305ee9

                                        
                                            GET /proc.php?76278d19336741689460c525def26b9a514dcb50 HTTP/1.1 

                                        
                                            
Host: go.monetizer.mobi

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://go.monetizer.mobi/?utm_term=7148710139195818023&ver=4viyaptcjo&utm_content=e6c2c6dcd68fd49594fc9695a6a79597828bb8888e8f8ebdb2c6b0c4b6b78587b2bb88b0bdb68cbd82b280b3b6b6bcb4aaaba9a9aeafacada293a1919697f8f4848f9b8a8f9f89c09291898c87959de5cbfbf8cbcaffcec9f2f3f085848291f5cafac8f8fcf7fccdf3f3f2f5c6c7c4c5dae8edebe8ebebebebebe6e2e0efece61b84 

                                        
                                            
Cookie: u=fb322d59fb105746007a9a2c8040d3fc 

                                        
                                            
Upgrade-Insecure-Requests: 1 

                                        
                                            
Sec-Fetch-Dest: document 

                                        
                                            
Sec-Fetch-Mode: navigate 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         198.143.165.221

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/html; charset=UTF-8

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Thu, 29 Sep 2022 08:06:24 GMT 

                                        
                                            
location: https://www.wewillserv.com/?sl=5467509-4538f&data1=Track1&data2=Track2&tag=M7148710139195818023&website=797-403c551a&placement=797 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
x-powered-by: PHP/8.1.9 

                                        
                                            
cache-control: no-store, no-cache, must-revalidate, max-age=0 

                                        
                                            
pragma: no-cache 

                                        
                                            
expires: Thu, 01 Jan 1970 00:00:00 GMT 

                                        
                                            
strict-transport-security: max-age=31536000; includeSubdomains; 

                                        
                                            
content-encoding: gzip 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3576), with no line terminators

                                                Size:   1550

                                                Md5:    7998dd01c8812d9dd798907c97005eed

                                                Sha1:   612aa87417010236fb164f08db384eac59474dc4

                                                Sha256: ecf19a360780434c21ea17e43127d8acc927707b7dfdd42a96612a0ffc80c6a3

                                        
                                            GET /favicon.ico HTTP/1.1 

                                        
                                            
Host: www.wewillserv.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin

                                         51.68.82.147

                                        
                                            HTTP/1.1 204 No Content

                                        

                                        
                                            
Server: openresty 

                                        
                                            
Date: Thu, 29 Sep 2022 08:06:24 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            GET /sl?id=5f0efd61dabed1d602e0fe6a&pid=503&sub1=330005991c0cc852aa6ab18dda43785484a4a0929-202209-flb*5467509-4538f*M7148710139195818023*sl_5467509-4538f*8ac645e04719f7cb05e428046bff327f726048aa*797-403c551a*797 HTTP/1.1 

                                        
                                            
Host: admoustache.go2affise.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1 

                                        
                                            
Sec-Fetch-Dest: document 

                                        
                                            
Sec-Fetch-Mode: navigate 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.147.1.177

                                        
                                            HTTP/2 302 Found

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Thu, 29 Sep 2022 08:06:25 GMT 

                                        
                                            
content-length: 0 

                                        
                                            
location: https://myofferplus.com/rc/a91581ead4?affclick=633552012aba9c0001d5797a&pubid=503 

                                        
                                            
set-cookie: afclick=633552012aba9c0001d5797a; expires=Fri, 29 Sep 2023 08:06:25 GMT; secure; SameSite=None 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            GET /s.php?p=c%3As_8942pggbfij953c&d=631f396258fd6b044f727c62&pid=puba993c1fe580048869e2b840d7309f3da&s=8063a697 HTTP/1.1 

                                        
                                            
Host: t3.hightid.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://myofferplus.com/ 

                                        
                                            
Upgrade-Insecure-Requests: 1 

                                        
                                            
Sec-Fetch-Dest: document 

                                        
                                            
Sec-Fetch-Mode: navigate 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         51.161.115.163

                                        
                                            HTTP/1.1 302 Found 

                                        
                                            
Content-Type: text/html; charset=UTF-8

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Date: Thu, 29 Sep 2022 08:06:26 GMT 

                                        
                                            
Content-Length: 0 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Round: 125rsbtsf2 

                                        
                                            
Raund: 1je 

                                        
                                            
Location: https://60.us.tealwinds.xyz/feed/?link=true&tid=60&subid=60.8063a697&ref=https%3A%2F%2Fmyofferplus.com%2F&s1=633552024c3e283b7d1d32dd 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            GET /feed/?link=true&tid=60&subid=60.8063a697&ref=https%3A%2F%2Fmyofferplus.com%2F&s1=633552024c3e283b7d1d32dd HTTP/1.1 

                                        
                                            
Host: 60.us.tealwinds.xyz

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Referer: https://myofferplus.com/ 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1 

                                        
                                            
Sec-Fetch-Dest: document 

                                        
                                            
Sec-Fetch-Mode: navigate 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         23.235.251.114

                                        
                                            HTTP/1.1 301 Moved Permanently

                                        

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
Location: https://redir.findthewind.xyz/click/invalid/?tid=60&subid=60.8063a697 

                                        
                                            
Date: Thu, 29 Sep 2022 08:06:28 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Keep-Alive: timeout=5 

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            GET /click/invalid/?tid=60&subid=60.8063a697 HTTP/1.1 

                                        
                                            
Host: redir.findthewind.xyz

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Referer: https://myofferplus.com/ 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1 

                                        
                                            
Sec-Fetch-Dest: document 

                                        
                                            
Sec-Fetch-Mode: navigate 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         198.211.113.186

                                        
                                            HTTP/1.1 302 Found 

                                        
                                            
Content-Type: text/html; charset=utf-8

                                        

                                        
                                            
X-Powered-By: Express 

                                        
                                            
Surrogate-Control: no-store 

                                        
                                            
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Expires: 0 

                                        
                                            
Location: https://t2.hightid.com/l.php?p=c:j1z0vtg886aak8nuk&d=6332b03dd7475723f76f5a35&s=60 

                                        
                                            
Vary: Accept 

                                        
                                            
Content-Length: 224 

                                        
                                            
Date: Thu, 29 Sep 2022 08:06:28 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Keep-Alive: timeout=5 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document, ASCII text, with no line terminators

                                                Size:   224

                                                Md5:    24bd1ebbe2164d9406933c6eaed43a1a

                                                Sha1:   9b08f45b5fbabd159967ba97e3af0d5cb8dc7984

                                                Sha256: df43f6e5a58e1ca9311c35ef28909a40e8cdaa4b74f005005074edfae88c6864

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "5F6E1585DBC7998EDC196DE900A68EC8278BA680E9CB1BB114A0C56F27D86FC5" 

                                        
                                            
Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=18919 

                                        
                                            
Expires: Thu, 29 Sep 2022 13:21:48 GMT 

                                        
                                            
Date: Thu, 29 Sep 2022 08:06:29 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    b1e9cd49b43b7ac4e275b5ac87b65ebb

                                                Sha1:   6eb147a1af994755a19649bcadba248ba6941fc7

                                                Sha256: 5f6e1585dbc7998edc196de900a68ec8278ba680e9cb1bb114a0c56f27d86fc5

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "0BF20715AAC5C13B2C3756076C41EBEE01E695AB92D1178FFFA07CFEC8EAD631" 

                                        
                                            
