zshorte.net/full?api=ad925b316db1e51696242cce9d829083a7e7a9c0&url=aHR0cHM6Ly9tZWdhLm56L2ZpbGUvZ3lnalJMREQjd05wYzk4V1kyMWxjeG9lXzVQbURxSFhqd2JpcTZqZ09Pb3d4ZDQ0RDc5UQ==&type=2
104.21.89.60301 Moved Permanently 0 B URL HTTP/1.1 zshorte.net/full?api=ad925b316db1e51696242cce9d829083a7e7a9c0&url=aHR0cHM6Ly9tZWdhLm56L2ZpbGUvZ3lnalJMREQjd05wYzk4V1kyMWxjeG9lXzVQbURxSFhqd2JpcTZqZ09Pb3d4ZDQ0RDc5UQ==&type=2
IP 104.21.89.60:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /full?api=ad925b316db1e51696242cce9d829083a7e7a9c0&url=aHR0cHM6Ly9tZWdhLm56L2ZpbGUvZ3lnalJMREQjd05wYzk4V1kyMWxjeG9lXzVQbURxSFhqd2JpcTZqZ09Pb3d4ZDQ0RDc5UQ==&type=2 HTTP/1.1
Host: zshorte.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sun, 18 Dec 2022 23:12:30 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 19 Dec 2022 00:12:30 GMT
Location: https://zshorte.net/full?api=ad925b316db1e51696242cce9d829083a7e7a9c0&url=aHR0cHM6Ly9tZWdhLm56L2ZpbGUvZ3lnalJMREQjd05wYzk4V1kyMWxjeG9lXzVQbURxSFhqd2JpcTZqZ09Pb3d4ZDQ0RDc5UQ==&type=2
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B8LDm73dCwBs6jGF2slBDDABHFCQEH2qfC2rz37OD62Y5lD41TfAdjpja6F%2BRpG1e4cxINUjM3EoaH2vvGYOKvRf7eChcpTkitx56SfKNiIOcbNBDVSLPCxpIMasTA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77bb95700a7fb50f-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 9f3cf7e36f17a535e53e5213c02cf2b4
e65acbc03135ce135b9e91b4f74b3e1439faa6f6
a2317476862acd0a92fe523454c3991752b07ba14e7667f421dd9624e0233758
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A2317476862ACD0A92FE523454C3991752B07BA14E7667F421DD9624E0233758"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11068
Expires: Mon, 19 Dec 2022 02:16:58 GMT
Date: Sun, 18 Dec 2022 23:12:30 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 460af93786e1eaa666f135e6c3fdc634
bc8aeba36225c79718f5de73d79928fe817c5490
471f4e7ae29bcf6ba1f749c0f5d4ab446cebfac5aa80c3e19c6edf21be456eb5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "471F4E7AE29BCF6BA1F749C0F5D4AB446CEBFAC5AA80C3E19C6EDF21BE456EB5"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5882
Expires: Mon, 19 Dec 2022 00:50:32 GMT
Date: Sun, 18 Dec 2022 23:12:30 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 555fc6e99ad3bf077d1c4b9b805e428d
4e800fc8e809a950288df0e94992084647762561
fac00cada519279717e2a13528cb202d292fc92ed5eb42782c41f8e7b9509eaf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FAC00CADA519279717E2A13528CB202D292FC92ED5EB42782C41F8E7B9509EAF"
Last-Modified: Fri, 16 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2727
Expires: Sun, 18 Dec 2022 23:57:57 GMT
Date: Sun, 18 Dec 2022 23:12:30 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 18 Dec 2022 22:45:31 GMT
content-type: application/json
age: 1619
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 31k58udDNh9s/uqmWYI1J8YRu1qoOCWdv8Vj8LxVcTPGC2mnN0iPXQXNFUhxxoPvIOv+KMmVb30=
x-amz-request-id: 159RS7G0Z7BTFQS5
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 18 Dec 2022 22:28:43 GMT
age: 2628
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 28a4d4d75308652f46c6bcfdc8d743c6
d04eb3456f49b475b8d03556576de44c5c3eb56e
52ab1323b84f01318db084f4ee9a017dfe2e0c65e3c0c395c0f5a51fdd1df65a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5420
Cache-Control: max-age=167416
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 23:12:31 GMT
Etag: "639f742b-118"
Expires: Tue, 20 Dec 2022 21:42:47 GMT
Last-Modified: Sun, 18 Dec 2022 20:12:27 GMT
Server: ECS (amb/6B94)
X-Cache: HIT
Content-Length: 280
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:31 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Cache-Control, Backoff, Content-Length, Content-Type, Last-Modified, ETag, Expires, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 18 Dec 2022 23:08:00 GMT
age: 271
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 28a4d4d75308652f46c6bcfdc8d743c6
d04eb3456f49b475b8d03556576de44c5c3eb56e
52ab1323b84f01318db084f4ee9a017dfe2e0c65e3c0c395c0f5a51fdd1df65a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5420
Cache-Control: max-age=167416
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 23:12:31 GMT
Etag: "639f742b-118"
Expires: Tue, 20 Dec 2022 21:42:47 GMT
Last-Modified: Sun, 18 Dec 2022 20:12:27 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 0bc27cdcd6c42d7f8eece6c074bc452f
ff1234b58f7381f51f9082c1ef4894b1ac5700ff
672fc3b7ba7ee7a8b376c73a86a5bab00b1a1aead54c3ca64c0bff83d831348e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5982
Cache-Control: max-age=128042
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 23:12:31 GMT
Etag: "639ed82b-1d7"
Expires: Tue, 20 Dec 2022 10:46:33 GMT
Last-Modified: Sun, 18 Dec 2022 09:06:51 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
zshorte.net/full?api=ad925b316db1e51696242cce9d829083a7e7a9c0&url=aHR0cHM6Ly9tZWdhLm56L2ZpbGUvZ3lnalJMREQjd05wYzk4V1kyMWxjeG9lXzVQbURxSFhqd2JpcTZqZ09Pb3d4ZDQ0RDc5UQ==&type=2
172.67.138.73301 Moved Permanently 279 B URL HTTP/2 zshorte.net/full?api=ad925b316db1e51696242cce9d829083a7e7a9c0&url=aHR0cHM6Ly9tZWdhLm56L2ZpbGUvZ3lnalJMREQjd05wYzk4V1kyMWxjeG9lXzVQbURxSFhqd2JpcTZqZ09Pb3d4ZDQ0RDc5UQ==&type=2
IP 172.67.138.73:0
Hash b531b7e7ff0def0d0434ebd0458b19d3
fafa5625c157766173bd074e9198479477649bc9
f0a866a05ed309764b0f89db9a414ad7fd32a918b55cec190e17eb7c804b2894
GET /full?api=ad925b316db1e51696242cce9d829083a7e7a9c0&url=aHR0cHM6Ly9tZWdhLm56L2ZpbGUvZ3lnalJMREQjd05wYzk4V1kyMWxjeG9lXzVQbURxSFhqd2JpcTZqZ09Pb3d4ZDQ0RDc5UQ==&type=2 HTTP/1.1
Host: zshorte.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
date: Sun, 18 Dec 2022 23:12:31 GMT
content-type: text/html; charset=UTF-8
location: https://m.imagenesderopaparaperros.com/klGy
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-robots-tag: noindex, nofollow
set-cookie: AppSession=ebe7b1df003b2b7034e851a5b3ea1b8e; path=/; HttpOnly
csrfToken=0284f326d454b9630b21e7f9b629e772278c7cfae40661dd06b4f747361dd844b223c271aec6c740b427d5a70af4a8a900c42746727ef71c2eb582d8aad77c52; path=/; HttpOnly
x-served-by: zshorte.net
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UcGXiYNLDrBEMVujW3L%2FMuF0isVn4SgwNeyIp6K9tzBal%2BJ48Kvw7BERwwhESMNbt1a0CHoChCy7UVaG15ZGHU7jEfnJsUYwqXpG%2F79Tf2WSF62d7Z8lVGFosRRVQQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77bb957228620b41-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
push.services.mozilla.com/
54.187.31.159101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.187.31.159:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: sfE/Nymv6eS6fliEeeUvGg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: F414di+1u1lx3yS/jiGUUK74cNs=
m.imagenesderopaparaperros.com/zshorte_theme/images/logo-dark-2.png
172.67.168.79200 OK 45 kB URL HTTP/2 m.imagenesderopaparaperros.com/zshorte_theme/images/logo-dark-2.png
IP 172.67.168.79:0
File type PNG image data, 857 x 155, 8-bit/color RGBA, non-interlaced\012- data
Hash 28ed5694cb52b688df8f6cb9d3c38e9c
2ec4b679e43cd8bf66919b860bfd830f2b23c7d9
0541ab488abc3b9fcc067d1085aae4fadba1c42910207a8260a909dbf489ed31
GET /zshorte_theme/images/logo-dark-2.png HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/klGy
Cookie: lang=en_US; AppSession=fd7a07fc56237d300b0d56ca697dd616; csrfToken=40240b3fe89d563ffaf066e36ca883f1ba0a2691526e0765b9d932939bcf6987e25a3630af2ee0c2b50b59a683c893f49411cab17c2ae97eb73fd68291d1d486
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: image/png
content-length: 44788
x-frame-options: SAMEORIGIN
last-modified: Sat, 20 Jun 2020 00:08:34 GMT
cache-control: max-age=31536000
expires: Thu, 28 Sep 2023 19:19:37 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: User-Agent, Accept-Encoding
cf-cache-status: HIT
age: 7012375
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FB6FOvQt7iLv6NyR8wFt0t%2BMVx0lFekqNHzzctCvg7TtQIITomdSn%2BtMcR33TgVyN4yATF3i35nDX1x5TQ7hsv6dCVN7KTcSHKzbAktrJG0ThigFVf4AU11cXxL01SaijJXlkwRtxOU9cGSu2UxM2fI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77bb9579fa50fac8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
m.imagenesderopaparaperros.com/img/banner300x250.png?v=2
172.67.168.79200 OK 22 kB URL HTTP/2 m.imagenesderopaparaperros.com/img/banner300x250.png?v=2
IP 172.67.168.79:0
File type PNG image data, 300 x 250, 8-bit/color RGB, non-interlaced\012- data
Hash 4dd187d299becdea20c32d192f53ffa3
8c5a9ccd16ce767b02e7bb73cee89a5f68603769
a3049a20cd7d731f0ba6ffe3d7dde64728068c971bb913077bd6383978bb35b7
GET /img/banner300x250.png?v=2 HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/klGy
Cookie: lang=en_US; AppSession=fd7a07fc56237d300b0d56ca697dd616; csrfToken=40240b3fe89d563ffaf066e36ca883f1ba0a2691526e0765b9d932939bcf6987e25a3630af2ee0c2b50b59a683c893f49411cab17c2ae97eb73fd68291d1d486
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: image/png
content-length: 22442
x-frame-options: SAMEORIGIN
last-modified: Mon, 22 Jun 2020 20:22:42 GMT
cache-control: max-age=31536000
expires: Mon, 23 Oct 2023 21:46:31 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
vary: User-Agent, Accept-Encoding
cf-cache-status: HIT
age: 4843561
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=imiw%2B6XSc0RvsyKSny%2Fm8235dsPHpnCugZF7sjwM41b%2FPXAIlWCfOoSZMImKZlrgxkmIzTGq%2FzSMYQ%2Bn8peWYXdsojzjAu1hSCgJEGPmQLfkyb1FW9fZ9zTbLIJrgpa1M05NNkss%2BSi1p6tMRvMdc1k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77bb957a1a5efac8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
m.imagenesderopaparaperros.com/zshorte_theme/images/illustrator/Startup_SVG.svg
172.67.168.79200 OK 7.3 kB URL HTTP/2 m.imagenesderopaparaperros.com/zshorte_theme/images/illustrator/Startup_SVG.svg
IP 172.67.168.79:0
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (19895), with no line terminators
Hash d4cce12aa5c244331c3ac45d86cb0abf
1da5040316e028547cd75233d11e03f6d9a63012
0b41d0c07b366eeeed1b16cc52aed5a4c7e01985257e0719955ffd28e6bdaa5c
GET /zshorte_theme/images/illustrator/Startup_SVG.svg HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/klGy
Cookie: lang=en_US; AppSession=fd7a07fc56237d300b0d56ca697dd616; csrfToken=40240b3fe89d563ffaf066e36ca883f1ba0a2691526e0765b9d932939bcf6987e25a3630af2ee0c2b50b59a683c893f49411cab17c2ae97eb73fd68291d1d486
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: image/svg+xml
x-frame-options: SAMEORIGIN
last-modified: Sat, 20 Jun 2020 00:12:35 GMT
cache-control: max-age=31536000
expires: Fri, 17 Nov 2023 01:45:14 GMT
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-served-by: m.imagenesderopaparaperros.com
cf-cache-status: HIT
age: 2755638
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dKxzrX823kHUmwt1kzUa3b3BwMGN13ZwmFNtinh%2FOIDaG7k2s7JD0kBY9u0DVTcvgzBIvis1B69Jta5V8DS8oksCsqKimRALo5uOLubtwhBwaxfU6wGom5xHsKk3QvlnjWXUjUK0VMK%2Fpzdt7lAoPbY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77bb957a0a5afac8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
m.imagenesderopaparaperros.com/vendor/jquery.min.js?ver=6.4.0
172.67.168.79200 OK 31 kB URL HTTP/2 m.imagenesderopaparaperros.com/vendor/jquery.min.js?ver=6.4.0
IP 172.67.168.79:0
File type ASCII text, with very long lines (32065)
Hash e50ebbc14cb7676ed7b978686642482c
2f9ebe1ddf738d9fb24086b18b6dda5a237ed2ba
a37623e1988f7fd7dc1af093192c1157f541170bfc25ec4cfdf1c785f859532e
GET /vendor/jquery.min.js?ver=6.4.0 HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/klGy
Cookie: lang=en_US; AppSession=fd7a07fc56237d300b0d56ca697dd616; csrfToken=40240b3fe89d563ffaf066e36ca883f1ba0a2691526e0765b9d932939bcf6987e25a3630af2ee0c2b50b59a683c893f49411cab17c2ae97eb73fd68291d1d486
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: application/javascript
x-frame-options: SAMEORIGIN
last-modified: Sat, 20 Jun 2020 00:07:34 GMT
cache-control: max-age=2592000
expires: Wed, 04 Jan 2023 23:37:16 GMT
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1121716
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1g%2BON4NX46yJsLWKTtjoe3A%2FL9A7RfxJkF3aAlcJHL0dwHurn9SYb6yu%2BzwC6AwG5x3mmgs8Wk2rf334KbFHq2O4UtkT1Zy1UJC9Of7SzegCMtbhlgd%2BRaWl5pPhxw4uIx2O7oahvMU2ln0xrbthPx0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77bb957a1a61fac8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash b531b7e7ff0def0d0434ebd0458b19d3
fafa5625c157766173bd074e9198479477649bc9
f0a866a05ed309764b0f89db9a414ad7fd32a918b55cec190e17eb7c804b2894
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=163082
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 23:12:32 GMT
Etag: "639f786a-117"
Expires: Tue, 20 Dec 2022 20:30:34 GMT
Last-Modified: Sun, 18 Dec 2022 20:30:34 GMT
Server: nginx
Content-Length: 279
www.googletagmanager.com/gtag/js?id=UA-77394287-2
172.217.21.168200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-77394287-2
IP 172.217.21.168:0
File type ASCII text, with very long lines (1921)
Hash dcbd9369e47e8523b540dfe3b291422a
4f0bcc27af53aaf3331885bf5bcbc3158a5349f0
c7b737459e9ac2294247fa41fe234d4bc25fa36727ef7ac74c81d3f72d228390
GET /gtag/js?id=UA-77394287-2 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 18 Dec 2022 23:12:32 GMT
expires: Sun, 18 Dec 2022 23:12:32 GMT
cache-control: private, max-age=900
last-modified: Sun, 18 Dec 2022 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43580
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 930f0320ed7bc9738f6d3d00639c7537
f9a1d6bea1bd4816546a03821888cd3dff122c73
1f59797edf40eaef89b0c2671766ecdcaf9e48ec2883f285b34d330f01823d19
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 23:12:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash de8a9a815195e349752babc98f1ccd53
813579195eaa5387fffcdb077da3652a28feaf51
43d7011fa70a71689c2dec1180628606e5ed9e38c029ef624844443f2009a9c4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "43D7011FA70A71689C2DEC1180628606E5ED9E38C029EF624844443F2009A9C4"
Last-Modified: Sat, 17 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4492
Expires: Mon, 19 Dec 2022 00:27:24 GMT
Date: Sun, 18 Dec 2022 23:12:32 GMT
Connection: keep-alive
m.imagenesderopaparaperros.com/vendor/wow.min.js?ver=6.4.0
172.67.168.79200 OK 3.2 kB URL HTTP/2 m.imagenesderopaparaperros.com/vendor/wow.min.js?ver=6.4.0
IP 172.67.168.79:0
File type ASCII text, with very long lines (8152)
Hash 59acf55ffe93daed9fa3c3126c2a69b8
c23435a7eadfca0418a510e4f0d12e6220504a9b
fb6fa81ef2f7cd69871bad4616ad80e2c3a1e62a47cecf5867488468e27ebbc2
GET /vendor/wow.min.js?ver=6.4.0 HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/klGy
Cookie: lang=en_US; AppSession=fd7a07fc56237d300b0d56ca697dd616; csrfToken=40240b3fe89d563ffaf066e36ca883f1ba0a2691526e0765b9d932939bcf6987e25a3630af2ee0c2b50b59a683c893f49411cab17c2ae97eb73fd68291d1d486
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: application/javascript
x-frame-options: SAMEORIGIN
last-modified: Sat, 20 Jun 2020 00:07:34 GMT
cache-control: max-age=2592000
expires: Fri, 23 Dec 2022 11:03:24 GMT
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 2203748
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GT%2F75q4Xm0l8x11vPEGXqRhMKBeROK3ELK99Mp7CbyZassSE%2FNGTOjP0KhMhcAojDHw8lc%2FAMBhzsXIdCs%2BV8RrwWQlN4c7YpLE94jqrHboRARdtVLIHxUpBmlDMiGdfhqXlfpRePdVUa%2F%2B%2Fuy8eeZ8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77bb957a1a65fac8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
iononetravoy.com/1clkn/33405
23.109.87.190200 OK 26 B URL HTTP/1.1 iononetravoy.com/1clkn/33405
IP 23.109.87.190:0
File type ASCII text, with no line terminators
Hash 414a242a6fee8464282857e475d3ef61
f669890350347f53aa9bd19c1a355692e8d17d2f
d4914e81dd0b4c1d8ee8e789f6b369d107b93ac886f862930e1a98580e79aafa
GET /1clkn/33405 HTTP/1.1
Host: iononetravoy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 18 Dec 2022 23:12:32 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Set-Cookie: GL_UI4=eJw9jd1OhDAYRIHy42aFOAkPsI9QVBAvvfEVvCSl%2FcC60G5KXfTtbUz07mTmTCaKoqSuEF9zBvYpWpzU1HSS9428bx9417WPgtM09s9j%2F9Q1gvc46G3wYlzIp7idyZDTcpBWUYm7UP0lZ2N3kyIbnTCqRLYGYylRjM7uG7maITViJRSv2tFkv4IhPqwDa3gbWJvAMUdit5pVBxRv2qiwrI5IGl6VeYTjZRF%2Bsm4dtMpjZLMTihC%2F4EYKT7N13ygUbWdvL4Bd1PDv%2Fx6zveHIFV21JGTWv5P7AaoaStk%3D; expires=Mon, 19-Dec-2022 23:12:32 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJxNjM0KgkAYRW0qSwrjQg%2FQC2T%2Fi7bVMnThAwxmXzFg84kz%2FdjTpwbR5nI4cK7jOGLsQ6gcw%2B0i2M6D9TJYbNZoX4khwgjDlO%2FaFqXUyY3ghlw8kxJuQVfFGmK%2BwuDLMuUzoRtG0z%2FXRIPIZDzZ1z8lOqmqt1bwav52vaprXFuZHP4uU69JzNndVi8GniYrTU50hrdPThnNDvER%2Fs82H24LfWVkXvCrrHhk1Y3erEny5WLIVqr1cMUHDLFHVQ%3D%3D; expires=Mon, 19-Dec-2022 23:12:32 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 20 kB IP 142.250.74.131:0
File type gzip compressed data, from Unix\012- data
Hash 6297b913a4a76563f5654a1fd3919eb4
1ff41b27f6b041c5b345422af03d49bd8c9194f6
5e49dcc34abcab98e8fd768a334cd89725807835d4211848874b8a6655939c11
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 23:12:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 3cc1866fc9c3235fc00e984bd2d7a1f2
309c47bdee0a04d1234b1b130793cc492797c335
26597f97dfd979d5bf0f32bbf732448bb25d13f2ed3c0857de783439f1976574
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5107
Cache-Control: max-age=134023
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 23:12:32 GMT
Etag: "639ef2f4-117"
Expires: Tue, 20 Dec 2022 12:26:15 GMT
Last-Modified: Sun, 18 Dec 2022 11:01:08 GMT
Server: ECS (amb/6BB0)
X-Cache: HIT
Content-Length: 279
m.imagenesderopaparaperros.com/zshorte_theme/css/bootstrap.min.css
172.67.168.79200 OK 25 kB URL HTTP/2 m.imagenesderopaparaperros.com/zshorte_theme/css/bootstrap.min.css
IP 172.67.168.79:0
File type ASCII text, with very long lines (65324)
Hash d4e13775eba2adfdae57fb1da561f5ce
2a81356284b29e7cfdef1fb91bab26504e3d9b88
d286ef402d76e37df1e6e4815dabd49b922bb7cc9cfc1fb9475e100a05ed3562
GET /zshorte_theme/css/bootstrap.min.css HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/klGy
Cookie: lang=en_US; AppSession=fd7a07fc56237d300b0d56ca697dd616; csrfToken=40240b3fe89d563ffaf066e36ca883f1ba0a2691526e0765b9d932939bcf6987e25a3630af2ee0c2b50b59a683c893f49411cab17c2ae97eb73fd68291d1d486
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: text/css
x-frame-options: SAMEORIGIN
last-modified: Sat, 20 Jun 2020 00:08:09 GMT
cache-control: max-age=2592000
expires: Fri, 23 Dec 2022 11:03:07 GMT
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 2203765
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MknIY0fpUnN7WnF2F6bk2%2BK0hkIBGRRggVPPrLjoTvqYrqm9Ndkukmno2esBwT1iHQS1wHCl9hqh6Yn%2FAUVOiJqML7jI4neAfxMsibdqe2IPRCdg6Oyng21y5p0ei5ygnRlzRX5HxrvaWgvHAxQL2z0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77bb9579ea3dfac8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ads.themoneytizer.com/s/gen.js?type=2
185.76.9.26200 OK 3.3 kB URL HTTP/2 ads.themoneytizer.com/s/gen.js?type=2
IP 185.76.9.26:0
ASN #60068 Datacamp Limited
Hash 1715ed7d483b9898af84e1c625b0e9e0
d5ad755657241abb49ac36735362ed99146da135
c9c83311e3254a929a824d7a166fc51fc3bcb4633c70fa1f2c3f18e92f6e1876
GET /s/gen.js?type=2 HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=604800
x-accel-expires: @1671771785
server: CDN77-Turbo
x-77-nzt: AblMCRS4/Cf/V6IDAA
x-77-nzt-ray: af585630221e58a7609e9f636526771e
x-cache: HIT
x-age: 238167
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 312 B IP 93.184.220.29:0
Hash 40588a98e7b9045ed0f89cef0ae81bc9
047c03794a9de378f66b81ce84edfaab928d28aa
574d5ada571abb63674ee166c8e0ddce49a734a227841b1377f196900de04fdc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2380
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 23:12:32 GMT
Last-Modified: Sun, 18 Dec 2022 22:32:53 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 312
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 5ec70919372ab27cd51c8af3e004482d
d426a1d3a0c3703b3f8af7315af4427e4f5fa9e4
576448ef5d41871b94cf6d97aa385d1c7fd28dd9bdb70f23aacdf1b2b5a6add5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "576448EF5D41871B94CF6D97AA385D1C7FD28DD9BDB70F23AACDF1B2B5A6ADD5"
Last-Modified: Sat, 17 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8881
Expires: Mon, 19 Dec 2022 01:40:33 GMT
Date: Sun, 18 Dec 2022 23:12:32 GMT
Connection: keep-alive
unicons.iconscout.com/release/v2.1.7/css/unicons.css
104.18.28.243200 OK 46 kB URL HTTP/2 unicons.iconscout.com/release/v2.1.7/css/unicons.css
IP 104.18.28.243:0
File type ASCII text, with very long lines (55387), with no line terminators
Hash 1f2cf3fff83a5e94cdfb56c531a6edeb
1f0ac0277649cef97ebec889279ac27aa0257e10
6fdadb2fec6314541e662224fe7ed92587f6ec124e6fe1247328d9fdbe944d77
GET /release/v2.1.7/css/unicons.css HTTP/1.1
Host: unicons.iconscout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=63509
etag: W/"aaeb6aed7a9c71959a3b51e937c363f0"
last-modified: Tue, 28 Apr 2020 10:01:21 GMT
x-amz-id-2: qSduub1s3mFmCfde2XDgqPc08zdrY5EGOqvrCKN/6T4V9eqzeXI3mUndTj3zhrgkkk8TiMbEISM=
x-amz-request-id: V3PY903MVV55FPTX
cf-cache-status: HIT
age: 1843120
expires: Mon, 18 Dec 2023 23:12:32 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 77bb957a0b18b506-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ads.themoneytizer.com/s/requestform.js?siteId=52788&formatId=2
185.76.9.26200 OK 21 kB URL HTTP/2 ads.themoneytizer.com/s/requestform.js?siteId=52788&formatId=2
IP 185.76.9.26:0
ASN #60068 Datacamp Limited
Hash 84115ae4b97396c338c0b1354a5b9a6f
25a11007e3508c7145102765ccf9264f955c8b26
73c2171db2f90642a64d6ad73745c4c85ced8ccc393a240741f388a68e20c9d4
GET /s/requestform.js?siteId=52788&formatId=2 HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=604800
x-accel-expires: @1671788202
server: CDN77-Turbo
x-77-nzt: AblMCRSu9Ln/NmIDAA
x-77-nzt-ray: af585630221e58a7609e9f63c4ec401e
x-cache: HIT
x-age: 221750
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
ads.themoneytizer.com/s/gen.js?type=11
185.76.9.26200 OK 2.4 kB URL HTTP/2 ads.themoneytizer.com/s/gen.js?type=11
IP 185.76.9.26:0
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (2659)
Hash befbfe8e008d3a1fc9b0a2991443888c
725357c328900ef423354fb678553a0dc29d22db
58fdbded093edae1662ccf0163a2a1e807029bcbc62a820d67795d0ef4253f67
GET /s/gen.js?type=11 HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=604800
x-accel-expires: @1671771797
server: CDN77-Turbo
x-77-nzt: AblMCRSy7UT/S6IDAA
x-77-nzt-ray: af585630221e58a7609e9f63c463bf1d
x-cache: HIT
x-age: 238155
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
m.imagenesderopaparaperros.com/zshorte_theme/css/owl.theme.default.min.css
172.67.168.79200 OK 893 B URL HTTP/2 m.imagenesderopaparaperros.com/zshorte_theme/css/owl.theme.default.min.css
IP 172.67.168.79:0
File type ASCII text, with very long lines (846)
Hash 884399a6e578cacd01276b9face17174
a9dcd1b5039d9674e8dfd1c1c9b3f7fb81c65f87
794542842923d5e2cf07b6c318eb4dd5a4acf04237d05160fb720cdbb4ddec97
GET /zshorte_theme/css/owl.theme.default.min.css HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/klGy
Cookie: lang=en_US; AppSession=fd7a07fc56237d300b0d56ca697dd616; csrfToken=40240b3fe89d563ffaf066e36ca883f1ba0a2691526e0765b9d932939bcf6987e25a3630af2ee0c2b50b59a683c893f49411cab17c2ae97eb73fd68291d1d486
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: text/css
x-frame-options: SAMEORIGIN
last-modified: Sat, 20 Jun 2020 00:08:07 GMT
cache-control: max-age=2592000
expires: Mon, 16 Jan 2023 01:47:25 GMT
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-served-by: m.imagenesderopaparaperros.com
cf-cache-status: HIT
age: 163507
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JQN3meHDFICvkK1QMiZj0m18V523dB1Pvn3saJ5au6TLPxd9AY8ltpjWdVRjcvWuuKajSHAunwJjx7gp5%2FraZaWx9QJGp0pPE1kwL4quCozJhZmseY4bwpdlzw2s0bb%2FTY0nTx%2FOXxMfqBAnWPBHOWo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77bb9579ea47fac8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.ftd.agency/libs/e.js
37.48.117.210200 OK 1.7 kB IP 37.48.117.210:0
ASN #60781 LeaseWeb Netherlands B.V.
