firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sat, 24 Sep 2022 19:05:44 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 95b26b715ee81beaff56d7e9f185da2e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR3-C2
X-Amz-Cf-Id: MsSEU5KCsvnRwaAzqCuai2W7ci-fkazj8jzh8fTBaf0uP4YgI66EwA==
Age: 2780
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 09a973de929ab7452edc342c780d3668
3f14f6e0a36f76863c0aea6fb561c266404a7ea3
e82ca5f310e37267fbf792427747e65c2bb35e684d3f629c0aa302f688bc4f80
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E82CA5F310E37267FBF792427747E65C2BB35E684D3F629C0AA302F688BC4F80"
Last-Modified: Fri, 23 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18345
Expires: Sun, 25 Sep 2022 00:57:49 GMT
Date: Sat, 24 Sep 2022 19:52:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b3e81b5bd7bd8e12288a8159e44ceb3f
977945964ffcbf49ac78f840db9da822c50c82f0
4721814da286852318f7ebf9857bd4bf01f0beea2c9eb7ddb9f290e3fa472232
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4721814DA286852318F7EBF9857BD4BF01F0BEEA2C9EB7DDB9F290E3FA472232"
Last-Modified: Fri, 23 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16521
Expires: Sun, 25 Sep 2022 00:27:25 GMT
Date: Sat, 24 Sep 2022 19:52:04 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Pq8XWkeAymGZ+TxqlnQhEd+04BY95o+X7xhhV1PMelVj6Q+m7kwVy94AVWdLwom8jiYdTestoxU=
x-amz-request-id: 4BCDM7D0FKYYGEC3
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 24 Sep 2022 19:47:43 GMT
age: 261
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
etag: "6113f8408c59aebe188d6af273b90743"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 24 Sep 2022 19:52:04 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Expires, Alert, Content-Length, ETag, Cache-Control, Content-Type, Backoff, Pragma, Last-Modified
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Sat, 24 Sep 2022 19:20:46 GMT
Expires: Sat, 24 Sep 2022 19:53:07 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 f5f83db1a84a10ea220332d32f95e38a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR3-C2
X-Amz-Cf-Id: CckfUEKfBLh4etHXh2sQM4v3R2D11ZtEJCOAsvrJHvPuuPB37AblvA==
Age: 1879
ocsp.digicert.com/
200 OK 471 B IP
Hash a7809de115ea73f8b61f3d20a9978493
01fc65a2b694d7aadd5204d21801e87b2b55b73e
72692486033feeb149424c59576c6c75b17228dfc89b4c369d2e17cc4bff3d52
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5628
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 19:52:05 GMT
Last-Modified: Sat, 24 Sep 2022 18:18:17 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
cdn.fuseplatform.net/publift/tags/2/2361/fuse.js
200 OK 47 kB URL HTTP/2 cdn.fuseplatform.net/publift/tags/2/2361/fuse.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash c8d3b5b2d8a2304559a2875f677fb3ad
57c07726631bd058004cdc41a17bae8dfe9aa6ce
ae240379d6798caa31835f44d5b40ac9471c8a93d33480fcadd6a5997b16dcc3
GET /publift/tags/2/2361/fuse.js HTTP/1.1
Host: cdn.fuseplatform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "c8d3b5b2d8a2304559a2875f677fb3ad:1661485351.516058"
last-modified: Fri, 26 Aug 2022 03:42:31 GMT
server: AkamaiNetStorage
content-length: 47392
content-encoding: gzip
cache-control: max-age=1800
expires: Sat, 24 Sep 2022 20:22:05 GMT
date: Sat, 24 Sep 2022 19:52:05 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f81d321c15c87e7147d792d08ebb7513
47f30d4ca38e6753a393965219321b0394ebb597
390ae5f5435d3f8c8b7f1fa8d7e2a3ebf55ea5dbe98aa3528dd562df4c295753
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 19:52:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-WNS8JR4
200 OK 42 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-WNS8JR4
IP
File type ASCII text, with very long lines (9481)
Hash 8527f2d86538b595c5dedc337958f3bf
88227943a7124966e767dc8ab7b0503c4e03c46e
3b3d232b3e4a35c60df520243650c2fb9357000b2499dafd07ac00aa1b3f1d6a
GET /gtm.js?id=GTM-WNS8JR4 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 24 Sep 2022 19:52:05 GMT
expires: Sat, 24 Sep 2022 19:52:05 GMT
cache-control: private, max-age=900
last-modified: Sat, 24 Sep 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42398
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 19 kB IP
File type gzip compressed data, from Unix\012- data
Hash 7c384d60ff0c4c793836cef719479e5a
3db1bd959b29f945a6d5e6e0313a2432384496c1
dbe0b8feee1de390cf0627d6e4196ef165e0819cbd8d1a42fd0107d388c97def
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 19:52:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.fuseplatform.net/prebid/prebid-8fdb6e27182e91d9a1f45bbd4265a02f.js
200 OK 74 kB URL HTTP/2 cdn.fuseplatform.net/prebid/prebid-8fdb6e27182e91d9a1f45bbd4265a02f.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65423)
Hash dbefad12d04f2752270052c8b22d3a4c
e3ae3d1622012549fdf9d48690efa888bdb8c4c0
0590f56c5e58b59c359aa271fe979dda42f6bde078a37ccf990aabaf3f3d6017
GET /prebid/prebid-8fdb6e27182e91d9a1f45bbd4265a02f.js HTTP/1.1
Host: cdn.fuseplatform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "dbefad12d04f2752270052c8b22d3a4c:1661485351.581595"
last-modified: Fri, 26 Aug 2022 03:42:31 GMT
server: AkamaiNetStorage
content-length: 73833
content-encoding: gzip
cache-control: max-age=86400000
expires: Fri, 20 Jun 2025 19:52:05 GMT
date: Sat, 24 Sep 2022 19:52:05 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.fuseplatform.net/telemetry/noconsent?v=1&ttm=1664049124185&cookie=true&res=1280x1024&device=desktop&browser=firefox&fuuid=496d396b-9ec9-5397-a99e-f0273ae303a5&fid=2361&pubid=5&url=https%3A%2F%2Fwordcounter.icu%2FyX7w2uye&sid=0a8994cc9c1dfe0744b5&srate=100&adserver=gpt&etm=1101&e=fuse-load
200 OK 1 B URL HTTP/2 cdn.fuseplatform.net/telemetry/noconsent?v=1&ttm=1664049124185&cookie=true&res=1280x1024&device=desktop&browser=firefox&fuuid=496d396b-9ec9-5397-a99e-f0273ae303a5&fid=2361&pubid=5&url=https%3A%2F%2Fwordcounter.icu%2FyX7w2uye&sid=0a8994cc9c1dfe0744b5&srate=100&adserver=gpt&etm=1101&e=fuse-load
IP
ASN #20940 Akamai International B.V.
File type very short file (no magic)
Hash 9dd4e461268c8034f5c8564e155c67a6
11f6ad8ec52a2984abaafd7c3b516503785c2072
2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881
GET /telemetry/noconsent?v=1&ttm=1664049124185&cookie=true&res=1280x1024&device=desktop&browser=firefox&fuuid=496d396b-9ec9-5397-a99e-f0273ae303a5&fid=2361&pubid=5&url=https%3A%2F%2Fwordcounter.icu%2FyX7w2uye&sid=0a8994cc9c1dfe0744b5&srate=100&adserver=gpt&etm=1101&e=fuse-load HTTP/1.1
Host: cdn.fuseplatform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-length: 1
content-type: text/plain
etag: "9dd4e461268c8034f5c8564e155c67a6:1660131111.248793"
last-modified: Wed, 10 Aug 2022 11:31:51 GMT
server: AkamaiNetStorage
cache-control: max-age=1800
expires: Sat, 24 Sep 2022 20:22:05 GMT
date: Sat, 24 Sep 2022 19:52:05 GMT
access-control-allow-origin: https://wordcounter.icu
vary: Origin
X-Firefox-Spdy: h2
nc.pubpowerplatform.io/p/vld.json?page_url=https%3A%2F%2Fwordcounter.icu%2FyX7w2uye&mtk=328a11e1-4aee-44c2-a744-020c0f0f2d12&ctt=1658284906
200 OK 13 B URL HTTP/2 nc.pubpowerplatform.io/p/vld.json?page_url=https%3A%2F%2Fwordcounter.icu%2FyX7w2uye&mtk=328a11e1-4aee-44c2-a744-020c0f0f2d12&ctt=1658284906
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c7babbbdeca820a7e691913c68428f1c
873007e1c38b8fbea1d265afa40bb15ad6cc4fb5
76aacba4eece592e3a3281e69a5762c6f10b527a29fbba5eae5ac091f47ae554
GET /p/vld.json?page_url=https%3A%2F%2Fwordcounter.icu%2FyX7w2uye&mtk=328a11e1-4aee-44c2-a744-020c0f0f2d12&ctt=1658284906 HTTP/1.1
Host: nc.pubpowerplatform.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Sep 2022 19:52:05 GMT
content-type: application/json
content-length: 13
cf-ray: 74fe0ef978edb50c-OSL
access-control-allow-origin: https://wordcounter.icu
cache-control: max-age=31536000
cf-cache-status: DYNAMIC
access-control-allow-credentials: true
x-robots-tag: noindex, nofollow, noarchive, nosnippet
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: AETsJRn1+ldxGZm9lAetuA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: z1WDeperR3QrhLi++CsGmZ4eO9A=
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 6e47fc954cd5854578185c37d42bbc71
2bcedc5f2d2853bfdd754562062aa56fb1f4c207
e8f6c3ed8afdb35940eaa3b728a69eef027c13e91e22760b574b632e3c879948
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Sat, 24 Sep 2022 19:52:05 GMT
Server: ECS (dcb/7FA3)
X-Cache: Miss from cloudfront
Via: 1.1 1de7ecec44e546a1e71d662ee3f2ba42.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR3-C2
X-Amz-Cf-Id: -DsSp-XXns2x32xkr_2DDYUFwprt_Yg1HHpWgItBgpqcIhb-V4pTcA==
disploot.com/c/qppl0tpb9m5udfroatowj.json
200 OK 1.5 kB URL HTTP/2 disploot.com/c/qppl0tpb9m5udfroatowj.json
IP
File type gzip compressed data, from Unix\012- data
Hash c2a99a7c35c5ef6d9639763843c409af
8ba947df60a48ed70578c795ea4892f875a8000e
b3f7a096dedf154fe443f079da394fb12dbda0dcc04e961c95486469276fa689
GET /c/qppl0tpb9m5udfroatowj.json HTTP/1.1
Host: disploot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wordcounter.icu/
Origin: https://wordcounter.icu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1430
last-modified: Wed, 20 Apr 2022 13:41:33 GMT
x-amz-version-id: 1amiWC7NKTyL.Kqee2l58p7GbByhkQay
accept-ranges: bytes
server: AmazonS3
date: Sat, 24 Sep 2022 08:02:59 GMT
etag: "5e7f55c98823bf93bf7adf620fb49902"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 62dd378699af6477e51080ae0ea0f9f0.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR3-C2
x-amz-cf-id: uuR1fvzyjAxTqChWk28JbZlt1yMnN0ndxh6OeBEQc4K_vfhH8actUw==
age: 42547
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 80bf008db0542647e968cf20c6a2b357
76ef4da6ea197b10ff1913ca7dbc35f8efa338df
58f7acda993c2cc5e56c2c4b1117a8e53c3d24002576d88c35d0c1f31a0d3386
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "58F7ACDA993C2CC5E56C2C4B1117A8E53C3D24002576D88C35D0C1F31A0D3386"
Last-Modified: Fri, 23 Sep 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sun, 25 Sep 2022 01:52:05 GMT
Date: Sat, 24 Sep 2022 19:52:05 GMT
Connection: keep-alive
disploot.com/r/p.html?f=iuyomqqm&e=1433371698451
200 OK 2.5 kB URL HTTP/2 disploot.com/r/p.html?f=iuyomqqm&e=1433371698451
IP
File type HTML document, ASCII text
Hash b5046ea34cc9dcb337ad48e1c11cd4af
4f8e5f7e1064618f6917aef684fdd88677240e08
4e39bc582731439b2054cce61bec9980987e078867d724e05847c35cdf932eb6
GET /r/p.html?f=iuyomqqm&e=1433371698451 HTTP/1.1
Host: disploot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
date: Sat, 24 Sep 2022 04:50:25 GMT
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
x-cache: Hit from cloudfront
via: 1.1 02b64e603ed38c4fa65e6d087701f8de.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR3-C2
x-amz-cf-id: d9mKJOhwEtf7F1SOeGCf-zCnGXSgQFg8jvik0v2dACIUgEiyc13lOQ==
age: 54101
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
stickervillain.com/f4b1ca9d58a479bcfd46c3e000d1beb0/invoke.js
200 OK 501 B URL HTTP/1.1 stickervillain.com/f4b1ca9d58a479bcfd46c3e000d1beb0/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (1020), with no line terminators
Hash 1cfc837996a4f6ef348a35ec6d21eda1
81c83fe439d58f4f88388c66d5c949fbc2b51db3
df542964f263d31a3da26c07ba70dfdd6a2d38910af9bc61339d9f72d0302900
GET /f4b1ca9d58a479bcfd46c3e000d1beb0/invoke.js HTTP/1.1
Host: stickervillain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sat, 24 Sep 2022 19:52:05 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 2a8449cae648dbcd744859679e3f23ed
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
securepubads.g.doubleclick.net/tag/js/gpt.js
200 OK 28 kB URL HTTP/2 securepubads.g.doubleclick.net/tag/js/gpt.js
IP
File type ASCII text, with very long lines (45162)
Hash fb047538518cf301949a80b9fbe98fa2
d68768328bac0ce622306495ae62b2384d4e7cab
0f26280d02de1399428a54e53eaf87f9446e67d04da2dc41039d0bb905e9b7b9
GET /tag/js/gpt.js HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 27832
date: Sat, 24 Sep 2022 19:52:05 GMT
expires: Sat, 24 Sep 2022 19:52:05 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1344 / 674 of 1000 / last-modified: 1663970834"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
disploot.com/r/p.html?f=ohsiine&e=1433371698451
200 OK 2.5 kB URL HTTP/2 disploot.com/r/p.html?f=ohsiine&e=1433371698451
IP
File type HTML document, ASCII text
Hash 2bf90ce78afcf90b3cd8b0238f625ea6
8eb81b68e0575155fc11e911722a522451797ccd
cd41042ef304c55a905f87213135cb2530d867a7b8d7d8dd0df48be24a2ee5a0
GET /r/p.html?f=ohsiine&e=1433371698451 HTTP/1.1
Host: disploot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
date: Sat, 24 Sep 2022 04:50:25 GMT
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
x-cache: Hit from cloudfront
via: 1.1 02b64e603ed38c4fa65e6d087701f8de.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR3-C2
x-amz-cf-id: 3uIHXa5n3IXZNXDJaBktD8yS7X-ykjwEWg0Vi1HrzjsLQ482rYj4Ag==
age: 54101
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 634048b45ebb2b8072b3b5741b7fdde9
ba0cdec4ffd64f4c60e5516e0d3cc8b0dd468f79
b7ee0432fb5d96494eb3410e5e75f49b5f0549cef53f4f216a4b32e35d04dcb9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5303
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 19:52:06 GMT
Last-Modified: Sat, 24 Sep 2022 18:23:43 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 279
disploot.com/r/p.html?f=hbwrqdbxi&e=1433371698451
200 OK 2.5 kB URL HTTP/2 disploot.com/r/p.html?f=hbwrqdbxi&e=1433371698451
IP
File type HTML document, ASCII text
Hash b72e3f58875f55413c37c5148a28f2c9
be4602e57b39117851921b44d9cada63bb994343
12404ff556369f9b76cdee33cbf6efcbe77078cbf27a8dcfafd254593be98ca9
GET /r/p.html?f=hbwrqdbxi&e=1433371698451 HTTP/1.1
Host: disploot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
date: Sat, 24 Sep 2022 04:50:25 GMT
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
x-cache: Hit from cloudfront
via: 1.1 02b64e603ed38c4fa65e6d087701f8de.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR3-C2
x-amz-cf-id: eFlpSO_6XAUEvzOFJ0KtJzQ5PaYnX-2ZL8NQom24VPe06BQacrh3mw==
age: 54101
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 3434a19a96aa1878bf16f9d6a4778751
83d3faa48a298ad98616fadcc0840e27d6714acd
abd868eed9cbdd0978cb884df547dd64e7e18c186be6b1bfddc8100905468c6e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4486
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 19:52:06 GMT
Last-Modified: Sat, 24 Sep 2022 18:37:21 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 3434a19a96aa1878bf16f9d6a4778751
83d3faa48a298ad98616fadcc0840e27d6714acd
abd868eed9cbdd0978cb884df547dd64e7e18c186be6b1bfddc8100905468c6e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4486
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 19:52:06 GMT
Last-Modified: Sat, 24 Sep 2022 18:37:21 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
htlb.casalemedia.com/cygnus?s=806701&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%22519aaa3dae1b248%22%2C%22site%22%3A%7B%22page%22%3A%22https%3A%2F%2Fwordcounter.icu%2FyX7w2uye%22%2C%22ref%22%3A%22https%3A%2F%2Fwordcounter.icu%2FyX7w2uye%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22msd%22%3A0%2C%22msi%22%3A0%2C%22mfu%22%3A0%2C%22bu%22%3A1%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A1%2C%22ren%22%3Afalse%2C%22version%22%3A%226.15.0%22%2C%22userIds%22%3A%5B%5D%2C%22fpd%22%3Atrue%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%226f0cac4ae417f%22%2C%22banner%22%3A%7B%22topframe%22%3A0%2C%22format%22%3A%5B%7B%22w%22%3A300%2C%22h%22%3A250%2C%22ext%22%3A%7B%22siteID%22%3A%22806701%22%2C%22sid%22%3A%22300x250%22%7D%7D%5D%7D%7D%5D%2C%22at%22%3A1%2C%22source%22%3A%7B%22ext%22%3A%7B%22schain%22%3A%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22adpone.com%22%2C%22sid%22%3A%22f40bd5618606f2326096f40bd5618606f2326096%22%2C%22hp%22%3A1%7D%5D%7D%7D%7D%2C%22user%22%3A%7B%7D%7D
200 OK 37 B URL HTTP/2 htlb.casalemedia.com/cygnus?s=806701&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%22519aaa3dae1b248%22%2C%22site%22%3A%7B%22page%22%3A%22https%3A%2F%2Fwordcounter.icu%2FyX7w2uye%22%2C%22ref%22%3A%22https%3A%2F%2Fwordcounter.icu%2FyX7w2uye%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22msd%22%3A0%2C%22msi%22%3A0%2C%22mfu%22%3A0%2C%22bu%22%3A1%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A1%2C%22ren%22%3Afalse%2C%22version%22%3A%226.15.0%22%2C%22userIds%22%3A%5B%5D%2C%22fpd%22%3Atrue%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%226f0cac4ae417f%22%2C%22banner%22%3A%7B%22topframe%22%3A0%2C%22format%22%3A%5B%7B%22w%22%3A300%2C%22h%22%3A250%2C%22ext%22%3A%7B%22siteID%22%3A%22806701%22%2C%22sid%22%3A%22300x250%22%7D%7D%5D%7D%7D%5D%2C%22at%22%3A1%2C%22source%22%3A%7B%22ext%22%3A%7B%22schain%22%3A%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22adpone.com%22%2C%22sid%22%3A%22f40bd5618606f2326096f40bd5618606f2326096%22%2C%22hp%22%3A1%7D%5D%7D%7D%7D%2C%22user%22%3A%7B%7D%7D
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c0ecfb9309812b9872451326f48d455c
11118e066a057edecd1be8c1ac3a7289d9e83e52
26fac7e78babbcc18c1de8e9f5fa704a72e5326d6e91c5e2e62c7bc6de052b9c
