firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-stale=0
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 23 Sep 2022 06:12:49 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: zQU3vy3u2-ebC9ySoOoOsPE3zXSFM9ybXvk6o5uJRvACteoT21ks2g==
Age: 1525
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a26d0784548ecab22f417f3d689daf23
8893b79366bbadeb5c8d587b8f023e310694df1c
35baaae7b3ce3110ebb2b075881cfab55ecf3eab57d834283fd18ac691b41fa2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35BAAAE7B3CE3110EBB2B075881CFAB55ECF3EAB57D834283FD18AC691B41FA2"
Last-Modified: Tue, 20 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5239
Expires: Fri, 23 Sep 2022 08:05:33 GMT
Date: Fri, 23 Sep 2022 06:38:14 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash afb65a07bf7214addf83d17a53acba32
a8e973204431320aa7b362a4e73944520c4b51b9
46e1a9e6c98245afb7fa84bc6d9ba6844105024e2d3f56e28748e6c321475d02
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "46E1A9E6C98245AFB7FA84BC6D9BA6844105024E2D3F56E28748E6C321475D02"
Last-Modified: Wed, 21 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7491
Expires: Fri, 23 Sep 2022 08:43:05 GMT
Date: Fri, 23 Sep 2022 06:38:14 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Zh5P1QvPXIGIWYnlYWOTMFXfPGYyFGga7oorkvem4IP0/MmrnIXVXTOtTJtU2TIUiV51pq9N+v0=
x-amz-request-id: 6B25KYHSGXE4YDPG
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 23 Sep 2022 05:46:50 GMT
age: 3084
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
etag: "6113f8408c59aebe188d6af273b90743"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
countvouchers.com/de/tar/sur5box-500/62
200 OK 6.4 kB URL HTTP/1.1 countvouchers.com/de/tar/sur5box-500/62
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, Unicode text, UTF-8 text, with very long lines (19357)
Hash 4f005ddc0ffad06c1deaa47b58d876ff
359eea5a629b2ef9be3e48133eabf760afa0db9c
5a9b32e4cd302473b39980d61f5e6e7dc4bca8f2b3c72197171a004a1be63a3f
Analyzer Verdict Alert fortinet Malware
GET /de/tar/sur5box-500/62 HTTP/1.1
Host: countvouchers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 06:38:14 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: no-cache, private
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i3Pfh%2FZBumw%2FQ3FRuVXzxZvJWV5pAtBQdF4lkm29uZkQsjPFBng6ePoTRiO8LNo3MbsBk9gs1ua7KApBAHzBXI%2Fpxl%2FtDyl6feSeZn%2FEPFB6ESilk3PFnCrn1QMT1x0tA9dO"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74f146ba19420b49-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 23 Sep 2022 06:38:14 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
code.jquery.com/jquery-3.6.0.min.js
200 OK 31 kB URL HTTP/2 code.jquery.com/jquery-3.6.0.min.js
IP
File type ASCII text, with very long lines (65447)
Hash 899f0189aaf034bbba5340f724d91dfa
210ea9de03968edb9d839ba4a0ce2d48666a8ab8
949b6597c5ea907a7ef3c8ca6d5ffc73be2352f9df485b78704e5c4dabac5d0f
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://countvouchers.com
Connection: keep-alive
Referer: http://countvouchers.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 23 Sep 2022 06:38:14 GMT
content-encoding: gzip
content-length: 30875
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15d9d"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1663915094.dop014.sk1.t,1663915094.cds264.sk1.hn,1663915094.cds210.sk1.c
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b9893dbb93b5cc3cb8637b496ecd3c1c
007b31caa727ce627f6ba81a3f43326a1538181e
b82608484e9e9dbf009de73986da468fff9833e5d040016b3214b8774ba9f500
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 06:38:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 280 B IP
Hash de424c85b225196c5a35219b9e3ebd8e
85607bc7f8cd550eceab6a6c236b403ca91662f5
29fe2614f1d16a5e8c89f055ce08a45ea0d89e31f91b014e6cea52411a7902d3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5195
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 06:38:14 GMT
Last-Modified: Fri, 23 Sep 2022 05:11:40 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash de424c85b225196c5a35219b9e3ebd8e
85607bc7f8cd550eceab6a6c236b403ca91662f5
29fe2614f1d16a5e8c89f055ce08a45ea0d89e31f91b014e6cea52411a7902d3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5195
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 06:38:14 GMT
Last-Modified: Fri, 23 Sep 2022 05:11:40 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 471 B IP
Hash 3f8eabc7d3bd1993a468151a274ff946
0184d4671487558b11ad5a4e5e8a6445a7cf723d
bcf74566035bc3def0a2a4ca21bba06ca3f0b9285e41a203b72194a7d178685c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4690
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 06:38:14 GMT
Last-Modified: Fri, 23 Sep 2022 05:20:04 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b9893dbb93b5cc3cb8637b496ecd3c1c
007b31caa727ce627f6ba81a3f43326a1538181e
b82608484e9e9dbf009de73986da468fff9833e5d040016b3214b8774ba9f500
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 06:38:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 280 B IP
Hash de424c85b225196c5a35219b9e3ebd8e
85607bc7f8cd550eceab6a6c236b403ca91662f5
29fe2614f1d16a5e8c89f055ce08a45ea0d89e31f91b014e6cea52411a7902d3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5195
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 06:38:14 GMT
Last-Modified: Fri, 23 Sep 2022 05:11:40 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 280
countvouchers.com/assets/nclo0u/detar62-ncue500/plus/3x1zeu6h3o.css?v=202209221015