Hash 02f679c9e331e69ac43f87af96915b9d
e589290852a088c34cbf7bb3104faa833244e1d4
7ea9bdfdd368aa5835ba2930414dc029b4d2ffbd46c362e33d2efaffbb8fad32
GET /libs/e.js HTTP/1.1
Host: cdn.ftd.agency
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 18 Dec 2022 23:12:32 GMT
Content-Type: application/javascript; charset=utf-8
Last-Modified: Tue, 13 Sep 2022 09:47:20 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"632051a8-aec"
Expires: Mon, 19 Dec 2022 23:12:32 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Headers: X-PINGOTHER
Access-Control-Max-Age: 1728000
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block;
Content-Encoding: gzip
tag.leadplace.fr/libJsLP.js
145.239.192.166200 OK 5.5 kB URL HTTP/1.1 tag.leadplace.fr/libJsLP.js
IP 145.239.192.166:0
Hash a0c24f993bc0901cfe62d1e801cb2b45
7eb2bdce06161ae486bc8e7ecd0b5c9c4f7b2984
80fccb00db57a177d26368cda09f8a540cf1aa641b8b6837047e86d3bd8d6333
GET /libJsLP.js HTTP/1.1
Host: tag.leadplace.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 18 Dec 2022 23:12:32 GMT
Content-Type: application/javascript
Content-Length: 5547
Last-Modified: Thu, 14 Oct 2021 07:27:53 GMT
ETag: "6167dbf9-15ab"
Accept-Ranges: bytes
X-IPLB-Request-ID: 5B5A2A9A:F1DB_91EFC0A6:01BB_639F9E60_45DE358C:237B6
X-IPLB-Instance: 30195
m.imagenesderopaparaperros.com/zshorte_theme/css/owl.carousel.min.css
172.67.168.79200 OK 1.0 kB URL HTTP/2 m.imagenesderopaparaperros.com/zshorte_theme/css/owl.carousel.min.css
IP 172.67.168.79:0
File type ASCII text, with very long lines (3184)
Hash 8ae659889142ae1a755adae6ead947ba
efddb68161dbc3f9d420de209c3de2e020d1c82c
68a27b81e0239ab413d18a5e55314136aff340600dc75b3bdc32645f9912284e
GET /zshorte_theme/css/owl.carousel.min.css HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/klGy
Cookie: lang=en_US; AppSession=fd7a07fc56237d300b0d56ca697dd616; csrfToken=40240b3fe89d563ffaf066e36ca883f1ba0a2691526e0765b9d932939bcf6987e25a3630af2ee0c2b50b59a683c893f49411cab17c2ae97eb73fd68291d1d486
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: text/css
x-frame-options: SAMEORIGIN
last-modified: Sat, 20 Jun 2020 00:08:07 GMT
cache-control: max-age=2592000
expires: Fri, 23 Dec 2022 11:03:08 GMT
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 2203764
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i7F2NwJJOGx7ERcCk3%2BgMAZExFsmQtM8GmG8XLQKQuTB%2Fomfku2OvjL56pgBrkCLRk12rRp7EpFWV4w9zTrM%2FDYb0KMseqxRS%2BQJ%2Fjz0Ib%2Fd%2FegAMTtkDxFDGG2RN9dkuzzWZWalNX6yP4zUCkkZ4Bk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77bb9579ea46fac8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
m.imagenesderopaparaperros.com/zshorte_theme/css/magnific-popup.css
172.67.168.79200 OK 2.0 kB URL HTTP/2 m.imagenesderopaparaperros.com/zshorte_theme/css/magnific-popup.css
IP 172.67.168.79:0
Hash 526b11d89a0acdf7f2d5a5e9c44cf193
733abcfa07e02e97d4c89a27eb9cc7ff9df73dd3
87e5a5fca94d136f376c214cfd9ff044bade68daa17ff739e2b49e92e4fc5d7b
GET /zshorte_theme/css/magnific-popup.css HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/klGy
Cookie: lang=en_US; AppSession=fd7a07fc56237d300b0d56ca697dd616; csrfToken=40240b3fe89d563ffaf066e36ca883f1ba0a2691526e0765b9d932939bcf6987e25a3630af2ee0c2b50b59a683c893f49411cab17c2ae97eb73fd68291d1d486
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: text/css
x-frame-options: SAMEORIGIN
last-modified: Sat, 20 Jun 2020 00:08:06 GMT
cache-control: max-age=2592000
expires: Mon, 16 Jan 2023 01:47:24 GMT
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-served-by: m.imagenesderopaparaperros.com
cf-cache-status: HIT
age: 163508
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u%2F9fhxadz2H18fnj4eDZ0M9%2FEIr8%2FP0InFanN5IMqYHCfSTypVVECqRj%2FhT5g%2FvanvUPB%2FoqPNFDyF5V92RXJFWqAyd%2B80cbukFNRxaSy5u%2BtfTA577d9jb8yyrXDp3F4Rj8LXeivb4e%2FshtmSJ8%2BRw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77bb9579ea3ffac8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ads.vidoomy.com/imagenesderopaparaperros_14871.js
3.19.54.139200 OK 4.8 kB URL HTTP/1.1 ads.vidoomy.com/imagenesderopaparaperros_14871.js
IP 3.19.54.139:0
File type ASCII text, with very long lines (4753)
Hash dca7d770c45a86e8ed98a1a70b16b30a
8d09f9f86cd4dd3f0cf8cef950e4e1ade9ce9c1b
3cfd562889f90c112dadbb1d22fcc0a37235cb8a95484d4c285a13ae670042c9
GET /imagenesderopaparaperros_14871.js HTTP/1.1
Host: ads.vidoomy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 23:12:32 GMT
Server: Apache/2.4.54 (Amazon) OpenSSL/1.0.2k-fips PHP/7.0.33
X-Powered-By: PHP/7.0.33
Access-Control-Allow-Origin: *
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 4755
Keep-Alive: timeout=2, max=300
Connection: Keep-Alive
Content-Type: application/javascript
m.imagenesderopaparaperros.com/zshorte_theme/js/jquery.easing.min.js
172.67.168.79200 OK 850 B URL HTTP/2 m.imagenesderopaparaperros.com/zshorte_theme/js/jquery.easing.min.js
IP 172.67.168.79:0
File type ASCII text, with very long lines (2532), with no line terminators
Hash e35520eee24e914c103d79de8dde9911
c2c1be97b809ee7b554418fef3b75a687ccaa3e4
13c9d1b74c56d0ca895deb18b002b31692f4564ce65fda4e8677fbb572557030
GET /zshorte_theme/js/jquery.easing.min.js HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/klGy
Cookie: lang=en_US; AppSession=fd7a07fc56237d300b0d56ca697dd616; csrfToken=40240b3fe89d563ffaf066e36ca883f1ba0a2691526e0765b9d932939bcf6987e25a3630af2ee0c2b50b59a683c893f49411cab17c2ae97eb73fd68291d1d486
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: application/javascript
x-frame-options: SAMEORIGIN
last-modified: Sat, 20 Jun 2020 00:08:44 GMT
cache-control: max-age=2592000
expires: Mon, 16 Jan 2023 01:47:34 GMT
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-served-by: m.imagenesderopaparaperros.com
cf-cache-status: HIT
age: 163497
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3TWSD0Nd%2FKxBMa6Yt3h%2BLvTUUxNph3k4wtFdOpn6JC92Zxdqi1p%2BQHS5six5Xm%2BbMQHcWJb0MX28l9VZFlAz4e%2Bd9me4rHc4epOYFiwMTHPTaVj233Y97IJkyNmrSkeTbklSRU%2B4XONSvF5eWgNYyNU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77bb957a1a70fac8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 61a9358a5ee2b62531d1d64c9a142843
b83a422ab426d870b17da66cdd8ee3b999b4bba2
6c51b015c429c2b191434d7703199b39cea01ab98255e16affb1554ff6bc2114
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6C51B015C429C2B191434D7703199B39CEA01AB98255E16AFFB1554FF6BC2114"
Last-Modified: Sat, 17 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10249
Expires: Mon, 19 Dec 2022 02:03:21 GMT
Date: Sun, 18 Dec 2022 23:12:32 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 61a9358a5ee2b62531d1d64c9a142843
b83a422ab426d870b17da66cdd8ee3b999b4bba2
6c51b015c429c2b191434d7703199b39cea01ab98255e16affb1554ff6bc2114
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6C51B015C429C2B191434D7703199B39CEA01AB98255E16AFFB1554FF6BC2114"
Last-Modified: Sat, 17 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10249
Expires: Mon, 19 Dec 2022 02:03:21 GMT
Date: Sun, 18 Dec 2022 23:12:32 GMT
Connection: keep-alive
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash 335822a64b16e34e0f2dc3ea93e80ab7
7442405bb8c86b633da9c95e352a36b43b0a3afa
ec07432b7dc2622ea70c001daa707530138d201cf8471c174832839e93c57fdc
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 23:12:32 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 16 Dec 2022 12:11:58 GMT
Expires: Fri, 23 Dec 2022 12:11:57 GMT
Etag: "7442405bb8c86b633da9c95e352a36b43b0a3afa"
Cache-Control: max-age=391764,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77bb957cba22b4e8-OSL
z.cdn.ftd.agency/load?z=1339915142&div=83y4hbwxxsg&cw=1280&ch=939&sr=1280x1024&df=1&bh=1&tl=2185&hc=16&n=1671405152728&url=m.imagenesderopaparaperros.com%2FklGy&vc=0&ti=zShorte.net%20%7C%20zShorte.net&zyx=608110782
37.48.117.210204 No Content 0 B URL HTTP/1.1 z.cdn.ftd.agency/load?z=1339915142&div=83y4hbwxxsg&cw=1280&ch=939&sr=1280x1024&df=1&bh=1&tl=2185&hc=16&n=1671405152728&url=m.imagenesderopaparaperros.com%2FklGy&vc=0&ti=zShorte.net%20%7C%20zShorte.net&zyx=608110782
IP 37.48.117.210:0
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /load?z=1339915142&div=83y4hbwxxsg&cw=1280&ch=939&sr=1280x1024&df=1&bh=1&tl=2185&hc=16&n=1671405152728&url=m.imagenesderopaparaperros.com%2FklGy&vc=0&ti=zShorte.net%20%7C%20zShorte.net&zyx=608110782 HTTP/1.1
Host: z.cdn.ftd.agency
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Sun, 18 Dec 2022 23:12:32 GMT
Connection: keep-alive
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
Expires: -1
P3P: policyref="/p3p.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Set-Cookie: AU=66910b6b60a9cf5e; Expires=Mon, 18 Dec 2034 22:00:41 GMT; Path=/; HttpOnly; Domain=.cdn.ftd.agency; SameSite=None; Secure
p.cpx.to/p/12762/px.js
34.242.30.97200 OK 2.0 kB IP 34.242.30.97:0
File type ASCII text, with very long lines (1990), with no line terminators
Hash 96bff8608d7c1f626b59ae10df6ea453
ee770e9213dd8a56b7887b8d1451546aa05d8e64
ee9923b738244929a3c2209848466bccd86eae3672fdef053a0272b60a9e0dfe
GET /p/12762/px.js HTTP/1.1
Host: p.cpx.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=2419200, public
Content-Type: application/javascript; charset=UTF-8
Date: Sun, 18 Dec 2022 23:12:32 GMT
Content-Length: 1990
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash b52a05c34a7c3eaee8f5c1f73954364c
89c5023a0c43860efd362d0d2751a0ea9a204f54
94de3b3351ec8035986be412843212eebe4a3c9d6521b2a0c922870d5365adb8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94DE3B3351EC8035986BE412843212EEBE4A3C9D6521B2A0C922870D5365ADB8"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8445
Expires: Mon, 19 Dec 2022 01:33:18 GMT
Date: Sun, 18 Dec 2022 23:12:33 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash b52a05c34a7c3eaee8f5c1f73954364c
89c5023a0c43860efd362d0d2751a0ea9a204f54
94de3b3351ec8035986be412843212eebe4a3c9d6521b2a0c922870d5365adb8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94DE3B3351EC8035986BE412843212EEBE4A3C9D6521B2A0C922870D5365ADB8"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8445
Expires: Mon, 19 Dec 2022 01:33:18 GMT
Date: Sun, 18 Dec 2022 23:12:33 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa5e5d824-eb30-4eec-8bc0-43392e282ac1.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa5e5d824-eb30-4eec-8bc0-43392e282ac1.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ac21abf8783acf4dab9ce933d644025f
98b6d6a3793e4b3f1aac9d4258c04866fa11f80c
5239bc12bdd94fe9fb20f34bf36f794600e147e492e2090311b97a1b41d31055
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa5e5d824-eb30-4eec-8bc0-43392e282ac1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9950
x-amzn-requestid: 4e729609-0e45-4b25-8137-37ec47534023
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dHbA5E4SoAMF7MQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63993ed2-0bc55b2c1b08bda2023bf207;Sampled=0
x-amzn-remapped-date: Wed, 14 Dec 2022 03:11:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 9tCIn42zpNL7ZgqRj9I4MVjo98uBRcY1odt7EZpPx2aEj9RZkDbkBw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Dec 2022 20:16:18 GMT
age: 10575
etag: "98b6d6a3793e4b3f1aac9d4258c04866fa11f80c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F411052a8-4542-4b7f-815d-41523f287e18.jpeg
34.120.237.76200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F411052a8-4542-4b7f-815d-41523f287e18.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fa8e9a8592c8645e593302eac971abf4
e6bb8d364a16467b34859582521ea40838179011
472a57351360ef6e7ee3d92a05e78baf19b441f3938f924654e7378baacd4a25
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F411052a8-4542-4b7f-815d-41523f287e18.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8658
x-amzn-requestid: 69f2ad85-f066-4edc-af1e-39068d16faec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dOfFiHJtoAMF26g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639c1223-0d2b617b177256ac4a03e9b3;Sampled=0
x-amzn-remapped-date: Fri, 16 Dec 2022 06:37:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: oViMDfSj2XNdIbvbi2tS1BrqcR3dZFgA_cAAJpWSNOaYXOcfoUBAjA==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Dec 2022 02:09:52 GMT
age: 75761
etag: "e6bb8d364a16467b34859582521ea40838179011"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ads.themoneytizer.com/s/gen.js?type=1
185.76.9.26200 OK 11 kB URL HTTP/2 ads.themoneytizer.com/s/gen.js?type=1
IP 185.76.9.26:0
ASN #60068 Datacamp Limited
Hash 102c4e7b894e4a1b7c4dd51a0e420460
e5b45d6e45f0bc2b069a5ed6d494742dfd336b4c
2b7b4c86e59843e7351e20b7fa0eb0c74716bf9a80dcaf04c5f56368dba626dc
GET /s/gen.js?type=1 HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=604800
x-accel-expires: @1671771785
server: CDN77-Turbo
x-77-nzt: AblMCRSTO0P/V6IDAA
x-77-nzt-ray: af585630221e58a7609e9f6380b2fd1d
x-cache: HIT
x-age: 238167
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb1283f05-ca54-470d-bbc4-9b6d4386b138.jpeg
34.120.237.76200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb1283f05-ca54-470d-bbc4-9b6d4386b138.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e0773ba795a9e9a70038c6d8c64ebfa2
3d1db768017331da152d0df6cf5bc6ea6c813b83
46c25962e3bad9785a77bd8f51021460bcf44e9907c725c38329b6dadf560a44
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb1283f05-ca54-470d-bbc4-9b6d4386b138.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8722
x-amzn-requestid: 88a7ab87-3bee-429d-9d3d-8969f6908c65
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dKGGkH2UIAMF78Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639a5090-072ab9b341d4c00622492ee8;Sampled=0
x-amzn-remapped-date: Wed, 14 Dec 2022 22:39:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lpuH1nfNTFrtEUzxSDBEtunOkPU7Y5cP5PSVlJQ43YkRBrRX4OukPg==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Dec 2022 21:38:25 GMT
age: 5648
etag: "3d1db768017331da152d0df6cf5bc6ea6c813b83"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ded193-0301-4ad3-a888-72c52212ad95.jpeg
34.120.237.76200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ded193-0301-4ad3-a888-72c52212ad95.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bfd0e913579b4ff2f511223d70cb01fb
497e0ffef816e100e6ddc221ec17d5f389c1142a
bee68ae1a938a5111a32dab4ec4f6964994e6c39143eac9ab94d6c5e29999372
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ded193-0301-4ad3-a888-72c52212ad95.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5185
x-amzn-requestid: 3087af97-3f2d-4848-b297-eba8d84f10c5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT10YHv8oAMF2sg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3682-7527022d4bd9c15518fe75cc;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:37:06 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: KyEMrUTeuVTPJ3EIkrH1DLYqa4bHK7fe6dApTAFP4XY0G4airnflGA==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Dec 2022 21:37:07 GMT
age: 5726
etag: "497e0ffef816e100e6ddc221ec17d5f389c1142a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc01e8f55-ba54-4c13-9b08-6fe8f1fad0d1.jpeg
34.120.237.76200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc01e8f55-ba54-4c13-9b08-6fe8f1fad0d1.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5369e3b4117752906e42d710872fdfb6
92f869d528f64553176ccdd18db71ce0af403c55
78a6dfaa3dc80a944e58dd8abc674b71523e1cbd7d086e6461b694da92d852be
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc01e8f55-ba54-4c13-9b08-6fe8f1fad0d1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8317
x-amzn-requestid: b8f71eca-7c40-4882-b9ad-b467ba9c7157
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dH9wKHZJoAMFyow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63997667-0956fda21db84ee5061a93b4;Sampled=0
x-amzn-remapped-date: Wed, 14 Dec 2022 07:08:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: gwDzDlEIHfbATym0c4hqz3PET5rboMnwivZo9AwcNFzGIOsw5GrFgw==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 23:31:54 GMT
age: 85239
etag: "92f869d528f64553176ccdd18db71ce0af403c55"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
arbourrenewal.com/cf/62/1e/cf621eb24aa5b4a128894819698170b8.js
192.243.59.20200 OK 11 kB URL HTTP/1.1 arbourrenewal.com/cf/62/1e/cf621eb24aa5b4a128894819698170b8.js
IP 192.243.59.20:0
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (32120), with no line terminators
Hash c64165613f4a21cc28780d98d563e1e4
b6e0ecde7700d9a7015b12fa7a47449121b2d364
6a35ff47b9e46ba4613e571e1490275fd853f5c377a40a6c126671fdc5169902
GET /cf/62/1e/cf621eb24aa5b4a128894819698170b8.js HTTP/1.1
Host: arbourrenewal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 18 Dec 2022 23:12:33 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a0b59edf556d511aed1560725bb757f8
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
arbourrenewal.com/2a/6d/fa/2a6dfa22c42f41c1c5d4b95b66a5509c.js
192.243.59.20200 OK 21 kB URL HTTP/1.1 arbourrenewal.com/2a/6d/fa/2a6dfa22c42f41c1c5d4b95b66a5509c.js
IP 192.243.59.20:0
ASN #39572 DataWeb Global Group B.V.
File type HTML document, ASCII text, with very long lines (60160), with no line terminators
Hash b0e7d9eda041d614e3decdca2f64108b
c0eb01ff1f1901be2915cc53d9deef4ee10e658c
324da742571fe8b666450c8023fdd5f36f8737b25f5ee4ecfd72f527ebe2aa15
GET /2a/6d/fa/2a6dfa22c42f41c1c5d4b95b66a5509c.js HTTP/1.1
Host: arbourrenewal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 18 Dec 2022 23:12:33 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a4c2df141ad001914534633899f27297
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
z.cdn.ftd.agency/load?z=1339915142&div=23eib3m3jn6&cw=1280&ch=939&sr=1280x1024&df=1&bh=1&tl=2185&hc=16&n=1671405152728&url=m.imagenesderopaparaperros.com%2FklGy&vc=0&ti=zShorte.net%20%7C%20zShorte.net&zyx=608110782
37.48.117.210204 No Content 0 B URL HTTP/1.1 z.cdn.ftd.agency/load?z=1339915142&div=23eib3m3jn6&cw=1280&ch=939&sr=1280x1024&df=1&bh=1&tl=2185&hc=16&n=1671405152728&url=m.imagenesderopaparaperros.com%2FklGy&vc=0&ti=zShorte.net%20%7C%20zShorte.net&zyx=608110782
IP 37.48.117.210:0
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /load?z=1339915142&div=23eib3m3jn6&cw=1280&ch=939&sr=1280x1024&df=1&bh=1&tl=2185&hc=16&n=1671405152728&url=m.imagenesderopaparaperros.com%2FklGy&vc=0&ti=zShorte.net%20%7C%20zShorte.net&zyx=608110782 HTTP/1.1
Host: z.cdn.ftd.agency
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Cookie: AU=66910b6b60a9cf5e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Sun, 18 Dec 2022 23:12:33 GMT
Connection: keep-alive
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
Expires: -1
c.tmyzer.com/c/?s=52788&f=19&fi=99
54.38.64.100200 OK 0 B URL HTTP/1.1 c.tmyzer.com/c/?s=52788&f=19&fi=99
IP 54.38.64.100:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c/?s=52788&f=19&fi=99 HTTP/1.1
Host: c.tmyzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 18 Dec 2022 23:12:33 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Access-Control-Allow-Origin: *
X-IPLB-Request-ID: 5B5A2A9A:8FFE_36264064:01BB_639F9E60_B1FA932:14659
X-IPLB-Instance: 20687
c.tmyzer.com/c/?s=52788&f=11&fi=99
54.38.64.100200 OK 0 B URL HTTP/1.1 c.tmyzer.com/c/?s=52788&f=11&fi=99
IP 54.38.64.100:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c/?s=52788&f=11&fi=99 HTTP/1.1
Host: c.tmyzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 18 Dec 2022 23:12:33 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Access-Control-Allow-Origin: *
X-IPLB-Request-ID: 5B5A2A9A:EC8F_36264064:01BB_639F9E60_B1DE189:18F81
X-IPLB-Instance: 38438
e1.o.lencr.org/
23.36.76.226200 OK 346 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash f7b12d8e99d28f720a1709bef7f237d7
bfe6205cf0d1d8c09c8aaa486a50f770c6f17d09
d9c0ac1042565430b3cee6238b76d644f946062f3307f13ddbb4cea28903c4ea
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "D9C0AC1042565430B3CEE6238B76D644F946062F3307F13DDBB4CEA28903C4EA"
Last-Modified: Sat, 17 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8830
Expires: Mon, 19 Dec 2022 01:39:43 GMT
Date: Sun, 18 Dec 2022 23:12:33 GMT
Connection: keep-alive
www.cdn4ads.com/w2ui.min.css
185.76.9.22200 OK 0 B URL HTTP/2 www.cdn4ads.com/w2ui.min.css
IP 185.76.9.22:0
ASN #60068 Datacamp Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /w2ui.min.css HTTP/1.1
Host: www.cdn4ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:33 GMT
content-type: text/html; charset=UTF-8
content-length: 0
alt-svc: quic="185.76.9.20:443"; ma=2592000; v="44,43,39"
x-accel-expires: @1672087600
server: CDN77-Turbo
x-77-nzt: AblMCRRfXYP/MWgFAA
x-77-nzt-ray: af585630292003ad619e9f63a0bd5a16
x-cache: HIT
x-age: 354353
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 732ec2ee6d662c418a9c0a2724502954
825c06eb0ad29f2897c96c30e6e868a7c015d8c2
5d1816cd2e6b97f47356731ba481b0e2a7f64b01b4c722600d3e798df9544093
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5D1816CD2E6B97F47356731BA481B0E2A7F64B01B4C722600D3E798DF9544093"
Last-Modified: Sat, 17 Dec 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3076
Expires: Mon, 19 Dec 2022 00:03:49 GMT
Date: Sun, 18 Dec 2022 23:12:33 GMT
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
143.204.42.165200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.165:0
Hash ba07ca01954fbcfa04e49ce6520e80cb
c8c508e7cc20e0ec033d487e14e1618defcb88cf
f421e47834c212fdd65f1badb0c735cffc4266365c4a271416b8625cd6527718
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 18 Dec 2022 23:12:33 GMT
Last-Modified: Sun, 18 Dec 2022 22:24:43 GMT
Server: ECS (nyb/1D25)
X-Cache: Miss from cloudfront
Via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 9bqLXx6GzpGLrM_SUsOeJb2znuymJTxk-gCSOVsH32PVKTkRAHtRkw==
Age: 2870
ocsp.sca1b.amazontrust.com/
143.204.42.165200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.165:0
Hash ba07ca01954fbcfa04e49ce6520e80cb
c8c508e7cc20e0ec033d487e14e1618defcb88cf
f421e47834c212fdd65f1badb0c735cffc4266365c4a271416b8625cd6527718
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 18 Dec 2022 23:12:33 GMT
Last-Modified: Sun, 18 Dec 2022 22:27:22 GMT
Server: ECS (bsa/EB12)
X-Cache: Miss from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: _ToNHmGuT6qNQtQXPeYPzeI6s6CGc_-ySstvMD_9rva7csiFIL_gAA==
Age: 2713
simplewebanalysis.com/stats
3.71.139.39200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP 3.71.139.39:0
File type ASCII text, with no line terminators
Hash a21a0900928f91f0a978bec55057d062
2ded3a6276dcbde2eee927dd339ded7d3a5ad560
8d664729bab3c28920578b67ecb0ce7c5f593a4c971902e89a5d6ebf25133fbc
Analyzer Verdict Alert fortinet Malware
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:33 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://m.imagenesderopaparaperros.com
access-control-allow-credentials: true
set-cookie: uid_id2=1a7186e4-7efc-4ce3-a18a-89e7e75bc92a:3:1; expires=Wed, 15 Dec 2032 23:12:33 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
3.71.139.39200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP 3.71.139.39:0
File type ASCII text, with no line terminators
Hash 767ea721aba047c9138051202d6e1e4a
7efc2a54c5cdbc2f3631ae75b62035c19751dc4a
d19b4c45237603fc76d0ebac6b6bb3c2c6ab5f42316ee9bec259255bd0f7e1a3
Analyzer Verdict Alert fortinet Malware
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:33 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://m.imagenesderopaparaperros.com
access-control-allow-credentials: true
set-cookie: uid_id2=74bf438a-6d5d-4d07-a583-d70f78ba50b7:1:1; expires=Wed, 15 Dec 2032 23:12:33 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
e1.o.lencr.org/
23.36.76.226200 OK 346 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash f7b12d8e99d28f720a1709bef7f237d7
bfe6205cf0d1d8c09c8aaa486a50f770c6f17d09
d9c0ac1042565430b3cee6238b76d644f946062f3307f13ddbb4cea28903c4ea
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "D9C0AC1042565430B3CEE6238B76D644F946062F3307F13DDBB4CEA28903C4EA"
Last-Modified: Sat, 17 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8830
Expires: Mon, 19 Dec 2022 01:39:43 GMT
Date: Sun, 18 Dec 2022 23:12:33 GMT
Connection: keep-alive
sponsorlustrestories.com/pixel/purst?dl=0&th=0&sc=0&rs=2553&rd=2553&fd=990&bv=22.10.v.9&tmpl=70
173.233.137.52200 OK 0 B URL HTTP/1.1 sponsorlustrestories.com/pixel/purst?dl=0&th=0&sc=0&rs=2553&rd=2553&fd=990&bv=22.10.v.9&tmpl=70
IP 173.233.137.52:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=2553&rd=2553&fd=990&bv=22.10.v.9&tmpl=70 HTTP/1.1
Host: sponsorlustrestories.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 18 Dec 2022 23:12:33 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
a.teads.tv/analytics/tag.js
2.18.173.43200 OK 3.4 kB URL HTTP/2 a.teads.tv/analytics/tag.js
IP 2.18.173.43:0
File type ASCII text, with very long lines (4822)
Hash 6ddfb3a828a563a7719081ff9aeedaba
80286455b7c85311df5f997714b83380ac02fd6d
826524e59a21d4190f923f804a17db1513e1ee3cb4a5ed12f3bb6a5b4f370835
GET /analytics/tag.js HTTP/1.1
Host: a.teads.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: k4TMf+nUnZKvTWrY3L1hjE/JYeuz9zKfxukiA7vQeNd1x3Rf7sggpbW+br5h0HrvvndaGzLuSVU=
x-amz-request-id: NXHNMBZWXJ2Q1A47
last-modified: Wed, 02 Nov 2022 09:38:15 GMT
etag: "6ddfb3a828a563a7719081ff9aeedaba"
x-amz-server-side-encryption: AES256
x-amz-version-id: Y6qsPmt0o95KDo3Ibo2euzqSnxQebNV8
accept-ranges: bytes
content-type: text/javascript;charset=utf-8
content-length: 3391
cache-control: private, max-age=3600
date: Sun, 18 Dec 2022 23:12:33 GMT
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash a5b4d2abaf3d2bc15620538a0c5ac64a
207ac3fac58ec776d6a2f16bb7c4dce1748c3f3b
eb87ef7369334039684e076200095e3316eacf28cf7fb4ec6a14d47a32b9221d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB87EF7369334039684E076200095E3316EACF28CF7FB4EC6A14D47A32B9221D"
Last-Modified: Sat, 17 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1749
Expires: Sun, 18 Dec 2022 23:41:42 GMT
Date: Sun, 18 Dec 2022 23:12:33 GMT
Connection: keep-alive
www.google-analytics.com/analytics.js
142.250.74.110200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.110:0
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sun, 18 Dec 2022 22:41:08 GMT
expires: Mon, 19 Dec 2022 00:41:08 GMT
cache-control: public, max-age=7200
age: 1885
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
d3g5ovfngjw9bw.cloudfront.net/leaflet.toolbar.js
143.204.42.44200 OK 9.7 kB URL HTTP/2 d3g5ovfngjw9bw.cloudfront.net/leaflet.toolbar.js
IP 143.204.42.44:0
File type HTML document, ASCII text, with very long lines (1568), with CRLF line terminators
Hash 93b5f13322d803d75e58cd7721761b8a
e23cc49ab632469cd61771c8ec5ae2b0cefd2d50
6305abe5a19fd031d7b8c1b417de9bf5f3b4f03f3db3801687f13bc1696bdc4b
GET /leaflet.toolbar.js HTTP/1.1
Host: d3g5ovfngjw9bw.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 9695
expires: Thu, 22 Dec 2022 09:48:49 GMT
access-control-allow-origin: *
link: <https://cdn4ads.com/>;rel=preconnect,<https://c.adsco.re/>;rel=preconnect,<https://adsco.re/>;rel=preconnect
cache-control: public, max-age=604800
content-encoding: gzip
date: Thu, 15 Dec 2022 09:48:49 GMT
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: eTd8VTDPWI1MP1jOFKXTuu9m7hr4BvCjyz1LIGDH4rlGXQPfmwqhcA==
age: 307424
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 411f472da1940d6166d745725d2afbd1
b3f050cd8935bc0acf9f8385fda9cc30f3947edb
79ef3031b88b81c5bce22adcd953edb20889a7dfba6db41ff936320550ba028c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 23:12:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ced.sascdn.com/tag/1097/smart.js
95.101.10.57200 OK 33 kB URL HTTP/1.1 ced.sascdn.com/tag/1097/smart.js
IP 95.101.10.57:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 4686ea4ceef48bf4d7b06bf70fe2a6ef
6a1348d13eca8b7882c4679c53019a51f48a94fd
685fc19fe5c57ebff672b1a9c03ea8b85f78d37558cc6743a39baa034f852d0d
GET /tag/1097/smart.js HTTP/1.1
Host: ced.sascdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 32836
Cache-Control: public, max-age=7200
Expires: Mon, 19 Dec 2022 01:12:33 GMT
Date: Sun, 18 Dec 2022 23:12:33 GMT
Connection: keep-alive
d2zur9cc2gf1tx.cloudfront.net/a96081b6-db78-48c4-9f82-b93e316fb1f7/notifyme.js
143.204.42.225200 OK 26 kB URL HTTP/1.1 d2zur9cc2gf1tx.cloudfront.net/a96081b6-db78-48c4-9f82-b93e316fb1f7/notifyme.js
IP 143.204.42.225:0
File type ASCII text, with very long lines (16085)
Hash 8703fc9eead243fe2f47380e962d7fa2
3d9f707259112fa9ccdd1e676f00eadcff71906c
b47b4ca26c57e3dceebd7abd067df9622599bed6bfb11b480f92d09a945cd213
GET /a96081b6-db78-48c4-9f82-b93e316fb1f7/notifyme.js HTTP/1.1
Host: d2zur9cc2gf1tx.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript
Content-Length: 25704
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Mon, 18 Feb 2019 16:54:28 GMT
Server: Apache
Date: Sun, 18 Dec 2022 03:26:20 GMT
X-Cache: Hit from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: lDDEuVnSbt180PqjNFMKlZGGmkZ7KMz78kkYTQppmQrywdxH-6Vyyg==
Age: 71175
ocsp.digicert.com/
93.184.220.29200 OK 727 B IP 93.184.220.29:0
Hash 8b7b7077155f27d3646c396e59093a8f
659ae9a121ed3c7b9609628af313c92649062310
3f2107d8494ee13361f0bdb0e3e33c3e12da1a4e58ffff6acbb3ac446aba76ad
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5151
Cache-Control: max-age=88683
