www7.cuevana3.ch/392/la-odisea
188.114.97.1301 Moved Permanently 0 B URL HTTP/1.1 www7.cuevana3.ch/392/la-odisea
IP 188.114.97.1:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /392/la-odisea HTTP/1.1
Host: www7.cuevana3.ch
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 01 Apr 2023 03:30:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 01 Apr 2023 04:30:00 GMT
Location: https://www7.cuevana3.ch/392/la-odisea
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nCcrId6upiE1%2FdT1f5OSRDNlr37dREx1sEXLATw3dkk0bxHXb%2FU98b8ofS2dD6fs2wPsZqNWb1oXbSC758ZTAlqBxcYpPSTud8srHVC0f3pSyPZmyp3EuH9WkqYKUHdHY2x5"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7b0dc03eed6db4f1-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 7af19a5145a4ee99bdf18831bad04bfd
7bdd2a4785b999ef54a2644211d2b2b7190fb8e1
3237bf0111ecdec3615c4d2d49a602f48f800335d0194f52b600bdaefbd63ed0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3237BF0111ECDEC3615C4D2D49A602F48F800335D0194F52B600BDAEFBD63ED0"
Last-Modified: Thu, 30 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9303
Expires: Sat, 01 Apr 2023 06:05:03 GMT
Date: Sat, 01 Apr 2023 03:30:00 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 034b06325b334948200ef1d79d4ddeb7
b9a3c93cff37cbaaf20cca79b965b1a21c525ce8
417ce2093027b05cc34199c75e6b29f155c4dd3150651b6b3dbe8564098c4143
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "417CE2093027B05CC34199C75E6B29F155C4DD3150651B6B3DBE8564098C4143"
Last-Modified: Fri, 31 Mar 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9236
Expires: Sat, 01 Apr 2023 06:03:56 GMT
Date: Sat, 01 Apr 2023 03:30:00 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 7f03faaba3392caae6dae54467bfdf6d
57ea1f14e8bfbcca8190c706d708c9fda12442c1
02ac551ba61fcbc6b04f244df065948b181a8a258db5c2e197aae66fdfcea8ee
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Alert, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 01 Apr 2023 03:16:13 GMT
content-type: application/json
age: 827
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 374c9e295a804e605c402f48ae7e2446
967394b36ecdff2dd32842f878887f061024c6b3
7652dfcb9e2d620ce1d033be8ecc53166d2881154c15decd60899415e5ac2706
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7652DFCB9E2D620CE1D033BE8ECC53166D2881154C15DECD60899415E5AC2706"
Last-Modified: Thu, 30 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21466
Expires: Sat, 01 Apr 2023 09:27:46 GMT
Date: Sat, 01 Apr 2023 03:30:00 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: LN/srIl1SbbRd+CqeiGdN8+XlKnuoVyY/PxPVh2G/AsyNRxMxzWGdmGP3kdW+lxAHV6oKmKtlVA=
x-amz-request-id: EBVQKB5QFJ3WBGNV
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 01 Apr 2023 03:03:35 GMT
age: 1585
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 01 Apr 2023 03:30:00 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 5b6731341a66be32757ea461f5bd605a
f9a017cd1195d1eafb3839a899baf75f2e71958f
4bda8352f303d3fb71b8c4b2ecc9fbe75dcfc91dd2232260afb1e37ebbf139fb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Apr 2023 03:30:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-151873175-1
142.250.74.168200 OK 45 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-151873175-1
IP 142.250.74.168:0
File type ASCII text, with very long lines (2206)
Hash ed43e2cd8f18a886627a480003971adf
41b7b12e55bedde9dda5803b73875f11abe1c472
9890da682b832c60ac5011ed0596d81136e4e00e4b808fb6a0d556d70f380bdd
GET /gtag/js?id=UA-151873175-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 01 Apr 2023 03:30:00 GMT
expires: Sat, 01 Apr 2023 03:30:00 GMT
cache-control: private, max-age=900
last-modified: Sat, 01 Apr 2023 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 45039
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 5b6731341a66be32757ea461f5bd605a
f9a017cd1195d1eafb3839a899baf75f2e71958f
4bda8352f303d3fb71b8c4b2ecc9fbe75dcfc91dd2232260afb1e37ebbf139fb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Apr 2023 03:30:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pelisimg.online/cover/la-odisea.jpg
104.26.9.119200 OK 48 kB URL HTTP/2 pelisimg.online/cover/la-odisea.jpg
IP 104.26.9.119:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 326x480, components 3\012- data
Hash 43a6724829b07cb9458a62eafe18097e
7ca8e501eaf923286876e58492ea4aab8e5768db
5a48cad7b08d2ea582705460033822f5344922da0ea857528b6b4a58dc02219d
GET /cover/la-odisea.jpg HTTP/1.1
Host: pelisimg.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 01 Apr 2023 03:30:00 GMT
content-type: image/jpeg
content-length: 48066
last-modified: Mon, 06 May 2019 06:48:19 GMT
etag: "5ccfd8b3-bbc2"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=goEaEqTDGWE4EDK0OGfa2kKTpmJktBfAUR7CD8rezKJAnddp%2F0%2BG%2BDtxs7zcS3K2Cj9A6E%2BSyXzutDbnZczJVQZsT3B0DBR5CPTiJFTuccXA6hvFSIM3zoEcHlHI%2BGCokg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b0dc042a998b51d-OSL
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash f89764b5529b0921337bd77a61e1e56a
9306a0bd5335fc1d8fa08780164b26560f1cb8d3
e0f499802da95da189595b16aceb1984eece3fbf88f7494d3290fbec4df5b4eb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E0F499802DA95DA189595B16ACEB1984EECE3FBF88F7494D3290FBEC4DF5B4EB"
Last-Modified: Fri, 31 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3026
Expires: Sat, 01 Apr 2023 04:20:26 GMT
Date: Sat, 01 Apr 2023 03:30:00 GMT
Connection: keep-alive
imp9.bidgear.com/rec?t=1&z=6858&uuid=7fc7711eedf34dffa84e5ca8f8c22db9&p=85&g=NO&token=4a44335432&tbg=1680319800
104.26.3.107200 OK 599 B URL HTTP/2 imp9.bidgear.com/rec?t=1&z=6858&uuid=7fc7711eedf34dffa84e5ca8f8c22db9&p=85&g=NO&token=4a44335432&tbg=1680319800
IP 104.26.3.107:0
File type JPEG image data, baseline, precision 8, 1x1, components 3\012- data
Hash ca49a7e783b806a4e8576ea80346203d
6fe9d083221dae98f6c76f7121c37bc884b02d82
3e9a98dd5f0a28ff4a059f33d760264a6db02786666ac1692095ebb976f5da28
GET /rec?t=1&z=6858&uuid=7fc7711eedf34dffa84e5ca8f8c22db9&p=85&g=NO&token=4a44335432&tbg=1680319800 HTTP/1.1
Host: imp9.bidgear.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 01 Apr 2023 03:30:01 GMT
content-type: image/jpeg
content-length: 599
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wQK8gw8S0lUKtfmoCmkGl3uynxGGWjBVbbuRlZeXRvYpSNSAKsIt1mFlv22gLbl9%2FjU227pe%2F%2BdfGfhNZVtOkTRyLAG8PEGPI%2F7VM7iuSgxi5AK1QI%2FSql2xdrfeCXgho38%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b0dc043da2afab8-OSL
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Last-Modified, Alert, Backoff, Content-Type, ETag, Cache-Control, Retry-After, Expires, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 01 Apr 2023 03:17:27 GMT
age: 754
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.6.3/webfonts/fa-solid-900.woff2
172.64.132.15200 OK 79 kB URL HTTP/2 use.fontawesome.com/releases/v5.6.3/webfonts/fa-solid-900.woff2
IP 172.64.132.15:0
File type Web Open Font Format (Version 2), TrueType, length 79100, version 1.0\012- data
Hash 5dc01cfcd5336f696cb85da7ce53fa9b
28a1f2fadc35c5343e0280389fe7955e3d1be607
f419ad7a4477f36ce73c74a23dce784150ca38fa5075a8e06109709cbb716903
GET /releases/v5.6.3/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www7.cuevana3.ch
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 01 Apr 2023 03:30:01 GMT
content-type: font/woff2
content-length: 79100
x-amz-id-2: /VAEOFgRCgjB1DL5Hgj7kz2KT12XcXSdBbLCIhTG0HeSlpt9W8Du0vB7A4J6k2bTVYIZf9vYERc=
x-amz-request-id: K6S3865CFWNZ1QPB
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:44:54 GMT
etag: "5dc01cfcd5336f696cb85da7ce53fa9b"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 344058
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4gnfOTSFYXX5O7k6vs671WxSVtPNZJSRVOlQDOoN%2Bm0MHVSz4XuiYG78sirRLwkGi%2F9jA2QBv8yblF4IGWITft6aW2O%2FqsUY%2F%2B26ECA6dKQNbXYqrRDsuqreI3VhXH7iO5Bmy%2Fbi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b0dc044396623e4-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.6.3/webfonts/fa-brands-400.woff2
172.64.132.15200 OK 74 kB URL HTTP/2 use.fontawesome.com/releases/v5.6.3/webfonts/fa-brands-400.woff2
IP 172.64.132.15:0
File type Web Open Font Format (Version 2), TrueType, length 74288, version 1.0\012- data
Hash eac60e8a656781e13d2a674b4d9051c0
0039be9d8a99d1e5cf200ca3e08757692020460e
eed474a49bdbf745c19e463f070e67977c1ab27835603eb749d9e5c249cf81f8
GET /releases/v5.6.3/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www7.cuevana3.ch
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 01 Apr 2023 03:30:01 GMT
content-type: font/woff2
content-length: 74288
x-amz-id-2: rzXsZ73liIZJxhLCvhCT4TieoT+uCIa8IHmVnHAx4jHTrG27zIhQytU/ACV/pm+lQeyZ89vszwU=
x-amz-request-id: K6S707BS6S47RC1G
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:44:54 GMT
etag: "eac60e8a656781e13d2a674b4d9051c0"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 344058
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=34VLf62NXCx2rSbyhFLAj2aq4jt%2B1bkKDVW4lDIvzODN0OySZy2zPLTe6iAnHI1JM%2F9t9ZrMmPg4POZ30WCCUOYLjRYNY7%2Fe4doBPRxzhintEVTRY%2BZqZLNeVKhrgu7g2ZuJrFlR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b0dc044496823e4-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
imp9.bidgear.com/rec?t=1&z=6326&uuid=d9d62c335bec4825b03cd4c7dac2568b&p=100&g=NO&token=4a44335432&tbg=1680319800
104.26.3.107200 OK 599 B URL HTTP/2 imp9.bidgear.com/rec?t=1&z=6326&uuid=d9d62c335bec4825b03cd4c7dac2568b&p=100&g=NO&token=4a44335432&tbg=1680319800
IP 104.26.3.107:0
File type JPEG image data, baseline, precision 8, 1x1, components 3\012- data
Hash ca49a7e783b806a4e8576ea80346203d
6fe9d083221dae98f6c76f7121c37bc884b02d82
3e9a98dd5f0a28ff4a059f33d760264a6db02786666ac1692095ebb976f5da28
GET /rec?t=1&z=6326&uuid=d9d62c335bec4825b03cd4c7dac2568b&p=100&g=NO&token=4a44335432&tbg=1680319800 HTTP/1.1
Host: imp9.bidgear.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 01 Apr 2023 03:30:01 GMT
content-type: image/jpeg
content-length: 599
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PDDoVMf7SWPZYJ8Gax2SmKIlmQnqzjzQJPtCo66zln7qhKmDKTTaoWabO8SBX6grtj8xDSZtaQnxhqKpVVpG%2BS7aZj%2BNcgIqhmWI6aIxfWNnJypC%2BPQdxXTI190wQx3gpb0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b0dc043ca10fab8-OSL
X-Firefox-Spdy: h2
push.services.mozilla.com/
34.117.65.55101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.117.65.55:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: lyIELATi02ECxOA2+kPGWA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: VYcRCjFZgHaBdLx4aYP+eBCb6Es=
Date: Sat, 01 Apr 2023 03:30:01 GMT
Via: 1.1 google
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 0df2e2ff4ead187d9223303ef5099043
d2a02977a9a7606d61848f7df79197c950a487eb
e876264f6b57ac3f7e70b97c840fe9519bfde482e7ffd3009a4d21cc1603f372
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 01 Apr 2023 03:30:01 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 31 Mar 2023 01:11:36 GMT
Expires: Fri, 07 Apr 2023 01:11:35 GMT
Etag: "d2a02977a9a7606d61848f7df79197c950a487eb"
Cache-Control: max-age=509493,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7b0dc04458210b59-OSL
d1ha41wacubcnb.cloudfront.net/?awahd=977549
54.230.245.3200 OK 54 kB URL HTTP/2 d1ha41wacubcnb.cloudfront.net/?awahd=977549
IP 54.230.245.3:0
File type Unicode text, UTF-8 text, with very long lines (15948)
Hash 75c1c66c79fcf297169e33659f53b9bd
0357218af741c3013187e77a9220fad04ef295eb
1b0f7caa7b26b42e8a3af49fa1252110a485afdc69d0da96050eed774dd74ba4
GET /?awahd=977549 HTTP/1.1
Host: d1ha41wacubcnb.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 53814
date: Sat, 01 Apr 2023 03:30:01 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YHdQP9SU0DJTV0J7YH4gTtIIPygctaN0aCjAeb9X40eWGmfG7RRB-Q==
X-Firefox-Spdy: h2
tags.h12-media.com/load2.js
154.51.131.137200 OK 80 kB URL HTTP/2 tags.h12-media.com/load2.js
IP 154.51.131.137:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash a006c6f06bd998f8f3f20525a17d90d6
23b58640b6d89e5707489e1117539e42e5f05169
5491690dfebeda0b9170de22149ed42fed9b6452929ceac450fed7be15f66f2a
GET /load2.js HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=86400
content-type: application/javascript
content-encoding: gzip
last-modified: Sat, 10 Dec 2022 17:21:25 GMT
accept-ranges: bytes
etag: "d458c1d4bbcd91:0"
server: Microsoft-IIS/10.0
x-powered-by: ARR/3.0
date: Sat, 01 Apr 2023 03:29:27 GMT
content-length: 79878
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 2afc6b112574339041eb497d08822f99
6b57d5bd75b4dea75249bd85076cd9dd04c8375b
92bf80cb6bb160fd9cd4df1a8ba50947d5627737bb65329d8da0ac698ab1fe72
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "92BF80CB6BB160FD9CD4DF1A8BA50947D5627737BB65329D8DA0AC698AB1FE72"
Last-Modified: Wed, 29 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21484
Expires: Sat, 01 Apr 2023 09:28:05 GMT
Date: Sat, 01 Apr 2023 03:30:01 GMT
Connection: keep-alive
tipcupids.com/t4gh9f4nnRRcWja/61515
