www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/?do=download&csrfKey=792a1bba94fa8d2d7e0490621a54e072&e=1702043163&validation=20b205c5ff72113ca4d89c8bfaec2b37&servingMethod=4&fl=true
301 Moved Permanently 168 B URL User Request GET HTTP/2 www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/?do=download&csrfKey=792a1bba94fa8d2d7e0490621a54e072&e=1702043163&validation=20b205c5ff72113ca4d89c8bfaec2b37&servingMethod=4&fl=true
IP
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 62019120e2e6b6a77d348c07ed5801aa
8d0b55297974e22979c642ba4adbd2c0cefc50f4
d3ff999a093c94b71eed485b9391ad5e80033f0728aa285049a0f81d0042dba5
GET /downloads/rdr2/scripts/278-drag-npcs/?do=download&csrfKey=792a1bba94fa8d2d7e0490621a54e072&e=1702043163&validation=20b205c5ff72113ca4d89c8bfaec2b37&servingMethod=4&fl=true HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 307 Temporary Redirect
date: Fri, 08 Dec 2023 13:45:22 GMT
content-type: text/html; charset=utf-8
content-length: 168
location: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/?do=download&csrfKey=792a1bba94fa8d2d7e0490621a54e072&e=1702043163&validation=20b205c5ff72113ca4d89c8bfaec2b37&servingMethod=4&fl=true
set-cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; path=/; SameSite=Lax; HttpOnly
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache
server: shortflare-fe
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/?do=download&csrfKey=792a1bba94fa8d2d7e0490621a54e072&e=1702043163&validation=20b205c5ff72113ca4d89c8bfaec2b37&servingMethod=4&fl=true
301 Moved Permanently 0 B URL User Request GET HTTP/2 www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/?do=download&csrfKey=792a1bba94fa8d2d7e0490621a54e072&e=1702043163&validation=20b205c5ff72113ca4d89c8bfaec2b37&servingMethod=4&fl=true
IP
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /downloads/rdr2/scripts/278-drag-npcs/?do=download&csrfKey=792a1bba94fa8d2d7e0490621a54e072&e=1702043163&validation=20b205c5ff72113ca4d89c8bfaec2b37&servingMethod=4&fl=true HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
date: Fri, 08 Dec 2023 13:45:23 GMT
content-type: ;charset=UTF-8
content-length: 0
location: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
set-cookie: ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d; path=/; secure; HttpOnly
x-ips-loggedin: 0
vary: Cookie
x-xss-protection: 0
x-frame-options: sameorigin
content-security-policy: frame-ancestors 'self'
x-content-security-policy: frame-ancestors 'self'
referrer-policy: strict-origin-when-cross-origin
expires: 0
cache-control: no-cache, no-store, must-revalidate, max-age=0, s-maxage=0
server: shortflare-fe
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.rdr2mods.com/applications/core/interface/font/fontawesome-webfont.woff2?v=4.7.0
77 kB URL www.rdr2mods.com/applications/core/interface/font/fontawesome-webfont.woff2?v=4.7.0
IP
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /applications/core/interface/font/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: font/woff2
content-length: 77160
last-modified: Tue, 09 May 2023 12:46:21 GMT
vary: Accept-Encoding
etag: "645a409d-12d68"
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:24 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
www.rdr2mods.com/uploads/css_built_22/20e9fb241d987e07d4fc702c601c3ed8_downloads_responsive.css?v=271316c1861698951923
934 B URL www.rdr2mods.com/uploads/css_built_22/20e9fb241d987e07d4fc702c601c3ed8_downloads_responsive.css?v=271316c1861698951923
IP
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type ASCII text, with very long lines (934), with no line terminators
Hash 875f261e272e5617ff5c573c5f9eff5d
c6902d5344d00538edefb707a4ff777b91051187
25503325838d918f8e88c81b402ac4747276a50c8ec5990898e3e917c6b04d4d
GET /uploads/css_built_22/20e9fb241d987e07d4fc702c601c3ed8_downloads_responsive.css?v=271316c1861698951923 HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: text/css
content-length: 934
last-modified: Thu, 02 Nov 2023 19:05:26 GMT
vary: Accept-Encoding
etag: "6543f2f6-3a6"
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:24 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
www.rdr2mods.com/uploads/css_built_22/009fad4b8d81c06eb3d26966da7f5fb8_file.css?v=271316c1861698951923
912 B URL www.rdr2mods.com/uploads/css_built_22/009fad4b8d81c06eb3d26966da7f5fb8_file.css?v=271316c1861698951923
IP
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type ASCII text, with very long lines (912), with no line terminators
Hash 679277e9f7721fdecd591767187f0b76
3ea99af67e1799ff0a458e7e7a4e5d02d2ce2cfe
424e1c95f285faabb04542490b46d0afcf7d380cf21771f19a65504efe4b0eb1
GET /uploads/css_built_22/009fad4b8d81c06eb3d26966da7f5fb8_file.css?v=271316c1861698951923 HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: text/css
content-length: 912
last-modified: Thu, 02 Nov 2023 19:05:35 GMT
vary: Accept-Encoding
etag: "6543f2ff-390"
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:24 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
www.rdr2mods.com/uploads/set_resources_22/78666728697ea8e7a9f25be22d3df7a2_discordshare.png
3.0 kB URL www.rdr2mods.com/uploads/set_resources_22/78666728697ea8e7a9f25be22d3df7a2_discordshare.png
IP
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type PNG image data, 245 x 240, 8-bit gray+alpha, non-interlaced\012- data
Hash 92d398f9ee16887a023ff22ac4cd954a
95f2e23560123a6aedf0e960eb7c0f1e7fc2752e
45d66c2869561ec7256c31a62a5bec510649622a88d523e377c63b86a155e2f4
GET /uploads/set_resources_22/78666728697ea8e7a9f25be22d3df7a2_discordshare.png HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: image/png
content-length: 2970
last-modified: Thu, 02 Nov 2023 19:05:25 GMT
vary: Accept-Encoding
etag: "6543f2f5-b9a"
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:24 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
www.rdr2mods.com/uploads/set_resources_22/78666728697ea8e7a9f25be22d3df7a2_patreonshare.png
200 OK 8.4 kB URL GET HTTP/2 www.rdr2mods.com/uploads/set_resources_22/78666728697ea8e7a9f25be22d3df7a2_patreonshare.png
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type PNG image data, 500 x 480, 8-bit/color RGBA, non-interlaced\012- data
Hash 4a9d5b66b4bc2c9fd78ac69354d9d9ad
2e9d876a5f70caeea00a83acdff9f138f9791cd2
a223e3ad6b6a736e74ebb287fb2541f2c49532f7f47fedaa99d380d110bcbdb0
GET /uploads/set_resources_22/78666728697ea8e7a9f25be22d3df7a2_patreonshare.png HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: image/png
content-length: 8364
last-modified: Thu, 02 Nov 2023 19:05:25 GMT
vary: Accept-Encoding
etag: "6543f2f5-20ac"
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:24 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
www.rdr2mods.com/uploads/set_resources_22/512f8386f01449821035a8132966bdce_discord.png
200 OK 1.6 kB URL GET HTTP/2 www.rdr2mods.com/uploads/set_resources_22/512f8386f01449821035a8132966bdce_discord.png
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type PNG image data, 245 x 240, 8-bit colormap, non-interlaced\012- data
Hash 28174a34e77bb5e5310ced9f95cb480b
5ce00c615ebbb292a14cdd442948c1d18a69a251
f52132b6984f7779fff4eb5560fd390e328d861e66165e01defdd728d284cd3f
GET /uploads/set_resources_22/512f8386f01449821035a8132966bdce_discord.png HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: image/png
content-length: 1559
last-modified: Thu, 02 Nov 2023 19:05:25 GMT
vary: Accept-Encoding
etag: "6543f2f5-617"
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:24 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
www.rdr2mods.com/uploads/monthly_2021_09/rdr2mods.png.8b09032593bc1ebcb89761c801e9c2ac.png.3290c20cbdc8ffda23c7436885c98879.png
11 kB URL www.rdr2mods.com/uploads/monthly_2021_09/rdr2mods.png.8b09032593bc1ebcb89761c801e9c2ac.png.3290c20cbdc8ffda23c7436885c98879.png
IP
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type PNG image data, 883 x 180, 8-bit colormap, non-interlaced\012- data
Hash cc25156e25b23f995662c1718b41a723
592c1a54a57769080dc3fd2b194fbe3c95fe35f2
743af71812719a5cb8e615be23df43f684dfed4b1222afbc09f04e53b790e76c
GET /uploads/monthly_2021_09/rdr2mods.png.8b09032593bc1ebcb89761c801e9c2ac.png.3290c20cbdc8ffda23c7436885c98879.png HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: image/png
content-length: 10898
last-modified: Tue, 28 Sep 2021 22:58:55 GMT
vary: Accept-Encoding
etag: "61539e2f-2a92"
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:24 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
www.rdr2mods.com/applications/core/interface/js/spacer.png
137 B URL www.rdr2mods.com/applications/core/interface/js/spacer.png
IP
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type PNG image data, 1 x 1, 8-bit colormap, non-interlaced\012- data
Hash a41d6e3396dc05c78cc77b2d2466534d
0ed5c70f6c2012837adc192b1570cdc8551defbe
dc1b146a3d93548cfd8893783085c4d22a389d361f6b0816643b67f19233000d
GET /applications/core/interface/js/spacer.png HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: image/png
content-length: 137
last-modified: Tue, 09 May 2023 12:46:21 GMT
vary: Accept-Encoding
etag: "645a409d-89"
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:24 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
www.rdr2mods.com/uploads/page_objects/ipsTabNavigation.js.01f547f5157b2934843359d77c610478.js?v=271316c1861701990551
207 B URL www.rdr2mods.com/uploads/page_objects/ipsTabNavigation.js.01f547f5157b2934843359d77c610478.js?v=271316c1861701990551
IP
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
Hash 65647e8a647dfcc1badcd07f24b173e6
cd8aeb1d8e3f06d26e62b062183b4c721773608b
defb7b7d7219687b2fe18d9d7c6f06310efa4b9cf8d4a624abbda469d55c908c
GET /uploads/page_objects/ipsTabNavigation.js.01f547f5157b2934843359d77c610478.js?v=271316c1861701990551 HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: application/javascript; charset=utf-8
content-length: 207
last-modified: Thu, 12 Oct 2023 18:04:50 GMT
vary: Accept-Encoding
etag: "65283542-cf"
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:24 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
www.rdr2mods.com/uploads/page_objects/dbg.js.1fc25d84175b2755bf0c9ed0c1150c4e.js?v=271316c1861701990551
200 OK 118 B URL GET HTTP/2 www.rdr2mods.com/uploads/page_objects/dbg.js.1fc25d84175b2755bf0c9ed0c1150c4e.js?v=271316c1861701990551
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type ASCII text, with no line terminators
Hash 2ec443665d2dec096148b2a3bd404f23
925381af5b088041f7e97628d6fbb11844666a74
2bd2531e4e8ad74daf107db23c57e630c4e7708ccdb856ebe4249abe234fa82c
GET /uploads/page_objects/dbg.js.1fc25d84175b2755bf0c9ed0c1150c4e.js?v=271316c1861701990551 HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: application/javascript; charset=utf-8
content-length: 118
last-modified: Thu, 12 Oct 2023 18:04:48 GMT
vary: Accept-Encoding
etag: "65283540-76"
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:24 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
www.rdr2mods.com/resize/250/250/uploads/monthly_2021_05/ModManager.UI_2021-05-08_01-38-54.thumb.png.578fa7b75386e9243b93994b6968aeda.png
200 OK 20 kB URL GET HTTP/2 www.rdr2mods.com/resize/250/250/uploads/monthly_2021_05/ModManager.UI_2021-05-08_01-38-54.thumb.png.578fa7b75386e9243b93994b6968aeda.png
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type PNG image data, 250 x 130, 8-bit/color RGBA, non-interlaced\012- data
Hash 8895512480f01b323f524bd61a4a102a
bbc55e86c4ed739be591b4ac1ab2adf25b36995e
65ada528fd91f8277be63b9160e57741e8c8cb3e97e9641b457dc1ef63633816
GET /resize/250/250/uploads/monthly_2021_05/ModManager.UI_2021-05-08_01-38-54.thumb.png.578fa7b75386e9243b93994b6968aeda.png HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: image/png
content-length: 20179
last-modified: Fri, 07 May 2021 23:39:54 GMT
vary: Accept-Encoding
etag: W/"6095cfca-fa9c"
expires: Sat, 09 Dec 2023 13:45:24 GMT
cache-control: max-age=86400
server: shortflare-fe
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.rdr2mods.com/resize/250/250/uploads/monthly_2019_11/rdr2asi.thumb.jpg.a6267fe15c5aee84802325478ac9dd44.jpg
8.5 kB URL www.rdr2mods.com/resize/250/250/uploads/monthly_2019_11/rdr2asi.thumb.jpg.a6267fe15c5aee84802325478ac9dd44.jpg
IP
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 250x250, components 3\012- data
Hash a15204e899455e2b4e9e4cd83105030b
bc0af73d5d66b4a5c5abc12a61ee69b75112dc05