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 23:12:33 GMT
Etag: "639e41ae-2d7"
Expires: Mon, 19 Dec 2022 23:50:36 GMT
Last-Modified: Sat, 17 Dec 2022 22:24:46 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 727
ocsp.digicert.com/
93.184.220.29200 OK 313 B IP 93.184.220.29:0
Hash d696b08d3b9a3a372fed237dbaae597c
39936ccc3fbc998a34a7bb00d6aa2d55554aed89
97cccb55feb1282255b72ae493479a800778be7f61591914fb7e9e3af3f12143
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5569
Cache-Control: max-age=134821
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 23:12:33 GMT
Etag: "639ef445-139"
Expires: Tue, 20 Dec 2022 12:39:34 GMT
Last-Modified: Sun, 18 Dec 2022 11:06:45 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 313
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash c76e2d1033fe19d491bcdb4e24faaeeb
9b3da75ba4ebf950d17ee9178c64c46afc363047
20590ac857bae294c81ad22c37bb5ec0aca36ad35ae4aa4ece7a5e5ea47ded63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 23:12:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash cc78a9f54cfa6fa46efd132eecdcbd14
57893a24c77baf1eabe42465d6750e04786cc41d
727ba281aaf1bac266135f617ff72354840a054683aac983886be0ec2e8e66ab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4239
Cache-Control: max-age=148231
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 23:12:33 GMT
Etag: "639f2dd9-1d7"
Expires: Tue, 20 Dec 2022 16:23:04 GMT
Last-Modified: Sun, 18 Dec 2022 15:12:25 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
cmp.quantcast.com/tcfv2/42/cmp2.js?referer=www.themoneytizer.com
143.204.55.76200 OK 48 kB URL HTTP/2 cmp.quantcast.com/tcfv2/42/cmp2.js?referer=www.themoneytizer.com
IP 143.204.55.76:0
Hash bf4e7760d811a0e41b0e7c84ca81e9bc
50f69f6ab53509c3954959b7c067af3a26d1b38c
8dd5672805994925b3398d64cfbce6ee12456a0bac884fc55af824d959e26e8c
GET /tcfv2/42/cmp2.js?referer=www.themoneytizer.com HTTP/1.1
Host: cmp.quantcast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
access-control-max-age: 86400
last-modified: Tue, 05 Jul 2022 18:40:23 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-qc-ineu: True
server: AmazonS3
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: gzip
cache-control: max-age=172800
date: Sun, 18 Dec 2022 04:40:54 GMT
etag: W/"9494b70738cd74c9137e65c29c0b1f3e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: OH441bRKSllThFrprDKZxmrg3EH2zL8CKCzsfgeu6hZ5-B4AEpHmPA==
age: 66700
X-Firefox-Spdy: h2
www.recaptcha.net/recaptcha/api.js?onload=onloadRecaptchaCallback&render=explicit
142.250.74.99200 OK 583 B URL HTTP/2 www.recaptcha.net/recaptcha/api.js?onload=onloadRecaptchaCallback&render=explicit
IP 142.250.74.99:0
File type ASCII text, with very long lines (921), with no line terminators
Hash d04cc7abf4ab1b4423a341bc45a9b724
25ed36ad23e8155314a88c49482f6d514ab87895
d87a39f80944e880f9654f236aec3fe6dbcd2e0edd31761c94f23b5fb7baa2af
GET /recaptcha/api.js?onload=onloadRecaptchaCallback&render=explicit HTTP/1.1
Host: www.recaptcha.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Sun, 18 Dec 2022 23:12:33 GMT
date: Sun, 18 Dec 2022 23:12:33 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 583
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_nid=zeotap_ddp&google_cm&zpartnerid=1&env=mWeb&eventType=pageview&id_mid_4=8a0c4881-1364-4d14-5802-9f1ee83a43ab&reqId=06ea572f-9385-453a-6989-5f3cc7da1c75&zdid=1258
142.250.74.34302 Found 447 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=zeotap_ddp&google_cm&zpartnerid=1&env=mWeb&eventType=pageview&id_mid_4=8a0c4881-1364-4d14-5802-9f1ee83a43ab&reqId=06ea572f-9385-453a-6989-5f3cc7da1c75&zdid=1258
IP 142.250.74.34:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash d801c6f702118fe77b0fc719422893a5
a28fc28391a2ea3b8a1071913b7467e48296544c
fbf08f1f7d903ab891af86a9ad73dbf9e0701a9ed24d7c559b487063001fac01
GET /pixel?google_nid=zeotap_ddp&google_cm&zpartnerid=1&env=mWeb&eventType=pageview&id_mid_4=8a0c4881-1364-4d14-5802-9f1ee83a43ab&reqId=06ea572f-9385-453a-6989-5f3cc7da1c75&zdid=1258 HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_nid=zeotap_ddp&google_cm=&zpartnerid=1&env=mWeb&eventType=pageview&id_mid_4=8a0c4881-1364-4d14-5802-9f1ee83a43ab&reqId=06ea572f-9385-453a-6989-5f3cc7da1c75&zdid=1258&google_tc=
date: Sun, 18 Dec 2022 23:12:33 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 447
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 18-Dec-2022 23:27:33 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58610/occ
18.156.0.31302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58610/occ
IP 18.156.0.31:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58610/occ HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 18 Dec 2022 23:12:33 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/58610/occ?verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBGGen2MCEM_0tB9Om8EBnLrn4Yae-G0FEgEBAQHvoGOpYwAAAAAA_eMAAA&S=AQAAAuOhc7niFNQatR4xuMiTB6M; Expires=Tue, 19 Dec 2023 05:12:33 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 411f472da1940d6166d745725d2afbd1
b3f050cd8935bc0acf9f8385fda9cc30f3947edb
79ef3031b88b81c5bce22adcd953edb20889a7dfba6db41ff936320550ba028c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 23:12:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash c76e2d1033fe19d491bcdb4e24faaeeb
9b3da75ba4ebf950d17ee9178c64c46afc363047
20590ac857bae294c81ad22c37bb5ec0aca36ad35ae4aa4ece7a5e5ea47ded63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 23:12:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
banquetunarmedgrater.com/advertisers.js
173.233.137.52200 OK 0 B URL HTTP/1.1 banquetunarmedgrater.com/advertisers.js
IP 173.233.137.52:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /advertisers.js HTTP/1.1
Host: banquetunarmedgrater.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 18 Dec 2022 23:12:33 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d94b96c4037dd1c3e6cd8dcd36807546
Strict-Transport-Security: max-age=0; includeSubdomains
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 1ceaeae66d2a3f3bdc617dce1df85aa9
19177d9df6027401fd4974cef5d666b320bce31e
ef7a8a532018acd7443896dac7955261fcc90f2e65c51ca74aafdf467d0e50d8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF7A8A532018ACD7443896DAC7955261FCC90F2E65C51CA74AAFDF467D0E50D8"
Last-Modified: Sat, 17 Dec 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4162
Expires: Mon, 19 Dec 2022 00:21:56 GMT
Date: Sun, 18 Dec 2022 23:12:34 GMT
Connection: keep-alive
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 489bcce06333557aa2640067ff717358
d9d95da5900d177b82c935d34667d32704916cf1
81ca347fe11a2476c5b3bcb593b2da563e3c2353cd96a71acac8afd4d8464834
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 23:12:34 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 17 Dec 2022 01:56:51 GMT
Expires: Sat, 24 Dec 2022 01:56:50 GMT
Etag: "d9d95da5900d177b82c935d34667d32704916cf1"
Cache-Control: max-age=441255,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77bb9583e8f1b4e8-OSL
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 4c27bb2ba2acc2b177746256595cd57c
ac37bba5f33eab2a3942b50472c852ad71c72e70
48dde36af83ae95b771ae8bba9655cc75a25d4a88a75291fedfbb796435ea853
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 23:12:34 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 18 Dec 2022 12:04:31 GMT
Expires: Sun, 25 Dec 2022 12:04:30 GMT
Etag: "ac37bba5f33eab2a3942b50472c852ad71c72e70"
Cache-Control: max-age=564115,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77bb9584fa220b41-OSL
x.bidswitch.net/sync?ssp=vidoomy&user_id=759358022.09418511731995089.8267871
3.64.108.88302 Found 0 B URL HTTP/2 x.bidswitch.net/sync?ssp=vidoomy&user_id=759358022.09418511731995089.8267871
IP 3.64.108.88:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?ssp=vidoomy&user_id=759358022.09418511731995089.8267871 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 18 Dec 2022 23:12:34 GMT
content-length: 0
location: https://x.bidswitch.net/ul_cb/sync?ssp=vidoomy&user_id=759358022.09418511731995089.8267871
cache-control: no-cache, no-store, must-revalidate
set-cookie: tuuid=7d78e3f2-e132-4389-b8eb-9ed02d10e6f0; path=/; expires=Mon, 18-Dec-2023 23:12:34 GMT; domain=.bidswitch.net; samesite=none; secure
c=1671405154; path=/; expires=Mon, 18-Dec-2023 23:12:34 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1671405154; path=/; expires=Mon, 18-Dec-2023 23:12:34 GMT; domain=.bidswitch.net; samesite=none; secure
c=1671405154; path=/; expires=Mon, 18-Dec-2023 23:12:34 GMT; domain=.bidswitch.net; samesite=none; secure
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58610/occ?verify=true
18.156.0.31204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58610/occ?verify=true
IP 18.156.0.31:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58610/occ?verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://m.imagenesderopaparaperros.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 18 Dec 2022 23:12:34 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBGKen2MCEML2bSNphr6u73yKgDY3nJAFEgEBAQHvoGOpYwAAAAAA_eMAAA&S=AQAAAsiMbFmpvp3OBtRnwr4h-7Y; Expires=Tue, 19 Dec 2023 05:12:34 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
x.bidswitch.net/ul_cb/sync?ssp=vidoomy&user_id=759358022.09418511731995089.8267871
3.64.108.88200 OK 43 B URL HTTP/2 x.bidswitch.net/ul_cb/sync?ssp=vidoomy&user_id=759358022.09418511731995089.8267871
IP 3.64.108.88:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/sync?ssp=vidoomy&user_id=759358022.09418511731995089.8267871 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://m.imagenesderopaparaperros.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:34 GMT
content-type: image/gif
content-length: 43
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/3.0.0/jquery.min.js
172.217.21.170200 OK 30 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.0.0/jquery.min.js
IP 172.217.21.170:0
File type ASCII text, with very long lines (32034)
Hash c54aac7ef64c39b4f384e0d5771d3b46
d3e059104378a3844862a5ed12a13f5d423e86b6
3e1b5002dd64d185f806edeefd333348f423584d876cfc966b5c13884c8fe3da
GET /ajax/libs/jquery/3.0.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30186
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 Dec 2022 20:56:42 GMT
expires: Fri, 15 Dec 2023 20:56:42 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 267352
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
c.adsco.re/
104.17.167.186200 OK 27 kB IP 104.17.167.186:0
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (689)
Hash cb5c226b05ba40aaf69a34646cf92a4f
d025ac2ae36b45a2674c96ba3dbad2e1ac0ecbeb
ea5d923899224c7e2d991d8c7e2ef63b7424d0976a882ff8d5bdb3b1f46ef0f1
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:34 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Wed, 18 Jan 2023 23:12:34 GMT
etag: W/"xkCBFtC0Wl/JiS60JFipuQ=="
cf-cache-status: HIT
age: 1228668
vary: Accept-Encoding
server: cloudflare
cf-ray: 77bb95854d990b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
6.adsco.re/
104.17.167.186200 OK 0 B IP 104.17.167.186:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:34 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
access-control-allow-origin: https://m.imagenesderopaparaperros.com
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 77bb9586bf8fb512-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
4.adsco.re/
162.252.214.5200 OK 62 B IP 162.252.214.5:0
File type ASCII text, with no line terminators
Hash adde5febc7b5b6c2c759ec735cce83a0
77ec17be8a9970ff04663294d41c590d0d24fde4
ce2b9f2e5005195de7add565505005be6f2ef0d37521771e15106d1e1b9260ff
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 23:12:34 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: https://m.imagenesderopaparaperros.com
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
friendshipmale.com/sfp.js
104.21.234.93200 OK 32 kB URL HTTP/2 friendshipmale.com/sfp.js
IP 104.21.234.93:0
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 6824333b5b8e584c7c3edcc8fa06b6c8
3b7ccb1a0458fbb35f9a0686d4d531d60d739f62
9c21b1cf20e2b66ff4f53e18eced27c7d7a91c4b03abde833d7cad0df8481c45
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:33 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 8dea8d7e5cfeb2124cdcff85d590f33c
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Sun, 18 Dec 2022 23:12:33 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Fj8nS%2Fl6uvqUZJQViMTvC5zT%2B3vliDD0dO5Iji4nik9a0ej92pWGiVsfz2c1KXtMWlQtDMuiWrgOdngWyrfOTRMONcHax4rZyYi62agFLZHjxcOY%2FibEWyfAuSKeLfaEFqJjBfo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77bb9580b8b523d2-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 97e0b0a87fee52ddf649f149ef723a10
19732de2c7a01971071622a2c7c0c79b49c191af
cfd38a2505ce26de58a841201570080b55fd35a43ebf6582aff81c52f46e41a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CFD38A2505CE26DE58A841201570080B55FD35A43EBF6582AFF81C52F46E41A1"
Last-Modified: Sat, 17 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9021
Expires: Mon, 19 Dec 2022 01:42:55 GMT
Date: Sun, 18 Dec 2022 23:12:34 GMT
Connection: keep-alive
mwzeom.zeotap.com/mw?google_gid=&google_cver=&zpartnerid=1&env=mWeb&eventType=pageview&id_mid_4=8a0c4881-1364-4d14-5802-9f1ee83a43ab&reqId=06ea572f-9385-453a-6989-5f3cc7da1c75&zdid=1258&google_error=3
104.22.25.87200 OK 95 B URL HTTP/2 mwzeom.zeotap.com/mw?google_gid=&google_cver=&zpartnerid=1&env=mWeb&eventType=pageview&id_mid_4=8a0c4881-1364-4d14-5802-9f1ee83a43ab&reqId=06ea572f-9385-453a-6989-5f3cc7da1c75&zdid=1258&google_error=3
IP 104.22.25.87:0
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 71a50dbba44c78128b221b7df7bb51f1
0ec63b140374ba704a58fa0c743cb357683313dd
3eb10792d1f0c7e07e7248273540f1952d9a5a2996f4b5df70ab026cd9f05517
GET /mw?google_gid=&google_cver=&zpartnerid=1&env=mWeb&eventType=pageview&id_mid_4=8a0c4881-1364-4d14-5802-9f1ee83a43ab&reqId=06ea572f-9385-453a-6989-5f3cc7da1c75&zdid=1258&google_error=3 HTTP/1.1
Host: mwzeom.zeotap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://m.imagenesderopaparaperros.com/
Connection: keep-alive
Cookie: zc=8a0c4881-1364-4d14-5802-9f1ee83a43ab; zsc=%28%40%92%0D%D6%AFb%E3.%9Ck%B4%24%E5%F2%A1%9DJq%FF%B9fO%F7%8A%D3%96%12%16%8AJ%2C%C5.%9Eq%0A%DA%89%87_%8E%FA%B4%F3%8E%F9%98%EA%94o%B8B%60%D4%AE%288%F9L%B0%91g%9A%C7%D9%23%3C%B6%D8%8E%D9%0D%ED%1DL%08X%89%D2%8E%E3%98
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:34 GMT
content-type: image/png
content-length: 95
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-origin: https://m.imagenesderopaparaperros.com
set-cookie: zc=8a0c4881-1364-4d14-5802-9f1ee83a43ab; Path=/; Domain=.zeotap.com; Max-Age=31536000; SameSite=None; Secure
vary: Origin
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 77bb95886a5cb4f1-OSL
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 51e86fb7e4e3bcce2a2845ca0f41f473
5432e9856839a4a607360976a8ff5cfaa137556f
207f1ff300d9fda0c754a07821521240d84fa63134b748bd3f6245d62c0ba320
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "207F1FF300D9FDA0C754A07821521240D84FA63134B748BD3F6245D62C0BA320"
Last-Modified: Sat, 17 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9310
Expires: Mon, 19 Dec 2022 01:47:44 GMT
Date: Sun, 18 Dec 2022 23:12:34 GMT
Connection: keep-alive
zui1hvsvkbdp.n4.adsco.re/
38.132.109.186200 OK 0 B URL HTTP/1.1 zui1hvsvkbdp.n4.adsco.re/
IP 38.132.109.186:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: zui1hvsvkbdp.n4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 23:12:34 GMT
Content-Type: text/html
Content-Length: 0
Last-Modified: Mon, 30 Jul 2018 15:32:42 GMT
Connection: close
ETag: "5b5f2f9a-0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Accept-Ranges: bytes
id5-sync.com/i/12/9.gif?gdpr=true&gdpr_consent=
141.95.98.65200 43 B URL HTTP/1.1 id5-sync.com/i/12/9.gif?gdpr=true&gdpr_consent=
IP 141.95.98.65:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /i/12/9.gif?gdpr=true&gdpr_consent= HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
p3p: CP="CAO PSA OUR"
set-cookie: cf=; Max-Age=300; Expires=Sun, 18-Dec-2022 23:17:34 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
cip=; Max-Age=300; Expires=Sun, 18-Dec-2022 23:17:34 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
cnac=; Max-Age=300; Expires=Sun, 18-Dec-2022 23:17:34 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
car=; Max-Age=300; Expires=Sun, 18-Dec-2022 23:17:34 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
gdpr=; Max-Age=300; Expires=Sun, 18-Dec-2022 23:17:34 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
callback=; Max-Age=300; Expires=Sun, 18-Dec-2022 23:17:34 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
content-type: image/gif;charset=UTF-8
transfer-encoding: chunked
date: Sun, 18 Dec 2022 23:12:34 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
test.cmp.quantcast.com/GVL-v2/cmp-list.json
143.204.55.14200 OK 18 kB URL HTTP/2 test.cmp.quantcast.com/GVL-v2/cmp-list.json
IP 143.204.55.14:0
File type JSON data\012- , ASCII text, with very long lines (10104), with no line terminators
Hash fe5c5871fcffbff7f74ae3aac4a525dd
613b3fcb9f18eacd474b101828284f2c1953bd4b
8c457cc64cd5a07c380b4efcd28fafa5549c0368c3377431992094930a6ca109
GET /GVL-v2/cmp-list.json HTTP/1.1
Host: test.cmp.quantcast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
access-control-max-age: 86400
cache-control: max-age=172800
date: Sun, 18 Dec 2022 03:00:36 GMT
last-modified: Thu, 15 Dec 2022 19:53:40 GMT
etag: W/"1fcb7b340973662b8c72821035297be8"
x-amz-server-side-encryption: AES256
x-amz-version-id: 1z0UoXMJ9xzbs2qI0bEVqRIwlX6l1fM5
server: AmazonS3
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7JMvMUeAccB4ht8P7TGIOYEGv_2nCzbFNbJ-EF-Sa3vhLTgw3LEV3Q==
age: 72719
X-Firefox-Spdy: h2
cmp.quantcast.com/tcfv2/42/cmp2ui-es.js
143.204.55.76200 OK 98 kB URL HTTP/2 cmp.quantcast.com/tcfv2/42/cmp2ui-es.js
IP 143.204.55.76:0
Hash 43b767b97c9256096b0667c5c4ec7a03
5c49953689a906d9e0a620997df6824124dfee22
ca560537016d1ed49bb05b3583660b816d5f5a0886658df4a255b34c6f035f07
GET /tcfv2/42/cmp2ui-es.js HTTP/1.1
Host: cmp.quantcast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
access-control-max-age: 604800
last-modified: Tue, 05 Jul 2022 18:40:32 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: gzip
date: Sat, 17 Dec 2022 02:43:40 GMT
cache-control: max-age=172800
etag: W/"61891c12c976950785806a7f08986298"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ZUoNFEEDuvDI9YOUvw1WygyGKNHCRu1APglPOxsS54VT0EqIkAk6iA==
age: 160138
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
143.204.42.165200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.165:0
Hash 55540b2d8b4c58e06dfdf0645a19eaa9
46bb2170cac365cbd40bcca96ebadbe96431951f
e270d5b72794a447d54fb8eb4f4d991f287f2fb5e7eeb7af20bc4bcfff79d11d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=164044
Date: Sun, 18 Dec 2022 23:12:34 GMT
Etag: "639f7736-1d7"
Expires: Tue, 20 Dec 2022 20:46:38 GMT
Last-Modified: Sun, 18 Dec 2022 20:25:26 GMT
Server: ECS (dcb/7F3B)
X-Cache: Miss from cloudfront
Via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 2wLULvDCldslgG7Z65D5ghMfqvCy5I94qPZBGQEqDM8jwULEVLYpTQ==
Age: 1272
adtrack.adleadevent.com/notifyme.php?st=a96081b6-db78-48c4-9f82-b93e316fb1f7
54.78.38.213200 OK 20 B URL HTTP/1.1 adtrack.adleadevent.com/notifyme.php?st=a96081b6-db78-48c4-9f82-b93e316fb1f7
IP 54.78.38.213:0
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /notifyme.php?st=a96081b6-db78-48c4-9f82-b93e316fb1f7 HTTP/1.1
Host: adtrack.adleadevent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://m.imagenesderopaparaperros.com
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Content-Encoding: gzip
Content-Type: application/x-javascript
Date: Sun, 18 Dec 2022 23:12:35 GMT
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Last-Modified: Sun, 18 Dec 2022 23:12:35 GMT
Pragma: no-cache
Server: Apache
Vary: Accept-Encoding
Content-Length: 20
Connection: keep-alive
ad.lkqd.net/vpaid/formats.js
151.139.128.10200 OK 36 kB URL HTTP/2 ad.lkqd.net/vpaid/formats.js
IP 151.139.128.10:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash b3736cf69ac3288810f4c8bb85ce569c
70984d14343ea485a8232927d58db0671eb1778f
1d2893bf6270530e1df90bc8279d8319cd721ba8dc4ba94970b1a0adf03bac98
GET /vpaid/formats.js HTTP/1.1
Host: ad.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:35 GMT
content-encoding: gzip
content-length: 35765
content-type: application/javascript
last-modified: Fri, 11 Dec 2020 00:09:23 GMT
accept-ranges: bytes
etag: "286704660baa2c113268f28385080796"
cache-control: public, max-age=1209600
x-sp-metadata: HS256.CPPY/pwGEocBCiQwYTY4YWZiZS03ZDYzLTRiNGEtOWY2Yy1jNGJiNjQ0ZTkyZjYQkKbXzNb5+wIaBgjjvP6cBiIMOTEuOTAuNDIuMTU0KOjzATADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GiwIARIkZTNhYjgzYmItZWVjYi00MmEzLWI0ZTEtODU5YmI2MmQzYTJlGLWXAiIYCAISFGNkczIyOS5zazEuaHdjZG4ubmV0.edGSAceAh80lHd5n3b7zXCe7Hb0Xq0mkB1DcpkQeaY0=
x-hw: 1671405155.cds259.sk1.hn,1671405155.cds229.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2
ad.lkqd.net/cookie-sync/usync.html
151.139.128.10200 OK 1.9 kB URL HTTP/2 ad.lkqd.net/cookie-sync/usync.html
IP 151.139.128.10:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4478)
Hash 41b852ed55af42897839dd36a74c8836
ab34ebee16e719e22645fb8560fd66adf90f9dff
eb7f7a625357319b2e1a3f3099e9630dada48ec5c079e5d698699ebe15c8002f
GET /cookie-sync/usync.html HTTP/1.1
Host: ad.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:35 GMT
content-encoding: gzip
content-length: 1882
content-type: text/html
last-modified: Fri, 18 Feb 2022 17:38:44 GMT
accept-ranges: bytes
etag: "952dcfd8e3703b5a7e78418d51009535"
cache-control: public, max-age=1209600
x-sp-metadata: HS256.CPPY/pwGEocBCiQ1YzFkZWRiOS0wNGRmLTRjZWMtOGI2ZC0zY2Y2YWZjYjUyMjEQkKbXzNb5+wIaBgjjvP6cBiIMOTEuOTAuNDIuMTU0KOjzATADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GisIARIkMTJhMDdmODYtMzFlYy00NGQxLTkwYzMtNWRmN2VlZDBiNTgxGNoOIhgIAhIUY2RzMDAzLnNrMS5od2Nkbi5uZXQ=.WNGa2U+fghyayhXWxxgvKboLcBGBUrNucGbu7fO6Pmc=
x-hw: 1671405155.cds259.sk1.hn,1671405155.cds003.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2
ad.lkqd.net/cookie-sync/usync.html
151.139.128.10200 OK 1.9 kB URL HTTP/2 ad.lkqd.net/cookie-sync/usync.html
IP 151.139.128.10:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4478)
Hash 41b852ed55af42897839dd36a74c8836
ab34ebee16e719e22645fb8560fd66adf90f9dff
eb7f7a625357319b2e1a3f3099e9630dada48ec5c079e5d698699ebe15c8002f
GET /cookie-sync/usync.html HTTP/1.1
Host: ad.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:35 GMT
content-encoding: gzip
content-length: 1882
content-type: text/html
last-modified: Fri, 18 Feb 2022 17:38:44 GMT
accept-ranges: bytes
etag: "952dcfd8e3703b5a7e78418d51009535"
cache-control: public, max-age=1209600
x-sp-metadata: HS256.CPPY/pwGEocBCiRhMDk2ZDRlNS0yOWVjLTRiNzctYjAyZC0wYTI2NTJmMTU2MDAQkKbXzNb5+wIaBgjjvP6cBiIMOTEuOTAuNDIuMTU0KOjzATADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GisIARIkOTIxODM1YWMtYzU3Mi00MTEwLTgyM2EtOTU2NGQ4MTI2YTY5GNoOIhgIAhIUY2RzMDAzLnNrMS5od2Nkbi5uZXQ=.X7cFODUTSlLJrYMVXVcEFVrToxHhusKUTRBiT2nWIqQ=
x-hw: 1671405155.cds259.sk1.hn,1671405155.cds003.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2
adsco.re/p
162.252.214.5200 OK 170 B IP 162.252.214.5:0
File type ASCII text, with no line terminators
Hash 20e97724716007b516c6a2f79eb8b0e2
81e310505d3de2cd1e524c6174b0bdf9dc83ca9e
4d62552293e3b391e88c3cc6e128e5fd962ddd9c4c8bd74a62798440ae0ad224
POST /p HTTP/1.1
Host: adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 1986
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 23:12:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
AS-P-1: OK lon123
AS-P-2: OK
AS-P-3: OK
Access-Control-Max-Age: 2592000
Cache-Control: no-transform
Access-Control-Allow-Origin: https://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 0c61a9397a6dacb86a871e21c5681ef2
8c87de2b592d25245ae51239acf64073c1dccdad
021b67e280d13e14ada7447cf4411e69929faaa0bc107669f1998a2703d69948
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "021B67E280D13E14ADA7447CF4411E69929FAAA0BC107669F1998A2703D69948"
Last-Modified: Sat, 17 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6850
Expires: Mon, 19 Dec 2022 01:06:45 GMT
Date: Sun, 18 Dec 2022 23:12:35 GMT
Connection: keep-alive
holdsoutset.com/ren.gif?sid=H4sIAAAAAAAC%2F6xST4gcxReuzi%2Fhh3hSRPAQaRwJCu5s9fzZmUkIa5LdxDGb3XV3QySXUN1VPVOZ6qq2qnp6d0%2FBqOTm6kkFTe%2BbTdboYgx4iKAQZuNBF4RMQJmDexcFRSF4EpnZlehB8OCD7voeX3e973vvvbaabCMMCenPnlLLXAgyWs5j96kzXFKVGnd6wfVwHh9yz3A5VjrkLg5eun3Qw%2BU8fto9wYKWGi1gD2MPe%2B5xrlmoFkeHLPB4o%2BblazhfKuS9cgkW9d9zkzhgiAO0vY0eBk57%2B5pf3gAedEFGH08w07IqfmYySgSxSkObrp%2BWLalSCdF9GGoHQrm%2B%2BzUo00PorT2g5PquA1DttYED8HkPOd964Mv1XZngt6%2FsKPUFMAk%2BfRDSdheY6AInXQjUReD0DgIIKEzPgIyuTiudkqUdlgzYHtp771fgaQ%2Ft%2Fe4RkNFHRwVfdOeVSCxX0sBimAFf7AJvdCFONsEuO8DTTQjsy8Dp12j03hTIaG3GCAWc9p%2BslPywVKySkTFapiMliisjpFwtjtAKDitVn5SxXxm2iPMu8LALgq0AMQ4kg4c7kIQOJLEDEe27pFwLMa6EflgsVktBEBSLQVCuDq4ulqohhiQYeFgBG69AIFYg0Bcg1hegxVdAJ7fANDMw1AFjEbRpBilDkBoEKUGQcgSpRZC2sytUmILJrlJhEt%2FbPQu7ZzHrKNtYJVeUbTCJVuNt9NCwcd8%2F%2Fwm0WN8NwrGCx%2FxCiZCyXyJeoVqtlapebaxW9SrYr4LhGXCzZ2hzeTDFR3%2BBmPcQ%2BukC%2BGQTjNiEgD8BJNkPJO1UChhIs1OqYliWG8vCNJW2LC%2BZBaoyiO0%2BsEvOqthGjw11VNbvAgu2nv1%2F%2FsbtwlcvQqAziHUG5%2FltBA1xqTOnUrQ2p1KDbszElkd8mQyGO2%2BJZeiDk2wpVZrWJ8zKtSPBgBjAjQVm7BSRlMuGQR8e5ZQyfVzpgKHP6%2BYM82cT0zyaaJnEU7PHjtejWDNjuJJdIPzO4lkIeA898M3t4druJ7eA603QSX%2BiaW18cHQ0EDxo5eNAtPKSRGwnHzeM2MPFsRouFA4QyumfmB9%2BieDzc6fZ2SWJz2GIkq3xT98exDvAVReC%2BJX3c7n6sZnpXK4%2F9w8lbDOJfEm4%2BLdlDvCoYQ%2FzQMlrudxCfWFqMpf7rO5S0nCZdsVSq8UoaTDpUi7dny%2B%2FefN6LjcxOX9srj67UB9Kcect0dY1MReCWTdi1PUwxu70zEnXVzIx13O5qSNzJybP1U8dOTGZy%2FWf%2B6%2FEg4m30G6AUQi0uJ%2F7sQNpknV0wd8af3ejeW3si9dB8B46%2BPtvINjW%2BJ0fXn385gs%2FAvEzMOwvP97Hq%2BYSNLQDxF4EGWXQ1hm0RQZErIBJ%2Ftexsd4av1scBvjC6fhCO2u%2B0OKNnZ01vO%2BycohDhgvMD2t%2BWCGY1sJSzSc1j1X8MvHAml5w%2BT3%2FDwAAAP%2F%2FAQAA%2F%2F%2BJ3G4E5wUAAA%3D%3D
192.243.59.12200 OK 7 B URL HTTP/1.1 holdsoutset.com/ren.gif?sid=H4sIAAAAAAAC%2F6xST4gcxReuzi%2Fhh3hSRPAQaRwJCu5s9fzZmUkIa5LdxDGb3XV3QySXUN1VPVOZ6qq2qnp6d0%2FBqOTm6kkFTe%2BbTdboYgx4iKAQZuNBF4RMQJmDexcFRSF4EpnZlehB8OCD7voeX3e973vvvbaabCMMCenPnlLLXAgyWs5j96kzXFKVGnd6wfVwHh9yz3A5VjrkLg5eun3Qw%2BU8fto9wYKWGi1gD2MPe%2B5xrlmoFkeHLPB4o%2BblazhfKuS9cgkW9d9zkzhgiAO0vY0eBk57%2B5pf3gAedEFGH08w07IqfmYySgSxSkObrp%2BWLalSCdF9GGoHQrm%2B%2BzUo00PorT2g5PquA1DttYED8HkPOd964Mv1XZngt6%2FsKPUFMAk%2BfRDSdheY6AInXQjUReD0DgIIKEzPgIyuTiudkqUdlgzYHtp771fgaQ%2Ft%2Fe4RkNFHRwVfdOeVSCxX0sBimAFf7AJvdCFONsEuO8DTTQjsy8Dp12j03hTIaG3GCAWc9p%2BslPywVKySkTFapiMliisjpFwtjtAKDitVn5SxXxm2iPMu8LALgq0AMQ4kg4c7kIQOJLEDEe27pFwLMa6EflgsVktBEBSLQVCuDq4ulqohhiQYeFgBG69AIFYg0Bcg1hegxVdAJ7fANDMw1AFjEbRpBilDkBoEKUGQcgSpRZC2sytUmILJrlJhEt%2FbPQu7ZzHrKNtYJVeUbTCJVuNt9NCwcd8%2F%2Fwm0WN8NwrGCx%2FxCiZCyXyJeoVqtlapebaxW9SrYr4LhGXCzZ2hzeTDFR3%2BBmPcQ%2BukC%2BGQTjNiEgD8BJNkPJO1UChhIs1OqYliWG8vCNJW2LC%2BZBaoyiO0%2BsEvOqthGjw11VNbvAgu2nv1%2F%2FsbtwlcvQqAziHUG5%2FltBA1xqTOnUrQ2p1KDbszElkd8mQyGO2%2BJZeiDk2wpVZrWJ8zKtSPBgBjAjQVm7BSRlMuGQR8e5ZQyfVzpgKHP6%2BYM82cT0zyaaJnEU7PHjtejWDNjuJJdIPzO4lkIeA898M3t4druJ7eA603QSX%2BiaW18cHQ0EDxo5eNAtPKSRGwnHzeM2MPFsRouFA4QyumfmB9%2BieDzc6fZ2SWJz2GIkq3xT98exDvAVReC%2BJX3c7n6sZnpXK4%2F9w8lbDOJfEm4%2BLdlDvCoYQ%2FzQMlrudxCfWFqMpf7rO5S0nCZdsVSq8UoaTDpUi7dny%2B%2FefN6LjcxOX9srj67UB9Kcect0dY1MReCWTdi1PUwxu70zEnXVzIx13O5qSNzJybP1U8dOTGZy%2FWf%2B6%2FEg4m30G6AUQi0uJ%2F7sQNpknV0wd8af3ejeW3si9dB8B46%2BPtvINjW%2BJ0fXn385gs%2FAvEzMOwvP97Hq%2BYSNLQDxF4EGWXQ1hm0RQZErIBJ%2Ftexsd4av1scBvjC6fhCO2u%2B0OKNnZ01vO%2BycohDhgvMD2t%2BWCGY1sJSzSc1j1X8MvHAml5w%2BT3%2FDwAAAP%2F%2FAQAA%2F%2F%2BJ3G4E5wUAAA%3D%3D
IP 192.243.59.12:0
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F6xST4gcxReuzi%2Fhh3hSRPAQaRwJCu5s9fzZmUkIa5LdxDGb3XV3QySXUN1VPVOZ6qq2qnp6d0%2FBqOTm6kkFTe%2BbTdboYgx4iKAQZuNBF4RMQJmDexcFRSF4EpnZlehB8OCD7voeX3e973vvvbaabCMMCenPnlLLXAgyWs5j96kzXFKVGnd6wfVwHh9yz3A5VjrkLg5eun3Qw%2BU8fto9wYKWGi1gD2MPe%2B5xrlmoFkeHLPB4o%2BblazhfKuS9cgkW9d9zkzhgiAO0vY0eBk57%2B5pf3gAedEFGH08w07IqfmYySgSxSkObrp%2BWLalSCdF9GGoHQrm%2B%2BzUo00PorT2g5PquA1DttYED8HkPOd964Mv1XZngt6%2FsKPUFMAk%2BfRDSdheY6AInXQjUReD0DgIIKEzPgIyuTiudkqUdlgzYHtp771fgaQ%2Ft%2Fe4RkNFHRwVfdOeVSCxX0sBimAFf7AJvdCFONsEuO8DTTQjsy8Dp12j03hTIaG3GCAWc9p%2BslPywVKySkTFapiMliisjpFwtjtAKDitVn5SxXxm2iPMu8LALgq0AMQ4kg4c7kIQOJLEDEe27pFwLMa6EflgsVktBEBSLQVCuDq4ulqohhiQYeFgBG69AIFYg0Bcg1hegxVdAJ7fANDMw1AFjEbRpBilDkBoEKUGQcgSpRZC2sytUmILJrlJhEt%2FbPQu7ZzHrKNtYJVeUbTCJVuNt9NCwcd8%2F%2Fwm0WN8NwrGCx%2FxCiZCyXyJeoVqtlapebaxW9SrYr4LhGXCzZ2hzeTDFR3%2BBmPcQ%2BukC%2BGQTjNiEgD8BJNkPJO1UChhIs1OqYliWG8vCNJW2LC%2BZBaoyiO0%2BsEvOqthGjw11VNbvAgu2nv1%2F%2FsbtwlcvQqAziHUG5%2FltBA1xqTOnUrQ2p1KDbszElkd8mQyGO2%2BJZeiDk2wpVZrWJ8zKtSPBgBjAjQVm7BSRlMuGQR8e5ZQyfVzpgKHP6%2BYM82cT0zyaaJnEU7PHjtejWDNjuJJdIPzO4lkIeA898M3t4druJ7eA603QSX%2BiaW18cHQ0EDxo5eNAtPKSRGwnHzeM2MPFsRouFA4QyumfmB9%2BieDzc6fZ2SWJz2GIkq3xT98exDvAVReC%2BJX3c7n6sZnpXK4%2F9w8lbDOJfEm4%2BLdlDvCoYQ%2FzQMlrudxCfWFqMpf7rO5S0nCZdsVSq8UoaTDpUi7dny%2B%2FefN6LjcxOX9srj67UB9Kcect0dY1MReCWTdi1PUwxu70zEnXVzIx13O5qSNzJybP1U8dOTGZy%2FWf%2B6%2FEg4m30G6AUQi0uJ%2F7sQNpknV0wd8af3ejeW3si9dB8B46%2BPtvINjW%2BJ0fXn385gs%2FAvEzMOwvP97Hq%2BYSNLQDxF4EGWXQ1hm0RQZErIBJ%2Ftexsd4av1scBvjC6fhCO2u%2B0OKNnZ01vO%2BycohDhgvMD2t%2BWCGY1sJSzSc1j1X8MvHAml5w%2BT3%2FDwAAAP%2F%2FAQAA%2F%2F%2BJ3G4E5wUAAA%3D%3D HTTP/1.1