200 OK 2.2 kB URL HTTP/1.1 countvouchers.com/assets/nclo0u/detar62-ncue500/plus/3x1zeu6h3o.css?v=202209221015
IP
File type ASCII text, with very long lines (7771), with no line terminators
Hash 04b6e8c0fdf74d7f7d2dda4ca50da78a
b42bb60ed5a9269a66d77dee57f9c8bf6e9da786
b480a48d820dc0aa955a512c4721ce16e9575d7ffc1578e572d34bc085f92968
Analyzer Verdict Alert fortinet Malware
GET /assets/nclo0u/detar62-ncue500/plus/3x1zeu6h3o.css?v=202209221015 HTTP/1.1
Host: countvouchers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://countvouchers.com/de/tar/sur5box-500/62
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 06:38:14 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Thu, 22 Sep 2022 10:10:01 GMT
etag: W/"632c3479-1e5b"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BlixPuErZMiqQcAFpttroAijzUEm0HEhJ9kqQsivNILJe0YhN3onlpOlGHnmIHN05YGNA%2FNJRiUmEVQX3DTNy5Eqn%2BHE833gVQhmL0LVUwY3oT7I7RHE3JLZiDK7X7e8tlbG"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74f146bc6b6d0b49-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
countvouchers.com/assets/nclo0u/detar62-ncue500/plus/h19zcw4s8b.js
200 OK 1.9 kB URL HTTP/1.1 countvouchers.com/assets/nclo0u/detar62-ncue500/plus/h19zcw4s8b.js
IP
File type ASCII text, with very long lines (6437), with no line terminators
Hash d255c407e1895127f9f921880a85265f
98c5ef57a93461d0f9f3b8ba8b24c88f571e4e1a
c2a59f6264fda18165d122666767aec93286d3ec876401233d8eafc705548a6a
Analyzer Verdict Alert fortinet Malware
GET /assets/nclo0u/detar62-ncue500/plus/h19zcw4s8b.js HTTP/1.1
Host: countvouchers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://countvouchers.com/de/tar/sur5box-500/62
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 06:38:14 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Thu, 22 Sep 2022 10:10:01 GMT
etag: W/"632c3479-1925"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oAWhnRFVSpxEWhGvB9%2FwgJJshQAH0uunK31%2FKdOKhKWBihb1mbyunqH5%2FGSWz%2BdHPkiUo8P1yU8rFeuIihrH3pDbKUDUGDBMAkjKJ7SiAsR25Zu38xLYiNl73tuMJJNjx8K8"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74f146bc8d6b1bfe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
countvouchers.com/assets/nclo0u/detar62-ncue500/plus/unc9bz32et.js
200 OK 3.3 kB URL HTTP/1.1 countvouchers.com/assets/nclo0u/detar62-ncue500/plus/unc9bz32et.js
IP
File type ASCII text, with very long lines (11714), with no line terminators
Hash 1519c0913fefb67897a12c9133ede667
18d7c71a160a792e8dd77bad1e0a86b9b28c0e2d
2c2fbf1a73f3997c954cd970c353a565a5151b05eaa15aa7ca3a5984fa08f8a1
Analyzer Verdict Alert fortinet Malware
GET /assets/nclo0u/detar62-ncue500/plus/unc9bz32et.js HTTP/1.1
Host: countvouchers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://countvouchers.com/de/tar/sur5box-500/62
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 06:38:14 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Thu, 22 Sep 2022 10:10:01 GMT
etag: W/"632c3479-2dc2"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=403q6CoOjdjp%2BiVPRglsrlBHlPzN5oFF5pDD5eo6yyRLNMhL9VsvYQ8K5lvBNt0wAadhiI9eHUxqKROa5kIdVCRuyfTKV64SCuEDovcVSGYMPBFGxzEuZuuSgVtXze6fVFBZ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74f146bc8cc01c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
countvouchers.com/assets/nclo0u/detar62-ncue500/plus/i238ekj7u0.css
200 OK 253 B URL HTTP/1.1 countvouchers.com/assets/nclo0u/detar62-ncue500/plus/i238ekj7u0.css
IP
Hash 543197ed3ab7cd10cd12d68f3c4e17cd
a97b901fb834bab8223c18ec3272f281697c599f
54013b6f847d51e7a231a309ee63435f9d35bbaddd850ef5739a2ee9f935185a
GET /assets/nclo0u/detar62-ncue500/plus/i238ekj7u0.css HTTP/1.1
Host: countvouchers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://countvouchers.com/de/tar/sur5box-500/62
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 06:38:14 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Thu, 22 Sep 2022 10:10:01 GMT
etag: W/"632c3479-18b"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1JgeVXIPksKLyulnnub71kmNaRZKgoy7nkl4ea7qO%2BPFvpp93lDdsJEOKPK8CATWuCM%2F04iMrevOnV%2FYMjpytQa7xaFlbaQP66jO0hZKxgP8zEdKa1Yijk7pgalJ%2BIhP8Coy"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74f146bc882ab50f-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
countvouchers.com/assets/nclo0u/detar62-ncue500/plus/v3t1ihj68c.js
200 OK 782 B URL HTTP/1.1 countvouchers.com/assets/nclo0u/detar62-ncue500/plus/v3t1ihj68c.js
IP
File type ASCII text, with very long lines (1941), with no line terminators
Hash 29614b4cfb57392889f6e41caa8f25a9
f9d57f56572e0ff988cbd5ea68f9d40537a289fc
b17a8c654ebd9857fbfb6bc4eb46db8e51cbdbc3645cc0fb05630959ce0027b5
Analyzer Verdict Alert fortinet Malware
GET /assets/nclo0u/detar62-ncue500/plus/v3t1ihj68c.js HTTP/1.1
Host: countvouchers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://countvouchers.com/de/tar/sur5box-500/62
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 06:38:14 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Thu, 22 Sep 2022 10:10:01 GMT
etag: W/"632c3479-795"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3LxHqpo1BXbtqGG2ZUqxqmnFBzrFOcrjw%2BHwa6XsGr4p7yJzHxDguxOX%2FdRrhguOWBl7m3zDBIp9abh4FuDTf4zUOwDpUQksWVWQPOEenZD0lJKPMZ0j22Tbw%2BqTNIRZtvmo"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74f146bc8d8e0b4d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
countvouchers.com/assets/nclo0u/detar62-ncue500/plus/y1our632ac.js
200 OK 1.1 kB URL HTTP/1.1 countvouchers.com/assets/nclo0u/detar62-ncue500/plus/y1our632ac.js
IP
File type ASCII text, with very long lines (3726), with no line terminators