d517240b8fcd783b6efa1329e78f113aefde2ec470dad84d0444868b1e1e5848
GET /resize/250/250/uploads/monthly_2019_11/rdr2asi.thumb.jpg.a6267fe15c5aee84802325478ac9dd44.jpg HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: image/jpeg
content-length: 8479
last-modified: Fri, 08 Nov 2019 16:34:23 GMT
vary: Accept-Encoding
etag: W/"5dc5990f-a0bb"
expires: Sat, 09 Dec 2023 13:45:24 GMT
cache-control: max-age=86400
server: shortflare-fe
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.rdr2mods.com/uploads/page_objects/g17shim.js.311cf28f081e212829bdd1624ea33b0f.js?v=271316c1861701990551
200 OK 137 B URL GET HTTP/2 www.rdr2mods.com/uploads/page_objects/g17shim.js.311cf28f081e212829bdd1624ea33b0f.js?v=271316c1861701990551
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
Hash 69826825d95d3757caa4e3c5fca8fb94
9d9486c8e0f929f0b45fd0a7088648f6a2767897
9db5f1abf8b631e2d83024a5273dee46887b87b756fd63a62c061307ae85a3df
GET /uploads/page_objects/g17shim.js.311cf28f081e212829bdd1624ea33b0f.js?v=271316c1861701990551 HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: application/javascript; charset=utf-8
content-length: 137
last-modified: Thu, 12 Oct 2023 18:04:48 GMT
vary: Accept-Encoding
etag: "65283540-89"
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:24 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
www.rdr2mods.com/uploads/page_objects/nmhider.js.3fb45f3b4b062a1208969cb9d0d2bce1.js?v=271316c1861701990551
200 OK 875 B URL GET HTTP/2 www.rdr2mods.com/uploads/page_objects/nmhider.js.3fb45f3b4b062a1208969cb9d0d2bce1.js?v=271316c1861701990551
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type ASCII text, with very long lines (318)
Hash 8eaa45492d21e558a7e6a69ed7d4aa1f
8f5e5c95aa7c3459e6dc51551c743fccdde66ea1
4795b6d481faf20509313f6a7c49871ea03311b01fe1cbc1e110b2d36b94407c
GET /uploads/page_objects/nmhider.js.3fb45f3b4b062a1208969cb9d0d2bce1.js?v=271316c1861701990551 HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: application/javascript; charset=utf-8
content-length: 875
last-modified: Thu, 12 Oct 2023 18:04:48 GMT
vary: Accept-Encoding
etag: "65283540-36b"
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:24 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
www.rdr2mods.com/resize/250/250/uploads/monthly_2019_11/YdonuQP.thumb.jpg.2c43d0f624c76c89a53a4e77a0997638.jpg
7.9 kB URL www.rdr2mods.com/resize/250/250/uploads/monthly_2019_11/YdonuQP.thumb.jpg.2c43d0f624c76c89a53a4e77a0997638.jpg
IP
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 250x140, components 3\012- data
Hash e2f635cee2350e3aa4f9e4a614814747
617dd774782a03fd6051e9601e4265395832daa9
29d5769ede9207e80af2389c1c4a0c3054d9db499dc9f5fc47f9845740045563
GET /resize/250/250/uploads/monthly_2019_11/YdonuQP.thumb.jpg.2c43d0f624c76c89a53a4e77a0997638.jpg HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: image/jpeg
content-length: 7850
last-modified: Sun, 24 Nov 2019 02:17:50 GMT
vary: Accept-Encoding
etag: W/"5dd9e84e-8573"
expires: Sat, 09 Dec 2023 13:45:24 GMT
cache-control: max-age=86400
server: shortflare-fe
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.rdr2mods.com/resize/250/250/uploads/monthly_2021_10/1665312772_Capturadetela2021-10-23204202.thumb.png.e0651300110f5119da82a8be27e26884.png
54 kB URL www.rdr2mods.com/resize/250/250/uploads/monthly_2021_10/1665312772_Capturadetela2021-10-23204202.thumb.png.e0651300110f5119da82a8be27e26884.png
IP
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type PNG image data, 250 x 140, 8-bit/color RGBA, non-interlaced\012- data
Hash e694bd95fca0e20179d186d792a6e74e
0f2c6f7d7da674965ec85355b9cace932c573a8f
14f89fb310c3bcb0284ca90231a62adfb80572fd7245d9dacd56c58981194e0a
GET /resize/250/250/uploads/monthly_2021_10/1665312772_Capturadetela2021-10-23204202.thumb.png.e0651300110f5119da82a8be27e26884.png HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: image/png
content-length: 54310
last-modified: Sun, 24 Oct 2021 00:36:43 GMT
vary: Accept-Encoding
etag: W/"6174aa9b-2b84d"
expires: Sat, 09 Dec 2023 13:45:24 GMT
cache-control: max-age=86400
server: shortflare-fe
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.rdr2mods.com/resize/250/250/uploads/monthly_2020_11/869640865_2020_11.15-22.31_01(2).thumb.png.cc32062f3cdcf019708021e78c886334.png
70 kB URL www.rdr2mods.com/resize/250/250/uploads/monthly_2020_11/869640865_2020_11.15-22.31_01(2).thumb.png.cc32062f3cdcf019708021e78c886334.png
IP
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type PNG image data, 250 x 156, 8-bit/color RGBA, non-interlaced\012- data
Hash 53aabb52e123ae5e214120fdcda6d7ab
36358f11339cf0b14bf01a548f97f8d59b526b22
9dc1983e616f8c9b9da1887486629cb9d7afd4740eedc099f04867a848bf81a0
GET /resize/250/250/uploads/monthly_2020_11/869640865_2020_11.15-22.31_01(2).thumb.png.cc32062f3cdcf019708021e78c886334.png HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: image/png
content-length: 70145
last-modified: Tue, 24 Nov 2020 22:21:51 GMT
vary: Accept-Encoding
etag: W/"5fbd877f-3d091"
expires: Sat, 09 Dec 2023 13:45:24 GMT
cache-control: max-age=86400
server: shortflare-fe
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.rdr2mods.com/uploads/set_resources_22/55b88a4ddc2e0fa3f4a95a6c3652ad3a_g17footera.png
200 OK 1.7 kB URL GET HTTP/2 www.rdr2mods.com/uploads/set_resources_22/55b88a4ddc2e0fa3f4a95a6c3652ad3a_g17footera.png
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type PNG image data, 128 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 65d521a2ee7d0ba7a5d75cc69c418285
f68dedd9af7b2676af5c4688ea834b4dcd117032
2186674a4ce524b42a8baa5dc6efd4fddc29723cf89fb24223ba98811eb01e0f
GET /uploads/set_resources_22/55b88a4ddc2e0fa3f4a95a6c3652ad3a_g17footera.png HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: image/png
content-length: 1695
last-modified: Thu, 02 Nov 2023 19:05:25 GMT
vary: Accept-Encoding
etag: "6543f2f5-69f"
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:24 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
www.rdr2mods.com/resize/250/250/uploads/monthly_2021_09/Picture1.thumb.png.9be0c1ef112bf1bf316ff463cc73e36e.png
200 OK 47 kB URL GET HTTP/2 www.rdr2mods.com/resize/250/250/uploads/monthly_2021_09/Picture1.thumb.png.9be0c1ef112bf1bf316ff463cc73e36e.png
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type PNG image data, 250 x 141, 8-bit/color RGBA, non-interlaced\012- data
Hash 9bfa5295c4acdbf3e11d892d2cc73aa6
11da3058263fcd5d8fbfccdabe44ae76494612e3
f7415c5a460f928af8ade11b027da0d380c94441e7ed160ec90738069ae1e709
GET /resize/250/250/uploads/monthly_2021_09/Picture1.thumb.png.9be0c1ef112bf1bf316ff463cc73e36e.png HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: image/png
content-length: 47133
last-modified: Wed, 22 Sep 2021 23:25:04 GMT
vary: Accept-Encoding
etag: W/"614bbb50-269fb"
expires: Sat, 09 Dec 2023 13:45:24 GMT
cache-control: max-age=86400
server: shortflare-fe
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.rdr2mods.com/uploads/javascript_global/root_library.js?v=271316c1861701990551
200 OK 119 kB URL GET HTTP/2 www.rdr2mods.com/uploads/javascript_global/root_library.js?v=271316c1861701990551
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type ASCII text, with very long lines (46244)
Size 119 kB (119400 bytes)
Hash 20663150e61083c606a407c59edb7676
eadf96821795d260983b3b7d5b4b01e65cf05b65
1ed74434fbba747bd03602d4759a4cad81ae35216b619e4e7cd4c7eedb80b373
GET /uploads/javascript_global/root_library.js?v=271316c1861701990551 HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 07 Dec 2023 19:05:24 GMT
vary: Accept-Encoding
etag: W/"65721774-5e7b6"
content-encoding: br
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:24 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-29396410-4
200 OK 52 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=UA-29396410-4
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (2213)
Hash 0a888e5d1c1caba44f990f4708b4d6ac
b9c2f70d88d316d924da3f3d35c1fcb9fc53bd82
75751aadc3a57111ecb2c2439dbc00bf2c0b6efe1abf35ff373d31c40df763ca
GET /gtag/js?id=UA-29396410-4 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 08 Dec 2023 13:45:24 GMT
expires: Fri, 08 Dec 2023 13:45:24 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 51593
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.rdr2mods.com/uploads/set_resources_22/dde7a770a3bc2ca1db9e473f03aa4dc1_Military-Gun-icon.png
2.0 kB URL www.rdr2mods.com/uploads/set_resources_22/dde7a770a3bc2ca1db9e473f03aa4dc1_Military-Gun-icon.png
IP
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type PNG image data, 256 x 256, 8-bit gray+alpha, non-interlaced\012- data
Hash 4009c83bb052e339bde953ada7d49913
7cf6a8643b721c5049bb3c91b7acc5c836dce6d4
f3fdee5ce94cf63c9a277be87c1dc96f2a99ce1ec25190205d16c47a5175c306
GET /uploads/set_resources_22/dde7a770a3bc2ca1db9e473f03aa4dc1_Military-Gun-icon.png HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rdr2mods.com/uploads/css_built_22/258adbb6e4f3e83cd3b355f84e3fa002_custom.css?v=271316c1861698951923
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:25 GMT
content-type: image/png
content-length: 1969
last-modified: Thu, 02 Nov 2023 19:05:24 GMT
vary: Accept-Encoding
etag: "6543f2f4-7b1"
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:25 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
www.rdr2mods.com/uploads/set_resources_22/dde7a770a3bc2ca1db9e473f03aa4dc1_fr-black.png
2.9 kB URL www.rdr2mods.com/uploads/set_resources_22/dde7a770a3bc2ca1db9e473f03aa4dc1_fr-black.png
IP
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash e1a69fce75e751339d891670fa77a769
3aa2bc6360c9b2266eaf48c559abe808ceb0076b
03317c9620d1c0b91d2126d87ed65d615a01dedee24cc6791ab8a77fedd0cbcd
GET /uploads/set_resources_22/dde7a770a3bc2ca1db9e473f03aa4dc1_fr-black.png HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rdr2mods.com/uploads/css_built_22/258adbb6e4f3e83cd3b355f84e3fa002_custom.css?v=271316c1861698951923
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:25 GMT
content-type: image/png
content-length: 2878
last-modified: Thu, 02 Nov 2023 19:05:24 GMT
vary: Accept-Encoding
etag: "6543f2f4-b3e"
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:25 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
www.rdr2mods.com/uploads/set_resources_22/65440ee5df4105e2b6648efa3c3815d0_85c2d0d0fc237f06302da7701c9ec8b2_moonlightbg.jpeg
200 OK 372 kB URL GET HTTP/2 www.rdr2mods.com/uploads/set_resources_22/65440ee5df4105e2b6648efa3c3815d0_85c2d0d0fc237f06302da7701c9ec8b2_moonlightbg.jpeg
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 3840x2160, components 3\012- data
Size 372 kB (372122 bytes)
Hash 822d8126a6f97db880489ac5675a18ab
d6a906486722811899ca6b6b0a0ee843b5d57076
974786edd25dcf52fb4bccdbabcf64563ee43ab3f5111d23c23ac1e54a267da1
GET /uploads/set_resources_22/65440ee5df4105e2b6648efa3c3815d0_85c2d0d0fc237f06302da7701c9ec8b2_moonlightbg.jpeg HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rdr2mods.com/uploads/css_built_22/258adbb6e4f3e83cd3b355f84e3fa002_custom.css?v=271316c1861698951923
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:25 GMT
content-type: image/jpeg
content-length: 372122
last-modified: Thu, 02 Nov 2023 19:05:25 GMT
vary: Accept-Encoding
etag: "6543f2f5-5ad9a"
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:25 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
www.rdr2mods.com/uploads/css_built_22/90eb5adf50a8c640f633d47fd7eb1778_core.css?v=271316c1861698951923
6.2 kB URL www.rdr2mods.com/uploads/css_built_22/90eb5adf50a8c640f633d47fd7eb1778_core.css?v=271316c1861698951923
IP
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type ASCII text, with very long lines (21504), with no line terminators
Hash 6dad5a011e679244b4753f2c9d0e4790
f5ccea8af2731b2a77bf4be6a249573a3bbd219e
1e72f3f19bd02dae23fc43d330bf6ec36b94b0325009b2b1ee87b7dc28f307ef
GET /uploads/css_built_22/90eb5adf50a8c640f633d47fd7eb1778_core.css?v=271316c1861698951923 HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: text/css
last-modified: Thu, 02 Nov 2023 19:05:23 GMT
vary: Accept-Encoding
etag: W/"6543f2f3-5400"
content-encoding: br
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:24 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.rdr2mods.com/uploads/css_built_22/5a0da001ccc2200dc5625c3f3934497d_core_responsive.css?v=271316c1861698951923
1.6 kB URL www.rdr2mods.com/uploads/css_built_22/5a0da001ccc2200dc5625c3f3934497d_core_responsive.css?v=271316c1861698951923