Host: holdsoutset.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Cookie: u_pl=15289012; uid_id2=74bf438a-6d5d-4d07-a583-d70f78ba50b7:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 18 Dec 2022 23:12:35 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ba2156a3ed2c6ab02c014c8ec2515c4d
Strict-Transport-Security: max-age=0; includeSubdomains
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash bce7ad3306f99babb733fa5c11575bb1
3e948cd6f3f3e948948b8be10ad9a900671ee12b
91980c3c773f70e07cba5ade57ce70aaa978a5d1eb1921e5be150f40f354ed6c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5386
Cache-Control: max-age=120263
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 23:12:35 GMT
Etag: "639ebc20-1d7"
Expires: Tue, 20 Dec 2022 08:36:58 GMT
Last-Modified: Sun, 18 Dec 2022 07:07:12 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
ads.stickyadstv.com/auto-user-sync
23.36.77.33200 OK 43 B URL HTTP/1.1 ads.stickyadstv.com/auto-user-sync
IP 23.36.77.33:0
ASN #20940 Akamai International B.V.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /auto-user-sync HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/gif
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
x-sticky-vk: 1671405155254065-519
Expires: Sun, 18 Dec 2022 23:12:35 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 18 Dec 2022 23:12:35 GMT
Content-Length: 43
Connection: keep-alive
Set-Cookie: UID=c3eb57dfc52d6a7d769652e81237369; Domain=ads.stickyadstv.com; Expires=Tue, 17-Jan-2023 23:12:35 GMT; Path=/
ad.turn.com/r/cs?pid=65
46.228.164.11302 Found 0 B IP 46.228.164.11:0
ASN #56396 Amobee EMEA Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /r/cs?pid=65 HTTP/1.1
Host: ad.turn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="/w3c/p3p.xml", CP="NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV"
cache-control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
pragma: no-cache
set-cookie: uid=8714261884590759426; Domain=.turn.com; Expires=Fri, 16-Jun-2023 23:12:35 GMT; Path=/; Secure; SameSite=None
location: https://cs.lkqd.net/cs?partnerId=94&partnerUserId=8714261884590759426
content-length: 0
date: Sun, 18 Dec 2022 23:12:34 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash be2253930446677faf839738ba94f7ab
d44a0447bf2ea58771da83d01cec6a80136767c8
6f768ec9b2901aa3e47f5ca4d261b2d207e032f47b06c3b7fbf04113757cb31e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6577
Cache-Control: max-age=86898
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 23:12:35 GMT
Etag: "639e3525-1d7"
Expires: Mon, 19 Dec 2022 23:20:53 GMT
Last-Modified: Sat, 17 Dec 2022 21:31:17 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
secure.quantserve.com/quant.js
91.228.74.159200 OK 471 B URL HTTP/2 secure.quantserve.com/quant.js
IP 91.228.74.159:0
Hash 21418c6b6a02563f94480b46e0f5872e
31f96b5810844b438b3b9782a56556149744dca5
67a1da0833110fb9908643bddca2109e299e495ec35561e2a1f46ec8a8d30901
GET /quant.js HTTP/1.1
Host: secure.quantserve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:33 GMT
content-type: application/javascript
accept-ranges: bytes
cache-control: private, max-age=604800
content-encoding: gzip
etag: "StHfV9prSwQMxjKWocWEFw=="
expires: Sun, 25 Dec 2022 23:12:33 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash c1cb661139808a3fb81403d3dd842de6
ddce367665dcb87a6df35972ae82d6a3007c56cb
f195f0099dd4bea7c67d992f36b20f3f3b50d79d0909d6727250f7817d856b38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F195F0099DD4BEA7C67D992F36B20F3F3B50D79D0909D6727250F7817D856B38"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3172
Expires: Mon, 19 Dec 2022 00:05:27 GMT
Date: Sun, 18 Dec 2022 23:12:35 GMT
Connection: keep-alive
csync.loopme.me/?redirect=https%3A%2F%2Fcs.lkqd.net%2Fcs%3FpartnerId%3D54%26partnerUserId%3D%7Bdevice_id%7D
35.214.223.115307 Temporary Redirect 0 B URL HTTP/2 csync.loopme.me/?redirect=https%3A%2F%2Fcs.lkqd.net%2Fcs%3FpartnerId%3D54%26partnerUserId%3D%7Bdevice_id%7D
IP 35.214.223.115:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?redirect=https%3A%2F%2Fcs.lkqd.net%2Fcs%3FpartnerId%3D54%26partnerUserId%3D%7Bdevice_id%7D HTTP/1.1
Host: csync.loopme.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
set-cookie: viewer_token=9990d583-3fd1-41e9-ab8c-a45c870443cc; path=/; domain=csync.loopme.me; secure; HttpOnly; Expires=Sat, 18-Mar-2023 23:12:35 GMT; SameSite=None
location: https://cs.lkqd.net/cs?partnerId=54&partnerUserId=9990d583-3fd1-41e9-ab8c-a45c870443cc
content-length: 0
date: Sun, 18 Dec 2022 23:12:35 GMT
server: _
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
143.204.42.165200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.165:0
Hash 3678c5342a3531674497fcd352df920f
09b27f9ff55b24fcfeec5b40eda7f7241bed4744
ab7010b756af09494729823f35fdcc785a969ef991fa7a98b4b35db4bb11cb31
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=110314
Date: Sun, 18 Dec 2022 23:12:35 GMT
Etag: "639e9335-1d7"
Expires: Tue, 20 Dec 2022 05:51:09 GMT
Last-Modified: Sun, 18 Dec 2022 04:12:37 GMT
Server: ECS (nyb/1D25)
X-Cache: Miss from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: dHw03dQHDEylILTwD2bl0pVbzCzW18JvCHWx78Yuv6oh2_BB4LH0pQ==
Age: 5912
zui1hvsvkbdp.s4.adsco.re/
185.200.116.90200 OK 0 B URL HTTP/1.1 zui1hvsvkbdp.s4.adsco.re/
IP 185.200.116.90:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: zui1hvsvkbdp.s4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 23:12:35 GMT
Content-Type: text/html
Content-Length: 0
Last-Modified: Mon, 30 Jul 2018 15:38:01 GMT
Connection: close
ETag: "5b5f30d9-0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Accept-Ranges: bytes
v.lkqd.net/ad?pid=430&sid=1135195&formats=true&output=vastvpaid&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=93326871&m=
69.20.43.192200 OK 150 B URL HTTP/2 v.lkqd.net/ad?pid=430&sid=1135195&formats=true&output=vastvpaid&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=93326871&m=
IP 69.20.43.192:0
File type ASCII text, with no line terminators
Hash f2200dfc5e8b75dea19cc2ff13526ce8
5235427034ffed5be887acecc26f62210be11554
e459e49bb953fa15bac6d8bcf457713e3f78a5154c0e1f213be85e378af41b38
GET /ad?pid=430&sid=1135195&formats=true&output=vastvpaid&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=93326871&m= HTTP/1.1
Host: v.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:35 GMT
content-type: application/xml; charset=UTF-8
content-length: 150
content-encoding: gzip
access-control-allow-origin: https://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=vastvpaid&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=99348221&m=
69.20.43.192200 OK 1.4 kB URL HTTP/2 v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=vastvpaid&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=99348221&m=
IP 69.20.43.192:0
File type ASCII text, with very long lines (1817), with no line terminators
Hash 40d73fe3f57d3ff98ddf16c75a44ed20
006f58acb9e9429d22a33796c80dcb1729f835d4
38201ed93bb4e2658797bd6b0e849f54f7944dd27a015e77202cf7b36254d0d3
GET /ad?pid=430&sid=1135194&formats=true&output=vastvpaid&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=99348221&m= HTTP/1.1
Host: v.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:35 GMT
content-type: application/xml; charset=UTF-8
content-length: 1360
content-encoding: gzip
access-control-allow-origin: https://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
e1.o.lencr.org/
23.36.76.226200 OK 346 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 6463bd8f106fd4ee8ea9e9e4b2fc9449
43f486d6a36bc6293df2e810c52e589e09baba57
b887d8434464b007110a6abe587a0c0dfd383a57600000dad9ed9b3940215eb5
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "B887D8434464B007110A6ABE587A0C0DFD383A57600000DAD9ED9B3940215EB5"
Last-Modified: Sat, 17 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2363
Expires: Sun, 18 Dec 2022 23:51:58 GMT
Date: Sun, 18 Dec 2022 23:12:35 GMT
Connection: keep-alive
e1.o.lencr.org/
23.36.76.226200 OK 346 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 6463bd8f106fd4ee8ea9e9e4b2fc9449
43f486d6a36bc6293df2e810c52e589e09baba57
b887d8434464b007110a6abe587a0c0dfd383a57600000dad9ed9b3940215eb5
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "B887D8434464B007110A6ABE587A0C0DFD383A57600000DAD9ED9B3940215EB5"
Last-Modified: Sat, 17 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2363
Expires: Sun, 18 Dec 2022 23:51:58 GMT
Date: Sun, 18 Dec 2022 23:12:35 GMT
Connection: keep-alive
ad.lkqd.net/vpaid/vpaid.js?fusion=1.0
151.139.128.10200 OK 62 kB URL HTTP/2 ad.lkqd.net/vpaid/vpaid.js?fusion=1.0
IP 151.139.128.10:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 2a0adab82b941577dbd1041f8448fd08
bf2cf01d95e02fb5ec9075835cbee4e3e35a0246
757ad1d5b7a305d8eaa810c6585b5b7431b212af4ff8fdef9fbd40a8254666a6
GET /vpaid/vpaid.js?fusion=1.0 HTTP/1.1
Host: ad.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:35 GMT
content-encoding: gzip
content-length: 62021
content-type: application/javascript
last-modified: Thu, 13 Oct 2022 21:01:07 GMT
accept-ranges: bytes
etag: "88ca76abee51b1544e17b021f04aaaed"
cache-control: public, max-age=1209600
x-sp-metadata: HS256.CPPY/pwGEocBCiRhZTFiZjNiMy05Y2YxLTRhOTktOWJhZS0yOGYzY2EzNDE2NWQQkKbXzNb5+wIaBgjjvP6cBiIMOTEuOTAuNDIuMTU0KOjzATADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GiwIARIkYjIzYmVlNDAtZjhjNS00YzE2LTg3NzktNWE1YTkzNjgxZTdkGMXkAyIYCAISFGNkczI1NC5zazEuaHdjZG4ubmV0.Gf3dqBrTA3msA1IeTCYXSE51lPTROHnBlb1yWEUiQLg=
x-hw: 1671405155.cds259.sk1.hn,1671405155.cds254.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2
sync.srv.stackadapt.com/sync?nid=161
54.85.151.23302 Found 104 B URL HTTP/1.1 sync.srv.stackadapt.com/sync?nid=161
IP 54.85.151.23:0
File type HTML document, ASCII text
Hash 786106af890ff4cdc471a89b617fb4c4
3b970f8f23e675ae4e110158587092f80c702374
6eb24168c1ebb1a1fdf65d842ae8c49768d5b9ed27b0f865383a93fc4531453d
GET /sync?nid=161 HTTP/1.1
Host: sync.srv.stackadapt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Date: Sun, 18 Dec 2022 23:12:35 GMT
Location: https://cs.lkqd.net/cs?partnerId=93&partnerUserId=-cpTYwgVSihD0gIOVHQA-1taKpo
Set-Cookie: sa-user-id=s%3A0-f9ca5363-0815-4a28-43d2-020e547400fb.4Zt8oKiVwgDeH5obvSbBdjgjkdI9wUFyULXivZ5rg0w; Max-Age=31536000; Secure; SameSite=None
sa-user-id-v2=s%3A-cpTYwgVSihD0gIOVHQA-1taKpo.9QzlHe1I4%2Bpd%2BOCdoquo9pI4gveMg%2BPvqlrX9GqyOlA; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None
Content-Length: 104
Connection: keep-alive
cs.lkqd.net/cs?partnerId=103&redirect=https%3A%2F%2Fevent.clientgear.com%2Fcookie%2Flkqd%3Fpartner%3Dlkqd%26cookieid%3D%24%24rawlkqduserid%24%24&r=if
146.20.132.151200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=103&redirect=https%3A%2F%2Fevent.clientgear.com%2Fcookie%2Flkqd%3Fpartner%3Dlkqd%26cookieid%3D%24%24rawlkqduserid%24%24&r=if
IP 146.20.132.151:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=103&redirect=https%3A%2F%2Fevent.clientgear.com%2Fcookie%2Flkqd%3Fpartner%3Dlkqd%26cookieid%3D%24%24rawlkqduserid%24%24&r=if HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:35 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
cs.lkqd.net/cs?partnerId=54&partnerUserId=9990d583-3fd1-41e9-ab8c-a45c870443cc
146.20.132.151200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=54&partnerUserId=9990d583-3fd1-41e9-ab8c-a45c870443cc
IP 146.20.132.151:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=54&partnerUserId=9990d583-3fd1-41e9-ab8c-a45c870443cc HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad.lkqd.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:35 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash 645f24084a4486c9882f9f6b2979a79d
e47c8799fb00f4a4b7e90d9415f55fc20acaa7e3
644b0fa793131d7e1785589e3b83080c44d19396208b6a1548dc8b8cc430df9c
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 23:12:35 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 18 Dec 2022 06:57:12 GMT
Expires: Sun, 25 Dec 2022 06:57:11 GMT
Etag: "e47c8799fb00f4a4b7e90d9415f55fc20acaa7e3"
Cache-Control: max-age=545675,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77bb958dea28b4e8-OSL
cs.lkqd.net/cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if
146.20.132.151200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if
IP 146.20.132.151:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:35 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 29501358dcc6d683338c68e35663a808
3243b26a18c3d45e21c9704985511731361548fe
8191fd294a0bcb8a97c43df1a15aa14861f84853e03a3771e3dfd5a0318f7693
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8191FD294A0BCB8A97C43DF1A15AA14861F84853E03A3771E3DFD5A0318F7693"
Last-Modified: Sat, 17 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10557
Expires: Mon, 19 Dec 2022 02:08:32 GMT
Date: Sun, 18 Dec 2022 23:12:35 GMT
Connection: keep-alive
cdn.creative-bars1.com/sb/notifications/rtb/social/facebook/1-1/css/style.css
172.64.108.13200 OK 1.9 kB URL HTTP/2 cdn.creative-bars1.com/sb/notifications/rtb/social/facebook/1-1/css/style.css
IP 172.64.108.13:0
Hash d3f014cb7283cbe3decb8e16ed7400b0
ce6f348d19546d2f6fd43f9c2b08a434d5eb6584
6bc18223ae51eb86df9caf8fe977a59537f9124da0839e480cb7dc26b564ffcf
GET /sb/notifications/rtb/social/facebook/1-1/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:35 GMT
content-type: text/css
last-modified: Mon, 06 Jun 2022 09:53:30 GMT
etag: W/"629dce9a-1a2a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 129530
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wcmpKi4dvEB%2FNlnuQA%2BMZJjRZI0QdF5ONT%2FQR35YdcTq9%2BiCDoWRmMGLBdWzCmWPJ4YmDF8vRSbiufiNzOhuq8y92q9qVLOpfEIArmSymGpoQN8kvDmNzRxWsmTbKBCZUJtkvmxdOb56"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77bb958effe5778f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cs.lkqd.net/cs?partnerId=93&partnerUserId=-cpTYwgVSihD0gIOVHQA-1taKpo
146.20.132.151200 OK 703 B URL HTTP/2 cs.lkqd.net/cs?partnerId=93&partnerUserId=-cpTYwgVSihD0gIOVHQA-1taKpo
IP 146.20.132.151:0
File type gzip compressed data, max compression\012- data
Hash 062ef6f730c78b578be16e4b71eecaf4
6a504b913ff2675a31c275cc139e2dc401cf431e
bf8db6107334834438f70f9e8019ca7d83def02bb5c9fdd64a30f7112e0ba06f
GET /cs?partnerId=93&partnerUserId=-cpTYwgVSihD0gIOVHQA-1taKpo HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad.lkqd.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:35 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=99348221&m=&rtv=1&thost=m.imagenesderopaparaperros.com
69.20.43.192200 OK 0 B URL HTTP/2 v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=99348221&m=&rtv=1&thost=m.imagenesderopaparaperros.com
IP 69.20.43.192:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=99348221&m=&rtv=1&thost=m.imagenesderopaparaperros.com HTTP/1.1
Host: v.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://m.imagenesderopaparaperros.com/
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:35 GMT
content-length: 0
access-control-allow-origin: https://m.imagenesderopaparaperros.com
access-control-max-age: 300
cache-control: max-age=300
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
X-Firefox-Spdy: h2
cs.lkqd.net/cs?partnerId=94&partnerUserId=8714261884590759426
146.20.132.151200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=94&partnerUserId=8714261884590759426
IP 146.20.132.151:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=94&partnerUserId=8714261884590759426 HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad.lkqd.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:35 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
click.pclk.name/thumbnail?seat=369022&adid=369022&i=qa0jRUeZyn0_0&imgt=icon
173.239.53.24302 Found 0 B URL HTTP/1.1 click.pclk.name/thumbnail?seat=369022&adid=369022&i=qa0jRUeZyn0_0&imgt=icon
IP 173.239.53.24:0
ASN #27257 WEBAIR-INTERNET
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /thumbnail?seat=369022&adid=369022&i=qa0jRUeZyn0_0&imgt=icon HTTP/1.1
Host: click.pclk.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 302 Found
Cache-Control: no-store
Content-Length: 0
Age: 0
Connection: keep-alive
Location: https://us.doctorpost.net/metrics/save.img?event=impressions&bid-id=v2-1671405154322-7-8077-1178228-8f592af2-2810-7baa-1452-e7bb7c3b2c76&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fic%3Fauth%3Dpz6u78%26c%3DOA5jB9eH9sRDYoHJpKO3bLzW_QfossFqvOsaSbu55fSMXqoLjiBoDiBys59d6QTT9Gk2MuYyI-Z8IdouDz5MO0ZOESlfdgvCQgSk073gcvfc9t8t39g4-NpnwYdWXaQn4ImOHJdcBm6Koz3IIVoh45fxCbQSs8U2EDuQzTdT5b4m8SYIh8Ji4ySxi3fQ9ptLdRxYTxRRUqk-rOi6m-y6EsnQBrD4HVeSxXqeZSvsbiYINN83492fCaQbAkZaGk9m_Dcmge3MQVRjjFq5iyLrIV6K6iWVT9nmFVm2FN1PoSG0As9jk46mu-BKE3dHNOVDRJtDNq9meGraZnqO3cGuKaBfVWDVvi7UoMg-ZAwL0LYCzY4C8LU5Cpwjb5dr0k36AMV6G69v8p1IwWO96v3lKWfKvNvgfkiC0Ry6_J4YGlKrNEWSU4wLxaFuAOdICpZq9nOjgD-fmH7r6TvPhxx6HTGhUutJ16y837Oia7auBH7O502802wrI-g3gIMQVY0IQ_vnD-vMn9Q6jCCaOb_ymHxyZysDzYb8ERQuLGXAkQ0nbrzRDFO8BkKzoWaUFGvejynfL_xlR7W1iZGiPz-_wnAJPdvQ1gqNt7fB4htx1fzWwmCu
Pragma: no-cache
cdn4ads.com/A.asp?_=BAYAY5-eYwFjn55jgAGBAsAAIEMYgFiWZyhIKKx7Kw7CyrHdkneOJ0RR_eg6ZEHGExYVwQBHMEUCIQC1N4ziEWN_g2-5zoOqD-3z4RWcvaroozOm6oEMK3m6LgIgZ181Ch9dLaV0EVR8ok7QckVC-OsCK2zPsMWkhjyeImU&v=4&YtWBfHcw=4293767&minBid=&zTDSxYRg=0,0&fnowZANY=&nROCpkwL=&s=1280,1024,1,1280,1024,0
216.59.63.128200 OK 44 B URL HTTP/2 cdn4ads.com/A.asp?_=BAYAY5-eYwFjn55jgAGBAsAAIEMYgFiWZyhIKKx7Kw7CyrHdkneOJ0RR_eg6ZEHGExYVwQBHMEUCIQC1N4ziEWN_g2-5zoOqD-3z4RWcvaroozOm6oEMK3m6LgIgZ181Ch9dLaV0EVR8ok7QckVC-OsCK2zPsMWkhjyeImU&v=4&YtWBfHcw=4293767&minBid=&zTDSxYRg=0,0&fnowZANY=&nROCpkwL=&s=1280,1024,1,1280,1024,0
IP 216.59.63.128:0
File type ASCII text, with no line terminators
Hash d5f0a25e4d3522d56d48ce7bc3e518fb
86794caff58f7fee6e684c2ba7195f970a8d6f4c
9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5
GET /A.asp?_=BAYAY5-eYwFjn55jgAGBAsAAIEMYgFiWZyhIKKx7Kw7CyrHdkneOJ0RR_eg6ZEHGExYVwQBHMEUCIQC1N4ziEWN_g2-5zoOqD-3z4RWcvaroozOm6oEMK3m6LgIgZ181Ch9dLaV0EVR8ok7QckVC-OsCK2zPsMWkhjyeImU&v=4&YtWBfHcw=4293767&minBid=&zTDSxYRg=0,0&fnowZANY=&nROCpkwL=&s=1280,1024,1,1280,1024,0 HTTP/1.1
Host: cdn4ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
asf: 9
popads-ec: ASB
content-type: text/javascript;charset=UTF-8
content-length: 44
date: Sun, 18 Dec 2022 23:12:35 GMT
X-Firefox-Spdy: h2
unseenreport.com/pxf.gif?uuid=74bf438a-6d5d-4d07-a583-d70f78ba50b7&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=2a6dfa22c42f41c1c5d4b95b66a5509c&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=23
192.243.59.13200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=74bf438a-6d5d-4d07-a583-d70f78ba50b7&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=2a6dfa22c42f41c1c5d4b95b66a5509c&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=23
IP 192.243.59.13:0
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=74bf438a-6d5d-4d07-a583-d70f78ba50b7&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=2a6dfa22c42f41c1c5d4b95b66a5509c&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=23 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 18 Dec 2022 23:12:35 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 847fac4775486bcf02be93bd1ba566f1
Strict-Transport-Security: max-age=0; includeSubdomains
unseenreport.com/pxf.gif?uuid=74bf438a-6d5d-4d07-a583-d70f78ba50b7&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=cf621eb24aa5b4a128894819698170b8&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=23
192.243.59.13200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=74bf438a-6d5d-4d07-a583-d70f78ba50b7&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=cf621eb24aa5b4a128894819698170b8&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=23
IP 192.243.59.13:0
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=74bf438a-6d5d-4d07-a583-d70f78ba50b7&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=cf621eb24aa5b4a128894819698170b8&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=23 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 18 Dec 2022 23:12:35 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 101955292fceb1bfa29ed7b90226f343
Strict-Transport-Security: max-age=0; includeSubdomains
t.lkqd.net/t
146.20.128.67200 OK 0 B IP 146.20.128.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://m.imagenesderopaparaperros.com/
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:35 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: https://m.imagenesderopaparaperros.com
access-control-max-age: 300
cache-control: max-age=300
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
X-Firefox-Spdy: h2
t.lkqd.net/t
146.20.128.67200 OK 0 B IP 146.20.128.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://m.imagenesderopaparaperros.com/
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:35 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: https://m.imagenesderopaparaperros.com
access-control-max-age: 300
cache-control: max-age=300
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
X-Firefox-Spdy: h2
t.lkqd.net/t
146.20.128.67200 OK 0 B IP 146.20.128.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://m.imagenesderopaparaperros.com/
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:35 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: https://m.imagenesderopaparaperros.com
access-control-max-age: 300
cache-control: max-age=300
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
X-Firefox-Spdy: h2
v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=99348221&m=&rtv=1&thost=m.imagenesderopaparaperros.com
69.20.43.192200 OK 4.9 kB URL HTTP/2 v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=99348221&m=&rtv=1&thost=m.imagenesderopaparaperros.com
IP 69.20.43.192:0
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 2c374f1eef59211437e0dd401ef8bd78
c6b7858645cf6f81a07eb61efd0c1eeb4613e24a
e099e6b0289458cd59ee9a43ae06bd445143bd1046c46076356949e9e56402e4
POST /ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=99348221&m=&rtv=1&thost=m.imagenesderopaparaperros.com HTTP/1.1
Host: v.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 38
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:36 GMT
content-type: application/json
content-length: 4854
content-encoding: gzip
access-control-allow-origin: https://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
t.lkqd.net/t
146.20.128.67200 OK 0 B IP 146.20.128.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 763
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:36 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: https://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
t.lkqd.net/t
146.20.128.67200 OK 0 B IP 146.20.128.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 799
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:36 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: https://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
t.lkqd.net/t
146.20.128.67200 OK 0 B IP 146.20.128.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 153
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:36 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
set-cookie: lkqdidts=1671405156; Max-Age=31536000; Domain=.lkqd.net
lkqdid=0g_ek9gA6-c; Max-Age=31536000; Domain=.lkqd.net
access-control-allow-origin: https://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 312 B IP 93.184.220.29:0
Hash 62c4a7ad15a43552c869d9af67146599
d9fa272849e1f16cb35365a3d364ec63743796f7
a17d19448c604d5b88c0bf1af19f3715724ccaf184709cd760bc6df7a3246e38
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5737
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 23:12:36 GMT
Last-Modified: Sun, 18 Dec 2022 21:36:59 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 312
ads.stickyadstv.com/vast/vpaid-adapter/7585793?_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C3407320609135188377169818040,,&_fw_gdpr=1&_fw_gdpr_consent=
23.36.77.33200 OK 831 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C3407320609135188377169818040,,&_fw_gdpr=1&_fw_gdpr_consent=
IP 23.36.77.33:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (411)
Hash 01561d2917fe29ebfe0b1b9fba5b3a9b
3f8d76e880259cadec1670b68951f55697dd639f
15daa01cb90ad358833969c0ded98fdd3da84b8e7cca82dd11687ac2ffae4763
GET /vast/vpaid-adapter/7585793?_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C3407320609135188377169818040,,&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: https://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1671405156085035-557
Expires: Sun, 18 Dec 2022 23:12:36 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 18 Dec 2022 23:12:36 GMT
Content-Length: 831
Connection: keep-alive
Set-Cookie: UID=e4a0a4ed34cf486b938f93ba7090ac2a; Domain=ads.stickyadstv.com; Expires=Tue, 17-Jan-2023 23:12:36 GMT; Path=/
ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C340732060913518837787355002%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
23.36.77.33200 OK 830 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C340732060913518837787355002%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
IP 23.36.77.33:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (410)
Hash 093db90a470155fab9bea366e17ed608
e66ca34be722952543f2463bb1c46fe5e9357ad9
37c4762bfc7b85f38a050266486975568d6808bd7ea86c0a3645fc748d570372
GET /vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C340732060913518837787355002%2C%2C&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: https://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1671405156107040-524
Expires: Sun, 18 Dec 2022 23:12:36 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 18 Dec 2022 23:12:36 GMT
Content-Length: 830
Connection: keep-alive
Set-Cookie: UID=da4c242e19a48a7f7d0833526f52769; Domain=ads.stickyadstv.com; Expires=Tue, 17-Jan-2023 23:12:36 GMT; Path=/
csm.nl.eu.criteo.net/iev?entry=c~Idfs.Rtus.147.Events.StartInit~1&entry=c~Idfs.Rtus.147.Events.SyncframeDropped~1
178.250.2.150200 OK 43 B URL HTTP/2 csm.nl.eu.criteo.net/iev?entry=c~Idfs.Rtus.147.Events.StartInit~1&entry=c~Idfs.Rtus.147.Events.SyncframeDropped~1
IP 178.250.2.150:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /iev?entry=c~Idfs.Rtus.147.Events.StartInit~1&entry=c~Idfs.Rtus.147.Events.SyncframeDropped~1 HTTP/1.1
Host: csm.nl.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:35 GMT
pragma: no-cache
server: Finatra
expires: 0
content-type: image/gif
cache-control: no-cache, no-store, must-revalidate
content-length: 43
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C34073206091351883771510594653%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
23.36.77.33200 OK 832 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C34073206091351883771510594653%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
IP 23.36.77.33:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (412)
Hash a069a814c932f1bc28285f671ebe1845
8afaa059832b51e2d917ebbe21d27e931f4dbe02
816731e8841117ab97c388ba857505b2e6a04df6cd7ee0ad5f1cfcc960e16b8a
GET /vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C34073206091351883771510594653%2C%2C&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: https://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1671405156187005-348
Content-Length: 832
Expires: Sun, 18 Dec 2022 23:12:36 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 18 Dec 2022 23:12:36 GMT
Connection: keep-alive
Set-Cookie: UID=8b662de54c248c480a84f8f69dd56c3; Domain=ads.stickyadstv.com; Expires=Tue, 17-Jan-2023 23:12:36 GMT; Path=/
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash bd655a69914da0accd2c86284496ad05
d8efe2cefa217c961ac8e2eceaa62db01cd5914b
6f3ad9a7a17a52a2f70dc019b24b020836ff5c7f849286342422b917f54093d9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4741
Cache-Control: max-age=165294
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 23:12:36 GMT
Etag: "639f6e8d-1d7"
Expires: Tue, 20 Dec 2022 21:07:30 GMT
Last-Modified: Sun, 18 Dec 2022 19:48:29 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
ads.stickyadstv.com/vast/vpaid-adapter/7585793?schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C20079096023407320609135188377,,&_fw_gdpr=1&_fw_gdpr_consent=
23.36.77.33200 OK 816 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C20079096023407320609135188377,,&_fw_gdpr=1&_fw_gdpr_consent=
IP 23.36.77.33:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (396)
Hash 427da6c19264218a4094fd81b2097e3d
3c07efa794eb80ebdcecb8ad05e8219e18b8ab31
5b3e1f45c0e9dac8245c5452a1edcb0b87af0e5fb89da3b373249504e7e9407e
GET /vast/vpaid-adapter/7585793?schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C20079096023407320609135188377,,&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: https://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1671405156153029-523
Expires: Sun, 18 Dec 2022 23:12:36 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 18 Dec 2022 23:12:36 GMT
Content-Length: 816
Connection: keep-alive