Last-Modified: Thu, 29 Sep 2022 01:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=21600 

                                        
                                            
Expires: Thu, 29 Sep 2022 14:06:30 GMT 

                                        
                                            
Date: Thu, 29 Sep 2022 08:06:30 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    f68cc7fba045d1f4d6b5e53f863b29f7

                                                Sha1:   964c52259c9aba216687e54944fdb96d1c206fcc

                                                Sha256: 0bf20715aac5c13b2c3756076c41ebee01e695ab92d1178fffa07cfec8ead631

                                        
                                            GET /click2?i=N2FHFKRXKO8_0&ci=3379504167676553556&j=rv%3Db%26ss%3D1280x1024%26ws%3D1280x939%26wp%3D0x0%26ce%3D1%26ck%3Djc%26cv%3D5221%26cs%3D1%26fr%3D0%26hc%3D0%26fl%3Dnull%26jv%3Dnull%26sc%3D24%26hr%3D12%26rf%3Dmyofferplus.com%26lo%3Dserve.paradisesummer.xyz%26mb%3D0%26hb%3D0%26pl%3DLinux%2Bx86_64%26ua%3DMozilla%252F5.0%2B%28X11%253B%2BLinux%2Bx86_64%253B%2Brv%253A96.0%29%2BGecko%252F20100101%2BFirefox%252F96.0%26nd%3D0%26to%3Dnull&pub_clickid=6335520435dd2b3676770171 HTTP/1.1 

                                        
                                            
Host: go.redanemone.xyz

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://serve.paradisesummer.xyz/ 

                                        
                                            
Cookie: x3328552=497849460 

                                        
                                            
Upgrade-Insecure-Requests: 1 

                                        
                                            
Sec-Fetch-Dest: document 

                                        
                                            
Sec-Fetch-Mode: navigate 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         198.134.116.30

                                        
                                            HTTP/1.1 302 Found

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Date: Thu, 29 Sep 2022 08:06:30 GMT 

                                        
                                            
Content-Length: 0 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Cache-Control: no-store 

                                        
                                            
Age: 0 

                                        
                                            
Location: https://www.forza.idescargarapk.com/get.php?code=TkdXUDhMNFpITTFjUXB5YWpsN01TZz09&clickid=fccB7MlSOI8&campaignid=934057&siteid=436757.310821_384272&publishid=436757&country=no&os=Linux&browser=FIREFOX_96.0&referrer=https%3A%2F%2Fserve.paradisesummer.xyz%2F&device=Desktop&carrier=Blix+Solutions&connection=&bid=0.0002 

                                        
                                            
Pragma: no-cache 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.godaddy.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 75 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         192.124.249.24

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: Sucuri/Cloudproxy 

                                        
                                            
Date: Thu, 29 Sep 2022 08:06:30 GMT 

                                        
                                            
Content-Length: 1777 

                                        
                                            
Connection: keep-alive 

                                        
                                            
X-Sucuri-ID: 19024 

                                        
                                            
Content-Transfer-Encoding: Binary 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate 

                                        
                                            
Last-Modified: Wed, 28 Sep 2022 23:44:48 GMT 

                                        
                                            
Expires: Thu, 29 Sep 2022 23:44:48 GMT 

                                        
                                            
ETag: "53982e03dcc14e4e1484e77c103563d3ebf29928" 

                                        
                                            
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA" 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   1777

                                                Md5:    4df50ef44a1104faa2b472b584c63137

                                                Sha1:   53982e03dcc14e4e1484e77c103563d3ebf29928

                                                Sha256: 7afe8db4798d32ecd94f8ea88e32de515d63ea80c7afab259fd5a5a98ec54ae4

                                        
                                            GET /?utm_term=7148710139195818023&ver=4viyaptcjo&utm_content=e6c2c6dcd68fd49594fc9695a6a79597828bb8888e8f8ebdb2c6b0c4b6b78587b2bb88b0bdb68cbd82b280b3b6b6bcb4aaaba9a9aeafacada293a1919697f8f4848f9b8a8f9f89c09291898c87959de5cbfbf8cbcaffcec9f2f3f085848291f5cafac8f8fcf7fccdf3f3f2f5c6c7c4c5dae8edebe8ebebebebebe6e2e0efece61b84 HTTP/1.1 

                                        
                                            
Host: go.monetizer.mobi

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://go.monetizer.mobi/?utm_medium=ec4eee60be986151ad56a07d62a9c3fe7802b9db&utm_campaign=mainstream2021&1=1&cid=4ef9afa2-961c-45fb-9ab6-28be1113c77e 

                                        
                                            
Cookie: u=fb322d59fb105746007a9a2c8040d3fc 

                                        
                                            
Upgrade-Insecure-Requests: 1 

                                        
                                            
Sec-Fetch-Dest: document 

                                        
                                            
Sec-Fetch-Mode: navigate 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         198.143.165.221

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/html; charset=utf-8

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Thu, 29 Sep 2022 08:06:23 GMT 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
x-powered-by: PHP/8.1.9 

                                        
                                            
cache-control: no-store, no-cache, must-revalidate, max-age=0 

                                        
                                            
pragma: no-cache 

                                        
                                            
expires: Thu, 01 Jan 1970 00:00:00 GMT 

                                        
                                            
strict-transport-security: max-age=31536000; includeSubdomains; 

                                        
                                            
content-encoding: gzip 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                        
                                            GET /redirect.css HTTP/1.1 

                                        
                                            
Host: cdn.addlnk.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://myofferplus.com/ 

                                        
                                            
Sec-Fetch-Dest: style 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         172.67.191.221

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/css

                                        

                                        
                                            
date: Thu, 29 Sep 2022 08:06:25 GMT 

                                        
                                            
cf-bgj: minify 

                                        
                                            
cf-polished: origSize=1680 

                                        
                                            
etag: W/"3ae56d32551602b41f9046c14d1cfde2" 

                                        
                                            
last-modified: Wed, 13 Mar 2019 00:03:12 GMT 

                                        
                                            
x-amz-id-2: BUW6rlWHZvzQnvJHp4gBkVRIGc8DfdhWdOpgruWqMqu7ownlHIapox/IYSueiBqz+QseNtzP+2A= 

                                        
                                            
x-amz-request-id: KYXF7EGSHW20KRRM 

                                        
                                            
cf-cache-status: HIT 

                                        
                                            
age: 1833 

                                        
                                            
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fl5t3duufopukxvWUCPE73KVBc7endx6T3lplAArysFfrjbLmjMx2H5GQFlj0G2X4PwQOe77wWquV3obm5ZHa%2F1fI%2Fc%2BNDmoQXQOg%2BT8MWdXTPfzmzgzNgPAQWZIpF1uVg%3D%3D"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
server: cloudflare 

                                        
                                            
cf-ray: 7523382b5d871c12-OSL 

                                        
                                            
content-encoding: br 

                                        
                                            
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

URL	snlg-glo.echopriority.com/t/clk
IP	52.58.131.39 (Germany)
ASN	#16509 AMAZON-02
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2022-09-29 08:06:32 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	1
urlquery alerts	No alerts detected
Tags	None