IP
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type ASCII text, with very long lines (5076), with no line terminators
Hash 22191f765e707a3fa9dafad92a385259
dcded54c7f5573587f41887caff89196eb8fc824
4e0f39543ae4c15cfe3222f68e358c416dc79cb262c16c8d5b46281a5d850f40
GET /uploads/css_built_22/5a0da001ccc2200dc5625c3f3934497d_core_responsive.css?v=271316c1861698951923 HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: text/css
last-modified: Thu, 02 Nov 2023 19:05:23 GMT
vary: Accept-Encoding
etag: W/"6543f2f3-13d4"
content-encoding: br
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:24 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
47 kB URL fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 46704, version 1.0\012- data
Hash 30a274cd01b6eeb0b082c918b0697f1e
393311bde26b99a4ad935fa55bad1dce7994388b
88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42
GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.rdr2mods.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:42:27 GMT
expires: Fri, 06 Dec 2024 15:42:27 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
age: 79378
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
47 kB URL fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 46704, version 1.0\012- data
Hash 30a274cd01b6eeb0b082c918b0697f1e
393311bde26b99a4ad935fa55bad1dce7994388b
88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42
GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.rdr2mods.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:42:27 GMT
expires: Fri, 06 Dec 2024 15:42:27 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
age: 79378
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
47 kB URL fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 46704, version 1.0\012- data
Hash 30a274cd01b6eeb0b082c918b0697f1e
393311bde26b99a4ad935fa55bad1dce7994388b
88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42
GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.rdr2mods.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:42:27 GMT
expires: Fri, 06 Dec 2024 15:42:27 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
age: 79378
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
powerad.ai/hbdirect/7660
2.9 kB IP
File type gzip compressed data, from Unix\012- data
Hash 3fa6764eda672aad4cab39b23605d7d8
619e1c6b2cf9e0e31fdee689cda7450c6dd71b4a
e226905e29c7186d84a9b9b59cc50ba54f0683beec47e7731474d5be4c5d75f1
GET /hbdirect/7660 HTTP/1.1
Host: powerad.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:25 GMT
content-type: text/javascript; charset=utf-8
x-powered-by: Express
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: *
etag: W/"1bd9-ayIyiOFWQxkinUr0XzC7X1ZSago"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
www.rdr2mods.com/uploads/monthly_2021_05/v4brighter.png
200 OK 38 kB URL GET HTTP/2 www.rdr2mods.com/uploads/monthly_2021_05/v4brighter.png
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 64b198c5241d1156979d9fbf177853df
d1cbeae0574b6290462ebed3c41cbbac629c95fc
6a8796ea454d440e6014493b2436ef4397a84fc7abc3cedce8545d96ae1b6b14
GET /uploads/monthly_2021_05/v4brighter.png HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:25 GMT
content-type: image/png
content-length: 38191
last-modified: Thu, 20 May 2021 14:55:30 GMT
vary: Accept-Encoding
etag: "60a67862-952f"
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:25 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
www.rdr2mods.com/uploads/monthly_2021_05/android-chrome-512x512.png
200 OK 38 kB URL GET HTTP/2 www.rdr2mods.com/uploads/monthly_2021_05/android-chrome-512x512.png
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 64b198c5241d1156979d9fbf177853df
d1cbeae0574b6290462ebed3c41cbbac629c95fc
6a8796ea454d440e6014493b2436ef4397a84fc7abc3cedce8545d96ae1b6b14
GET /uploads/monthly_2021_05/android-chrome-512x512.png HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:25 GMT
content-type: image/png
content-length: 38191
last-modified: Thu, 20 May 2021 14:55:37 GMT
vary: Accept-Encoding
etag: "60a67869-952f"
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:25 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
powerad.ai/detect-aau?ch=1
2 B URL powerad.ai/detect-aau?ch=1
IP
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /detect-aau?ch=1 HTTP/1.1
Host: powerad.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/
Origin: https://www.rdr2mods.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:25 GMT
content-type: text/plain; charset=utf-8
content-length: 2
x-powered-by: Express
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: *
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
vary: Accept-Encoding
X-Firefox-Spdy: h2
www.rdr2mods.com/uploads/css_built_22/8d665b42f598e908bc13a6d6f4307f5b_jstree.css?v=271316c1861698951923
200 OK 4.1 kB URL GET HTTP/2 www.rdr2mods.com/uploads/css_built_22/8d665b42f598e908bc13a6d6f4307f5b_jstree.css?v=271316c1861698951923
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type ASCII text, with very long lines (28766), with no line terminators
Hash bcc485279042d827498f38afd9ec3b49
a2fcdb59ff6af89c55a3858e9bc8f5b2c5468dcf
32fe9a0714b1d63b32226d6c1187794b3c0015608cd256e7a0315847ad9841aa
GET /uploads/css_built_22/8d665b42f598e908bc13a6d6f4307f5b_jstree.css?v=271316c1861698951923 HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: text/css
last-modified: Thu, 02 Nov 2023 19:05:35 GMT
vary: Accept-Encoding
etag: W/"6543f2ff-705e"
content-encoding: br
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:24 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
hb.vntsm.io/content.html
200 OK 32 B IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintBE:17:ED:4C:59:79:22:2A:22:96:28:A3:33:01:5A:A4:E0:C5:34:33
ValidityMon, 07 Aug 2023 00:00:00 GMT - Tue, 06 Aug 2024 23:59:59 GMT
File type HTML document text\012- HTML document, ASCII text
Hash 2f58b9ff601fd509249a9e7628a21c33
bfc1f4838f4746777352e07e8504032aa1dedbad
ce8368e5b8e9f2f066acc6284578c00021aea742c4c7c7ec2836c232a5f8b1f8
GET /content.html HTTP/1.1
Host: hb.vntsm.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/
Origin: https://www.rdr2mods.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:26 GMT
content-type: text/html
content-length: 32
x-amz-id-2: E2kebAw58yckLYrbHHazOZamc5NWk1DqNywhaJPvPvr0ADEysXbPeGa7yV13737iwnw3oHdWDdU=
x-amz-request-id: C1HKBZN2HSW6AJD2
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Thu, 14 Oct 2021 10:47:47 GMT
etag: "2f58b9ff601fd509249a9e7628a21c33"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4229
accept-ranges: bytes
set-cookie: __cf_bm=kvX8iheSfq2uPG_7phz4Ey1278GIEBSifnzcbNyPmw4-1702043126-0-ASMR87inSOvqdgtg35tD3U4wz74uhQFBla2IEQ4zgZQbJAjOG4+fH5HDsxKaJ/Dzl2Uqza8pQBHh8mN3Fv7DND0=; path=/; expires=Fri, 08-Dec-23 14:15:26 GMT; domain=.vntsm.io; HttpOnly; Secure; SameSite=None
access-control-allow-origin: *
access-control-expose-headers: *
geo: NO
geo-subdivision: NO-03
server: cloudflare
cf-ray: 832572e1ea36992a-ARN
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-D56BTQHPQW&l=dataLayer&cx=c
90 kB URL www.googletagmanager.com/gtag/js?id=G-D56BTQHPQW&l=dataLayer&cx=c
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (5955)
Hash 9de88185165ddace4682ba9eb02f1a55
b5619c18ea79da43f277bc5c3888f284de94d670
209920aba215531756a1b5b0e05517a44be5d36b0e09c756ae171d0a02034344
GET /gtag/js?id=G-D56BTQHPQW&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 08 Dec 2023 13:45:26 GMT
expires: Fri, 08 Dec 2023 13:45:26 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 90185
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.rdr2mods.com/uploads/css_built_22/05e81b71abe4f22d6eb8d1a929494829_responsive.css?v=271316c1861698951923
200 OK 7.0 kB URL GET HTTP/2 www.rdr2mods.com/uploads/css_built_22/05e81b71abe4f22d6eb8d1a929494829_responsive.css?v=271316c1861698951923
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type ASCII text, with very long lines (36086), with no line terminators
Hash 6a6abd6eb83fe08b498b0fdcd470b9e6
cc38a66f61f7cb0c0bf4bcfb2067c34d0410b5d0
5008d5e9bd10eea3c48217fc3a797895a56aadb808b04dda8381dd35e6544f22
GET /uploads/css_built_22/05e81b71abe4f22d6eb8d1a929494829_responsive.css?v=271316c1861698951923 HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: text/css
last-modified: Thu, 02 Nov 2023 19:05:23 GMT
vary: Accept-Encoding
etag: W/"6543f2f3-8cf6"
content-encoding: br
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:24 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.rdr2mods.com/uploads/monthly_2022_03/1228010852_RedDeadRedemption2Screenshot2022_03.02-20_10_32_64.thumb.png.149919d66f253a943939d9bac6203fd5.png
284 kB URL www.rdr2mods.com/uploads/monthly_2022_03/1228010852_RedDeadRedemption2Screenshot2022_03.02-20_10_32_64.thumb.png.149919d66f253a943939d9bac6203fd5.png
IP
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type PNG image data, 500 x 282, 8-bit/color RGBA, non-interlaced\012- data
Size 284 kB (283866 bytes)
Hash 987c31f97d399b4073fa795d601aa43f
62a421fa34657058a9a1d9599e9d8cb098c28495
2f2bae72f9c1819a681ba890cdf017fd2869564c9da791d506d9cb9677d9285c
GET /uploads/monthly_2022_03/1228010852_RedDeadRedemption2Screenshot2022_03.02-20_10_32_64.thumb.png.149919d66f253a943939d9bac6203fd5.png HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d; ips4_ipsTimezone=UTC; ips4_hasJS=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:26 GMT
content-type: image/png
content-length: 283866
last-modified: Thu, 03 Mar 2022 02:58:11 GMT
vary: Accept-Encoding
etag: "62202ec3-454da"
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:26 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
www.rdr2mods.com/uploads/monthly_2022_03/606088550_RedDeadRedemption2Screenshot2022_03.02-20_11_29_73.thumb.png.b267ced5fa0476c4b6e73c02edc36f33.png
279 kB URL www.rdr2mods.com/uploads/monthly_2022_03/606088550_RedDeadRedemption2Screenshot2022_03.02-20_11_29_73.thumb.png.b267ced5fa0476c4b6e73c02edc36f33.png
IP
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type PNG image data, 500 x 282, 8-bit/color RGBA, non-interlaced\012- data
Size 279 kB (278757 bytes)
Hash 7fd65162848eb978bf961886510f0bc3
b9510be60fa8f4fbed963e0fd81f134e0d8c032a
064a9d13f243fd958a7d7e7e0224413f7c1daa92fd39db26a3a2ad43260a7198
GET /uploads/monthly_2022_03/606088550_RedDeadRedemption2Screenshot2022_03.02-20_11_29_73.thumb.png.b267ced5fa0476c4b6e73c02edc36f33.png HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d; ips4_ipsTimezone=UTC; ips4_hasJS=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:26 GMT
content-type: image/png
content-length: 278757
last-modified: Thu, 03 Mar 2022 02:58:11 GMT
vary: Accept-Encoding
etag: "62202ec3-440e5"
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:26 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
www.rdr2mods.com/index.php?app=downloadsng&module=management&controller=ajax&do=insideTheFile&csrfKey=8d3ca69f0b2be081842c5fa37bd91175&fileId=278
303 kB URL www.rdr2mods.com/index.php?app=downloadsng&module=management&controller=ajax&do=insideTheFile&csrfKey=8d3ca69f0b2be081842c5fa37bd91175&fileId=278
IP
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type JSON data\012- , ASCII text, with very long lines (1722), with no line terminators
Size 303 kB (303246 bytes)
Hash 660652289efe22dc0d60299da14c0d40
8a68e7e22c4a000d0866aafa2e23cca458c263aa
43033121fe24ceef7e2aa3e7a0452bd318fb7a40e7f27088a65f805d526e9867
GET /index.php?app=downloadsng&module=management&controller=ajax&do=insideTheFile&csrfKey=8d3ca69f0b2be081842c5fa37bd91175&fileId=278 HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d; ips4_ipsTimezone=UTC; ips4_hasJS=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:26 GMT
content-type: application/json;charset=UTF-8
x-ips-loggedin: 0
vary: Accept-Encoding, Cookie
x-xss-protection: 0
x-frame-options: sameorigin
content-security-policy: frame-ancestors 'self'
x-content-security-policy: frame-ancestors 'self'
referrer-policy: strict-origin-when-cross-origin
expires: 0
cache-control: no-cache, no-store, must-revalidate, max-age=0, s-maxage=0
content-encoding: br
server: shortflare-fe
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
hb.brainlyads.com/prebid.js
200 OK 210 kB URL GET HTTP/2 hb.brainlyads.com/prebid.js
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerGoDaddy.com, Inc.