Set-Cookie: UID=3fa7edeca2dbbb95a5de43f35ade12; Domain=ads.stickyadstv.com; Expires=Tue, 17-Jan-2023 23:12:36 GMT; Path=/
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash bd655a69914da0accd2c86284496ad05
d8efe2cefa217c961ac8e2eceaa62db01cd5914b
6f3ad9a7a17a52a2f70dc019b24b020836ff5c7f849286342422b917f54093d9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3840
Cache-Control: max-age=164393
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 23:12:36 GMT
Etag: "639f6e8d-1d7"
Expires: Tue, 20 Dec 2022 20:52:29 GMT
Last-Modified: Sun, 18 Dec 2022 19:48:29 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C34073206091351883771031004129%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
23.36.77.33200 OK 832 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C34073206091351883771031004129%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
IP 23.36.77.33:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (412)
Hash 475fc145f6b6951fb705e0409efafe4d
9ac1489dbe6936c3c786bc21a2633711e3e93a75
d4119994b5e1887ab3986733bb6cab1c19a7b0c7f2610d770d1aa72571fff94a
GET /vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C34073206091351883771031004129%2C%2C&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: https://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1671405156113047-506
Expires: Sun, 18 Dec 2022 23:12:36 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 18 Dec 2022 23:12:36 GMT
Content-Length: 832
Connection: keep-alive
Set-Cookie: UID=9de3ebd39d32dfda18683b24894da65; Domain=ads.stickyadstv.com; Expires=Tue, 17-Jan-2023 23:12:36 GMT; Path=/
status.geotrust.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 4051b32129a06746c7b78279bdc3fa2c
6e9e7e3083f515d9a9e4c8cc6d372545a4f92799
82a48bf6a143abd6e6ca817d41e6aa3d67aa343ffc7c063ebd756248176b9a73
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3450
Cache-Control: max-age=146383
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 23:12:36 GMT
Etag: "639f29b9-1d7"
Expires: Tue, 20 Dec 2022 15:52:19 GMT
Last-Modified: Sun, 18 Dec 2022 14:54:49 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
vidoomy-d.openx.net/v/1.0/av?auid=540805079&url=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&cb=1596253627&vwd=400&vht=225&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C3407320609135188377527288787,,
35.244.159.8200 OK 56 B URL HTTP/2 vidoomy-d.openx.net/v/1.0/av?auid=540805079&url=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&cb=1596253627&vwd=400&vht=225&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C3407320609135188377527288787,,
IP 35.244.159.8:0
File type XML 1.0 document text\012- XML document, ASCII text, with no line terminators
Hash 3255279395a3f83bf1b4d0b6735c292c
d14e724f7d28b39fd8662934069dd67169375521
49834b2ede460a27789ce383dcb82d66f10b5f056e950663a9c363e6fee30b52
GET /v/1.0/av?auid=540805079&url=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&cb=1596253627&vwd=400&vht=225&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C3407320609135188377527288787,, HTTP/1.1
Host: vidoomy-d.openx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Sun, 18 Dec 2022 23:12:36 GMT
content-type: text/xml
content-length: 56
content-encoding: gzip
cache-control: private, max-age=0, no-cache
access-control-allow-origin: https://m.imagenesderopaparaperros.com
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ads.stickyadstv.com/www/delivery/swfIndex.php?reqType=AdsSetup&protocolVersion=2.0&_fw_us_privacy=&zoneId=7439281&_fw_gdpr=1&_fw_gdpr_consent=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C15514351753407320609135188377%2C%2C
23.36.77.33200 OK 67 B URL HTTP/1.1 ads.stickyadstv.com/www/delivery/swfIndex.php?reqType=AdsSetup&protocolVersion=2.0&_fw_us_privacy=&zoneId=7439281&_fw_gdpr=1&_fw_gdpr_consent=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C15514351753407320609135188377%2C%2C
IP 23.36.77.33:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text
Hash b753854b354a90a85ac6ff282b64b05d
1da3eb0c1b574c639024a54a679db90e403fc1b7
291437ea71e62b1c35d4ec5d3c5ad02cfa930343b41b1472fba70243089c8bbe
GET /www/delivery/swfIndex.php?reqType=AdsSetup&protocolVersion=2.0&_fw_us_privacy=&zoneId=7439281&_fw_gdpr=1&_fw_gdpr_consent=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C15514351753407320609135188377%2C%2C HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=UTF-8
Access-Control-Allow-Origin: https://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1671405156067057-601
Expires: Sun, 18 Dec 2022 23:12:36 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 18 Dec 2022 23:12:36 GMT
Content-Length: 67
Connection: keep-alive
Set-Cookie: UID=e634dc3996e51f4e6dee4a344dd38ec; Domain=ads.stickyadstv.com; Expires=Tue, 17-Jan-2023 23:12:36 GMT; Path=/
status.geotrust.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 4051b32129a06746c7b78279bdc3fa2c
6e9e7e3083f515d9a9e4c8cc6d372545a4f92799
82a48bf6a143abd6e6ca817d41e6aa3d67aa343ffc7c063ebd756248176b9a73
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5543
Cache-Control: max-age=148476
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 23:12:36 GMT
Etag: "639f29b9-1d7"
Expires: Tue, 20 Dec 2022 16:27:12 GMT
Last-Modified: Sun, 18 Dec 2022 14:54:49 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
a.vidoomy.com/api/rtbserver/rtb?id=797051958&w=400&h=225&skip=1&req_type=1&ip=&ua=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&l=EN&dt=2&c=NO&pid=&sid=&sname=&d=imagenesderopaparaperros.com&sp=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&coppa=&gdpr=1&gdprcs=&vpaid=1&idlot=
18.197.47.219204 No Content 0 B URL HTTP/2 a.vidoomy.com/api/rtbserver/rtb?id=797051958&w=400&h=225&skip=1&req_type=1&ip=&ua=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&l=EN&dt=2&c=NO&pid=&sid=&sname=&d=imagenesderopaparaperros.com&sp=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&coppa=&gdpr=1&gdprcs=&vpaid=1&idlot=
IP 18.197.47.219:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/rtbserver/rtb?id=797051958&w=400&h=225&skip=1&req_type=1&ip=&ua=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&l=EN&dt=2&c=NO&pid=&sid=&sname=&d=imagenesderopaparaperros.com&sp=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&coppa=&gdpr=1&gdprcs=&vpaid=1&idlot= HTTP/1.1
Host: a.vidoomy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sun, 18 Dec 2022 23:12:36 GMT
access-control-allow-origin: https://m.imagenesderopaparaperros.com
access-control-expose-headers: X-VD-C
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,PATCH,OPTIONS
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash f47f5a3b2c2c60219cc56d37b8a0e324
d4fbcecbf7f8636b158f189a833bb9f71fec70ba
ae8c47219ffa27ea633e4462d3162fcc41c62a910f32bbe2f58528c068a0ffde
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AE8C47219FFA27EA633E4462D3162FCC41C62A910F32BBE2F58528C068A0FFDE"
Last-Modified: Sun, 18 Dec 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16174
Expires: Mon, 19 Dec 2022 03:42:10 GMT
Date: Sun, 18 Dec 2022 23:12:36 GMT
Connection: keep-alive
status.geotrust.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 1a25bac48106218592b018dd9b99213f
6cda8338738b96e2fd43e419ac18de9aa6e3d885
af8523b06ce0b46b10060e5b02bf76d8d75e0e2e400aa9ff1cd67009c51ad91b
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2791
Cache-Control: max-age=94279
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 23:12:36 GMT
Etag: "639e60c4-1d7"
Expires: Tue, 20 Dec 2022 01:23:55 GMT
Last-Modified: Sun, 18 Dec 2022 00:37:24 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
search.spotxchange.com/vast/2.0/218945?VPAID=JS&content_page_url=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&cb=1384732330&player_width=400&player_height=225®s[gdpr]=1&user[consent]=&device[geo][lat]=&device[geo][lon]=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C34073206091351883771990293481%2C%2C
185.94.180.123200 OK 79 B URL HTTP/1.1 search.spotxchange.com/vast/2.0/218945?VPAID=JS&content_page_url=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&cb=1384732330&player_width=400&player_height=225®s[gdpr]=1&user[consent]=&device[geo][lat]=&device[geo][lon]=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C34073206091351883771990293481%2C%2C
IP 185.94.180.123:0
ASN #35220 SpotXchange, INC
File type XML 1.0 document text\012- XML document, ASCII text
Hash da3e93c7e93fe9042e8437060a62e496
cd98d23361e34a2589a5e5de32221dce2d29f283
b63012ca704337abcd6d19a5a7fd83f9a81102f82b78a1760184b86e21513aab
GET /vast/2.0/218945?VPAID=JS&content_page_url=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&cb=1384732330&player_width=400&player_height=225®s[gdpr]=1&user[consent]=&device[geo][lat]=&device[geo][lon]=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C34073206091351883771990293481%2C%2C HTTP/1.1
Host: search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 18 Dec 2022 23:12:36 GMT
Content-Type: text/xml;charset=UTF-8
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Last-Modified: Sun, 18 Dec 2022 23:12:36 GMT
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Access-Control-Allow-Origin: https://m.imagenesderopaparaperros.com
Access-Control-Allow-Methods: POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Headers:
Access-Control-Allow-Credentials: true
X-fe: 033
X-SpotX-Timing-Page: 0.009637
X-SpotX-Timing-Page-Require: 0.000530
X-SpotX-Timing-Page-Context: 0.000306
X-SpotX-Timing-Page-URI: 0.000011
X-SpotX-Timing-Page-Mux: 0.000333
X-SpotX-Timing-Page-Cookie: 0.000004
X-SpotX-Timing-Page-Exception: 0.000000
X-SpotX-Timing-Page-Misc: 0.003039
X-SpotX-Timing-SpotMarket: 0.005081
X-SpotX-Timing-SpotMarket-Primary: 0.005081
X-SpotX-Timing-SpotMarket-Secondary: 0.000000
X-SpotX-Timing-Transform: 0.000333
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 79
csm.nl.eu.criteo.net/iev?entry=c~Idfs.Rtus.147.Events.InitiateFetch~1
178.250.2.150200 OK 43 B URL HTTP/2 csm.nl.eu.criteo.net/iev?entry=c~Idfs.Rtus.147.Events.InitiateFetch~1
IP 178.250.2.150:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /iev?entry=c~Idfs.Rtus.147.Events.InitiateFetch~1 HTTP/1.1
Host: csm.nl.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:35 GMT
pragma: no-cache
server: Finatra
expires: 0
content-type: image/gif
cache-control: no-cache, no-store, must-revalidate
content-length: 43
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
t.lkqd.net/t
146.20.128.67200 OK 0 B IP 146.20.128.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://m.imagenesderopaparaperros.com/
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:36 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: https://m.imagenesderopaparaperros.com
access-control-max-age: 300
cache-control: max-age=300
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
X-Firefox-Spdy: h2
t.lkqd.net/t
146.20.128.67200 OK 0 B IP 146.20.128.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://m.imagenesderopaparaperros.com/
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:36 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: https://m.imagenesderopaparaperros.com
access-control-max-age: 300
cache-control: max-age=300
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
X-Firefox-Spdy: h2
us.doctorpost.net/metrics/save.img?event=impressions&bid-id=v2-1671405154322-7-8077-1178228-8f592af2-2810-7baa-1452-e7bb7c3b2c76&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fic%3Fauth%3Dpz6u78%26c%3DOA5jB9eH9sRDYoHJpKO3bLzW_QfossFqvOsaSbu55fSMXqoLjiBoDiBys59d6QTT9Gk2MuYyI-Z8IdouDz5MO0ZOESlfdgvCQgSk073gcvfc9t8t39g4-NpnwYdWXaQn4ImOHJdcBm6Koz3IIVoh45fxCbQSs8U2EDuQzTdT5b4m8SYIh8Ji4ySxi3fQ9ptLdRxYTxRRUqk-rOi6m-y6EsnQBrD4HVeSxXqeZSvsbiYINN83492fCaQbAkZaGk9m_Dcmge3MQVRjjFq5iyLrIV6K6iWVT9nmFVm2FN1PoSG0As9jk46mu-BKE3dHNOVDRJtDNq9meGraZnqO3cGuKaBfVWDVvi7UoMg-ZAwL0LYCzY4C8LU5Cpwjb5dr0k36AMV6G69v8p1IwWO96v3lKWfKvNvgfkiC0Ry6_J4YGlKrNEWSU4wLxaFuAOdICpZq9nOjgD-fmH7r6TvPhxx6HTGhUutJ16y837Oia7auBH7O502802wrI-g3gIMQVY0IQ_vnD-vMn9Q6jCCaOb_ymHxyZysDzYb8ERQuLGXAkQ0nbrzRDFO8BkKzoWaUFGvejynfL_xlR7W1iZGiPz-_wnAJPdvQ1gqNt7fB4htx1fzWwmCu
38.100.129.136302 Found 0 B URL HTTP/2 us.doctorpost.net/metrics/save.img?event=impressions&bid-id=v2-1671405154322-7-8077-1178228-8f592af2-2810-7baa-1452-e7bb7c3b2c76&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fic%3Fauth%3Dpz6u78%26c%3DOA5jB9eH9sRDYoHJpKO3bLzW_QfossFqvOsaSbu55fSMXqoLjiBoDiBys59d6QTT9Gk2MuYyI-Z8IdouDz5MO0ZOESlfdgvCQgSk073gcvfc9t8t39g4-NpnwYdWXaQn4ImOHJdcBm6Koz3IIVoh45fxCbQSs8U2EDuQzTdT5b4m8SYIh8Ji4ySxi3fQ9ptLdRxYTxRRUqk-rOi6m-y6EsnQBrD4HVeSxXqeZSvsbiYINN83492fCaQbAkZaGk9m_Dcmge3MQVRjjFq5iyLrIV6K6iWVT9nmFVm2FN1PoSG0As9jk46mu-BKE3dHNOVDRJtDNq9meGraZnqO3cGuKaBfVWDVvi7UoMg-ZAwL0LYCzY4C8LU5Cpwjb5dr0k36AMV6G69v8p1IwWO96v3lKWfKvNvgfkiC0Ry6_J4YGlKrNEWSU4wLxaFuAOdICpZq9nOjgD-fmH7r6TvPhxx6HTGhUutJ16y837Oia7auBH7O502802wrI-g3gIMQVY0IQ_vnD-vMn9Q6jCCaOb_ymHxyZysDzYb8ERQuLGXAkQ0nbrzRDFO8BkKzoWaUFGvejynfL_xlR7W1iZGiPz-_wnAJPdvQ1gqNt7fB4htx1fzWwmCu
IP 38.100.129.136:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /metrics/save.img?event=impressions&bid-id=v2-1671405154322-7-8077-1178228-8f592af2-2810-7baa-1452-e7bb7c3b2c76&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fic%3Fauth%3Dpz6u78%26c%3DOA5jB9eH9sRDYoHJpKO3bLzW_QfossFqvOsaSbu55fSMXqoLjiBoDiBys59d6QTT9Gk2MuYyI-Z8IdouDz5MO0ZOESlfdgvCQgSk073gcvfc9t8t39g4-NpnwYdWXaQn4ImOHJdcBm6Koz3IIVoh45fxCbQSs8U2EDuQzTdT5b4m8SYIh8Ji4ySxi3fQ9ptLdRxYTxRRUqk-rOi6m-y6EsnQBrD4HVeSxXqeZSvsbiYINN83492fCaQbAkZaGk9m_Dcmge3MQVRjjFq5iyLrIV6K6iWVT9nmFVm2FN1PoSG0As9jk46mu-BKE3dHNOVDRJtDNq9meGraZnqO3cGuKaBfVWDVvi7UoMg-ZAwL0LYCzY4C8LU5Cpwjb5dr0k36AMV6G69v8p1IwWO96v3lKWfKvNvgfkiC0Ry6_J4YGlKrNEWSU4wLxaFuAOdICpZq9nOjgD-fmH7r6TvPhxx6HTGhUutJ16y837Oia7auBH7O502802wrI-g3gIMQVY0IQ_vnD-vMn9Q6jCCaOb_ymHxyZysDzYb8ERQuLGXAkQ0nbrzRDFO8BkKzoWaUFGvejynfL_xlR7W1iZGiPz-_wnAJPdvQ1gqNt7fB4htx1fzWwmCu HTTP/1.1
Host: us.doctorpost.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: openresty/1.15.8.3
date: Sun, 18 Dec 2022 23:12:36 GMT
content-length: 0
location: https://track.trackingtraffo.com/push/ic?auth=pz6u78&c=OA5jB9eH9sRDYoHJpKO3bLzW_QfossFqvOsaSbu55fSMXqoLjiBoDiBys59d6QTT9Gk2MuYyI-Z8IdouDz5MO0ZOESlfdgvCQgSk073gcvfc9t8t39g4-NpnwYdWXaQn4ImOHJdcBm6Koz3IIVoh45fxCbQSs8U2EDuQzTdT5b4m8SYIh8Ji4ySxi3fQ9ptLdRxYTxRRUqk-rOi6m-y6EsnQBrD4HVeSxXqeZSvsbiYINN83492fCaQbAkZaGk9m_Dcmge3MQVRjjFq5iyLrIV6K6iWVT9nmFVm2FN1PoSG0As9jk46mu-BKE3dHNOVDRJtDNq9meGraZnqO3cGuKaBfVWDVvi7UoMg-ZAwL0LYCzY4C8LU5Cpwjb5dr0k36AMV6G69v8p1IwWO96v3lKWfKvNvgfkiC0Ry6_J4YGlKrNEWSU4wLxaFuAOdICpZq9nOjgD-fmH7r6TvPhxx6HTGhUutJ16y837Oia7auBH7O502802wrI-g3gIMQVY0IQ_vnD-vMn9Q6jCCaOb_ymHxyZysDzYb8ERQuLGXAkQ0nbrzRDFO8BkKzoWaUFGvejynfL_xlR7W1iZGiPz-_wnAJPdvQ1gqNt7fB4htx1fzWwmCu
X-Firefox-Spdy: h2
holdsoutset.com/impr.gif?sid=H4sIAAAAAAAC%2F6xST4gcxReuzi%2Fhh3hSRPAQaRwJCu5s9fzZ6UkIa5LdxDGb3XV3QySXUN1VM1OZ6qq2qnp6d0%2FBqOTm6kkFTe%2BbTdboYgx4iKAQZuNBF4RMQJmDexcFRSF4EpnZlehB8OCD7voeX3e973vvvbaabCMMCenPnlLLXAgyWs5j96kzXFKVGnd6wfVwHh9yz3A5VjrkLg5eun3Qw%2BU8fto9wcKWGi1gD2MPe%2B5xrlldLY4OWeDxRtXLV3G%2BVMh75RIs6r%2FnJnHAEAdoexs9DJz29jW%2FvAE87IKMPp5gpmVV%2FMxklAhilYY2XT8tW1KlEqL7sK4dqMv13a9BmR5Cb%2B0BJdd3HYBqrw0cQMB7yPnWg0Cu78qEoH1lR2kggEkI6IOQtrvARBc46UKoLgKndxBASGF6BmR0dVrplCztsGTA9tDee78CT3to73ePgIw%2BOir4ojuvRGK5kgYW6xnwxS7wRhfiZBPssgM83YTQvgycfo1G702BjNZmjFDAaf%2FJSimol4o%2BGRmjZTpSorgyQsp%2BcYRWcL3iB6SMg8qwRZx3gde7INgKEONAMni4A0ndgSR2IKJ9l5SrdYwr9aBeLPqlMAyLxTAs%2B4OriyW%2FjiEJBx5WwMYrEIoVCPUFiPUFaPEV0MktMM0MDHXAWARtmkHKEKQGQUoQpBxBahGk7ewKFaZgsqtUmCTwds%2FC7lnMOso2VskVZRtMotV4Gz00bNz3z38CLdZ3w%2FpYwWNBoURIOSgRr%2BD71ZLvVceqvlfBgQ%2BGZ8DNnqHN5cEUH%2F0FYt5D6KcLEJBNMGITQv4EkGQ%2FkLRTKWAgzU7Jx7AsN5aFaSptWV4yC1RlENt9YJecVbGNHhvqqKzfBRZuPfv%2F%2FI3bha9ehFBnEOsMzvPbCBriUmdOpWhtTqUG3ZiJLY%2F4MhkMd94Sy9AHJ9lSqjStTZiVa0fCATGAGwvM2CkiKZcNgz48yill%2BrjSIUOf18wZFswmpnk00TKJp2aPHa9FsWbGcCW7QPidxbMQ8h564Jvbw7XdT24B15ugk%2F5E09r44OhoKHjYysehaOUlidhOPm4YsYeLY1VcKBwglNM%2FMT%2F8EsHn506zs0sSn8MQJVvjn749iHeAqy6E8Svv53K1YzPTuVx%2F7h9K2GYSBZJw8W%2FLHOBRwx7moZLXcrmF2sLUZC73Wc2lpOEy7YqlVotR0mDSpVy6P19%2B8%2Bb1XG5icv7YXG12oTaU4s5boq1rYi4Es27EqOthjN3pmZNuoGRirudyU0fmTkyeq506cmIyl%2Bs%2F91%2BJBxNvod0AoxBocT8PYgfSJOvoQrA1%2Fu5G89rYF6%2BD4D108PffQLCt8Ts%2FvPr4zRd%2BBBJkYNhffryPV80laGgHiL0IMsqgrTNoiwyIWAGT%2FK9jY701frc4DAiE0wmEdtYCocUbOztreN8teyXmB34lpDRgIfUqhaJfxLhAaalSZV4VrOmFl98L%2FgAAAP%2F%2FAQAA%2F%2F%2Bd1ODi5wUAAA%3D%3D
192.243.59.12200 OK 7 B URL HTTP/1.1 holdsoutset.com/impr.gif?sid=H4sIAAAAAAAC%2F6xST4gcxReuzi%2Fhh3hSRPAQaRwJCu5s9fzZ6UkIa5LdxDGb3XV3QySXUN1VM1OZ6qq2qnp6d0%2FBqOTm6kkFTe%2BbTdboYgx4iKAQZuNBF4RMQJmDexcFRSF4EpnZlehB8OCD7voeX3e973vvvbaabCMMCenPnlLLXAgyWs5j96kzXFKVGnd6wfVwHh9yz3A5VjrkLg5eun3Qw%2BU8fto9wcKWGi1gD2MPe%2B5xrlldLY4OWeDxRtXLV3G%2BVMh75RIs6r%2FnJnHAEAdoexs9DJz29jW%2FvAE87IKMPp5gpmVV%2FMxklAhilYY2XT8tW1KlEqL7sK4dqMv13a9BmR5Cb%2B0BJdd3HYBqrw0cQMB7yPnWg0Cu78qEoH1lR2kggEkI6IOQtrvARBc46UKoLgKndxBASGF6BmR0dVrplCztsGTA9tDee78CT3to73ePgIw%2BOir4ojuvRGK5kgYW6xnwxS7wRhfiZBPssgM83YTQvgycfo1G702BjNZmjFDAaf%2FJSimol4o%2BGRmjZTpSorgyQsp%2BcYRWcL3iB6SMg8qwRZx3gde7INgKEONAMni4A0ndgSR2IKJ9l5SrdYwr9aBeLPqlMAyLxTAs%2B4OriyW%2FjiEJBx5WwMYrEIoVCPUFiPUFaPEV0MktMM0MDHXAWARtmkHKEKQGQUoQpBxBahGk7ewKFaZgsqtUmCTwds%2FC7lnMOso2VskVZRtMotV4Gz00bNz3z38CLdZ3w%2FpYwWNBoURIOSgRr%2BD71ZLvVceqvlfBgQ%2BGZ8DNnqHN5cEUH%2F0FYt5D6KcLEJBNMGITQv4EkGQ%2FkLRTKWAgzU7Jx7AsN5aFaSptWV4yC1RlENt9YJecVbGNHhvqqKzfBRZuPfv%2F%2FI3bha9ehFBnEOsMzvPbCBriUmdOpWhtTqUG3ZiJLY%2F4MhkMd94Sy9AHJ9lSqjStTZiVa0fCATGAGwvM2CkiKZcNgz48yill%2BrjSIUOf18wZFswmpnk00TKJp2aPHa9FsWbGcCW7QPidxbMQ8h564Jvbw7XdT24B15ugk%2F5E09r44OhoKHjYysehaOUlidhOPm4YsYeLY1VcKBwglNM%2FMT%2F8EsHn506zs0sSn8MQJVvjn749iHeAqy6E8Svv53K1YzPTuVx%2F7h9K2GYSBZJw8W%2FLHOBRwx7moZLXcrmF2sLUZC73Wc2lpOEy7YqlVotR0mDSpVy6P19%2B8%2Bb1XG5icv7YXG12oTaU4s5boq1rYi4Es27EqOthjN3pmZNuoGRirudyU0fmTkyeq506cmIyl%2Bs%2F91%2BJBxNvod0AoxBocT8PYgfSJOvoQrA1%2Fu5G89rYF6%2BD4D108PffQLCt8Ts%2FvPr4zRd%2BBBJkYNhffryPV80laGgHiL0IMsqgrTNoiwyIWAGT%2FK9jY701frc4DAiE0wmEdtYCocUbOztreN8teyXmB34lpDRgIfUqhaJfxLhAaalSZV4VrOmFl98L%2FgAAAP%2F%2FAQAA%2F%2F%2Bd1ODi5wUAAA%3D%3D
IP 192.243.59.12:0
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F6xST4gcxReuzi%2Fhh3hSRPAQaRwJCu5s9fzZ6UkIa5LdxDGb3XV3QySXUN1VM1OZ6qq2qnp6d0%2FBqOTm6kkFTe%2BbTdboYgx4iKAQZuNBF4RMQJmDexcFRSF4EpnZlehB8OCD7voeX3e973vvvbaabCMMCenPnlLLXAgyWs5j96kzXFKVGnd6wfVwHh9yz3A5VjrkLg5eun3Qw%2BU8fto9wcKWGi1gD2MPe%2B5xrlldLY4OWeDxRtXLV3G%2BVMh75RIs6r%2FnJnHAEAdoexs9DJz29jW%2FvAE87IKMPp5gpmVV%2FMxklAhilYY2XT8tW1KlEqL7sK4dqMv13a9BmR5Cb%2B0BJdd3HYBqrw0cQMB7yPnWg0Cu78qEoH1lR2kggEkI6IOQtrvARBc46UKoLgKndxBASGF6BmR0dVrplCztsGTA9tDee78CT3to73ePgIw%2BOir4ojuvRGK5kgYW6xnwxS7wRhfiZBPssgM83YTQvgycfo1G702BjNZmjFDAaf%2FJSimol4o%2BGRmjZTpSorgyQsp%2BcYRWcL3iB6SMg8qwRZx3gde7INgKEONAMni4A0ndgSR2IKJ9l5SrdYwr9aBeLPqlMAyLxTAs%2B4OriyW%2FjiEJBx5WwMYrEIoVCPUFiPUFaPEV0MktMM0MDHXAWARtmkHKEKQGQUoQpBxBahGk7ewKFaZgsqtUmCTwds%2FC7lnMOso2VskVZRtMotV4Gz00bNz3z38CLdZ3w%2FpYwWNBoURIOSgRr%2BD71ZLvVceqvlfBgQ%2BGZ8DNnqHN5cEUH%2F0FYt5D6KcLEJBNMGITQv4EkGQ%2FkLRTKWAgzU7Jx7AsN5aFaSptWV4yC1RlENt9YJecVbGNHhvqqKzfBRZuPfv%2F%2FI3bha9ehFBnEOsMzvPbCBriUmdOpWhtTqUG3ZiJLY%2F4MhkMd94Sy9AHJ9lSqjStTZiVa0fCATGAGwvM2CkiKZcNgz48yill%2BrjSIUOf18wZFswmpnk00TKJp2aPHa9FsWbGcCW7QPidxbMQ8h564Jvbw7XdT24B15ugk%2F5E09r44OhoKHjYysehaOUlidhOPm4YsYeLY1VcKBwglNM%2FMT%2F8EsHn506zs0sSn8MQJVvjn749iHeAqy6E8Svv53K1YzPTuVx%2F7h9K2GYSBZJw8W%2FLHOBRwx7moZLXcrmF2sLUZC73Wc2lpOEy7YqlVotR0mDSpVy6P19%2B8%2Bb1XG5icv7YXG12oTaU4s5boq1rYi4Es27EqOthjN3pmZNuoGRirudyU0fmTkyeq506cmIyl%2Bs%2F91%2BJBxNvod0AoxBocT8PYgfSJOvoQrA1%2Fu5G89rYF6%2BD4D108PffQLCt8Ts%2FvPr4zRd%2BBBJkYNhffryPV80laGgHiL0IMsqgrTNoiwyIWAGT%2FK9jY701frc4DAiE0wmEdtYCocUbOztreN8teyXmB34lpDRgIfUqhaJfxLhAaalSZV4VrOmFl98L%2FgAAAP%2F%2FAQAA%2F%2F%2Bd1ODi5wUAAA%3D%3D HTTP/1.1
Host: holdsoutset.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Cookie: u_pl=15289012; uid_id2=74bf438a-6d5d-4d07-a583-d70f78ba50b7:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 18 Dec 2022 23:12:36 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: db1fc6585302c2561350516efa648883
Strict-Transport-Security: max-age=0; includeSubdomains
v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=99348221&m=&rtv=1&thost=m.imagenesderopaparaperros.com
69.20.43.192200 OK 4.6 kB URL HTTP/2 v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=99348221&m=&rtv=1&thost=m.imagenesderopaparaperros.com
IP 69.20.43.192:0
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash a8d544563263499fd5155428f146ba53
98639b1c0f74f9d60688ca98fa19c2ccbeab5010
e03653890e52fec5fc94370632f7028be1b0fe88c47e6cb37da2f8e8a222271f
POST /ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=99348221&m=&rtv=1&thost=m.imagenesderopaparaperros.com HTTP/1.1
Host: v.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 38
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:36 GMT
content-type: application/json
content-length: 4621
content-encoding: gzip
access-control-allow-origin: https://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ad.turn.com/r/cs?pid=65
46.228.164.11302 Found 0 B IP 46.228.164.11:0
ASN #56396 Amobee EMEA Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /r/cs?pid=65 HTTP/1.1
Host: ad.turn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
p3p: policyref="/w3c/p3p.xml", CP="NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV"
cache-control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
pragma: no-cache
set-cookie: uid=9216976192995991042; Domain=.turn.com; Expires=Fri, 16-Jun-2023 23:12:36 GMT; Path=/; Secure; SameSite=None
location: https://cs.lkqd.net/cs?partnerId=94&partnerUserId=9216976192995991042
content-length: 0
date: Sun, 18 Dec 2022 23:12:36 GMT
X-Firefox-Spdy: h2
a.vidoomy.com/api/rtbserver/rtb?id=1341331779&w=400&h=225&skip=1&req_type=1&ip=&ua=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&l=EN&dt=2&c=NO&pid=&sid=&sname=&d=imagenesderopaparaperros.com&sp=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&coppa=&gdpr=1&gdprcs=&vpaid=1&idlot=
18.197.47.219204 No Content 0 B URL HTTP/2 a.vidoomy.com/api/rtbserver/rtb?id=1341331779&w=400&h=225&skip=1&req_type=1&ip=&ua=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&l=EN&dt=2&c=NO&pid=&sid=&sname=&d=imagenesderopaparaperros.com&sp=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&coppa=&gdpr=1&gdprcs=&vpaid=1&idlot=
IP 18.197.47.219:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/rtbserver/rtb?id=1341331779&w=400&h=225&skip=1&req_type=1&ip=&ua=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&l=EN&dt=2&c=NO&pid=&sid=&sname=&d=imagenesderopaparaperros.com&sp=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&coppa=&gdpr=1&gdprcs=&vpaid=1&idlot= HTTP/1.1
Host: a.vidoomy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 18 Dec 2022 23:12:36 GMT
access-control-allow-origin: https://m.imagenesderopaparaperros.com
access-control-expose-headers: X-VD-C
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,PATCH,OPTIONS
X-Firefox-Spdy: h2
ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C3407320609135188377464250784%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
23.36.77.33200 OK 831 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C3407320609135188377464250784%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
IP 23.36.77.33:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (411)
Hash 4b79208af2ad29ad899ce1c75ddee75e
c2e4a9c5bc363567d798a434dc7a2748d80a7c71
d9822a06f5f6f2418669e81ae3b480779534b744bbf849f1d89ab655820437b1
GET /vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C3407320609135188377464250784%2C%2C&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: https://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1671405156855000-591
Expires: Sun, 18 Dec 2022 23:12:36 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 18 Dec 2022 23:12:36 GMT
Content-Length: 831
Connection: keep-alive
Set-Cookie: UID=a89d8af12b56a83599ec984fc424cc; Domain=ads.stickyadstv.com; Expires=Tue, 17-Jan-2023 23:12:36 GMT; Path=/
ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C3407320609135188377829127657%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
23.36.77.33200 OK 831 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C3407320609135188377829127657%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
IP 23.36.77.33:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (411)
Hash f95ccf008ee79aa6d8dae980aa5a9df3
da14b61da946650209954d25618777756260b16e
8be0d3c22bbfdf01ce87a30a250670dc0118011f9e531a284531ca3c4c7ec32c
GET /vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C3407320609135188377829127657%2C%2C&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: https://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1671405156700093-584
Expires: Sun, 18 Dec 2022 23:12:36 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 18 Dec 2022 23:12:36 GMT
Content-Length: 831
Connection: keep-alive
Set-Cookie: UID=b478987bc583e2a5472e925a387fcf93; Domain=ads.stickyadstv.com; Expires=Tue, 17-Jan-2023 23:12:36 GMT; Path=/
ads.stickyadstv.com/vast/vpaid-adapter/7585793?_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C3407320609135188377696442415,,&_fw_gdpr=1&_fw_gdpr_consent=
23.36.77.33200 OK 831 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C3407320609135188377696442415,,&_fw_gdpr=1&_fw_gdpr_consent=
IP 23.36.77.33:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (411)
Hash b843bc0305796734480ac33a19317c09
0e40c504c7f48494a7a4c46edb98a01d93a8f539
085ac5195c588b6e1c3a2674e1e38838c7135e55d196dea6e21df567a1290832
GET /vast/vpaid-adapter/7585793?_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C3407320609135188377696442415,,&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: https://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1671405156786047-408
Content-Length: 831
Expires: Sun, 18 Dec 2022 23:12:36 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 18 Dec 2022 23:12:36 GMT
Connection: keep-alive
Set-Cookie: UID=77f1c92073447e3df29f9ca16de9dac; Domain=ads.stickyadstv.com; Expires=Tue, 17-Jan-2023 23:12:36 GMT; Path=/
ads.stickyadstv.com/vast/vpaid-adapter/7585793?schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C1268314133407320609135188377,,&_fw_gdpr=1&_fw_gdpr_consent=
23.36.77.33200 OK 815 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C1268314133407320609135188377,,&_fw_gdpr=1&_fw_gdpr_consent=
IP 23.36.77.33:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (395)
Hash 68bfd2d41555f55e1374580637d99dda
134c43c5b174a2016768835ace8febf8d7cf78ca
0e6f91a64a7a99c61397cf99958a64d1f89307e37725e9d2c2ff2fba07016952
GET /vast/vpaid-adapter/7585793?schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C1268314133407320609135188377,,&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: https://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1671405156848005-536
Expires: Sun, 18 Dec 2022 23:12:36 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 18 Dec 2022 23:12:36 GMT
Content-Length: 815
Connection: keep-alive
Set-Cookie: UID=20917edbc5a68850278fc9b7a7142a28; Domain=ads.stickyadstv.com; Expires=Tue, 17-Jan-2023 23:12:36 GMT; Path=/
ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C34073206091351883771087413018%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
23.36.77.33200 OK 832 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C34073206091351883771087413018%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
IP 23.36.77.33:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (412)
Hash a2ca02ac03fdbf763fbc24e6dbfe65b9
b2296311cd06acbbf3c402545a46433a0fc1cdf5
35e415fd88d492c8018002ec0b7b0a7970478e3b355697eae676c9d92d8236ee
GET /vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C34073206091351883771087413018%2C%2C&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: https://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1671405156773048-528
Expires: Sun, 18 Dec 2022 23:12:36 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 18 Dec 2022 23:12:36 GMT
Content-Length: 832
Connection: keep-alive
Set-Cookie: UID=20917edbc5a68850278fc9b7a7142a28; Domain=ads.stickyadstv.com; Expires=Tue, 17-Jan-2023 23:12:36 GMT; Path=/
sync.srv.stackadapt.com/sync?nid=161
54.85.151.23302 Found 104 B URL HTTP/1.1 sync.srv.stackadapt.com/sync?nid=161
IP 54.85.151.23:0
File type HTML document, ASCII text
Hash 27f4cf39c5c264c52943753f3e8585e6
ba3f5c22fd4645a1859be5a0fc0e9438e35575e7
6bac643b3e1fc3878722597f2a0721910aa6c554817e2992fe1e7f52d8644d23
GET /sync?nid=161 HTTP/1.1
Host: sync.srv.stackadapt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Date: Sun, 18 Dec 2022 23:12:36 GMT
Location: https://cs.lkqd.net/cs?partnerId=93&partnerUserId=ch4_8QNTQrZZgWgl2VhAXFtaKpo
Set-Cookie: sa-user-id=s%3A0-721e3ff1-0353-42b6-5981-6825d958405c.P8GVZvqDQuno2PGgQegaw%2FEnS2r%2BAqsm0wSZmk1YYnI; Max-Age=31536000; Secure; SameSite=None
sa-user-id-v2=s%3Ach4_8QNTQrZZgWgl2VhAXFtaKpo.T0H2G8sTMLZYScnz2fGdakf1dn9cmVo11n%2FrRwVUC7k; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None
Content-Length: 104
Connection: keep-alive
cs.lkqd.net/cs?partnerId=103&redirect=https%3A%2F%2Fevent.clientgear.com%2Fcookie%2Flkqd%3Fpartner%3Dlkqd%26cookieid%3D%24%24rawlkqduserid%24%24&r=if