Hash cb2ea45a3267c5780ebf1cf0c9da3674
10ff3cca7365aabedff30c2e2354ef31a424f9fe
74fa808cdae80992d5e40d32f78b032fcc59fe16a1832690e322a17350242d28
Analyzer Verdict Alert fortinet Malware
GET /assets/nclo0u/detar62-ncue500/plus/y1our632ac.js HTTP/1.1
Host: countvouchers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://countvouchers.com/de/tar/sur5box-500/62
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 06:38:14 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Thu, 22 Sep 2022 10:10:01 GMT
etag: W/"632c3479-e8e"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6L3IHO2j3G3Dg1C9mQ8%2FsXpfOI37UoOJ18ZKOi95gy21Kldfld6%2F2GCmVq8GnlWJJdMpV4xkYD%2BrKfAbRPnVfw179rHYnQXq%2FXXnBn9IaoMsjE1UUeW3wWJEdbff8fW0FL6x"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74f146bc8e371c12-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
kit.fontawesome.com/7deea0368b.js
200 OK 4.3 kB URL HTTP/2 kit.fontawesome.com/7deea0368b.js
IP
Hash a5014740ef8f992e9e04fad802abed43
1e10482ab6e3cc3180053b299d835a8da6336474
78dd1f5ba522ab03d78b1ba0a154d206d58f38ccf084c750256853456af98081
GET /7deea0368b.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://countvouchers.com
Connection: keep-alive
Referer: http://countvouchers.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 23 Sep 2022 06:38:14 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, must-revalidate
strict-transport-security: max-age=31536000; preload
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: Fxdp9nbCouOivQNfG1rC
cf-cache-status: MISS
server: cloudflare
cf-ray: 74f146bd29c7b4fa-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash edd6c63988b69a64a51433c3fd91b0ba
a0a41a5403a2c397d70cfa267c1d6407250df043
c9b1efff4ebf41ad54d3137ee7a93b688c66765df99e387ae730b39abe2f115f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 06:38:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://countvouchers.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 19:34:08 GMT
expires: Thu, 21 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 126246
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
countvouchers.com/assets/nclo0u/detar62-ncue500/plus/jlicpw3r07.css
200 OK 553 B URL HTTP/1.1 countvouchers.com/assets/nclo0u/detar62-ncue500/plus/jlicpw3r07.css
IP
Hash 78dcb8820075dadee7dd89c6723ce196
553b70a930bd9fc8cb34144667093d42153d89bb
17c92f4876d9bb4760a4d2b74897b864616cce54bed948e2323dd273e2fa58d6
GET /assets/nclo0u/detar62-ncue500/plus/jlicpw3r07.css HTTP/1.1
Host: countvouchers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://countvouchers.com/de/tar/sur5box-500/62
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 06:38:14 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Thu, 22 Sep 2022 10:10:01 GMT
etag: W/"632c3479-575"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BGH0r1lwD%2BdlBXtTP7CM2GsjK%2BRsi00NDgu6Gf0RIJnBTsd%2Fvwj8n5nf9k%2FXbIJNapMZOHjh3XwietwbcoItBP9DGzzCrwduDy54sxQ9hxpHIwvPkegvrrjM8qvpjqUfhapE"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74f146bdeca90b49-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash edd6c63988b69a64a51433c3fd91b0ba
a0a41a5403a2c397d70cfa267c1d6407250df043
c9b1efff4ebf41ad54d3137ee7a93b688c66765df99e387ae730b39abe2f115f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 06:38:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
countvouchers.com/assets/nclo0u/detar62-ncue500/plus/b1kcqlf35y.js
200 OK 1.0 kB URL HTTP/1.1 countvouchers.com/assets/nclo0u/detar62-ncue500/plus/b1kcqlf35y.js
IP
File type ASCII text, with very long lines (3093), with no line terminators
Hash 663b5be9efaf95a32a068771a47991f3
1421859e5a980cffd969426c9d491d7ca39f8ef3
0ccb3760ed495ffae250e4b7f6866d9d25971b695d336c8ee765f089e8d943b1
Analyzer Verdict Alert fortinet Malware
GET /assets/nclo0u/detar62-ncue500/plus/b1kcqlf35y.js HTTP/1.1
Host: countvouchers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://countvouchers.com/de/tar/sur5box-500/62
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 06:38:14 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Thu, 22 Sep 2022 10:10:01 GMT
etag: W/"632c3479-c15"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yJM9WG6QVeNg9agF7RYCLEAVvd8KBiQpzY430o9FXdRD7PruroUT2SnPky%2Bf%2FiVblKzAOKPLVG8iT9Fsh8b69onduXEH4euNRAXpWXbktvv4HAsCSTPEJwwg0kTgfoO%2BkOdf"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74f146be0e9b1bfe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
countvouchers.com/assets/nclo0u/detar62-ncue500/plus/lac410vz39.css?v=202209221015
200 OK 910 B URL HTTP/1.1 countvouchers.com/assets/nclo0u/detar62-ncue500/plus/lac410vz39.css?v=202209221015
IP
Hash 7898362e46c3818a1cc1306e271382bd
620bb0681e4260a6e2880b7db3e950af69644734
dad3c637161fdacd5f37ce6ba114d4515fe6118556a0002177b630a845e3a59e
Analyzer Verdict Alert fortinet Malware
GET /assets/nclo0u/detar62-ncue500/plus/lac410vz39.css?v=202209221015 HTTP/1.1
Host: countvouchers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://countvouchers.com/de/tar/sur5box-500/62
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 06:38:14 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Thu, 22 Sep 2022 10:10:01 GMT
etag: W/"632c3479-ead"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MwuOySRyzsTvSTPX7hrc%2BxMbRvGB2wn1h5YHKsgfYW79YtkJPVMQZaMZ4FrTbVS0NhFg%2FdnUlfVbm3oveSfLizE25Ee2%2FSIfgG2X0KniWzuEe2%2F3UYMEdLugvUmMkM6ks3hu"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74f146be0e321c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