Subjecthb.brainlyads.com
FingerprintC5:87:8D:6F:1C:6A:9A:6C:5F:08:60:74:73:6E:2D:97:57:AB:CD:AF
ValidityWed, 23 Nov 2022 17:16:33 GMT - Mon, 25 Dec 2023 17:16:33 GMT
File type gzip compressed data, from Unix\012- data
Size 210 kB (209622 bytes)
Hash cd1119d5ca00a8f2aa9d9c9229e221b6
69d88e6b7839b49b8ea701b2c78a728ae11ee320
60c3af16d97179c03c9f2a4a32173bb3f9bccb87a8899395e568fb4f3a9f049c
GET /prebid.js HTTP/1.1
Host: hb.brainlyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rdr2mods.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Fri, 08 Dec 2023 13:45:26 GMT
content-type: application/javascript
last-modified: Fri, 08 Dec 2023 00:30:08 GMT
vary: Accept-Encoding
etag: W/"65726390-9ba79"
expires: Fri, 15 Dec 2023 13:45:26 GMT
cache-control: max-age=604800
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-D56BTQHPQW&cid=1895731674.1702043134>m=45je3bt0v885606320&aip=1&dma=1&dma_cps=sypham&gcs=G1--&gcd=11l1l1l1l5&z=637262299
42 B URL www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-D56BTQHPQW&cid=1895731674.1702043134>m=45je3bt0v885606320&aip=1&dma=1&dma_cps=sypham&gcs=G1--&gcd=11l1l1l1l5&z=637262299
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-D56BTQHPQW&cid=1895731674.1702043134>m=45je3bt0v885606320&aip=1&dma=1&dma_cps=sypham&gcs=G1--&gcd=11l1l1l1l5&z=637262299 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 08 Dec 2023 13:45:27 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
hb.vntsm.io/content.html
200 OK 32 B IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintBE:17:ED:4C:59:79:22:2A:22:96:28:A3:33:01:5A:A4:E0:C5:34:33
ValidityMon, 07 Aug 2023 00:00:00 GMT - Tue, 06 Aug 2024 23:59:59 GMT
File type HTML document text\012- HTML document, ASCII text
Hash 2f58b9ff601fd509249a9e7628a21c33
bfc1f4838f4746777352e07e8504032aa1dedbad
ce8368e5b8e9f2f066acc6284578c00021aea742c4c7c7ec2836c232a5f8b1f8
GET /content.html HTTP/1.1
Host: hb.vntsm.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/
Origin: https://www.rdr2mods.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:27 GMT
content-type: text/html
content-length: 32
x-amz-id-2: E2kebAw58yckLYrbHHazOZamc5NWk1DqNywhaJPvPvr0ADEysXbPeGa7yV13737iwnw3oHdWDdU=
x-amz-request-id: C1HKBZN2HSW6AJD2
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Thu, 14 Oct 2021 10:47:47 GMT
etag: "2f58b9ff601fd509249a9e7628a21c33"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4230
accept-ranges: bytes
set-cookie: __cf_bm=bi4wU99aWN0qb4u_bI3zf8bAEovPg1fBXuCtawD_l6U-1702043127-0-Ae3OJK0BOMbluZY11mhF3+bq/EA/8iYJ4bsu/GHPW7JCA67AwXkFiZ1AxQAPJIVALcrifoMuCVE5SmAGyIDQjyg=; path=/; expires=Fri, 08-Dec-23 14:15:27 GMT; domain=.vntsm.io; HttpOnly; Secure; SameSite=None
access-control-allow-origin: *
access-control-expose-headers: *
geo: NO
geo-subdivision: NO-03
server: cloudflare
cf-ray: 832572e9ab67992a-ARN
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-86Z0EH16VP
86 kB URL www.googletagmanager.com/gtag/js?id=G-86Z0EH16VP
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (3034)
Hash 1831061b7f6f8b05f6185089db10e7db
f9ff472959540fb791d98c582f0e4b753db2c51b
668d969a28bcd02631b5fa23d5342b9cc04029c42c171da19d19983921f96f9f
GET /gtag/js?id=G-86Z0EH16VP HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 08 Dec 2023 13:45:27 GMT
expires: Fri, 08 Dec 2023 13:45:27 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 86546
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.rdr2mods.com/uploads/set_resources_22/db43835aadf862688f2728e003a65f36_throbber.gif
200 OK 1.8 kB URL GET HTTP/2 www.rdr2mods.com/uploads/set_resources_22/db43835aadf862688f2728e003a65f36_throbber.gif
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type GIF image data, version 89a, 16 x 16\012- data
Hash 7b9776076d5fceef4993b55c9383dedd
dcabdd743fd3e9d7bd5647abeb86e66a3e6f9597
f6ecff617ec2ba7f559e6f535cad9b70a3f91120737535dab4d4548a6c83576c
GET /uploads/set_resources_22/db43835aadf862688f2728e003a65f36_throbber.gif HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rdr2mods.com/uploads/css_built_22/8d665b42f598e908bc13a6d6f4307f5b_jstree.css?v=271316c1861698951923
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d; ips4_ipsTimezone=UTC; ips4_hasJS=true; _ga_D56BTQHPQW=GS1.1.1702043133.1.0.1702043133.60.0.0; _ga=GA1.1.1895731674.1702043134
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:27 GMT
content-type: image/gif
content-length: 1849
last-modified: Thu, 02 Nov 2023 19:05:35 GMT
vary: Accept-Encoding
etag: "6543f2ff-739"
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:27 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
powerad.ai/vid_script.js
17 kB IP
File type gzip compressed data, from Unix\012- data
Hash 78998ff0f6aae95d01041b57d3ab42ff
9f95161f3a294025a7c948565ef066f49109baca
7b72b1573de92661b2295ee912dff7edf012bb034d9f6281cfa8df886a2c5033
GET /vid_script.js HTTP/1.1
Host: powerad.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/
DNT: 1
Connection: keep-alive
Cookie: 12331dcr-g=1; 12593dcr-g=1; 12594dcr-g=1; 12595dcr-g=1; 12940dcr-g=1; 13127dcr-g=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:27 GMT
content-type: application/javascript; charset=UTF-8
x-powered-by: Express
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: *
accept-ranges: bytes
cache-control: public, max-age=259200
last-modified: Wed, 06 Dec 2023 22:27:38 GMT
etag: W/"10c21-18c413e6ae0"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
p.cpx.to/p/12967/px.js
4.4 kB IP
File type ASCII text, with very long lines (4396), with no line terminators
Hash 1342da8994494a4bc7643d7e32eb2c9e
3010b3ac7e4e1217fe506142dddcbb0db70420e1
6eafcdcd5d2c0862016a2e2dabef538f9c1f8e44a24a89d56c6b5ac89212fa04
GET /p/12967/px.js HTTP/1.1
Host: p.cpx.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:27 GMT
content-type: application/javascript; charset=UTF-8
content-length: 4396
cache-control: public, max-age=2419200
X-Firefox-Spdy: h2
hb.brainlyads.com/pbjs_wrapper.v1.0.js
200 OK 12 kB URL GET HTTP/2 hb.brainlyads.com/pbjs_wrapper.v1.0.js
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerGoDaddy.com, Inc.
Subjecthb.brainlyads.com
FingerprintC5:87:8D:6F:1C:6A:9A:6C:5F:08:60:74:73:6E:2D:97:57:AB:CD:AF
ValidityWed, 23 Nov 2022 17:16:33 GMT - Mon, 25 Dec 2023 17:16:33 GMT
File type gzip compressed data, from Unix\012- data
Hash e806af8e598b08203f6d53b0e69293b8
98fdea41b6df72b3f305dda42b08d53036d4f77c
381eba65fc89ffcf4dba5eb1b82671bb8e4e5c19b396eeb5dfda55e1a4a122f1
GET /pbjs_wrapper.v1.0.js HTTP/1.1
Host: hb.brainlyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rdr2mods.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Fri, 08 Dec 2023 13:45:26 GMT
content-type: application/javascript
last-modified: Wed, 15 Nov 2023 13:32:58 GMT
vary: Accept-Encoding
etag: W/"6554c88a-941b"
expires: Fri, 15 Dec 2023 13:45:26 GMT
cache-control: max-age=604800
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
www.rdr2mods.com/uploads/javascript_g17moderationtools/front_front_global.js?v=271316c1861701990551
4.1 kB URL www.rdr2mods.com/uploads/javascript_g17moderationtools/front_front_global.js?v=271316c1861701990551
IP
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type ASCII text, with very long lines (8065), with no line terminators
Hash 00b9003514fc62666aa0fe49df9bdf59
912e6ee65eee5c9c0c20f1deb79e7c0d17892f9d
b9a1cf1ff5fc59ab000bf72838377eb373b54a8b03829fa08fe94b10c4225c1d
GET /uploads/javascript_g17moderationtools/front_front_global.js?v=271316c1861701990551 HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 07 Dec 2023 19:05:25 GMT
vary: Accept-Encoding
etag: W/"65721775-1f81"
content-encoding: br
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:24 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.rdr2mods.com/uploads/javascript_g17mediaaddons/front_front_fixes-lazyloading.js?v=271316c1861701990551
3.6 kB URL www.rdr2mods.com/uploads/javascript_g17mediaaddons/front_front_fixes-lazyloading.js?v=271316c1861701990551
IP
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type ASCII text, with very long lines (6137), with no line terminators
Hash d1af08f654cd9f2d8942a9441144140c
0b317f541be9c5f2909218f2a6a2743d6ef4f31d
11f1a5ebd0062cf368369e7960140e1f8e76dd271778c7a3600e57e7ddf08460
GET /uploads/javascript_g17mediaaddons/front_front_fixes-lazyloading.js?v=271316c1861701990551 HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 07 Dec 2023 19:05:25 GMT
vary: Accept-Encoding
etag: W/"65721775-17f9"
content-encoding: br
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:24 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
a.ad.gt/api/v1/u/matches/251?url=https%3A%2F%2Fwww.rdr2mods.com%2Fdownloads%2Frdr2%2Fscripts%2F278-drag-npcs%2F&ref=
4.3 kB URL a.ad.gt/api/v1/u/matches/251?url=https%3A%2F%2Fwww.rdr2mods.com%2Fdownloads%2Frdr2%2Fscripts%2F278-drag-npcs%2F&ref=
IP
File type gzip compressed data, from Unix\012- data
Hash 5a81c2034aac751f8e0fe6162825167d
5c8dfdf5d73d6e24d2eb26fc1804a579aaf80f1e
5d39855ff657c1dff75488b2d2da91548213693b0598b2ee30c236f8f5c79521
GET /api/v1/u/matches/251?url=https%3A%2F%2Fwww.rdr2mods.com%2Fdownloads%2Frdr2%2Fscripts%2F278-drag-npcs%2F&ref= HTTP/1.1
Host: a.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:27 GMT
content-type: application/javascript
cross-origin-resource-policy: cross-origin
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
last-modified: Fri, 08 Dec 2023 13:45:27 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 832572ea0b2bb523-OSL
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 140 B URL POST HTTP/2 ib.adnxs.com/ut/v3/prebid
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerDigiCert Inc
Subject*.adnxs.com
Fingerprint30:E1:57:C8:5A:77:64:AE:54:99:08:F7:2B:B8:C7:F4:28:85:56:08
ValidityMon, 13 Feb 2023 00:00:00 GMT - Fri, 15 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash cb7d290e6b899c79c3cb2686705b7a38
9a56b7f08463bea5825e2fb12788860f6faa72d3
44201553c21c09c03eb9899af60e0540554b2134aebb2696f3bc0f4cc4d7af23
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 776
Origin: https://www.rdr2mods.com
DNT: 1
Connection: keep-alive
Referer: https://www.rdr2mods.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.23.4
date: Fri, 08 Dec 2023 13:45:27 GMT
content-type: application/json; charset=utf-8
content-length: 140
cache-control: no-store, no-cache, private
pragma: no-cache
expires: Sat, 15 Nov 2008 16:00:00 GMT
p3p: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
x-xss-protection: 0
access-control-allow-credentials: true
access-control-allow-origin: https://www.rdr2mods.com
accept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
an-x-request-uuid: 87ed46c4-bdb4-488e-9958-8b69e690ed83
x-proxy-origin: 91.90.42.154; 91.90.42.154; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
X-Firefox-Spdy: h2
pixel.zprk.io/v5/pixeljs/Hc6PdfQeAi.js?dne=1
2.8 kB URL pixel.zprk.io/v5/pixeljs/Hc6PdfQeAi.js?dne=1
IP
File type C source, ASCII text, with very long lines (2658)
Hash bf5da1c2137a9f95540c5c865952c04b
d07a569ff37d68467841990cad5d2a99e1a2e37d
8e521ebeb6ce59914c54f532b1577efd671f4b02bb3c331e01b4a7e79a02cfea
GET /v5/pixeljs/Hc6PdfQeAi.js?dne=1 HTTP/1.1
Host: pixel.zprk.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:27 GMT
content-type: text/plain;charset=UTF-8
content-length: 2753
access-control-allow-methods: POST, GET, DELETE, PUT
access-control-allow-credentials: true
access-control-max-age: 3600
access-control-allow-headers: Origin, Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-199721344-11&l=dataLayer&cx=c
69 kB URL www.googletagmanager.com/gtag/js?id=UA-199721344-11&l=dataLayer&cx=c
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (4179)