GET /cygnus?s=806701&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%22519aaa3dae1b248%22%2C%22site%22%3A%7B%22page%22%3A%22https%3A%2F%2Fwordcounter.icu%2FyX7w2uye%22%2C%22ref%22%3A%22https%3A%2F%2Fwordcounter.icu%2FyX7w2uye%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22msd%22%3A0%2C%22msi%22%3A0%2C%22mfu%22%3A0%2C%22bu%22%3A1%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A1%2C%22ren%22%3Afalse%2C%22version%22%3A%226.15.0%22%2C%22userIds%22%3A%5B%5D%2C%22fpd%22%3Atrue%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%226f0cac4ae417f%22%2C%22banner%22%3A%7B%22topframe%22%3A0%2C%22format%22%3A%5B%7B%22w%22%3A300%2C%22h%22%3A250%2C%22ext%22%3A%7B%22siteID%22%3A%22806701%22%2C%22sid%22%3A%22300x250%22%7D%7D%5D%7D%7D%5D%2C%22at%22%3A1%2C%22source%22%3A%7B%22ext%22%3A%7B%22schain%22%3A%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22adpone.com%22%2C%22sid%22%3A%22f40bd5618606f2326096f40bd5618606f2326096%22%2C%22hp%22%3A1%7D%5D%7D%7D%7D%2C%22user%22%3A%7B%7D%7D HTTP/1.1
Host: htlb.casalemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Sep 2022 19:52:06 GMT
content-type: application/json
content-length: 37
cf-ray: 74fe0efddcd5b51d-OSL
access-control-allow-origin: https://wordcounter.icu
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
access-control-allow-credentials: true
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wqosob4FURpCIiDXTpLPmfngLarempNiCP7ggc9AEq%2F7Fp8CJ%2B3faMqaLKsrIgw10yxIxbr2OE6U7XOKaWzzteUSVqTRFhw0pYb2DNOmv9CfOdoOU8%2Fwmb4MUwjErUKvomG1s6XF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
disploot.com/r/p.html?f=jleqdxzg&e=1433371698451
200 OK 2.2 kB URL HTTP/2 disploot.com/r/p.html?f=jleqdxzg&e=1433371698451
IP
File type HTML document, ASCII text
Hash bbea53ae79b5f4cc1a69c04ec61c27f9
bfae6f7eb30a878576db4cfc82c0238eda9184ff
cddf3acfc6e2852543a3a7b50dfaa5f1db75438e895fb1573412d80473c75f40
GET /r/p.html?f=jleqdxzg&e=1433371698451 HTTP/1.1
Host: disploot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
date: Sat, 24 Sep 2022 04:50:25 GMT
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
x-cache: Hit from cloudfront
via: 1.1 02b64e603ed38c4fa65e6d087701f8de.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR3-C2
x-amz-cf-id: RHgHLzwQhVJdJN8tKKz7saB08udlNQoTYlk1I-tRQ8ZlCC17Od0_cg==
age: 54101
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
adpone-d.openx.net/w/1.0/arj?ju=https%3A%2F%2Fwordcounter.icu%2FyX7w2uye&ch=UTF-8&res=1280x1024x24&ifr=true&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=a197cda0-2821-49b7-a377-3cebe826ca4f&nocache=1664049124817&schain=1.0%2C1!adpone.com%2Cf40bd5618606f2326096f40bd5618606f2326096%2C1%2C%2C%2C&aus=300x250&divids=%252F21671350435%252C22654422242%252F300x250-wordcounter.icu&aucs=%252F21671350435%252C22654422242%252F300x250-wordcounter.icu&auid=544045495
200 OK 79 B URL HTTP/2 adpone-d.openx.net/w/1.0/arj?ju=https%3A%2F%2Fwordcounter.icu%2FyX7w2uye&ch=UTF-8&res=1280x1024x24&ifr=true&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=a197cda0-2821-49b7-a377-3cebe826ca4f&nocache=1664049124817&schain=1.0%2C1!adpone.com%2Cf40bd5618606f2326096f40bd5618606f2326096%2C1%2C%2C%2C&aus=300x250&divids=%252F21671350435%252C22654422242%252F300x250-wordcounter.icu&aucs=%252F21671350435%252C22654422242%252F300x250-wordcounter.icu&auid=544045495
IP
File type JSON data\012- , ASCII text
Hash 41c2aa56e47da578c18192666f4d7fd6
9e5151d71e8eb4108d20cfff2cfc01adcb6864fa
f656d859776ff046ed25b66d657dc9d271c046444608cbfadec97559b3933283
GET /w/1.0/arj?ju=https%3A%2F%2Fwordcounter.icu%2FyX7w2uye&ch=UTF-8&res=1280x1024x24&ifr=true&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=a197cda0-2821-49b7-a377-3cebe826ca4f&nocache=1664049124817&schain=1.0%2C1!adpone.com%2Cf40bd5618606f2326096f40bd5618606f2326096%2C1%2C%2C%2C&aus=300x250&divids=%252F21671350435%252C22654422242%252F300x250-wordcounter.icu&aucs=%252F21671350435%252C22654422242%252F300x250-wordcounter.icu&auid=544045495 HTTP/1.1
Host: adpone-d.openx.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept, Accept-Encoding
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Sat, 24 Sep 2022 19:52:06 GMT
content-type: application/json
content-length: 79
content-encoding: gzip
cache-control: private, max-age=0, no-cache
access-control-allow-origin: https://wordcounter.icu
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 634048b45ebb2b8072b3b5741b7fdde9
ba0cdec4ffd64f4c60e5516e0d3cc8b0dd468f79
b7ee0432fb5d96494eb3410e5e75f49b5f0549cef53f4f216a4b32e35d04dcb9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5303
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 19:52:06 GMT
Last-Modified: Sat, 24 Sep 2022 18:23:43 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 279
zerossl.ocsp.sectigo.com/
200 OK 317 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash c389857444bcf76af8f97d232a887522
523bf96e76711b166c3eae0085d0cf89a6b3ba42
e31ffad9e5433951d7f808dae23c793259478a67e2af47879769efeafb6146b5
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 24 Sep 2022 19:52:06 GMT
Content-Type: application/ocsp-response
Content-Length: 317
Connection: keep-alive
Last-Modified: Fri, 23 Sep 2022 01:07:31 GMT
Expires: Fri, 30 Sep 2022 01:07:30 GMT
Etag: "523bf96e76711b166c3eae0085d0cf89a6b3ba42"
Cache-Control: max-age=450323,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74fe0efd292cb505-OSL
ocsp.digicert.com/
200 OK 312 B IP
Hash 54a26e69184e61e9105f77ef53573b5f
7a46c52218ac3b1223d3cecd1c85a5c79ba3ad26
120aee4dfbcd215660fbc4b588d99b20953c9155fc3ed0b17dca5f7a1653e947
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5852
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 19:52:06 GMT
Last-Modified: Sat, 24 Sep 2022 18:14:35 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 312
status.geotrust.com/
200 OK 471 B IP
Hash 9eb7aba473bda8226e302165bbfa82e2
5cdc749ab2f65a7b89f3e33ff90980c870a4775e
5da58791e50f46140c38902f20fc7b3ef705dc9dcf06d23084a821a61c7c87c0
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5220
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 19:52:06 GMT
Last-Modified: Sat, 24 Sep 2022 18:25:06 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 548
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 24 Sep 2022 19:52:06 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://wordcounter.icu
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ghb.adtelligent.com/geo
200 OK 140 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d2adcd2efec13b041df1b20127c50f5c
e8843dc16f06aaba1ddef63cdbf0907854a3347e
a2d808adba6c3641f0cda955271b939e41450381ca78249cbe9aad9fd196e28d
GET /geo HTTP/1.1
Host: ghb.adtelligent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Adtelligent
Date: Sat, 24 Sep 2022 19:52:05 GMT
Content-Type: application/json
Content-Length: 140
Access-Control-Allow-Origin: https://wordcounter.icu
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 581aa78c74efc75643d4cd3770546ead
d453cac11c8274100c03fded95d30520ec4c9ebb
d4e6190a59f7635dbbb67f037ecd6f1ba684b38a6f303c00646306a0c9f8f852
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 24 Sep 2022 19:52:05 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 23 Sep 2022 22:06:53 GMT
Expires: Sat, 24 Sep 2022 22:06:53 GMT
ETag: "d453cac11c8274100c03fded95d30520ec4c9ebb"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
disploot.com/r/p.html?f=riyqotkb&e=1433371698451
200 OK 2.1 kB URL HTTP/2 disploot.com/r/p.html?f=riyqotkb&e=1433371698451
IP
File type HTML document, ASCII text
Hash 4d3c2f2d6803dcfd9106be6d35f1753f
e48064bd5811712280279b50ae6b1a31a82bfd22
1cac63c68aa75e1f98de195f3b736583e7564434a1cdbe3124940b1cabccda5f
GET /r/p.html?f=riyqotkb&e=1433371698451 HTTP/1.1
Host: disploot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
date: Sat, 24 Sep 2022 04:50:25 GMT
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
x-cache: Hit from cloudfront
via: 1.1 02b64e603ed38c4fa65e6d087701f8de.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR3-C2
x-amz-cf-id: c2guuV2XsK-Z7Ke5EwGA5LJdQqmXDeRguHMdJAXV8ROb-qEZzpjdNQ==
age: 54101
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
disploot.com/r/p.html?f=lurhjofdc&e=1433371698451
200 OK 2.2 kB URL HTTP/2 disploot.com/r/p.html?f=lurhjofdc&e=1433371698451
IP
File type HTML document, ASCII text
Hash 9a45685d445ace474bd3900e09fa25e8
59d373ac86e7ab2907bfb8ea608d8848c08aa3bc
171349ec471dd0c9a0e57ff4af9e262ac224b633d37f0c3c0e67a3b44b4fba5f
GET /r/p.html?f=lurhjofdc&e=1433371698451 HTTP/1.1
Host: disploot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
date: Sat, 24 Sep 2022 04:50:25 GMT
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
x-cache: Hit from cloudfront
via: 1.1 02b64e603ed38c4fa65e6d087701f8de.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR3-C2
x-amz-cf-id: fxOZ1w2JderZC9nmuuh6H6wHoXs6uZMNxMAgvJyNE90mcUtsQRtdfA==
age: 54101
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 1.4 kB IP
File type gzip compressed data, from Unix\012- data
Hash 7f54f30d8f56ff237b58572f17b7843a
9264d2cefc2532d982dad573086d9278865b9a59
05dc2de7067b51a8c66b627303a5cb32ed81d435f5ed8f44b812d098420a5d35
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 19:52:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/r/collect?v=1&_v=j83&a=1988660287&t=pageview&_s=1&dl=https%3A%2F%2Fwordcounter.icu%2FyX7w2uye&ul=en-us&de=UTF-8&dt=Word%20Counter%20-%20Count%20Words&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IEBAAEAB~&jid=437432378&gjid=1146612134&cid=1509234389.1664049124&tid=UA-96442335-5&_gid=428706110.1664049124&_r=1&z=359411079
200 OK 35 B URL HTTP/2 www.google-analytics.com/r/collect?v=1&_v=j83&a=1988660287&t=pageview&_s=1&dl=https%3A%2F%2Fwordcounter.icu%2FyX7w2uye&ul=en-us&de=UTF-8&dt=Word%20Counter%20-%20Count%20Words&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IEBAAEAB~&jid=437432378&gjid=1146612134&cid=1509234389.1664049124&tid=UA-96442335-5&_gid=428706110.1664049124&_r=1&z=359411079
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /r/collect?v=1&_v=j83&a=1988660287&t=pageview&_s=1&dl=https%3A%2F%2Fwordcounter.icu%2FyX7w2uye&ul=en-us&de=UTF-8&dt=Word%20Counter%20-%20Count%20Words&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IEBAAEAB~&jid=437432378&gjid=1146612134&cid=1509234389.1664049124&tid=UA-96442335-5&_gid=428706110.1664049124&_r=1&z=359411079 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
date: Sat, 24 Sep 2022 19:52:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
x-content-type-options: nosniff
content-type: image/gif
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.recaptcha.net/recaptcha/api.js?onload=onloadRecaptchaCallback&render=explicit
200 OK 585 B URL HTTP/2 www.recaptcha.net/recaptcha/api.js?onload=onloadRecaptchaCallback&render=explicit
IP
File type ASCII text, with very long lines (921), with no line terminators
Hash 9d228e4e6ab37a3c507b7274b84dc16c
2c100fdc0354291817299bef38b04444e7183e82
237a6ce102cb240d6d3c1fbbf85f01c2e9a4df87ceece0871720f45e14c7e7a1
GET /recaptcha/api.js?onload=onloadRecaptchaCallback&render=explicit HTTP/1.1
Host: www.recaptcha.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Sat, 24 Sep 2022 19:52:06 GMT
date: Sat, 24 Sep 2022 19:52:06 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 585
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3580595bf46e769ae302ed0d521c22f4
bba2e71fc659b35ce842ba9b33ac2a2812e278f2
436b1ba1e1d7ef0a2afbd2bebf18f43ff9810c3bbee8bd38443ac19942e0edc2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 19:52:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash accf2161d5845360d814fc8d07bf549a
e0974b36d1c43a30fcf4d07c046993e0768c1962
29c3d1fbabcba821be3f0b681d83be8ea33c7d05abd364099de679df38755943
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "29C3D1FBABCBA821BE3F0B681D83BE8EA33C7D05ABD364099DE679DF38755943"
Last-Modified: Thu, 22 Sep 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2476
Expires: Sat, 24 Sep 2022 20:33:22 GMT
Date: Sat, 24 Sep 2022 19:52:06 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 314 B IP
Hash f88229d1b69c5e62e81d6c1dd37668c3
891695115a67d86c1e731a9f2531b49649903387
80e9c857fa9d80dc98eed6cbc1d71eb042df2ac935653f6853920ffa16947d31
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4501
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 19:52:06 GMT
Last-Modified: Sat, 24 Sep 2022 18:37:05 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 314
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=12319603662
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=12319603662
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=12319603662 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 552
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Sep 2022 19:52:05 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://wordcounter.icu
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fa5a7fd1c3d5eed2a8816ac62ad73e51
6536f3880457c6ced9534d5cf10615b6daf42aea
3c3a74be5d72d9e2b5ecdaeafbbf3d0029cd5848d2483cfa10da14859deff436
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 19:52:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 194ca275e9a1cbcc8b6361e39c4441fa
d45a461e415444418027dcd0574ea05e423787d7
5e8257b9d91931c3637476a58cbd0d40c7715beb77e9cf3f1edbd16d93549dfc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2480
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 19:52:06 GMT
Last-Modified: Sat, 24 Sep 2022 19:10:46 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
cmp.quantcast.com/choice/e92MKjc__gVe1/wordcounter.icu/choice.js?tag_version=V2
200 OK 160 kB URL HTTP/2 cmp.quantcast.com/choice/e92MKjc__gVe1/wordcounter.icu/choice.js?tag_version=V2
IP
File type ASCII text, with very long lines (1596)
Size 160 kB (159530 bytes)
Hash 3e1c3c9947871cb1b1d05619eccf2985
69c9903656dc794acaf8a418674ae0641bda87a8
d21e3357c056fa42113bca691e466cb90e73a172ed77144104c6dda3ef87af6c
GET /choice/e92MKjc__gVe1/wordcounter.icu/choice.js?tag_version=V2 HTTP/1.1
Host: cmp.quantcast.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 21 Jul 2022 15:20:35 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
content-encoding: br
cache-control: max-age=900
date: Sat, 24 Sep 2022 19:51:18 GMT
etag: W/"4b552d504f800efab9247a18e185c71e"
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4ddd403b8cdc86f432a9bb587ffd918e.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR3-C2
x-amz-cf-id: 9oGVxuTVz9Y65prGmSWVwUxhAaDBma0LXX4TpTEq1enIYMwoYMdHHQ==
age: 49
X-Firefox-Spdy: h2
disploot.com/r/p.html?f=uyaynqsxj&e=1433371698451
200 OK 2.5 kB URL HTTP/2 disploot.com/r/p.html?f=uyaynqsxj&e=1433371698451
IP
File type HTML document, ASCII text
Hash a8efbef28e27d0583ebac60974367da7
7a74d7d5fed87813c597654656209137328aa68d
d18d68858a9bd3e36014e11e879e526e3ffdc7a5f6cefb7b6030d103a7649b02
GET /r/p.html?f=uyaynqsxj&e=1433371698451 HTTP/1.1
Host: disploot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
date: Sat, 24 Sep 2022 04:50:25 GMT
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
x-cache: Hit from cloudfront
via: 1.1 02b64e603ed38c4fa65e6d087701f8de.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR3-C2
x-amz-cf-id: DO8ZpCLH3Bq1sDe6KF51puxt0EhT2xofQaHrnN-PIrMmJnT5jOKL1Q==
age: 54101
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
disploot.com/r/p.html?f=zspixi&e=1433371698451
200 OK 46 kB URL HTTP/2 disploot.com/r/p.html?f=zspixi&e=1433371698451
IP
File type HTML document, ASCII text
Hash a443ae0c8eeb792e35cad51215d748ab
024cdd52deeb25e85a7f86f5b28ef0a479239e1f
05edf218bba5dbfd213b1d5c6eb24dcea05b7dd877b38b3eddfcd64f517dbe8a
GET /r/p.html?f=zspixi&e=1433371698451 HTTP/1.1
Host: disploot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
date: Sat, 24 Sep 2022 04:50:25 GMT
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
x-cache: Hit from cloudfront
via: 1.1 02b64e603ed38c4fa65e6d087701f8de.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR3-C2
x-amz-cf-id: pEGSmnvqzRFXyUhv_1fKDBllTP8AHuvGiP0ucR-cHVDOXvg9FTSBzw==
age: 54101
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9b1d87ae8967360b627c82f22f6df33d
7a5a54456b10942100fb86be0eb8d314b0b140e4
064e33789bb248c536186f40e073ff3d8733fc84e1441cd728a587e0467ff4b4
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 669
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 24 Sep 2022 19:52:06 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://disploot.com
AN-X-Request-Uuid: 79899ec6-2a94-49e7-8e09-38516ff8b62d
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 946.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prg.smartadserver.com/prebid/v1
200 OK 0 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 377
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-length: 0
content-type: application/json; charset=UTF-8
date: Sat, 24 Sep 2022 19:52:06 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://disploot.com
cache-control: no-cache,no-store
pragma: no-cache
vary: Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
disploot.com/r/p.html?f=hwerupxctv&e=1433371698451
200 OK 31 kB URL HTTP/2 disploot.com/r/p.html?f=hwerupxctv&e=1433371698451
IP
File type HTML document, ASCII text
Hash 07ffc1661805b3f332aae10c573f1c02
71376c90ac1ea496d69b0b8d71be00bfd1303df8
3f7a3cbfa249d5a406b4fc7e5c27bd16feefe8614da9919ee6e729e598f5515e
GET /r/p.html?f=hwerupxctv&e=1433371698451 HTTP/1.1
Host: disploot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
date: Sat, 24 Sep 2022 04:50:25 GMT
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
x-cache: Hit from cloudfront