countvouchers.com/assets/nclo0u/detar62-ncue500/plus/avbz24a963.css
200 OK 359 B URL HTTP/1.1 countvouchers.com/assets/nclo0u/detar62-ncue500/plus/avbz24a963.css
IP
File type ASCII text, with very long lines (1038), with no line terminators
Hash 77352b39bade81477fc5ca3c48ea754b
57d0ed2e30b236a4042f150d8788ac55a080c2c5
5f3c181baa4a3a52f3807ee6088c9df3c258ea2587acc8fbeeca3517cfed0db9
GET /assets/nclo0u/detar62-ncue500/plus/avbz24a963.css HTTP/1.1
Host: countvouchers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://countvouchers.com/de/tar/sur5box-500/62
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 06:38:14 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Thu, 22 Sep 2022 10:10:01 GMT
etag: W/"632c3479-40e"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TR%2BWvC4SHWtADBEuUfCyLzzidElmlMe5L%2Bz%2BOIu%2Bjsi5FrsgAqYxnn70c%2Ftzn%2FGC2uDKMcqVrKxhDfwlqKF62viRngi350NIr%2BFrAmRn6deeZRQzy9yRT9868arpmEq78awt"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74f146be1a2cb50f-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://countvouchers.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 19:34:08 GMT
expires: Thu, 21 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 126247
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 86624f45fb3b7126dbe002f69c94dd86
30bcf274db5037122f989fb25dbf1e72c9ec417b
2cc9600578cf057dc499835773fb495caa60ac154c4945f0fc1f2b31d43f5502
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3616
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 06:38:15 GMT
Last-Modified: Fri, 23 Sep 2022 05:37:59 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
countvouchers.com/assets/nclo0u/detar62-ncue500/ymawq9134v.png
200 OK 1.9 kB URL HTTP/1.1 countvouchers.com/assets/nclo0u/detar62-ncue500/ymawq9134v.png
IP
File type PNG image data, 65 x 65, 8-bit colormap, non-interlaced\012- data
Hash f979da8848548527f260e344c4aa2265
fdc1330eff39e40a8afdf58faffadb0cd6c6782f
b73b5b722a57cad03fe77bde0e67c43e8d8808d592fbbe47e1a03d0c3ad9baa9
GET /assets/nclo0u/detar62-ncue500/ymawq9134v.png HTTP/1.1
Host: countvouchers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://countvouchers.com/de/tar/sur5box-500/62
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 06:38:15 GMT
Content-Type: image/png
Content-Length: 1874
Connection: keep-alive
last-modified: Thu, 22 Sep 2022 10:10:01 GMT
etag: "632c3479-752"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uvYhieP4XQITuSbSNGCoPH9CyuJlTHhxl1S7TBH4WYbgc6NShqVuJdLaLDqDRFHi1fbbgfrJwa8qGhQZgLpMag5r1tL3vi2im6hZb%2BG3bQ3e3hPjJ%2Fnc5Cka5GyDKkI9SYWy"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74f146bf88421c12-OSL
alt-svc: h2=":443"; ma=60
shaumtol.com/pfe/current/micro.tag.min.js?z=4807864&sw=/sw-check-permissions-96c32.js
200 OK 40 kB URL HTTP/1.1 shaumtol.com/pfe/current/micro.tag.min.js?z=4807864&sw=/sw-check-permissions-96c32.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash f9ffde8ce428406d5bd3e06d5e1f20bd
59f87900612a0b74cd318dc19b50873e3be8bf59
c58109c8aa8bcfb8047ae706bfdec016f49ab839ed777f91b3585492ac5e0baa
GET /pfe/current/micro.tag.min.js?z=4807864&sw=/sw-check-permissions-96c32.js HTTP/1.1
Host: shaumtol.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://countvouchers.com/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Sep 2022 06:38:15 GMT
Content-Type: application/javascript
Last-Modified: Tue, 20 Sep 2022 07:25:49 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"63296afd-1a407"
Access-Control-Allow-Credentials: true
Cache-Control: no-cache
Pragma: no-cache
Content-Encoding: gzip
stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css
200 OK 39 kB URL HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css
IP
File type ASCII text, with very long lines (65324)
Hash 2deb85d9570dcb86d09d3fe998af8afa
1f6c5ccf83248906683303e7035b080e03d0f82f
d01a26536899c19f478a71dabdca9e9c7d2eb7133db5ab9d73e7ee44a0e0509f
GET /bootstrap/4.5.0/css/bootstrap.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://countvouchers.com
Connection: keep-alive
Referer: http://countvouchers.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 23 Sep 2022 06:38:14 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"3afe15e976734d9daac26310110c4594"
last-modified: Mon, 25 Jan 2021 22:04:10 GMT
cdn-cachedat: 08/20/2022 02:33:27
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 865
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 75d1b86084fc625108488a542b9f539d
cdn-cache: HIT
cf-cache-status: MISS
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 74f146bcfe58b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
countvouchers.com/assets/nclo0u/detar62-ncue500/l2yvcjqxh0.png
200 OK 466 B URL HTTP/1.1 countvouchers.com/assets/nclo0u/detar62-ncue500/l2yvcjqxh0.png
IP
File type PNG image data, 15 x 14, 8-bit/color RGBA, non-interlaced\012- data
Hash 0d9c764991a1ebba259ce1afc777c756
fedbba216589a0a40fabb2e0cb24911e663e679e
7adac1888791ad42f547c97c9c9dad37faee15dfb5e76f20eabc8a0a0b6168e9
GET /assets/nclo0u/detar62-ncue500/l2yvcjqxh0.png HTTP/1.1
Host: countvouchers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://countvouchers.com/de/tar/sur5box-500/62
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 06:38:15 GMT
Content-Type: image/png
Content-Length: 466
Connection: keep-alive
last-modified: Thu, 22 Sep 2022 10:10:01 GMT
etag: "632c3479-1d2"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bzKOHe2uGeFXoDHGmHJUGcac1D6zBATTHfMx3vxht9kA4Zi%2FLFxxz9Vhi8akhi%2BIBMP%2BpcuycgqykR3blkCHsv%2FdNEfYQNEVfeXDCe%2F1Ndbl1xuPVOrPcPmqrB8cfw5kcjOT"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74f146bfdbdeb50f-OSL