Hash ff1dc060dc8d06f36a67dc6c37282dc6
e2ec1e82d7880f4f0028939f7e268fc02cf93a19
e9dc73aae96cac0a47032e2311fc79838ca517ab6a81f541f1049e7bc12b90bf
GET /gtag/js?id=UA-199721344-11&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 08 Dec 2023 13:45:27 GMT
expires: Fri, 08 Dec 2023 13:45:27 GMT
cache-control: private, max-age=900
last-modified: Fri, 08 Dec 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 69017
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.rdr2mods.com/uploads/set_resources_22/db43835aadf862688f2728e003a65f36_32px.png
8.7 kB URL www.rdr2mods.com/uploads/set_resources_22/db43835aadf862688f2728e003a65f36_32px.png
IP
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type PNG image data, 320 x 96, 8-bit/color RGBA, non-interlaced\012- data
Hash 12bd95fb7d8a1a6119b3ca45fe76a278
1de9d3cc5a2821149ff74e514c55cd0cbaa78439
6785cd4eaf39b2ee525904ae65524af7d0639a831335a3188614fae50a6e0cdd
GET /uploads/set_resources_22/db43835aadf862688f2728e003a65f36_32px.png HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rdr2mods.com/uploads/css_built_22/8d665b42f598e908bc13a6d6f4307f5b_jstree.css?v=271316c1861698951923
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d; ips4_ipsTimezone=UTC; ips4_hasJS=true; _ga_D56BTQHPQW=GS1.1.1702043133.1.0.1702043133.60.0.0; _ga=GA1.1.1895731674.1702043134
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:27 GMT
content-type: image/png
content-length: 8740
last-modified: Thu, 02 Nov 2023 19:05:35 GMT
vary: Accept-Encoding
etag: "6543f2ff-2224"
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:27 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
onetag-sys.com/prebid-request
41 B URL onetag-sys.com/prebid-request
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c6a1847e6d7bb4295ecdae2664affb5d
b332217021c4a707f950ebc9294cda83cb2eb77f
663dab1310a7e64c3bdd7dfdc81b7fc9a28884d4ee290b96077c7b32bbe84707
POST /prebid-request HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1109
Origin: https://www.rdr2mods.com
DNT: 1
Connection: keep-alive
Referer: https://www.rdr2mods.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://www.rdr2mods.com
access-control-allow-headers: content-type, origin, referer, user-agent
access-control-allow-credentials: true
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
cache-control: no-transform, no-cache
content-type: application/json
content-encoding: gzip
content-length: 41
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2
ad-delivery.net/px.gif?ch=2
43 B URL ad-delivery.net/px.gif?ch=2
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /px.gif?ch=2 HTTP/1.1
Host: ad-delivery.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/
Origin: https://www.rdr2mods.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:27 GMT
content-type: image/gif
content-length: 43
x-guploader-uploadid: ABPtcPp0wgCF-V8nWRRFweDLkLlZ59B9_HaB5uMb_BoI2XEvFDluZgJZMS-L6RsjtVqwyDwhSyI
x-goog-generation: 1620242732037093
x-goog-metageneration: 5
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 43
x-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
expires: Thu, 23 Nov 2023 04:40:57 GMT
cache-control: public, max-age=86400
age: 1330408
last-modified: Wed, 05 May 2021 19:25:32 GMT
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3"
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Qt4qddDf2090mGiWohsw80DpVQNyQWJ3%2Bg44eJKMWnwMY4yLLrJJayWINQ0YMH7xAloirtNkwWPwusLDLC7HN%2BkL2v65BODd34SwNd3cKyZ7C6%2FjQTlsz%2FtBNlz8Y979Ow%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 832572ecfd997131-OSL
X-Firefox-Spdy: h2
report2.hb.brainlyads.com/statistics/metric?event=bidRequested&bidder=nextMillennium&source=pbjs&placements=34676
200 OK 463 B URL GET HTTP/1.1 report2.hb.brainlyads.com/statistics/metric?event=bidRequested&bidder=nextMillennium&source=pbjs&placements=34676
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerLet's Encrypt
Subjectreport2.hb.brainlyads.com
Fingerprint49:C4:17:F3:50:54:F3:02:00:08:F5:FB:EB:2F:F5:1A:0B:C1:56:A1
ValiditySun, 22 Oct 2023 07:00:10 GMT - Sat, 20 Jan 2024 07:00:09 GMT
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash d745dde2b6783f1186ce4c2e72e959a0
5c7b2c39ed7e5943f2e373f70a4b7db09ddf85fe
64faef43f59f0d829a290bb25e0b5c24308c0381b590d9717e460a8344912ba3
GET /statistics/metric?event=bidRequested&bidder=nextMillennium&source=pbjs&placements=34676 HTTP/1.1
Host: report2.hb.brainlyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rdr2mods.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 08 Dec 2023 13:45:27 GMT
Content-Type: image/png
Content-Length: 463
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
ETag: W/"1cf-XHssOe1+WUPy43P3Ckt9sJ3fhf4"
onetag-sys.com/prebid-request
41 B URL onetag-sys.com/prebid-request
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c6a1847e6d7bb4295ecdae2664affb5d
b332217021c4a707f950ebc9294cda83cb2eb77f
663dab1310a7e64c3bdd7dfdc81b7fc9a28884d4ee290b96077c7b32bbe84707
POST /prebid-request HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1108
Origin: https://www.rdr2mods.com
DNT: 1
Connection: keep-alive
Referer: https://www.rdr2mods.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://www.rdr2mods.com
access-control-allow-headers: content-type, origin, referer, user-agent
access-control-allow-credentials: true
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
cache-control: no-transform, no-cache
content-type: application/json
content-encoding: gzip
content-length: 41
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2
hb.brainlyads.com/json-parts/?unit_ids=19128&ver=2.0&pageId=1563079954
1.7 kB URL hb.brainlyads.com/json-parts/?unit_ids=19128&ver=2.0&pageId=1563079954
IP
Certificate IssuerGoDaddy.com, Inc.
Subjecthb.brainlyads.com
FingerprintC5:87:8D:6F:1C:6A:9A:6C:5F:08:60:74:73:6E:2D:97:57:AB:CD:AF
ValidityWed, 23 Nov 2022 17:16:33 GMT - Mon, 25 Dec 2023 17:16:33 GMT
File type gzip compressed data, from Unix\012- data
Hash 13283f8e950318f01d7255cf981476c0
58bc84197269b539135fdb95349002e718cf9340
08a33a14b2158eec636173761f5143640277177120ca2fe2d45309e9b63d8c1a
GET /json-parts/?unit_ids=19128&ver=2.0&pageId=1563079954 HTTP/1.1
Host: hb.brainlyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/
Origin: https://www.rdr2mods.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Fri, 08 Dec 2023 13:45:27 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-headers: *
etag: W/"e25-2X59o8GXZ201IVHfrbJb8rh7ZbM"
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
pbs.nextmillmedia.com/openrtb2/auction
200 OK 95 B URL POST HTTP/2 pbs.nextmillmedia.com/openrtb2/auction
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerAmazon
Subjectpbs.nextmillmedia.com
Fingerprint38:66:A2:05:00:00:65:02:1E:69:05:30:C2:08:16:6E:82:9D:52:20
ValidityTue, 13 Jun 2023 00:00:00 GMT - Fri, 12 Jul 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash a9c10a91f968f7fe45c29840d8b68daf
605b977843725611640ff716db0bb118ba857372
79cbdc5a85c698ebf4fac901ee3d5b1ae63ccc457b28304b2be41dabcd80165c
POST /openrtb2/auction HTTP/1.1
Host: pbs.nextmillmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 436
Origin: https://www.rdr2mods.com
DNT: 1
Connection: keep-alive
Referer: https://www.rdr2mods.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:27 GMT
content-type: application/json
content-length: 95
access-control-allow-credentials: true
access-control-allow-origin: https://www.rdr2mods.com
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
set-cookie: nmm-ss-cps-usr=1; Expires=Sat, 09 Dec 2023 13:45:27 GMT; Secure; SameSite=None
nmm-ss-cps-usr-exp="2023-12-09 13:45:27"; Expires=Sat, 09 Dec 2023 13:45:27 GMT; Secure; SameSite=None
vary: Origin
x-prebid: pbs-go/unknown
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 140 B URL POST HTTP/2 ib.adnxs.com/ut/v3/prebid
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerDigiCert Inc
Subject*.adnxs.com
Fingerprint30:E1:57:C8:5A:77:64:AE:54:99:08:F7:2B:B8:C7:F4:28:85:56:08
ValidityMon, 13 Feb 2023 00:00:00 GMT - Fri, 15 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 3008f5184f190e137ff4397309d53ace
2a2bd7ded6fe1263acfb8818a4b638655dbe2c85
5aeed2effe72e6b4b4befb131dd6d7f16f4439d96d9889b861f25483b806c74d
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 776
Origin: https://www.rdr2mods.com
DNT: 1
Connection: keep-alive
Referer: https://www.rdr2mods.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.23.4
date: Fri, 08 Dec 2023 13:45:28 GMT
content-type: application/json; charset=utf-8
content-length: 140
cache-control: no-store, no-cache, private
pragma: no-cache
expires: Sat, 15 Nov 2008 16:00:00 GMT
p3p: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
x-xss-protection: 0
access-control-allow-credentials: true
access-control-allow-origin: https://www.rdr2mods.com
accept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
an-x-request-uuid: 559e8ca0-49a2-4dfb-9d69-b7cec8e59516
x-proxy-origin: 91.90.42.154; 91.90.42.154; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-V4ME33TP3B&l=dataLayer&cx=c
200 OK 81 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-V4ME33TP3B&l=dataLayer&cx=c
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (5955)
Hash a1d9c2d87d4538308d41e5a8707e0262
f633f7beff9fdff6fd936b667692d91b7c588ebc
4abb59684c6f85f336134cc7b4ac51d5e26a448ebaa1b943ebbf8c5fbdcb16e6
GET /gtag/js?id=G-V4ME33TP3B&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 08 Dec 2023 13:45:28 GMT
expires: Fri, 08 Dec 2023 13:45:28 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 81216
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
pbs.nextmillmedia.com/openrtb2/auction
200 OK 96 B URL POST HTTP/2 pbs.nextmillmedia.com/openrtb2/auction
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerAmazon
Subjectpbs.nextmillmedia.com
Fingerprint38:66:A2:05:00:00:65:02:1E:69:05:30:C2:08:16:6E:82:9D:52:20
ValidityTue, 13 Jun 2023 00:00:00 GMT - Fri, 12 Jul 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash 5d8df575a9499328e9a28184c8debe10
7ae6da1caa66214a723445945fd9b83cae630f66
2349b9ed4598bbbea77a1c290ab6968c409792ec22f58f2883e0898b5b4a5c69
POST /openrtb2/auction HTTP/1.1
Host: pbs.nextmillmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 437
Origin: https://www.rdr2mods.com
DNT: 1
Connection: keep-alive
Referer: https://www.rdr2mods.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:28 GMT
content-type: application/json
content-length: 96
access-control-allow-credentials: true
access-control-allow-origin: https://www.rdr2mods.com
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
set-cookie: nmm-ss-cps-usr=1; Expires=Sat, 09 Dec 2023 13:45:27 GMT; Secure; SameSite=None
nmm-ss-cps-usr-exp="2023-12-09 13:45:27"; Expires=Sat, 09 Dec 2023 13:45:27 GMT; Secure; SameSite=None
vary: Origin
x-prebid: pbs-go/unknown
X-Firefox-Spdy: h2
onetag-sys.com/prebid-request
41 B URL onetag-sys.com/prebid-request
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c6a1847e6d7bb4295ecdae2664affb5d
b332217021c4a707f950ebc9294cda83cb2eb77f
663dab1310a7e64c3bdd7dfdc81b7fc9a28884d4ee290b96077c7b32bbe84707
POST /prebid-request HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1121
Origin: https://www.rdr2mods.com
DNT: 1
Connection: keep-alive
Referer: https://www.rdr2mods.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.rdr2mods.com
access-control-allow-headers: content-type, origin, referer, user-agent
access-control-allow-credentials: true
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
cache-control: no-transform, no-cache
content-type: application/json
content-encoding: gzip
content-length: 41
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2