142.91.159.89200 OK 25 B URL HTTP/1.1 tipcupids.com/t4gh9f4nnRRcWja/61515
IP 142.91.159.89:0
File type ASCII text, with no line terminators
Hash d488addc5df5fc9b9ff4135bb4e3a823
6ce56f48e851df4d562b43d3bc1269a504ae83fc
d1e90b8aef655ca37932287e04cbda72092eb029fe90de2bac019c10d3431f60
Analyzer Verdict Alert fortinet Malware
GET /t4gh9f4nnRRcWja/61515 HTTP/1.1
Host: tipcupids.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 01 Apr 2023 03:30:01 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www7.cuevana3.ch
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2BWXVBJ%2BEAHqFVQXz0Za%2FgIyntH6wL7aZU0NtLTPRtMvlNJgiCqLpFuGYJ4k9R414NvJGs5fKhfmRNUz8JRkPfvvTtc8MFa3Gll86LfiKf4LDMwvnOrwmOIxlyWnbSKipwt6u%2F5mzsZhKkvRNGFUjnXUwF8t7ZbSFXxUiMmAn5STsa7NcuxId1iDmr96zNnkOGyC5VXF4jf9NG7cvyiIizsswC3Fwm4Qfr5k6rLEQ6OqEI4SsOUngarftGrmg5e3sB7KS6f%2F97HG%2BcIVO0aklIrX8n9wNAfU5r; expires=Sun, 02-Apr-2023 03:30:01 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJw9i8sKwjAURGuUYNVWBvwAf8D6QBdu1aXUhbgOtd6WYM0tTXzUr%2FcFruYwc8bzPDEIIXSJ3nIaLSfRfBZNF3M0c2KIeIdeylfjqlqZ5EKQMVf3pIasKNdsAnR%2FoFI%2BETrxbnQwZ8N38x8%2BtwCtVLs6gP%2BJrxu20dS2RLgq9GO45%2BLq3raFb8gpWxKd4K%2BTY0HjzX6L8N9%2Bz7KBtraqrPhRv7nv9IWebEhxlllyUqBxk%2BIFsdRBIw%3D%3D; expires=Sun, 02-Apr-2023 03:30:01 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 8dc114cce8ab5aecfebf84dab9060072
479b705b689ef4f60be937c8a8c7582ef629963c
41a16682e1ecc3d3f08e700744a1e109e0354706f27cab1cdc5713da19cfa242
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "41A16682E1ECC3D3F08E700744A1E109E0354706F27CAB1CDC5713DA19CFA242"
Last-Modified: Fri, 31 Mar 2023 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1480
Expires: Sat, 01 Apr 2023 03:54:41 GMT
Date: Sat, 01 Apr 2023 03:30:01 GMT
Connection: keep-alive
ubygsworlow.com/RXgxWVdqR1IqaiYTdzgADTp5PToxDGBpFXUZXGgeFCB3MzZ1NRctPiFFCG5gcEwIfycsHAxocTYMUC0iNkUAfz4rHl5kcTNFAHdkcVYCa3l3XkRkZmMMQTgweEkXKSMxFAxoYX1IAmhufUgBaWdw
188.114.96.1204 No Content 0 B URL HTTP/2 ubygsworlow.com/RXgxWVdqR1IqaiYTdzgADTp5PToxDGBpFXUZXGgeFCB3MzZ1NRctPiFFCG5gcEwIfycsHAxocTYMUC0iNkUAfz4rHl5kcTNFAHdkcVYCa3l3XkRkZmMMQTgweEkXKSMxFAxoYX1IAmhufUgBaWdw
IP 188.114.96.1:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /RXgxWVdqR1IqaiYTdzgADTp5PToxDGBpFXUZXGgeFCB3MzZ1NRctPiFFCG5gcEwIfycsHAxocTYMUC0iNkUAfz4rHl5kcTNFAHdkcVYCa3l3XkRkZmMMQTgweEkXKSMxFAxoYX1IAmhufUgBaWdw HTTP/1.1
Host: ubygsworlow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 01 Apr 2023 03:30:01 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WxDQpz63zIoFBsvo3fFlef%2BXrqAcZIgnq4fjhOuRlUClxZZ16D3z5hhoVoJZURCUykTBpAN7%2FAvNx0pecSvTIY4hiPrOy8OCkW2GEVosZjWPS9budATmIEvlB4Yb7PMP3xo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b0dc046afb1b4fd-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
esnlynotquiteso.com/bUxDQXgMLiAsRwxxIWcNHyB+ZEoraXEHHFwkInVJGi0gNBoOIiFvGwEjNiUeHyMtNVYDKTdkSistFRc+BwEEFEo9K3IWLwQJdwMPXC8aLCI6DgU5AiI0ASc7FBowBCAZHwQmIScqEgRALw4VFzsXBRITLTwqDhYAOQokKkg9OxIPKRcNZnM+LA1yFBsXDQsUFAUkJzkcLA8pdAsufRoJKBQVDBQqICYIFC4rDgQmQCkJLAw3OXwABy4OGBkESCwdBCUQPnwgDDcXGQ4TADc7GnA2CAkbAxI4OwUXHV8KBAABCTsacDYlCAc1Fjs0FRY+Xh4RADpcJhkUVTQICXI6BxlzCCwOCwooOTsaJCdJIBYSBhwFDgUUPz0mdgY5BAItGC4kDRUWKgUZKxcgNxggCikKDTkREB4aFTk2Chk0FzQ3FCAWPDsdZSsLAiIzfAomewwWEiAoKhQOCCIkAA
52.85.242.16200 OK 1.2 kB URL HTTP/2 esnlynotquiteso.com/bUxDQXgMLiAsRwxxIWcNHyB+ZEoraXEHHFwkInVJGi0gNBoOIiFvGwEjNiUeHyMtNVYDKTdkSistFRc+BwEEFEo9K3IWLwQJdwMPXC8aLCI6DgU5AiI0ASc7FBowBCAZHwQmIScqEgRALw4VFzsXBRITLTwqDhYAOQokKkg9OxIPKRcNZnM+LA1yFBsXDQsUFAUkJzkcLA8pdAsufRoJKBQVDBQqICYIFC4rDgQmQCkJLAw3OXwABy4OGBkESCwdBCUQPnwgDDcXGQ4TADc7GnA2CAkbAxI4OwUXHV8KBAABCTsacDYlCAc1Fjs0FRY+Xh4RADpcJhkUVTQICXI6BxlzCCwOCwooOTsaJCdJIBYSBhwFDgUUPz0mdgY5BAItGC4kDRUWKgUZKxcgNxggCikKDTkREB4aFTk2Chk0FzQ3FCAWPDsdZSsLAiIzfAomewwWEiAoKhQOCCIkAA
IP 52.85.242.16:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3049), with no line terminators
Hash f107ddddca422676b329ff4b939778ba
0157bbed1b11794f72e22f6636365297aa69ac5b
dfb46d9eef6371bfc54ca64c8b653d3518981d11e25d92ee7549cab124d7cd77
GET /bUxDQXgMLiAsRwxxIWcNHyB+ZEoraXEHHFwkInVJGi0gNBoOIiFvGwEjNiUeHyMtNVYDKTdkSistFRc+BwEEFEo9K3IWLwQJdwMPXC8aLCI6DgU5AiI0ASc7FBowBCAZHwQmIScqEgRALw4VFzsXBRITLTwqDhYAOQokKkg9OxIPKRcNZnM+LA1yFBsXDQsUFAUkJzkcLA8pdAsufRoJKBQVDBQqICYIFC4rDgQmQCkJLAw3OXwABy4OGBkESCwdBCUQPnwgDDcXGQ4TADc7GnA2CAkbAxI4OwUXHV8KBAABCTsacDYlCAc1Fjs0FRY+Xh4RADpcJhkUVTQICXI6BxlzCCwOCwooOTsaJCdJIBYSBhwFDgUUPz0mdgY5BAItGC4kDRUWKgUZKxcgNxggCikKDTkREB4aFTk2Chk0FzQ3FCAWPDsdZSsLAiIzfAomewwWEiAoKhQOCCIkAA HTTP/1.1
Host: esnlynotquiteso.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1197
date: Sat, 01 Apr 2023 03:30:01 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 350f2b5d7e6ee985da330b123098fd88.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: MY1zs7iXGcNVEgZzoNoFB03JtQu6Gm7fYUXMo0GC6dCtcdDI2GuzXA==
X-Firefox-Spdy: h2
push-sdk.net/f/sdk.js?z=829726
157.90.33.72200 OK 14 kB URL HTTP/2 push-sdk.net/f/sdk.js?z=829726
IP 157.90.33.72:0
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (52262), with no line terminators
Hash 7f327907ecaac346c5be49cf1dcf6415
352fde9a4be31d5e84986f1614ec193c001eb332
f4cbf652a9fddccce4ccfc8615ee9e0ba7790d1886f0bbe73c362fcf36415c9c
GET /f/sdk.js?z=829726 HTTP/1.1
Host: push-sdk.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 01 Apr 2023 03:30:01 GMT
content-type: application/javascript; charset=utf-8
content-length: 14465
content-encoding: gzip
cache-control: no-cache, max-age=0, must-revalidate, proxy-revalidate
X-Firefox-Spdy: h2
f.h12-media.com/?init=1&rnd=0.6564515007589771
188.114.96.1200 OK 25 B URL HTTP/2 f.h12-media.com/?init=1&rnd=0.6564515007589771
IP 188.114.96.1:0
File type JSON data\012- , ASCII text, with no line terminators
Hash b8f5efe8dd460ea4c368a26470dc0593
287cd8f27a4a3abcb72a398ea1ba42ee0d181b2f
11ae0cb9db365aaa9503d5d18657d0bce5ea16d24a1cd24959d304b79e3a9f44
GET /?init=1&rnd=0.6564515007589771 HTTP/1.1
Host: f.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www7.cuevana3.ch
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 01 Apr 2023 03:30:01 GMT
content-type: application/json; Charset=UTF-8
cache-control: max-age=3600,private
vary: Accept-Encoding
access-control-allow-origin: *
x-powered-by: ASP.NET, ARR/3.0
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gP42dCOPjYwl5kl6TBm%2FsdnNF1H4DENpp4U56w%2BMTAwbuzfT6mP6L%2BeakgklYBJa%2F8p3b7Ejy87FzzTXCkoRSpvGFGyqvz1pEHiw3peIv%2BMjE3AhHbBMEgi%2ByCMHjMXQgfY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b0dc047a94bb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
192.229.221.95200 OK 471 B IP 192.229.221.95:0
Hash 02303126c6c390b3c06593625186f4bf
1b71c1b9a6e5c84536de78021f94f87424579298
2cffed5b6470da73dc57dd9c5c7a5683e83f0e947eb63fbd8a8e226b18192a76
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1776
Cache-Control: max-age=145134
Content-Type: application/ocsp-response
Date: Sat, 01 Apr 2023 03:30:01 GMT
Etag: "64273237-1d7"
Expires: Sun, 02 Apr 2023 19:48:55 GMT
Last-Modified: Fri, 31 Mar 2023 19:19:19 GMT
Server: ECAcc (ska/F6D2)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/analytics.js
142.250.74.110200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.110:0
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Sat, 01 Apr 2023 02:05:12 GMT
expires: Sat, 01 Apr 2023 04:05:12 GMT
cache-control: public, max-age=7200
age: 5089
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 27931d15bf5fa11151ea03fc7122c56f
986529ca57686f94180a03dd7bd7068ff464bfa5
3893e3cfd05d015568d2672801fadba7875631dfe6a950c95d35cbb2a56120dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Apr 2023 03:30:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
192.229.221.95200 OK 471 B IP 192.229.221.95:0
Hash 02303126c6c390b3c06593625186f4bf
1b71c1b9a6e5c84536de78021f94f87424579298
2cffed5b6470da73dc57dd9c5c7a5683e83f0e947eb63fbd8a8e226b18192a76
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6142
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 01 Apr 2023 03:30:01 GMT
Last-Modified: Sat, 01 Apr 2023 01:47:40 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 27931d15bf5fa11151ea03fc7122c56f
986529ca57686f94180a03dd7bd7068ff464bfa5
3893e3cfd05d015568d2672801fadba7875631dfe6a950c95d35cbb2a56120dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Apr 2023 03:30:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/es_LA/sdk.js
31.13.72.12200 OK 1.7 kB URL HTTP/2 connect.facebook.net/es_LA/sdk.js
IP 31.13.72.12:0
File type ASCII text, with very long lines (1957)
Hash a503e7ae18868ecf6696ccd2b548ec4b
8d2c7758febbd4b5be0d466f62f9b4ec3cc86263
f94f70ed2c01af26d864e3deb9ee12f0ec8e43023d8fe61dbc1f610e3cae0dda
GET /es_LA/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www7.cuevana3.ch
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 120aeff3b84183c1db8ec021664d694e
etag: "e423c27db77728d0ea0a06de95da8c3b"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Sat, 01 Apr 2023 03:33:04 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: pQPnrhiGjs9mlszStUjsSw==
x-fb-debug: yh39kU8zXaNxuXaqxiBEcolli915VovIyZq5l7ouyK2dN6eLpfNSMAEQvcqUOMTJp0u5Nh8He4OIXI1u8HkQYA==
content-length: 1685
x-fb-trip-id: 1904183273
date: Sat, 01 Apr 2023 03:30:01 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
platform.bidgear.com/async.php?domainid=5786&sizeid=2&zoneid=6858&k=1680319799376
104.26.3.107200 OK 4.9 kB URL HTTP/2 platform.bidgear.com/async.php?domainid=5786&sizeid=2&zoneid=6858&k=1680319799376
IP 104.26.3.107:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (10689), with no line terminators
Hash 9fb47c9f9b7f88f24598614c467bf6f1
36df023607a0910c99288250259e9c1d91cc7fa1
a2e1be889c69755df035b60108de51da9ac674adb20a8f60048c42c7b2c08208
GET /async.php?domainid=5786&sizeid=2&zoneid=6858&k=1680319799376 HTTP/1.1
Host: platform.bidgear.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 01 Apr 2023 03:30:00 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f13y%2F3aJBzHN4FOr8Li2a1nSn2XSLTXU22cPZmcRkM0a1QNcUOOjE%2BNd0%2B27FT50GQhcihSB2DPGihtHBIjgDcYPoH6n%2BDw3%2F%2BA7a0y360DwPZ7%2FMuXAhWS%2BgnFiHLuBqJ5HAyKr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b0dc042c9cefab8-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j99&a=1836412316&t=pageview&_s=1&dl=https%3A%2F%2Fwww7.cuevana3.ch%2F392%2Fla-odisea&ul=en-us&de=UTF-8&dt=Ver%20La%20Odisea%20(1997)%20Online%20%7C%20Cuevana%203%20Peliculas%20Online&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=966377594&gjid=2067999479&cid=1801106446.1680319800&tid=UA-151873175-1&_gid=1875701759.1680319800&_r=1>m=457e33t0&jsscut=1&z=730204370
142.250.74.110200 OK 1 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j99&a=1836412316&t=pageview&_s=1&dl=https%3A%2F%2Fwww7.cuevana3.ch%2F392%2Fla-odisea&ul=en-us&de=UTF-8&dt=Ver%20La%20Odisea%20(1997)%20Online%20%7C%20Cuevana%203%20Peliculas%20Online&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=966377594&gjid=2067999479&cid=1801106446.1680319800&tid=UA-151873175-1&_gid=1875701759.1680319800&_r=1>m=457e33t0&jsscut=1&z=730204370
IP 142.250.74.110:0
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?v=1&_v=j99&a=1836412316&t=pageview&_s=1&dl=https%3A%2F%2Fwww7.cuevana3.ch%2F392%2Fla-odisea&ul=en-us&de=UTF-8&dt=Ver%20La%20Odisea%20(1997)%20Online%20%7C%20Cuevana%203%20Peliculas%20Online&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=966377594&gjid=2067999479&cid=1801106446.1680319800&tid=UA-151873175-1&_gid=1875701759.1680319800&_r=1>m=457e33t0&jsscut=1&z=730204370 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www7.cuevana3.ch
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www7.cuevana3.ch
date: Sat, 01 Apr 2023 03:30:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
d1ha41wacubcnb.cloudfront.net/aVVFjMGU2Pg1WWiE4Bw1cYmZWBFxzOxBfCyVsEXtSGgYJfQE8BBVVCzIQRUQfMWxTFgk0PwQNQzA/AA1UczAHUlhhdxdACj5sC1YHPyYOURMjKUVFBGg8DEoMOT0CFVcTZE0AQGdhS0cMOzUMRxZwY1NeEXBjUwFVe2FGAydwY1NHDDtnVxVWF3RRAB1jZU-YDJ3BjU0ITcGIiAVVgf1MZQGdhBFUGPj5GAiNnYVIAVWRhUhVXZTcKQgAzPhsVVxNgUwVLZXcWDVQ
54.230.245.3200 OK 557 B URL HTTP/2 d1ha41wacubcnb.cloudfront.net/aVVFjMGU2Pg1WWiE4Bw1cYmZWBFxzOxBfCyVsEXtSGgYJfQE8BBVVCzIQRUQfMWxTFgk0PwQNQzA/AA1UczAHUlhhdxdACj5sC1YHPyYOURMjKUVFBGg8DEoMOT0CFVcTZE0AQGdhS0cMOzUMRxZwY1NeEXBjUwFVe2FGAydwY1NHDDtnVxVWF3RRAB1jZU-YDJ3BjU0ITcGIiAVVgf1MZQGdhBFUGPj5GAiNnYVIAVWRhUhVXZTcKQgAzPhsVVxNgUwVLZXcWDVQ
IP 54.230.245.3:0
File type ASCII text, with very long lines (795), with no line terminators
Hash 2ddac115df1ae809bcc82ea6c781d420
de6ac9fe0147c1996340513121a929d212417406
10c658a2bc020a1cf82a21817ce3a185bf8e80f908690ff1ad61e7cb8cebeb35
GET /aVVFjMGU2Pg1WWiE4Bw1cYmZWBFxzOxBfCyVsEXtSGgYJfQE8BBVVCzIQRUQfMWxTFgk0PwQNQzA/AA1UczAHUlhhdxdACj5sC1YHPyYOURMjKUVFBGg8DEoMOT0CFVcTZE0AQGdhS0cMOzUMRxZwY1NeEXBjUwFVe2FGAydwY1NHDDtnVxVWF3RRAB1jZU-YDJ3BjU0ITcGIiAVVgf1MZQGdhBFUGPj5GAiNnYVIAVWRhUhVXZTcKQgAzPhsVVxNgUwVLZXcWDVQ HTTP/1.1