Request	Response
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 143.204.55.36 HASH: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551 143.204.55.36 HTTP/1.1 200 OK Content-Type: application/json Content-Length: 939 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert Cache-Control: max-age=3600 Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Date: Thu, 29 Sep 2022 07:15:52 GMT X-Content-Type-Options: nosniff X-Cache: Hit from cloudfront Via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: SDTQ42y8CLFQIZjEaQRfXS6-rHp25LDTxAx4fSX2TJt3v41wQXBt4Q== Age: 3029 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 2d12f67fe57a87e7366b662d153a5582 Sha1: d7b02d81cc74f24a251d9363e0f4b0a149264ec1 Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: a382476d14b6ae14003333e7acdfbbd9ae8775d4c1a7d5c31116f33987043cff 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "A382476D14B6AE14003333E7ACDFBBD9AE8775D4C1A7D5C31116F33987043CFF" Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=15984 Expires: Thu, 29 Sep 2022 12:32:45 GMT Date: Thu, 29 Sep 2022 08:06:21 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 6dd4587c98aef98ad0939030a6976a7f Sha1: 92dc5966ac2deb0c3ac7fdd02bf8d28f9239801e Sha256: a382476d14b6ae14003333e7acdfbbd9ae8775d4c1a7d5c31116f33987043cff
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 143.204.55.49 HASH: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770 143.204.55.49 HTTP/2 200 OK content-type: binary/octet-stream content-length: 5348 last-modified: Sat, 10 Sep 2022 18:47:45 GMT content-disposition: attachment accept-ranges: bytes server: AmazonS3 date: Thu, 29 Sep 2022 05:28:28 GMT etag: "6113f8408c59aebe188d6af273b90743" x-cache: Hit from cloudfront via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-C1 x-amz-cf-id: NIFCKN5sFwP9lAeNEgGZgVzmdtUW3Uy6wkjnqd91QPCoFZM-y6ht0Q== age: 9474 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 6113f8408c59aebe188d6af273b90743 Sha1: 7398873bf00f99944eaa77ad3ebc0d43c23dba6b Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Thu, 29 Sep 2022 08:06:21 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 143.204.55.36 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 143.204.55.36 HTTP/1.1 200 OK Content-Type: application/json Content-Length: 329 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Cache-Control: max-age=3600, max-age=3600 Date: Thu, 29 Sep 2022 07:29:33 GMT Expires: Thu, 29 Sep 2022 07:40:10 GMT ETag: "1648230346554" X-Cache: Hit from cloudfront Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: FwOUSEdbPdu8TrkkpZFGPajqNcqLuJSTgl5I-DB0IUs6kogeCK1QXQ== Age: 2209 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 09604aed7cbca7971bfcb5afcb53591600b944f28eff21aa65dc601e78cdda53 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 3328 Cache-Control: 'max-age=158059' Date: Thu, 29 Sep 2022 08:06:22 GMT Last-Modified: Thu, 29 Sep 2022 07:10:54 GMT Server: ECS (ska/F714) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 3526d5ce1381ba26cbc553db057e1915 Sha1: fe01c920696448e8bf12e6fff877bce8281d34a2 Sha256: 09604aed7cbca7971bfcb5afcb53591600b944f28eff21aa65dc601e78cdda53
GET /t/clk HTTP/1.1 Host: snlg-glo.echopriority.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: snlg-glo.echopriority.com/t/clk FQDN: snlg-glo.echopriority.com IP: 3.71.126.115 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 3.71.126.115 HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Thu, 29 Sep 2022 08:06:22 GMT Content-Length: 0 Connection: keep-alive Server: nginx/1.12.2 Location: https://so-glo.yoptv33.com/t/clk?id=DQqT5fxjrUGKRmCl&rl=Dkxpn&rcode=R09&rseq=R09,R99,R98 Vary: Cookie, Origin --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Alerts: Blocklists: - fortinet: Malware
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: 0r7MUTi0lvkIdynO8UfLdw== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 54.70.239.215 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 54.70.239.215 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: kwwFExfXJL9s2yzcOwZrZyqld+I= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: ocsp.sca1b.amazontrust.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.sca1b.amazontrust.com/ FQDN: ocsp.sca1b.amazontrust.com IP: 143.204.42.165 HASH: 20cf6e71997e684f4a17529b731a3e7791e856cc9827f5b03c1b88d2fd30e815 143.204.42.165 HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Cache-Control: 'max-age=158059' Date: Thu, 29 Sep 2022 08:06:22 GMT Server: ECS (dcb/7EEA) X-Cache: Miss from cloudfront Via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: FNNR5sQTt9tTo6F8z8SHSFqJmLGAMJtnS1UHK86CiIIiL9SX1Km5dg== --- Additional Info --- Magic: data Size: 471 Md5: 91a892ff56f96cfc5a38cad8f74a4f66 Sha1: 3589ecb06202d1c522526ce81a458a09efb45700 Sha256: 20cf6e71997e684f4a17529b731a3e7791e856cc9827f5b03c1b88d2fd30e815
GET /t/clk?id=DQqT5fxjrUGKRmCl&rl=Dkxpn&rcode=R09&rseq=R09,R99,R98 HTTP/1.1 Host: so-glo.yoptv33.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	URL: so-glo.yoptv33.com/t/clk?id=DQqT5fxjrUGKRmCl&rl=Dkxpn&r (...) FQDN: so-glo.yoptv33.com IP: 52.58.131.39 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 52.58.131.39 HTTP/2 302 Found content-type: text/html; charset=utf-8 date: Thu, 29 Sep 2022 08:06:22 GMT content-length: 0 location: https://go.monetizer.mobi/?utm_medium=ec4eee60be986151ad56a07d62a9c3fe7802b9db&utm_campaign=mainstream2021&1=1&cid=4ef9afa2-961c-45fb-9ab6-28be1113c77e server: nginx/1.12.2 cache-control: no-transform x-frame-options: SAMEORIGIN vary: Cookie, Origin set-cookie: uip="[\"6Lnl0RA3\"\054 {\"lg3J9\": \"zkERRW3\"}]:1odoYo:NX37IpldZbk_eaufJOt_t3TL9O4"; expires=Sat, 29 Oct 2022 08:06:22 GMT; Max-Age=2592000; Path=/ ydt_69a756d9a2a44370a5365f82fbdfa6e5="[\"4ef9afa2-961c-45fb-9ab6-28be1113c77e\"]:1odoYo:A9-gBpx2eHGOZfGV-SFUnlszGT4"; expires=Sat, 29 Oct 2022 10:06:22 GMT; Max-Age=2599200; Path=/; SameSite=None; Secure X-Firefox-Spdy: h2 --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "25F075EFFBD8ACDED8F38D69EA17F673DE3E197B635274D4C52411EF577FE8E7" Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2861 Expires: Thu, 29 Sep 2022 08:54:04 GMT Date: Thu, 29 Sep 2022 08:06:23 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 47f245f9a098439e59436f81d4c03415 Sha1: 950b3eadfd6fc7f859130fa2c63934c6ccd49889 Sha256: 25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "25F075EFFBD8ACDED8F38D69EA17F673DE3E197B635274D4C52411EF577FE8E7" Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2861 