via: 1.1 02b64e603ed38c4fa65e6d087701f8de.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR3-C2
x-amz-cf-id: _Ak0YWKux3tm5-15Kxmu4WKV5G2s6a5Eb8PgcZXvJtJ4-eYlTelrRQ==
age: 54101
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
200 OK 99 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7a4bbb27cd88e30b125329dcda7bd31c
c5d42f85d0b177f8e5fe9781caa849f6862cb449
dced701f24e2ba94a32ecba4bfef65910defbb68e407b3af091d0229d5a6cd29
POST /rtb/bid?src=prebid_prebid_6.15.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 490
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sat, 24 Sep 2022 19:52:06 GMT
set-cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljtrtb=;Version=1;Domain=.lijit.com;Path=/;Max-Age=0;Secure;Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=None;
content-type: application/json
access-control-allow-origin: https://disploot.com
access-control-allow-methods: GET, POST, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
vary: Accept-Encoding, User-Agent
content-encoding: gzip
content-length: 99
pod: X-Sovrn-Pod: ad_ap7ams1
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2605
Expires: Sat, 24 Sep 2022 20:35:31 GMT
Date: Sat, 24 Sep 2022 19:52:06 GMT
Connection: keep-alive
secure.quantserve.com/quant.js
200 OK 11 kB URL HTTP/2 secure.quantserve.com/quant.js
IP
Hash 510503509bf69d6d7ad68050a992caf8
8792fb9daaa87497ccc5ba1d2b0d433adda31563
7a3b6e062e0671ebea441011d7fd73926e97bd60231d3530ad9efcdef348afb3
GET /quant.js HTTP/1.1
Host: secure.quantserve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Sep 2022 19:52:06 GMT
content-type: application/javascript
accept-ranges: bytes
cache-control: private, max-age=604800
content-encoding: gzip
etag: "eN3sxSgaav0x5wHLxGB1gQ=="
expires: Sat, 01 Oct 2022 19:52:06 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 532
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 24 Sep 2022 19:52:06 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://disploot.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2605
Expires: Sat, 24 Sep 2022 20:35:31 GMT
Date: Sat, 24 Sep 2022 19:52:06 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb77ad616-c829-40b4-8b70-2be46252d64c.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb77ad616-c829-40b4-8b70-2be46252d64c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8ea5f06ad31f0cedd2cb5c6df82f35f4
60a83a1618ffae06e49ca3002bac1db9980dcfe8
5f6a4cb92c016ef0f229b11d727e9680a15b10782b5bfe9e66ad9d100b458d8d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb77ad616-c829-40b4-8b70-2be46252d64c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10279
x-amzn-requestid: 0f361c26-1f12-421a-9752-7d4fcdf839ac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4V65GTXIAMF9-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632cd045-25677a637307879044de8242;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:14:45 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: HfslSWhSAKRjZr-qqajVm6bKf9jGt2pXq8N8GlXgyTwRxWqw0y-CgA==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 05:14:28 GMT
age: 52658
etag: "60a83a1618ffae06e49ca3002bac1db9980dcfe8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2605
Expires: Sat, 24 Sep 2022 20:35:31 GMT
Date: Sat, 24 Sep 2022 19:52:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2605
Expires: Sat, 24 Sep 2022 20:35:31 GMT
Date: Sat, 24 Sep 2022 19:52:06 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd719f7db-20e1-4834-9525-3117f1824f36.webp
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd719f7db-20e1-4834-9525-3117f1824f36.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash aa150280eb113504d61a25935c0f0127
ed04f74fbb4c77b21e2babc51a82857f5e23d169
07df17fffb391aa82efb09e30d97e88fa4dbe6df00e37bb90304f69179f4848e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd719f7db-20e1-4834-9525-3117f1824f36.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10032
x-amzn-requestid: 521c4012-9834-4100-a7ed-30093502f1a9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y7sPBHGYoAMFh-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632e272c-77b03c321240d76a572d603a;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 21:37:48 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: N7TwxCLUL8qnvm3YuZ6CGyJquVerc266VvZ1g8j5RxGpQXoUJwhULg==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 21:51:16 GMT
age: 79250
etag: "ed04f74fbb4c77b21e2babc51a82857f5e23d169"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash baa652226f65e1e8f96f7320cd5b3c40
e3259bce2c19a65ea3caf7941a5298753ed53ce8
a23acc87c3cea610863c33220bc0dbafa6b452782d958ab9e94a3cbed37eae81
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 670
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 24 Sep 2022 19:52:06 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://disploot.com
AN-X-Request-Uuid: e6c3c8c3-d55d-4132-94d7-ff5ff9df0cb4
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 946.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F76fa20bb-9883-4867-b55e-fc56c8f8fc57.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F76fa20bb-9883-4867-b55e-fc56c8f8fc57.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d8d9af95acfc8b9b431eb1e020157f6d
f6f926be6e265a597aaede424f05fcd7c76fcc20
0b61d6cb0e0908cb8d303b9e951e2854166bd232e0291b5d698a6b757c064e88
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F76fa20bb-9883-4867-b55e-fc56c8f8fc57.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6386
x-amzn-requestid: 4380489e-d0ba-4f67-ac4f-67619ba34422
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y7shGHryIAMF6zg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632e27a0-005f9c783c7722f16c178026;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 21:39:44 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: RuUOjTDRTkcaGFf_hTWrHZ89edOajgGUdl5PjbaUV7CUppat6IYsRg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 21:48:27 GMT
age: 79419
etag: "f6f926be6e265a597aaede424f05fcd7c76fcc20"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F85d1d130-04e1-43f4-81d7-b15e9286f813.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F85d1d130-04e1-43f4-81d7-b15e9286f813.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e1087dcce202bbbc8c84196bd2050662
670d89082f8da643e1196b11fb64bf71707f0e8d
f6a7b6e07177431d7845e2f2b7b1b3b76088671db32aeef580a72e9bd3ddae00
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F85d1d130-04e1-43f4-81d7-b15e9286f813.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8354
x-amzn-requestid: 3ec3470c-2268-4102-af88-27dcfed76bfc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y7sPCGOcoAMF2xQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632e272c-481aa98b413690636fc3a2f0;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 21:37:48 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: pVtBCTCGh0DCF_1Vf9qMWttoDUQO_xSCkpdis9Gu3o4_cVEqaHngVg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 21:48:30 GMT
age: 79416
etag: "670d89082f8da643e1196b11fb64bf71707f0e8d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=22486291323
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=22486291323
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=22486291323 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 488
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 19:52:06 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://disploot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5039669-74cb-4d54-9208-94257c765b35.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5039669-74cb-4d54-9208-94257c765b35.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 55d224ac83a417772c98bc5080fb6689
a30f9044330824e70dde0dcc785890d981e6fdf5
b2ea4dea200109019a65834b98e31e8fac718a199513810a2819858be2b4470a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5039669-74cb-4d54-9208-94257c765b35.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9935
x-amzn-requestid: 9eb8463d-172a-40a2-8eed-3c97b1260afe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y7sQ5FARoAMFXQQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632e2738-3709a2f22ecc033532223b26;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 21:38:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: e5eETCL5yFnoG4HPx0Qv8hjGnlXx5vOL4syMx9uato8nuIHkSvMezg==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 21:58:23 GMT
age: 78823
etag: "a30f9044330824e70dde0dcc785890d981e6fdf5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffccf6ade-04f7-4d15-943c-bde343725d94.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffccf6ade-04f7-4d15-943c-bde343725d94.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 02a682b4703bb9d6381c762726c05531
1d7f7b4cfdd7425213a21afdd1d5a5d8d11d0e54
fb672de67420a239fe5d7e2588f640150ed29883fe2a46ded160385e3265004c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffccf6ade-04f7-4d15-943c-bde343725d94.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8029
x-amzn-requestid: 2fc5c63d-5cef-42f4-a6d2-b55f51c57af6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4Y0tHjGoAMFcFw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632cd4ea-73f2f78a2d1ca8fc666d2571;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:34:34 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 7DX67a-HmEh76IorINvRU61AKtSiimdPnHFnYeR2OJezZJ1_mJq0MA==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 21:48:26 GMT
age: 79420
etag: "1d7f7b4cfdd7425213a21afdd1d5a5d8d11d0e54"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 0 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 376
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-length: 0
content-type: application/json; charset=UTF-8
date: Sat, 24 Sep 2022 19:52:06 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://disploot.com
cache-control: no-cache,no-store
pragma: no-cache
vary: Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 532
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 24 Sep 2022 19:52:06 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://disploot.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 07f44a28f9e724d0b60f38f6878e8764
96682c3fc5c33ff7f0921925fc9bf73d1b16d6db
f348f33ccef0beee8bc53db34c61daaafffbaab1c699783e22d89e4d506d81e3
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 670
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 24 Sep 2022 19:52:06 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://disploot.com
AN-X-Request-Uuid: 2c7d7a04-9b8d-4786-8877-8c162dc72a68
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 946.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=89479961203
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=89479961203
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=89479961203 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 488
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 19:52:06 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://disploot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 0 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 377
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-length: 0
content-type: application/json; charset=UTF-8
date: Sat, 24 Sep 2022 19:52:06 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://disploot.com
cache-control: no-cache,no-store
pragma: no-cache
vary: Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 532
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 24 Sep 2022 19:52:06 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://disploot.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=954714549
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=954714549
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=954714549 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 488
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 19:52:06 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://disploot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
200 OK 98 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash b27eb11d30793417513b93da3430767a
bb5b6b76bfe98758f7ab74edf720b7e53623bb4e
17fde8994a64721aa36d0a306c150fd9d30b9530754407ac55e0701e4f133ccd
POST /rtb/bid?src=prebid_prebid_6.15.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 491
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sat, 24 Sep 2022 19:52:06 GMT
set-cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljtrtb=;Version=1;Domain=.lijit.com;Path=/;Max-Age=0;Secure;Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=None;
content-type: application/json
access-control-allow-origin: https://disploot.com
access-control-allow-methods: GET, POST, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
vary: Accept-Encoding, User-Agent
content-encoding: gzip
content-length: 98
pod: X-Sovrn-Pod: ad_ap7ams1
rules.quantcount.com/rules-p-e92MKjc__gVe1.js
200 OK 209 B URL HTTP/2 rules.quantcount.com/rules-p-e92MKjc__gVe1.js
IP
Hash 5886ec19c6f8de529fdd18054a12a2d0
a72fdbea31f2d0298e33e1037af54e1f90331816
82b23eeb32b6a9c2aa80f0a9f1d6d9b22c9bd9a506527de4ff1db434a0c32618
GET /rules-p-e92MKjc__gVe1.js HTTP/1.1
Host: rules.quantcount.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 209
last-modified: Fri, 26 Aug 2022 15:01:58 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
date: Sat, 24 Sep 2022 19:21:14 GMT
cache-control: max-age=3600
etag: "5886ec19c6f8de529fdd18054a12a2d0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c5e8408e2914e204df7d18fc961818b4.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR3-C2
x-amz-cf-id: oTf_E40D0jf1B4YJ7mJaF6aDgTrp2YVvcPlDawc1mMDr926C75zqDw==
age: 1854
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 13e24f9bf04d6d50a8c2ac7d0e45be55
3ca87e41be3d7f907715ca6f7f8d43cd007bb481
711e7a95012b4c71d8500e0f51be4a3332495c7d29438a813d7cfc30269dc2c1
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "711E7A95012B4C71D8500E0F51BE4A3332495C7D29438A813D7CFC30269DC2C1"
Last-Modified: Fri, 23 Sep 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16604
Expires: Sun, 25 Sep 2022 00:28:51 GMT
Date: Sat, 24 Sep 2022 19:52:07 GMT
Connection: keep-alive
ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
200 OK 99 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash b5a2c2f2c631afe90abcffe1c6a8d069
df0622d355228650093c57699503a05575a67be2
3298b076e587908b8fb23331103c8d03692617831121f6bb21c5fcfee3f747f6
POST /rtb/bid?src=prebid_prebid_6.15.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 491
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sat, 24 Sep 2022 19:52:06 GMT
set-cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljtrtb=;Version=1;Domain=.lijit.com;Path=/;Max-Age=0;Secure;Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=None;
content-type: application/json
access-control-allow-origin: https://disploot.com
access-control-allow-methods: GET, POST, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
vary: Accept-Encoding, User-Agent
content-encoding: gzip
content-length: 99
pod: X-Sovrn-Pod: ad_ap7ams1
ocsp.digicert.com/
200 OK 279 B IP
Hash 8406f596d1c4bd54acb442f692134d2f
af738ef9eee3ae72f935729c7d54ab32567498f4
bef4286ee2db6386290b769722e4739bb2a8c1637c2ff4c31565847542fe8f18
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4460
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 19:52:07 GMT
Last-Modified: Sat, 24 Sep 2022 18:37:47 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 279
cdn.jsdelivr.net/gh/prebid/currency-file@1/latest.json
200 OK 923 B URL HTTP/2 cdn.jsdelivr.net/gh/prebid/currency-file@1/latest.json
IP
File type JSON data\012- , ASCII text, with very long lines (1644), with no line terminators
Hash 6d8e947cd55a41d149d0d3056d950ce8
4da7d06df1f2ab751b2d39f020593928c0a5b1b3
8b23ba0a1a3515026c396455650d83ead9a800bffa4d410eb1e41108847d8d83
GET /gh/prebid/currency-file@1/latest.json HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/json; charset=utf-8
x-jsd-version: 1.0.1472
x-jsd-version-type: version
etag: W/"66c-5kcFU4ELpJ/3TUqY2DoFFkrnMcY"
content-encoding: gzip
accept-ranges: bytes
date: Sat, 24 Sep 2022 19:52:07 GMT
age: 17472
x-served-by: cache-fra19139-FRA, cache-bma1645-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 923
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
Hash a081baf22b1c6d6597047bac91ea6aef
b8c7013c8d257c627d56d1dfe50fac5faa347b94
e15ddcca36b81888728a14597e1df746c187371cc2e99727854f5939da3e5e59
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 24 Sep 2022 19:52:07 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "B66E68BA367ECC8597F81B3489ED0C1DD58311D7"
Expires: Sun, 25 Sep 2022 07:00:00 GMT
Last-Modified: Sat, 24 Sep 2022 19:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 1
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74fe0f04794db50c-OSL
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0748503adde2cb95a8d0b7a1611c5f80
eee215487ae9ac3cae37a92a4c761fc6d01f3320
67f8645c49b34ea64abd33c9f9429c2b032517d904fd0cddaa5e3d1c44458fa3
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 24 Sep 2022 19:52:07 GMT
Last-Modified: Sat, 24 Sep 2022 19:06:52 GMT
Server: ECS (nyb/1D17)
X-Cache: Miss from cloudfront
Via: 1.1 1de7ecec44e546a1e71d662ee3f2ba42.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR3-C2
X-Amz-Cf-Id: HjOGJP7rvhdLs1KnrpkZvY3JafV2IPpPcqFaEQQeix2nIPiA_qw4Qg==