Host: d1ha41wacubcnb.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://esnlynotquiteso.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 557
date: Sat, 01 Apr 2023 03:30:01 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2z-1iOeArBO-YM4BLRfRQGiCSNtrXwPP82acOJ9MfgAFSdoo2BfDrg==
X-Firefox-Spdy: h2
connect.facebook.net/es_LA/sdk.js?hash=ca6ff7bbb72db1cddcc9a7c995bd79a8
31.13.72.12200 OK 87 kB URL HTTP/2 connect.facebook.net/es_LA/sdk.js?hash=ca6ff7bbb72db1cddcc9a7c995bd79a8
IP 31.13.72.12:0
File type ASCII text, with very long lines (13192)
Hash f1b650ed987f1f4fcbc3f68800c8fee3
d44695c7bb0bede49276664151ab0a1e368604f2
854c1e9d4df52461187beb0e115945c74ea981551c703f8e56eebdf2831bb82e
GET /es_LA/sdk.js?hash=ca6ff7bbb72db1cddcc9a7c995bd79a8 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www7.cuevana3.ch
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 3ddf17cc1185ca40543ce0f59f6c095d
etag: "018debddd8cdfa382db67a7747fabafd"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Sun, 31 Mar 2024 02:13:01 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: 8bZQ7Zh/H0/Lw/aIAMj+4w==
x-fb-debug: FS5usyhlvPHNn0ljGnQKxLasyNvEQh/LEj7b4qbnOTVk8s7vEqHk3tJurDTquLVJqhJWvaEy7gUzM3EusGwaLw==
content-length: 87160
x-fb-trip-id: 1904183273
date: Sat, 01 Apr 2023 03:30:01 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
tags.h12-media.com/v3/go.asp?payload=%7B%22mtoken%22%3A%2291.90.42.154%22%2C%22adtype%22%3A%22sticky%22%2C%22adformat%22%3A%22stickybottom%22%2C%22pubid%22%3A%22f21629f80d751907d93079a5076d4249%22%2C%22adunitid%22%3A%2228598%22%2C%22topurl%22%3A%22https%3A%2F%2Fwww7.cuevana3.ch%2F392%2Fla-odisea%22%2C%22docref%22%3A%22%22%2C%22auction%22%3A%2299jmdgirgu8%22%2C%22pubsubid%22%3Anull%2C%22index%22%3A%221%22%2C%22ishidden%22%3Afalse%2C%22istopwindow%22%3Atrue%2C%22isscrollable%22%3Atrue%2C%22dayofweek%22%3A6%2C%22hourofday%22%3A3%2C%22clang%22%3A%22en-US%22%2C%22docdir%22%3A%22LTR%22%2C%22cdims%22%3A%5B1268%2C939%5D%2C%22ddims%22%3A%5B1268%2C3894%5D%2C%22sbars%22%3A%5B0%2C0%5D%2C%22endpoint%22%3A%22https%3A%2F%2Ftags.h12-media.com%22%2C%22coords%22%3A%5B0%2C3879%5D%2C%22pwidth%22%3A%5B100%2C1268%5D%2C%22pheight%22%3A%5Bnull%2C0%2C3893%5D%2C%22maxwidth%22%3A1268%2C%22maxheight%22%3A939%7D&rnd=0.2580108655793081
154.51.131.137200 OK 25 kB URL HTTP/2 tags.h12-media.com/v3/go.asp?payload=%7B%22mtoken%22%3A%2291.90.42.154%22%2C%22adtype%22%3A%22sticky%22%2C%22adformat%22%3A%22stickybottom%22%2C%22pubid%22%3A%22f21629f80d751907d93079a5076d4249%22%2C%22adunitid%22%3A%2228598%22%2C%22topurl%22%3A%22https%3A%2F%2Fwww7.cuevana3.ch%2F392%2Fla-odisea%22%2C%22docref%22%3A%22%22%2C%22auction%22%3A%2299jmdgirgu8%22%2C%22pubsubid%22%3Anull%2C%22index%22%3A%221%22%2C%22ishidden%22%3Afalse%2C%22istopwindow%22%3Atrue%2C%22isscrollable%22%3Atrue%2C%22dayofweek%22%3A6%2C%22hourofday%22%3A3%2C%22clang%22%3A%22en-US%22%2C%22docdir%22%3A%22LTR%22%2C%22cdims%22%3A%5B1268%2C939%5D%2C%22ddims%22%3A%5B1268%2C3894%5D%2C%22sbars%22%3A%5B0%2C0%5D%2C%22endpoint%22%3A%22https%3A%2F%2Ftags.h12-media.com%22%2C%22coords%22%3A%5B0%2C3879%5D%2C%22pwidth%22%3A%5B100%2C1268%5D%2C%22pheight%22%3A%5Bnull%2C0%2C3893%5D%2C%22maxwidth%22%3A1268%2C%22maxheight%22%3A939%7D&rnd=0.2580108655793081
IP 154.51.131.137:0
File type ISO-8859 text, with very long lines (10181), with CRLF line terminators
Hash 1af9d2ed1dc9dc6d32c77ecff0c6606e
9571b31bf07f539511c91be4751ce4f132734ee7
3387372bca5a417646a1d24e6f3023a6a8f15c4ef0df2b11c180bb687aec52d4
GET /v3/go.asp?payload=%7B%22mtoken%22%3A%2291.90.42.154%22%2C%22adtype%22%3A%22sticky%22%2C%22adformat%22%3A%22stickybottom%22%2C%22pubid%22%3A%22f21629f80d751907d93079a5076d4249%22%2C%22adunitid%22%3A%2228598%22%2C%22topurl%22%3A%22https%3A%2F%2Fwww7.cuevana3.ch%2F392%2Fla-odisea%22%2C%22docref%22%3A%22%22%2C%22auction%22%3A%2299jmdgirgu8%22%2C%22pubsubid%22%3Anull%2C%22index%22%3A%221%22%2C%22ishidden%22%3Afalse%2C%22istopwindow%22%3Atrue%2C%22isscrollable%22%3Atrue%2C%22dayofweek%22%3A6%2C%22hourofday%22%3A3%2C%22clang%22%3A%22en-US%22%2C%22docdir%22%3A%22LTR%22%2C%22cdims%22%3A%5B1268%2C939%5D%2C%22ddims%22%3A%5B1268%2C3894%5D%2C%22sbars%22%3A%5B0%2C0%5D%2C%22endpoint%22%3A%22https%3A%2F%2Ftags.h12-media.com%22%2C%22coords%22%3A%5B0%2C3879%5D%2C%22pwidth%22%3A%5B100%2C1268%5D%2C%22pheight%22%3A%5Bnull%2C0%2C3893%5D%2C%22maxwidth%22%3A1268%2C%22maxheight%22%3A939%7D&rnd=0.2580108655793081 HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-store,no-cache,max-age=0,private
content-type: application/x-javascript; Charset=UTF-8
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
set-cookie: 7thMile=915efff1%2D29f2%2D43ea%2Daf5d%2D587da529e5ad; Max-Age=5000000; Domain=.h12-media.com; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
access-control-allow-origin:
srg-x: x-.180
x-powered-by: ARR/3.0
date: Sat, 01 Apr 2023 03:29:28 GMT
content-length: 25002
X-Firefox-Spdy: h2
ocsp.digicert.com/
192.229.221.95200 OK 471 B IP 192.229.221.95:0
Hash 02303126c6c390b3c06593625186f4bf
1b71c1b9a6e5c84536de78021f94f87424579298
2cffed5b6470da73dc57dd9c5c7a5683e83f0e947eb63fbd8a8e226b18192a76
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1776
Cache-Control: max-age=145134
Content-Type: application/ocsp-response
Date: Sat, 01 Apr 2023 03:30:01 GMT
Etag: "64273237-1d7"
Expires: Sun, 02 Apr 2023 19:48:55 GMT
Last-Modified: Fri, 31 Mar 2023 19:19:19 GMT
Server: ECAcc (ska/F6AF)
X-Cache: HIT
Content-Length: 471
api.movcloud.net/v1/count/movie/es/episode/25971
172.67.210.193200 OK 0 B URL HTTP/2 api.movcloud.net/v1/count/movie/es/episode/25971
IP 172.67.210.193:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v1/count/movie/es/episode/25971 HTTP/1.1
Host: api.movcloud.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pelisplay.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 01 Apr 2023 03:30:01 GMT
content-type: text/javascript; charset=utf-8
content-length: 0
x-dns-prefetch-control: off
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
vary: Origin
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bgjPZWOaeKEuM4lXGU2u0%2BW8FSBW5TthzmqRU5%2Bqrk4R2%2F92Pc2DyLSNoLgo8t9bbogMtV4jJ%2FNzJn9brV1M%2BbeUtk%2BIedSxkoofLa72jPXQgHbDSJ5YleMbzw%2FBOQf22iU2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b0dc049fd6fb4ed-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
pelisnetwork.com/pub?id=19
172.67.150.247200 OK 4.8 kB URL HTTP/2 pelisnetwork.com/pub?id=19
IP 172.67.150.247:0
File type ASCII text, with very long lines (12468), with no line terminators
Hash eed1f79078e3e51b3ced068a626f0417
6ba718a23198458e0fd55c75585390ece0109ad8
1d87fa9405703764b347ab19d94ad6735686c019664525d2b121c24c477775ad
GET /pub?id=19 HTTP/1.1
Host: pelisnetwork.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pelisplay.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 01 Apr 2023 03:30:01 GMT
content-type: text/javascript;charset=UTF-8
cf-bgj: minify
cf-polished: origSize=12469
vary: Accept-Encoding
cache-control: max-age=120
cf-cache-status: HIT
age: 534
last-modified: Sat, 01 Apr 2023 03:21:07 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O2Y9494PKgzo2%2B9%2FR75dmBnbZPV3%2FA2JrN%2BuMZ3XqfYW3lvIz1wKvzb%2FOnLRKUJWbHNhZyWmDgedEG%2FQWdK1giNpMIxtVANMni2eSlpgwtJh3mJFOzmgaJ6oKMDzBaFT88qD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b0dc049f849b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AQMjQ7TawKESrv5nxWlq36rniakI9O9P9SNY451IgjFGOF6pmNDCggp1VRl7uTqpH9AHm1qZWH6wOA
142.250.74.109302 Found 396 B URL HTTP/2 accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AQMjQ7TawKESrv5nxWlq36rniakI9O9P9SNY451IgjFGOF6pmNDCggp1VRl7uTqpH9AHm1qZWH6wOA
IP 142.250.74.109:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (381)
Hash 6383f3cfe11bceff9aba8fe5ce597345
ac837380a212685e1b61aec227a56c1aacb903e4
73dc8e3bb124b4908f0573d5f28b307e2948fc70e670063bf8e03dcee2dfe7ad
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AQMjQ7TawKESrv5nxWlq36rniakI9O9P9SNY451IgjFGOF6pmNDCggp1VRl7uTqpH9AHm1qZWH6wOA HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www7.cuevana3.ch/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 01 Apr 2023 03:30:02 GMT
location: https://accounts.google.com/v3/signin/identifier?dsh=S269135420%3A1680319802042311&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AQMjQ7SEQcZxgd2C4jR1Er_-PdxvLOm_0WlOkWzeENGLiqJts8pG_bt1Q_9ED-hw9MtC3EpaOf7L&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: script-src 'nonce-DqkNeylTIEhuRT0Br8s89g' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 396
server: GSE
set-cookie: __Host-GAPS=1:Q__DiSaBQmT2VtdAqzvNOi19L_Pt5Q:QjwvRieEbg2ZKTDV;Path=/;Expires=Mon, 31-Mar-2025 03:30:02 GMT;Secure;HttpOnly;Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ssl.p.jwpcdn.com/player/v/8.9.2/jwpsrv.js
151.101.130.114200 OK 16 kB URL HTTP/2 ssl.p.jwpcdn.com/player/v/8.9.2/jwpsrv.js
IP 151.101.130.114:0
File type ASCII text, with very long lines (52722)
Hash 3a954dcd50dc54229d30bffac2aa1f7d
9f978eafddce1d7ca4d46444c3c2fe872d1c5407
a5ad3eadb2996675f28f63c20ddfc2d14f8324583382d3190a1d65b7a2e1a981
GET /player/v/8.9.2/jwpsrv.js HTTP/1.1
Host: ssl.p.jwpcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pelisplay.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Wed, 25 Nov 2020 15:46:29 GMT
etag: "9ce4655dbc7b8410f510da753f3be441"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sat, 01 Apr 2023 03:30:02 GMT
via: 1.1 varnish
age: 2589
x-served-by: cache-bma1681-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1680319802.080670,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 16060
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash c88129a2698b78ea9c8679074e2ee2ed
a46114bfe072ee0cc187dcff68c850fa99a4c038
eb0a5e3ddecd0c627ad0ff4839ceb9c5764459ca309c7cbecc9a4444a159ffb8
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 01 Apr 2023 03:30:02 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 31 Mar 2023 07:28:18 GMT
Expires: Fri, 07 Apr 2023 07:28:17 GMT
Etag: "a46114bfe072ee0cc187dcff68c850fa99a4c038"
Cache-Control: max-age=532094,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7b0dc04aca760b59-OSL
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash c88129a2698b78ea9c8679074e2ee2ed
a46114bfe072ee0cc187dcff68c850fa99a4c038
eb0a5e3ddecd0c627ad0ff4839ceb9c5764459ca309c7cbecc9a4444a159ffb8
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 01 Apr 2023 03:30:02 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 31 Mar 2023 07:28:18 GMT
Expires: Fri, 07 Apr 2023 07:28:17 GMT
Etag: "a46114bfe072ee0cc187dcff68c850fa99a4c038"
Cache-Control: max-age=532094,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7b0dc04adee3b4f9-OSL
accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AQMjQ7SqtRol2d014K1dbaWrvd3tIr7hobNDBsxEKVwBK5fOEcXuNqPccorI7Ar0OyqEzkzthLeRiQ
142.250.74.109302 Found 391 B URL HTTP/2 accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AQMjQ7SqtRol2d014K1dbaWrvd3tIr7hobNDBsxEKVwBK5fOEcXuNqPccorI7Ar0OyqEzkzthLeRiQ
IP 142.250.74.109:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (376)
Hash f2d0bb8b913f2ae31c1e0dd0168ef8ec
d43d0b9b1ba4dfdcbd4b0ff9af02edb098830def
c1a48aa4b06dfca0af8841fcab5c8e15e4a1e0834177e69d435c3b14b0c07dd8
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AQMjQ7SqtRol2d014K1dbaWrvd3tIr7hobNDBsxEKVwBK5fOEcXuNqPccorI7Ar0OyqEzkzthLeRiQ HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www7.cuevana3.ch/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 01 Apr 2023 03:30:02 GMT
location: https://accounts.google.com/v3/signin/identifier?dsh=S50518826%3A1680319802088355&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AQMjQ7TQIVABuG9IcIO72JBYZ-dUk5yDd93W8ODtfzJS5C8SKsuPMML-JV62e28_qncbKC3FV0oi&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-fJ4pGtzxI5MIEjbJF1skwg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 391
server: GSE
set-cookie: __Host-GAPS=1:6PV4125KwjEd2a3hx1ybm6rxFn7LjQ:S2LEhFCK4S7xGyMI;Path=/;Expires=Mon, 31-Mar-2025 03:30:02 GMT;Secure;HttpOnly;Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
uidsync.net/sync?user_id=PuP614Ic9FYkE1tm0aFQUV
157.90.33.122204 No Content 0 B URL HTTP/2 uidsync.net/sync?user_id=PuP614Ic9FYkE1tm0aFQUV
IP 157.90.33.122:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /sync?user_id=PuP614Ic9FYkE1tm0aFQUV HTTP/1.1
Host: uidsync.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www7.cuevana3.ch/
Origin: https://www7.cuevana3.ch
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Cache-Control: max-age=0
HTTP/2 204 No Content
server: nginx
date: Sat, 01 Apr 2023 03:30:02 GMT
access-control-allow-origin: https://www7.cuevana3.ch
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization, X-CSRF-Token
access-control-expose-headers: Authorization
cache-control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
pragma: no-cache