alt-svc: h2=":443"; ma=60
countvouchers.com/assets/nclo0u/detar62-ncue500/c83bgr15co.jpg
200 OK 1.2 kB URL HTTP/1.1 countvouchers.com/assets/nclo0u/detar62-ncue500/c83bgr15co.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Hash 35e10bdf2aad262c882f5cbee5eec790
33538ef901929efc277d05be92eb11ec41e28485
59d9e6d697bfc8a9e3731682cc1e72738711e72818a0f2727b6acf836f12aedb
GET /assets/nclo0u/detar62-ncue500/c83bgr15co.jpg HTTP/1.1
Host: countvouchers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://countvouchers.com/de/tar/sur5box-500/62
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 06:38:15 GMT
Content-Type: image/jpeg
Content-Length: 1184
Connection: keep-alive
last-modified: Thu, 22 Sep 2022 10:10:01 GMT
etag: "632c3479-4a0"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ACHlocnfOkT35Wnv7moxSItpwl4lWgTLI3u8WlEwFeXYRoZs7YPqxZp4l7sgofr8pek4D0XDapURpJfrdhTmNV3HV6Rm8oM9JuFvADfov2JMHOwhO3xJvWofKo93TkupDlAN"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74f146bfd8390b4d-OSL
alt-svc: h2=":443"; ma=60
countvouchers.com/assets/nclo0u/detar62-ncue500/v0251c1bjo.png
200 OK 14 kB URL HTTP/1.1 countvouchers.com/assets/nclo0u/detar62-ncue500/v0251c1bjo.png
IP
File type PNG image data, 481 x 353, 8-bit colormap, non-interlaced\012- data
Hash 0eae19bb931fe227db9803759fa59c56
8cd19e680d890ecad65c9ba884a0dc91608cfcef
bb1252a4c44e8e42e3fb9412e83d4fe563a5ef7d08fd37202e1470ba64b627d8
GET /assets/nclo0u/detar62-ncue500/v0251c1bjo.png HTTP/1.1
Host: countvouchers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://countvouchers.com/de/tar/sur5box-500/62
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 06:38:15 GMT
Content-Type: image/png
Content-Length: 14531
Connection: keep-alive
last-modified: Thu, 22 Sep 2022 10:10:01 GMT
etag: "632c3479-38c3"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3NZulnyiTgVE4FJllxOZSrb005YkiZF%2FLHIKPdeZXF9kLsW1t20JyDGuuW1PcVivqvBh7P8atjXO9g7AT6NNe6EjgWhb%2FzfCTJEFihQWSPcMbp%2B4XI8YzjmXYRWlZmRP8aEQ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74f146bf882d1c02-OSL
alt-svc: h2=":443"; ma=60
countvouchers.com/assets/nclo0u/detar62-ncue500/iuz372bjs6.jpg
200 OK 3.0 kB URL HTTP/1.1 countvouchers.com/assets/nclo0u/detar62-ncue500/iuz372bjs6.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Hash b9d12a8f6d6fc81b319003decb521b08
6b2a20d0148827c1a164e60a2c677adb323481a9
0c24c6e3611b6c20a11a04c42a6db631c082b2d03c6e50a300e543b6500fe27f
GET /assets/nclo0u/detar62-ncue500/iuz372bjs6.jpg HTTP/1.1
Host: countvouchers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://countvouchers.com/de/tar/sur5box-500/62
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 06:38:15 GMT
Content-Type: image/jpeg
Content-Length: 2973
Connection: keep-alive
last-modified: Thu, 22 Sep 2022 10:10:01 GMT
etag: "632c3479-b9d"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SzWBf0dpgSV7ql0pQaKS1LLAEqoqBHbsFfPK%2FRbb223lcr%2BsKYat3LZ9IvjytytG8AypWiOMRjmpw5%2FB8yS8dHUB3waLIBBPAuorOku76UN9xZHVr0hl4JxkwftRE9Z%2FBwBw"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74f146bfdeaf0b49-OSL
alt-svc: h2=":443"; ma=60
countvouchers.com/assets/nclo0u/detar62-ncue500/2i8vchjbu6.jpg
200 OK 1.9 kB URL HTTP/1.1 countvouchers.com/assets/nclo0u/detar62-ncue500/2i8vchjbu6.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash a2b83fe52776b2a68eef4de18de2ec59
8ba66d9c42d7bc469c4931de10f8de95261d3bcf
07a3ba946008b9994095a4fd137fa8326ed71db8f77ca74e4401f41b9157f1dc
GET /assets/nclo0u/detar62-ncue500/2i8vchjbu6.jpg HTTP/1.1
Host: countvouchers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://countvouchers.com/de/tar/sur5box-500/62
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 06:38:15 GMT
Content-Type: image/jpeg
Content-Length: 1938
Connection: keep-alive
last-modified: Thu, 22 Sep 2022 10:10:01 GMT
etag: "632c3479-792"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VGdKITXZKoCOKrNgclNHfaNQWhMwQdCiEkUjnT5nuD9aUFrVgHXOWgtQU5C7%2F9A9I6AkI9HA11BkU7Q4x6yGnjwqNUUV%2B%2B4A1ilbXIMhvnaUaOSm9WJEe6oQNm8DX8R83ivC"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74f146c048c21c12-OSL
alt-svc: h2=":443"; ma=60
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: eu4YG5Y3BLtqkGNv6dUK8Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: pWdfTQJxO+ZWE6+nkfVY3X7EsFQ=
countvouchers.com/assets/nclo0u/detar62-ncue500/5dm20x9poj.jpg
200 OK 1.5 kB URL HTTP/1.1 countvouchers.com/assets/nclo0u/detar62-ncue500/5dm20x9poj.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 7801ac9fc7ecb17ca9078b6aa2104c43
38872c7e85dc0f2bf31d746d860a0ef0e1ef491b
f91dd4d548f0a341052f52f4b0ad76f5a32d3b829b39adec34a32d5ee594e865
GET /assets/nclo0u/detar62-ncue500/5dm20x9poj.jpg HTTP/1.1
Host: countvouchers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://countvouchers.com/de/tar/sur5box-500/62
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 06:38:15 GMT
Content-Type: image/jpeg
Content-Length: 1493
Connection: keep-alive
last-modified: Thu, 22 Sep 2022 10:10:01 GMT
etag: "632c3479-5d5"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A3AgcTEjrqOldKYTcBPpxeY9b7%2FF9y%2BeMQH%2BwLa7ByJndowJMx3PrJTQzhytOni9olCdZyXr6Ophw0UB97kbnuoqAkWOtqOnCqMXvuRk7m2NjA%2FHnVUjE3%2BwjGGVagWr9AhZ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74f146c16fb60b49-OSL
alt-svc: h2=":443"; ma=60
countvouchers.com/assets/nclo0u/detar62-ncue500/zyiutrq086.jpg