Expires: Thu, 29 Sep 2022 08:54:04 GMT Date: Thu, 29 Sep 2022 08:06:23 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 47f245f9a098439e59436f81d4c03415 Sha1: 950b3eadfd6fc7f859130fa2c63934c6ccd49889 Sha256: 25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "25F075EFFBD8ACDED8F38D69EA17F673DE3E197B635274D4C52411EF577FE8E7" Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2861 Expires: Thu, 29 Sep 2022 08:54:04 GMT Date: Thu, 29 Sep 2022 08:06:23 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 47f245f9a098439e59436f81d4c03415 Sha1: 950b3eadfd6fc7f859130fa2c63934c6ccd49889 Sha256: 25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "25F075EFFBD8ACDED8F38D69EA17F673DE3E197B635274D4C52411EF577FE8E7" Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2861 Expires: Thu, 29 Sep 2022 08:54:04 GMT Date: Thu, 29 Sep 2022 08:06:23 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 47f245f9a098439e59436f81d4c03415 Sha1: 950b3eadfd6fc7f859130fa2c63934c6ccd49889 Sha256: 25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "25F075EFFBD8ACDED8F38D69EA17F673DE3E197B635274D4C52411EF577FE8E7" Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2861 Expires: Thu, 29 Sep 2022 08:54:04 GMT Date: Thu, 29 Sep 2022 08:06:23 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 47f245f9a098439e59436f81d4c03415 Sha1: 950b3eadfd6fc7f859130fa2c63934c6ccd49889 Sha256: 25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5cbaf6d-fc16-4449-8b54-1d55f68eff4f.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 511f5aa33750cd4a02cf3968bf165ffa521e77cb4fb7135b516d7ad14e8b9d01 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 14073 x-amzn-requestid: 4ff72590-e28d-4d4b-af1a-4d62e75e3d66 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ZMKnpEsJoAMFlBQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6334be30-38b014a25551aa0a2ab04ccf;Sampled=0 x-amzn-remapped-date: Wed, 28 Sep 2022 21:35:44 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: dyDhatfeYzzSQpRY7JpOIu3VhjlI8IOWcKCLCBWYaxJ1CYgCxqdQjA== via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google date: Wed, 28 Sep 2022 21:49:42 GMT age: 37001 etag: "72603efba82d649ce5a7a0ca45dc830c0d9ef012" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 14073 Md5: 11594ce7500d8776bfd5162b17f87d72 Sha1: 72603efba82d649ce5a7a0ca45dc830c0d9ef012 Sha256: 511f5aa33750cd4a02cf3968bf165ffa521e77cb4fb7135b516d7ad14e8b9d01
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F75de31dd-bbf0-4a21-bfac-94f0062f4da4.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: b5e79054f165f38b99f93a8128284f82076523988aeb102b85dd8ff1a2870d00 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10023 x-amzn-requestid: 0cb6b9a1-0707-4094-b197-5a0add2df717 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ZMK4dHJLIAMFWmg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6334be9c-2d8bbb17157900f126c5bb3c;Sampled=0 x-amzn-remapped-date: Wed, 28 Sep 2022 21:37:32 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: wZ2hBqHAdwimAVV3p-CJFrb9zQ-CTN5ar9CB-cu0mZoENYUFTKKPWQ== via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 ddaf46a95abcfc80e8eae76235e2127c.cloudfront.net (CloudFront), 1.1 google date: Wed, 28 Sep 2022 22:04:58 GMT age: 36085 etag: "e1067a2dfbc22e7eb196046d57bd1e17604dba75" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10023 Md5: f4505f57697072468da82e0b536d0d5b Sha1: e1067a2dfbc22e7eb196046d57bd1e17604dba75 Sha256: b5e79054f165f38b99f93a8128284f82076523988aeb102b85dd8ff1a2870d00
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb46b76b4-e585-46c3-bf03-5bfe9273000c.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 8c25b9129fc01f6ffad911994e91436ab0026ed0b54568757a20ab7f92584467 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 3332 x-amzn-requestid: fb6cb616-5b4d-4aaf-a891-50b4de8b6f95 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ZJ_6AGNYIAMFSHQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6333e03f-377fe02d1cc7ad2b3a15ca1a;Sampled=0 x-amzn-remapped-date: Wed, 28 Sep 2022 05:48:47 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: nJJZxZlapt4k5988yU-V94pBBH2SmfSZ0Zb_oJXA07mppg0lF04wLg== via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google date: Wed, 28 Sep 2022 17:18:10 GMT age: 53293 etag: "4fc0699c763f67a2602b4b3f46b8b4013d2049c6" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 3332 Md5: 6ac86079d2901fb11bfaff81d91bb2d2 Sha1: 4fc0699c763f67a2602b4b3f46b8b4013d2049c6 Sha256: 8c25b9129fc01f6ffad911994e91436ab0026ed0b54568757a20ab7f92584467
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9d0e9057-f203-4080-95b8-652ecd15effa.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 90a37acc6beda1aa98a98cb84e00a7e469d6d919a14f4709c5f67a83ae95278d 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7859 x-amzn-requestid: 34d0718f-46d4-446f-bb06-8449bd8f4287 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ZIlO4FcBoAMFy0w= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63334f2b-58ae81c9077e4f1575750f15;Sampled=0 x-amzn-remapped-date: Tue, 27 Sep 2022 19:29:47 GMT x-amz-cf-pop: SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: LwYd0qn4P-zh1W4GvU8vNEo3_TZHEqtErAj3UKx7a82LIDaBsiXE-w== via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google date: Wed, 28 Sep 2022 19:04:20 GMT age: 46923 etag: "35ec6e80d324bb215796c590a7ffafbaea55d88e" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7859 Md5: c62a6368c456e9614ca4c8e360a2ef12 Sha1: 35ec6e80d324bb215796c590a7ffafbaea55d88e Sha256: 90a37acc6beda1aa98a98cb84e00a7e469d6d919a14f4709c5f67a83ae95278d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe91221c7-ce03-4ea5-9826-7a53eaafc5e6.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: eabd1bfef29cad4045d688a909b9a8c88818d80bb432ce642d055583cf66d77d 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9002 x-amzn-requestid: 0623931b-a4d6-49de-ba32-d071c08eddbd x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ZMKoiGKRIAMFhYQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6334be36-1573e2e91c85617424db019f;Sampled=0 x-amzn-remapped-date: Wed, 28 Sep 2022 21:35:50 GMT x-amz-cf-pop: SEA73-P2, SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: mmSMfKcxGrh9meSHTynf1wRZLrzc4wejFbKSO6qaJ3hn8h4-QwAAcQ== via: 1.1 2a44ef7b9d28e74c78ffadeedcbb887c.cloudfront.net (CloudFront), 1.1 ead78c395f4bede3ec6cd7ea180e3d3a.cloudfront.net (CloudFront), 1.1 google date: Wed, 28 Sep 2022 21:50:26 GMT age: 36957 etag: "d76293673a7aa2861b069ced614cdcdb84fed6d3" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9002 Md5: c80d7ce8a9d3fba54855e05731db759c Sha1: d76293673a7aa2861b069ced614cdcdb84fed6d3 Sha256: eabd1bfef29cad4045d688a909b9a8c88818d80bb432ce642d055583cf66d77d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99f26bb4-2c5c-44ef-86d3-90fd05ec1ce0.