expires: Tue, 11 Jan 1994 00:00:00 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
X-Firefox-Spdy: h2
uidsync.net/sync?user_id=PuP614Ic9FYkE1tm0aFQUV
157.90.33.122200 OK 62 B URL HTTP/2 uidsync.net/sync?user_id=PuP614Ic9FYkE1tm0aFQUV
IP 157.90.33.122:0
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text, with no line terminators
Hash 1e1b21868779f271058accad98d31e62
ccceb5f2cd60dec6f215b4ad4eb64b33c723990d
e0e332ccf6f462ee54b32fcf72a793c22824552fb90abb18b640a53d81769830
GET /sync?user_id=PuP614Ic9FYkE1tm0aFQUV HTTP/1.1
Host: uidsync.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www7.cuevana3.ch/
Content-Type: application/json
Origin: https://www7.cuevana3.ch
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 01 Apr 2023 03:30:02 GMT
content-type: application/json; charset=utf-8
content-length: 62
access-control-allow-origin: https://www7.cuevana3.ch
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization, X-CSRF-Token
access-control-expose-headers: Authorization
cache-control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
pragma: no-cache
expires: Tue, 11 Jan 1994 00:00:00 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
set-cookie: rauid=PuP614Ic9FYkE1tm0aFQUV; expires=Sun, 31 Mar 2024 03:30:02 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
delivery.taroads.com/creative
188.114.97.1204 No Content 0 B URL HTTP/2 delivery.taroads.com/creative
IP 188.114.97.1:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /creative HTTP/1.1
Host: delivery.taroads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded;charset=UTF-8
Origin: https://pelisplay.cc
Content-Length: 135
Connection: keep-alive
Referer: https://pelisplay.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 01 Apr 2023 03:30:02 GMT
access-control-allow-origin: https://pelisplay.cc
access-control-allow-credentials: true
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
vary: Origin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DW2R%2BwpsFndo4pNm%2BZfBz84UENR3NKYCSR0RamD8Xm%2Bf7UHiQL%2FclU%2BeSLz5bqcbz9euBnSCF4Qrz6e6Gds%2B2XRVfL9UiavfALTp1sNjaYSoiq%2B0HSNM0eR75vf%2B1HAMRC121YaZZw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b0dc04c49400b61-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
pelisplay.cc/js/jw8.9/jwplayer.js?v=1.6
104.26.13.162200 OK 123 kB URL HTTP/2 pelisplay.cc/js/jw8.9/jwplayer.js?v=1.6
IP 104.26.13.162:0
File type ASCII text, with very long lines (65169)
Size 123 kB (123388 bytes)
Hash c25c8a0f4b4d5f8b6f637f42774b1459
6bf4e5dffe68ff33e341526ffd681e9baffa0d74
f296e07704e8900f3af265154903ef50dbb581898b0fee6d2cc865208a942ddc
GET /js/jw8.9/jwplayer.js?v=1.6 HTTP/1.1
Host: pelisplay.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pelisplay.cc/play?id=MjU5NzE=&option=latin
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 01 Apr 2023 03:30:01 GMT
content-type: application/javascript
last-modified: Mon, 03 Oct 2022 03:06:59 GMT
vary: Accept-Encoding
etag: W/"633a51d3-1aa99"
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tuPVtCkHEgwRWii1kQbo6xEDLGQVzzGNcjQ1b5Qp8hDwIOh6sXZ%2FTYsmJ2XX2Bgaejwqqwvlp1Hmg4qPaGwveYP0qABcY%2BWLbkmRou6XTbRoXnBmXHYm2Ao8H5M9lQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b0dc0488fdc0b06-OSL
content-encoding: br
X-Firefox-Spdy: h2
delivery.taroads.com/openrtb
188.114.97.1204 No Content 0 B URL HTTP/2 delivery.taroads.com/openrtb
IP 188.114.97.1:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /openrtb HTTP/1.1
Host: delivery.taroads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded;charset=UTF-8
Origin: https://pelisplay.cc
Content-Length: 135
Connection: keep-alive
Referer: https://pelisplay.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 01 Apr 2023 03:30:02 GMT
access-control-allow-origin: https://pelisplay.cc
access-control-allow-credentials: true
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
vary: Origin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ktQNZz8LXkWUSRE%2BVJIwetOIJ2GHmc7epdHwIMqRUG7zEx49NXcaUvnNRn1RZR%2Fn1LpG9PzS7n7p6qJBNFn9VhmyH3D4GhqXhnR0MY5H7BXdbZm79epYxKbRVqbdB4bEo7X2a7DGvQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b0dc04c49440b61-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash c388840614c31e16a2bf4a450df7fd95
a612ef240d0c09232a5845f38d174ba278e3f7c5
53f14b09b1a65b02f4c6b217e43b90c93070b961098d9fda0f5f008dc759e250
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "53F14B09B1A65B02F4C6B217E43B90C93070B961098D9FDA0F5F008DC759E250"
Last-Modified: Fri, 31 Mar 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3859
Expires: Sat, 01 Apr 2023 04:34:21 GMT
Date: Sat, 01 Apr 2023 03:30:02 GMT
Connection: keep-alive
bidder.h12-media.com/prebid/default.asp?payload=0uC1dlrwYkTm9RCtKEs2bbQWED_xCXLBnojJBr0jP64LkApRGNSNHwXinZhHu4YtC55el-RcpvehJ6m6BVawE9uEPBN5PxJppqxcE7oTekwt4f9-ziyeIYBdjeWCuQFdnkm-mc6wFVq9Z3Nd8l4MXMBG6HXeCGv4zYdrvoWKCA5p4_QbrYZyBJZ1y2RKZZiXwEo5Q5iro1yfwpQu62cP7KHGkOaB97UqoaBGWNYktYDp84JfViySPOF_LmtJ69T7sUZZ1GpLSZs_BlYT2S7InojkYbS8qHAFUazpTZuitd0euEqSYh5ifGyUOJLR86v2PjmpY-_KgI8CbM3JE393FrjiQ424ld5snNIpCpN4GOiGyq7kazRdW9pwWlPiYioxXBMbMszkpTFub1joAfAzujayWnPDaBRxlHVOqVZK73iHTEbRCVH9hmhvqNmfZPnmM00
154.51.131.137200 OK 2.1 kB URL HTTP/2 bidder.h12-media.com/prebid/default.asp?payload=0uC1dlrwYkTm9RCtKEs2bbQWED_xCXLBnojJBr0jP64LkApRGNSNHwXinZhHu4YtC55el-RcpvehJ6m6BVawE9uEPBN5PxJppqxcE7oTekwt4f9-ziyeIYBdjeWCuQFdnkm-mc6wFVq9Z3Nd8l4MXMBG6HXeCGv4zYdrvoWKCA5p4_QbrYZyBJZ1y2RKZZiXwEo5Q5iro1yfwpQu62cP7KHGkOaB97UqoaBGWNYktYDp84JfViySPOF_LmtJ69T7sUZZ1GpLSZs_BlYT2S7InojkYbS8qHAFUazpTZuitd0euEqSYh5ifGyUOJLR86v2PjmpY-_KgI8CbM3JE393FrjiQ424ld5snNIpCpN4GOiGyq7kazRdW9pwWlPiYioxXBMbMszkpTFub1joAfAzujayWnPDaBRxlHVOqVZK73iHTEbRCVH9hmhvqNmfZPnmM00
IP 154.51.131.137:0
File type JSON data\012- HTML document text\012- HTML document, ASCII text, with very long lines (2990), with no line terminators
Hash c0a9ca33258440934780437a5fc02feb
437d5ebd5f2e2cb5a1673b4fb802971c8d87c2fa
a54a9055125c91e2bf1f92bb6fa72fe353efaa08ac8749065eae1b500c7fb60d
POST /prebid/default.asp?payload=0uC1dlrwYkTm9RCtKEs2bbQWED_xCXLBnojJBr0jP64LkApRGNSNHwXinZhHu4YtC55el-RcpvehJ6m6BVawE9uEPBN5PxJppqxcE7oTekwt4f9-ziyeIYBdjeWCuQFdnkm-mc6wFVq9Z3Nd8l4MXMBG6HXeCGv4zYdrvoWKCA5p4_QbrYZyBJZ1y2RKZZiXwEo5Q5iro1yfwpQu62cP7KHGkOaB97UqoaBGWNYktYDp84JfViySPOF_LmtJ69T7sUZZ1GpLSZs_BlYT2S7InojkYbS8qHAFUazpTZuitd0euEqSYh5ifGyUOJLR86v2PjmpY-_KgI8CbM3JE393FrjiQ424ld5snNIpCpN4GOiGyq7kazRdW9pwWlPiYioxXBMbMszkpTFub1joAfAzujayWnPDaBRxlHVOqVZK73iHTEbRCVH9hmhvqNmfZPnmM00 HTTP/1.1
Host: bidder.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1121
Origin: https://www7.cuevana3.ch
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Cookie: 7thMile=915efff1%2D29f2%2D43ea%2Daf5d%2D587da529e5ad
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-store,no-cache,max-age=0,private
content-type: application/json; Charset=UTF-8
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
set-cookie: 7thMile=f7b7c4b9%2D7723%2D40e5%2Dbd71%2D0c7aeccfe1ad; Max-Age=5000000; Domain=.h12-media.com; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
access-control-allow-origin: https://www7.cuevana3.ch
srg-x: x-.178
procadsent: 0.0479
x-powered-by: ASP.NET, ARR/3.0
date: Sat, 01 Apr 2023 03:29:29 GMT
content-length: 2085
X-Firefox-Spdy: h2
prebid.a-mo.net/a/c
147.75.85.234204 No Content 0 B IP 147.75.85.234:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1510
Origin: https://www7.cuevana3.ch
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://www7.cuevana3.ch
cache-control: max-age=0, private, must-revalidate
date: Sat, 01 Apr 2023 03:30:02 GMT
server: envoy
vary: origin, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 1
set-cookie: X-Contour-Session-Affinity="fbb012d9a46dfad9"; Path=/; HttpOnly
X-Firefox-Spdy: h2
pelisplay.cc/play?id=MjU5NzE=&option=latin
104.26.13.162200 OK 3.7 kB URL HTTP/2 pelisplay.cc/play?id=MjU5NzE=&option=latin
IP 104.26.13.162:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2521)
Hash 29aca32fef55a4e0efb1659a1aeb6203
8c59e4406f3dd23ca7ff7ae2deffca0561b5a57f
87fbd04a520ffe2a6f511d386bcc7ec4c18b66bdff42d5394fffecc6dda4ef5b
GET /play?id=MjU5NzE=&option=latin HTTP/1.1
Host: pelisplay.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 01 Apr 2023 03:30:01 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/5.6.13
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ExFIqcGKDyo%2FLA23beFXDDRFdlR9DtJkuZ1VlJg1kKMnBCxng3SnQgRf3ycu8X8EM3t8jTpgGt%2B9GPuQyP75Pw04MpmLvVJ5pOoVYaHaOIuaePLvPM3HxjKD1o4wJg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b0dc0471f7b0b06-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.digicert.com/
192.229.221.95200 OK 471 B IP 192.229.221.95:0
Hash 069f9934a0e19f21997dc3f7fa07ff1d
0ebd6000c5dac38829ffae5e624d32da5ef2c9a8
f7a956f911c7bafb32638f7e09e81602a4599728a8ba7994fcb8dd03b92f14ea
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1196
Cache-Control: max-age=129050
Content-Type: application/ocsp-response
Date: Sat, 01 Apr 2023 03:30:02 GMT
Etag: "6426f5a8-1d7"
Expires: Sun, 02 Apr 2023 15:20:52 GMT
Last-Modified: Fri, 31 Mar 2023 15:00:56 GMT
Server: ECAcc (ska/F6D2)
X-Cache: HIT
Content-Length: 471
pogothere.xyz/asd100.bin
172.64.173.27200 OK 103 kB IP 172.64.173.27:0
Size 103 kB (103116 bytes)
Hash f486c9322f427b6078cff8959b7a86f8
6322fb009ff4069152f23e88949ef7b7716e6e0d
cefb9a1608dd37dd7f4700683784b499b093183f2fda48b68742782aebe09084
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www7.cuevana3.ch/
Origin: https://www7.cuevana3.ch
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 01 Apr 2023 03:30:01 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://www7.cuevana3.ch
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 994
last-modified: Sat, 01 Apr 2023 03:13:27 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S8EB674ghAxjna2Fmd4wnaKkec4br3UVyshRC%2Brd9gE%2FcRpKfoQb%2FCRqyIBx%2B5nu3FM23Suz57bgOqwK8Z6HUva0lOGI03lPi8eFwW9utMgGcwCDxo%2FR4qEAAGbxB%2BKP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b0dc04a0e404130-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
zerossl.ocsp.sectigo.com/
104.18.32.68200 OK 314 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP 104.18.32.68:0
Hash dbdbaf18597d885c3615068e728dd0ec
32263a37bd38997558bfb893b6d67d6992c02e09
e0f16fae643fb5a5b27d064aac48c6e48977261e65ec8725017003c71cf14c9a
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 01 Apr 2023 03:30:02 GMT
Content-Type: application/ocsp-response
Content-Length: 314
Connection: keep-alive
Last-Modified: Tue, 28 Mar 2023 17:15:14 GMT
Expires: Tue, 04 Apr 2023 17:15:13 GMT
Etag: "32263a37bd38997558bfb893b6d67d6992c02e09"
Cache-Control: max-age=308110,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7b0dc04eeabfb52d-OSL
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.16.0&cb=59332371178&lsavail=1
178.250.7.10204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.16.0&cb=59332371178&lsavail=1
IP 178.250.7.10:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.16.0&cb=59332371178&lsavail=1 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1308
Origin: https://www7.cuevana3.ch
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 01 Apr 2023 03:30:01 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://www7.cuevana3.ch
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 14539c5e0ca6ce826e62bdadad738bbd
92ce1bbc7f338d3e48e35d637513ab0aba610a98
58e8d186f5d0531c2597d267b0a92bb46909e8fa162b2b5f7fa6e50b2e0af357
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "58E8D186F5D0531C2597D267B0A92BB46909E8FA162B2B5F7FA6E50B2E0AF357"
Last-Modified: Fri, 31 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2918
Expires: Sat, 01 Apr 2023 04:18:40 GMT
Date: Sat, 01 Apr 2023 03:30:02 GMT
Connection: keep-alive
pelisplay.cc/player/js/jquery.min.js?v=1.6
104.26.13.162200 OK 119 kB URL HTTP/2 pelisplay.cc/player/js/jquery.min.js?v=1.6
IP 104.26.13.162:0
File type ASCII text, with very long lines (32042)
Size 119 kB (119339 bytes)
Hash 03c4dbf20c70228f022ba880afbdc28a
415a036ab708cf073a36784379205c12836960fc
aea935db84ee5abaa241df7473b67f36f7feeb426e38193853f60f498e712d6d
GET /player/js/jquery.min.js?v=1.6 HTTP/1.1
Host: pelisplay.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pelisplay.cc/play?id=MjU5NzE=&option=latin
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 01 Apr 2023 03:30:01 GMT
content-type: application/javascript
last-modified: Mon, 03 Oct 2022 03:06:59 GMT
vary: Accept-Encoding
etag: W/"633a51d3-1514d"
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qHlfNoig21uozr7mQLQRAJCKiUkkEIt2WJGPyl%2BleuMlZwKlz4VhUfvhDDLi6g6mt8N6A63l64PjGtFCPGz5i82rBYa5eoZcFNc6Lwv6CNRUZyz%2BEggop9sw2ecz1w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b0dc0488fda0b06-OSL
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 14539c5e0ca6ce826e62bdadad738bbd
92ce1bbc7f338d3e48e35d637513ab0aba610a98