Age: 2715
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7c3b314ea24f2ab5118826c3ec7f8a5b
10582b2c9cbd0cc96ec60e8477e1e4b2e4ddd2cc
9009ad729d8952db14241da67fd4a7efeaecac58b97cfcc3db52aa8519403b6d
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 665
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 24 Sep 2022 19:52:07 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://disploot.com
AN-X-Request-Uuid: 38be899f-cfa1-4fd6-ac30-4352f6c0a777
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 946.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash ea1243473fe1d8bd9d9bc1a996a10739
d002a52cab046df9f42282e37552c6007a6416e4
175c577741b8de7c26d3b011563ec18f8d565d3146e423fdf4a083053cd0b08c
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Sep 2022 19:52:07 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://wordcounter.icu
access-control-allow-credentials: true
set-cookie: uid_id2=7c88abe8-abb4-466d-a7c2-c7c586ea92a0:3:1; expires=Tue, 21 Sep 2032 19:52:07 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
script.4dex.io/adagio.js
200 OK 23 kB IP
File type ASCII text, with very long lines (65354)
Hash 1c2431734b0600260b865544106c7b94
446758f775d86b96f7175b15bfa2821016e07905
81d90c1612d818718943c4c19ec72ec15029fbab50448460cb4eb6e55641f8be
GET /adagio.js HTTP/1.1
Host: script.4dex.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wordcounter.icu/
Origin: https://wordcounter.icu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Sep 2022 19:52:07 GMT
content-type: application/javascript
access-control-allow-headers: Authorization
access-control-max-age: 3000
x-amz-id-2: tx06616eb546b34507963ac-00631b6359
access-control-allow-credentials: true
x-amz-request-id: tx06616eb546b34507963ac-00631b6359
last-modified: Fri, 09 Sep 2022 16:00:45 GMT
etag: W/"831813ee9b2fc0d248741417a0e3b488"
cache-control: public, max-age=1800
x-amz-version-id: 1662739245061580
access-control-allow-methods: GET
access-control-allow-origin: *
cf-cache-status: HIT
age: 1309425
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=acfhKxL%2BiwRtelsiEix9swvxsZag1oYVQs%2BQH5AJQPW%2Fb705n2XN1Ov0emKmDOPbpyADcX7Eo%2B8LtOpaCkRrZlX48Ftj8z32bXrxEH%2BHQKg1y2RGnV5vvLLArQJI8zyH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fe0f048dcab51d-OSL
content-encoding: br
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 524 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (931), with no line terminators
Hash e1d6009f735c0a8ec33e9edef73e04db
be2594d7c7139a5aa868c3438fb2de080b83bcd9
5f77fe509f84f26dcd645263f528a11707bcce49c0571bee8d960d325bd95124
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 377
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Sat, 24 Sep 2022 19:52:06 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://disploot.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Sun, 24 Sep 2023 19:52:07 GMT; domain=.smartadserver.com; path=/
vs=408085=5117512; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sun, 24 Sep 2023 19:52:07 GMT; domain=.smartadserver.com; path=/
pid=4013370999715973212; expires=Sun, 24 Sep 2023 19:52:07 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=637996459271844640&o=1; expires=Sun, 25 Sep 2022 19:52:07 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Sun, 25 Sep 2022 19:52:07 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 532
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 24 Sep 2022 19:52:07 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://disploot.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.recaptcha.net
Connection: keep-alive
Referer: https://www.recaptcha.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 24 Sep 2022 12:31:58 GMT
expires: Sun, 24 Sep 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 26409
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fwordcounter.icu%2F&domain=wordcounter.icu&cw=1&lsw=1
200 OK 16 kB URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fwordcounter.icu%2F&domain=wordcounter.icu&cw=1&lsw=1
IP
Hash 03ad4cfee5e3897770fb2152036eb5d4
c3d04496c9c773ccb585ee90864df17eda7c1ccd
d63576e2c073bec4e65455c7966667e042cb4230daf1c5ff3d67a3f5017faed5
GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fwordcounter.icu%2F&domain=wordcounter.icu&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 19:52:06 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://wordcounter.icu
server-processing-duration-in-ticks: 1261583
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
200 OK 99 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 3331efbad085d3504cebdaa115b8d59e
cf77a918d82bc3fc92aab1e316f736f4849b41ee
d0255214aa1a5f3a1acfa17e627f37bae602a798cd0de1ad68b25a5566bc2196
POST /rtb/bid?src=prebid_prebid_6.15.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 491
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sat, 24 Sep 2022 19:52:07 GMT
set-cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljtrtb=;Version=1;Domain=.lijit.com;Path=/;Max-Age=0;Secure;Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=None;
content-type: application/json
access-control-allow-origin: https://disploot.com
access-control-allow-methods: GET, POST, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
vary: Accept-Encoding, User-Agent
content-encoding: gzip
content-length: 99
pod: X-Sovrn-Pod: ad_ap7ams1
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=41311621557
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=41311621557
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=41311621557 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 488
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 19:52:06 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://disploot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 237fd56c4b3f6b98da111390d07ba83d
b2f319acd967431e214d7cb05479c5c288c6c47a
d06af7bfa258a7b136d5a56ada1c530f626141849d1f69679cc2cbe37201228e
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 668
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 24 Sep 2022 19:52:07 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://disploot.com
AN-X-Request-Uuid: f12e6b47-b4d6-409f-8ac4-aba4a93aa032
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 946.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prg.smartadserver.com/prebid/v1
200 OK 0 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 378
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-length: 0
content-type: application/json; charset=UTF-8
date: Sat, 24 Sep 2022 19:52:06 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://disploot.com
cache-control: no-cache,no-store
pragma: no-cache
vary: Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 13e24f9bf04d6d50a8c2ac7d0e45be55
3ca87e41be3d7f907715ca6f7f8d43cd007bb481
711e7a95012b4c71d8500e0f51be4a3332495c7d29438a813d7cfc30269dc2c1
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "711E7A95012B4C71D8500E0F51BE4A3332495C7D29438A813D7CFC30269DC2C1"
Last-Modified: Fri, 23 Sep 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16604
Expires: Sun, 25 Sep 2022 00:28:51 GMT
Date: Sat, 24 Sep 2022 19:52:07 GMT
Connection: keep-alive
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 532
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 24 Sep 2022 19:52:07 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://disploot.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
200 OK 100 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 2bd7614e275b251482cd72cd4a1a95ef
91883fcedd0d05036f30e5981120c9cb61886c57
d6a2c9a9855dc200d31e30a7f30b5bb1cc9ca7c9494f8e49a2ae75ba7998eb74
POST /rtb/bid?src=prebid_prebid_6.15.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 491
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sat, 24 Sep 2022 19:52:07 GMT
set-cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljtrtb=;Version=1;Domain=.lijit.com;Path=/;Max-Age=0;Secure;Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=None;
content-type: application/json
access-control-allow-origin: https://disploot.com
access-control-allow-methods: GET, POST, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
vary: Accept-Encoding, User-Agent
content-encoding: gzip
content-length: 100
pod: X-Sovrn-Pod: ad_ap7ams1
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dd0c641962f209f265ab10f7fc9fa10d
81bb99e27226cbbdae3f0968e0c410d260c23fbd
0a2e757c138563bcdd8c7763535bbd73b20befea1a62661575fe32bbf5a5d782
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0A2E757C138563BCDD8C7763535BBD73B20BEFEA1A62661575FE32BBF5A5D782"
Last-Modified: Sat, 24 Sep 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16801
Expires: Sun, 25 Sep 2022 00:32:08 GMT
Date: Sat, 24 Sep 2022 19:52:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3160204b38f2e6da7441a24c5d1eddf9
32082b45abebc3d268a984acc02925fa52d0ba50
115568ad1f6c379c0dbf44ef868f3566e8ca835cae73c2767def8327450038ac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "115568AD1F6C379C0DBF44EF868F3566E8CA835CAE73C2767DEF8327450038AC"
Last-Modified: Fri, 23 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11446
Expires: Sat, 24 Sep 2022 23:02:53 GMT
Date: Sat, 24 Sep 2022 19:52:07 GMT
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 1024d46980c24c2b969530a8e141470b
b00d43d830d4ca412d7e836aa32aa28b2e08b0fb
e5d5aab9faa5ac5d9358f355f4030046169f92731dd1e26a19810a7811ed2a0f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 24 Sep 2022 19:52:07 GMT
Last-Modified: Sat, 24 Sep 2022 18:57:55 GMT
Server: ECS (nyb/1D34)
X-Cache: Miss from cloudfront
Via: 1.1 1de7ecec44e546a1e71d662ee3f2ba42.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR3-C2
X-Amz-Cf-Id: MWDC2ocN1UyPCm91WgWbHRVJG12EHNkoceFloF4X9SIkigwf6-wp9w==
Age: 3253
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7e4bcf17d627cb5c2a756c3e223cc3be
a5777752f80413cfe55b2041c847e00aeeaa683f
6cf213986e672af9243fa1732f6d1172a2fdd60ad57e3ba861241145b7e45128
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6CF213986E672AF9243FA1732F6D1172A2FDD60AD57E3BA861241145B7E45128"
Last-Modified: Fri, 23 Sep 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17425
Expires: Sun, 25 Sep 2022 00:42:32 GMT
Date: Sat, 24 Sep 2022 19:52:07 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 313 B IP
Hash f12fc4b845cd5f25f1b49f9b02b2324b
ef8f68b4386f23654b8a26f4a81da9f0b8db06bf
1ddd4aeeb4ded35d929f48e2588d6a2016be946774ad989d349b7f0b1a156f97
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4540
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 19:52:07 GMT
Last-Modified: Sat, 24 Sep 2022 18:36:27 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 313
test.cmp.quantcast.com/GVL-v2/cmp-list.json
200 OK 2.8 kB URL HTTP/2 test.cmp.quantcast.com/GVL-v2/cmp-list.json
IP
File type JSON data\012- , ASCII text, with very long lines (9979), with no line terminators
Hash c14f7b67e269c8ed45c68d792c68b563
4246fbe10efb531ed479f4cf35c49916183d5376
26be7f850e5277e4a84dcab3d124e7fb948a3641065b41b37656b34c8283412e
GET /GVL-v2/cmp-list.json HTTP/1.1
Host: test.cmp.quantcast.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
access-control-max-age: 86400
cache-control: max-age=172800
date: Sat, 24 Sep 2022 03:00:35 GMT
last-modified: Fri, 16 Sep 2022 19:52:29 GMT
etag: W/"50fb7062a6b6a4e6efde705408cf32f0"
x-amz-server-side-encryption: AES256
x-amz-version-id: oUUwrY_6WJ4t3DAGrQVvhBXnrJz9w1fe
server: AmazonS3
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 37485b4aa4feacfc1ca26cfa4163e76a.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL51-P2
x-amz-cf-id: SJsWy10YL1Kgv-YV4TluI52aIApv-NFL12cczUtZJz7OQ53_wNScRw==
age: 60691
X-Firefox-Spdy: h2
prebid.a-mo.net/a/c
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 2362
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://wordcounter.icu
cache-control: max-age=0, private, must-revalidate
date: Sat, 24 Sep 2022 19:52:06 GMT
server: envoy
vary: origin, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 0
X-Firefox-Spdy: h2
onetag-sys.com/prebid-request
200 OK 41 B URL HTTP/2 onetag-sys.com/prebid-request
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 1c15203d1319c02fe2a06d78bc45eccf
40386992654bdda331c8f6eb21ac79de396119ee
cc81a9c5e7147dba347b0ffd34f64e9a7c40f25782569fec5c3fc68b4017badb
POST /prebid-request HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 2713
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://wordcounter.icu
access-control-allow-headers: content-type, origin, referer, user-agent
access-control-allow-credentials: true
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
cache-control: no-transform, no-cache
content-type: application/json
content-encoding: gzip
content-length: 41
strict-transport-security: max-age=15552000
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 96bff6d7a588d2fec138fe0b5ae29424
06a85bd67996be8dc88e2f2841c1676b04b7dcad
04ff8b5dab2e8ed415c68ffb5b0ec1384b1301bc79aaebc8b17286636fd46674
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 669
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 24 Sep 2022 19:52:07 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://disploot.com
AN-X-Request-Uuid: 589a0185-f1d5-4160-b1a0-7e7c779154c4
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 946.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=45972140860
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=45972140860
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=45972140860 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 488
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 19:52:07 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://disploot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
addresseepaper.com/sfp.js
200 OK 23 kB URL HTTP/2 addresseepaper.com/sfp.js
IP
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 22d0be38cff37c2a380b8d37351ac495
92d8c874ea32e8a72d42338358e8ee973c4da1f0
e9f42bbe705429c897274d46011313905f41a829c154581a9b2185441662dbd3
GET /sfp.js HTTP/1.1
Host: addresseepaper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Sep 2022 19:52:07 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 9bea936116ec62720a78e1afd85be668
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Sat, 24 Sep 2022 19:52:07 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4kwqr7GuKLBWa4ZUSkyv50%2B7TkgH1xAitmmIl%2BNmCG6XHZDsiziOuLiR7pe27QwtOLsn36IFbk7lSJlKqysh45tAsqhJ73u6TOfCctCygbGJYMRF85WF69Zz4lADzb0FjIU6wNs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fe0f046bc4e62c-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fwordcounter.icu%2F&domain=wordcounter.icu&cw=1&lsw=1
200 OK 173 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fwordcounter.icu%2F&domain=wordcounter.icu&cw=1&lsw=1
IP
Hash 85e234bc90329e2c2c6bb593ebd3b732
3dd4f4a85052cf3cea2e6f9a18d93fd12d290806
55f3bd782c8eddf16fa3c6437bb14c2330210259613edb2c731ccea3d7993764
OPTIONS /sid/json?origin=prebid&topUrl=https%3A%2F%2Fwordcounter.icu%2F&domain=wordcounter.icu&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://wordcounter.icu/
Origin: https://wordcounter.icu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Sep 2022 19:52:06 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: GET
access-control-allow-origin: https://wordcounter.icu
server-processing-duration-in-ticks: 443108
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 532
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 24 Sep 2022 19:52:07 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://disploot.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5ae214ed01f46ac47a3e5644a2ef0ca3
cf24d6355500592079993304de9769fad348f925
88ee438f0a11d4ab48ffb975cc363e03d9ed88ce7a29bea0b12a53db62fdaa0e
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 668
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 24 Sep 2022 19:52:07 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://disploot.com
AN-X-Request-Uuid: 8d55bc5b-403b-4d0b-b255-914fadb731c5
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 946.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prg.smartadserver.com/prebid/v1
200 OK 589 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
File type JSON data\012- , ASCII text, with very long lines (1103), with no line terminators
Hash 71aa2eb4a158186916951be8af898134
2b64a247bdc81ba610a0b60257e58cb95d4fc435
421b074038060fd75d275464a561ff2111e66fd24107f77f873fb54f49c12af2
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 378
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
date: Sat, 24 Sep 2022 19:52:06 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://disploot.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12960%3b%24o%3d99999; expires=Sun, 24 Sep 2023 19:52:07 GMT; domain=.smartadserver.com; path=/
vs=408085=5117512; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Sun, 24 Sep 2023 19:52:07 GMT; domain=.smartadserver.com; path=/
pid=6144910058370943050; expires=Sun, 24 Sep 2023 19:52:07 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=637996459276416791&o=1; expires=Sun, 25 Sep 2022 19:52:07 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Sun, 25 Sep 2022 19:52:07 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 532