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 99984d108bf31d733414f7f1352e17225ac21ac2dbfb4b1e7fa7ae80e5b6b822 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9654 x-amzn-requestid: 7961f184-9476-43de-bf35-8ccb50ee1760 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ZGVYsHA6oAMFvRA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63326904-05f567f7606462ac44f89987;Sampled=0 x-amzn-remapped-date: Tue, 27 Sep 2022 03:07:48 GMT x-amz-cf-pop: SEA73-P1 x-cache: Miss from cloudfront x-amz-cf-id: XaB4TwXv4xy0Sy3dncNYZWEPEnHY5BkEHR7fZDK59APYkzH9DPdT7A== via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google date: Thu, 29 Sep 2022 04:20:40 GMT age: 13543 etag: "44cc19b21912d07f82a88af5b2fa6d3e370459bf" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9654 Md5: 36ae9444071dd70dcf86802c370ffda9 Sha1: 44cc19b21912d07f82a88af5b2fa6d3e370459bf Sha256: 99984d108bf31d733414f7f1352e17225ac21ac2dbfb4b1e7fa7ae80e5b6b822
GET /favicon.ico HTTP/1.1 Host: go.monetizer.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://go.monetizer.mobi/?utm_term=7148710139195818023&ver=4viyaptcjo&utm_content=e6c2c6dcd68fd49594fc9695a6a79597828bb8888e8f8ebdb2c6b0c4b6b78587b2bb88b0bdb68cbd82b280b3b6b6bcb4aaaba9a9aeafacada293a1919697f8f4848f9b8a8f9f89c09291898c87959de5cbfbf8cbcaffcec9f2f3f085848291f5cafac8f8fcf7fccdf3f3f2f5c6c7c4c5dae8edebe8ebebebebebe6e2e0efece61b84 Cookie: u=fb322d59fb105746007a9a2c8040d3fc Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: go.monetizer.mobi/favicon.ico FQDN: go.monetizer.mobi IP: 198.143.165.221 HASH: b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc 198.143.165.221 HTTP/2 200 OK content-type: image/x-icon server: nginx date: Thu, 29 Sep 2022 08:06:23 GMT content-length: 1150 last-modified: Wed, 31 Jul 2019 07:48:51 GMT etag: "5d4147e3-47e" expires: Fri, 30 Sep 2022 08:06:23 GMT cache-control: max-age=86400 strict-transport-security: max-age=31536000; includeSubdomains; accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data Size: 1150 Md5: 91abe01116ab422c598e9c8af72cf4da Sha1: 0f2815fe8e067d48537ad168225ab4674271fa27 Sha256: b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc
GET /sw.js?v=1664438781006 HTTP/1.1 Host: go.monetizer.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Service-Worker: script Connection: keep-alive Cookie: u=fb322d59fb105746007a9a2c8040d3fc Sec-Fetch-Dest: serviceworker Sec-Fetch-Mode: same-origin Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers	URL: go.monetizer.mobi/sw.js?v=1664438781006 FQDN: go.monetizer.mobi IP: 198.143.165.221 HASH: 70d55f6e4bab19ae4b3cc61642e88a78a599b060c72d10c15c5f937e34305ee9 198.143.165.221 HTTP/2 200 OK content-type: application/javascript server: nginx date: Thu, 29 Sep 2022 08:06:23 GMT content-length: 775 last-modified: Fri, 23 Sep 2022 11:12:42 GMT vary: Accept-Encoding etag: "632d94aa-307" content-encoding: gzip content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src ; style-src 'unsafe-inline'; X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text Size: 775 Md5: de06f24ba6d6b0c514015a9847dace54 Sha1: c9662e4339d4f72af3526b21d4d6d68df21b0ba9 Sha256: 70d55f6e4bab19ae4b3cc61642e88a78a599b060c72d10c15c5f937e34305ee9
GET /?sl=5467509-4538f&data1=Track1&data2=Track2&tag=M7148710139195818023&website=797-403c551a&placement=797&utm_content=e6c2c6dcd68fd49594fc9695a6a79597828bb8888e8f8ebdb2c6b0c4b6b78587b2bb88b0bdb68cbd82b380b3b6b6bcb4aaaba9a9aeafacada293a1919697f8f4848f9b8a8f9f89c09291898c87959de5cbfbf8cbcaffcec9f2f3f085848291f5cafac8f8fcf7fccdf3f3f2f5c6c7c4c5dae8edebe8ebebebebebe6e2e0efece61b85 HTTP/1.1 Host: www.wewillserv.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://go.monetizer.mobi/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: www.wewillserv.com/?sl=5467509-4538f&data1=Track1&data2 (...) FQDN: www.wewillserv.com IP: 51.68.82.147 HASH: 142a2956716752c543a0e12a5ada634072490b432e02eebfbcffb03760a26bdc 51.68.82.147 HTTP/1.1 200 OK Content-Type: text/html Date: Thu, 29 Sep 2022 08:06:24 GMT Transfer-Encoding: chunked Connection: keep-alive Cache-Control: no-transform --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3751) Size: 5152 Md5: 85912cfae82f28436933b5943b0f3187 Sha1: 33d1b4d436c2e3306178c4af632d0e010ad43638 Sha256: 142a2956716752c543a0e12a5ada634072490b432e02eebfbcffb03760a26bdc
GET /proc.php?76278d19336741689460c525def26b9a514dcb50 HTTP/1.1 Host: go.monetizer.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://go.monetizer.mobi/?utm_term=7148710139195818023&ver=4viyaptcjo&utm_content=e6c2c6dcd68fd49594fc9695a6a79597828bb8888e8f8ebdb2c6b0c4b6b78587b2bb88b0bdb68cbd82b280b3b6b6bcb4aaaba9a9aeafacada293a1919697f8f4848f9b8a8f9f89c09291898c87959de5cbfbf8cbcaffcec9f2f3f085848291f5cafac8f8fcf7fccdf3f3f2f5c6c7c4c5dae8edebe8ebebebebebe6e2e0efece61b84 Cookie: u=fb322d59fb105746007a9a2c8040d3fc Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin TE: trailers	URL: go.monetizer.mobi/proc.php?76278d19336741689460c525def2 (...) FQDN: go.monetizer.mobi IP: 198.143.165.221 HASH: ecf19a360780434c21ea17e43127d8acc927707b7dfdd42a96612a0ffc80c6a3 198.143.165.221 HTTP/2 200 OK content-type: text/html; charset=UTF-8 server: nginx date: Thu, 29 Sep 2022 08:06:24 GMT location: https://www.wewillserv.com/?sl=5467509-4538f&data1=Track1&data2=Track2&tag=M7148710139195818023&website=797-403c551a&placement=797 vary: Accept-Encoding x-powered-by: PHP/8.1.9 cache-control: no-store, no-cache, must-revalidate, max-age=0 pragma: no-cache expires: Thu, 01 Jan 1970 00:00:00 GMT strict-transport-security: max-age=31536000; includeSubdomains; content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3576), with no line terminators Size: 1550 Md5: 7998dd01c8812d9dd798907c97005eed Sha1: 612aa87417010236fb164f08db384eac59474dc4 Sha256: ecf19a360780434c21ea17e43127d8acc927707b7dfdd42a96612a0ffc80c6a3