report2.hb.brainlyads.com/statistics/metric?event=bidRequested&bidder=nextMillennium&source=pbjs&placements=37659
463 B URL report2.hb.brainlyads.com/statistics/metric?event=bidRequested&bidder=nextMillennium&source=pbjs&placements=37659
IP
Certificate IssuerLet's Encrypt
Subjectreport2.hb.brainlyads.com
Fingerprint49:C4:17:F3:50:54:F3:02:00:08:F5:FB:EB:2F:F5:1A:0B:C1:56:A1
ValiditySun, 22 Oct 2023 07:00:10 GMT - Sat, 20 Jan 2024 07:00:09 GMT
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash d745dde2b6783f1186ce4c2e72e959a0
5c7b2c39ed7e5943f2e373f70a4b7db09ddf85fe
64faef43f59f0d829a290bb25e0b5c24308c0381b590d9717e460a8344912ba3
GET /statistics/metric?event=bidRequested&bidder=nextMillennium&source=pbjs&placements=37659 HTTP/1.1
Host: report2.hb.brainlyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rdr2mods.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 08 Dec 2023 13:45:28 GMT
Content-Type: image/png
Content-Length: 463
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
ETag: W/"1cf-XHssOe1+WUPy43P3Ckt9sJ3fhf4"
pbs.nextmillmedia.com/openrtb2/auction
200 OK 96 B URL POST HTTP/2 pbs.nextmillmedia.com/openrtb2/auction
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerAmazon
Subjectpbs.nextmillmedia.com
Fingerprint38:66:A2:05:00:00:65:02:1E:69:05:30:C2:08:16:6E:82:9D:52:20
ValidityTue, 13 Jun 2023 00:00:00 GMT - Fri, 12 Jul 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash db9c1437e157fee2281f627ddef600ce
755030516ff1a2ed93469feaef62546551f280f9
b3bed986a0d17f56dc3787ad4241e7077d397e098bbd42d0379853b71f4d471d
POST /openrtb2/auction HTTP/1.1
Host: pbs.nextmillmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 450
Origin: https://www.rdr2mods.com
DNT: 1
Connection: keep-alive
Referer: https://www.rdr2mods.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:28 GMT
content-type: application/json
content-length: 96
access-control-allow-credentials: true
access-control-allow-origin: https://www.rdr2mods.com
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
set-cookie: nmm-ss-cps-usr=1; Expires=Sat, 09 Dec 2023 13:45:28 GMT; Secure; SameSite=None
nmm-ss-cps-usr-exp="2023-12-09 13:45:28"; Expires=Sat, 09 Dec 2023 13:45:28 GMT; Secure; SameSite=None
vary: Origin
x-prebid: pbs-go/unknown
X-Firefox-Spdy: h2
report2.hb.brainlyads.com/statistics/metric?event=noBid&bidder=nextMillennium&source=pbjs&placements=34676
463 B URL report2.hb.brainlyads.com/statistics/metric?event=noBid&bidder=nextMillennium&source=pbjs&placements=34676
IP
Certificate IssuerLet's Encrypt
Subjectreport2.hb.brainlyads.com
Fingerprint49:C4:17:F3:50:54:F3:02:00:08:F5:FB:EB:2F:F5:1A:0B:C1:56:A1
ValiditySun, 22 Oct 2023 07:00:10 GMT - Sat, 20 Jan 2024 07:00:09 GMT
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash d745dde2b6783f1186ce4c2e72e959a0
5c7b2c39ed7e5943f2e373f70a4b7db09ddf85fe
64faef43f59f0d829a290bb25e0b5c24308c0381b590d9717e460a8344912ba3
GET /statistics/metric?event=noBid&bidder=nextMillennium&source=pbjs&placements=34676 HTTP/1.1
Host: report2.hb.brainlyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rdr2mods.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 08 Dec 2023 13:45:28 GMT
Content-Type: image/png
Content-Length: 463
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
ETag: W/"1cf-XHssOe1+WUPy43P3Ckt9sJ3fhf4"
report2.hb.brainlyads.com/statistics/metric?event=noBid&bidder=nextMillennium&source=pbjs&placements=34676
463 B URL report2.hb.brainlyads.com/statistics/metric?event=noBid&bidder=nextMillennium&source=pbjs&placements=34676
IP
Certificate IssuerLet's Encrypt
Subjectreport2.hb.brainlyads.com
Fingerprint49:C4:17:F3:50:54:F3:02:00:08:F5:FB:EB:2F:F5:1A:0B:C1:56:A1
ValiditySun, 22 Oct 2023 07:00:10 GMT - Sat, 20 Jan 2024 07:00:09 GMT
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash d745dde2b6783f1186ce4c2e72e959a0
5c7b2c39ed7e5943f2e373f70a4b7db09ddf85fe
64faef43f59f0d829a290bb25e0b5c24308c0381b590d9717e460a8344912ba3
GET /statistics/metric?event=noBid&bidder=nextMillennium&source=pbjs&placements=34676 HTTP/1.1
Host: report2.hb.brainlyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rdr2mods.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 08 Dec 2023 13:45:28 GMT
Content-Type: image/png
Content-Length: 463
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
ETag: W/"1cf-XHssOe1+WUPy43P3Ckt9sJ3fhf4"
cadmus.script.ac/d1oykxszdrgjgl/script.js
47 kB URL cadmus.script.ac/d1oykxszdrgjgl/script.js
IP
File type gzip compressed data, from Unix\012- data
Hash 95309327f869b8a91ed6f717058e02db
ef921636f6d1f1d6f994ea759d4a532e46b480d2
ddec191dc28c71e762bc1cc123e917117ad767353e1b074967bcffb547b2dfa8
GET /d1oykxszdrgjgl/script.js HTTP/1.1
Host: cadmus.script.ac
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:28 GMT
content-type: application/javascript
age: 0
cache-control: public,max-age=600,stale-while-revalidate=3600,stale-if-error=86400
etag: W/"706872f8f33e0985935520b8aafaeb608b44b83f"
last-modified: Fri, 08 Dec 2023 13:18:20 GMT
set-cookie: __cf_bm=Myrmh7uNK7vfwO_W2.jOSFV.ag4KUgr6q5crOA1Zphw-1702043128-0-AV2XNO2XVt/C3+oeljA7JuqTQJbWOkyHK82tzhcYy/9mi8WmTwbldP0x6GvknZ8ZVgJuobXg7y/WrI/AVDp3D0c=; path=/; expires=Fri, 08-Dec-23 14:15:28 GMT; domain=.script.ac; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 832572ef082056a5-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
report2.hb.brainlyads.com/statistics/metric?event=noBid&bidder=nextMillennium&source=pbjs&placements=37659
463 B URL report2.hb.brainlyads.com/statistics/metric?event=noBid&bidder=nextMillennium&source=pbjs&placements=37659
IP
Certificate IssuerLet's Encrypt
Subjectreport2.hb.brainlyads.com
Fingerprint49:C4:17:F3:50:54:F3:02:00:08:F5:FB:EB:2F:F5:1A:0B:C1:56:A1
ValiditySun, 22 Oct 2023 07:00:10 GMT - Sat, 20 Jan 2024 07:00:09 GMT
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash d745dde2b6783f1186ce4c2e72e959a0
5c7b2c39ed7e5943f2e373f70a4b7db09ddf85fe
64faef43f59f0d829a290bb25e0b5c24308c0381b590d9717e460a8344912ba3
GET /statistics/metric?event=noBid&bidder=nextMillennium&source=pbjs&placements=37659 HTTP/1.1
Host: report2.hb.brainlyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rdr2mods.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 08 Dec 2023 13:45:28 GMT
Content-Type: image/png
Content-Length: 463
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
ETag: W/"1cf-XHssOe1+WUPy43P3Ckt9sJ3fhf4"
cdn.edkt.io/rNn9xk/edgekit.min.js
7.9 kB URL cdn.edkt.io/rNn9xk/edgekit.min.js
IP
File type ASCII text, with very long lines (23823)
Hash ccf76785f6275829a8e7237378704523
d88711286a161b9d533a4c53789c0cdbf0bb3cf4
aa3cce2453459a2951817b1df92703d9a606b8a9ac3e1b7c6a0d246695cd73f8
GET /rNn9xk/edgekit.min.js HTTP/1.1
Host: cdn.edkt.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/
Origin: https://www.rdr2mods.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-guploader-uploadid: ABPtcPp3qslwskEPOdOnXLkKbaL8CHj1GozTzxO3YFCqbqbtxlni_NhLC6uGcDTcczXYLZpgSHlPAFhmg7wmOZr2GCkUwiyVmMX5
x-goog-generation: 1701789411481975
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 7874
content-encoding: gzip
x-goog-hash: crc32c=Wit+rQ==, md5=1G+ogal2rFioTx6FPAEXUQ==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 7874
server: UploadServer
date: Thu, 07 Dec 2023 23:25:09 GMT
expires: Fri, 08 Dec 2023 23:25:09 GMT
cache-control: public, max-age=86400,no-transform
age: 51619
last-modified: Tue, 05 Dec 2023 15:16:51 GMT
etag: "d46fa881a976ac58a84f1e853c011751"
content-type: text/javascript
access-control-allow-origin: *
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.clean.gg/1a
0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /1a HTTP/1.1
Host: i.clean.gg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.rdr2mods.com/
Origin: https://www.rdr2mods.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.21.6
date: Fri, 08 Dec 2023 13:45:28 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Origin,Accept,X-API-Key
access-control-max-age: 1728000
content-type: text/plain; charset=utf-8
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.clean.gg/1a
0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /1a HTTP/1.1
Host: i.clean.gg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/
Content-Type: application/json
Content-Length: 543
Origin: https://www.rdr2mods.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.6
date: Fri, 08 Dec 2023 13:45:28 GMT
content-type: application/octet-stream
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Origin,Accept,X-API-Key
access-control-expose-headers: Content-Length,Content-Range
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
reporting.powerad.ai/
2 B IP
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST / HTTP/1.1
Host: reporting.powerad.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 134
Origin: https://www.rdr2mods.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Fri, 08 Dec 2023 13:45:29 GMT
content-type: text/plain; charset=utf-8
content-length: 2
x-powered-by: Express
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
X-Firefox-Spdy: h2
report2.hb.brainlyads.com/statistics
0 B URL report2.hb.brainlyads.com/statistics
IP
Certificate IssuerLet's Encrypt
Subjectreport2.hb.brainlyads.com
Fingerprint49:C4:17:F3:50:54:F3:02:00:08:F5:FB:EB:2F:F5:1A:0B:C1:56:A1
ValiditySun, 22 Oct 2023 07:00:10 GMT - Sat, 20 Jan 2024 07:00:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /statistics HTTP/1.1
Host: report2.hb.brainlyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-nm-host,x-nm-url
Referer: https://www.rdr2mods.com/
Origin: https://www.rdr2mods.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 08 Dec 2023 13:45:30 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
report2.hb.brainlyads.com/statistics
0 B URL report2.hb.brainlyads.com/statistics
IP
Certificate IssuerLet's Encrypt
Subjectreport2.hb.brainlyads.com
Fingerprint49:C4:17:F3:50:54:F3:02:00:08:F5:FB:EB:2F:F5:1A:0B:C1:56:A1
ValiditySun, 22 Oct 2023 07:00:10 GMT - Sat, 20 Jan 2024 07:00:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /statistics HTTP/1.1
Host: report2.hb.brainlyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-nm-host,x-nm-url
Referer: https://www.rdr2mods.com/
Origin: https://www.rdr2mods.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 08 Dec 2023 13:45:30 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
report2.hb.brainlyads.com/statistics
0 B URL report2.hb.brainlyads.com/statistics
IP
Certificate IssuerLet's Encrypt
Subjectreport2.hb.brainlyads.com
Fingerprint49:C4:17:F3:50:54:F3:02:00:08:F5:FB:EB:2F:F5:1A:0B:C1:56:A1
ValiditySun, 22 Oct 2023 07:00:10 GMT - Sat, 20 Jan 2024 07:00:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /statistics HTTP/1.1
Host: report2.hb.brainlyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-nm-host: www.rdr2mods.com
x-nm-url: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Content-Type: application/json
Content-Length: 3995
Origin: https://www.rdr2mods.com
DNT: 1
Connection: keep-alive
Referer: https://www.rdr2mods.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 08 Dec 2023 13:45:30 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
report2.hb.brainlyads.com/statistics
0 B URL report2.hb.brainlyads.com/statistics
IP
Certificate IssuerLet's Encrypt
Subjectreport2.hb.brainlyads.com
Fingerprint49:C4:17:F3:50:54:F3:02:00:08:F5:FB:EB:2F:F5:1A:0B:C1:56:A1
ValiditySun, 22 Oct 2023 07:00:10 GMT - Sat, 20 Jan 2024 07:00:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /statistics HTTP/1.1
Host: report2.hb.brainlyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-nm-host: www.rdr2mods.com
x-nm-url: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Content-Type: application/json