146.20.132.151200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=103&redirect=https%3A%2F%2Fevent.clientgear.com%2Fcookie%2Flkqd%3Fpartner%3Dlkqd%26cookieid%3D%24%24rawlkqduserid%24%24&r=if
IP 146.20.132.151:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=103&redirect=https%3A%2F%2Fevent.clientgear.com%2Fcookie%2Flkqd%3Fpartner%3Dlkqd%26cookieid%3D%24%24rawlkqduserid%24%24&r=if HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:36 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
cs.lkqd.net/cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if
146.20.132.151200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if
IP 146.20.132.151:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:36 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
holdsoutset.com/pixel/sbs?c=1
192.243.59.12200 OK 0 B URL HTTP/1.1 holdsoutset.com/pixel/sbs?c=1
IP 192.243.59.12:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: holdsoutset.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Cookie: u_pl=15289012; uid_id2=74bf438a-6d5d-4d07-a583-d70f78ba50b7:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 18 Dec 2022 23:12:36 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
ads.stickyadstv.com/www/delivery/swfIndex.php?reqType=AdsSetup&protocolVersion=2.0&_fw_us_privacy=&zoneId=7439281&_fw_gdpr=1&_fw_gdpr_consent=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C5672936803407320609135188377%2C%2C
23.36.77.33200 OK 67 B URL HTTP/1.1 ads.stickyadstv.com/www/delivery/swfIndex.php?reqType=AdsSetup&protocolVersion=2.0&_fw_us_privacy=&zoneId=7439281&_fw_gdpr=1&_fw_gdpr_consent=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C5672936803407320609135188377%2C%2C
IP 23.36.77.33:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text
Hash b753854b354a90a85ac6ff282b64b05d
1da3eb0c1b574c639024a54a679db90e403fc1b7
291437ea71e62b1c35d4ec5d3c5ad02cfa930343b41b1472fba70243089c8bbe
GET /www/delivery/swfIndex.php?reqType=AdsSetup&protocolVersion=2.0&_fw_us_privacy=&zoneId=7439281&_fw_gdpr=1&_fw_gdpr_consent=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C5672936803407320609135188377%2C%2C HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=UTF-8
Access-Control-Allow-Origin: https://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1671405156673095-537
Expires: Sun, 18 Dec 2022 23:12:36 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 18 Dec 2022 23:12:36 GMT
Content-Length: 67
Connection: keep-alive
Set-Cookie: UID=771f3aa3bfe4f9a9c847aa2dc1d4980; Domain=ads.stickyadstv.com; Expires=Tue, 17-Jan-2023 23:12:36 GMT; Path=/
adx.adform.net/adx/?mid=970530&url=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&t=2
37.157.4.41200 OK 74 B URL HTTP/2 adx.adform.net/adx/?mid=970530&url=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&t=2
IP 37.157.4.41:0
File type XML 1.0 document text\012- XML document, ASCII text, with no line terminators
Hash cfd02b7cdd037c108c2865b3d236f8f4
c163be76e303f43da1706a7f7184b611e3aa28f0
d99c7ef5910cc186314a625e78ca4423ebdd9cfdc2b4622c52b7f0cae7c73170
GET /adx/?mid=970530&url=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&t=2 HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:36 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET,OPTIONS
access-control-allow-origin: https://m.imagenesderopaparaperros.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
cs.lkqd.net/cs?partnerId=94&partnerUserId=9216976192995991042
146.20.132.151200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=94&partnerUserId=9216976192995991042
IP 146.20.132.151:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=94&partnerUserId=9216976192995991042 HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad.lkqd.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:36 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
adx.adform.net/adx/?mid=970530&url=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&t=2
37.157.4.41200 OK 117 B URL HTTP/2 adx.adform.net/adx/?mid=970530&url=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&t=2
IP 37.157.4.41:0
Hash 0d4bb35b8e38e68971160993948f1311
d1e6c26b5be50c45b9a3d5ef7d22400a53e76cba
bfd39d9eedeb4bda38d1b608f908ca66d8afe06898b5b3de22db98d6d88d678d
GET /adx/?mid=970530&url=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&t=2 HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:36 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET,OPTIONS
access-control-allow-origin: https://m.imagenesderopaparaperros.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
csync.loopme.me/?redirect=https%3A%2F%2Fcs.lkqd.net%2Fcs%3FpartnerId%3D54%26partnerUserId%3D%7Bdevice_id%7D
35.214.223.115307 Temporary Redirect 0 B URL HTTP/2 csync.loopme.me/?redirect=https%3A%2F%2Fcs.lkqd.net%2Fcs%3FpartnerId%3D54%26partnerUserId%3D%7Bdevice_id%7D
IP 35.214.223.115:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?redirect=https%3A%2F%2Fcs.lkqd.net%2Fcs%3FpartnerId%3D54%26partnerUserId%3D%7Bdevice_id%7D HTTP/1.1
Host: csync.loopme.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Cookie: viewer_token=9990d583-3fd1-41e9-ab8c-a45c870443cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
set-cookie: viewer_token=c48f187b-74c7-4bb1-ba8a-122160fea1d9; path=/; domain=csync.loopme.me; secure; HttpOnly; Expires=Sat, 18-Mar-2023 23:12:36 GMT; SameSite=None
location: https://cs.lkqd.net/cs?partnerId=54&partnerUserId=c48f187b-74c7-4bb1-ba8a-122160fea1d9
content-length: 0
date: Sun, 18 Dec 2022 23:12:36 GMT
server: _
X-Firefox-Spdy: h2
t.lkqd.net/t
146.20.128.67200 OK 0 B IP 146.20.128.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 763
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:36 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: https://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 707a75781f08409b53c43a85fe9245cb
fa131c04ec9a044ac06a8c75c8a2f2d992fe9da1
65a210bed290505cfe123e0a2210696a4662d382248ac39f254fb57e489870ed
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 23:12:37 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 17 Dec 2022 18:28:16 GMT
Expires: Sat, 24 Dec 2022 18:28:15 GMT
Etag: "fa131c04ec9a044ac06a8c75c8a2f2d992fe9da1"
Cache-Control: max-age=500737,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77bb9596c9c1b4e8-OSL
cs.lkqd.net/cs?partnerId=54&partnerUserId=c48f187b-74c7-4bb1-ba8a-122160fea1d9
146.20.132.151200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=54&partnerUserId=c48f187b-74c7-4bb1-ba8a-122160fea1d9
IP 146.20.132.151:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=54&partnerUserId=c48f187b-74c7-4bb1-ba8a-122160fea1d9 HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad.lkqd.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:37 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
t.lkqd.net/t
146.20.128.67200 OK 0 B IP 146.20.128.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 1508
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:37 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: https://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
t.lkqd.net/t
146.20.128.67200 OK 0 B IP 146.20.128.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 11680
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:37 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: https://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
track.trackingtraffo.com/push/ic?auth=pz6u78&c=OA5jB9eH9sRDYoHJpKO3bLzW_QfossFqvOsaSbu55fSMXqoLjiBoDiBys59d6QTT9Gk2MuYyI-Z8IdouDz5MO0ZOESlfdgvCQgSk073gcvfc9t8t39g4-NpnwYdWXaQn4ImOHJdcBm6Koz3IIVoh45fxCbQSs8U2EDuQzTdT5b4m8SYIh8Ji4ySxi3fQ9ptLdRxYTxRRUqk-rOi6m-y6EsnQBrD4HVeSxXqeZSvsbiYINN83492fCaQbAkZaGk9m_Dcmge3MQVRjjFq5iyLrIV6K6iWVT9nmFVm2FN1PoSG0As9jk46mu-BKE3dHNOVDRJtDNq9meGraZnqO3cGuKaBfVWDVvi7UoMg-ZAwL0LYCzY4C8LU5Cpwjb5dr0k36AMV6G69v8p1IwWO96v3lKWfKvNvgfkiC0Ry6_J4YGlKrNEWSU4wLxaFuAOdICpZq9nOjgD-fmH7r6TvPhxx6HTGhUutJ16y837Oia7auBH7O502802wrI-g3gIMQVY0IQ_vnD-vMn9Q6jCCaOb_ymHxyZysDzYb8ERQuLGXAkQ0nbrzRDFO8BkKzoWaUFGvejynfL_xlR7W1iZGiPz-_wnAJPdvQ1gqNt7fB4htx1fzWwmCu
88.214.195.156302 Found 0 B URL HTTP/1.1 track.trackingtraffo.com/push/ic?auth=pz6u78&c=OA5jB9eH9sRDYoHJpKO3bLzW_QfossFqvOsaSbu55fSMXqoLjiBoDiBys59d6QTT9Gk2MuYyI-Z8IdouDz5MO0ZOESlfdgvCQgSk073gcvfc9t8t39g4-NpnwYdWXaQn4ImOHJdcBm6Koz3IIVoh45fxCbQSs8U2EDuQzTdT5b4m8SYIh8Ji4ySxi3fQ9ptLdRxYTxRRUqk-rOi6m-y6EsnQBrD4HVeSxXqeZSvsbiYINN83492fCaQbAkZaGk9m_Dcmge3MQVRjjFq5iyLrIV6K6iWVT9nmFVm2FN1PoSG0As9jk46mu-BKE3dHNOVDRJtDNq9meGraZnqO3cGuKaBfVWDVvi7UoMg-ZAwL0LYCzY4C8LU5Cpwjb5dr0k36AMV6G69v8p1IwWO96v3lKWfKvNvgfkiC0Ry6_J4YGlKrNEWSU4wLxaFuAOdICpZq9nOjgD-fmH7r6TvPhxx6HTGhUutJ16y837Oia7auBH7O502802wrI-g3gIMQVY0IQ_vnD-vMn9Q6jCCaOb_ymHxyZysDzYb8ERQuLGXAkQ0nbrzRDFO8BkKzoWaUFGvejynfL_xlR7W1iZGiPz-_wnAJPdvQ1gqNt7fB4htx1fzWwmCu
IP 88.214.195.156:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /push/ic?auth=pz6u78&c=OA5jB9eH9sRDYoHJpKO3bLzW_QfossFqvOsaSbu55fSMXqoLjiBoDiBys59d6QTT9Gk2MuYyI-Z8IdouDz5MO0ZOESlfdgvCQgSk073gcvfc9t8t39g4-NpnwYdWXaQn4ImOHJdcBm6Koz3IIVoh45fxCbQSs8U2EDuQzTdT5b4m8SYIh8Ji4ySxi3fQ9ptLdRxYTxRRUqk-rOi6m-y6EsnQBrD4HVeSxXqeZSvsbiYINN83492fCaQbAkZaGk9m_Dcmge3MQVRjjFq5iyLrIV6K6iWVT9nmFVm2FN1PoSG0As9jk46mu-BKE3dHNOVDRJtDNq9meGraZnqO3cGuKaBfVWDVvi7UoMg-ZAwL0LYCzY4C8LU5Cpwjb5dr0k36AMV6G69v8p1IwWO96v3lKWfKvNvgfkiC0Ry6_J4YGlKrNEWSU4wLxaFuAOdICpZq9nOjgD-fmH7r6TvPhxx6HTGhUutJ16y837Oia7auBH7O502802wrI-g3gIMQVY0IQ_vnD-vMn9Q6jCCaOb_ymHxyZysDzYb8ERQuLGXAkQ0nbrzRDFO8BkKzoWaUFGvejynfL_xlR7W1iZGiPz-_wnAJPdvQ1gqNt7fB4htx1fzWwmCu HTTP/1.1
Host: track.trackingtraffo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 18 Dec 2022 23:12:37 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Location: https://ads.trackingtraffo.com/creatives/k1qy286gxmd5g3dpr397nw5v/1659515047164-National Casino black.png
ads.trackingtraffo.com/creatives/k1qy286gxmd5g3dpr397nw5v/1659515047164-National%20Casino%20black.png
142.132.194.196200 OK 4.5 kB URL HTTP/1.1 ads.trackingtraffo.com/creatives/k1qy286gxmd5g3dpr397nw5v/1659515047164-National%20Casino%20black.png
IP 142.132.194.196:0
ASN #24940 Hetzner Online GmbH
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 58be17b22d6e1178a54c92cf862c817e
b821bc2f016751647df49e49863077e927a70322
9cc4f3f40313b08baf54c956685ac7a21ac8a3573908b9763865c6f613ce1b5f
GET /creatives/k1qy286gxmd5g3dpr397nw5v/1659515047164-National%20Casino%20black.png HTTP/1.1
Host: ads.trackingtraffo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 18 Dec 2022 23:12:37 GMT
Content-Type: image/png
Content-Length: 4456
Last-Modified: Wed, 03 Aug 2022 08:24:07 GMT
Connection: keep-alive
ETag: "62ea30a7-1168"
Accept-Ranges: bytes
v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=vastvpaid&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=80938559&m=
69.20.43.192200 OK 1.4 kB URL HTTP/2 v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=vastvpaid&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=80938559&m=
IP 69.20.43.192:0
File type ASCII text, with very long lines (1821), with no line terminators
Hash 80f0471d3a0a24489635d13f25721334
d7dccfbc5a959f7e102e3c907ecc49dfcb18988c
243ef8acb9e33e447ac3109a418ebc28e4dfcc867152535ad8ba356a91ecf83d
GET /ad?pid=430&sid=1135194&formats=true&output=vastvpaid&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=80938559&m= HTTP/1.1
Host: v.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:37 GMT
content-type: application/xml; charset=UTF-8
content-length: 1364
content-encoding: gzip
access-control-allow-origin: https://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=80938559&m=&rtv=1&thost=m.imagenesderopaparaperros.com
69.20.43.192200 OK 0 B URL HTTP/2 v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=80938559&m=&rtv=1&thost=m.imagenesderopaparaperros.com
IP 69.20.43.192:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=80938559&m=&rtv=1&thost=m.imagenesderopaparaperros.com HTTP/1.1
Host: v.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://m.imagenesderopaparaperros.com/
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:37 GMT
content-length: 0
access-control-allow-origin: https://m.imagenesderopaparaperros.com
access-control-max-age: 300
cache-control: max-age=300
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
X-Firefox-Spdy: h2
csync.loopme.me/?redirect=https%3A%2F%2Fcs.lkqd.net%2Fcs%3FpartnerId%3D54%26partnerUserId%3D%7Bdevice_id%7D
35.214.223.115307 Temporary Redirect 0 B URL HTTP/2 csync.loopme.me/?redirect=https%3A%2F%2Fcs.lkqd.net%2Fcs%3FpartnerId%3D54%26partnerUserId%3D%7Bdevice_id%7D
IP 35.214.223.115:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?redirect=https%3A%2F%2Fcs.lkqd.net%2Fcs%3FpartnerId%3D54%26partnerUserId%3D%7Bdevice_id%7D HTTP/1.1
Host: csync.loopme.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Cookie: viewer_token=c48f187b-74c7-4bb1-ba8a-122160fea1d9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
set-cookie: viewer_token=e616af7b-fe9f-42a5-b64c-257fcb36c45f; path=/; domain=csync.loopme.me; secure; HttpOnly; Expires=Sat, 18-Mar-2023 23:12:37 GMT; SameSite=None
location: https://cs.lkqd.net/cs?partnerId=54&partnerUserId=e616af7b-fe9f-42a5-b64c-257fcb36c45f
content-length: 0
date: Sun, 18 Dec 2022 23:12:37 GMT
server: _
X-Firefox-Spdy: h2
ad.turn.com/r/cs?pid=65
46.228.164.11302 Found 0 B IP 46.228.164.11:0
ASN #56396 Amobee EMEA Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /r/cs?pid=65 HTTP/1.1
Host: ad.turn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
p3p: policyref="/w3c/p3p.xml", CP="NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV"
cache-control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
pragma: no-cache
set-cookie: uid=2647913186522701314; Domain=.turn.com; Expires=Fri, 16-Jun-2023 23:12:37 GMT; Path=/; Secure; SameSite=None
location: https://cs.lkqd.net/cs?partnerId=94&partnerUserId=2647913186522701314
content-length: 0
date: Sun, 18 Dec 2022 23:12:37 GMT
X-Firefox-Spdy: h2
sync.srv.stackadapt.com/sync?nid=161
54.85.151.23302 Found 104 B URL HTTP/1.1 sync.srv.stackadapt.com/sync?nid=161
IP 54.85.151.23:0
File type HTML document, ASCII text
Hash bbb209840d0559965c966cd6f61ce302
d0548b3f48076910785901fe9d71115f759fccd4
39fdcd80568734342b1dd0860ab77b80413e476abc0920764de703e2ba6e6270
GET /sync?nid=161 HTTP/1.1
Host: sync.srv.stackadapt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Date: Sun, 18 Dec 2022 23:12:37 GMT
Location: https://cs.lkqd.net/cs?partnerId=93&partnerUserId=09PrpwO2Q3hvQ3Sz234FnFtaKpo
Set-Cookie: sa-user-id=s%3A0-d3d3eba7-03b6-4378-6f43-74b3db7e059c.Prf6YA1tjqkXRc4JrHg1sNzRAlXczWqXNR156wcdRw0; Max-Age=31536000; Secure; SameSite=None
sa-user-id-v2=s%3A09PrpwO2Q3hvQ3Sz234FnFtaKpo.qa9gYFukgIWzcTs2m0K%2BagWgQv0JLf5o4MB%2F4E4qCJg; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None
Content-Length: 104
Connection: keep-alive
cs.lkqd.net/cs?partnerId=103&redirect=https%3A%2F%2Fevent.clientgear.com%2Fcookie%2Flkqd%3Fpartner%3Dlkqd%26cookieid%3D%24%24rawlkqduserid%24%24&r=if
146.20.132.151200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=103&redirect=https%3A%2F%2Fevent.clientgear.com%2Fcookie%2Flkqd%3Fpartner%3Dlkqd%26cookieid%3D%24%24rawlkqduserid%24%24&r=if
IP 146.20.132.151:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=103&redirect=https%3A%2F%2Fevent.clientgear.com%2Fcookie%2Flkqd%3Fpartner%3Dlkqd%26cookieid%3D%24%24rawlkqduserid%24%24&r=if HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:37 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
cs.lkqd.net/cs?partnerId=54&partnerUserId=e616af7b-fe9f-42a5-b64c-257fcb36c45f
146.20.132.151200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=54&partnerUserId=e616af7b-fe9f-42a5-b64c-257fcb36c45f
IP 146.20.132.151:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=54&partnerUserId=e616af7b-fe9f-42a5-b64c-257fcb36c45f HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad.lkqd.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:37 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
cs.lkqd.net/cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if
146.20.132.151200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if
IP 146.20.132.151:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:37 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
cs.lkqd.net/cs?partnerId=94&partnerUserId=2647913186522701314
146.20.132.151200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=94&partnerUserId=2647913186522701314
IP 146.20.132.151:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=94&partnerUserId=2647913186522701314 HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad.lkqd.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:37 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=80938559&m=&rtv=1&thost=m.imagenesderopaparaperros.com
69.20.43.192200 OK 5.1 kB URL HTTP/2 v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=80938559&m=&rtv=1&thost=m.imagenesderopaparaperros.com
IP 69.20.43.192:0
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 9dc748e29ffcb60cdbc737c9636a812e
579582f295a2295007b659144767cf83e8503eb4
571b4159df24771d3b717b80d60659b086f5c535f39a15fa1e193ec299267a44
POST /ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=80938559&m=&rtv=1&thost=m.imagenesderopaparaperros.com HTTP/1.1
Host: v.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 38
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:37 GMT
content-type: application/json
content-length: 5101
content-encoding: gzip
access-control-allow-origin: https://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
t.lkqd.net/t
146.20.128.67200 OK 0 B IP 146.20.128.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 762
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:37 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: https://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
a.vidoomy.com/api/rtbserver/rtb?id=2126873567&w=400&h=225&skip=1&req_type=1&ip=&ua=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&l=EN&dt=2&c=NO&pid=&sid=&sname=&d=imagenesderopaparaperros.com&sp=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&coppa=&gdpr=1&gdprcs=&vpaid=1&idlot=
18.197.47.219204 No Content 0 B URL HTTP/2 a.vidoomy.com/api/rtbserver/rtb?id=2126873567&w=400&h=225&skip=1&req_type=1&ip=&ua=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&l=EN&dt=2&c=NO&pid=&sid=&sname=&d=imagenesderopaparaperros.com&sp=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&coppa=&gdpr=1&gdprcs=&vpaid=1&idlot=
IP 18.197.47.219:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/rtbserver/rtb?id=2126873567&w=400&h=225&skip=1&req_type=1&ip=&ua=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&l=EN&dt=2&c=NO&pid=&sid=&sname=&d=imagenesderopaparaperros.com&sp=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&coppa=&gdpr=1&gdprcs=&vpaid=1&idlot= HTTP/1.1
Host: a.vidoomy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 18 Dec 2022 23:12:37 GMT
access-control-allow-origin: https://m.imagenesderopaparaperros.com
access-control-expose-headers: X-VD-C
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,PATCH,OPTIONS
X-Firefox-Spdy: h2
ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C28056154147757281281841376222%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
23.36.77.33200 OK 832 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C28056154147757281281841376222%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
IP 23.36.77.33:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (412)
Hash f37590d9d2a419f1d78aec0aa81ca448
af8f091802a52ebd6cdd5a3ccfb7a2c02e04d3b7
41415cb0547e833fc999795fb17b5b5c0efd7e4fafcd95856cc2e92f661f85c1
GET /vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C28056154147757281281841376222%2C%2C&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: https://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1671405157851069-520
Expires: Sun, 18 Dec 2022 23:12:37 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 18 Dec 2022 23:12:37 GMT
Content-Length: 832
Connection: keep-alive
Set-Cookie: UID=31e4384a7cc776a747fa932d982a9b; Domain=ads.stickyadstv.com; Expires=Tue, 17-Jan-2023 23:12:37 GMT; Path=/
ads.stickyadstv.com/vast/vpaid-adapter/7585793?_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C28056154147757281281058247797,,&_fw_gdpr=1&_fw_gdpr_consent=
23.36.77.33200 OK 832 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C28056154147757281281058247797,,&_fw_gdpr=1&_fw_gdpr_consent=
IP 23.36.77.33:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (412)
Hash c8c2e802c3e323a14fc8d96e83097336
4f3fa579d35c849901e520ab856203b744c76b75
d71362b70d0754bcac4d2e65059c742a7ba19e9378cac3997b5d30c56d6b5d88
GET /vast/vpaid-adapter/7585793?_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C28056154147757281281058247797,,&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: https://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1671405157835062-359
Content-Length: 832
Expires: Sun, 18 Dec 2022 23:12:37 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 18 Dec 2022 23:12:37 GMT
Connection: keep-alive
Set-Cookie: UID=e0b7f84bf0f9af3da6a44aa8eee07e9; Domain=ads.stickyadstv.com; Expires=Tue, 17-Jan-2023 23:12:37 GMT; Path=/
ads.stickyadstv.com/vast/vpaid-adapter/7585793?schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C803119892805615414775728128,,&_fw_gdpr=1&_fw_gdpr_consent=
23.36.77.33200 OK 814 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C803119892805615414775728128,,&_fw_gdpr=1&_fw_gdpr_consent=
IP 23.36.77.33:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (394)
Hash 0cf874cafed6f25d6c84d134b0acf38c
a773b00d3735d5fc6f33f15a6108160e13d475d7
3aa201e4a1c05eb176fafec1fbff1c5f8c8e49ed199ea04c937014d594c70f66
GET /vast/vpaid-adapter/7585793?schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C803119892805615414775728128,,&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: https://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1671405157885051-521
Expires: Sun, 18 Dec 2022 23:12:37 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 18 Dec 2022 23:12:37 GMT
Content-Length: 814
Connection: keep-alive
Set-Cookie: UID=71496d2bc93fa0e362e618854d7fd587; Domain=ads.stickyadstv.com; Expires=Tue, 17-Jan-2023 23:12:37 GMT; Path=/
search.spotxchange.com/vast/2.0/218945?VPAID=JS&content_page_url=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&cb=1523668734&player_width=400&player_height=225®s[gdpr]=1&user[consent]=&device[geo][lat]=&device[geo][lon]=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C28056154147757281281538025230%2C%2C
185.94.180.123200 OK 79 B URL HTTP/1.1 search.spotxchange.com/vast/2.0/218945?VPAID=JS&content_page_url=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&cb=1523668734&player_width=400&player_height=225®s[gdpr]=1&user[consent]=&device[geo][lat]=&device[geo][lon]=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C28056154147757281281538025230%2C%2C
IP 185.94.180.123:0
ASN #35220 SpotXchange, INC
File type XML 1.0 document text\012- XML document, ASCII text
Hash da3e93c7e93fe9042e8437060a62e496
cd98d23361e34a2589a5e5de32221dce2d29f283
b63012ca704337abcd6d19a5a7fd83f9a81102f82b78a1760184b86e21513aab
GET /vast/2.0/218945?VPAID=JS&content_page_url=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&cb=1523668734&player_width=400&player_height=225®s[gdpr]=1&user[consent]=&device[geo][lat]=&device[geo][lon]=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C28056154147757281281538025230%2C%2C HTTP/1.1
Host: search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 18 Dec 2022 23:12:37 GMT
Content-Type: text/xml;charset=UTF-8
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Last-Modified: Sun, 18 Dec 2022 23:12:37 GMT
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Access-Control-Allow-Origin: https://m.imagenesderopaparaperros.com
Access-Control-Allow-Methods: POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Headers:
Access-Control-Allow-Credentials: true
X-fe: 047
X-SpotX-Timing-Page: 0.009478
X-SpotX-Timing-Page-Require: 0.000386
X-SpotX-Timing-Page-Context: 0.000304
X-SpotX-Timing-Page-URI: 0.000009
X-SpotX-Timing-Page-Mux: 0.000255
X-SpotX-Timing-Page-Cookie: 0.000003
X-SpotX-Timing-Page-Exception: 0.000001
X-SpotX-Timing-Page-Misc: 0.002234
X-SpotX-Timing-SpotMarket: 0.005967
X-SpotX-Timing-SpotMarket-Primary: 0.005967
X-SpotX-Timing-SpotMarket-Secondary: 0.000000
X-SpotX-Timing-Transform: 0.000319
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 79
ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C28056154147757281281082374716%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
23.36.77.33200 OK 832 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C28056154147757281281082374716%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
IP 23.36.77.33:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (412)
Hash b9e6185a887b74c4eb03a19b8d89b444
171f4e13e9f0e8f0c7d30c1dfb6fc08cb4d2da33
e6a5d1770dc36c28421fb651342b3e6d78d5a79f7c9e1897cdec95771f21172c
GET /vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C28056154147757281281082374716%2C%2C&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: https://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1671405157816077-344
Content-Length: 832
Expires: Sun, 18 Dec 2022 23:12:37 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 18 Dec 2022 23:12:37 GMT
Connection: keep-alive
Set-Cookie: UID=31e4384a7cc776a747fa932d982a9b; Domain=ads.stickyadstv.com; Expires=Tue, 17-Jan-2023 23:12:37 GMT; Path=/
cs.lkqd.net/cs?partnerId=93&partnerUserId=09PrpwO2Q3hvQ3Sz234FnFtaKpo
146.20.132.151200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=93&partnerUserId=09PrpwO2Q3hvQ3Sz234FnFtaKpo
IP 146.20.132.151:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=93&partnerUserId=09PrpwO2Q3hvQ3Sz234FnFtaKpo HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad.lkqd.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:37 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C28056154147757281282111678332%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
23.36.77.33200 OK 832 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C28056154147757281282111678332%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
IP 23.36.77.33:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (412)
Hash 8a51be48ded60a8915eb6e5c2334fc08
e40603729532c3d5ba260dcda24954793c0e0b32
5401f998d5100e6acaed9e6c2ad464996b19cefaba74feb0e6948d210fb05048
GET /vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C28056154147757281282111678332%2C%2C&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: https://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1671405157845091-431
Content-Length: 832
Expires: Sun, 18 Dec 2022 23:12:38 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 18 Dec 2022 23:12:38 GMT
Connection: keep-alive
Set-Cookie: UID=1c96ed47193ad444ab948265482ebb9; Domain=ads.stickyadstv.com; Expires=Tue, 17-Jan-2023 23:12:37 GMT; Path=/
ads.stickyadstv.com/www/delivery/swfIndex.php?reqType=AdsSetup&protocolVersion=2.0&_fw_us_privacy=&zoneId=7439281&_fw_gdpr=1&_fw_gdpr_consent=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C13304684242805615414775728128%2C%2C
23.36.77.33200 OK 67 B URL HTTP/1.1 ads.stickyadstv.com/www/delivery/swfIndex.php?reqType=AdsSetup&protocolVersion=2.0&_fw_us_privacy=&zoneId=7439281&_fw_gdpr=1&_fw_gdpr_consent=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C13304684242805615414775728128%2C%2C
IP 23.36.77.33:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text
Hash b753854b354a90a85ac6ff282b64b05d
1da3eb0c1b574c639024a54a679db90e403fc1b7
291437ea71e62b1c35d4ec5d3c5ad02cfa930343b41b1472fba70243089c8bbe
GET /www/delivery/swfIndex.php?reqType=AdsSetup&protocolVersion=2.0&_fw_us_privacy=&zoneId=7439281&_fw_gdpr=1&_fw_gdpr_consent=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C13304684242805615414775728128%2C%2C HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=UTF-8
Access-Control-Allow-Origin: https://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1671405157917011-370
Content-Length: 67
Expires: Sun, 18 Dec 2022 23:12:38 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 18 Dec 2022 23:12:38 GMT
Connection: keep-alive
Set-Cookie: UID=29bf73555cb8a7e68c7e113b7295cb; Domain=ads.stickyadstv.com; Expires=Tue, 17-Jan-2023 23:12:38 GMT; Path=/
t.lkqd.net/t
146.20.128.67200 OK 0 B IP 146.20.128.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 1509
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:38 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: https://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
t.lkqd.net/t
146.20.128.67200 OK 0 B IP 146.20.128.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 13326
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:38 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: https://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=vastvpaid&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=52489769&m=
69.20.43.192200 OK 1.4 kB URL HTTP/2 v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=vastvpaid&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=52489769&m=