GET /?sl=5467509-4538f&data1=Track1&data2=Track2&tag=M7148710139195818023&website=797-403c551a&placement=797&utm_content=e6c2c6dcd68fd49594fc9695a6a79597828bb8888e8f8ebdb2c6b0c4b6b78587b2bb88b0bdb68cbd82b380b3b6b6bcb4aaaba9a9aeafacada293a1919697f8f4848f9b8a8f9f89c09291898c87959de5cbfbf8cbcaffcec9f2f3f085848291f5cafac8f8fcf7fccdf3f3f2f5c6c7c4c5dae8edebe8ebebebebebe6e2e0efece61b85&eyeg=3&eyer=0.3805740683138612&eyei=0&eyew=1280&eyeh=939&eyetd=220&eyef=go.monetizer.mobi HTTP/1.1 Host: www.wewillserv.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin	URL: www.wewillserv.com/?sl=5467509-4538f&data1=Track1&data2 (...) FQDN: www.wewillserv.com IP: 51.68.82.147 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 51.68.82.147 HTTP/1.1 302 Found Date: Thu, 29 Sep 2022 08:06:24 GMT Content-Length: 0 Connection: keep-alive Cache-Control: no-transform Location: https://admoustache.go2affise.com/sl?id=5f0efd61dabed1d602e0fe6a&pid=503&sub1=330005991c0cc852aa6ab18dda43785484a4a0929-202209-flb5467509-4538fM7148710139195818023sl_5467509-4538f8ac645e04719f7cb05e428046bff327f726048aa797-403c551a797 --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1 Host: www.wewillserv.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: www.wewillserv.com/favicon.ico FQDN: www.wewillserv.com IP: 51.68.82.147 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 51.68.82.147 HTTP/1.1 204 No Content Server: openresty Date: Thu, 29 Sep 2022 08:06:24 GMT Connection: keep-alive --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sw.js?v=1664438781006 HTTP/1.1 Host: go.monetizer.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Service-Worker: script Connection: keep-alive Cookie: u=fb322d59fb105746007a9a2c8040d3fc Sec-Fetch-Dest: serviceworker Sec-Fetch-Mode: same-origin Sec-Fetch-Site: same-origin If-Modified-Since: Fri, 23 Sep 2022 11:12:42 GMT If-None-Match: "632d94aa-307" Cache-Control: max-age=0 TE: trailers	URL: go.monetizer.mobi/sw.js?v=1664438781006 FQDN: go.monetizer.mobi IP: 198.143.165.221 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 198.143.165.221 HTTP/2 304 Not Modified server: nginx date: Thu, 29 Sep 2022 08:06:25 GMT last-modified: Fri, 23 Sep 2022 11:12:42 GMT vary: Accept-Encoding etag: "632d94aa-307" content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src ; style-src 'unsafe-inline'; X-Firefox-Spdy: h2 --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sl?id=5f0efd61dabed1d602e0fe6a&pid=503&sub1=330005991c0cc852aa6ab18dda43785484a4a0929-202209-flb5467509-4538fM7148710139195818023sl_5467509-4538f8ac645e04719f7cb05e428046bff327f726048aa797-403c551a797 HTTP/1.1 Host: admoustache.go2affise.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: admoustache.go2affise.com/sl?id=5f0efd61dabed1d602e0fe6 (...) FQDN: admoustache.go2affise.com IP: 34.147.1.177 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 34.147.1.177 HTTP/2 302 Found server: nginx date: Thu, 29 Sep 2022 08:06:25 GMT content-length: 0 location: https://myofferplus.com/rc/a91581ead4?affclick=633552012aba9c0001d5797a&pubid=503 set-cookie: afclick=633552012aba9c0001d5797a; expires=Fri, 29 Sep 2023 08:06:25 GMT; secure; SameSite=None access-control-allow-origin: * X-Firefox-Spdy: h2 --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 4bc4e2ac30b4b527557263bcdf6cfd7d91020ae766b3d53e7dc178762b79ef41 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "4BC4E2AC30B4B527557263BCDF6CFD7D91020AE766B3D53E7DC178762B79EF41" Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=16137 Expires: Thu, 29 Sep 2022 12:35:23 GMT Date: Thu, 29 Sep 2022 08:06:26 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: a2d6c1f03cd4e277f75569d4e9f976ed Sha1: 0c1e63b66bf7bcc40fb50ba796c12ff21f2d9229 Sha256: 4bc4e2ac30b4b527557263bcdf6cfd7d91020ae766b3d53e7dc178762b79ef41
GET /s.php?p=c%3As_8942pggbfij953c&d=631f396258fd6b044f727c62&pid=puba993c1fe580048869e2b840d7309f3da&s=8063a697 HTTP/1.1 Host: t3.hightid.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://myofferplus.com/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: t3.hightid.com/s.php?p=c%3As_8942pggbfij953c&d=631f3962 (...) FQDN: t3.hightid.com IP: 51.161.115.163 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 51.161.115.163 HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Server: nginx Date: Thu, 29 Sep 2022 08:06:26 GMT Content-Length: 0 Connection: keep-alive Round: 125rsbtsf2 Raund: 1je Location: https://60.us.tealwinds.xyz/feed/?link=true&tid=60&subid=60.8063a697&ref=https%3A%2F%2Fmyofferplus.com%2F&s1=633552024c3e283b7d1d32dd --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 9b1ce66f1eb236b34219e7777d570a051cbcb4669651b9597da940f8e7130a68 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "9B1CE66F1EB236B34219E7777D570A051CBCB4669651B9597DA940F8E7130A68" Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=21579 Expires: Thu, 29 Sep 2022 14:06:06 GMT Date: Thu, 29 Sep 2022 08:06:27 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: d63f3cc430fb8003cc093b688f7bebbf Sha1: e53d8645b0af7a53c91cb26fb2c3726c6da85199 Sha256: 9b1ce66f1eb236b34219e7777d570a051cbcb4669651b9597da940f8e7130a68
GET /feed/?link=true&tid=60&subid=60.8063a697&ref=https%3A%2F%2Fmyofferplus.com%2F&s1=633552024c3e283b7d1d32dd HTTP/1.1 Host: 60.us.tealwinds.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://myofferplus.com/ Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: 60.us.tealwinds.xyz/feed/?link=true&tid=60&subid=60.806 (...) FQDN: 60.us.tealwinds.xyz IP: 23.235.251.114 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 23.235.251.114 HTTP/1.1 301 Moved Permanently Cache-Control: no-cache Location: https://redir.findthewind.xyz/click/invalid/?tid=60&subid=60.8063a697 Date: Thu, 29 Sep 2022 08:06:28 GMT Connection: keep-alive Keep-Alive: timeout=5 Transfer-Encoding: chunked --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 6e4591d673d5b711eed17ff9e66144f9087d4796c78739fd8d4d463efc6c2293 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "6E4591D673D5B711EED17FF9E66144F9087D4796C78739FD8D4D463EFC6C2293" Last-Modified: Tue, 27 Sep 2022 22:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=16278 Expires: Thu, 29 Sep 2022 12:37:46 GMT Date: Thu, 29 Sep 2022 08:06:28 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 40ff70f729bb5e253344f4c120df4d3a Sha1: 4b38cd4e1ffb9b61458a1cfdf507258309d51f9b Sha256: 6e4591d673d5b711eed17ff9e66144f9087d4796c78739fd8d4d463efc6c2293