200 OK 1.9 kB URL HTTP/1.1 countvouchers.com/assets/nclo0u/detar62-ncue500/zyiutrq086.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 98x98, components 3\012- data
Hash 9f7f0178de5f2c7b283da590af4f6d96
4d5718f9a65ed0cb470b163a15f02faf868e5132
e66e55e5708711642ea6715f2f7e718680e4121266df3820b147256d29272dbf
GET /assets/nclo0u/detar62-ncue500/zyiutrq086.jpg HTTP/1.1
Host: countvouchers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://countvouchers.com/de/tar/sur5box-500/62
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 06:38:15 GMT
Content-Type: image/jpeg
Content-Length: 1859
Connection: keep-alive
last-modified: Thu, 22 Sep 2022 10:10:01 GMT
etag: "632c3479-743"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rqLVi9H5fKbq%2By0r9uEmZ8UUej1sJhrvMhGUxqasOtXuHyEk5ph749PQ4MiBP2emDj%2FV8zCrRh5zqMnyi2%2BmqdeEmEYsOE%2FcQF6yahHC7RFkALFy2TG5YebglbnN5w8Z20g1"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74f146c169ee0b4d-OSL
alt-svc: h2=":443"; ma=60
countvouchers.com/assets/nclo0u/detar62-ncue500/uv3r45ezht.jpg
200 OK 2.0 kB URL HTTP/1.1 countvouchers.com/assets/nclo0u/detar62-ncue500/uv3r45ezht.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 560b78c5c79cff5966bcc5cf0fa46c95
c4b829bbcc4f4869d43f3013b9145576d6b7fb0b
b14fa965e4a83c101f0b3fc1dd69449be0d560e4c799bbf2a5a942983216105b
GET /assets/nclo0u/detar62-ncue500/uv3r45ezht.jpg HTTP/1.1
Host: countvouchers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://countvouchers.com/de/tar/sur5box-500/62
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 06:38:15 GMT
Content-Type: image/jpeg
Content-Length: 2041
Connection: keep-alive
last-modified: Thu, 22 Sep 2022 10:10:01 GMT
etag: "632c3479-7f9"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iobN2O7kWr0TioueVPbJvTfJCMQJ9XEotPWPeXUNbnqWkpEehqi8vID6TkGzC3Uhp%2B4anBjpW8cAlnqG0xySQkQAYyu%2Befa4RVv7esVLQP%2BY27wpDNN9IeXOQUsqgQZQMsDp"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74f146c16d68b50f-OSL
alt-svc: h2=":443"; ma=60
countvouchers.com/assets/nclo0u/detar62-ncue500/54fy3gc1m0.jpg
200 OK 2.2 kB URL HTTP/1.1 countvouchers.com/assets/nclo0u/detar62-ncue500/54fy3gc1m0.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 98x98, components 3\012- data
Hash 0d82ee46d4561fc63077b17a6b4e40c4
f8d88a99c32dd37066163ad049fc20123d0d200f
be2f3a64ed58f2768f9a33740dc964609646939a425a404c7d10d5ca09de30c3
GET /assets/nclo0u/detar62-ncue500/54fy3gc1m0.jpg HTTP/1.1
Host: countvouchers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://countvouchers.com/de/tar/sur5box-500/62
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 06:38:15 GMT
Content-Type: image/jpeg
Content-Length: 2187
Connection: keep-alive
last-modified: Thu, 22 Sep 2022 10:10:01 GMT
etag: "632c3479-88b"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7GCwNzd%2Fe%2BTD%2BF9gBiI%2B1gk2GVE%2Bx8iX6CxLNhg9suA4yMH7yBdDaByf%2BBSL7W5c2QqXLzvvcgMMyoYIhTt7RT%2FtBH2Os8KDTzBtvIOSoIfMIpiY5kFeU0tv1j0KJgilmROd"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74f146c169c01c02-OSL
alt-svc: h2=":443"; ma=60
countvouchers.com/assets/nclo0u/detar62-ncue500/002c18wpv3.jpg
200 OK 1.6 kB URL HTTP/1.1 countvouchers.com/assets/nclo0u/detar62-ncue500/002c18wpv3.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 98x98, components 3\012- data
Hash c76f5a635d4b6494ff2cc1022cb4ff67
039e569b5dd07e7f24dbe26e02804b0c9b411923
c6945707f49e74da139b58686bda048b1f9473d3b7f2d094045a606055fd3282
GET /assets/nclo0u/detar62-ncue500/002c18wpv3.jpg HTTP/1.1
Host: countvouchers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://countvouchers.com/de/tar/sur5box-500/62
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 06:38:15 GMT
Content-Type: image/jpeg
Content-Length: 1642
Connection: keep-alive
last-modified: Thu, 22 Sep 2022 10:10:01 GMT
etag: "632c3479-66a"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XAoSzxrSkfxp%2B9MTIisWEXZ%2B8DCl3BZnmUO8Cby9SIMqZe75og1mbwhFQVVFQGCnysHtYRn3v1BK4ZessGfoy6zimKXLom92dkkKOPJ76%2BsnrveUASpvD9%2Fi87J4IdZPqs62"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74f146c169331bfe-OSL
alt-svc: h2=":443"; ma=60
countvouchers.com/assets/nclo0u/detar62-ncue500/160o2u5ens.jpg
200 OK 2.1 kB URL HTTP/1.1 countvouchers.com/assets/nclo0u/detar62-ncue500/160o2u5ens.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 98x98, components 3\012- data
Hash a6d8edd05e862f6a2616137dfa9d227e
63a11ad5726095d164ff7436bd8f82cf13cb9847
c642e02aad4edca9ab3018f5467d4193c747eccffeb7f079f5a01931135e1c09
GET /assets/nclo0u/detar62-ncue500/160o2u5ens.jpg HTTP/1.1
Host: countvouchers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://countvouchers.com/de/tar/sur5box-500/62
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 06:38:15 GMT
Content-Type: image/jpeg
Content-Length: 2118
Connection: keep-alive
last-modified: Thu, 22 Sep 2022 10:10:01 GMT
etag: "632c3479-846"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ONMKDY4STQ5lqUTJoUl8QlDNLxYegumTn%2FKIA7XXNH%2FDrNDl02IP1RJcFgTfpDE29ZwaCN%2Fjrxvxjvj%2FU7PCvIoj8MEEuRTfrRWe3MHj7Dkt97LW%2FtInBx%2F2O%2FCd8tkW%2Fs8N"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74f146c1c9e01c12-OSL
alt-svc: h2=":443"; ma=60
countvouchers.com/assets/nclo0u/detar62-ncue500/a8w8qz5hy2.png
200 OK 381 B URL HTTP/1.1 countvouchers.com/assets/nclo0u/detar62-ncue500/a8w8qz5hy2.png
IP
File type PNG image data, 21 x 21, 8-bit colormap, non-interlaced\012- data
Hash 350cfbc5919be36293b6c9be02d49a4e
f16fb9ab27cf89af6cb65003e8a64795e753acfd
16ef358e846e0fb9e64b68dd8ed614f65782bf1e78f4500863fa8b00a376deda