58e8d186f5d0531c2597d267b0a92bb46909e8fa162b2b5f7fa6e50b2e0af357
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "58E8D186F5D0531C2597D267B0A92BB46909E8FA162B2B5F7FA6E50B2E0AF357"
Last-Modified: Fri, 31 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2918
Expires: Sat, 01 Apr 2023 04:18:40 GMT
Date: Sat, 01 Apr 2023 03:30:02 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 538 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3b1fb387f1810a44c8a1f54b7d1ef3ac
dfbafedb1fbf25dd3f40d568bd55a9d61a631722
0b889f0a64e9202fc4cab813249b9440bf6e9d99c94884534dc6cf6dbf3ffd60
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "58E8D186F5D0531C2597D267B0A92BB46909E8FA162B2B5F7FA6E50B2E0AF357"
Last-Modified: Fri, 31 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2918
Expires: Sat, 01 Apr 2023 04:18:40 GMT
Date: Sat, 01 Apr 2023 03:30:02 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe5464d27-4a65-4ce5-81dc-c2d73690f9ea.jpeg
34.120.237.76200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe5464d27-4a65-4ce5-81dc-c2d73690f9ea.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c7a1cb3f6466e8edda3a9812c683f298
2e0415c7cbceef918add7de96c1f35393b499d49
43fdd189ffa0b3323cea6113bc4b8f4a55baf4acd869a79f5b1bf988dd82620f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe5464d27-4a65-4ce5-81dc-c2d73690f9ea.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9166
x-amzn-requestid: e6475900-b87a-4e72-8196-42fd6589cfc0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Cqm7BFw-oAMF-sw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-642751df-519756f52943cf855b4e0bf7;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Fri, 31 Mar 2023 21:34:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: vnxCcZzVTM1zw9mRBX4PmoE_eQTgWWTPZM-hhijOiWYRjnyf-8hhjg==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 0bb842bd5868b86440983b936bb0adee.cloudfront.net (CloudFront), 1.1 google
date: Fri, 31 Mar 2023 22:00:03 GMT
age: 19799
etag: "2e0415c7cbceef918add7de96c1f35393b499d49"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb363700c-b5a7-46e8-9bcf-2e3030088b9f.jpeg
34.120.237.76200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb363700c-b5a7-46e8-9bcf-2e3030088b9f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 44245685a18b4851aa4ec222ad8b8012
7c7a0bd6f7f8b33e1b6f17ff9d03cbfd62411fa3
80331505a2b776e26443bbf6e65b30c2c4cd56a29279a80a4bb27aa232a42a27
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb363700c-b5a7-46e8-9bcf-2e3030088b9f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9845
x-amzn-requestid: e8a2d894-3663-4895-b710-c277a0f029d9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Cqm8FFG3IAMF1Wg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-642751e6-7096042c78cd0e9925df81d1;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Fri, 31 Mar 2023 21:34:30 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Ifbckq238lByDcUdMqHYalI0UMft6tUmRPY-dd51-vPJViV1UxjWyg==
via: 1.1 e39f48cc8f516dc1072afdb086c71f32.cloudfront.net (CloudFront), 1.1 efcf7b9d0f917f9ebf314db03e52d9b6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 31 Mar 2023 22:00:00 GMT
age: 19802
etag: "7c7a0bd6f7f8b33e1b6f17ff9d03cbfd62411fa3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff9720e87-c9ea-45dd-b03b-959a201d1cd5.jpeg
34.120.237.76200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff9720e87-c9ea-45dd-b03b-959a201d1cd5.jpeg
IP 34.120.237.76:0
File type gzip compressed data, max compression\012- data
Hash e94a15124611ae87014d47f8fda1a8ff
718379fbdce16b73beea6622606ef0097668a7a0
563e53283ba6cf24311ae4bcf333488468d63ca3bde5ad7fe3041216014e26f2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff9720e87-c9ea-45dd-b03b-959a201d1cd5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8479
x-amzn-requestid: 918a80ec-9fed-420b-b213-3c7e34e007ed
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Cqm9WEw_IAMF53g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-642751ee-7cdad9533b2617c0043823f2;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Fri, 31 Mar 2023 21:34:38 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: jh-3_Rb1rG13lHKqhXtUe3dt6pO2CADP7IL_zAadlgCvgoNiWDQ8jQ==
via: 1.1 773bf3616e85ce2b187fa78710a6beb2.cloudfront.net (CloudFront), 1.1 995664ee945c06fc706b5cb8e0e650dc.cloudfront.net (CloudFront), 1.1 google
date: Fri, 31 Mar 2023 22:00:04 GMT
age: 19798
etag: "f0ee85f6acc45822ca5dc638bedefb21618d9127"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg
34.120.237.76200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash da174e6ccc9451c5071ba10eeb97f6f6
c38827a9ac1218768839877263e1f2984fbdc454
76da406c8ae8cd6ca8471928f3aec3876aed2c21bc10edc0fbdaef5c100c1030
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9859
x-amzn-requestid: c00efe5b-7fdb-445a-a924-75ddd461b72b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: COQPtHizoAMF7-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641bfa64-3eb90ae703b78e8a06130540;Sampled=0
x-amzn-remapped-date: Thu, 23 Mar 2023 07:06:12 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: nZfXy-IsoHliuLodEocEZlH-IvmIV9G-noSmSEU1wmuMPfBx3rLJ9w==
via: 1.1 02f1a759e4ec9fab6fc17c080dd851dc.cloudfront.net (CloudFront), 1.1 331202b5b8aab67acbf389883133f256.cloudfront.net (CloudFront), 1.1 google
date: Fri, 31 Mar 2023 10:41:48 GMT
age: 60494
etag: "c38827a9ac1218768839877263e1f2984fbdc454"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b04f715-df83-425c-b3e1-5703d926f759.jpeg
34.120.237.76200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b04f715-df83-425c-b3e1-5703d926f759.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a88f6c7b5bce83cc00e9e8271cf56702
21835a62ac378c55a61a762636b811a837749648
40b4e80bf0a5ac477804025c56beb2263d77a9f84933eabf6d464589e6f1d573
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b04f715-df83-425c-b3e1-5703d926f759.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5257
x-amzn-requestid: 694e361b-d59f-4a35-b547-de5a42689670
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ClU6mHJuIAMF5Iw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64253510-4f0d883b2f15ceee32b013da;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Thu, 30 Mar 2023 07:06:56 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: 4E6V54wVgPXKvD4UNObxUE7CnWL18b7pGRf4a4Ntoe5r3JcVLQUyqg==
via: 1.1 4e4278a2778e72cc34feef6db603088c.cloudfront.net (CloudFront), 1.1 599f04a365a179d553682d476509c388.cloudfront.net (CloudFront), 1.1 google
date: Fri, 31 Mar 2023 07:13:24 GMT
age: 72998
etag: "21835a62ac378c55a61a762636b811a837749648"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
widgets.outbrain.com/outbrain.js
23.38.201.81200 OK 72 kB URL HTTP/2 widgets.outbrain.com/outbrain.js
IP 23.38.201.81:0
File type ASCII text, with very long lines (1610)
Hash 2b464539dc6b3d83d4ea8c12f5ab1750
6975c4cca100e97954c421ffb6195a76618d585e
53538d974c4121917535c83f2bfb51f6bf541ceafe0766335b99af25096cc568
GET /outbrain.js HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 72281
x-traceid: f14da845582717b075ed6ce53f05d9c
etag: "17-jhHI/Q3oOz21j4NhHHXsV49evco"
last-modified: Tue, 28 Mar 2023 09:20:26 GMT
cache-control: max-age=14500
content-encoding: gzip
vary: Accept-Encoding
date: Sat, 01 Apr 2023 03:30:02 GMT
edge-cache-tag: widget-cheetah
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
tags.h12-media.com/rtb/?pname=hb_result_v3&impdata=0uC1dlrwYkTm9RCtKEs2bbQWED%5FxCXLBnojJBr0jP64LkApRGNSNHwXinZhHu4YtC55el%2DRcpvehJ6m6BVawE9uEPBN5PxJppqxcE7oTekwt4f9%2DziyeIYBdjeWCuQFdnkm%2Dmc6wFVq9Z3Nd8l4MXMBG6HXeCGv4zYdrvoWKCA5p4%5FQbrYZyBJZ1y2RKZZiXwEo5Q5iro1yfwpQu62cP7KHGkOaB97UqoaBGWNYktYDp84JfViySPOF%5FLmtJ69T7sUZZ1GpLSZs%5FBlYT2S7InojkYbS8qHAFUazpTZuitd0euEqSYh5ifGyUOJLR86v2PjmpY%2D%5FKgI8CbM3JE393FrjiQ424ld5snNIpCpN4GOiGyq7kazRdW9pwWlPiYioxXBMbMszkpTFub1joAfAzujayWnPDaBRxlHVOqVZK73iHTEbRCVH9hmhvqNmfZPnmM00&size=970x90&wp=0%2E021&bd=OBT&d=1
154.51.131.137200 OK 145 B URL HTTP/2 tags.h12-media.com/rtb/?pname=hb_result_v3&impdata=0uC1dlrwYkTm9RCtKEs2bbQWED%5FxCXLBnojJBr0jP64LkApRGNSNHwXinZhHu4YtC55el%2DRcpvehJ6m6BVawE9uEPBN5PxJppqxcE7oTekwt4f9%2DziyeIYBdjeWCuQFdnkm%2Dmc6wFVq9Z3Nd8l4MXMBG6HXeCGv4zYdrvoWKCA5p4%5FQbrYZyBJZ1y2RKZZiXwEo5Q5iro1yfwpQu62cP7KHGkOaB97UqoaBGWNYktYDp84JfViySPOF%5FLmtJ69T7sUZZ1GpLSZs%5FBlYT2S7InojkYbS8qHAFUazpTZuitd0euEqSYh5ifGyUOJLR86v2PjmpY%2D%5FKgI8CbM3JE393FrjiQ424ld5snNIpCpN4GOiGyq7kazRdW9pwWlPiYioxXBMbMszkpTFub1joAfAzujayWnPDaBRxlHVOqVZK73iHTEbRCVH9hmhvqNmfZPnmM00&size=970x90&wp=0%2E021&bd=OBT&d=1
IP 154.51.131.137:0
File type ASCII text, with no line terminators
Hash 7ed96945d942f7b2b6e8e42cdb5d8652
57bc32892c212b7aef47825c70af1e504b0b697b
b77d72cd756d30cb7838af0700cf1e6854df46596bb08c3ed2b60aa49db084a5
GET /rtb/?pname=hb_result_v3&impdata=0uC1dlrwYkTm9RCtKEs2bbQWED%5FxCXLBnojJBr0jP64LkApRGNSNHwXinZhHu4YtC55el%2DRcpvehJ6m6BVawE9uEPBN5PxJppqxcE7oTekwt4f9%2DziyeIYBdjeWCuQFdnkm%2Dmc6wFVq9Z3Nd8l4MXMBG6HXeCGv4zYdrvoWKCA5p4%5FQbrYZyBJZ1y2RKZZiXwEo5Q5iro1yfwpQu62cP7KHGkOaB97UqoaBGWNYktYDp84JfViySPOF%5FLmtJ69T7sUZZ1GpLSZs%5FBlYT2S7InojkYbS8qHAFUazpTZuitd0euEqSYh5ifGyUOJLR86v2PjmpY%2D%5FKgI8CbM3JE393FrjiQ424ld5snNIpCpN4GOiGyq7kazRdW9pwWlPiYioxXBMbMszkpTFub1joAfAzujayWnPDaBRxlHVOqVZK73iHTEbRCVH9hmhvqNmfZPnmM00&size=970x90&wp=0%2E021&bd=OBT&d=1 HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Cookie: 7thMile=f7b7c4b9%2D7723%2D40e5%2Dbd71%2D0c7aeccfe1ad
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-store,no-cache,max-age=0,private
content-type: application/x-javascript; Charset=UTF-8
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
srg-x: x-.179
x-powered-by: ARR/3.0
date: Sat, 01 Apr 2023 03:29:29 GMT
content-length: 145
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab3267a3-5b54-4897-9b87-b135a35c1c32.avif
34.120.237.76400 Bad Request 3 B URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab3267a3-5b54-4897-9b87-b135a35c1c32.avif
IP 34.120.237.76:0
File type ASCII text, with no line terminators
Hash fcc3d7489d15ef49dbbf735234234cf7
654e0aaee80e38636c503629d32225db31a616de
52109349dabf69106e04ec2f493fb8b6ade94ea100227cccce6559ab8b96553f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab3267a3-5b54-4897-9b87-b135a35c1c32.avif HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 400 Bad Request
server: nginx
date: Sat, 01 Apr 2023 03:30:02 GMT
content-type: application/json
content-length: 3
x-amzn-requestid: 2aca26d2-de03-4e6a-821a-ecbf5e102ea0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Craw3HrioAMFjAQ=
cache-control: max-age=120,public
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6427a4d2-05094c0c24feaa307e8e10c3;Sampled=0;lineage=69363f46:0
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Error from cloudfront
x-amz-cf-id: oINeNORF1Dsu01NVK8UrsfUuUUjXjKoFFlAedO7kH1b4EPSN_7RQZQ==
age: 54
via: 1.1 b3cdce1c2fc39b89f45c98c417351f26.cloudfront.net (CloudFront), 1.1 6ca7826fb0f4c565b1af9c7737725c48.cloudfront.net (CloudFront), 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/direct?url=https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab3267a3-5b54-4897-9b87-b135a35c1c32.avif&resize=w450
34.120.237.76200 OK 1 B URL HTTP/2 img-getpocket.cdn.mozilla.net/direct?url=https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab3267a3-5b54-4897-9b87-b135a35c1c32.avif&resize=w450
IP 34.120.237.76:0
File type very short file (no magic)
Hash 7215ee9c7d9dc229d2921a40e899ec5f
b858cb282617fb0956d960215c8e84d1ccf909c6
36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
GET /direct?url=https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab3267a3-5b54-4897-9b87-b135a35c1c32.avif&resize=w450 HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 1
x-amzn-requestid: aee588f0-3799-4d5e-af78-82a5ba5b7dfd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CrT8mFfwoAMFUvw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-642799e9-3bfed5f209fc3c633ad4e894;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date:
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: EZWyNM3UUBIxC2Ha2mBKkkAt7UJnh0uw53vNguT_yz0xnwGpxamuOA==
via: 1.1 304b956e2039e07753fa39109152d594.cloudfront.net (CloudFront), 1.1 6a6653dfb47ccc5082f2a5b9d0d168ce.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Apr 2023 03:26:57 GMT
age: 393
etag:
content-type: application/x-empty; charset=binary
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
widget-pixels.outbrain.com/widget/detect/px.gif?ch=1
23.38.201.81200 OK 43 B URL HTTP/2 widget-pixels.outbrain.com/widget/detect/px.gif?ch=1
IP 23.38.201.81:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /widget/detect/px.gif?ch=1 HTTP/1.1
Host: widget-pixels.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-length: 43
content-type: image/gif
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3:1601475749.911431"
last-modified: Wed, 30 Sep 2020 14:22:29 GMT