GET /click/invalid/?tid=60&subid=60.8063a697 HTTP/1.1 Host: redir.findthewind.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://myofferplus.com/ Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: redir.findthewind.xyz/click/invalid/?tid=60&subid=60.80 (...) FQDN: redir.findthewind.xyz IP: 198.211.113.186 HASH: df43f6e5a58e1ca9311c35ef28909a40e8cdaa4b74f005005074edfae88c6864 198.211.113.186 HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 X-Powered-By: Express Surrogate-Control: no-store Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate Pragma: no-cache Expires: 0 Location: https://t2.hightid.com/l.php?p=c:j1z0vtg886aak8nuk&d=6332b03dd7475723f76f5a35&s=60 Vary: Accept Content-Length: 224 Date: Thu, 29 Sep 2022 08:06:28 GMT Connection: keep-alive Keep-Alive: timeout=5 --- Additional Info --- Magic: HTML document, ASCII text, with no line terminators Size: 224 Md5: 24bd1ebbe2164d9406933c6eaed43a1a Sha1: 9b08f45b5fbabd159967ba97e3af0d5cb8dc7984 Sha256: df43f6e5a58e1ca9311c35ef28909a40e8cdaa4b74f005005074edfae88c6864
GET /l.php?p=c:j1z0vtg886aak8nuk&d=6332b03dd7475723f76f5a35&s=60 HTTP/1.1 Host: t2.hightid.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://myofferplus.com/ Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: t2.hightid.com/l.php?p=c:j1z0vtg886aak8nuk&d=6332b03dd7 (...) FQDN: t2.hightid.com IP: 51.161.115.163 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 51.161.115.163 HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Server: nginx Date: Thu, 29 Sep 2022 08:06:28 GMT Content-Length: 0 Connection: keep-alive Round: 126krdjzga Raund: 1m1 Location: https://go.redanemone.xyz/redirect?feed=384272&url=t2.hightid.com&subid=384272.60.&pub_clickid=6335520435dd2b3676770171&query=no.linux.firefox --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 5f6e1585dbc7998edc196de900a68ec8278ba680e9cb1bb114a0c56f27d86fc5 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "5F6E1585DBC7998EDC196DE900A68EC8278BA680E9CB1BB114A0C56F27D86FC5" Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=18919 Expires: Thu, 29 Sep 2022 13:21:48 GMT Date: Thu, 29 Sep 2022 08:06:29 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: b1e9cd49b43b7ac4e275b5ac87b65ebb Sha1: 6eb147a1af994755a19649bcadba248ba6941fc7 Sha256: 5f6e1585dbc7998edc196de900a68ec8278ba680e9cb1bb114a0c56f27d86fc5
GET /redirect?feed=384272&url=t2.hightid.com&subid=384272.60.&pub_clickid=6335520435dd2b3676770171&query=no.linux.firefox HTTP/1.1 Host: go.redanemone.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://myofferplus.com/ Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: go.redanemone.xyz/redirect?feed=384272&url=t2.hightid.c (...) FQDN: go.redanemone.xyz IP: 198.134.116.30 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 198.134.116.30 HTTP/1.1 302 Found Server: nginx Date: Thu, 29 Sep 2022 08:06:29 GMT Content-Length: 0 Connection: keep-alive Cache-Control: no-store Age: 0 Set-Cookie: x3328552=497849460; Domain=.redanemone.xyz Location: https://serve.paradisesummer.xyz/filter?q=no.linux.firefox&i=N2FHFKRXKO8_0&ci=3379504167676553556&t=471401178&h=23&pub_clickid=6335520435dd2b3676770171 Pragma: no-cache --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 0bf20715aac5c13b2c3756076c41ebee01e695ab92d1178fffa07cfec8ead631 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "0BF20715AAC5C13B2C3756076C41EBEE01E695AB92D1178FFFA07CFEC8EAD631" Last-Modified: Thu, 29 Sep 2022 01:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=21600 Expires: Thu, 29 Sep 2022 14:06:30 GMT Date: Thu, 29 Sep 2022 08:06:30 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: f68cc7fba045d1f4d6b5e53f863b29f7 Sha1: 964c52259c9aba216687e54944fdb96d1c206fcc Sha256: 0bf20715aac5c13b2c3756076c41ebee01e695ab92d1178fffa07cfec8ead631
GET /filter?q=no.linux.firefox&i=N2FHFKRXKO8_0&ci=3379504167676553556&t=471401178&h=23&pub_clickid=6335520435dd2b3676770171 HTTP/1.1 Host: serve.paradisesummer.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://myofferplus.com/ Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: serve.paradisesummer.xyz/filter?q=no.linux.firefox&i=N2 (...) FQDN: serve.paradisesummer.xyz IP: 198.134.116.30 HASH: a74dfac4cf6995484ea31aae9316f094862d6aaf2df7588f224bcaca4abea83b 198.134.116.30 HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Server: nginx Date: Thu, 29 Sep 2022 08:06:30 GMT Content-Length: 5421 Connection: keep-alive Cache-Control: no-store Age: 0 Set-Cookie: c-866324272=497849460 x3328552=497849460; Domain=.paradisesummer.xyz Pragma: no-cache --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (534) Size: 5421 Md5: 922a6b37a24306bb00fd21ab8ba5ee3d Sha1: bee16942b2ce79e3fa78446b51fdc8b1e810e9cd Sha256: a74dfac4cf6995484ea31aae9316f094862d6aaf2df7588f224bcaca4abea83b
GET /click2?i=N2FHFKRXKO8_0&ci=3379504167676553556&j=rv%3Db%26ss%3D1280x1024%26ws%3D1280x939%26wp%3D0x0%26ce%3D1%26ck%3Djc%26cv%3D5221%26cs%3D1%26fr%3D0%26hc%3D0%26fl%3Dnull%26jv%3Dnull%26sc%3D24%26hr%3D12%26rf%3Dmyofferplus.com%26lo%3Dserve.paradisesummer.xyz%26mb%3D0%26hb%3D0%26pl%3DLinux%2Bx86_64%26ua%3DMozilla%252F5.0%2B%28X11%253B%2BLinux%2Bx86_64%253B%2Brv%253A96.0%29%2BGecko%252F20100101%2BFirefox%252F96.0%26nd%3D0%26to%3Dnull&pub_clickid=6335520435dd2b3676770171 HTTP/1.1 Host: go.redanemone.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://serve.paradisesummer.xyz/ Cookie: x3328552=497849460 Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: go.redanemone.xyz/click2?i=N2FHFKRXKO8_0&ci=33795041676 (...) FQDN: go.redanemone.xyz IP: 198.134.116.30 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 198.134.116.30 HTTP/1.1 302 Found Server: nginx Date: Thu, 29 Sep 2022 08:06:30 GMT Content-Length: 0 Connection: keep-alive Cache-Control: no-store Age: 0 Location: https://www.forza.idescargarapk.com/get.php?code=TkdXUDhMNFpITTFjUXB5YWpsN01TZz09&clickid=fccB7MlSOI8&campaignid=934057&siteid=436757.310821_384272&publishid=436757&country=no&os=Linux&browser=FIREFOX_96.0&referrer=https%3A%2F%2Fserve.paradisesummer.xyz%2F&device=Desktop&carrier=Blix+Solutions&connection=&bid=0.0002 Pragma: no-cache --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6362b4f1-5935-43c9-9147-6d019a1ea6cd.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 967e070aec3942c64cc6c4cfdc13d430825c9e5c26dbec5bb3d66237d5978dfc 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 4235 x-amzn-requestid: 60825c64-7743-4b16-b80d-d1195ccb0f23 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ZMK2nFsDoAMFRwg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6334be90-1898e5d9111db7c843c1ebb4;Sampled=0 x-amzn-remapped-date: Wed, 28 Sep 2022 21:37:20 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: C-XC9qsktkENdI6lWZp5RQjeEvrrFMUfBq1mA5dxEjRq5tkfL5Jsxw== via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google date: Wed, 28 Sep 2022 22:04:55 GMT age: 36095 etag: "2bbcd6305b4da3204bf1c04b6db23d44cfc84fbb" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 4235 Md5: 30471179bd7cdeecea2fa4ea98701aef Sha1: 2bbcd6305b4da3204bf1c04b6db23d44cfc84fbb Sha256: 967e070aec3942c64cc6c4cfdc13d430825c9e5c26dbec5bb3d66237d5978dfc