GET /assets/nclo0u/detar62-ncue500/a8w8qz5hy2.png HTTP/1.1
Host: countvouchers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://countvouchers.com/de/tar/sur5box-500/62
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 06:38:15 GMT
Content-Type: image/png
Content-Length: 381
Connection: keep-alive
last-modified: Thu, 22 Sep 2022 10:10:01 GMT
etag: "632c3479-17d"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DFEE7OT0OJWDSoa3z%2BPGz%2BPF%2BSsr%2Fv%2FThpKe2%2Bf8ca%2BpQNSKV02Rf48AeBVvpJjEKMUcLPrXVZQRsk30ERu1idoMcLyooxxqhQRkYYW22Lj%2FoOYFkywWHi2h6PoluDfhWLMN"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74f146c34b481c02-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8645
Expires: Fri, 23 Sep 2022 09:02:21 GMT
Date: Fri, 23 Sep 2022 06:38:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8645
Expires: Fri, 23 Sep 2022 09:02:21 GMT
Date: Fri, 23 Sep 2022 06:38:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8645
Expires: Fri, 23 Sep 2022 09:02:21 GMT
Date: Fri, 23 Sep 2022 06:38:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8645
Expires: Fri, 23 Sep 2022 09:02:21 GMT
Date: Fri, 23 Sep 2022 06:38:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8645
Expires: Fri, 23 Sep 2022 09:02:21 GMT
Date: Fri, 23 Sep 2022 06:38:16 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd24d050-0f4e-43ea-b109-09eb13cf70e5.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd24d050-0f4e-43ea-b109-09eb13cf70e5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d540596f820baceec10c6f88915b4b31
a0446558f4fb73d9f0ef044f19c901f8da94583e
26a61b39202e89bf8a92401ba9c3f04c3891ab96350fb6e9584ae8049824d605
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd24d050-0f4e-43ea-b109-09eb13cf70e5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6984
x-amzn-requestid: ec7457c0-b12b-4d17-b8ed-0c94d0c2ffda
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4Y1-EWzIAMF7nw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632cd4f2-4403cf134c3da3fc3c5dcc48;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:34:42 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: k5DOAOFEDgA5x3nVbAlKJ24TAvP7hOVwC7BOkPRSMOq8ieyHMwNtpw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 ead78c395f4bede3ec6cd7ea180e3d3a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:11:05 GMT
etag: "a0446558f4fb73d9f0ef044f19c901f8da94583e"
content-type: image/jpeg
age: 30431
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b936e90-90ba-49d6-946e-b7cd524d23f9.jpeg
200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b936e90-90ba-49d6-946e-b7cd524d23f9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6243782119c18721ebfb39448a079e32
6131afd540498e8ead1b9937bc953fadbdb164f9
9f70c0b851ea5039eee2edf8d37f447946e2d2783d6ce257c0ccbcf9f262d289
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b936e90-90ba-49d6-946e-b7cd524d23f9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7180
x-amzn-requestid: c08a48fa-b734-4ac7-aa76-a1225135b792
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YsS2qHbcIAMFgEQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6327fe90-4a5915de1b0da7a07efddf86;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 05:30:56 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: vR0dXVmBUtMyvJBEYJmsekEBRZ0DS4hJQN6JDhTyP6HGf3LsYHN9WQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 09:08:11 GMT
age: 77405
etag: "6131afd540498e8ead1b9937bc953fadbdb164f9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ec986e3-2bce-4ded-85eb-e88df9893a30.jpeg
200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ec986e3-2bce-4ded-85eb-e88df9893a30.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ff021fa15adb0d3a24158bc00cf0980a
265d3e98bcbf5f14f214102279a7911d6fd64048
211d709fb1851a62f856a78e3b115ef816f78ab9a28f870d48fa3d1912eac16a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ec986e3-2bce-4ded-85eb-e88df9893a30.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6505
x-amzn-requestid: bc9cc556-8897-4484-ac07-f18e4f5250ca
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YvrfiFl4oAMF_Xg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63295930-7a627b7d7683919e41ca599b;Sampled=0
x-amzn-remapped-date: Tue, 20 Sep 2022 06:09:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: UNlx91pOuttpN-IrQs_g-PRI8C_NmZDKdnOpfayCJ719fa6FwnOIGg==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 02:01:19 GMT
age: 16617
etag: "265d3e98bcbf5f14f214102279a7911d6fd64048"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9444e811-e2d5-4901-a86d-9e9269a6f846.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9444e811-e2d5-4901-a86d-9e9269a6f846.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3b6b51846ec2b7d856b7dc12e4d720f4
5a69190a9a778a6979e11fafedd43e1031caf8e2
a497c04d1c9d0be88aa9c288423346e83c6a7b296295387b3b7b855c550492a2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9444e811-e2d5-4901-a86d-9e9269a6f846.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10927
x-amzn-requestid: a4c6c1b1-3777-4410-bef1-5dd2518af86a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YcCjSEqfIAMF1kA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63217e14-4cdfc5ea1c42120d4a085752;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 07:09:08 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: b3Zf70hsIlHF67m0hhfBtDxu7FeNv0Z7JY7-Iei61XiGbDOqfKoUGQ==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:07:57 GMT
age: 30619