server: AkamaiNetStorage
cache-control: max-age=2592000
expires: Mon, 01 May 2023 03:30:03 GMT
date: Sat, 01 Apr 2023 03:30:03 GMT
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
tags.h12-media.com/rtb/?pname=hb_result_v3&impdata=0uC1dlrwYkTm9RCtKEs2bbQWED%5FxCXLBnojJBr0jP64LkApRGNSNHwXinZhHu4YtC55el%2DRcpvehJ6m6BVawE9uEPBN5PxJppqxcE7oTekwt4f9%2DziyeIYBdjeWCuQFdnkm%2Dmc6wFVq9Z3Nd8l4MXMBG6HXeCGv4zYdrvoWKCA5p4%5FQbrYZyBJZ1y2RKZZiXwEo5Q5iro1yfwpQu62cP7KHGkOaB97UqoaBGWNYktYDp84JfViySPOF%5FLmtJ69T7sUZZ1GpLSZs%5FBlYT2S7InojkYbS8qHAFUazpTZuitd0euEqSYh5ifGyUOJLR86v2PjmpY%2D%5FKgI8CbM3JE393FrjiQ424ld5snNIpCpN4GOiGyq7kazRdW9pwWlPiYioxXBMbMszkpTFub1joAfAzujayWnPDaBRxlHVOqVZK73iHTEbRCVH9hmhvqNmfZPnmM00&size=970x90&wp=0%2E021&bd=OBT&d=1
154.51.131.137200 OK 144 B URL HTTP/2 tags.h12-media.com/rtb/?pname=hb_result_v3&impdata=0uC1dlrwYkTm9RCtKEs2bbQWED%5FxCXLBnojJBr0jP64LkApRGNSNHwXinZhHu4YtC55el%2DRcpvehJ6m6BVawE9uEPBN5PxJppqxcE7oTekwt4f9%2DziyeIYBdjeWCuQFdnkm%2Dmc6wFVq9Z3Nd8l4MXMBG6HXeCGv4zYdrvoWKCA5p4%5FQbrYZyBJZ1y2RKZZiXwEo5Q5iro1yfwpQu62cP7KHGkOaB97UqoaBGWNYktYDp84JfViySPOF%5FLmtJ69T7sUZZ1GpLSZs%5FBlYT2S7InojkYbS8qHAFUazpTZuitd0euEqSYh5ifGyUOJLR86v2PjmpY%2D%5FKgI8CbM3JE393FrjiQ424ld5snNIpCpN4GOiGyq7kazRdW9pwWlPiYioxXBMbMszkpTFub1joAfAzujayWnPDaBRxlHVOqVZK73iHTEbRCVH9hmhvqNmfZPnmM00&size=970x90&wp=0%2E021&bd=OBT&d=1
IP 154.51.131.137:0
File type ASCII text, with no line terminators
Hash d45013d657142c297ef663156e1ef6ff
6f849481151f70f36ed3ce025573945893db0c9d
a754969f42738801be2ef332742b3fea538bba504a263a80faabf7bb75fddb8a
GET /rtb/?pname=hb_result_v3&impdata=0uC1dlrwYkTm9RCtKEs2bbQWED%5FxCXLBnojJBr0jP64LkApRGNSNHwXinZhHu4YtC55el%2DRcpvehJ6m6BVawE9uEPBN5PxJppqxcE7oTekwt4f9%2DziyeIYBdjeWCuQFdnkm%2Dmc6wFVq9Z3Nd8l4MXMBG6HXeCGv4zYdrvoWKCA5p4%5FQbrYZyBJZ1y2RKZZiXwEo5Q5iro1yfwpQu62cP7KHGkOaB97UqoaBGWNYktYDp84JfViySPOF%5FLmtJ69T7sUZZ1GpLSZs%5FBlYT2S7InojkYbS8qHAFUazpTZuitd0euEqSYh5ifGyUOJLR86v2PjmpY%2D%5FKgI8CbM3JE393FrjiQ424ld5snNIpCpN4GOiGyq7kazRdW9pwWlPiYioxXBMbMszkpTFub1joAfAzujayWnPDaBRxlHVOqVZK73iHTEbRCVH9hmhvqNmfZPnmM00&size=970x90&wp=0%2E021&bd=OBT&d=1 HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Cookie: 7thMile=f7b7c4b9%2D7723%2D40e5%2Dbd71%2D0c7aeccfe1ad
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-store,no-cache,max-age=0,private
content-type: application/x-javascript; Charset=UTF-8
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
srg-x: x-.178
x-powered-by: ARR/3.0
date: Sat, 01 Apr 2023 03:29:29 GMT
content-length: 144
X-Firefox-Spdy: h2
tcheck.outbrainimg.com/tcheck/check/d3d3Ny5jdWV2YW5hMy5jaA==
23.38.201.176200 OK 16 B URL HTTP/1.1 tcheck.outbrainimg.com/tcheck/check/d3d3Ny5jdWV2YW5hMy5jaA==
IP 23.38.201.176:0
File type JSON data\012- , ASCII text, with no line terminators
Hash ce08a60aa308225db15c98edf4ae2447
bacf25489bad0312aa2f37fc735fa7e57b2d7306
929701ed632814943e3df803ddd9e3f179ccf889c0ad7b7f3392bd8d109b174f
GET /tcheck/check/d3d3Ny5jdWV2YW5hMy5jaA== HTTP/1.1
Host: tcheck.outbrainimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www7.cuevana3.ch
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
Content-Length: 16
X-TraceId: 300bedd61c6e2d13b4e4e176824f528e
ETag: W/"10-us8lSJutAxKqLzf8c1+n5XstcwY"
Cache-Control: max-age=13094
Expires: Sat, 01 Apr 2023 07:08:17 GMT
Date: Sat, 01 Apr 2023 03:30:03 GMT
Connection: keep-alive
Access-Control-Max-Age: 43200
Access-Control-Allow-Credentials: false
Access-Control-Allow-Methods: GET,POST
Access-Control-Allow-Origin: *
odb.outbrain.com/utils/platforms?contentUrl=https%3A%2F%2Fwww7.cuevana3.ch%2F392%2Fla-odisea&idx=0&rand=1477&widgetJSId=AR_2&va=true&et=true&format=html&rtbEnabled=true&adblck=false&abwl=false&extid=1672748&pubImpId=4d6208a1ef7cd98&px=0&py=0&vpd=0&cnsntv2=CPpjHQ6PpjHQ6BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&cw=970&activeTab=true&ab=0&wl=0&settings=true&recs=true&key=H12ME1OGI4M4PLMMGPJ01MHAC&version=2010244&sig=zC7k7bSq&apv=false&&osLang=en-US&winW=970&winH=90&scrW=1280&scrH=1024&dpr=1&secured=true&cmpStat=0&ccpaStat=0&iframe=true&chs=1&ogn=https%3A%2F%2Fwww7.cuevana3.ch%2F392%2Fla-odisea
151.101.246.132200 OK 11 kB URL HTTP/2 odb.outbrain.com/utils/platforms?contentUrl=https%3A%2F%2Fwww7.cuevana3.ch%2F392%2Fla-odisea&idx=0&rand=1477&widgetJSId=AR_2&va=true&et=true&format=html&rtbEnabled=true&adblck=false&abwl=false&extid=1672748&pubImpId=4d6208a1ef7cd98&px=0&py=0&vpd=0&cnsntv2=CPpjHQ6PpjHQ6BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&cw=970&activeTab=true&ab=0&wl=0&settings=true&recs=true&key=H12ME1OGI4M4PLMMGPJ01MHAC&version=2010244&sig=zC7k7bSq&apv=false&&osLang=en-US&winW=970&winH=90&scrW=1280&scrH=1024&dpr=1&secured=true&cmpStat=0&ccpaStat=0&iframe=true&chs=1&ogn=https%3A%2F%2Fwww7.cuevana3.ch%2F392%2Fla-odisea
IP 151.101.246.132:0
File type Unicode text, UTF-8 text, with very long lines (40954), with no line terminators
Hash 2ef385f76688627201c51cca7b769558
efaf8a588149a6acdce2c6e082209b71fb7978d4
04c4b524e6c42b886fbe84e9452d0867f1af1b96da3835bd543b5f291ef3e206
GET /utils/platforms?contentUrl=https%3A%2F%2Fwww7.cuevana3.ch%2F392%2Fla-odisea&idx=0&rand=1477&widgetJSId=AR_2&va=true&et=true&format=html&rtbEnabled=true&adblck=false&abwl=false&extid=1672748&pubImpId=4d6208a1ef7cd98&px=0&py=0&vpd=0&cnsntv2=CPpjHQ6PpjHQ6BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&cw=970&activeTab=true&ab=0&wl=0&settings=true&recs=true&key=H12ME1OGI4M4PLMMGPJ01MHAC&version=2010244&sig=zC7k7bSq&apv=false&&osLang=en-US&winW=970&winH=90&scrW=1280&scrH=1024&dpr=1&secured=true&cmpStat=0&ccpaStat=0&iframe=true&chs=1&ogn=https%3A%2F%2Fwww7.cuevana3.ch%2F392%2Fla-odisea HTTP/1.1
Host: odb.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache
pragma: no-cache
p3p: policyref="http://www.outbrain.com/w3c/p3p.xml",CP="NOI NID CURa DEVa TAIa PSAa PSDa OUR IND UNI"
set-cookie: obsessionid-p178258=257ece66-e1b0-9bef-0000-01873add6fa0|0|1; Max-Age=1800; Expires=Sat, 01 Apr 2023 04:00:03 GMT; Path=/; Domain=outbrain.com
recs_c8cb6f9a2aa5b1d65981f687ede90fa2=0B3033891745ACD1; Max-Age=60; Expires=Sat, 01 Apr 2023 03:31:03 GMT; Path=/; Domain=outbrain.com
obuid=4bae3ccb-d41b-49c6-9eaf-93628f695ef7; Max-Age=7776000; Expires=Fri, 30 Jun 2023 03:30:03 GMT; Path=/; Domain=outbrain.com
x-traceid: f9edddbb110aee3bbbf9fb8f60b2b02f
content-encoding: br
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
date: Sat, 01 Apr 2023 03:30:03 GMT
x-served-by: cache-lga13628-LGA, cache-hel1410032-HEL
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1680319803.246377,VS0,VE207
vary: Accept-Encoding, User-Agent
traffic-path: NYDC1, LGA, HEL, Europe1
content-length: 10763
X-Firefox-Spdy: h2
widgets.outbrain.com/nanoWidget/externals/obUserFrame/test.html?lsd=4bae3ccb-d41b-49c6-9eaf-93628f695ef7
23.38.201.81200 OK 686 B URL HTTP/2 widgets.outbrain.com/nanoWidget/externals/obUserFrame/test.html?lsd=4bae3ccb-d41b-49c6-9eaf-93628f695ef7
IP 23.38.201.81:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 5b97ec90c55f5357b412825e5e67525a
7dd2ad14245380a730735d18b06346dcbb7aa254
ee4237548288e67df37898219464bc7bd57bf2eb4238a627dcbbb15815090037
GET /nanoWidget/externals/obUserFrame/test.html?lsd=4bae3ccb-d41b-49c6-9eaf-93628f695ef7 HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: text/html
etag: "1e015194a0e596827cb8971f884eb43c:1679997890.05285"
last-modified: Tue, 28 Mar 2023 09:17:03 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=604800
expires: Sat, 08 Apr 2023 03:30:03 GMT
date: Sat, 01 Apr 2023 03:30:03 GMT
content-length: 686
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
142.250.74.109302 Found 416 B URL HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP 142.250.74.109:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash c0311cf15c21ddda054005e92fad3f9e
5276eceeb0576cbee82010f611dfd6fd305991f9
4f3b933077b738b503f7543ffc82fa0a061f0fe7d0ff1470865fde561a324bcc
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 01 Apr 2023 03:30:01 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AQMjQ7SqtRol2d014K1dbaWrvd3tIr7hobNDBsxEKVwBK5fOEcXuNqPccorI7Ar0OyqEzkzthLeRiQ
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-oAkl5mRrIHzmj_j3rlFKRQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /cspreport
cross-origin-opener-policy: unsafe-none
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
content-type: application/binary
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
set-cookie: __Host-GAPS=1:HhDhdpyNrr0-z8Xmnd5HVoldhKGrSA:aO4YpOsV1lcRT1Q-; Expires=Mon, 31-Mar-2025 03:30:01 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
widgets.outbrain.com/images/widgetIcons/achoice.svg
23.38.201.81200 OK 990 B URL HTTP/2 widgets.outbrain.com/images/widgetIcons/achoice.svg
IP 23.38.201.81:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (990), with no line terminators
Hash 5ab8e16b5f46213840bcd403e349419c
f03f6dc8e2206a94119af76f9a3b3c835390cae7
9ba56f5ffa579747efde1d2a429b325a9fb7220d30f4268e4a44ecbe4a9bf034
GET /images/widgetIcons/achoice.svg HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/svg+xml
etag: "5ab8e16b5f46213840bcd403e349419c:1673369393.880194"
last-modified: Tue, 10 Jan 2023 16:40:08 GMT
server: AkamaiNetStorage
content-length: 990
cache-control: max-age=2592000
expires: Mon, 01 May 2023 03:30:03 GMT
date: Sat, 01 Apr 2023 03:30:03 GMT
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
widgets.outbrain.com/images/widgetIcons/Close.svg
23.38.201.81200 OK 765 B URL HTTP/2 widgets.outbrain.com/images/widgetIcons/Close.svg
IP 23.38.201.81:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (635)
Hash f740f788e2e26736856f7a3a12457a63
d0ec57a47f6a40f23011dd93219873a5eaee96e2
c2c92cde33538b1187bedea3d0b6d5141e4222eba8092476339aa080cee759ac
GET /images/widgetIcons/Close.svg HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/svg+xml
etag: "f740f788e2e26736856f7a3a12457a63:1673369390.457553"
last-modified: Tue, 10 Jan 2023 16:40:08 GMT
server: AkamaiNetStorage
content-length: 765
cache-control: max-age=2592000
expires: Mon, 01 May 2023 03:30:03 GMT
date: Sat, 01 Apr 2023 03:30:03 GMT
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
pogothere.xyz/
172.64.173.27200 OK 6.1 kB IP 172.64.173.27:0
File type ASCII text, with no line terminators
Hash 87420c4d2a6240a2ab2039cf2b40c51d
9be5e692b67f0bf8944780feb7307f213f26eb7f
79f0bbed4c087acab048339b136684cec086f5a4e579ae5f260159b49345fdf6
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www7.cuevana3.ch/
Origin: https://www7.cuevana3.ch
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 01 Apr 2023 03:30:02 GMT
content-type: text/plain
set-cookie: csu=2060291469683132@1@1680319801; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://www7.cuevana3.ch
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=us09eK%2FQygcTXAYI%2Bb3UDHQzmEUNpQhmr9Wjnknzlfu9w8cXA1Kv6%2BIUEBc%2FKUWpAgPmqjETDRmLCACfksDDXUagyuvKxUBHWt2R%2F17RPBU%2BZwHXGA1T%2Br2w%2BHVm6pg%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b0dc04a0e3d4130-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
widgets.outbrain.com/nanoWidget/externals/cookie/test.html
23.38.201.81200 OK 610 B URL HTTP/2 widgets.outbrain.com/nanoWidget/externals/cookie/test.html
IP 23.38.201.81:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 48053d50141031b1511dbd30f9a31288
06966364d22a02a4ed89c18c38d6ddfc6de254c6
6139e1fc0d3709eebbe2b18510cf24361b9f8a538c3529a73c282bafe6c78474
GET /nanoWidget/externals/cookie/test.html HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widgets.outbrain.com/nanoWidget/externals/cookie/put.html
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: text/html
etag: "48053d50141031b1511dbd30f9a31288:1679997887.904184"
last-modified: Tue, 28 Mar 2023 09:17:03 GMT
server: AkamaiNetStorage
content-length: 610
cache-control: max-age=604800
expires: Sat, 08 Apr 2023 03:30:03 GMT
date: Sat, 01 Apr 2023 03:30:03 GMT
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
images.outbrainimg.com/transform/v3/eyJpdSI6ImU0MzAwOGUyNWUzYzk5NjhmZmY3ZmY2ZmNhZDU4Y2M0ZTVlNTYyYmYzM2M2YzRlN2NlNDUzNTliZmI5Mzc0MWYiLCJ3IjoyMDAsImgiOjEwMCwiZCI6MS4wLCJjcyI6MCwiZiI6NH0.webp
23.38.201.176200 OK 3.3 kB URL HTTP/2 images.outbrainimg.com/transform/v3/eyJpdSI6ImU0MzAwOGUyNWUzYzk5NjhmZmY3ZmY2ZmNhZDU4Y2M0ZTVlNTYyYmYzM2M2YzRlN2NlNDUzNTliZmI5Mzc0MWYiLCJ3IjoyMDAsImgiOjEwMCwiZCI6MS4wLCJjcyI6MCwiZiI6NH0.webp
IP 23.38.201.176:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 200x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 64cd6208bad45b8ea96d1dbc6b42c179
7482c9b886ac760aca24adc61c84e58d11200f3f
1f7bbb393fe5c5c1946b66fbc07c53198c433d88caea952faba8e775dfcbe736
GET /transform/v3/eyJpdSI6ImU0MzAwOGUyNWUzYzk5NjhmZmY3ZmY2ZmNhZDU4Y2M0ZTVlNTYyYmYzM2M2YzRlN2NlNDUzNTliZmI5Mzc0MWYiLCJ3IjoyMDAsImgiOjEwMCwiZCI6MS4wLCJjcyI6MCwiZiI6NH0.webp HTTP/1.1
Host: images.outbrainimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/webp