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 24 Sep 2022 19:52:07 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://disploot.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 1c3365f5cd83397b9dc66f94aa142263
1abb250feb8125b2de6c4125df3613c4e87a52e8
b3c440be0b9ab94afcd288b66ab9cf22e9c468ddd0922d280c6fd313c951bf01
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3405
Cache-Control: max-age=109433
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 19:52:07 GMT
Etag: "632e5b13-1d7"
Expires: Mon, 26 Sep 2022 02:16:00 GMT
Last-Modified: Sat, 24 Sep 2022 01:19:15 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
ocsp.sectigo.com/
200 OK 471 B IP
Hash 4198fa094a76094df485c9e89231f691
856785aae5adf63dc734f076be4dcf74b53a292d
de133db7a975e49b2e3e4a6cfd324a07b6678cf1e9fe178ed9368d606f614d70
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 24 Sep 2022 19:52:07 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 24 Sep 2022 15:11:55 GMT
Expires: Sat, 01 Oct 2022 15:11:54 GMT
Etag: "856785aae5adf63dc734f076be4dcf74b53a292d"
Cache-Control: max-age=587386,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74fe0f06aa66b527-OSL
ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
200 OK 99 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash ac49fff8f94d92c09ebf204155541d57
aae7696588d4de700f54054c8ae01ca8b9cbc005
fe0412a9e005501f9b2398c20a39d89e73d614cb04ba6d9dce2f7177d19e8c2b
POST /rtb/bid?src=prebid_prebid_6.15.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 491
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sat, 24 Sep 2022 19:52:07 GMT
set-cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljtrtb=;Version=1;Domain=.lijit.com;Path=/;Max-Age=0;Secure;Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=None;
content-type: application/json
access-control-allow-origin: https://disploot.com
access-control-allow-methods: GET, POST, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
vary: Accept-Encoding, User-Agent
content-encoding: gzip
content-length: 99
pod: X-Sovrn-Pod: ad_ap7ams1
hb-api.omnitagjs.com/hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fwordcounter.icu%2FyX7w2uye&PublisherDomain=https%3A%2F%2Fwordcounter.icu
200 OK 3 B URL HTTP/2 hb-api.omnitagjs.com/hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fwordcounter.icu%2FyX7w2uye&PublisherDomain=https%3A%2F%2Fwordcounter.icu
IP
ASN #200271 Iguane Solutions SAS
File type JSON data\012- , ASCII text
Hash 58e0494c51d30eb3494f7c9198986bb9
cd0d4cc32346750408f7d4f5e78ec9a6e5b79a0d
37517e5f3dc66819f61f5a7bb8ace1921282415f10551d2defa5c3eb0985b570
POST /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fwordcounter.icu%2FyX7w2uye&PublisherDomain=https%3A%2F%2Fwordcounter.icu HTTP/1.1
Host: hb-api.omnitagjs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1167
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Accept-Encoding, Content-Type
access-control-allow-methods: OPTIONS, POST
access-control-allow-origin: https://wordcounter.icu
access-control-max-age: 3600
cache-control: no-cache, no-store, must-revalidate
content-type: application/json; charset=utf-8
expires: 0
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=0e6491975bcb87ab6e40383f9e0088bd; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Sat, 24 Sep 2022 19:52:07 GMT
content-length: 3
x-envoy-upstream-service-time: 9
server: ayl-lb-fra02
X-Firefox-Spdy: h2
precedentadministrator.com/pixel/purst?dl=0&th=0&sc=0&rs=2517&rd=2517&fd=804&bv=22.8.v.2&tmpl=136
200 OK 0 B URL HTTP/1.1 precedentadministrator.com/pixel/purst?dl=0&th=0&sc=0&rs=2517&rd=2517&fd=804&bv=22.8.v.2&tmpl=136
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=2517&rd=2517&fd=804&bv=22.8.v.2&tmpl=136 HTTP/1.1
Host: precedentadministrator.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sat, 24 Sep 2022 19:52:07 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
200 OK 98 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5fa89a819b7b1522669e6ebd94ce960f
76507b82c37094e84d4892faa0ec8cfccd6e7ef0
05b0d23bad420666ce128d88a51d5f348dfaf0dedad158dd08a3bb6d02b02a02
POST /rtb/bid?src=prebid_prebid_6.15.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 489
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sat, 24 Sep 2022 19:52:07 GMT
set-cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljtrtb=;Version=1;Domain=.lijit.com;Path=/;Max-Age=0;Secure;Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=None;
content-type: application/json
access-control-allow-origin: https://disploot.com
access-control-allow-methods: GET, POST, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
vary: Accept-Encoding, User-Agent
content-encoding: gzip
content-length: 98
pod: X-Sovrn-Pod: ad_ap7ams1
id.sharedid.org/id
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /id HTTP/1.1
Host: id.sharedid.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 24 Sep 2022 19:52:07 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://wordcounter.icu
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
pragma: no-cache
cache-control: no-cache,no-store,must-revalidate
expires: 0
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 137 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a416739a7942048eb8c2e7d969bad2bf
cb1d15cb1c3b320100137216810c0593b49dde07
f0f13d944a91b17f19d8c0bba1f96eee8cded9fd7f3e9b06f4182d49ca9b0f9a
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 669
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 24 Sep 2022 19:52:07 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 137
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://disploot.com
AN-X-Request-Uuid: bf06e789-42ec-4b1e-8591-4797c59acd46
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 946.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prg.smartadserver.com/prebid/v1
200 OK 0 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 377
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-length: 0
content-type: application/json; charset=UTF-8
date: Sat, 24 Sep 2022 19:52:07 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://disploot.com
cache-control: no-cache,no-store
pragma: no-cache
vary: Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=37702199531
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=37702199531
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=37702199531 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 488
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 19:52:07 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://disploot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash ea1243473fe1d8bd9d9bc1a996a10739
d002a52cab046df9f42282e37552c6007a6416e4
175c577741b8de7c26d3b011563ec18f8d565d3146e423fdf4a083053cd0b08c
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Cookie: uid_id2=7c88abe8-abb4-466d-a7c2-c7c586ea92a0:3:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 19:52:07 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://wordcounter.icu
access-control-allow-credentials: true
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 532
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 24 Sep 2022 19:52:07 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://disploot.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
200 OK 100 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 01896a84ffaf08b2d6aaee319653a3fe
0c754a3855f4b106f44dba2fe783aa3c4f567de5
ae73e6e29516f7df0a7401122e911d535f1c69b73404103c2a68b1eaabfb02a6
POST /rtb/bid?src=prebid_prebid_6.15.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 491
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sat, 24 Sep 2022 19:52:07 GMT
set-cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljtrtb=;Version=1;Domain=.lijit.com;Path=/;Max-Age=0;Secure;Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=None;
content-type: application/json
access-control-allow-origin: https://disploot.com
access-control-allow-methods: GET, POST, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
vary: Accept-Encoding, User-Agent
content-encoding: gzip
content-length: 100
pod: X-Sovrn-Pod: ad_ap7ams1
b1h.zemanta.com/api/bidder/prebid/bid/
204 No Content 0 B URL HTTP/1.1 b1h.zemanta.com/api/bidder/prebid/bid/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/bidder/prebid/bid/ HTTP/1.1
Host: b1h.zemanta.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 815
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://wordcounter.icu
cmp.quantcast.com/tcfv2/44/cmp2ui-en.js
200 OK 254 kB URL HTTP/2 cmp.quantcast.com/tcfv2/44/cmp2ui-en.js
IP
File type ASCII text, with very long lines (65469)
Size 254 kB (253693 bytes)
Hash c26dab36f353a381230d68d0a5c0fa59
134d563057794578e237628dbfe442cd02ead8ce
ac5aac3b3876821a8dd731f14444b317ce82c031857398f4e3f2bca0b9cde20e
GET /tcfv2/44/cmp2ui-en.js HTTP/1.1
Host: cmp.quantcast.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
content-length: 253693
access-control-max-age: 86400
cache-control: max-age=172800
date: Sat, 24 Sep 2022 07:11:18 GMT
last-modified: Wed, 14 Sep 2022 18:13:35 GMT
etag: "c26dab36f353a381230d68d0a5c0fa59"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
x-cache: Hit from cloudfront
via: 1.1 4ddd403b8cdc86f432a9bb587ffd918e.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR3-C2
x-amz-cf-id: PZ2w2m4zjdwK0unTYlJzt3IEdbem9nMxM09PI2WoYKQyr0429eTIjA==
age: 45650
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 598863eefa1a7f0bea34f79f7754e531
d003391fb1ebf732e43f09eee9abe410c9d0ec1c
3b94bd66c1e629819ab3aeebb981991b36d1691e2da5581488182b0143a18b8e
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 668
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 24 Sep 2022 19:52:08 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://disploot.com
AN-X-Request-Uuid: 8964ef27-49b2-422d-8d2d-a4b9f61bf172
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 946.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prg.smartadserver.com/prebid/v1
200 OK 0 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 376
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-length: 0
content-type: application/json; charset=UTF-8
date: Sat, 24 Sep 2022 19:52:07 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://disploot.com
cache-control: no-cache,no-store
pragma: no-cache
vary: Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=81153000105
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=81153000105
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=81153000105 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 488
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 19:52:08 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://disploot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 532
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 24 Sep 2022 19:52:08 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://disploot.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 92081569c7cfd318524200a8bc3033cd
6bb779ea4f85ea3890303f9686d438d3ee2f960d
4f525506f2755f0ff1222375f53805e178e8a73a12c73c7db1aa29b29b502427
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 669
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 24 Sep 2022 19:52:08 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://disploot.com
AN-X-Request-Uuid: cfeb6282-78cd-4ea9-9161-542e85597237
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 946.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prg.smartadserver.com/prebid/v1
200 OK 0 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 377
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-length: 0
content-type: application/json; charset=UTF-8
date: Sat, 24 Sep 2022 19:52:08 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://disploot.com
cache-control: no-cache,no-store
pragma: no-cache
vary: Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
platform.pubfuture.com/v1/config/62e25c1df58e070028dfa2cf.js?v=6&ip=OTEuOTAuNDIuMTU0&cc=Tk8=&c=&d=b3RoZXJz&s=aHR0cHM6Ly93b3JkY291bnRlci5pY3UveVg3dzJ1eWU=
200 OK 2.1 kB URL HTTP/2 platform.pubfuture.com/v1/config/62e25c1df58e070028dfa2cf.js?v=6&ip=OTEuOTAuNDIuMTU0&cc=Tk8=&c=&d=b3RoZXJz&s=aHR0cHM6Ly93b3JkY291bnRlci5pY3UveVg3dzJ1eWU=
IP
File type HTML document, ASCII text, with very long lines (3933), with no line terminators
Hash 63721759a1208a5fb49ddbd6e986e48f
50f3c1380cfbce547541ac4e90ebed848d031170
f007ff5a97c6c47aa70a3345fb14bcbf00e7385de21ccea600e76680273aa9a4
GET /v1/config/62e25c1df58e070028dfa2cf.js?v=6&ip=OTEuOTAuNDIuMTU0&cc=Tk8=&c=&d=b3RoZXJz&s=aHR0cHM6Ly93b3JkY291bnRlci5pY3UveVg3dzJ1eWU= HTTP/1.1
Host: platform.pubfuture.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 24 Sep 2022 19:52:07 GMT
content-type: application/javascript; charset=utf-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
access-control-allow-origin: *
etag: W/"efe-BKr+5p9S6fOyeAXvlkSAKw5DzFI"
vary: Accept-Encoding
content-encoding: gzip
x-frame-options: SAMEORIGIN, SAMEORIGIN
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 532
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 24 Sep 2022 19:52:08 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://disploot.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 137 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 8e7bfe7fe82fd45c4dc9949528033935
a68e7e2f6887f740b7cc2d21bbc64198968bf210
b65e88d462edd03eb260eba870fd6985e6744ec0ebb302bfcee4d75898f79bea
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 669
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 24 Sep 2022 19:52:08 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 137
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://disploot.com
AN-X-Request-Uuid: 895cb464-b041-4dc1-b8fb-b18b608cfe52
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 946.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
prg.smartadserver.com/prebid/v1
200 OK 0 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 377
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-length: 0
content-type: application/json; charset=UTF-8
date: Sat, 24 Sep 2022 19:52:07 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://disploot.com
cache-control: no-cache,no-store
pragma: no-cache
vary: Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=33705228427
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=33705228427
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=33705228427 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 488
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 19:52:07 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://disploot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 532
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 24 Sep 2022 19:52:08 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://disploot.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash edadd1c3f22cd313dc5dac331559b190
5bdc74be33cf75ed293089cba8a8d4d3395a38f3
d3ebb2016e6faf6e06735b7aab187c8b4c3da832318df407ffd3444b199e4918
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 668
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 24 Sep 2022 19:52:08 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://disploot.com
AN-X-Request-Uuid: 17674cb6-5738-4e27-aa69-2cd4c919a755
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 946.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=12486760539
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=12486760539
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=12486760539 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 488
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 19:52:08 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://disploot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 0 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 378
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-length: 0
content-type: application/json; charset=UTF-8
date: Sat, 24 Sep 2022 19:52:07 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://disploot.com
cache-control: no-cache,no-store
pragma: no-cache
vary: Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
hb.adpone.com/prebid6.15.0.js
200 OK 105 kB URL HTTP/2 hb.adpone.com/prebid6.15.0.js
IP
File type ASCII text, with very long lines (65492)
Size 105 kB (105177 bytes)
Hash 6f6851b9dd267d5ddd6e2f3b52d41f8c
e6eb0f208b28bef21b1ab4715dc45058dac5d7df
c330da974c97f10894d56f6841b9f8b85f0e8a433193750332ea83b31d19b8b3
GET /prebid6.15.0.js HTTP/1.1
Host: hb.adpone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Sep 2022 19:52:05 GMT
content-type: application/javascript
x-amz-id-2: A0VTHS/zewNM63KgZx0PmP4uGNMo0c2vn1qK9hVgDIe6uV2NCGbM8RVwVK+jZyCw9s1DAEeSxFs=
x-amz-request-id: VM1TYMZFSZX14TWX
last-modified: Wed, 30 Mar 2022 09:13:54 GMT
etag: W/"ead6e8c23bf835688215d35a6b357336"
x-amz-version-id: xeKiFDHa4caZh3hM.m43HLu9jNtrHamp
cache-control: max-age=14400
cf-cache-status: HIT
age: 508
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UQcxiKxHadEIiReokgUWMsRIwr7ETPldq1mEbbWBpBaYqW1GpA26ZPcEqJf2uZAihn3zba4aRFEnE%2FS7DgrgT8%2F486wWCygFnGN1rM%2BmZwiw68P492Axy9YmCdbEJCw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fe0efcecfc0b31-OSL
content-encoding: br
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 532