IP 69.20.43.192:0
File type ASCII text, with very long lines (1821), with no line terminators
Hash e0a4c053b6f11e4cba3a5cfc3b29db55
e58a7ba9d9af279cf97ea7fb76882aede5810656
0f2e5eef46b861d18e7e1edc0eb90f216eb8108a7d5c7e794bf93d105db350e9
GET /ad?pid=430&sid=1135194&formats=true&output=vastvpaid&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=52489769&m= HTTP/1.1
Host: v.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:38 GMT
content-type: application/xml; charset=UTF-8
content-length: 1365
content-encoding: gzip
access-control-allow-origin: https://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=52489769&m=&rtv=1&thost=m.imagenesderopaparaperros.com
69.20.43.192200 OK 0 B URL HTTP/2 v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=52489769&m=&rtv=1&thost=m.imagenesderopaparaperros.com
IP 69.20.43.192:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=52489769&m=&rtv=1&thost=m.imagenesderopaparaperros.com HTTP/1.1
Host: v.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://m.imagenesderopaparaperros.com/
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:38 GMT
content-length: 0
access-control-allow-origin: https://m.imagenesderopaparaperros.com
access-control-max-age: 300
cache-control: max-age=300
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
X-Firefox-Spdy: h2
csync.loopme.me/?redirect=https%3A%2F%2Fcs.lkqd.net%2Fcs%3FpartnerId%3D54%26partnerUserId%3D%7Bdevice_id%7D
35.214.223.115307 Temporary Redirect 0 B URL HTTP/2 csync.loopme.me/?redirect=https%3A%2F%2Fcs.lkqd.net%2Fcs%3FpartnerId%3D54%26partnerUserId%3D%7Bdevice_id%7D
IP 35.214.223.115:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?redirect=https%3A%2F%2Fcs.lkqd.net%2Fcs%3FpartnerId%3D54%26partnerUserId%3D%7Bdevice_id%7D HTTP/1.1
Host: csync.loopme.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Cookie: viewer_token=e616af7b-fe9f-42a5-b64c-257fcb36c45f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
set-cookie: viewer_token=b4b531c3-1cc1-4065-8a26-460660d4f39b; path=/; domain=csync.loopme.me; secure; HttpOnly; Expires=Sat, 18-Mar-2023 23:12:38 GMT; SameSite=None
location: https://cs.lkqd.net/cs?partnerId=54&partnerUserId=b4b531c3-1cc1-4065-8a26-460660d4f39b
content-length: 0
date: Sun, 18 Dec 2022 23:12:38 GMT
server: _
X-Firefox-Spdy: h2
adx.adform.net/adx/?mid=970530&t=2&url=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy
37.157.4.41200 OK 74 B URL HTTP/2 adx.adform.net/adx/?mid=970530&t=2&url=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy
IP 37.157.4.41:0
File type XML 1.0 document text\012- XML document, ASCII text, with no line terminators
Hash cfd02b7cdd037c108c2865b3d236f8f4
c163be76e303f43da1706a7f7184b611e3aa28f0
d99c7ef5910cc186314a625e78ca4423ebdd9cfdc2b4622c52b7f0cae7c73170
GET /adx/?mid=970530&t=2&url=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:37 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET,OPTIONS
access-control-allow-origin: https://m.imagenesderopaparaperros.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
sync.srv.stackadapt.com/sync?nid=161
54.85.151.23302 Found 104 B URL HTTP/1.1 sync.srv.stackadapt.com/sync?nid=161
IP 54.85.151.23:0
File type HTML document, ASCII text
Hash 566e6e5b7326a4b98c255bf1e8f49420
c63217a5735112334a6b6efb86fbd3406ccec837
16b0501f4f8c80a79fa64f4814f180e4ea830cdbb589689944edced91df9f24c
GET /sync?nid=161 HTTP/1.1
Host: sync.srv.stackadapt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Date: Sun, 18 Dec 2022 23:12:38 GMT
Location: https://cs.lkqd.net/cs?partnerId=93&partnerUserId=Svna9b4WQ_16Mz6ewiW7a1taKpo
Set-Cookie: sa-user-id=s%3A0-4af9daf5-be16-43fd-7a33-3e9ec225bb6b.VVkLJVsHXbyTX4EeQ73mUMpPlqRZiphs4IJqXk1OTiI; Max-Age=31536000; Secure; SameSite=None
sa-user-id-v2=s%3ASvna9b4WQ_16Mz6ewiW7a1taKpo.Et78%2FH1DDNuXlm4zhyDTydb7RBWT0M5I%2BEDSEoHKciw; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None
Content-Length: 104
Connection: keep-alive
cs.lkqd.net/cs?partnerId=103&redirect=https%3A%2F%2Fevent.clientgear.com%2Fcookie%2Flkqd%3Fpartner%3Dlkqd%26cookieid%3D%24%24rawlkqduserid%24%24&r=if
146.20.132.151200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=103&redirect=https%3A%2F%2Fevent.clientgear.com%2Fcookie%2Flkqd%3Fpartner%3Dlkqd%26cookieid%3D%24%24rawlkqduserid%24%24&r=if
IP 146.20.132.151:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=103&redirect=https%3A%2F%2Fevent.clientgear.com%2Fcookie%2Flkqd%3Fpartner%3Dlkqd%26cookieid%3D%24%24rawlkqduserid%24%24&r=if HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:38 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
cs.lkqd.net/cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if
146.20.132.151200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if
IP 146.20.132.151:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:38 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
cs.lkqd.net/cs?partnerId=54&partnerUserId=b4b531c3-1cc1-4065-8a26-460660d4f39b
146.20.132.151200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=54&partnerUserId=b4b531c3-1cc1-4065-8a26-460660d4f39b
IP 146.20.132.151:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=54&partnerUserId=b4b531c3-1cc1-4065-8a26-460660d4f39b HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad.lkqd.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:38 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=52489769&m=&rtv=1&thost=m.imagenesderopaparaperros.com
69.20.43.192200 OK 4.7 kB URL HTTP/2 v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=52489769&m=&rtv=1&thost=m.imagenesderopaparaperros.com
IP 69.20.43.192:0
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 1ba31c2888182d3601900a7e07948ba4
3e32785351d2d78c223c1a821a41cb3af05e2f42
e6d400fb01c27a1231446036fce3e60ae0f4be8cb8ec1dfaf82457123db602bb
POST /ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=52489769&m=&rtv=1&thost=m.imagenesderopaparaperros.com HTTP/1.1
Host: v.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 38
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:38 GMT
content-type: application/json
content-length: 4679
content-encoding: gzip
access-control-allow-origin: https://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
cs.lkqd.net/cs?partnerId=94&partnerUserId=8699625185801805314
146.20.132.151200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=94&partnerUserId=8699625185801805314
IP 146.20.132.151:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=94&partnerUserId=8699625185801805314 HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad.lkqd.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:38 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
t.lkqd.net/t
146.20.128.67200 OK 0 B IP 146.20.128.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 763
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:38 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: https://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
a.vidoomy.com/api/rtbserver/rtb?id=799855361&w=400&h=225&skip=1&req_type=1&ip=&ua=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&l=EN&dt=2&c=NO&pid=&sid=&sname=&d=imagenesderopaparaperros.com&sp=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&coppa=&gdpr=1&gdprcs=&vpaid=1&idlot=
18.197.47.219204 No Content 0 B URL HTTP/2 a.vidoomy.com/api/rtbserver/rtb?id=799855361&w=400&h=225&skip=1&req_type=1&ip=&ua=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&l=EN&dt=2&c=NO&pid=&sid=&sname=&d=imagenesderopaparaperros.com&sp=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&coppa=&gdpr=1&gdprcs=&vpaid=1&idlot=
IP 18.197.47.219:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/rtbserver/rtb?id=799855361&w=400&h=225&skip=1&req_type=1&ip=&ua=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&l=EN&dt=2&c=NO&pid=&sid=&sname=&d=imagenesderopaparaperros.com&sp=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&coppa=&gdpr=1&gdprcs=&vpaid=1&idlot= HTTP/1.1
Host: a.vidoomy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 18 Dec 2022 23:12:39 GMT
access-control-allow-origin: https://m.imagenesderopaparaperros.com
access-control-expose-headers: X-VD-C
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,PATCH,OPTIONS
X-Firefox-Spdy: h2
cs.lkqd.net/cs?partnerId=93&partnerUserId=Svna9b4WQ_16Mz6ewiW7a1taKpo
146.20.132.151200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=93&partnerUserId=Svna9b4WQ_16Mz6ewiW7a1taKpo
IP 146.20.132.151:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=93&partnerUserId=Svna9b4WQ_16Mz6ewiW7a1taKpo HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad.lkqd.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:39 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
ads.stickyadstv.com/vast/vpaid-adapter/7585793?_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C65113973161575574851798548962,,&_fw_gdpr=1&_fw_gdpr_consent=
23.36.77.33200 OK 832 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C65113973161575574851798548962,,&_fw_gdpr=1&_fw_gdpr_consent=
IP 23.36.77.33:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (412)
Hash 961d935bc5c0afd7ed5219474e875ed8
5a283873ff198741b993ac5b7767dac2dd666fe4
9ac508ee3934d450de25a5be5cb69b877d34dbf1ecb4b687e94b1bc1c0be7db1
GET /vast/vpaid-adapter/7585793?_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C65113973161575574851798548962,,&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: https://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1671405158912095-582
Expires: Sun, 18 Dec 2022 23:12:39 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 18 Dec 2022 23:12:39 GMT
Content-Length: 832
Connection: keep-alive
Set-Cookie: UID=5d8caf6388256baf57c016af123f8eb; Domain=ads.stickyadstv.com; Expires=Tue, 17-Jan-2023 23:12:39 GMT; Path=/
ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C65113973161575574851765345403%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
23.36.77.33200 OK 832 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C65113973161575574851765345403%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
IP 23.36.77.33:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (412)
Hash 64a5d8faf68a798962b58b1196ce8163
2985b0a6f7a1c539451884a9f5cee9c7a5ac5381
37396b87e6969b379bc7f61647d6272d53f52a814735219c953b3f2b42ef8598
GET /vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C65113973161575574851765345403%2C%2C&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: https://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1671405158908089-584
Expires: Sun, 18 Dec 2022 23:12:39 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 18 Dec 2022 23:12:39 GMT
Content-Length: 832
Connection: keep-alive
Set-Cookie: UID=6675fb8c536a4ebbf4a6e2ac1c5a751c; Domain=ads.stickyadstv.com; Expires=Tue, 17-Jan-2023 23:12:39 GMT; Path=/
adx.adform.net/adx/?mid=970530&url=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&t=2
37.157.4.41200 OK 906 B URL HTTP/2 adx.adform.net/adx/?mid=970530&url=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&t=2
IP 37.157.4.41:0
Hash b524aa0aa670719771c54e2cf5d11041
f35ce567f7c92bc0aa09b33d56c60eb05cb0d0a7
237bb19cc6bdffdc19dc45390a22808ac6c6cd74f15f65b95f418633a19bbc20
GET /adx/?mid=970530&url=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&t=2 HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:37 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET,OPTIONS
access-control-allow-origin: https://m.imagenesderopaparaperros.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
ads.stickyadstv.com/vast/vpaid-adapter/7585793?schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C6670788716511397316157557485,,&_fw_gdpr=1&_fw_gdpr_consent=
23.36.77.33200 OK 815 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C6670788716511397316157557485,,&_fw_gdpr=1&_fw_gdpr_consent=
IP 23.36.77.33:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (395)
Hash 26bede3b591b80f59d362721190e510e
8b31d870de3cb2413a0ca595527c60141a6fffe2
3c8926935df1eb0cf6698a05ad96c4c182d588b440d8821dc4bfe45295387697
GET /vast/vpaid-adapter/7585793?schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C6670788716511397316157557485,,&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: https://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1671405158957054-504
Expires: Sun, 18 Dec 2022 23:12:39 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 18 Dec 2022 23:12:39 GMT
Content-Length: 815
Connection: keep-alive
Set-Cookie: UID=ffd5dc1ef4588dae757ceecd3917dcd; Domain=ads.stickyadstv.com; Expires=Tue, 17-Jan-2023 23:12:39 GMT; Path=/
ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C65113973161575574851924175288%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
23.36.77.33200 OK 832 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C65113973161575574851924175288%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
IP 23.36.77.33:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (412)
Hash 1f45d3b8192266d5304c4dcc271288d2
fa83ad625adc0d58b7aea964232ad1d75c265aca
3bdff491cbbf50db52a7817ec5de2bc121ea61904738493d2e3d825f906cc519
GET /vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C65113973161575574851924175288%2C%2C&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: https://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1671405159038013-416
Content-Length: 832
Expires: Sun, 18 Dec 2022 23:12:39 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 18 Dec 2022 23:12:39 GMT
Connection: keep-alive
Set-Cookie: UID=ffd5dc1ef4588dae757ceecd3917dcd; Domain=ads.stickyadstv.com; Expires=Tue, 17-Jan-2023 23:12:39 GMT; Path=/
search.spotxchange.com/vast/2.0/218945?VPAID=JS&content_page_url=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&cb=1907633032&player_width=400&player_height=225®s[gdpr]=1&user[consent]=&device[geo][lat]=&device[geo][lon]=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C65113973161575574851000388797%2C%2C
185.94.180.123200 OK 79 B URL HTTP/1.1 search.spotxchange.com/vast/2.0/218945?VPAID=JS&content_page_url=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&cb=1907633032&player_width=400&player_height=225®s[gdpr]=1&user[consent]=&device[geo][lat]=&device[geo][lon]=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C65113973161575574851000388797%2C%2C
IP 185.94.180.123:0
ASN #35220 SpotXchange, INC
File type XML 1.0 document text\012- XML document, ASCII text
Hash da3e93c7e93fe9042e8437060a62e496
cd98d23361e34a2589a5e5de32221dce2d29f283
b63012ca704337abcd6d19a5a7fd83f9a81102f82b78a1760184b86e21513aab
GET /vast/2.0/218945?VPAID=JS&content_page_url=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&cb=1907633032&player_width=400&player_height=225®s[gdpr]=1&user[consent]=&device[geo][lat]=&device[geo][lon]=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C65113973161575574851000388797%2C%2C HTTP/1.1
Host: search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 18 Dec 2022 23:12:39 GMT
Content-Type: text/xml;charset=UTF-8
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Last-Modified: Sun, 18 Dec 2022 23:12:39 GMT
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Access-Control-Allow-Origin: https://m.imagenesderopaparaperros.com
Access-Control-Allow-Methods: POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Headers:
Access-Control-Allow-Credentials: true
X-fe: 104
X-SpotX-Timing-Page: 0.008850
X-SpotX-Timing-Page-Require: 0.000287
X-SpotX-Timing-Page-Context: 0.000256
X-SpotX-Timing-Page-URI: 0.000009
X-SpotX-Timing-Page-Mux: 0.000214
X-SpotX-Timing-Page-Cookie: 0.000002
X-SpotX-Timing-Page-Exception: 0.000001
X-SpotX-Timing-Page-Misc: 0.002120
X-SpotX-Timing-SpotMarket: 0.005636
X-SpotX-Timing-SpotMarket-Primary: 0.005636
X-SpotX-Timing-SpotMarket-Secondary: 0.000000
X-SpotX-Timing-Transform: 0.000325
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 79
ads.stickyadstv.com/www/delivery/swfIndex.php?reqType=AdsSetup&protocolVersion=2.0&_fw_us_privacy=&zoneId=7439281&_fw_gdpr=1&_fw_gdpr_consent=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C15773231196511397316157557485%2C%2C
23.36.77.33200 OK 67 B URL HTTP/1.1 ads.stickyadstv.com/www/delivery/swfIndex.php?reqType=AdsSetup&protocolVersion=2.0&_fw_us_privacy=&zoneId=7439281&_fw_gdpr=1&_fw_gdpr_consent=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C15773231196511397316157557485%2C%2C
IP 23.36.77.33:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text
Hash b753854b354a90a85ac6ff282b64b05d
1da3eb0c1b574c639024a54a679db90e403fc1b7
291437ea71e62b1c35d4ec5d3c5ad02cfa930343b41b1472fba70243089c8bbe
GET /www/delivery/swfIndex.php?reqType=AdsSetup&protocolVersion=2.0&_fw_us_privacy=&zoneId=7439281&_fw_gdpr=1&_fw_gdpr_consent=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C15773231196511397316157557485%2C%2C HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=UTF-8
Access-Control-Allow-Origin: https://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1671405158982036-604
Expires: Sun, 18 Dec 2022 23:12:39 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 18 Dec 2022 23:12:39 GMT
Content-Length: 67
Connection: keep-alive
Set-Cookie: UID=77b2cd57dd718379b17a341c778bde8; Domain=ads.stickyadstv.com; Expires=Tue, 17-Jan-2023 23:12:39 GMT; Path=/
t.lkqd.net/t
146.20.128.67200 OK 0 B IP 146.20.128.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 1508
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:39 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: https://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
t.lkqd.net/t
146.20.128.67200 OK 0 B IP 146.20.128.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12501
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:39 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: https://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=52489769&m=&rtv=1&thost=m.imagenesderopaparaperros.com
69.20.43.192200 OK 4.9 kB URL HTTP/2 v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=52489769&m=&rtv=1&thost=m.imagenesderopaparaperros.com
IP 69.20.43.192:0
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash cb3601b87a017a01d4322b9cadf684bc
1b9200eb40c7c2e4ae9108b520cb38bc499e2102
17f18c9c3fe04b94bc9f51964ec977decb8e538f0dc2b3ef2ca5707332bfa509
POST /ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=52489769&m=&rtv=1&thost=m.imagenesderopaparaperros.com HTTP/1.1
Host: v.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 38
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:39 GMT
content-type: application/json
content-length: 4920
content-encoding: gzip
access-control-allow-origin: https://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ad.turn.com/r/cs?pid=65
46.228.164.11302 Found 0 B IP 46.228.164.11:0
ASN #56396 Amobee EMEA Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /r/cs?pid=65 HTTP/1.1
Host: ad.turn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
p3p: policyref="/w3c/p3p.xml", CP="NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV"
cache-control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
pragma: no-cache
set-cookie: uid=2948811036138020354; Domain=.turn.com; Expires=Fri, 16-Jun-2023 23:12:39 GMT; Path=/; Secure; SameSite=None
location: https://cs.lkqd.net/cs?partnerId=94&partnerUserId=2948811036138020354
content-length: 0
date: Sun, 18 Dec 2022 23:12:39 GMT
X-Firefox-Spdy: h2
sync.srv.stackadapt.com/sync?nid=161
54.85.151.23302 Found 104 B URL HTTP/1.1 sync.srv.stackadapt.com/sync?nid=161
IP 54.85.151.23:0
File type HTML document, ASCII text
Hash 3143695ccdefde5394368baa39967db0
340b300b60902aeaf0eeddda5b94aeefd562b532
8b1b61dd8237c49a24d360f50edc83e26b80d8880284a6df2c1434d25e936621
GET /sync?nid=161 HTTP/1.1
Host: sync.srv.stackadapt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Date: Sun, 18 Dec 2022 23:12:39 GMT
Location: https://cs.lkqd.net/cs?partnerId=93&partnerUserId=CBvgdQYwTZ9rL9tj9z2Oc1taKpo
Set-Cookie: sa-user-id=s%3A0-081be075-0630-4d9f-6b2f-db63f73d8e73.jj%2FWUv2JqQWF1ZXd2J0XJb0%2B%2BzVLMqtsHtQoYXxzJb0; Max-Age=31536000; Secure; SameSite=None
sa-user-id-v2=s%3ACBvgdQYwTZ9rL9tj9z2Oc1taKpo.KFmKb%2Fb%2BbeFt10hEn05pNAUgyVjPfzS2QpDS3%2Fu54rc; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None
Content-Length: 104
Connection: keep-alive
cs.lkqd.net/cs?partnerId=103&redirect=https%3A%2F%2Fevent.clientgear.com%2Fcookie%2Flkqd%3Fpartner%3Dlkqd%26cookieid%3D%24%24rawlkqduserid%24%24&r=if
146.20.132.151200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=103&redirect=https%3A%2F%2Fevent.clientgear.com%2Fcookie%2Flkqd%3Fpartner%3Dlkqd%26cookieid%3D%24%24rawlkqduserid%24%24&r=if
IP 146.20.132.151:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=103&redirect=https%3A%2F%2Fevent.clientgear.com%2Fcookie%2Flkqd%3Fpartner%3Dlkqd%26cookieid%3D%24%24rawlkqduserid%24%24&r=if HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:39 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
cs.lkqd.net/cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if
146.20.132.151200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if
IP 146.20.132.151:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:39 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
m.imagenesderopaparaperros.com/zshorte_theme/js/feather.min.js
172.67.168.79200 OK 0 B URL HTTP/2 m.imagenesderopaparaperros.com/zshorte_theme/js/feather.min.js
IP 172.67.168.79:0
GET /zshorte_theme/js/feather.min.js HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/klGy
Cookie: lang=en_US; AppSession=fd7a07fc56237d300b0d56ca697dd616; csrfToken=40240b3fe89d563ffaf066e36ca883f1ba0a2691526e0765b9d932939bcf6987e25a3630af2ee0c2b50b59a683c893f49411cab17c2ae97eb73fd68291d1d486
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: application/javascript
x-frame-options: SAMEORIGIN
last-modified: Sat, 20 Jun 2020 00:08:42 GMT
cache-control: max-age=2592000
expires: Fri, 23 Dec 2022 11:03:28 GMT
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 2203744
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u3Ja7q%2B7u67A6uQlc6eTFY%2B0KM3RHiKveYUDvvlVzHyzLNat%2F0vaOJceB%2BbUNHfvAfwQQUEczKc7EmLuxBuayUE%2FTqlaLfRK8wBGHc%2B0jdy%2FEBwSYtdPksSlt%2B0xiRv7S9tAz7XM2G3k4aBOMAMiH1o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77bb957a2a78fac8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
m.imagenesderopaparaperros.com/zshorte_theme/js/owl.init.js
172.67.168.79200 OK 0 B URL HTTP/2 m.imagenesderopaparaperros.com/zshorte_theme/js/owl.init.js
IP 172.67.168.79:0
GET /zshorte_theme/js/owl.init.js HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/klGy
Cookie: lang=en_US; AppSession=fd7a07fc56237d300b0d56ca697dd616; csrfToken=40240b3fe89d563ffaf066e36ca883f1ba0a2691526e0765b9d932939bcf6987e25a3630af2ee0c2b50b59a683c893f49411cab17c2ae97eb73fd68291d1d486
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: application/javascript
x-frame-options: SAMEORIGIN
last-modified: Sat, 20 Jun 2020 00:08:46 GMT
cache-control: max-age=2592000
expires: Sun, 01 Jan 2023 14:53:55 GMT
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1412317
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HZ3yNfkGN5zzujoQJPlvmk9OFk%2F%2BlPE58Gu7DRB0KgKgc7%2BBDIjSgLQ%2BWRstLPnfvdl3f%2FkCPRxqoRJADdV7ONuvpjhOD%2BO3M5fKUzOsr3%2FtYdVAWKycmHtQu7ac%2Bl5wKe1Ltzlkb37gcj9aArWhee0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77bb957a2a76fac8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
m.imagenesderopaparaperros.com/zshorte_theme/js/owl.carousel.min.js
172.67.168.79200 OK 0 B URL HTTP/2 m.imagenesderopaparaperros.com/zshorte_theme/js/owl.carousel.min.js
IP 172.67.168.79:0
GET /zshorte_theme/js/owl.carousel.min.js HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/klGy
Cookie: lang=en_US; AppSession=fd7a07fc56237d300b0d56ca697dd616; csrfToken=40240b3fe89d563ffaf066e36ca883f1ba0a2691526e0765b9d932939bcf6987e25a3630af2ee0c2b50b59a683c893f49411cab17c2ae97eb73fd68291d1d486
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: application/javascript
x-frame-options: SAMEORIGIN
last-modified: Sat, 20 Jun 2020 00:08:46 GMT
cache-control: max-age=2592000
expires: Sun, 01 Jan 2023 14:53:55 GMT
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1412317
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nLbvkQukYjrIBCnCyLqiA8gdQgn31eDfBEgjyU8XtN5mHXdrjebC6nTOR9Blo%2FGwr5xfXeJjViXLogjnmwyt4DA9CInzMAKPNGJdGcLIy5G2hXDgrW%2BmkMsh24vVHIY6fnNFqEiZs%2FKsWBxHw0xZQ04%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77bb957a2a75fac8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cmp.quantcast.com/GVL-v2/purposes-ES.json
143.204.55.76200 OK 0 B URL HTTP/2 cmp.quantcast.com/GVL-v2/purposes-ES.json
IP 143.204.55.76:0
GET /GVL-v2/purposes-ES.json HTTP/1.1
Host: cmp.quantcast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
access-control-max-age: 3000
cache-control: max-age=172800
date: Sun, 18 Dec 2022 03:00:39 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-credentials: true
last-modified: Sun, 18 Dec 2022 03:00:33 GMT
etag: W/"b580ef7c60b7fa812e3687d549be13b9"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 1QkkEvpKnLsAmbcpDME4xmYskRxBPw13sOZmUpNLOKYLjIMAf0cD9Q==
age: 72718
X-Firefox-Spdy: h2
m.imagenesderopaparaperros.com/vendor/clipboard.min.js?ver=6.4.0
172.67.168.79200 OK 0 B URL HTTP/2 m.imagenesderopaparaperros.com/vendor/clipboard.min.js?ver=6.4.0
IP 172.67.168.79:0
GET /vendor/clipboard.min.js?ver=6.4.0 HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/klGy
Cookie: lang=en_US; AppSession=fd7a07fc56237d300b0d56ca697dd616; csrfToken=40240b3fe89d563ffaf066e36ca883f1ba0a2691526e0765b9d932939bcf6987e25a3630af2ee0c2b50b59a683c893f49411cab17c2ae97eb73fd68291d1d486
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: application/javascript
x-frame-options: SAMEORIGIN
last-modified: Sat, 20 Jun 2020 00:07:33 GMT
cache-control: max-age=2592000
expires: Fri, 23 Dec 2022 11:03:24 GMT
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 2203748
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vIQHad2b%2F%2FkFgmz%2Bnh6sOvbSCvoilxMXnxktxIXlkFQzOq%2FgnOD%2FZZatPK%2FqELaSN8iLNf%2FIDzwM0jQc04cQbC%2FfnhlHwhAYeIy0Rm8%2BMXRuIdrvup2%2Bnoop0VLhnF%2FBwiMlTPIq88RL1CO4BeK9%2B1E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77bb957a1a66fac8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
m.imagenesderopaparaperros.com/zshorte_theme/js/scrollspy.min.js
172.67.168.79200 OK 0 B URL HTTP/2 m.imagenesderopaparaperros.com/zshorte_theme/js/scrollspy.min.js
IP 172.67.168.79:0
GET /zshorte_theme/js/scrollspy.min.js HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/klGy
Cookie: lang=en_US; AppSession=fd7a07fc56237d300b0d56ca697dd616; csrfToken=40240b3fe89d563ffaf066e36ca883f1ba0a2691526e0765b9d932939bcf6987e25a3630af2ee0c2b50b59a683c893f49411cab17c2ae97eb73fd68291d1d486
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: application/javascript
x-frame-options: SAMEORIGIN
last-modified: Sat, 20 Jun 2020 00:08:46 GMT
cache-control: max-age=2592000
expires: Fri, 23 Dec 2022 11:03:27 GMT
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-served-by: m.imagenesderopaparaperros.com
cf-cache-status: HIT
age: 2203745
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b51DhKpnx965G5so3OUj4v%2B%2Bf%2FlHlcZnwJYOq%2FbkPvJBIUUOr2z%2FQzbjgatOLG4wr4MDPDq9qoEDjoOZsbZl9R2RHRLR%2BPvqX1HWNCEfAcYvbXmu2FqXtJ8zYByJ%2BjDFgryZalsDFBG4Ngx5ah1od8k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77bb957a1a71fac8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ads.themoneytizer.com/s/gen.js?type=6
185.76.9.26200 OK 0 B URL HTTP/2 ads.themoneytizer.com/s/gen.js?type=6
IP 185.76.9.26:0
ASN #60068 Datacamp Limited
GET /s/gen.js?type=6 HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=604800
x-accel-expires: @1671771785
server: CDN77-Turbo
x-77-nzt: AblMCRTjZNn/V6IDAA
x-77-nzt-ray: af585630221e58a7609e9f63cf853b1e
x-cache: HIT
x-age: 238167
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
m.imagenesderopaparaperros.com/klGy
172.67.168.79200 OK 0 B URL HTTP/2 m.imagenesderopaparaperros.com/klGy
IP 172.67.168.79:0
GET /klGy HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-frame-options: SAMEORIGIN
x-robots-tag: noindex, nofollow
set-cookie: lang=en_US; expires=Wed, 13-Dec-2023 23:12:32 GMT; Max-Age=31104000; path=/
AppSession=fd7a07fc56237d300b0d56ca697dd616; path=/; HttpOnly
csrfToken=40240b3fe89d563ffaf066e36ca883f1ba0a2691526e0765b9d932939bcf6987e25a3630af2ee0c2b50b59a683c893f49411cab17c2ae97eb73fd68291d1d486; path=/; HttpOnly
x-served-by: m.imagenesderopaparaperros.com
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ea7eAoK8m6mR5KuPZFX0XyMJ1KeBrwdDGZXJUIibyaihW4rOVH2eJOxGLSMKWUgZN%2BPW5ok9mZipgQ83zq6nqTPUuw3F9oP8iPJX3OQr%2BtIkNJ8JQe%2BV3FbcQDKAyl1XEVFCI4L8suPxX5YwI27tmHM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77bb9576d8c6fac8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.barscreative1.com//sb/notifications/rtb/social/facebook/1-1/index.html
45.133.44.3200 OK 0 B URL HTTP/2 cdn.barscreative1.com//sb/notifications/rtb/social/facebook/1-1/index.html
IP 45.133.44.3:0
ASN #39572 DataWeb Global Group B.V.