Content-Length: 3785
Origin: https://www.rdr2mods.com
DNT: 1
Connection: keep-alive
Referer: https://www.rdr2mods.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 08 Dec 2023 13:45:30 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
powerad.ai/141031441621950/script.js
48 kB URL powerad.ai/141031441621950/script.js
IP
File type ASCII text, with very long lines (56651)
Hash bcabfa7dc00ddcb854f5f070414d983e
7e0fefa6bd37de3d297fcd6397e14ed8b5e372a9
732de73c2543a512a8796cfafac34bc1ce713f5888dcde1d96c7c3c6836f2a31
GET /141031441621950/script.js HTTP/1.1
Host: powerad.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:25 GMT
content-type: application/javascript; charset=UTF-8
x-powered-by: Express
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: *
accept-ranges: bytes
cache-control: public, max-age=172800
last-modified: Wed, 06 Dec 2023 22:32:32 GMT
etag: W/"34b79-18c4142e54a"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
report2.hb.brainlyads.com/statistics
0 B URL report2.hb.brainlyads.com/statistics
IP
Certificate IssuerLet's Encrypt
Subjectreport2.hb.brainlyads.com
Fingerprint49:C4:17:F3:50:54:F3:02:00:08:F5:FB:EB:2F:F5:1A:0B:C1:56:A1
ValiditySun, 22 Oct 2023 07:00:10 GMT - Sat, 20 Jan 2024 07:00:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /statistics HTTP/1.1
Host: report2.hb.brainlyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-nm-host: www.rdr2mods.com
x-nm-url: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Content-Type: application/json
Content-Length: 3785
Origin: https://www.rdr2mods.com
DNT: 1
Connection: keep-alive
Referer: https://www.rdr2mods.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 08 Dec 2023 13:45:30 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
onetag-sys.com/usync/?cb=1702043134576
204 No Content 0 B URL GET HTTP/2 onetag-sys.com/usync/?cb=1702043134576
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerDigiCert Inc
Subject*.onetag-sys.com
Fingerprint1B:3E:A7:6D:D6:26:C6:9E:AB:38:DE:9E:22:71:64:8C:9F:91:0B:7B
ValidityWed, 28 Dec 2022 00:00:00 GMT - Sun, 28 Jan 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/?cb=1702043134576 HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rdr2mods.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: no-store
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2
onetag-sys.com/usync/?cb=1702043134689
204 No Content 0 B URL GET HTTP/2 onetag-sys.com/usync/?cb=1702043134689
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerDigiCert Inc
Subject*.onetag-sys.com
Fingerprint1B:3E:A7:6D:D6:26:C6:9E:AB:38:DE:9E:22:71:64:8C:9F:91:0B:7B
ValidityWed, 28 Dec 2022 00:00:00 GMT - Sun, 28 Jan 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/?cb=1702043134689 HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rdr2mods.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: no-store
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2
onetag-sys.com/usync/?cb=1702043134848
0 B URL onetag-sys.com/usync/?cb=1702043134848
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/?cb=1702043134848 HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rdr2mods.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: no-store
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2
hb.vntsm.com/v3/live/ad-manager.min.js
307 kB URL hb.vntsm.com/v3/live/ad-manager.min.js
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with very long lines (65464)
Size 307 kB (307393 bytes)
Hash 738833588ea2b548648d2f1d261c3f68
58e3739f15e556dfad56555e68f13f7dbf7de8e7
44af42af016375d05345717d41682353db26290f95ae35f08d96e01fe092ecae
GET /v3/live/ad-manager.min.js HTTP/1.1
Host: hb.vntsm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 131999
cdn-uid: 5d6cd18c-1b61-4922-947b-91a6b9ea7b00
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: cdn-requestcountrycode,Content-Type,x-bl,ref_url
access-control-expose-headers: x-geo-subdivision,X-Geo,cdn-requestcountrycode,Content-Type,x-bl
access-control-allow-methods: GET, OPTIONS
cache-control: public, max-age=86400
etag: W/"738833588ea2b548648d2f1d261c3f68"
last-modified: Mon, 04 Dec 2023 14:09:52 GMT
x-amz-server-side-encryption: AES256
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 12/08/2023 12:36:04
cdn-edgestorageid: 830
x-bl: 0
cdn-status: 200
cdn-requestid: 9dd68df93c271e7323f4d8ecc1890492
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
cookies.nextmillmedia.com/sync?type=iframe
200 OK 3.0 kB URL GET HTTP/2 cookies.nextmillmedia.com/sync?type=iframe
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerAmazon
Subjectcookies.nextmillmedia.com
Fingerprint01:8E:4A:16:C7:C3:B6:97:4E:36:AC:D6:42:3C:07:30:FB:79:87:D6
ValidityTue, 13 Jun 2023 00:00:00 GMT - Thu, 11 Jul 2024 23:59:59 GMT
Hash cc896b79c5300b0a7b1486c03ff5b33a
f3b7a4cbd9efe949fd557424b887f9ae205d2882
cbb470390431a28455afefcded54718a12e0c0acfe31b79e1562f31d94d3cf1f
GET /sync?type=iframe HTTP/1.1
Host: cookies.nextmillmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rdr2mods.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:31 GMT
content-type: text/html
content-length: 2981
server: fasthttp
set-cookie: NMUID=csuid_ecebd39b-0719-4001-93c0-db71df317bae; max-age=604800; secure; SameSite=None
X-Firefox-Spdy: h2
cookies.nextmillmedia.com/sync?type=iframe
200 OK 3.0 kB URL GET HTTP/2 cookies.nextmillmedia.com/sync?type=iframe
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerAmazon
Subjectcookies.nextmillmedia.com
Fingerprint01:8E:4A:16:C7:C3:B6:97:4E:36:AC:D6:42:3C:07:30:FB:79:87:D6
ValidityTue, 13 Jun 2023 00:00:00 GMT - Thu, 11 Jul 2024 23:59:59 GMT
Hash cc896b79c5300b0a7b1486c03ff5b33a
f3b7a4cbd9efe949fd557424b887f9ae205d2882
cbb470390431a28455afefcded54718a12e0c0acfe31b79e1562f31d94d3cf1f
GET /sync?type=iframe HTTP/1.1
Host: cookies.nextmillmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rdr2mods.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:31 GMT
content-type: text/html
content-length: 2981
server: fasthttp
set-cookie: NMUID=csuid_492f0687-9ae0-4a3d-9943-5b3b24313a9c; max-age=604800; secure; SameSite=None
X-Firefox-Spdy: h2
hb.vntsm.com/ab/live/3pcookie/cookieTest.html
946 B URL hb.vntsm.com/ab/live/3pcookie/cookieTest.html
IP
ASN #34989 ServeTheWorld AS
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash d80b9831e6e7896aa97e84d70f49e545
99ddfe768d6f8a3ae4cca3b7ac900301856926f0
5963155991ef6cccaa5ccde93b269c06161b4e36b2784be6028b78c954a3c569
GET /ab/live/3pcookie/cookieTest.html HTTP/1.1
Host: hb.vntsm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:27 GMT
content-type: text/html
vary: Accept-Encoding
server: BunnyCDN-NO1-830
cdn-pullzone: 131999
cdn-uid: 5d6cd18c-1b61-4922-947b-91a6b9ea7b00
cdn-requestcountrycode: NO
access-control-allow-headers: cdn-requestcountrycode,Content-Type,x-bl,ref_url
access-control-allow-methods: GET, OPTIONS
access-control-expose-headers: x-geo-subdivision,X-Geo,cdn-requestcountrycode,Content-Type,x-bl
cache-control: public, max-age=86400
etag: W/"d80b9831e6e7896aa97e84d70f49e545"
last-modified: Sun, 10 Sep 2023 14:04:21 GMT
x-amz-server-side-encryption: AES256
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 12/08/2023 12:36:05
cdn-edgestorageid: 830
x-bl: 0
cdn-status: 200
cdn-requestid: 4b780b0fa28c6699679b3153b7a54e15
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
csync.loopme.me/?pubid=11364&gdpr=&gdpr_consent=&redirect=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Dloopme%26nmuid%3D%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26uid%3D%7Bviewer_token%7D
504 Gateway Timeout 0 B URL GET HTTP/2 csync.loopme.me/?pubid=11364&gdpr=&gdpr_consent=&redirect=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Dloopme%26nmuid%3D%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26uid%3D%7Bviewer_token%7D
IP
Requested by https://cookies.nextmillmedia.com/sync?type=iframe
Certificate IssuerLet's Encrypt
Subjectloopme.com
Fingerprint77:99:BE:EA:5C:8C:85:0A:5B:66:0F:82:32:40:90:1F:F6:9B:42:3E
ValidityTue, 07 Nov 2023 12:01:13 GMT - Mon, 05 Feb 2024 12:01:12 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?pubid=11364&gdpr=&gdpr_consent=&redirect=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Dloopme%26nmuid%3D%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26uid%3D%7Bviewer_token%7D HTTP/1.1
Host: csync.loopme.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cookies.nextmillmedia.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 307 Temporary Redirect
set-cookie: viewer_token=6736ac86-792d-4726-88bc-c7a2ea8d6ed3; path=/; domain=csync.loopme.me; secure; HttpOnly; Expires=Fri, 08-Mar-2024 13:45:32 GMT; SameSite=None
location: https://cookies.nextmillmedia.com/setuid?bidder=loopme&nmuid=&gdpr=&gdpr_consent=&us_privacy=&uid=6736ac86-792d-4726-88bc-c7a2ea8d6ed3&gdpr_consent=null&gdpr=null
content-length: 0
date: Fri, 08 Dec 2023 13:45:32 GMT
server: _
X-Firefox-Spdy: h2
prebid.a-mo.net/cchain/0?gdpr=&gdpr_consent=&us_privacy=&gpp={{.GPP}}&gpp_sid={{.GPPSID}}&s=pbs&cb=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Damx%26nmuid%3D%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26uid%3D%24UID
302 Found 0 B URL GET HTTP/2 prebid.a-mo.net/cchain/0?gdpr=&gdpr_consent=&us_privacy=&gpp={{.GPP}}&gpp_sid={{.GPPSID}}&s=pbs&cb=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Damx%26nmuid%3D%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26uid%3D%24UID
IP
Requested by https://cookies.nextmillmedia.com/sync?type=iframe
Certificate IssuerLet's Encrypt
Subject*.a-mo.net
Fingerprint5C:1B:DB:42:AD:A4:54:7C:87:D6:3F:1A:B6:29:AF:0C:7F:A6:14:FE
ValidityTue, 07 Nov 2023 13:48:39 GMT - Mon, 05 Feb 2024 13:48:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cchain/0?gdpr=&gdpr_consent=&us_privacy=&gpp={{.GPP}}&gpp_sid={{.GPPSID}}&s=pbs&cb=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Damx%26nmuid%3D%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26uid%3D%24UID HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cookies.nextmillmedia.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: max-age=0, private, must-revalidate
content-length: 0
date: Fri, 08 Dec 2023 13:45:31 GMT
location: https://cookies.nextmillmedia.com/setuid?bidder=amx&nmuid=&gdpr=&gdpr_consent=&us_privacy=&uid=&gpp_sid=%7B%7B.GPPSID%7D%7D&gpp=%7B%7B.GPP%7D%7D
server: envoy
set-cookie: _Amc_b=0; path=/; expires=Fri, 08 Dec 2023 13:50:32 GMT; max-age=300; secure; HttpOnly; SameSite=None
x-envoy-upstream-service-time: 0
X-Firefox-Spdy: h2
prebid.a-mo.net/cchain/0?gdpr=&gdpr_consent=&us_privacy=&gpp={{.GPP}}&gpp_sid={{.GPPSID}}&s=pbs&cb=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Damx%26nmuid%3D%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26uid%3D%24UID
302 Found 0 B URL GET HTTP/2 prebid.a-mo.net/cchain/0?gdpr=&gdpr_consent=&us_privacy=&gpp={{.GPP}}&gpp_sid={{.GPPSID}}&s=pbs&cb=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Damx%26nmuid%3D%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26uid%3D%24UID
IP
Requested by https://cookies.nextmillmedia.com/sync?type=iframe
Certificate IssuerLet's Encrypt
Subject*.a-mo.net
Fingerprint5C:1B:DB:42:AD:A4:54:7C:87:D6:3F:1A:B6:29:AF:0C:7F:A6:14:FE
ValidityTue, 07 Nov 2023 13:48:39 GMT - Mon, 05 Feb 2024 13:48:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cchain/0?gdpr=&gdpr_consent=&us_privacy=&gpp={{.GPP}}&gpp_sid={{.GPPSID}}&s=pbs&cb=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Damx%26nmuid%3D%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26uid%3D%24UID HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cookies.nextmillmedia.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: max-age=0, private, must-revalidate