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 24 Sep 2022 19:52:08 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://disploot.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=53044962472
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=53044962472
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=53044962472 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 488
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 19:52:07 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://disploot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 136 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash cc75f3664d78de56682d998e6c1c36c5
d1936be27aa466c317a7d0256660da1dfc99774b
1f108cad12b2ad4a46addd87af23ff8c0fe04b1aa7742a8979c2f02c5fb9be2c
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 668
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 24 Sep 2022 19:52:08 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 136
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://disploot.com
AN-X-Request-Uuid: 48afb60d-a5d5-4da1-9d16-8e47c67ecfaf
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 946.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
200 OK 99 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 3e36613e8ecd5e0a856bff3aac9b164b
817cbe26e1561ac1cebabdc8bf9fbd39167618a9
8628989b5552baee0ab198ab1311fb157cb92957a4897db325f426e3ee5fd5f1
POST /rtb/bid?src=prebid_prebid_6.15.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 492
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sat, 24 Sep 2022 19:52:08 GMT
set-cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljtrtb=;Version=1;Domain=.lijit.com;Path=/;Max-Age=0;Secure;Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=None;
content-type: application/json
access-control-allow-origin: https://disploot.com
access-control-allow-methods: GET, POST, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
vary: Accept-Encoding, User-Agent
content-encoding: gzip
content-length: 99
pod: X-Sovrn-Pod: ad_ap7ams1
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 2eaf1ef75c63b7c8ebca695c97d9da4e
2d9e02dc5eef1d494b0b8be6a044d86ff6b5a31e
1790ca1cd95d8ca086c589e2bba9c60962bb03a6f8ace509b984a8d6e2f8d5ac
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 666
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 24 Sep 2022 19:52:08 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://disploot.com
AN-X-Request-Uuid: 005efc75-83c1-4951-9695-a0d7a4542b3d
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 946.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 532
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 24 Sep 2022 19:52:08 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://disploot.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
prg.smartadserver.com/prebid/v1
200 OK 0 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 377
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-length: 0
content-type: application/json; charset=UTF-8
date: Sat, 24 Sep 2022 19:52:07 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://disploot.com
cache-control: no-cache,no-store
pragma: no-cache
vary: Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
prg.smartadserver.com/prebid/v1
200 OK 0 B URL HTTP/1.1 prg.smartadserver.com/prebid/v1
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 376
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-length: 0
content-type: application/json; charset=UTF-8
date: Sat, 24 Sep 2022 19:52:07 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://disploot.com
cache-control: no-cache,no-store
pragma: no-cache
vary: Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=33964658818
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=33964658818
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=33964658818 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 488
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 19:52:07 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://disploot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
200 OK 100 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 67454170ac0ea73e27156da07ec4f338
e711ac9eeb4626998f261c73606dcef4cb1f53de
4e215c70fc9bae1d82e79878cd1f8cc2a132bdd7716099ebf0cacbf1ce9a746f
POST /rtb/bid?src=prebid_prebid_6.15.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 490
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sat, 24 Sep 2022 19:52:08 GMT
set-cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljtrtb=;Version=1;Domain=.lijit.com;Path=/;Max-Age=0;Secure;Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=None;
content-type: application/json
access-control-allow-origin: https://disploot.com
access-control-allow-methods: GET, POST, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
vary: Accept-Encoding, User-Agent
content-encoding: gzip
content-length: 100
pod: X-Sovrn-Pod: ad_ap7ams1
adx.adform.net/adx/openrtb
204 No Content 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 532
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 24 Sep 2022 19:52:08 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://disploot.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
200 OK 99 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 2e5d54787ca79ef59d1b940e287c1e0b
3a18bd50fe11c46dc0d076b8ce211b0f06125585
9799489006cac99dd806a8cd9b3b7b075aa338a92e2be2bc1b249566e91ebed9
POST /rtb/bid?src=prebid_prebid_6.15.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 491
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sat, 24 Sep 2022 19:52:08 GMT
set-cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljtrtb=;Version=1;Domain=.lijit.com;Path=/;Max-Age=0;Secure;Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=None;
content-type: application/json
access-control-allow-origin: https://disploot.com
access-control-allow-methods: GET, POST, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
vary: Accept-Encoding, User-Agent
content-encoding: gzip
content-length: 99
pod: X-Sovrn-Pod: ad_ap7ams1
ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
200 OK 98 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 61522cefa035cc02fe2ee8cc811e7fdf
e8aaa86b0ccc1131aa05443d734d0e1e72ee9173
03ee621493fb4645885e41e41b3563a105f67acf642a2ee7c1f9ac589221638c
POST /rtb/bid?src=prebid_prebid_6.15.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 489
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sat, 24 Sep 2022 19:52:08 GMT
set-cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljtrtb=;Version=1;Domain=.lijit.com;Path=/;Max-Age=0;Secure;Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=None;
content-type: application/json
access-control-allow-origin: https://disploot.com
access-control-allow-methods: GET, POST, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
vary: Accept-Encoding, User-Agent
content-encoding: gzip
content-length: 98
pod: X-Sovrn-Pod: ad_ap7ams1
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 6d6f01cf29d3e2e05c2917f0e9353a93
a1ac2717af9fdaa6fc175aef5a22221ed2431265
6127786e79552186ceb43097aa9c6bdee3c9e49edc6cca5194c5a59b28dddd40
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 24 Sep 2022 19:52:08 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 24 Sep 2022 19:06:49 GMT
Expires: Sun, 25 Sep 2022 19:06:49 GMT
ETag: "a1ac2717af9fdaa6fc175aef5a22221ed2431265"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
200 OK 99 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_6.15.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 95ab8991b6fb417198c1be1be989fe3e
44c9854dd16738ac80a1f258993a8eb7f8c16361
785fa3c8d08cc52f9bb7f46bf4bcb73b06f46216e4990e19517114277ea98402
POST /rtb/bid?src=prebid_prebid_6.15.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 491
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sat, 24 Sep 2022 19:52:08 GMT
set-cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljtrtb=;Version=1;Domain=.lijit.com;Path=/;Max-Age=0;Secure;Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=None;
content-type: application/json
access-control-allow-origin: https://disploot.com
access-control-allow-methods: GET, POST, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type
vary: Accept-Encoding, User-Agent
content-encoding: gzip
content-length: 99
pod: X-Sovrn-Pod: ad_ap7ams1
googleads.g.doubleclick.net/pagead/xbfe_backfill.js
200 OK 3.2 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/xbfe_backfill.js
IP
File type ASCII text, with very long lines (1609)
Hash c2fc93f94c0733f228c1818b57927180
82e304d5ba7517e1b7dbbb599ca34d38b3122cf7
66bddef1c48dbdd11780d7cf4926fe85e89bb5c861273805f52fc2fe4a8a927a
GET /pagead/xbfe_backfill.js HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 3158
x-xss-protection: 0
date: Sat, 24 Sep 2022 19:47:06 GMT
expires: Sat, 24 Sep 2022 20:47:06 GMT
cache-control: public, max-age=3600
age: 302
etag: 11640381189078294886
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=16001055034
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=6.15.0&cb=16001055034
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=34&wv=6.15.0&cb=16001055034 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 488
Origin: https://disploot.com
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 19:52:08 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://disploot.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/adfetch?adk=1438256543&adsafe=medium&client=ca-pub-5722610347565274&format=300x250_as&ip=91.90.42.0&output=html&unviewed_position_start=1&url=https://wordcounter.icu/&sub_client=bidder-806701&hl=en&aceid=MDmsFQBfE7QAIxe0AFAXtAD_G7QAkGo0ATRzNAE9dDQBBHw0AU58NAGWfTQBn300Ab59NAE1fjQBZX40AWd-NAFofjQBaX40AX9-NAGBfjQBhn40AYl-NAGLfjQBlH40Aah-NAGwfjQBt340Abh-NAHMfjQBzn40AdJ-NAFFc0EB3B5cAhwfXAIhH1wCc_mIAh76iAIQ-4gCJ0KqAihCqgLNYaoCfmKqAv14qgK3j6oCgJuqAoGbqgKCm6oCmqiqAqKoqgLi16oCptqqAlXeqgJH4KoCoOWqAublqgL66aoCffCqAtfxqgJe-KoCJvuqAkH7qgJ2_KoCM_6qAicDqwKrC6sC1Q2rAr8RqwJVE6sCaBWrAlQZqwJjHKsCeRyrAlweqwJ2HqsCQB-rAlcgqwKbIqsCDCOrAsglqwIOJqsCvCarAt4mqwKmJ6sCAiirAq4oqwJXKasCaSmrAnwpqwKgKasCyCmrAlUsqwKvLasC4C2rAuotqwLcLqsC_S6rAt0vqwLvL6sCUDCrAn0wqwKHMKsCrzCrAqcxqwL_M6sCu0ERA_V0JAT-rlsQj6E1EWmj-xLUufsSFMj7ElnK-xLM0fsS8Oj7ElIA_BL0AfwSiwL8ErYC_BLoA_wS9AP8EvYD_BKrBPwS-wT8Eulb0BPhXNAT-lZrGlsAkik&awbid_c=AKAmf-DYClCtupknqznyx4YNcKpkGh8_D0IaMQ_ZvvMX_OBumPSLbGcz1En19mJ9xbIypKUmo6Lld37lSsTGNWT1fgF0vEI4tfLRbZ957mq_pJREZEuKMkr2PQBgxWeh9knUXioSayyWb_p488U4d6BUIXdMPD5D4JKwRtFLMOjkbc5ag-bpYl7gPvPQvebhdpqb5fCvV8bvpi3L2-5wy21xq9PRbskBz1KYTGndHbYRN75w7HWkxRHAKwcfeQr2iOOdC4PpsUawYNXt-l-2PHFFU6HZhYaJwO1rzvCzCHshO52prlXTykvrdlmVmWOzQM7sgs5_a6i6fjeimOXwo2DOZiOFA-p8XfEGX_vHRj4U4XDMevkckBPPecBOwfSjhCUgvDdXkw668XQpTvNVNBGjp59k_8vrbK2L3nbGf6Lrz9nSH3OQm0Q71vcMuG4GLAh4TjE8E35tvcIUMP8_S-fe3iVJl2DaTQsf6u3Gh59h8bmWSNpC6CEhaZve9QyGqESHSkeakAFJHWH8vk6myDWSt2V8CakmyD8hmNqyojekYpNYj5ihDYY&awbid_d=AKAmf-BF0L-QsAdZNnZB62kXZUGEH5HvG1y1nUtJoryNCoOkzAkQgesMkMoyFHTYz4VNrHQK_wT-0KZJu5QNrtrVT7qFJ0CAYGgsKNAAw4VBeRQz_Fge81yXIoUq4gtVUH-ir_7qj-VbgScBaObu1RFUbfGmIwAZ4MqvTQj9PxOm_ludovc7y19G-Q6tR55hbCiE55UGInkIQnTMbCE_xoaXsQKJZVlPk9GVd_LOjeJkiGBWODd56Qb1mf1h46RRxuMby20ZNYEtajLbN3cngzd6-W_nqXYD0_SowraXyod1evbOW_iC0o4HXmm-PbteQQWTpCr833grQ6ktDzWN6HEGsqNDzXmoULfRz3jbvEZ8f6ZR1zpA-30Ul3RcVCJJXzWx3UwSgxDXlx3zQTcBmKzow_x4yUw5YUCr6H_rMsEx5JhIV-X5LBL1odWrfCLG6tvc4-xvsOxq5RHpc05YHqBo-wD3eeq8QbJj2hDYp9XXYVux6t9sQoktB0NzyekDgfwv4SIWM0in2Qr07EDaY0Pn1x8LZ_sQwoC9bz4212pfPGQ5JhDGDWf3I0S8zprUr9u7b-ESTjaAQnraMdpsAHoW_dUG_QHk2N_hWvMgPyN9L8PlPQNkXAGcCblmEsEdeoCqVdRht472dzla-_DQh9kFs53-3JrbzOU0-1sUIfxY1w-nnvvpThR7EfAV2-eQSpIxT2m0YLBWGr156LHDsepWM8-WW9sJW1OTGwCSHKL2K48dqBEjFiUHPcoefAi-oWkQ67MEXcx_jJ1RqVFvPZ582UkJHqKNaUDSNjnrOU4IHclX2ojV7gE5qUHb5XKSppbDDLun8-8Fxihl7tgHsO0E0H9V6O9XPKvYXKp6_1Lu1vN0fQ_QU-057rvL_0UrCjhlfDps4dTBwTdqu5raPDIdZgyktSoB2dhh1MTXA94PiGLikUjmZ_mpMNIGnqb148D-FBy6x3mBpuXRDSPLl88WUGrVE82oHqIIORTiVMl37h1l3MJh_QFL1VOvXTs_D9m2Qdg7l_lzaTsZd6-BQ51_yBNiADUq5NM9lhj3X0t4IyNIgc_eycMuztjxBYfVYL-eZwa6p2dNIzDZ2CC9hf4QfLfFJATUvPzEYoTHC5Rt8g_llNlwfjnXyZLqRg9Ls-_02gzuhpyOAsu27FU0FVXgfvRUr9l98w&cid=CAASBORoJ6M&exk=1162733247&rfl=https%3A%2F%2Fwordcounter.icu%2F&a_pr=13:Yy9f6AAAAAAz__KV7ccv1E63Aqcrog0df38vfw
200 OK 35 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/adfetch?adk=1438256543&adsafe=medium&client=ca-pub-5722610347565274&format=300x250_as&ip=91.90.42.0&output=html&unviewed_position_start=1&url=https://wordcounter.icu/&sub_client=bidder-806701&hl=en&aceid=MDmsFQBfE7QAIxe0AFAXtAD_G7QAkGo0ATRzNAE9dDQBBHw0AU58NAGWfTQBn300Ab59NAE1fjQBZX40AWd-NAFofjQBaX40AX9-NAGBfjQBhn40AYl-NAGLfjQBlH40Aah-NAGwfjQBt340Abh-NAHMfjQBzn40AdJ-NAFFc0EB3B5cAhwfXAIhH1wCc_mIAh76iAIQ-4gCJ0KqAihCqgLNYaoCfmKqAv14qgK3j6oCgJuqAoGbqgKCm6oCmqiqAqKoqgLi16oCptqqAlXeqgJH4KoCoOWqAublqgL66aoCffCqAtfxqgJe-KoCJvuqAkH7qgJ2_KoCM_6qAicDqwKrC6sC1Q2rAr8RqwJVE6sCaBWrAlQZqwJjHKsCeRyrAlweqwJ2HqsCQB-rAlcgqwKbIqsCDCOrAsglqwIOJqsCvCarAt4mqwKmJ6sCAiirAq4oqwJXKasCaSmrAnwpqwKgKasCyCmrAlUsqwKvLasC4C2rAuotqwLcLqsC_S6rAt0vqwLvL6sCUDCrAn0wqwKHMKsCrzCrAqcxqwL_M6sCu0ERA_V0JAT-rlsQj6E1EWmj-xLUufsSFMj7ElnK-xLM0fsS8Oj7ElIA_BL0AfwSiwL8ErYC_BLoA_wS9AP8EvYD_BKrBPwS-wT8Eulb0BPhXNAT-lZrGlsAkik&awbid_c=AKAmf-DYClCtupknqznyx4YNcKpkGh8_D0IaMQ_ZvvMX_OBumPSLbGcz1En19mJ9xbIypKUmo6Lld37lSsTGNWT1fgF0vEI4tfLRbZ957mq_pJREZEuKMkr2PQBgxWeh9knUXioSayyWb_p488U4d6BUIXdMPD5D4JKwRtFLMOjkbc5ag-bpYl7gPvPQvebhdpqb5fCvV8bvpi3L2-5wy21xq9PRbskBz1KYTGndHbYRN75w7HWkxRHAKwcfeQr2iOOdC4PpsUawYNXt-l-2PHFFU6HZhYaJwO1rzvCzCHshO52prlXTykvrdlmVmWOzQM7sgs5_a6i6fjeimOXwo2DOZiOFA-p8XfEGX_vHRj4U4XDMevkckBPPecBOwfSjhCUgvDdXkw668XQpTvNVNBGjp59k_8vrbK2L3nbGf6Lrz9nSH3OQm0Q71vcMuG4GLAh4TjE8E35tvcIUMP8_S-fe3iVJl2DaTQsf6u3Gh59h8bmWSNpC6CEhaZve9QyGqESHSkeakAFJHWH8vk6myDWSt2V8CakmyD8hmNqyojekYpNYj5ihDYY&awbid_d=AKAmf-BF0L-QsAdZNnZB62kXZUGEH5HvG1y1nUtJoryNCoOkzAkQgesMkMoyFHTYz4VNrHQK_wT-0KZJu5QNrtrVT7qFJ0CAYGgsKNAAw4VBeRQz_Fge81yXIoUq4gtVUH-ir_7qj-VbgScBaObu1RFUbfGmIwAZ4MqvTQj9PxOm_ludovc7y19G-Q6tR55hbCiE55UGInkIQnTMbCE_xoaXsQKJZVlPk9GVd_LOjeJkiGBWODd56Qb1mf1h46RRxuMby20ZNYEtajLbN3cngzd6-W_nqXYD0_SowraXyod1evbOW_iC0o4HXmm-PbteQQWTpCr833grQ6ktDzWN6HEGsqNDzXmoULfRz3jbvEZ8f6ZR1zpA-30Ul3RcVCJJXzWx3UwSgxDXlx3zQTcBmKzow_x4yUw5YUCr6H_rMsEx5JhIV-X5LBL1odWrfCLG6tvc4-xvsOxq5RHpc05YHqBo-wD3eeq8QbJj2hDYp9XXYVux6t9sQoktB0NzyekDgfwv4SIWM0in2Qr07EDaY0Pn1x8LZ_sQwoC9bz4212pfPGQ5JhDGDWf3I0S8zprUr9u7b-ESTjaAQnraMdpsAHoW_dUG_QHk2N_hWvMgPyN9L8PlPQNkXAGcCblmEsEdeoCqVdRht472dzla-_DQh9kFs53-3JrbzOU0-1sUIfxY1w-nnvvpThR7EfAV2-eQSpIxT2m0YLBWGr156LHDsepWM8-WW9sJW1OTGwCSHKL2K48dqBEjFiUHPcoefAi-oWkQ67MEXcx_jJ1RqVFvPZ582UkJHqKNaUDSNjnrOU4IHclX2ojV7gE5qUHb5XKSppbDDLun8-8Fxihl7tgHsO0E0H9V6O9XPKvYXKp6_1Lu1vN0fQ_QU-057rvL_0UrCjhlfDps4dTBwTdqu5raPDIdZgyktSoB2dhh1MTXA94PiGLikUjmZ_mpMNIGnqb148D-FBy6x3mBpuXRDSPLl88WUGrVE82oHqIIORTiVMl37h1l3MJh_QFL1VOvXTs_D9m2Qdg7l_lzaTsZd6-BQ51_yBNiADUq5NM9lhj3X0t4IyNIgc_eycMuztjxBYfVYL-eZwa6p2dNIzDZ2CC9hf4QfLfFJATUvPzEYoTHC5Rt8g_llNlwfjnXyZLqRg9Ls-_02gzuhpyOAsu27FU0FVXgfvRUr9l98w&cid=CAASBORoJ6M&exk=1162733247&rfl=https%3A%2F%2Fwordcounter.icu%2F&a_pr=13:Yy9f6AAAAAAz__KV7ccv1E63Aqcrog0df38vfw
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Hash 79298bb12b25add1620a27c3f377ebea
38e5530479c3427351d09550217de5bbe4fd4369
b54823035887281240a40713100d7b9a1c680096f4b2adc1d5f205d0f1943009
GET /pagead/adfetch?adk=1438256543&adsafe=medium&client=ca-pub-5722610347565274&format=300x250_as&ip=91.90.42.0&output=html&unviewed_position_start=1&url=https://wordcounter.icu/&sub_client=bidder-806701&hl=en&aceid=MDmsFQBfE7QAIxe0AFAXtAD_G7QAkGo0ATRzNAE9dDQBBHw0AU58NAGWfTQBn300Ab59NAE1fjQBZX40AWd-NAFofjQBaX40AX9-NAGBfjQBhn40AYl-NAGLfjQBlH40Aah-NAGwfjQBt340Abh-NAHMfjQBzn40AdJ-NAFFc0EB3B5cAhwfXAIhH1wCc_mIAh76iAIQ-4gCJ0KqAihCqgLNYaoCfmKqAv14qgK3j6oCgJuqAoGbqgKCm6oCmqiqAqKoqgLi16oCptqqAlXeqgJH4KoCoOWqAublqgL66aoCffCqAtfxqgJe-KoCJvuqAkH7qgJ2_KoCM_6qAicDqwKrC6sC1Q2rAr8RqwJVE6sCaBWrAlQZqwJjHKsCeRyrAlweqwJ2HqsCQB-rAlcgqwKbIqsCDCOrAsglqwIOJqsCvCarAt4mqwKmJ6sCAiirAq4oqwJXKasCaSmrAnwpqwKgKasCyCmrAlUsqwKvLasC4C2rAuotqwLcLqsC_S6rAt0vqwLvL6sCUDCrAn0wqwKHMKsCrzCrAqcxqwL_M6sCu0ERA_V0JAT-rlsQj6E1EWmj-xLUufsSFMj7ElnK-xLM0fsS8Oj7ElIA_BL0AfwSiwL8ErYC_BLoA_wS9AP8EvYD_BKrBPwS-wT8Eulb0BPhXNAT-lZrGlsAkik&awbid_c=AKAmf-DYClCtupknqznyx4YNcKpkGh8_D0IaMQ_ZvvMX_OBumPSLbGcz1En19mJ9xbIypKUmo6Lld37lSsTGNWT1fgF0vEI4tfLRbZ957mq_pJREZEuKMkr2PQBgxWeh9knUXioSayyWb_p488U4d6BUIXdMPD5D4JKwRtFLMOjkbc5ag-bpYl7gPvPQvebhdpqb5fCvV8bvpi3L2-5wy21xq9PRbskBz1KYTGndHbYRN75w7HWkxRHAKwcfeQr2iOOdC4PpsUawYNXt-l-2PHFFU6HZhYaJwO1rzvCzCHshO52prlXTykvrdlmVmWOzQM7sgs5_a6i6fjeimOXwo2DOZiOFA-p8XfEGX_vHRj4U4XDMevkckBPPecBOwfSjhCUgvDdXkw668XQpTvNVNBGjp59k_8vrbK2L3nbGf6Lrz9nSH3OQm0Q71vcMuG4GLAh4TjE8E35tvcIUMP8_S-fe3iVJl2DaTQsf6u3Gh59h8bmWSNpC6CEhaZve9QyGqESHSkeakAFJHWH8vk6myDWSt2V8CakmyD8hmNqyojekYpNYj5ihDYY&awbid_d=AKAmf-BF0L-QsAdZNnZB62kXZUGEH5HvG1y1nUtJoryNCoOkzAkQgesMkMoyFHTYz4VNrHQK_wT-0KZJu5QNrtrVT7qFJ0CAYGgsKNAAw4VBeRQz_Fge81yXIoUq4gtVUH-ir_7qj-VbgScBaObu1RFUbfGmIwAZ4MqvTQj9PxOm_ludovc7y19G-Q6tR55hbCiE55UGInkIQnTMbCE_xoaXsQKJZVlPk9GVd_LOjeJkiGBWODd56Qb1mf1h46RRxuMby20ZNYEtajLbN3cngzd6-W_nqXYD0_SowraXyod1evbOW_iC0o4HXmm-PbteQQWTpCr833grQ6ktDzWN6HEGsqNDzXmoULfRz3jbvEZ8f6ZR1zpA-30Ul3RcVCJJXzWx3UwSgxDXlx3zQTcBmKzow_x4yUw5YUCr6H_rMsEx5JhIV-X5LBL1odWrfCLG6tvc4-xvsOxq5RHpc05YHqBo-wD3eeq8QbJj2hDYp9XXYVux6t9sQoktB0NzyekDgfwv4SIWM0in2Qr07EDaY0Pn1x8LZ_sQwoC9bz4212pfPGQ5JhDGDWf3I0S8zprUr9u7b-ESTjaAQnraMdpsAHoW_dUG_QHk2N_hWvMgPyN9L8PlPQNkXAGcCblmEsEdeoCqVdRht472dzla-_DQh9kFs53-3JrbzOU0-1sUIfxY1w-nnvvpThR7EfAV2-eQSpIxT2m0YLBWGr156LHDsepWM8-WW9sJW1OTGwCSHKL2K48dqBEjFiUHPcoefAi-oWkQ67MEXcx_jJ1RqVFvPZ582UkJHqKNaUDSNjnrOU4IHclX2ojV7gE5qUHb5XKSppbDDLun8-8Fxihl7tgHsO0E0H9V6O9XPKvYXKp6_1Lu1vN0fQ_QU-057rvL_0UrCjhlfDps4dTBwTdqu5raPDIdZgyktSoB2dhh1MTXA94PiGLikUjmZ_mpMNIGnqb148D-FBy6x3mBpuXRDSPLl88WUGrVE82oHqIIORTiVMl37h1l3MJh_QFL1VOvXTs_D9m2Qdg7l_lzaTsZd6-BQ51_yBNiADUq5NM9lhj3X0t4IyNIgc_eycMuztjxBYfVYL-eZwa6p2dNIzDZ2CC9hf4QfLfFJATUvPzEYoTHC5Rt8g_llNlwfjnXyZLqRg9Ls-_02gzuhpyOAsu27FU0FVXgfvRUr9l98w&cid=CAASBORoJ6M&exk=1162733247&rfl=https%3A%2F%2Fwordcounter.icu%2F&a_pr=13:Yy9f6AAAAAAz__KV7ccv1E63Aqcrog0df38vfw HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://disploot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