POST / HTTP/1.1 Host: ocsp.godaddy.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 75 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.godaddy.com/ FQDN: ocsp.godaddy.com IP: 192.124.249.24 HASH: 7afe8db4798d32ecd94f8ea88e32de515d63ea80c7afab259fd5a5a98ec54ae4 192.124.249.24 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: Sucuri/Cloudproxy Date: Thu, 29 Sep 2022 08:06:30 GMT Content-Length: 1777 Connection: keep-alive X-Sucuri-ID: 19024 Content-Transfer-Encoding: Binary Cache-Control: public, no-transform, must-revalidate Last-Modified: Wed, 28 Sep 2022 23:44:48 GMT Expires: Thu, 29 Sep 2022 23:44:48 GMT ETag: "53982e03dcc14e4e1484e77c103563d3ebf29928" P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA" --- Additional Info --- Magic: data Size: 1777 Md5: 4df50ef44a1104faa2b472b584c63137 Sha1: 53982e03dcc14e4e1484e77c103563d3ebf29928 Sha256: 7afe8db4798d32ecd94f8ea88e32de515d63ea80c7afab259fd5a5a98ec54ae4
GET /?utm_medium=ec4eee60be986151ad56a07d62a9c3fe7802b9db&utm_campaign=mainstream2021&1=1&cid=4ef9afa2-961c-45fb-9ab6-28be1113c77e HTTP/1.1 Host: go.monetizer.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	URL: go.monetizer.mobi/?utm_medium=ec4eee60be986151ad56a07d6 (...) FQDN: go.monetizer.mobi IP: 198.143.165.221 198.143.165.221 HTTP/2 200 OK content-type: text/html; charset=UTF-8 server: nginx date: Thu, 29 Sep 2022 08:06:23 GMT location: https://go.monetizer.mobi/?utm_term=7148710139195818023&ver=4viyaptcjo vary: Accept-Encoding x-powered-by: PHP/8.1.9 cache-control: no-store, no-cache, must-revalidate, max-age=0 pragma: no-cache expires: Thu, 01 Jan 1970 00:00:00 GMT set-cookie: u=fb322d59fb105746007a9a2c8040d3fc; expires=Fri, 29-Sep-2023 08:06:23 GMT; Max-Age=31536000; path=/ strict-transport-security: max-age=31536000; includeSubdomains; content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info ---
GET /?utm_term=7148710139195818023&ver=4viyaptcjo&utm_content=e6c2c6dcd68fd49594fc9695a6a79597828bb8888e8f8ebdb2c6b0c4b6b78587b2bb88b0bdb68cbd82b280b3b6b6bcb4aaaba9a9aeafacada293a1919697f8f4848f9b8a8f9f89c09291898c87959de5cbfbf8cbcaffcec9f2f3f085848291f5cafac8f8fcf7fccdf3f3f2f5c6c7c4c5dae8edebe8ebebebebebe6e2e0efece61b84 HTTP/1.1 Host: go.monetizer.mobi User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://go.monetizer.mobi/?utm_medium=ec4eee60be986151ad56a07d62a9c3fe7802b9db&utm_campaign=mainstream2021&1=1&cid=4ef9afa2-961c-45fb-9ab6-28be1113c77e Cookie: u=fb322d59fb105746007a9a2c8040d3fc Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin TE: trailers	URL: go.monetizer.mobi/?utm_term=7148710139195818023&ver=4vi (...) FQDN: go.monetizer.mobi IP: 198.143.165.221 198.143.165.221 HTTP/2 200 OK content-type: text/html; charset=utf-8 server: nginx date: Thu, 29 Sep 2022 08:06:23 GMT vary: Accept-Encoding x-powered-by: PHP/8.1.9 cache-control: no-store, no-cache, must-revalidate, max-age=0 pragma: no-cache expires: Thu, 01 Jan 1970 00:00:00 GMT strict-transport-security: max-age=31536000; includeSubdomains; content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info ---
GET /rc/a91581ead4?affclick=633552012aba9c0001d5797a&pubid=503 HTTP/1.1 Host: myofferplus.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: myofferplus.com/rc/a91581ead4?affclick=633552012aba9c00 (...) FQDN: myofferplus.com IP: 172.67.217.200 172.67.217.200 HTTP/2 200 OK content-type: text/html; charset=utf-8 date: Thu, 29 Sep 2022 08:06:25 GMT set-cookie: AWSALB=QEPnoWLnRGdWDzmUbv75HfMbOGkahOOx7bkz8mxo1dt5u1tIVDpI/IYnRBcDtz9XRBIlvrs0H/lTF6TOa+E27m6bNhvH2i3qnQSM+L064+Mu0jpMMcwbEenCug6k; Expires=Thu, 06 Oct 2022 08:06:25 GMT; Path=/ AWSALBCORS=QEPnoWLnRGdWDzmUbv75HfMbOGkahOOx7bkz8mxo1dt5u1tIVDpI/IYnRBcDtz9XRBIlvrs0H/lTF6TOa+E27m6bNhvH2i3qnQSM+L064+Mu0jpMMcwbEenCug6k; Expires=Thu, 06 Oct 2022 08:06:25 GMT; Path=/; SameSite=None vary: Accept-Encoding, Accept-Language, Cookie content-language: en cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BZa39KBT%2FCN7D%2B%2BRq%2F0ESHWNTCDs0eUNlPpzp2PE6iiB81WlsPPVIwQQTDI%2BskVnMOfN345cI%2BwAJ3YEKXLKmEZT2D%2B6Z4PprIYkou5cVTRplb%2BFOTIrel63478OrDOFIvc%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 7523382a1d91b4e8-OSL content-encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info ---
GET /redirect.css HTTP/1.1 Host: cdn.addlnk.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://myofferplus.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn.addlnk.com/redirect.css FQDN: cdn.addlnk.com IP: 172.67.191.221 172.67.191.221 HTTP/2 200 OK content-type: text/css date: Thu, 29 Sep 2022 08:06:25 GMT cf-bgj: minify cf-polished: origSize=1680 etag: W/"3ae56d32551602b41f9046c14d1cfde2" last-modified: Wed, 13 Mar 2019 00:03:12 GMT x-amz-id-2: BUW6rlWHZvzQnvJHp4gBkVRIGc8DfdhWdOpgruWqMqu7ownlHIapox/IYSueiBqz+QseNtzP+2A= x-amz-request-id: KYXF7EGSHW20KRRM cf-cache-status: HIT age: 1833 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fl5t3duufopukxvWUCPE73KVBc7endx6T3lplAArysFfrjbLmjMx2H5GQFlj0G2X4PwQOe77wWquV3obm5ZHa%2F1fI%2Fc%2BNDmoQXQOg%2BT8MWdXTPfzmzgzNgPAQWZIpF1uVg%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 7523382b5d871c12-OSL content-encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info ---

Overview

Domain Summary (22)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 52.58.131.39

Last 5 reports on ASN: AMAZON-02

Last 5 reports on domain: echopriority.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (9)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (47)

Overview

Domain Summary (22)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 52.58.131.39

Last 5 reports on ASN: AMAZON-02

Last 5 reports on domain: echopriority.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (9)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (47)

Network Intrusion Detection Systems