content-length: 3256
last-modified: Sun, 26 Feb 2023 13:24:32 GMT
x-traceid: d026a4df8a0ad16eaee32d0088cad8b5
cache-control: max-age=1492254
date: Sat, 01 Apr 2023 03:30:03 GMT
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
timing-allow-origin: *, *
X-Firefox-Spdy: h2
widgets.outbrain.com/nanoWidget/2010244/module/userZapping.js?e=1
23.38.201.81200 OK 7.1 kB URL HTTP/2 widgets.outbrain.com/nanoWidget/2010244/module/userZapping.js?e=1
IP 23.38.201.81:0
File type ASCII text, with very long lines (14642)
Hash a441f47389afcb4d4a2aa73cfaa06bdd
7225900ae5d790c4cc192402fec9f3134db5dd4d
0adeef22d13c9370db8547393913eddf60b0fbc085f0a62c4d853dae9d989627
GET /nanoWidget/2010244/module/userZapping.js?e=1 HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "b8b418abf7a4799a9ee5e62ef475713b:1679997809.627056"
last-modified: Tue, 28 Mar 2023 09:19:29 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=604800
expires: Sat, 08 Apr 2023 03:30:03 GMT
date: Sat, 01 Apr 2023 03:30:03 GMT
content-length: 7104
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
widgets.outbrain.com/images/widgetIcons/icon-x-white.svg
23.38.201.81200 OK 559 B URL HTTP/2 widgets.outbrain.com/images/widgetIcons/icon-x-white.svg
IP 23.38.201.81:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (363)
Hash 854eb39a3d94a8ec9977261db0c8acc8
ef852997961f946b34e996504912b0606e4c6593
06ffd9e17bd41822b9a7b982a8ff486fafa54f7781baacb6ef3507ae7f9b36b5
GET /images/widgetIcons/icon-x-white.svg HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/svg+xml
etag: "854eb39a3d94a8ec9977261db0c8acc8:1673369404.25082"
last-modified: Tue, 10 Jan 2023 16:40:08 GMT
server: AkamaiNetStorage
content-length: 559
cache-control: max-age=2592000
expires: Mon, 01 May 2023 03:30:03 GMT
date: Sat, 01 Apr 2023 03:30:03 GMT
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
widgets.outbrain.com/images/widgetIcons/icon-vi.svg
23.38.201.81200 OK 182 B URL HTTP/2 widgets.outbrain.com/images/widgetIcons/icon-vi.svg
IP 23.38.201.81:0
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash c065312fdb5e02c1399f2622776530df
785d98e9025f7b5cd7e2bd4f80098e44cda01ebf
b9e07d8e5143b4764aeebb012b1b020f60eb1cdca44ed1bc22ba9bc85f3af5eb
GET /images/widgetIcons/icon-vi.svg HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/svg+xml
etag: "91990280dce13a095a0da3a6b2fc6816:1673369403.63584"
last-modified: Tue, 10 Jan 2023 16:40:08 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 182
cache-control: max-age=2592000
expires: Mon, 01 May 2023 03:30:03 GMT
date: Sat, 01 Apr 2023 03:30:03 GMT
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
widgets.outbrain.com/images/widgetIcons/ChevronRight.svg
23.38.201.81200 OK 524 B URL HTTP/2 widgets.outbrain.com/images/widgetIcons/ChevronRight.svg
IP 23.38.201.81:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (422)
Hash c1dc41410784b37a37e29a21baf9aa1f
9b1a4b46b77322f217c3395e32bbb177199c327c
f8d6148b07b2251c53a2605a003b1d29babb8154c5abd0bde0f7e8a800f2dfd9
GET /images/widgetIcons/ChevronRight.svg HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/svg+xml
etag: "c1dc41410784b37a37e29a21baf9aa1f:1673369389.756676"
last-modified: Tue, 10 Jan 2023 16:40:08 GMT
server: AkamaiNetStorage
content-length: 524
cache-control: max-age=2592000
expires: Mon, 01 May 2023 03:30:03 GMT
date: Sat, 01 Apr 2023 03:30:03 GMT
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
192.229.221.95200 OK 471 B IP 192.229.221.95:0
Hash 9b9d73097d22a95773357190a6507582
7702d0608b06ea4ed3523fc1ed04fdb7e5727c86
4bd2eec30bd7aef4c68ae844902079aebbe7c1aa1be4f60ad0973496bad5f3b5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3646
Cache-Control: max-age=170362
Content-Type: application/ocsp-response
Date: Sat, 01 Apr 2023 03:30:03 GMT
Etag: "64278d77-1d7"
Expires: Mon, 03 Apr 2023 02:49:25 GMT
Last-Modified: Sat, 01 Apr 2023 01:48:39 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 471
mcdp-nydc1.outbrain.com/l?token=3006c9b6e1ef21d234c8cfaed6f1c15a_178258_1680319803394&tm=405&eT=0&widgetWidth=970&widgetHeight=90&widgetX=0&widgetY=0&wRV=2010244&pVis=1&lsd=4bae3ccb-d41b-49c6-9eaf-93628f695ef7&eIdx=&cnsntV2=CPpjHQ6PpjHQ6BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&cheq=0&rtt=302&oo=false&lo=975&odbreq=1248&odbres=1550&mvreq=1248&mvres=1550&to=1680319800578&umv=1&ll=0&chs=1&ab=0&wl=0
70.42.32.127200 OK 2 B URL HTTP/1.1 mcdp-nydc1.outbrain.com/l?token=3006c9b6e1ef21d234c8cfaed6f1c15a_178258_1680319803394&tm=405&eT=0&widgetWidth=970&widgetHeight=90&widgetX=0&widgetY=0&wRV=2010244&pVis=1&lsd=4bae3ccb-d41b-49c6-9eaf-93628f695ef7&eIdx=&cnsntV2=CPpjHQ6PpjHQ6BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&cheq=0&rtt=302&oo=false&lo=975&odbreq=1248&odbres=1550&mvreq=1248&mvres=1550&to=1680319800578&umv=1&ll=0&chs=1&ab=0&wl=0
IP 70.42.32.127:0
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
GET /l?token=3006c9b6e1ef21d234c8cfaed6f1c15a_178258_1680319803394&tm=405&eT=0&widgetWidth=970&widgetHeight=90&widgetX=0&widgetY=0&wRV=2010244&pVis=1&lsd=4bae3ccb-d41b-49c6-9eaf-93628f695ef7&eIdx=&cnsntV2=CPpjHQ6PpjHQ6BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&cheq=0&rtt=302&oo=false&lo=975&odbreq=1248&odbres=1550&mvreq=1248&mvres=1550&to=1680319800578&umv=1&ll=0&chs=1&ab=0&wl=0 HTTP/1.1
Host: mcdp-nydc1.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www7.cuevana3.ch/
Origin: https://www7.cuevana3.ch
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 01 Apr 2023 03:30:03 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 2
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: content-range
X-TraceId: 4ccf1e9773aa4393a2662d8920066b65
log.outbrainimg.com/loggerServices/widgetGlobalEvent?rId=3006c9b6e1ef21d234c8cfaed6f1c15a&pvId=3006c9b6e1ef21d234c8cfaed6f1c15a&sid=9862906&pid=178258&idx=0&wId=101&pad=1&org=0&tm=425&eT=3&cnsnt=CPpjHQ6PpjHQ6BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&wRV=2010244&pVis=1&lsd=4bae3ccb-d41b-49c6-9eaf-93628f695ef7&eIdx=0&oo=false&ab=0&wl=0
70.42.32.127200 OK 4 B URL HTTP/1.1 log.outbrainimg.com/loggerServices/widgetGlobalEvent?rId=3006c9b6e1ef21d234c8cfaed6f1c15a&pvId=3006c9b6e1ef21d234c8cfaed6f1c15a&sid=9862906&pid=178258&idx=0&wId=101&pad=1&org=0&tm=425&eT=3&cnsnt=CPpjHQ6PpjHQ6BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&wRV=2010244&pVis=1&lsd=4bae3ccb-d41b-49c6-9eaf-93628f695ef7&eIdx=0&oo=false&ab=0&wl=0
IP 70.42.32.127:0
File type ASCII text, with no line terminators
Hash b326b5062b2f0e69046810717534cb09
5ffe533b830f08a0326348a9160afafc8ada44db
b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b
GET /loggerServices/widgetGlobalEvent?rId=3006c9b6e1ef21d234c8cfaed6f1c15a&pvId=3006c9b6e1ef21d234c8cfaed6f1c15a&sid=9862906&pid=178258&idx=0&wId=101&pad=1&org=0&tm=425&eT=3&cnsnt=CPpjHQ6PpjHQ6BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&wRV=2010244&pVis=1&lsd=4bae3ccb-d41b-49c6-9eaf-93628f695ef7&eIdx=0&oo=false&ab=0&wl=0 HTTP/1.1
Host: log.outbrainimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www7.cuevana3.ch/
Origin: https://www7.cuevana3.ch
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 01 Apr 2023 03:30:03 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 4
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST
X-TraceId: 3a7d6be73b8d51cb0ae1346f41244ae4
log.outbrainimg.com/api/loggerBatch/log-viewability
70.42.32.127200 OK 4 B URL HTTP/1.1 log.outbrainimg.com/api/loggerBatch/log-viewability
IP 70.42.32.127:0
File type ASCII text, with no line terminators
Hash b326b5062b2f0e69046810717534cb09
5ffe533b830f08a0326348a9160afafc8ada44db
b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b
POST /api/loggerBatch/log-viewability HTTP/1.1
Host: log.outbrainimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 343
Origin: https://www7.cuevana3.ch
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 01 Apr 2023 03:30:06 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 4
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST
X-TraceId: 8ea02131b21bd76c1048e44b1337cf3f
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 314d8141164405d2befa2409538d8b74
9468fde9baaf4133a4ec9a1d2b782ef97621463c
0ede8ea020180daddfafc8104f5c801f492ee7cbf4ecafa1dff0a01c84942f5f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0EDE8EA020180DADDFAFC8104F5C801F492EE7CBF4ECAFA1DFF0A01C84942F5F"
Last-Modified: Fri, 31 Mar 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7523
Expires: Sat, 01 Apr 2023 05:35:31 GMT
Date: Sat, 01 Apr 2023 03:30:08 GMT
Connection: keep-alive
a4p.adpartner.pro/ssp/match?redirect=https%3A%2F%2Fsync.adtelligent.com%2Fcsync%3Ft%3Da%26ep%3D307558%26extuid%3D%7Buser_id%7D
51.83.220.94302 Found 166 B URL HTTP/2 a4p.adpartner.pro/ssp/match?redirect=https%3A%2F%2Fsync.adtelligent.com%2Fcsync%3Ft%3Da%26ep%3D307558%26extuid%3D%7Buser_id%7D
IP 51.83.220.94:0
Hash 2b2a1fa65a0130d954356eea4275337b
f1111c9c4c9cc3076540e7e967e7eaf095d7e0e3
d80e7bab5c9f2b5c51563be739c266b6ba4cbd33e61da2de56fab58b8e7ad069
GET /ssp/match?redirect=https%3A%2F%2Fsync.adtelligent.com%2Fcsync%3Ft%3Da%26ep%3D307558%26extuid%3D%7Buser_id%7D HTTP/1.1
Host: a4p.adpartner.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sat, 01 Apr 2023 03:30:08 GMT
content-type: text/html; charset=utf-8
content-length: 166
location: https://sync.adtelligent.com/csync?t=a&ep=307558&extuid=bd83021f-e843-411e-b631-42094d973765
set-cookie: apuid=bd83021f-e843-411e-b631-42094d973765; Path=/; Expires=Wed, 31 May 2023 03:30:08 GMT; Secure; SameSite=None
cache-control: no-store no-transform
X-Firefox-Spdy: h2
ocsp.digicert.com/
192.229.221.95200 OK 471 B IP 192.229.221.95:0
Hash 33b031cfb6d91349dbc4d3cc8c8fc600
8d9a6ece8b9f7cecf599c94497bc93f53bb22820
c145eadbde5e01fd5d330b377e9d183fe10ee10fa6b518b357182b792c2676c2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2402
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 01 Apr 2023 03:30:08 GMT
Last-Modified: Sat, 01 Apr 2023 02:50:06 GMT
Server: ECAcc (ska/F775)
X-Cache: HIT
Content-Length: 471
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fwww7.cuevana3.ch%2F&domain=www7.cuevana3.ch&gdprString=CPpjHQ6PpjHQ6BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&cw=1&lsw=1
178.250.0.157200 OK 407 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fwww7.cuevana3.ch%2F&domain=www7.cuevana3.ch&gdprString=CPpjHQ6PpjHQ6BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&cw=1&lsw=1
IP 178.250.0.157:0
File type JSON data\012- , ASCII text, with very long lines (492), with no line terminators
Hash 811a8ec1909d8f1eb65d9d79b231f0cd
49948ef7f0c8846e8a15b7e0640eb79cb7a54f0d
ff7e10702ebce2a71023c397f9061f5c573fcc7a2fee3269a181bc507d0b6088
GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fwww7.cuevana3.ch%2F&domain=www7.cuevana3.ch&gdprString=CPpjHQ6PpjHQ6BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://www7.cuevana3.ch
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 01 Apr 2023 03:30:07 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://www7.cuevana3.ch
server-processing-duration-in-ticks: 1082844
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
zerossl.ocsp.sectigo.com/
104.18.32.68200 OK 315 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP 104.18.32.68:0
Hash ee3347522f0f682824239d5ac66a9e25
356dd69d95514c4004db73c0ab007ea76137dd3a
9b0b0f15304b2b5cacdfccc42890dca02ee73feacaaea7b31cea4e154464b782
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 01 Apr 2023 03:30:08 GMT
Content-Type: application/ocsp-response
Content-Length: 315
Connection: keep-alive
Last-Modified: Fri, 31 Mar 2023 23:50:44 GMT
Expires: Fri, 07 Apr 2023 23:50:43 GMT
Etag: "356dd69d95514c4004db73c0ab007ea76137dd3a"
Cache-Control: max-age=591034,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7b0dc072b9f8b52d-OSL
status.geotrust.com/
192.229.221.95200 OK 471 B IP 192.229.221.95:0
Hash 673f4065479339c0175a4ac11e6b0938
653517eafbf0133d750da44cfd9feba1d956a068
273cf59cee38ac6dd57cac48ef58dbc3d7cd6f2326182d1b5d1a899159421c47
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5647
Cache-Control: max-age=129540
Content-Type: application/ocsp-response
Date: Sat, 01 Apr 2023 03:30:08 GMT
Etag: "6426e635-1d7"
Expires: Sun, 02 Apr 2023 15:29:08 GMT
Last-Modified: Fri, 31 Mar 2023 13:55:01 GMT
Server: ECAcc (ska/F6AF)
X-Cache: HIT
Content-Length: 471
ib.adnxs.com/getuid?https%3A%2F%2Fsync.adtelligent.com%2Fcsync%3Ft%3Da%26ep%3D584890%26extuid%3D%24UID
185.83.142.19307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/getuid?https%3A%2F%2Fsync.adtelligent.com%2Fcsync%3Ft%3Da%26ep%3D584890%26extuid%3D%24UID
IP 185.83.142.19:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https%3A%2F%2Fsync.adtelligent.com%2Fcsync%3Ft%3Da%26ep%3D584890%26extuid%3D%24UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sat, 01 Apr 2023 03:30:08 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fsync.adtelligent.com%252Fcsync%253Ft%253Da%2526ep%253D584890%2526extuid%253D%2524UID