date: Sat, 24 Sep 2022 19:52:08 GMT
server: cafe
content-length: 34562
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sat, 24-Sep-2022 20:07:08 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Sat, 24 Sep 2022 19:52:08 GMT
cache-control: private
X-Firefox-Spdy: h2
audit-tcfv2.cmp.quantcast.com/?log=%7B%22accountId%22%3A%22e92MKjc__gVe1%22%2C%22domain%22%3A%22wordcounter.icu%22%2C%22publisher%22%3A%22%22%2C%22cmpId%22%3A10%2C%22cmpVersion%22%3A%222.44%22%2C%22displayType%22%3A%22tcfui%3Amandatory%22%2C%22configurationHashCode%22%3A%22fTX8X%2B4Dx%2F97G91vlWmO6Q%22%2C%22tagVersion%22%3A%22V2%22%2C%22clientTimestamp%22%3A1664049127160%2C%22operationType%22%3A%22init%22%2C%22sessionId%22%3A%22GDPR-pkyoltn65hn4irir59m7%22%7D
200 OK 2 B URL HTTP/2 audit-tcfv2.cmp.quantcast.com/?log=%7B%22accountId%22%3A%22e92MKjc__gVe1%22%2C%22domain%22%3A%22wordcounter.icu%22%2C%22publisher%22%3A%22%22%2C%22cmpId%22%3A10%2C%22cmpVersion%22%3A%222.44%22%2C%22displayType%22%3A%22tcfui%3Amandatory%22%2C%22configurationHashCode%22%3A%22fTX8X%2B4Dx%2F97G91vlWmO6Q%22%2C%22tagVersion%22%3A%22V2%22%2C%22clientTimestamp%22%3A1664049127160%2C%22operationType%22%3A%22init%22%2C%22sessionId%22%3A%22GDPR-pkyoltn65hn4irir59m7%22%7D
IP
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /?log=%7B%22accountId%22%3A%22e92MKjc__gVe1%22%2C%22domain%22%3A%22wordcounter.icu%22%2C%22publisher%22%3A%22%22%2C%22cmpId%22%3A10%2C%22cmpVersion%22%3A%222.44%22%2C%22displayType%22%3A%22tcfui%3Amandatory%22%2C%22configurationHashCode%22%3A%22fTX8X%2B4Dx%2F97G91vlWmO6Q%22%2C%22tagVersion%22%3A%22V2%22%2C%22clientTimestamp%22%3A1664049127160%2C%22operationType%22%3A%22init%22%2C%22sessionId%22%3A%22GDPR-pkyoltn65hn4irir59m7%22%7D HTTP/1.1
Host: audit-tcfv2.cmp.quantcast.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Sep 2022 19:52:08 GMT
content-type: text/plain; charset=utf-8
content-length: 2
access-control-allow-origin: *
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/gen_204?id=awbid&awbid_b=AKAmf-CVrUccfqmB88fLLyg759pb93WXA6ni1wyjlM_H44RrURqbS_6d8Yqd_iS-Zq2fg-9Y925PsqZ0H3_h_DUB--9iuX8VEA&pr=13:Yy9f6AAAAADaG5DmE_FcKhAz94HQMCsn_NWZ7Q
204 No Content 0 B URL HTTP/2 pagead2.googlesyndication.com/pagead/gen_204?id=awbid&awbid_b=AKAmf-CVrUccfqmB88fLLyg759pb93WXA6ni1wyjlM_H44RrURqbS_6d8Yqd_iS-Zq2fg-9Y925PsqZ0H3_h_DUB--9iuX8VEA&pr=13:Yy9f6AAAAADaG5DmE_FcKhAz94HQMCsn_NWZ7Q
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/gen_204?id=awbid&awbid_b=AKAmf-CVrUccfqmB88fLLyg759pb93WXA6ni1wyjlM_H44RrURqbS_6d8Yqd_iS-Zq2fg-9Y925PsqZ0H3_h_DUB--9iuX8VEA&pr=13:Yy9f6AAAAADaG5DmE_FcKhAz94HQMCsn_NWZ7Q HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 24 Sep 2022 19:52:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
360playvid.info/slidepleer/s204s.js
200 OK 21 kB URL HTTP/2 360playvid.info/slidepleer/s204s.js
IP
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (60494)
Hash a4c0d6cb8cb3cdfcda8c9a2dd719aeac
fce020a06056b9641e90282110f7dbcd8682c522
17dc6dc11fff6b2e03ea5b128b04cf083993d226c7e40d49e884b50dfe500cd3
GET /slidepleer/s204s.js HTTP/1.1
Host: 360playvid.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Sat, 24 Sep 2022 19:52:08 GMT
content-type: application/javascript
content-length: 20646
accept-ranges: bytes
age: 129094
content-encoding: gzip
content-security-policy: upgrade-insecure-requests
etag: "ec74-5e92a97211559-gzip"
last-modified: Wed, 21 Sep 2022 07:06:56 GMT
strict-transport-security: max-age=300
vary: Accept-Encoding
x-backend: local
x-cache: cached
x-cache-hit: HIT
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 8.0
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash cfbe772bfdcc656e94ceed53256863ca
34055ed3761ab4b69af25a2cb70ca7a337a9f79b
7464464772c70e6a9f1b516b9fc3b60f4e567c10f968c573d5a187f5f22d0722
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 19:52:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash b0ec74ed8a76f7ab093fe1ec2549c3b1
a070b46db313f7b4a87fe9bd1ad608d0a0ebf62a
ae11d0c8403d6f9bf265fe11ecd2a4466e30134e01f2ad8ed9e99d5c9b9f48f5
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 24 Sep 2022 19:52:08 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 23 Sep 2022 23:29:09 GMT
Expires: Sat, 24 Sep 2022 23:29:09 GMT
ETag: "a070b46db313f7b4a87fe9bd1ad608d0a0ebf62a"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
200 OK 44 kB URL HTTP/2 www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
IP
File type ASCII text, with very long lines (3498)
Hash 94b0bc367ba28149279e80db131698c5
e3d5266059ac644dc21754a58d0f82bc76ca4cdd
379b35055f2b21b83b896a4dfe4ce927efc987290e138e441327486e7765974f
GET /activeview/js/current/rx_lidar.js?cache=r20110914 HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/active-view-scs-read-write-acl
cross-origin-opener-policy: same-origin; report-to="active-view-scs-read-write-acl"
report-to: {"group":"active-view-scs-read-write-acl","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/active-view-scs-read-write-acl"}]}
content-length: 44525
date: Sat, 24 Sep 2022 19:52:08 GMT
expires: Sat, 24 Sep 2022 19:52:08 GMT
cache-control: private, max-age=3000
etag: "1663760195623328"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d5f86ddceacf0b5d14b5b74eb60e39e2
a197f1b182fc5aebc30ee5570d7c5e6d7a3f410d
0727801c97c941992fb3a3bf7cc6ca2c44e15326d6e3dc9f0f0b4af54f4908ac
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 19:52:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
a4412.casalemedia.com/impression/v1?bidID=acde5f65-a757-41c8-a5ae-fedef65db357&traceID=ccnlvq5qvauuace924qg&dspID=85&userID=&cmpro=0&deviceType=2&expiryTime=1664049728&siteID=806701&creativeID=17e3626&pubID=192450&format=banner&channel=site
200 OK 43 B URL HTTP/1.1 a4412.casalemedia.com/impression/v1?bidID=acde5f65-a757-41c8-a5ae-fedef65db357&traceID=ccnlvq5qvauuace924qg&dspID=85&userID=&cmpro=0&deviceType=2&expiryTime=1664049728&siteID=806701&creativeID=17e3626&pubID=192450&format=banner&channel=site
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /impression/v1?bidID=acde5f65-a757-41c8-a5ae-fedef65db357&traceID=ccnlvq5qvauuace924qg&dspID=85&userID=&cmpro=0&deviceType=2&expiryTime=1664049728&siteID=806701&creativeID=17e3626&pubID=192450&format=banner&channel=site HTTP/1.1
Host: a4412.casalemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://disploot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 24 Sep 2022 19:52:08 GMT
Server: Apache
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Type: image/gif
Expires: 0
Pragma: no-cache
Content-Length: 43
Keep-Alive: timeout=1, max=500
Connection: Keep-Alive
tpc.googlesyndication.com/pagead/js/r20220921/r20110914/client/qs_click_protection.js
200 OK 10 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220921/r20110914/client/qs_click_protection.js
IP
File type ASCII text, with very long lines (1567)
Hash 9460991b863c76f491695c67585ab534
3c53ef21876a1b3a0c50fff352730fd8d4844185
88e1639e7606240f637f56779a2e916349cd417b1362fafa0e967bfb263a25fd
GET /pagead/js/r20220921/r20110914/client/qs_click_protection.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 10206
x-xss-protection: 0
date: Sat, 24 Sep 2022 19:41:56 GMT
expires: Sat, 08 Oct 2022 19:41:56 GMT
cache-control: public, max-age=1209600
etag: 6893582963406829535
content-type: text/javascript; charset=UTF-8
age: 612
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eca161302377725388354dea1513144f
41cfa39fd07e41fb543fdf3e0697e6727ba19bfc
7c68027f691a9f10766356b9052a113a4f0dde19fdb0933f4efdc3ca5a6e7f70
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 19:52:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/pagead/js/r20220921/r20110914/abg_lite.js
200 OK 12 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220921/r20110914/abg_lite.js
IP
File type ASCII text, with very long lines (1561)
Hash 5d2b9e48ec072e05d1ea0807c2ba28bb
0bea8135e765623b5b24c77e6cbe0e6a68356c6f
219d84779fef629bce600bea8e9633451af5bf7d10f9c61020055865965a0de5
GET /pagead/js/r20220921/r20110914/abg_lite.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 11724
x-xss-protection: 0
date: Sat, 24 Sep 2022 19:00:10 GMT
expires: Sat, 08 Oct 2022 19:00:10 GMT
cache-control: public, max-age=1209600
etag: 16554960040364120486
content-type: text/javascript; charset=UTF-8
age: 3118
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4fb51016b82f43bc6ee9f5ace001690c
5390a86aa0a7b82f5d09605b10812567b309d27a
73283fa4b416ee80d2ac87c30d2183afa1ae487a8650563b79adc1f001030f73
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 19:52:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 968198a1616f58bae179ece51ddee081
255d4fd03085e47ca29f32aa918ecb9e2c6d0f31
5cceecab1e6a45fc389eb9f39fd24a346e8b7dae16d37c2bc9ffe6bd52a46c02
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5CCEECAB1E6A45FC389EB9F39FD24A346E8B7DAE16D37C2BC9FFE6BD52A46C02"
Last-Modified: Sat, 24 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14121
Expires: Sat, 24 Sep 2022 23:47:30 GMT
Date: Sat, 24 Sep 2022 19:52:09 GMT
Connection: keep-alive
fonts.googleapis.com/css?family=Google%20Sans%3A400%2C500
200 OK 130 kB URL HTTP/2 fonts.googleapis.com/css?family=Google%20Sans%3A400%2C500
IP
File type ASCII text, with very long lines (2831)
Size 130 kB (129755 bytes)
Hash 438d7b26e0d8bfa11437dda559f8fcf0
b8c1babbfcd932fb10809c20a2547d6cb00af6a1
4a40c16869d9e4ff86e70cf050b69dc0fac08443094fda10099dfb3d7ff17972
GET /css?family=Google%20Sans%3A400%2C500 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 24 Sep 2022 19:52:08 GMT
date: Sat, 24 Sep 2022 19:52:08 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash edb9f0deb2339c1b9b0a529e42aba3c5
224c4331136c7b5e24382ce7d826659e70d17e9c
91274edd5c6342eb863cf6e0e47d3524d2b719742ea4c081bc677ffababbfe91
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2141
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 19:52:09 GMT
Last-Modified: Sat, 24 Sep 2022 19:16:29 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 313
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b0524e5bf0694a871ae07d4a8b913884
df87c5c8e550b46ed2c21e178a527da5af17f7fa
46905a7243284cd59a16bbfe29b00349dc8acc1d8096c8363c258eb28baa3ccc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "46905A7243284CD59A16BBFE29B00349DC8ACC1D8096C8363C258EB28BAA3CCC"
Last-Modified: Thu, 22 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10370
Expires: Sat, 24 Sep 2022 22:44:59 GMT
Date: Sat, 24 Sep 2022 19:52:09 GMT
Connection: keep-alive
unseenreport.com/pxf.gif?uuid=7c88abe8-abb4-466d-a7c2-c7c586ea92a0&eb=da08d6844107154a138edda4653a0f4b&te=f6ce28b9ffd697cd2ee52a12f20448bb&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.31&b_frame=0&pk=03301f093675f77c84729c5993ceb7c8&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=19
200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=7c88abe8-abb4-466d-a7c2-c7c586ea92a0&eb=da08d6844107154a138edda4653a0f4b&te=f6ce28b9ffd697cd2ee52a12f20448bb&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.31&b_frame=0&pk=03301f093675f77c84729c5993ceb7c8&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=19
IP
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=7c88abe8-abb4-466d-a7c2-c7c586ea92a0&eb=da08d6844107154a138edda4653a0f4b&te=f6ce28b9ffd697cd2ee52a12f20448bb&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.31&b_frame=0&pk=03301f093675f77c84729c5993ceb7c8&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=19 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 24 Sep 2022 19:52:09 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7e729ad40a50c56a3f94c2e2c9ee675d
Strict-Transport-Security: max-age=0; includeSubdomains
bnwcb.com/t?p1=wordcounter.icu-03::f:s204s::v:2.09&p2=p586764&p3=Inv&p4=&p5=0.164sec
200 OK 55 B URL HTTP/2 bnwcb.com/t?p1=wordcounter.icu-03::f:s204s::v:2.09&p2=p586764&p3=Inv&p4=&p5=0.164sec
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash cb8a5ef34441eb21bdd375a69ff1912e
10628cf31cad935feadf7d5bc1a60e64aceb5aa3
1be5395a09b059352083ff6343e02c9d1b186db471e1fc78d7f3509281a75fca
GET /t?p1=wordcounter.icu-03::f:s204s::v:2.09&p2=p586764&p3=Inv&p4=&p5=0.164sec HTTP/1.1
Host: bnwcb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-encoding: gzip
content-type: image/gif
expires: Wed, 11 Nov 1998 11:11:11 GMT
last-modified: Sat, 24 Sep 2022 19:52:09 GMT
pragma: no-cache
vary: Accept-Encoding
content-length: 55
date: Sat, 24 Sep 2022 19:52:09 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 340026679e26df7932a1effb5cccae93
54f0f3f5537bf6689e7419541e13ea0cbf528553
3b519c850c1994fdf8d8ab7758cb17d66bb3f5af5877fa1afe61684a6fbf9892
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 19:52:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c6a4a8e3b18e562b4bed71eefd913481
9ed32697f78f7b72531decd850de97499c6f2574
54041ea6df222d529d39122b6e7d2e21b082b7c1f28f5565b088e3941b7788f4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 19:52:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s0.2mdn.net/instream/video/client.js
200 OK 17 kB URL HTTP/2 s0.2mdn.net/instream/video/client.js
IP
File type ASCII text, with very long lines (2156)
Hash 49295de6ccd23cf80b6418a2d209868f
42a955b4560bb22cb9b5b39577f7a691ea345018
d5a29c73c6200af2ed6918a61106e649b92098ecd476830d725ed4d2ea5a8efa
GET /instream/video/client.js HTTP/1.1
Host: s0.2mdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
content-length: 16746
date: Sat, 24 Sep 2022 19:52:09 GMT
expires: Sat, 24 Sep 2022 19:52:09 GMT
cache-control: private, max-age=900
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 340026679e26df7932a1effb5cccae93
54f0f3f5537bf6689e7419541e13ea0cbf528553
3b519c850c1994fdf8d8ab7758cb17d66bb3f5af5877fa1afe61684a6fbf9892
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 19:52:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
secureservercdn.net/160.153.137.40/m8w.db3.myftpupload.com/wp-content/uploads/2021/04/Newscast1.mp4
206 Partial Content 71 kB URL HTTP/2 secureservercdn.net/160.153.137.40/m8w.db3.myftpupload.com/wp-content/uploads/2021/04/Newscast1.mp4
IP
Hash 9b08fd7beb5918ba197f403850f2fed5
4487804b448c0cdbab4adc131147e253eaa29d83
79a79f7a3b91179a559550c8bdfce43e2563df384e78fa099015859d2c000339
GET /160.153.137.40/m8w.db3.myftpupload.com/wp-content/uploads/2021/04/Newscast1.mp4 HTTP/1.1
Host: secureservercdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=3342336-
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
server: nginx
date: Sat, 24 Sep 2022 19:52:10 GMT
content-type: video/mp4
content-length: 71373
x-sucuri-id: 19016
age: 172805
content-security-policy: upgrade-insecure-requests
etag: "3416cd-5bf878f8d8f2b"
last-modified: Fri, 09 Apr 2021 10:23:53 GMT
strict-transport-security: max-age=300
x-backend: local
x-cache: cached
x-cache-hit: HIT
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-sucuri-cache: HIT
content-range: bytes 3342336-3413708/3413709
X-Firefox-Spdy: h2
www.google.com/pagead/drt/ui
302 Found 0 B URL HTTP/2 www.google.com/pagead/drt/ui
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/drt/ui HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://googleads.g.doubleclick.net/pagead/drt/si?st=NO_DATA
cache-control: private
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Sat, 24 Sep 2022 19:52:10 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 267300d587831dda7559c30c40cc614e
d7ff0b9754e61f5d4178eddb5e63c3390ab559c8
ec7aad1a3116ce8ef5258b49de87cf3456c8c4890206fa5d46c8e510ded80ac0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 19:52:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash 2af80a3eec9c9c419b751b671181caa2
099899cda3ebe605bf3616e115b5f10f29cf346f
75ec7adca7edc02cf7aecc46540d62f8cb55313c25f9107f5c23e55ee184c3ff
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 24 Sep 2022 19:52:11 GMT
Content-Type: application/ocsp-response
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 24 Sep 2022 07:38:06 GMT
Expires: Sun, 25 Sep 2022 07:38:06 GMT
ETag: "099899cda3ebe605bf3616e115b5f10f29cf346f"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
onetag-sys.com/usync/?tag=img
204 No Content 0 B URL HTTP/2 onetag-sys.com/usync/?tag=img
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/?tag=img HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-store
strict-transport-security: max-age=15552000
X-Firefox-Spdy: h2
b1h.zemanta.com/usersync/prebid
200 OK 26 B URL HTTP/1.1 b1h.zemanta.com/usersync/prebid