GET //sb/notifications/rtb/social/facebook/1-1/index.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:35 GMT
content-type: text/html; charset=utf-8
server: nginx/1.17.6
last-modified: Tue, 24 May 2022 12:11:15 GMT
etag: W/"628ccb63-4c6"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Mon, 19 Dec 2022 00:12:35 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
m.imagenesderopaparaperros.com/modern_theme/js/front.js?ver=6.4.0
172.67.168.79200 OK 0 B URL HTTP/2 m.imagenesderopaparaperros.com/modern_theme/js/front.js?ver=6.4.0
IP 172.67.168.79:0
GET /modern_theme/js/front.js?ver=6.4.0 HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/klGy
Cookie: lang=en_US; AppSession=fd7a07fc56237d300b0d56ca697dd616; csrfToken=40240b3fe89d563ffaf066e36ca883f1ba0a2691526e0765b9d932939bcf6987e25a3630af2ee0c2b50b59a683c893f49411cab17c2ae97eb73fd68291d1d486
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: application/javascript
x-frame-options: SAMEORIGIN
last-modified: Sat, 20 Jun 2020 00:08:01 GMT
cache-control: max-age=2592000
expires: Sun, 01 Jan 2023 07:03:58 GMT
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-served-by: m.imagenesderopaparaperros.com
cf-cache-status: HIT
age: 1440514
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BInICk6lYz5A%2BrXlpwOVRie1K1GKEN6u5MvEQWGPWqNBQt0elMfoLdje5A4wK3k0EP1SJKkUAFSyz9XnPUWe4U9bbJi6et4SRSGsZmGl9pe57PvD7tVWLeYkvQF0wfXpPyLtiIkq3%2FHu2xTz3z45oGQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77bb957a1a67fac8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
m.imagenesderopaparaperros.com/zshorte_theme/css/aos.css
172.67.168.79200 OK 0 B URL HTTP/2 m.imagenesderopaparaperros.com/zshorte_theme/css/aos.css
IP 172.67.168.79:0
GET /zshorte_theme/css/aos.css HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/klGy
Cookie: lang=en_US; AppSession=fd7a07fc56237d300b0d56ca697dd616; csrfToken=40240b3fe89d563ffaf066e36ca883f1ba0a2691526e0765b9d932939bcf6987e25a3630af2ee0c2b50b59a683c893f49411cab17c2ae97eb73fd68291d1d486
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: text/css
x-frame-options: SAMEORIGIN
last-modified: Sat, 20 Jun 2020 00:08:05 GMT
cache-control: max-age=2592000
expires: Wed, 04 Jan 2023 23:37:16 GMT
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1121716
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kEey4KEPCSUoEzRVNW9w7NHq9UZoIknHI%2FO7UHBXLjbrzcB6LNRBrTNOuO7fH7w34hI%2FWxcGXH7jRYiPgFfk%2BIIo0sAQB7tc4q2Vbb7ce8%2FNnN%2Bag19rcf5hP5%2FpUVTsvBkAorUXeHAFll%2Fa4iBchqc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77bb9579ea48fac8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
m.imagenesderopaparaperros.com/zshorte_theme/css/colors/skyblue.css
172.67.168.79200 OK 0 B URL HTTP/2 m.imagenesderopaparaperros.com/zshorte_theme/css/colors/skyblue.css
IP 172.67.168.79:0
GET /zshorte_theme/css/colors/skyblue.css HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/klGy
Cookie: lang=en_US; AppSession=fd7a07fc56237d300b0d56ca697dd616; csrfToken=40240b3fe89d563ffaf066e36ca883f1ba0a2691526e0765b9d932939bcf6987e25a3630af2ee0c2b50b59a683c893f49411cab17c2ae97eb73fd68291d1d486
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: text/css
x-frame-options: SAMEORIGIN
last-modified: Sat, 20 Jun 2020 00:09:38 GMT
cache-control: max-age=2592000
expires: Fri, 23 Dec 2022 11:03:08 GMT
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-served-by: m.imagenesderopaparaperros.com
cf-cache-status: HIT
age: 2203764
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bQb9UziiPxBY6N5G49LyesoQ7FjvqYm9OxVw8zf65UlK1jMbPPpL3bK8n4yCCKPTz%2BggOpNM%2F6gBi%2FjKAU%2FE3hlBBl6Y1ZfbYHWdOv7E%2FNPSKiiQ0wUhAjfHbLqeCPp3cBrjUGi7qUYDHVmUwkvH21o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77bb9579fa4bfac8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
m.imagenesderopaparaperros.com/vendor/bootstrap/js/bootstrap.min.js?ver=6.4.0
172.67.168.79200 OK 0 B URL HTTP/2 m.imagenesderopaparaperros.com/vendor/bootstrap/js/bootstrap.min.js?ver=6.4.0
IP 172.67.168.79:0
GET /vendor/bootstrap/js/bootstrap.min.js?ver=6.4.0 HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/klGy
Cookie: lang=en_US; AppSession=fd7a07fc56237d300b0d56ca697dd616; csrfToken=40240b3fe89d563ffaf066e36ca883f1ba0a2691526e0765b9d932939bcf6987e25a3630af2ee0c2b50b59a683c893f49411cab17c2ae97eb73fd68291d1d486
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: application/javascript
x-frame-options: SAMEORIGIN
last-modified: Sat, 20 Jun 2020 00:09:27 GMT
cache-control: max-age=2592000
expires: Wed, 04 Jan 2023 23:37:17 GMT
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1121715
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ydruI1BtFgV1ZjrOcd6P7bOACKFwJvxhRqKcVy0QfD7McAOkP4WsEVYKLZ5HZLBiiZ%2BIedjJgYRHi1BQNdH0%2BRhzxPXbPoBL5JBNCNVKW1Ad7VTm%2FdIbLuc08yob3rdgHQXAnQxBgo2snEYh%2FOtxHf0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77bb957a1a62fac8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
unicons.iconscout.com/release/v2.1.9/script/monochrome/bundle.js
104.18.28.243200 OK 0 B URL HTTP/2 unicons.iconscout.com/release/v2.1.9/script/monochrome/bundle.js
IP 104.18.28.243:0
GET /release/v2.1.9/script/monochrome/bundle.js HTTP/1.1
Host: unicons.iconscout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: application/javascript
x-amz-id-2: GvCKrN3nQW/FEY2jWfHeYZvKkWCt3JBdCuMVwvzgDsMJlQPRsp7xleY2w8Me+pQdtPQBGP2L4Og=
x-amz-request-id: J4Q012JMVSHPPMBE
last-modified: Fri, 22 May 2020 12:00:38 GMT
etag: W/"be52f9b7d5de40f1e7cf1faab2f6d95d"
cf-cache-status: HIT
age: 729642
expires: Mon, 18 Dec 2023 23:12:32 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 77bb957a2b32b506-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ads.themoneytizer.com/s/requestform.js?siteId=52788&formatId=6
185.76.9.26200 OK 0 B URL HTTP/2 ads.themoneytizer.com/s/requestform.js?siteId=52788&formatId=6
IP 185.76.9.26:0
ASN #60068 Datacamp Limited
GET /s/requestform.js?siteId=52788&formatId=6 HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=604800
x-accel-expires: @1671788202
server: CDN77-Turbo
x-77-nzt: AblMCRSNOl//NmIDAA
x-77-nzt-ray: af585630221e58a7609e9f6372723e1d
x-cache: HIT
x-age: 221750
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=147&r=2&j=criteoCallback
178.250.2.146200 OK 0 B URL HTTP/2 gum.criteo.com/sync?c=147&r=2&j=criteoCallback
IP 178.250.2.146:0
GET /sync?c=147&r=2&j=criteoCallback HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:33 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
server-processing-duration-in-ticks: 692508
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/rtb/social/facebook/1-1/css/animate.css
172.64.108.13200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/notifications/rtb/social/facebook/1-1/css/animate.css
IP 172.64.108.13:0
GET /sb/notifications/rtb/social/facebook/1-1/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:35 GMT
content-type: text/css
last-modified: Tue, 24 May 2022 12:11:15 GMT
etag: W/"628ccb63-1358d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 129530
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UBO3zQLDP26tD7IcZWPkkeBsQaMHsTnb%2B1kdYfHgWtIfJmtvbP6BJJGVyHvtA2yrbKjF4JzJXdbyFLdOnSV3XHK%2BkRWF%2BsmF6q7K%2BfPaD1wT%2F8sxrzITdkZrvapsssuN3DfPWB0K6Dhq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77bb958eefdc778f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
m.imagenesderopaparaperros.com/zshorte_theme/css/materialdesignicons.min.css
172.67.168.79200 OK 0 B URL HTTP/2 m.imagenesderopaparaperros.com/zshorte_theme/css/materialdesignicons.min.css
IP 172.67.168.79:0
GET /zshorte_theme/css/materialdesignicons.min.css HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/klGy
Cookie: lang=en_US; AppSession=fd7a07fc56237d300b0d56ca697dd616; csrfToken=40240b3fe89d563ffaf066e36ca883f1ba0a2691526e0765b9d932939bcf6987e25a3630af2ee0c2b50b59a683c893f49411cab17c2ae97eb73fd68291d1d486
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: text/css
x-frame-options: SAMEORIGIN
last-modified: Sat, 20 Jun 2020 00:08:10 GMT
cache-control: max-age=2592000
expires: Fri, 23 Dec 2022 11:03:08 GMT
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-served-by: m.imagenesderopaparaperros.com
cf-cache-status: HIT
age: 2203764
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Se8ZgWAOMs%2Frx3A13eZbiIV77lFOBCPlXxGj%2Fax05hZ9RsoX6NynHhKK3A%2BZ8l%2F8mEvlgqFkSErseDTJZ%2FGr04Vuc6iC6Hm9isDdyRMyGKPGs7yVCt4KNwOUw0Lg10o6Q4qY%2BuySASTc9BxrFRJBIKc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77bb9579ea40fac8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
m.imagenesderopaparaperros.com/zshorte_theme/images/illustrator/Marketing_strategy_SVG.svg
172.67.168.79200 OK 0 B URL HTTP/2 m.imagenesderopaparaperros.com/zshorte_theme/images/illustrator/Marketing_strategy_SVG.svg
IP 172.67.168.79:0
GET /zshorte_theme/images/illustrator/Marketing_strategy_SVG.svg HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/klGy
Cookie: lang=en_US; AppSession=fd7a07fc56237d300b0d56ca697dd616; csrfToken=40240b3fe89d563ffaf066e36ca883f1ba0a2691526e0765b9d932939bcf6987e25a3630af2ee0c2b50b59a683c893f49411cab17c2ae97eb73fd68291d1d486
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: image/svg+xml
x-frame-options: SAMEORIGIN
last-modified: Sat, 20 Jun 2020 00:12:33 GMT
cache-control: max-age=31536000
expires: Mon, 23 Oct 2023 21:46:31 GMT
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 4843561
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z3qFHR52hQI9mjEx13%2BHS2%2BvES4Zmr9LDt%2FEhxq4isPrtQw2vU52fawzE1QwdEuJ7Mm0hHU%2BOk%2FKuWmi6oOn9Ijp0mI4mJgN%2Fy3zLRgqaOqhLzoVLCxRDfi7ef0iqKr4UZnuaoIIK73n2%2BJLjYhWwlE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77bb957a0a5cfac8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
wt.rqtrk.eu/6f4bcf39-b286-4d76-b513-ffb5541d5167-trk.js
141.95.97.230200 OK 0 B URL HTTP/2 wt.rqtrk.eu/6f4bcf39-b286-4d76-b513-ffb5541d5167-trk.js
IP 141.95.97.230:0
GET /6f4bcf39-b286-4d76-b513-ffb5541d5167-trk.js HTTP/1.1
Host: wt.rqtrk.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: istio-envoy
date: Sun, 18 Dec 2022 23:12:33 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding,Accept-Encoding
last-modified: Tue, 13 Dec 2022 14:20:55 GMT
etag: W/"82fef41533854eb9348a85e5baf8c3af"
x-cache: Hit from cloudfront
via: 1.1 96c1c36adc76f99239fd3220e5be7e6a.cloudfront.net (CloudFront)
x-amz-cf-pop: FRA2-C2
x-amz-cf-id: W3_FsArLPnueNpPG1HYLr_P0ifz6Ca6VUIGPWPL_SGKZZLhjVVxxZg==
age: 36296
expires: Mon, 19 Dec 2022 23:12:33 GMT
cache-control: max-age=86400,public
content-encoding: gzip
x-envoy-upstream-service-time: 0
X-Firefox-Spdy: h2
m.imagenesderopaparaperros.com/zshorte_theme/js/jquery.magnific-popup.min.js
172.67.168.79200 OK 0 B URL HTTP/2 m.imagenesderopaparaperros.com/zshorte_theme/js/jquery.magnific-popup.min.js
IP 172.67.168.79:0
GET /zshorte_theme/js/jquery.magnific-popup.min.js HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/klGy
Cookie: lang=en_US; AppSession=fd7a07fc56237d300b0d56ca697dd616; csrfToken=40240b3fe89d563ffaf066e36ca883f1ba0a2691526e0765b9d932939bcf6987e25a3630af2ee0c2b50b59a683c893f49411cab17c2ae97eb73fd68291d1d486
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: application/javascript
x-frame-options: SAMEORIGIN
last-modified: Sat, 20 Jun 2020 00:08:45 GMT
cache-control: max-age=2592000
expires: Sat, 31 Dec 2022 20:55:24 GMT
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-served-by: m.imagenesderopaparaperros.com
cf-cache-status: HIT
age: 1477027
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jPn2fNG%2BrjJ%2F%2FCEiBckvaEKITqZjsuDA0vvucqbSWKbn8TNRn1ZBDFvZqJlmnzCw274gtUNNo1p2chJyOzfoNHqaRIAJszKQH61JIFi4I7SNKx4mUaIgZl3WpXWwumRhadNE7geLWvop7%2FQlmuYkVQg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77bb957a1a72fac8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
adx.adform.net/adx/?mid=970530&url=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&t=2
37.157.4.41200 OK 0 B URL HTTP/2 adx.adform.net/adx/?mid=970530&url=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&t=2
IP 37.157.4.41:0
GET /adx/?mid=970530&url=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy&t=2 HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:39 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET,OPTIONS
access-control-allow-origin: https://m.imagenesderopaparaperros.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
cmp.quantcast.com/choice/6Fv0cGNfc_bw8/www.themoneytizer.com/choice.js
143.204.55.76200 OK 0 B URL HTTP/2 cmp.quantcast.com/choice/6Fv0cGNfc_bw8/www.themoneytizer.com/choice.js
IP 143.204.55.76:0
GET /choice/6Fv0cGNfc_bw8/www.themoneytizer.com/choice.js HTTP/1.1
Host: cmp.quantcast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 28 Jun 2022 13:53:56 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
content-encoding: br
date: Sun, 18 Dec 2022 23:12:32 GMT
cache-control: max-age=3600
etag: W/"c53bd785b1ee57b613221019d7d72626"
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: CzrvD2K_PXLArNVueXjkWWJS8yD1qaKVSold72-jWpNjyALnaxXxgA==
age: 42
X-Firefox-Spdy: h2
rules.quantcount.com/rules-p-6Fv0cGNfc_bw8.js
54.230.111.4200 OK 0 B URL HTTP/2 rules.quantcount.com/rules-p-6Fv0cGNfc_bw8.js
IP 54.230.111.4:0
GET /rules-p-6Fv0cGNfc_bw8.js HTTP/1.1
Host: rules.quantcount.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 13 Oct 2022 22:35:53 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: gzip
date: Sun, 18 Dec 2022 22:43:59 GMT
cache-control: max-age=3600
etag: W/"1f431dc94c1f033d6666f0fe637e2d7b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: aJJByQSRdVYye_3KuL9IhLFd5TxT-BY42hOW9dQioR8k89QWh2A7Eg==
age: 1715
X-Firefox-Spdy: h2
cmp.quantcast.com/GVL-v2/vendor-list-trimmed-v1.json
143.204.55.76200 OK 0 B URL HTTP/2 cmp.quantcast.com/GVL-v2/vendor-list-trimmed-v1.json
IP 143.204.55.76:0
GET /GVL-v2/vendor-list-trimmed-v1.json HTTP/1.1
Host: cmp.quantcast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
access-control-max-age: 3000
cache-control: max-age=172800
date: Sun, 18 Dec 2022 03:00:38 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-credentials: true
last-modified: Sun, 18 Dec 2022 03:00:33 GMT
etag: W/"e7d8b0f974119caf720679ec234db47d"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: OXSbxDkyE7BMUH7A5fCaSee6syInGQhz8bLxprP1ItV4ITEgFeempQ==
age: 72717
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/rtb/social/facebook/1-1/js/script.js
172.64.108.13200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/notifications/rtb/social/facebook/1-1/js/script.js
IP 172.64.108.13:0
GET /sb/notifications/rtb/social/facebook/1-1/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:36 GMT
content-type: application/javascript
last-modified: Tue, 24 May 2022 12:11:21 GMT
etag: W/"628ccb69-322"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tB%2FI8e5rux8yeMEW0hxKDeUUEH7hrOyW3nG1SE23DIaQO4UvbL3dIlvkLii0MIS5ZO1ueyhQeK5q6hWK9%2BUFm3sWhX1BSqbbX5GtCaif0dMqikQ0LW9JG9wiwXhbh6wY0B4JXvr51RZ3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77bb958fe939778f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/rtb/social/facebook/1-1/img/close.svg
172.64.108.13200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/notifications/rtb/social/facebook/1-1/img/close.svg
IP 172.64.108.13:0
GET /sb/notifications/rtb/social/facebook/1-1/img/close.svg HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:35 GMT
content-type: image/svg+xml
last-modified: Tue, 24 May 2022 12:11:20 GMT
etag: W/"628ccb68-52a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 2884786
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QctNN0qvRSJ8o5wAcoTLNp5lp8jApqcbZbKQ4nF2O21L1yKMEbMyWazasD8mVb7%2Bfg%2FqL%2BOQKMK%2FNNccIClHymKts4X2Z7gvwztklp3dGZKHmSqE%2F04KVLoIEN0vok3g2SZ5Gu0lykqw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77bb958effe7778f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
m.imagenesderopaparaperros.com/zshorte_theme/css/style-dark.css
172.67.168.79200 OK 0 B URL HTTP/2 m.imagenesderopaparaperros.com/zshorte_theme/css/style-dark.css
IP 172.67.168.79:0
GET /zshorte_theme/css/style-dark.css HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/klGy
Cookie: lang=en_US; AppSession=fd7a07fc56237d300b0d56ca697dd616; csrfToken=40240b3fe89d563ffaf066e36ca883f1ba0a2691526e0765b9d932939bcf6987e25a3630af2ee0c2b50b59a683c893f49411cab17c2ae97eb73fd68291d1d486
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: text/css
x-frame-options: SAMEORIGIN
last-modified: Sat, 20 Jun 2020 00:08:10 GMT
cache-control: max-age=2592000
expires: Fri, 23 Dec 2022 11:03:08 GMT
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 2203764
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Fc229VHSePIzBiiuHwAIRkqy7w9SICr2bDolbbi3ju4LsQQK%2FOnpR1CTsxhWDZB%2BDW4z3FiLVBgvim226LzluvIHzDdQ37hc3dIICfw0xBgh%2Bx4aRJitvHnhnzL4eAB4PVbcSs756sFirYOcoyD80t0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77bb9579ea49fac8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ads.themoneytizer.com/s/requestform.js?siteId=52788&formatId=19
185.76.9.26200 OK 0 B URL HTTP/2 ads.themoneytizer.com/s/requestform.js?siteId=52788&formatId=19
IP 185.76.9.26:0
ASN #60068 Datacamp Limited
GET /s/requestform.js?siteId=52788&formatId=19 HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=604800
x-accel-expires: @1671788205
server: CDN77-Turbo
x-77-nzt: AblMCRQxoa3/M2IDAA
x-77-nzt-ray: af585630221e58a7609e9f638d3e881d
x-cache: HIT
x-age: 221747
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
m.imagenesderopaparaperros.com/zshorte_theme/js/bootstrap.bundle.min.js
172.67.168.79200 OK 0 B URL HTTP/2 m.imagenesderopaparaperros.com/zshorte_theme/js/bootstrap.bundle.min.js
IP 172.67.168.79:0
GET /zshorte_theme/js/bootstrap.bundle.min.js HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/klGy
Cookie: lang=en_US; AppSession=fd7a07fc56237d300b0d56ca697dd616; csrfToken=40240b3fe89d563ffaf066e36ca883f1ba0a2691526e0765b9d932939bcf6987e25a3630af2ee0c2b50b59a683c893f49411cab17c2ae97eb73fd68291d1d486
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: application/javascript
x-frame-options: SAMEORIGIN
last-modified: Sat, 20 Jun 2020 00:08:42 GMT
cache-control: max-age=2592000
expires: Sat, 31 Dec 2022 20:55:25 GMT
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-served-by: m.imagenesderopaparaperros.com
cf-cache-status: HIT
age: 1477027
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yp3LC0H0%2FI%2BydSNJoT76%2BCTM8qdk8B10nfePU%2BsFR4JV4tyk%2BazY1E3qXWJIV4rbZ3hDUVAon1f1GcrtKqsWzNwcRb32TxnF0k03jmji2Xl8UW2mJTlt6HCMbJJxEm67F1RM4gBfFzoZPFdxrwRbDSk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77bb957a1a68fac8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
m.imagenesderopaparaperros.com/zshorte_theme/js/magnific.init.js
172.67.168.79200 OK 0 B URL HTTP/2 m.imagenesderopaparaperros.com/zshorte_theme/js/magnific.init.js
IP 172.67.168.79:0
GET /zshorte_theme/js/magnific.init.js HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/klGy
Cookie: lang=en_US; AppSession=fd7a07fc56237d300b0d56ca697dd616; csrfToken=40240b3fe89d563ffaf066e36ca883f1ba0a2691526e0765b9d932939bcf6987e25a3630af2ee0c2b50b59a683c893f49411cab17c2ae97eb73fd68291d1d486
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: application/javascript
x-frame-options: SAMEORIGIN
last-modified: Sat, 20 Jun 2020 00:08:45 GMT
cache-control: max-age=2592000
expires: Fri, 23 Dec 2022 11:03:28 GMT
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-served-by: m.imagenesderopaparaperros.com
cf-cache-status: HIT
age: 2203744
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Bsb2W%2FIiCaG%2FYHtppDIJF59GXK4f%2FZp7Ngus88uK5DNnwPAt4dxUpy0drrjzRgPUazgyJbz4HP7vta8Ps%2FtqvFmkrL7ICvwga1J0%2F%2FooY%2FykebMPPYljTGZA%2FfaxG29HAezDObwSFROLrdcJyg%2FEh2c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77bb957a2a74fac8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
m.imagenesderopaparaperros.com/zshorte_theme/js/aos.js
172.67.168.79200 OK 0 B URL HTTP/2 m.imagenesderopaparaperros.com/zshorte_theme/js/aos.js
IP 172.67.168.79:0
GET /zshorte_theme/js/aos.js HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/klGy
Cookie: lang=en_US; AppSession=fd7a07fc56237d300b0d56ca697dd616; csrfToken=40240b3fe89d563ffaf066e36ca883f1ba0a2691526e0765b9d932939bcf6987e25a3630af2ee0c2b50b59a683c893f49411cab17c2ae97eb73fd68291d1d486
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: application/javascript
x-frame-options: SAMEORIGIN
last-modified: Sat, 20 Jun 2020 00:08:40 GMT
cache-control: max-age=2592000
expires: Wed, 04 Jan 2023 23:37:16 GMT
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1121716
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oJRzXm7g4k%2FrYDSDiNUvI7SOlkvRTwJiFxzjw2OF4LuRholYAG8yq%2BqRD1LAX42P3PJ1VileZW2BrJIXWMrg1K92zNGEaeBcPHnZAT%2BP1O%2B4d%2FJyEm90F2WtmIDPXPNhXSvy4QLkeVLTTDqYHFMMfsQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77bb957a2a77fac8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
zshorte.net/js/app.js?ver=6.4.0
104.21.89.60200 OK 0 B URL HTTP/2 zshorte.net/js/app.js?ver=6.4.0
IP 104.21.89.60:0
GET /js/app.js?ver=6.4.0 HTTP/1.1
Host: zshorte.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: application/javascript
cache-control: max-age=2592000
cf-bgj: minify
cf-polished: origSize=30407
expires: Thu, 22 Dec 2022 22:54:39 GMT
last-modified: Sat, 20 Jun 2020 00:07:31 GMT
vary: Accept-Encoding,User-Agent
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 2247473
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FyQfCL5XQRGAiukb90g3qb0hH%2BJ13MrZj19K5rrrwV38ZD4q12qxgh%2BnScgVlHPiQj1fflo0PHMgD68rtaM2fzlWduOe01g1HYSrbjfEkdj27OThE5JWPQT03vqGQg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77bb957a7a56b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ads.themoneytizer.com/s/requestform.js?siteId=52788&formatId=1
185.76.9.26200 OK 0 B URL HTTP/2 ads.themoneytizer.com/s/requestform.js?siteId=52788&formatId=1
IP 185.76.9.26:0
ASN #60068 Datacamp Limited
GET /s/requestform.js?siteId=52788&formatId=1 HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=604800
x-accel-expires: @1671788201
server: CDN77-Turbo
x-77-nzt: AblMCRT90xX/N2IDAA
x-77-nzt-ray: af585630221e58a7609e9f638b3e031e
x-cache: HIT
x-age: 221751
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/rtb/social/facebook/1-1/js/jquery-3.2.1.min.js
172.64.108.13200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/notifications/rtb/social/facebook/1-1/js/jquery-3.2.1.min.js
IP 172.64.108.13:0
GET /sb/notifications/rtb/social/facebook/1-1/js/jquery-3.2.1.min.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:35 GMT
content-type: application/javascript
last-modified: Tue, 24 May 2022 12:11:21 GMT
etag: W/"628ccb69-1fa27"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 2884785
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KZkx0HmRHdAqOL10aR4rMhiHJao9vm2JYnwWGKZIRq%2Fhqla9Rg%2B7V8XdGkXbONuadNm1lTaV1O9AYkVfbjx3MDtaZWiP%2Bthxzmcvmglvr7MGBgYPaTEB4jot0OMPqMC3ZT5kyqh3T7IL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77bb958f0ff0778f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
adx.adform.net/adx/?mid=970530&t=2&url=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy
37.157.4.41200 OK 0 B URL HTTP/2 adx.adform.net/adx/?mid=970530&t=2&url=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy
IP 37.157.4.41:0
GET /adx/?mid=970530&t=2&url=https%3A%2F%2Fm.imagenesderopaparaperros.com%2FklGy HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 23:12:36 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET,OPTIONS
access-control-allow-origin: https://m.imagenesderopaparaperros.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
m.imagenesderopaparaperros.com/js/ads.js
172.67.168.79200 OK 0 B URL HTTP/2 m.imagenesderopaparaperros.com/js/ads.js
IP 172.67.168.79:0
GET /js/ads.js HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/klGy
Cookie: lang=en_US; AppSession=fd7a07fc56237d300b0d56ca697dd616; csrfToken=40240b3fe89d563ffaf066e36ca883f1ba0a2691526e0765b9d932939bcf6987e25a3630af2ee0c2b50b59a683c893f49411cab17c2ae97eb73fd68291d1d486
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: application/javascript
x-frame-options: SAMEORIGIN
last-modified: Sat, 20 Jun 2020 00:07:31 GMT
cache-control: max-age=2592000
expires: Wed, 04 Jan 2023 23:37:16 GMT
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1121716
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Fq1RC4uIescYdxNUCK9OtUXgf3d2Rpt1WZBLq%2F70wMaWE9ZfsSQ%2FET98LLnO3Na%2BTqtgyAnU%2FUeNI2m9pR4DtEc6B1%2BEuaeawMTPUvb4TcmiMzUbS2MrvoosfBnnWxT3kGwi5JKoFC6F3ZPHlufNirM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77bb957a1a60fac8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
m.imagenesderopaparaperros.com/vendor/owl/owl.carousel.min.js?ver=6.4.0
172.67.168.79200 OK 0 B URL HTTP/2 m.imagenesderopaparaperros.com/vendor/owl/owl.carousel.min.js?ver=6.4.0
IP 172.67.168.79:0
GET /vendor/owl/owl.carousel.min.js?ver=6.4.0 HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/klGy
Cookie: lang=en_US; AppSession=fd7a07fc56237d300b0d56ca697dd616; csrfToken=40240b3fe89d563ffaf066e36ca883f1ba0a2691526e0765b9d932939bcf6987e25a3630af2ee0c2b50b59a683c893f49411cab17c2ae97eb73fd68291d1d486
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: application/javascript
x-frame-options: SAMEORIGIN
last-modified: Sat, 20 Jun 2020 00:08:03 GMT
cache-control: max-age=2592000
expires: Fri, 23 Dec 2022 11:03:24 GMT
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 2203748
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r2sTPILxTmX0M3Qh83gjZM%2FvR86QBuZZHdTNzbnWs4mjglOXVRarSCHnhEw9PxhoEMtNCXwpCKyAcvJeoTpKyKd1AITLielOYjG9xDwJW2vI8yw6y%2BtWCQFOe09Kn9gn4XisQ0vCwOPpOHSP9UZ1XaE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77bb957a1a64fac8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
m.imagenesderopaparaperros.com/zshorte_theme/js/app.js
172.67.168.79200 OK 0 B URL HTTP/2 m.imagenesderopaparaperros.com/zshorte_theme/js/app.js
IP 172.67.168.79:0
GET /zshorte_theme/js/app.js HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/klGy
Cookie: lang=en_US; AppSession=fd7a07fc56237d300b0d56ca697dd616; csrfToken=40240b3fe89d563ffaf066e36ca883f1ba0a2691526e0765b9d932939bcf6987e25a3630af2ee0c2b50b59a683c893f49411cab17c2ae97eb73fd68291d1d486
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: application/javascript
x-frame-options: SAMEORIGIN
last-modified: Sat, 20 Jun 2020 00:08:40 GMT
cache-control: max-age=2592000
expires: Mon, 16 Jan 2023 01:47:36 GMT
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-served-by: m.imagenesderopaparaperros.com
cf-cache-status: HIT
age: 163496
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2Zb58zuLmUluf5EgU2HYxluj2C9eRyywG%2F18%2B0p8EtdCkWt6nf2FCc%2BcJ1t9lnFU5%2B4fsPiNYZ6KvihmznvR6R%2FlUnxxzccp%2BFgH3Kn4K67R%2FWpXw0vAla7FOr1dojAR5Pu8Sf1tcKLhWesBsYqBNGk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77bb957a3a8afac8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ads.themoneytizer.com/s/gen.js?type=19
185.76.9.26200 OK 0 B URL HTTP/2 ads.themoneytizer.com/s/gen.js?type=19
IP 185.76.9.26:0
ASN #60068 Datacamp Limited
GET /s/gen.js?type=19 HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 23:12:32 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=604800
x-accel-expires: @1671771787
server: CDN77-Turbo
x-77-nzt: AblMCRRbjrv/VaIDAA
x-77-nzt-ray: af585630221e58a7609e9f630a2e821d
x-cache: HIT
x-age: 238165
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Nunito:300,400,600,700&display=swap
142.250.74.74200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Nunito:300,400,600,700&display=swap
IP 142.250.74.74:0
GET /css?family=Nunito:300,400,600,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 18 Dec 2022 23:12:32 GMT
date: Sun, 18 Dec 2022 23:12:32 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2