AN-X-Request-Uuid: b7df6047-4065-47ff-bfec-fbf179f68e68
Set-Cookie: uuid2=6808406589779998845; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 30-Jun-2023 03:30:08 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
rtb.openx.net/sync/prebid?gdpr=1&gdpr_consent=CPpjHQ6PpjHQ6BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&r=https%3A%2F%2Fsync.adtelligent.com%2Fcsync%3Ft%3Da%26ep%3D309255%26extuid%3D%24%7BUID%7D
35.186.253.211302 Found 0 B URL HTTP/2 rtb.openx.net/sync/prebid?gdpr=1&gdpr_consent=CPpjHQ6PpjHQ6BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&r=https%3A%2F%2Fsync.adtelligent.com%2Fcsync%3Ft%3Da%26ep%3D309255%26extuid%3D%24%7BUID%7D
IP 35.186.253.211:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/prebid?gdpr=1&gdpr_consent=CPpjHQ6PpjHQ6BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&r=https%3A%2F%2Fsync.adtelligent.com%2Fcsync%3Ft%3Da%26ep%3D309255%26extuid%3D%24%7BUID%7D HTTP/1.1
Host: rtb.openx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
access-control-allow-credentials: true
access-control-allow-origin: null
access-control-expose-headers:
cache-control: private, max-age=0, no-cache, must-revalidate
content-length: 0
date: Sat, 01 Apr 2023 03:30:08 GMT
location: https://rtb.openx.net/sync/prebid?gdpr=1&gdpr_consent=CPpjHQ6PpjHQ6BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&r=https%3A%2F%2Fsync.adtelligent.com%2Fcsync%3Ft%3Da%26ep%3D309255%26extuid%3D%24%7BUID%7D&ox_sc=1
p3p: CP="CUR ADM OUR NOR STA NID"
pragma: no-cache
server: Cowboy
set-cookie: i=fdab599f-cec4-48a7-90d4-60ef04dddc3e|1680319808; path=/; domain=.openx.net; expires=Sun, 31 Mar 2024 03:30:08 GMT; max-age=31536000
vary: Origin
x-request-id: vraav5hf55rsbc5in97tkn4t3ebttbn2
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fsync.adtelligent.com%252Fcsync%253Ft%253Da%2526ep%253D584890%2526extuid%253D%2524UID
185.83.142.19302 Found 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fsync.adtelligent.com%252Fcsync%253Ft%253Da%2526ep%253D584890%2526extuid%253D%2524UID
IP 185.83.142.19:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fsync.adtelligent.com%252Fcsync%253Ft%253Da%2526ep%253D584890%2526extuid%253D%2524UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www7.cuevana3.ch/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Sat, 01 Apr 2023 03:30:08 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://sync.adtelligent.com/csync?t=a&ep=584890&extuid=0
AN-X-Request-Uuid: 398c9150-47d9-4e43-894a-8544b6cc93bb
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
rtb.openx.net/sync/prebid?gdpr=1&gdpr_consent=CPpjHQ6PpjHQ6BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&r=https%3A%2F%2Fsync.adtelligent.com%2Fcsync%3Ft%3Da%26ep%3D309255%26extuid%3D%24%7BUID%7D&ox_sc=1
35.186.253.211302 Found 0 B URL HTTP/2 rtb.openx.net/sync/prebid?gdpr=1&gdpr_consent=CPpjHQ6PpjHQ6BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&r=https%3A%2F%2Fsync.adtelligent.com%2Fcsync%3Ft%3Da%26ep%3D309255%26extuid%3D%24%7BUID%7D&ox_sc=1
IP 35.186.253.211:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/prebid?gdpr=1&gdpr_consent=CPpjHQ6PpjHQ6BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&r=https%3A%2F%2Fsync.adtelligent.com%2Fcsync%3Ft%3Da%26ep%3D309255%26extuid%3D%24%7BUID%7D&ox_sc=1 HTTP/1.1
Host: rtb.openx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www7.cuevana3.ch/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
access-control-allow-credentials: true
access-control-allow-origin: null
access-control-expose-headers:
cache-control: private, max-age=0, no-cache, must-revalidate
content-length: 0
date: Sat, 01 Apr 2023 03:30:07 GMT
location: https://sync.adtelligent.com/csync?t=a&ep=309255&extuid=
p3p: CP="CUR ADM OUR NOR STA NID"
pragma: no-cache
server: Cowboy
vary: Origin
x-request-id: g7p3uatsnfngnh7nvcd06fauhtg5f4n7
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
status.geotrust.com/
192.229.221.95200 OK 471 B IP 192.229.221.95:0
Hash 673f4065479339c0175a4ac11e6b0938
653517eafbf0133d750da44cfd9feba1d956a068
273cf59cee38ac6dd57cac48ef58dbc3d7cd6f2326182d1b5d1a899159421c47
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4237
Cache-Control: max-age=128130
Content-Type: application/ocsp-response
Date: Sat, 01 Apr 2023 03:30:08 GMT
Etag: "6426e635-1d7"
Expires: Sun, 02 Apr 2023 15:05:38 GMT
Last-Modified: Fri, 31 Mar 2023 13:55:01 GMT
Server: ECAcc (amb/6B0A)
X-Cache: HIT
Content-Length: 471
sync.adtelligent.com/csync?t=a&ep=307558&extuid=bd83021f-e843-411e-b631-42094d973765
185.239.172.77200 OK 43 B URL HTTP/1.1 sync.adtelligent.com/csync?t=a&ep=307558&extuid=bd83021f-e843-411e-b631-42094d973765
IP 185.239.172.77:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /csync?t=a&ep=307558&extuid=bd83021f-e843-411e-b631-42094d973765 HTTP/1.1
Host: sync.adtelligent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www7.cuevana3.ch/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Adtelligent
Date: Sat, 01 Apr 2023 03:30:08 GMT
Content-Type: image/gif
Content-Length: 43
Etag: bd85356e66fd4af4
Set-Cookie: vmuid=bd85356e66fd4af4; expires=Fri, 02 Jun 2023 03:30:08 GMT; domain=.adtelligent.com; path=/; secure; SameSite=None
a307558=bd83021f-e843-411e-b631-42094d973765; expires=Fri, 02 Jun 2023 03:30:08 GMT; domain=.adtelligent.com; path=/; secure; SameSite=None
sync.adtelligent.com/csync?t=a&ep=309255&extuid=
185.239.172.77200 OK 43 B URL HTTP/1.1 sync.adtelligent.com/csync?t=a&ep=309255&extuid=
IP 185.239.172.77:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /csync?t=a&ep=309255&extuid= HTTP/1.1
Host: sync.adtelligent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www7.cuevana3.ch/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Adtelligent
Date: Sat, 01 Apr 2023 03:30:08 GMT
Content-Type: image/gif
Content-Length: 43
Etag: bd85356e66fd4af4
Set-Cookie: vmuid=bd85356e66fd4af4; expires=Fri, 02 Jun 2023 03:30:08 GMT; domain=.adtelligent.com; path=/; secure; SameSite=None
sync.adtelligent.com/csync?t=a&ep=584890&extuid=0
185.239.172.77200 OK 43 B URL HTTP/1.1 sync.adtelligent.com/csync?t=a&ep=584890&extuid=0
IP 185.239.172.77:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /csync?t=a&ep=584890&extuid=0 HTTP/1.1
Host: sync.adtelligent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www7.cuevana3.ch/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Adtelligent
Date: Sat, 01 Apr 2023 03:30:08 GMT
Content-Type: image/gif
Content-Length: 43
Etag: bd85356e66fd4af4
Set-Cookie: vmuid=bd85356e66fd4af4; expires=Fri, 02 Jun 2023 03:30:08 GMT; domain=.adtelligent.com; path=/; secure; SameSite=None
ocsp.godaddy.com/
192.124.249.24200 OK 1.8 kB IP 192.124.249.24:0
Hash 25c44d97442cbacabcc5ec5d0725f1e6
bca02fcabc41e7f3ad3d226859b3baa866731917
e75fdce809aa0e5462d6217afda6f4368f7d0268b513b1e9330c281cf8f4c67d
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 01 Apr 2023 03:30:08 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 31 Mar 2023 20:44:05 GMT
Expires: Sat, 01 Apr 2023 20:44:05 GMT
ETag: "bca02fcabc41e7f3ad3d226859b3baa866731917"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ap.lijit.com/pixel?redir=https%3A%2F%2Fsync.adtelligent.com%2Fcsync%3Ft%3Da%26ep%3D310570%26extuid%3D%24UID
216.52.2.6204 No Content 0 B URL HTTP/1.1 ap.lijit.com/pixel?redir=https%3A%2F%2Fsync.adtelligent.com%2Fcsync%3Ft%3Da%26ep%3D310570%26extuid%3D%24UID
IP 216.52.2.6:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel?redir=https%3A%2F%2Fsync.adtelligent.com%2Fcsync%3Ft%3Da%26ep%3D310570%26extuid%3D%24UID HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Sat, 01 Apr 2023 03:30:08 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, DELETE, PUT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type
X-Sovrn-Pod: ad_ap2ams1
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fwww7.cuevana3.ch%2F&domain=www7.cuevana3.ch&gdprString=CPpjHQ6PpjHQ6BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&cw=1&lsw=1
178.250.0.157200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fwww7.cuevana3.ch%2F&domain=www7.cuevana3.ch&gdprString=CPpjHQ6PpjHQ6BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&cw=1&lsw=1
IP 178.250.0.157:0
OPTIONS /sid/json?origin=prebid&topUrl=https%3A%2F%2Fwww7.cuevana3.ch%2F&domain=www7.cuevana3.ch&gdprString=CPpjHQ6PpjHQ6BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www7.cuevana3.ch/
Origin: https://www7.cuevana3.ch
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 01 Apr 2023 03:30:07 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: GET
access-control-allow-origin: https://www7.cuevana3.ch
server-processing-duration-in-ticks: 758128
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
pelisplay.cc/player/css/main.css?v=1.6
104.26.13.162200 OK 0 B URL HTTP/2 pelisplay.cc/player/css/main.css?v=1.6
IP 104.26.13.162:0
GET /player/css/main.css?v=1.6 HTTP/1.1
Host: pelisplay.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pelisplay.cc/play?id=MjU5NzE=&option=latin
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 01 Apr 2023 03:30:01 GMT
content-type: text/css
last-modified: Mon, 03 Oct 2022 03:06:59 GMT
vary: Accept-Encoding
etag: W/"633a51d3-761"
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7uwLXgecNslnZWiRj0DsNgreDiEbu4SZXAIOY18kiHMV2721loi4Zd%2F5FhXJowqtEwlCNn0g%2F%2BcHvzYECTlxvJgry3Jfz5frU2U63Xd%2Bn6CLedaSAnQeI6eRBZZA1Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b0dc0487fd90b06-OSL
content-encoding: br
X-Firefox-Spdy: h2
vid.vidoomy.com/sync?gdpr=1&gdpr_consent=CPpjHQ6PpjHQ6BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&us_privacy=&redirect=https%3A%2F%2Fsync.adtelligent.com%2Fcsync%3Ft%3Da%26ep%3D556847%26extuid%3D%7B%7BVID%7D%7D
185.76.9.19200 OK 0 B URL HTTP/2 vid.vidoomy.com/sync?gdpr=1&gdpr_consent=CPpjHQ6PpjHQ6BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&us_privacy=&redirect=https%3A%2F%2Fsync.adtelligent.com%2Fcsync%3Ft%3Da%26ep%3D556847%26extuid%3D%7B%7BVID%7D%7D
IP 185.76.9.19:0
ASN #60068 Datacamp Limited
GET /sync?gdpr=1&gdpr_consent=CPpjHQ6PpjHQ6BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&us_privacy=&redirect=https%3A%2F%2Fsync.adtelligent.com%2Fcsync%3Ft%3Da%26ep%3D556847%26extuid%3D%7B%7BVID%7D%7D HTTP/1.1
Host: vid.vidoomy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 01 Apr 2023 03:30:08 GMT
content-type: text/html
vary: Accept-Encoding
last-modified: Wed, 29 Mar 2023 13:36:23 GMT
etag: W/"64243ed7-c28e"
access-control-allow-origin: *
server: CDN77-Turbo
x-77-nzt: AblMCQ1QKD2h
x-77-nzt-ray: c0a4cc28e895ba2740a52764ee637e02
x-cache: MISS
x-77-pop: stockholmSE
x-77-cache: MISS
content-encoding: gzip
X-Firefox-Spdy: h2
www7.cuevana3.ch/392/la-odisea
188.114.96.1200 OK 0 B URL HTTP/2 www7.cuevana3.ch/392/la-odisea
IP 188.114.96.1:0
GET /392/la-odisea HTTP/1.1
Host: www7.cuevana3.ch
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sat, 01 Apr 2023 03:30:00 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
x-powered-by: PHP/5.6.13
set-cookie: gogoanime=ahev4binm18hrdloqk4qvac132; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fPBf9PvEWjPuVfKbcGn%2FeQLy2liFpmMZiEdtzkq80L7kMiDoz12JO%2BHXKK9rcsd9oQOMPCyd6FK0QLgvL6zzv3I54bqlCwp251%2Fyaz8czD%2BQyLSj00uJCSRRTbps7OChPEwU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b0dc040a9fdb4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
157.240.205.35200 OK 0 B URL HTTP/2 www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
IP 157.240.205.35:0
GET /login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com *.fbcdn.net 'unsafe-eval';script-src *.facebook.com *.fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 0
cross-origin-opener-policy: same-origin-allow-popups
vary: Sec-Fetch-Site, Sec-Fetch-Mode, Accept-Encoding
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: 42hd0ofGYZFzPbrZkc6/L9CIRLotax65Jvah9uhIDT/noIjEFuGgUM5+33P0LHhx5sfwITAdlXQGt381AB5f0A==
date: Sat, 01 Apr 2023 03:30:01 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
platform.bidgear.com/ads.php?domainid=5786&sizeid=17&zoneid=6326
104.26.3.107200 OK 0 B URL HTTP/2 platform.bidgear.com/ads.php?domainid=5786&sizeid=17&zoneid=6326
IP 104.26.3.107:0
GET /ads.php?domainid=5786&sizeid=17&zoneid=6326 HTTP/1.1
Host: platform.bidgear.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www7.cuevana3.ch/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 01 Apr 2023 03:30:00 GMT
content-type: application/javascript
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oXuPfo72TLncTkrQuTUc%2B8E2vQmVGyEewWaJhZPxPWvu72RSM0gIeUe%2F%2FS0UNwvUlvfxARvXjOBLiUKelrinXDuzcwb1dfri1f6Wm7xWg%2F0Y4IKg%2B8IeyU6jlHorZkbVGorBRgkr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b0dc042a9b7fab8-OSL
content-encoding: br
X-Firefox-Spdy: h2