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6a43099d5c8fe991a7aa7ebaca53069d
5bce2f0d57305c58c7b05bfce29ebb39a18f5570
3b7b8a4b411ddf8db9bacc2f3aabf406f8e4c0c087829b336ca331c40adfdff1
GET /usersync/prebid HTTP/1.1
Host: b1h.zemanta.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 26
Date: Sat, 24 Sep 2022 19:52:11 GMT
gum.criteo.com/syncframe?origin=publishertag&topUrl=wordcounter.icu&gdpr=1&gdpr_consent=
200 OK 804 B URL HTTP/2 gum.criteo.com/syncframe?origin=publishertag&topUrl=wordcounter.icu&gdpr=1&gdpr_consent=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1494)
Hash ae704ff38b3a74e7042f7b9ddcc13e2b
0a2b4d2052ba656f6ba8497d927356cafcbf202a
a7211f7f076384f2dc5320ae06681de1b5af37b40ea1e9f6ab22ef8a490b01b6
GET /syncframe?origin=publishertag&topUrl=wordcounter.icu&gdpr=1&gdpr_consent= HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 19:52:09 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=0
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 151924
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
wordcounter.icu/yX7w2uye
200 OK 0 B IP
GET /yX7w2uye HTTP/1.1
Host: wordcounter.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sat, 24 Sep 2022 19:52:05 GMT
content-type: text/html; charset=UTF-8
set-cookie: AppSession=20fb2fcb2ff4f5a1bbe954368dbbb6f3; path=/; HttpOnly; secure
refyX7w2uye=ZmM5YWNiNzBjMTA1NTIyMWYzZTE0YjUwMWFiNjYxM2FmNjhjNzg3NGQ1ODg3NzMzNzU3ZThmNDNiZjEyZjU4YUIjhtaHMjkcrgO32fXhS%2B8ogVHFnL%2BVd%2F4zCqauDxwr; expires=Sat, 24-Sep-2022 19:57:04 GMT; Max-Age=300; path=/; HttpOnly; secure
csrfToken=464b186a1e8e9a3fcfac098facea269524aaf75b6a4db4c476c5c358c2e224e65d73cb83091364429a55c44ddf6d924d776284df6440018d1f49afe84a87c943; path=/; HttpOnly; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-frame-options: SAMEORIGIN,SAMEORIGIN
x-robots-tag: noindex, nofollow
vary: Accept-Encoding,User-Agent
strict-transport-security: max-age=63072000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YdgIngheXSYr6wO1p4lMSvlcGFAAV5Px%2B0iJouSeg9ox0rPGWYMXhY2AAD%2FmcvXCCAY2kZt0c4Tu1eaDvC6OHVAb%2BUPHbvU2FphW%2BCvp6jHlTfFYUj%2FKHiRbfCMS2hq69C8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74fe0ef40ca60b59-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
nc.pubpowerplatform.io/w/328a11e1-4aee-44c2-a744-020c0f0f2d12.js
200 OK 0 B URL HTTP/2 nc.pubpowerplatform.io/w/328a11e1-4aee-44c2-a744-020c0f0f2d12.js
IP
GET /w/328a11e1-4aee-44c2-a744-020c0f0f2d12.js HTTP/1.1
Host: nc.pubpowerplatform.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Sep 2022 19:52:05 GMT
content-type: application/javascript
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fe0ef89cfdfab4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.criteo.net/js/ld/publishertag.prebid.117.js
200 OK 0 B URL HTTP/2 static.criteo.net/js/ld/publishertag.prebid.117.js
IP
GET /js/ld/publishertag.prebid.117.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 24 Sep 2022 19:52:09 GMT
content-type: text/javascript
last-modified: Wed, 29 Dec 2021 12:30:46 GMT
etag: W/"61cc54f6-15c19"
expires: Sun, 25 Sep 2022 19:52:09 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/js/ld/publishertag.prebid.js
200 OK 0 B URL HTTP/2 static.criteo.net/js/ld/publishertag.prebid.js
IP
GET /js/ld/publishertag.prebid.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 24 Sep 2022 19:52:10 GMT
content-type: text/javascript
last-modified: Sat, 17 Sep 2022 19:59:55 GMT
etag: W/"6326273b-16120"
expires: Sun, 25 Sep 2022 19:52:10 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
adx.adform.net/adx/openrtb
200 OK 0 B URL HTTP/2 adx.adform.net/adx/openrtb
IP
OPTIONS /adx/openrtb HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://wordcounter.icu/
Origin: https://wordcounter.icu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 24 Sep 2022 19:52:06 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: POST,OPTIONS
access-control-allow-origin: https://wordcounter.icu
access-control-max-age: 86400
allow: POST,OPTIONS
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
disploot.com/r/p.html?f=nezkmtbm&e=1433371698451
200 OK 0 B URL HTTP/2 disploot.com/r/p.html?f=nezkmtbm&e=1433371698451
IP
GET /r/p.html?f=nezkmtbm&e=1433371698451 HTTP/1.1
Host: disploot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
date: Sat, 24 Sep 2022 04:50:25 GMT
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
x-cache: Hit from cloudfront
via: 1.1 02b64e603ed38c4fa65e6d087701f8de.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR3-C2
x-amz-cf-id: aluSNaHmLkZ90AnwA7tG9pgipy9p4A65LvOdDsRiHzrKaGT2aQum1Q==
age: 54101
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
mp.4dex.io/prebid
200 OK 0 B IP
POST /prebid HTTP/1.1
Host: mp.4dex.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 8281
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Sep 2022 19:52:07 GMT
content-type: application/json; charset=utf-8
access-control-allow-credentials: true
access-control-allow-origin: https://wordcounter.icu
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
set-cookie: uids=; Path=/; Domain=4dex.io; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Secure; SameSite=None
vary: Origin, Accept-Encoding
x-err: Shapings: no adunits with size and seat and mapping
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 74fe0f0669bf0b69-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
script.4dex.io/localstore.js
200 OK 0 B URL HTTP/2 script.4dex.io/localstore.js
IP
GET /localstore.js HTTP/1.1
Host: script.4dex.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Sep 2022 19:52:07 GMT
content-type: application/javascript
x-amz-id-2: txaf6e2c1c2f9f41df87375-00631b6357
last-modified: Fri, 09 Sep 2022 16:00:45 GMT
etag: W/"922cffdd75f7192f75231d92684885aa"
cache-control: public, max-age=1800
x-amz-version-id: 1662739245697142
x-amz-request-id: txaf6e2c1c2f9f41df87375-00631b6357
cf-cache-status: HIT
age: 1309840
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wd%2FU5AYL6rPxDrXnPJRqXbFdc2g0qIU8V%2FFAu%2B1HpUZWbhvlS5Svv1qFY2XaPmQsJgVLQ0bLw6lPTy97OKJ3w23gJ%2BqNuK9RzJlQjHSB%2F8qRAfjCqSaW3Ej6lamhsduz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fe0f045ae1b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
cmp.quantcast.com/GVL-v2/vendor-list-trimmed-v1.json
200 OK 0 B URL HTTP/2 cmp.quantcast.com/GVL-v2/vendor-list-trimmed-v1.json
IP
GET /GVL-v2/vendor-list-trimmed-v1.json HTTP/1.1
Host: cmp.quantcast.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
access-control-max-age: 3000
cache-control: max-age=172800
date: Sat, 24 Sep 2022 03:00:38 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-credentials: true
last-modified: Sat, 24 Sep 2022 03:00:33 GMT
etag: W/"1320564804e317fb26f6d5faa7100333"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 f5f83db1a84a10ea220332d32f95e38a.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR3-C2
x-amz-cf-id: HWS0BUPkBN57fQl1Fn7N_khsHArH5Bc_9iClYi9nYh1d2ERtAmRXpg==
age: 60690
X-Firefox-Spdy: h2
secureservercdn.net/160.153.137.40/m8w.db3.myftpupload.com/wp-content/uploads/2021/04/Newscast1.mp4
206 Partial Content 0 B URL HTTP/2 secureservercdn.net/160.153.137.40/m8w.db3.myftpupload.com/wp-content/uploads/2021/04/Newscast1.mp4
IP
GET /160.153.137.40/m8w.db3.myftpupload.com/wp-content/uploads/2021/04/Newscast1.mp4 HTTP/1.1
Host: secureservercdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 206 Partial Content
server: nginx
date: Sat, 24 Sep 2022 19:52:10 GMT
content-type: video/mp4
content-length: 3413709
x-sucuri-id: 19016
age: 172805
content-security-policy: upgrade-insecure-requests
etag: "3416cd-5bf878f8d8f2b"
last-modified: Fri, 09 Apr 2021 10:23:53 GMT
strict-transport-security: max-age=300
x-backend: local
x-cache: cached
x-cache-hit: HIT
x-cacheable: YES
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-php-version: 7.4
x-xss-protection: 1; mode=block
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-sucuri-cache: HIT
content-range: bytes 0-3413708/3413709
X-Firefox-Spdy: h2
cmp.quantcast.com/choice/PRrmquD1Ggcb1/wordcounter.icu/choice.js?tag_version=V2
200 OK 0 B URL HTTP/2 cmp.quantcast.com/choice/PRrmquD1Ggcb1/wordcounter.icu/choice.js?tag_version=V2
IP
GET /choice/PRrmquD1Ggcb1/wordcounter.icu/choice.js?tag_version=V2 HTTP/1.1
Host: cmp.quantcast.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: https://wordcounter.icu
access-control-allow-methods: GET
access-control-max-age: 3000
access-control-allow-credentials: true
last-modified: Fri, 15 Jul 2022 05:27:59 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
content-encoding: br
cache-control: max-age=900
date: Sat, 24 Sep 2022 19:52:06 GMT
etag: W/"d543dbae27e0fbc2490048ba8f5c5417"
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f5f83db1a84a10ea220332d32f95e38a.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR3-C2
x-amz-cf-id: EnaBVvD6XiyXFT_yPHgofp_9FIWh4_xTXGEeMylKYwz8XrWOdxm27A==
X-Firefox-Spdy: h2
disploot.com/t.js?i=qppl0tpb9m5udfroatowj&cb=3979521664049124014
200 OK 0 B URL HTTP/2 disploot.com/t.js?i=qppl0tpb9m5udfroatowj&cb=3979521664049124014
IP
GET /t.js?i=qppl0tpb9m5udfroatowj&cb=3979521664049124014 HTTP/1.1
Host: disploot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 18 Aug 2022 08:55:05 GMT
x-amz-version-id: IDIun4MnSvyw3bwvcOmDjtggUGfg5UGf
server: AmazonS3
content-encoding: gzip
date: Sat, 24 Sep 2022 02:05:50 GMT
etag: W/"914bb3d60941b0ef68b8dd009b705a99"
x-cache: Hit from cloudfront
via: 1.1 02b64e603ed38c4fa65e6d087701f8de.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR3-C2
x-amz-cf-id: f4UzUmwWp5XZu97hSnnaO1dZmXgpTTd7p2iNOpf_AzvWSCFSN6pa6Q==
age: 63976
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
platform.pubfuture.com/v1/unit/62e25c1df58e070028dfa2cf.js?v=2
200 OK 0 B URL HTTP/2 platform.pubfuture.com/v1/unit/62e25c1df58e070028dfa2cf.js?v=2
IP
GET /v1/unit/62e25c1df58e070028dfa2cf.js?v=2 HTTP/1.1
Host: platform.pubfuture.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 24 Sep 2022 19:52:05 GMT
content-type: application/javascript; charset=utf-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
access-control-allow-origin: *
cache-control: public, max-age=172800
etag: W/"a3f-Ny7wzAy1/EKTi0xfvD6//cJtR88"
vary: Accept-Encoding
content-encoding: gzip
x-frame-options: SAMEORIGIN, SAMEORIGIN
X-Firefox-Spdy: h2
disploot.com/r/p.html?f=vayai&e=1433371698451
200 OK 0 B URL HTTP/2 disploot.com/r/p.html?f=vayai&e=1433371698451
IP
GET /r/p.html?f=vayai&e=1433371698451 HTTP/1.1
Host: disploot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
date: Sat, 24 Sep 2022 04:50:25 GMT
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
x-cache: Hit from cloudfront
via: 1.1 02b64e603ed38c4fa65e6d087701f8de.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR3-C2
x-amz-cf-id: RS5MiXiN4UANH8cLIgsfBxHahRHCEzw6u1LjUmcWynXZZVp-htr6lA==
age: 54101
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
200 OK 0 B URL HTTP/2 c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
IP
GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 19 Sep 2022 09:37:07 GMT
x-amz-version-id: I95TjGhhrR3O7F99m0mjPLrSrnJRj9o4
server: AmazonS3
content-encoding: gzip
date: Sat, 24 Sep 2022 09:38:24 GMT
cache-control: public, max-age=86400
etag: W/"a4d296427fc806b21335359e398c025c"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 a1cb6e97bccd4899987b343ae5d4c252.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR3-C2
x-amz-cf-id: gU_1D6yJfg8zxMafvGSYLTpillylVLUYli7k9ta--tdvMEgBcVSedw==
age: 36822
X-Firefox-Spdy: h2
ads.us.e-planning.net/pbjs/1/2a0ae/1/wordcounter.icu/ROS?rnd=0.5574399726604174&e=300x250_0%3A300x250%2B300x250_1%3A300x250%2C728x90%2C970x250%2C970x90%2B300x250_2%3A300x250%2C728x90%2C970x250%2C970x90%2B300x250_3%3A300x250%2C728x90%2C970x250%2C970x90%2B728x90_0%3A728x90%2B728x90_1%3A728x90&ur=https%3A%2F%2Fwordcounter.icu%2FyX7w2uye&pbv=4.43.4&ncb=1&vs=FFFFFF&crs=UTF-8&fr=https%3A%2F%2Fwordcounter.icu%2FyX7w2uye&e_pubcid=e14232c6-3e24-4da9-8079-243bf6019219
302 Found 0 B URL HTTP/2 ads.us.e-planning.net/pbjs/1/2a0ae/1/wordcounter.icu/ROS?rnd=0.5574399726604174&e=300x250_0%3A300x250%2B300x250_1%3A300x250%2C728x90%2C970x250%2C970x90%2B300x250_2%3A300x250%2C728x90%2C970x250%2C970x90%2B300x250_3%3A300x250%2C728x90%2C970x250%2C970x90%2B728x90_0%3A728x90%2B728x90_1%3A728x90&ur=https%3A%2F%2Fwordcounter.icu%2FyX7w2uye&pbv=4.43.4&ncb=1&vs=FFFFFF&crs=UTF-8&fr=https%3A%2F%2Fwordcounter.icu%2FyX7w2uye&e_pubcid=e14232c6-3e24-4da9-8079-243bf6019219
IP
ASN #49981 WorldStream B.V.
GET /pbjs/1/2a0ae/1/wordcounter.icu/ROS?rnd=0.5574399726604174&e=300x250_0%3A300x250%2B300x250_1%3A300x250%2C728x90%2C970x250%2C970x90%2B300x250_2%3A300x250%2C728x90%2C970x250%2C970x90%2B300x250_3%3A300x250%2C728x90%2C970x250%2C970x90%2B728x90_0%3A728x90%2B728x90_1%3A728x90&ur=https%3A%2F%2Fwordcounter.icu%2FyX7w2uye&pbv=4.43.4&ncb=1&vs=FFFFFF&crs=UTF-8&fr=https%3A%2F%2Fwordcounter.icu%2FyX7w2uye&e_pubcid=e14232c6-3e24-4da9-8079-243bf6019219 HTTP/1.1
Host: ads.us.e-planning.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://wordcounter.icu
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: openresty
date: Sat, 24 Sep 2022 19:52:07 GMT
content-type: text/html; charset=iso-8859-1
set-cookie: CT=1; path=/; SameSite=None; Secure
access-control-allow-origin: https://wordcounter.icu
access-control-allow-credentials: true
p3p: policyref="http://ads.us.e-planning.net/p3p/eplanning.p3p", CP="NOI DSP COR NID CURa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV"
location: /hb/1/2a0ae/1/wordcounter.icu/ROS?ct=1&r=pbjs&rnd=0.5574399726604174&e=300x250_0%3A300x250%2B300x250_1%3A300x250%2C728x90%2C970x250%2C970x90%2B300x250_2%3A300x250%2C728x90%2C970x250%2C970x90%2B300x250_3%3A300x250%2C728x90%2C970x250%2C970x90%2B728x90_0%3A728x90%2B728x90_1%3A728x90&ur=https%3A%2F%2Fwordcounter.icu%2FyX7w2uye&pbv=4.43.4&ncb=1&vs=FFFFFF&crs=UTF-8&fr=https%3A%2F%2Fwordcounter.icu%2FyX7w2uye&e_pubcid=e14232c6-3e24-4da9-8079-243bf6019219
x-sid: AMS-928
X-Firefox-Spdy: h2
disploot.com/r/p.html?f=sstmejl&e=1433371698451
200 OK 0 B URL HTTP/2 disploot.com/r/p.html?f=sstmejl&e=1433371698451
IP
GET /r/p.html?f=sstmejl&e=1433371698451 HTTP/1.1
Host: disploot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
date: Sat, 24 Sep 2022 04:50:25 GMT
last-modified: Wed, 08 Jun 2022 20:58:01 GMT
etag: W/"5cf55433b12622d72185936eb7379e13"
x-amz-version-id: oz6fpl87UspghpuOURN0N_mgHQvwK1bf
server: AmazonS3
content-encoding: br
x-cache: Hit from cloudfront
via: 1.1 02b64e603ed38c4fa65e6d087701f8de.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR3-C2
x-amz-cf-id: iNsB1UDq_eQ7OIal0dSoiYTEhUNSJ8wmI3E3963xycWevkLE3SMUGA==
age: 54101
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
cmp.quantcast.com/choice/PRrmquD1Ggcb1/wordcounter.icu/choice.js?tag_version=V2
200 OK 0 B URL HTTP/2 cmp.quantcast.com/choice/PRrmquD1Ggcb1/wordcounter.icu/choice.js?tag_version=V2
IP
GET /choice/PRrmquD1Ggcb1/wordcounter.icu/choice.js?tag_version=V2 HTTP/1.1
Host: cmp.quantcast.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 15 Jul 2022 05:27:59 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
content-encoding: br
cache-control: max-age=900
date: Sat, 24 Sep 2022 19:51:18 GMT
etag: W/"d543dbae27e0fbc2490048ba8f5c5417"
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4ddd403b8cdc86f432a9bb587ffd918e.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR3-C2
x-amz-cf-id: Ukw0_2QMGEaKNR0G1fVtFlrxoBIAiQWyGPtMXKzf9YAs_giivKepXA==
age: 48
X-Firefox-Spdy: h2
152media.info/wrapper/wordcounter/prebid4.43.4.wordcounter_2.js
200 OK 0 B URL HTTP/2 152media.info/wrapper/wordcounter/prebid4.43.4.wordcounter_2.js
IP
GET /wrapper/wordcounter/prebid4.43.4.wordcounter_2.js HTTP/1.1
Host: 152media.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Sep 2022 19:52:06 GMT
content-type: application/javascript
last-modified: Wed, 10 Nov 2021 14:02:31 GMT
etag: W/"441ff-5d06fad51e8a2-gzip"
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xkRlh3Sgdp8R4cCB6kAaHFQvAl8HPZ0gtIPzZawUakvP9kODevz0FLuBVtCMDHRn3Ytx7nXjbNFV57Lsq9zwQVfZ4D27A6YbWG%2F%2FvbfsnTimIkTrplYKVY42Jl9z1QsI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74fe0effcca2b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cmp.quantcast.com/tcfv2/cmp2.js?referer=wordcounter.icu
200 OK 0 B URL HTTP/2 cmp.quantcast.com/tcfv2/cmp2.js?referer=wordcounter.icu
IP
GET /tcfv2/cmp2.js?referer=wordcounter.icu HTTP/1.1
Host: cmp.quantcast.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordcounter.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
access-control-max-age: 86400
last-modified: Wed, 14 Sep 2022 18:13:49 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-qc-ineu: True
server: AmazonS3
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: br
date: Sat, 24 Sep 2022 19:52:06 GMT
cache-control: max-age=3600
etag: W/"6d50b90bdafc3d438c55bd915fd5301d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4ddd403b8cdc86f432a9bb587ffd918e.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR3-C2
x-amz-cf-id: 8THv69626N6iqwZfGUelQb4xZo8MeViLZtDGbsn4MP9WC3PWIqTOlg==
age: 49
X-Firefox-Spdy: h2
104.21.29.154
185.239.173.66
34.120.237.76
104.18.32.68
185.255.84.151
23.36.76.226
18.184.40.219
185.172.90.251
151.101.85.229
37.157.2.238
185.170.62.34