etag: "5a69190a9a778a6979e11fafedd43e1031caf8e2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ca56e32-b483-4063-a12c-be8fa8c3d85e.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ca56e32-b483-4063-a12c-be8fa8c3d85e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7606ff88f05062b66970d9805f38987a
d47db5fcd83023b4a8de40a47d4510e183de387a
20f89dd859e5715e27c289040fac6a121248e5b6c06da0a7f186984ffb029eb2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ca56e32-b483-4063-a12c-be8fa8c3d85e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8497
x-amzn-requestid: ab65ba93-aad5-4845-b471-c50c14057c47
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YvqujEsIoAMF8sQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632957f6-6d4635bf713fd25147948c7b;Sampled=0
x-amzn-remapped-date: Tue, 20 Sep 2022 06:04:38 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: SZ6p5NLxuGUoEOZujwPbDGwUO0dZgiITud8RWOaSW_VciGRgBidY2A==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 19:36:01 GMT
age: 39735
etag: "d47db5fcd83023b4a8de40a47d4510e183de387a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F155952bd-256a-4103-9017-437efcfb03bf.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F155952bd-256a-4103-9017-437efcfb03bf.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1985a957e6bc0c15d8489fa731e7f14e
4584bff61bf4d5c9b8fd3b97c048a8e6975e4323
9f3e1fd6e18d85d4f6645d077da643a3bc2cca611d5e85f534ba798102dca243
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F155952bd-256a-4103-9017-437efcfb03bf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7005
x-amzn-requestid: c805d882-7a00-4abd-a239-d8313d7df0c4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4aBwEaMIAMF09A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632cd6d7-6d6a417f10c9628a16d438e1;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:42:47 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 7edV0FJytVSpHH-WkCiYzhW1JP4L6i6bpPCq9MTxPdhwFQTryf06BQ==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:12:22 GMT
etag: "4584bff61bf4d5c9b8fd3b97c048a8e6975e4323"
content-type: image/jpeg
age: 30354
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:400,700&display=swap&subset=cyrillic,cyrillic-ext,greek,latin-ext
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:400,700&display=swap&subset=cyrillic,cyrillic-ext,greek,latin-ext
IP
GET /css?family=Roboto:400,700&display=swap&subset=cyrillic,cyrillic-ext,greek,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://countvouchers.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 23 Sep 2022 06:38:14 GMT
date: Fri, 23 Sep 2022 06:38:14 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.bundle.min.js
200 OK 0 B URL HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.bundle.min.js
IP
GET /bootstrap/4.5.0/js/bootstrap.bundle.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://countvouchers.com
Connection: keep-alive
Referer: http://countvouchers.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 23 Sep 2022 06:38:14 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"7fd2f04e75bd7ab1a79d80cdd4c33085"
last-modified: Mon, 25 Jan 2021 22:04:10 GMT
cdn-cachedat: 08/20/2022 02:45:35
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 874
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 3fffabda7e021b38966432670d83ec99
cdn-cache: HIT
cf-cache-status: MISS
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 74f146bd1e71b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-font-face.min.css?token=7deea0368b
200 OK 0 B URL HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-font-face.min.css?token=7deea0368b
IP
GET /releases/v5.15.4/css/free-v4-font-face.min.css?token=7deea0368b HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://countvouchers.com/
Origin: http://countvouchers.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 23 Sep 2022 06:38:15 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"f2e0b2680d9b0bcb6e0039c4424e5a59"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 82bacd1af934cd2afa8b1ccc8f096b22.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR3-C1
x-amz-cf-id: Wl4Q5XuQ4gRZ3Qlsij0gV0sG9wUHp3FzjonjtCCeJzLeqo8ZogxgeA==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n6ZqySOv3nMMzCXej1KMiIFgJsygP6qSse7vl0wpSvrVdXOydWKJbCUXrUvwNEqTckerf13W3Cx5UZ8zzSxYRt0jH76nabuR06uB%2B18x9AtluDiyaN15DiXEsiZeaxg6sLqduFbyMA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74f146c01dbc71c6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=7deea0368b
200 OK 0 B URL HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=7deea0368b
IP
GET /releases/v5.15.4/css/free.min.css?token=7deea0368b HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://countvouchers.com/
Origin: http://countvouchers.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 23 Sep 2022 06:38:15 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"a12ec7ebe75a4d59a5dd6b79e2ba2e16"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 82bacd1af934cd2afa8b1ccc8f096b22.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR3-C1
x-amz-cf-id: ZgoSAfUWGuWeLiAnyMiw6YuloRJx-NmprnqzFhwQOolj0fQ7Up9gKQ==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mxKzwdEVotR%2FH9zzwrFaSVcMdavgTn4pxN2MCjLfDiq27PNoCzznnCoAtCLseJ9yk9zwFn5noQ13qOFumqFnTVKr4netPPw8LVa4OyhejAbRhaIo%2FoCROIdxIzAShZulHC23ggmtLg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74f146c01dba71c6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
172.67.73.37
93.184.220.29
104.18.22.52
23.36.77.32