content-length: 0
date: Fri, 08 Dec 2023 13:45:31 GMT
location: https://cookies.nextmillmedia.com/setuid?bidder=amx&nmuid=&gdpr=&gdpr_consent=&us_privacy=&uid=&gpp_sid=%7B%7B.GPPSID%7D%7D&gpp=%7B%7B.GPP%7D%7D
server: envoy
set-cookie: _Amc_b=0; path=/; expires=Fri, 08 Dec 2023 13:50:32 GMT; max-age=300; secure; HttpOnly; SameSite=None
x-envoy-upstream-service-time: 0
X-Firefox-Spdy: h2
prebid.a-mo.net/cchain/0?gdpr=&gdpr_consent=&us_privacy=&gpp={{.GPP}}&gpp_sid={{.GPPSID}}&s=pbs&cb=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Damx%26nmuid%3D%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26uid%3D%24UID
302 Found 0 B URL GET HTTP/2 prebid.a-mo.net/cchain/0?gdpr=&gdpr_consent=&us_privacy=&gpp={{.GPP}}&gpp_sid={{.GPPSID}}&s=pbs&cb=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Damx%26nmuid%3D%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26uid%3D%24UID
IP
Requested by https://cookies.nextmillmedia.com/sync?type=iframe
Certificate IssuerLet's Encrypt
Subject*.a-mo.net
Fingerprint5C:1B:DB:42:AD:A4:54:7C:87:D6:3F:1A:B6:29:AF:0C:7F:A6:14:FE
ValidityTue, 07 Nov 2023 13:48:39 GMT - Mon, 05 Feb 2024 13:48:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cchain/0?gdpr=&gdpr_consent=&us_privacy=&gpp={{.GPP}}&gpp_sid={{.GPPSID}}&s=pbs&cb=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Damx%26nmuid%3D%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26uid%3D%24UID HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cookies.nextmillmedia.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: max-age=0, private, must-revalidate
content-length: 0
date: Fri, 08 Dec 2023 13:45:31 GMT
location: https://cookies.nextmillmedia.com/setuid?bidder=amx&nmuid=&gdpr=&gdpr_consent=&us_privacy=&uid=&gpp_sid=%7B%7B.GPPSID%7D%7D&gpp=%7B%7B.GPP%7D%7D
server: envoy
set-cookie: _Amc_b=0; path=/; expires=Fri, 08 Dec 2023 13:50:32 GMT; max-age=300; secure; HttpOnly; SameSite=None
x-envoy-upstream-service-time: 0
X-Firefox-Spdy: h2
cookies.nextmillmedia.com/setuid?bidder=loopme&nmuid=&gdpr=&gdpr_consent=&us_privacy=&uid=6736ac86-792d-4726-88bc-c7a2ea8d6ed3&gdpr_consent=null&gdpr=null
0 B URL cookies.nextmillmedia.com/setuid?bidder=loopme&nmuid=&gdpr=&gdpr_consent=&us_privacy=&uid=6736ac86-792d-4726-88bc-c7a2ea8d6ed3&gdpr_consent=null&gdpr=null
IP
Certificate IssuerAmazon
Subjectcookies.nextmillmedia.com
Fingerprint01:8E:4A:16:C7:C3:B6:97:4E:36:AC:D6:42:3C:07:30:FB:79:87:D6
ValidityTue, 13 Jun 2023 00:00:00 GMT - Thu, 11 Jul 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /setuid?bidder=loopme&nmuid=&gdpr=&gdpr_consent=&us_privacy=&uid=6736ac86-792d-4726-88bc-c7a2ea8d6ed3&gdpr_consent=null&gdpr=null HTTP/1.1
Host: cookies.nextmillmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cookies.nextmillmedia.com/
DNT: 1
Connection: keep-alive
Cookie: NMUID=csuid_492f0687-9ae0-4a3d-9943-5b3b24313a9c
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Fri, 08 Dec 2023 13:45:32 GMT
content-length: 0
location: https://pbs.nextmillmedia.com/setuid?bidder=loopme&uid=6736ac86-792d-4726-88bc-c7a2ea8d6ed3
server: fasthttp
set-cookie: syncedBidders={"loopme":1}; max-age=604800; secure; SameSite=None
X-Firefox-Spdy: h2
cookies.nextmillmedia.com/setuid?bidder=amx&nmuid=&gdpr=&gdpr_consent=&us_privacy=&uid=&gpp_sid=%7B%7B.GPPSID%7D%7D&gpp=%7B%7B.GPP%7D%7D
204 No Content 0 B URL GET HTTP/2 cookies.nextmillmedia.com/setuid?bidder=amx&nmuid=&gdpr=&gdpr_consent=&us_privacy=&uid=&gpp_sid=%7B%7B.GPPSID%7D%7D&gpp=%7B%7B.GPP%7D%7D
IP
Requested by https://cookies.nextmillmedia.com/sync?type=iframe
Certificate IssuerAmazon
Subjectcookies.nextmillmedia.com
Fingerprint01:8E:4A:16:C7:C3:B6:97:4E:36:AC:D6:42:3C:07:30:FB:79:87:D6
ValidityTue, 13 Jun 2023 00:00:00 GMT - Thu, 11 Jul 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /setuid?bidder=amx&nmuid=&gdpr=&gdpr_consent=&us_privacy=&uid=&gpp_sid=%7B%7B.GPPSID%7D%7D&gpp=%7B%7B.GPP%7D%7D HTTP/1.1
Host: cookies.nextmillmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cookies.nextmillmedia.com/
DNT: 1
Connection: keep-alive
Cookie: NMUID=csuid_492f0687-9ae0-4a3d-9943-5b3b24313a9c
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Fri, 08 Dec 2023 13:45:32 GMT
server: fasthttp
X-Firefox-Spdy: h2
cookies.nextmillmedia.com/setuid?bidder=amx&nmuid=&gdpr=&gdpr_consent=&us_privacy=&uid=&gpp_sid=%7B%7B.GPPSID%7D%7D&gpp=%7B%7B.GPP%7D%7D
204 No Content 0 B URL GET HTTP/2 cookies.nextmillmedia.com/setuid?bidder=amx&nmuid=&gdpr=&gdpr_consent=&us_privacy=&uid=&gpp_sid=%7B%7B.GPPSID%7D%7D&gpp=%7B%7B.GPP%7D%7D
IP
Requested by https://cookies.nextmillmedia.com/sync?type=iframe
Certificate IssuerAmazon
Subjectcookies.nextmillmedia.com
Fingerprint01:8E:4A:16:C7:C3:B6:97:4E:36:AC:D6:42:3C:07:30:FB:79:87:D6
ValidityTue, 13 Jun 2023 00:00:00 GMT - Thu, 11 Jul 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /setuid?bidder=amx&nmuid=&gdpr=&gdpr_consent=&us_privacy=&uid=&gpp_sid=%7B%7B.GPPSID%7D%7D&gpp=%7B%7B.GPP%7D%7D HTTP/1.1
Host: cookies.nextmillmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cookies.nextmillmedia.com/
DNT: 1
Connection: keep-alive
Cookie: NMUID=csuid_492f0687-9ae0-4a3d-9943-5b3b24313a9c
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Fri, 08 Dec 2023 13:45:32 GMT
server: fasthttp
X-Firefox-Spdy: h2
cookies.nextmillmedia.com/setuid?bidder=amx&nmuid=&gdpr=&gdpr_consent=&us_privacy=&uid=&gpp_sid=%7B%7B.GPPSID%7D%7D&gpp=%7B%7B.GPP%7D%7D
204 No Content 0 B URL GET HTTP/2 cookies.nextmillmedia.com/setuid?bidder=amx&nmuid=&gdpr=&gdpr_consent=&us_privacy=&uid=&gpp_sid=%7B%7B.GPPSID%7D%7D&gpp=%7B%7B.GPP%7D%7D
IP
Requested by https://cookies.nextmillmedia.com/sync?type=iframe
Certificate IssuerAmazon
Subjectcookies.nextmillmedia.com
Fingerprint01:8E:4A:16:C7:C3:B6:97:4E:36:AC:D6:42:3C:07:30:FB:79:87:D6
ValidityTue, 13 Jun 2023 00:00:00 GMT - Thu, 11 Jul 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /setuid?bidder=amx&nmuid=&gdpr=&gdpr_consent=&us_privacy=&uid=&gpp_sid=%7B%7B.GPPSID%7D%7D&gpp=%7B%7B.GPP%7D%7D HTTP/1.1
Host: cookies.nextmillmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cookies.nextmillmedia.com/
DNT: 1
Connection: keep-alive
Cookie: NMUID=csuid_492f0687-9ae0-4a3d-9943-5b3b24313a9c
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Fri, 08 Dec 2023 13:45:32 GMT
server: fasthttp
X-Firefox-Spdy: h2
pbs.nextmillmedia.com/setuid?bidder=loopme&uid=6736ac86-792d-4726-88bc-c7a2ea8d6ed3
86 B URL pbs.nextmillmedia.com/setuid?bidder=loopme&uid=6736ac86-792d-4726-88bc-c7a2ea8d6ed3
IP
Certificate IssuerAmazon
Subjectpbs.nextmillmedia.com
Fingerprint38:66:A2:05:00:00:65:02:1E:69:05:30:C2:08:16:6E:82:9D:52:20
ValidityTue, 13 Jun 2023 00:00:00 GMT - Fri, 12 Jul 2024 23:59:59 GMT
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 6c6641b08f4be6f479f1588af08054b3
8da28b3146834c48fd843b108749191516d2a65d
c2ecff291918a3caf0b7e470323e89f2a1f05b92e12a10649e598cacebe62acf
GET /setuid?bidder=loopme&uid=6736ac86-792d-4726-88bc-c7a2ea8d6ed3 HTTP/1.1
Host: pbs.nextmillmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cookies.nextmillmedia.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:32 GMT
content-type: image/png
content-length: 86
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
set-cookie: uids=eyJ0ZW1wVUlEcyI6eyJsb29wbWUiOnsidWlkIjoiNjczNmFjODYtNzkyZC00NzI2LTg4YmMtYzdhMmVhOGQ2ZWQzIiwiZXhwaXJlcyI6IjIwMjMtMTItMjJUMTM6NDU6MzIuNDc0MzY2MzM5WiJ9fX0=; Path=/; Expires=Thu, 07 Mar 2024 13:45:32 GMT
vary: Origin
X-Firefox-Spdy: h2
csync.loopme.me/?pubid=11364&gdpr=&gdpr_consent=&redirect=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Dloopme%26nmuid%3D%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26uid%3D%7Bviewer_token%7D
504 Gateway Timeout 24 B URL GET HTTP/2 csync.loopme.me/?pubid=11364&gdpr=&gdpr_consent=&redirect=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Dloopme%26nmuid%3D%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26uid%3D%7Bviewer_token%7D
IP
Requested by https://cookies.nextmillmedia.com/sync?type=iframe
Certificate IssuerLet's Encrypt
Subjectloopme.com
Fingerprint77:99:BE:EA:5C:8C:85:0A:5B:66:0F:82:32:40:90:1F:F6:9B:42:3E
ValidityTue, 07 Nov 2023 12:01:13 GMT - Mon, 05 Feb 2024 12:01:12 GMT
File type ASCII text, with no line terminators
Hash 09f71efbed1212b64851b5a8032ec26f
ec10db2bd5556dfc406f32ad9df9944d11b14233
89f2d4e6c7a6c41c13c2e7a75e526aa60b9d5274fe28b2d82801c6beb6beb879
GET /?pubid=11364&gdpr=&gdpr_consent=&redirect=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Dloopme%26nmuid%3D%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26uid%3D%7Bviewer_token%7D HTTP/1.1
Host: csync.loopme.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cookies.nextmillmedia.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 504 Gateway Timeout
content-length: 24
content-type: text/plain
date: Fri, 08 Dec 2023 13:45:32 GMT
server: _
X-Firefox-Spdy: h2
csync.loopme.me/?pubid=11364&gdpr=&gdpr_consent=&redirect=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Dloopme%26nmuid%3D%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26uid%3D%7Bviewer_token%7D
504 Gateway Timeout 24 B URL GET HTTP/2 csync.loopme.me/?pubid=11364&gdpr=&gdpr_consent=&redirect=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Dloopme%26nmuid%3D%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26uid%3D%7Bviewer_token%7D
IP
Requested by https://cookies.nextmillmedia.com/sync?type=iframe
Certificate IssuerLet's Encrypt
Subjectloopme.com
Fingerprint77:99:BE:EA:5C:8C:85:0A:5B:66:0F:82:32:40:90:1F:F6:9B:42:3E
ValidityTue, 07 Nov 2023 12:01:13 GMT - Mon, 05 Feb 2024 12:01:12 GMT
File type ASCII text, with no line terminators
Hash 09f71efbed1212b64851b5a8032ec26f
ec10db2bd5556dfc406f32ad9df9944d11b14233
89f2d4e6c7a6c41c13c2e7a75e526aa60b9d5274fe28b2d82801c6beb6beb879
GET /?pubid=11364&gdpr=&gdpr_consent=&redirect=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Dloopme%26nmuid%3D%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26uid%3D%7Bviewer_token%7D HTTP/1.1
Host: csync.loopme.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cookies.nextmillmedia.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 504 Gateway Timeout
content-length: 24
content-type: text/plain
date: Fri, 08 Dec 2023 13:45:32 GMT
server: _
X-Firefox-Spdy: h2
script.4dex.io/localstore.js
268 B URL script.4dex.io/localstore.js
IP
File type ASCII text, with very long lines (482)
Hash 922cffdd75f7192f75231d92684885aa
48ae21017844de388e0a32206a2691fa4c109669
e8fe64429e5900c16c7f8dd7861704e2f4d38e00cbb16bc18820b46d92461389
GET /localstore.js HTTP/1.1
Host: script.4dex.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 08 Dec 2023 13:45:38 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=1800
ETag: W/"922cffdd75f7192f75231d92684885aa"
Last-Modified: Mon, 27 Nov 2023 07:14:08 GMT
Vary: Accept-Encoding
CF-Cache-Status: HIT
Age: 970156
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qcNZJrN1BzyaZ0zHZlCAZ60RHbgCY0%2F%2FMhxAlTgBvmTVUIDLLir00kAOrd3nBRBDll02pgAxSO4HOZVb0BOTeKrUQdvXJ%2BA1L6dWSp8RtQNxV4uuV0M%2FBkox9Wndb1t%2B"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8325732f58c056a4-OSL
Content-Encoding: br
prebid.a-mo.net/a/c
0 B IP
Certificate IssuerLet's Encrypt
Subject*.a-mo.net
Fingerprint5C:1B:DB:42:AD:A4:54:7C:87:D6:3F:1A:B6:29:AF:0C:7F:A6:14:FE
ValidityTue, 07 Nov 2023 13:48:39 GMT - Mon, 05 Feb 2024 13:48:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/
Content-Type: text/plain
Content-Length: 1184
Origin: https://www.rdr2mods.com
DNT: 1
Connection: keep-alive
Cookie: _Amc_b=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://www.rdr2mods.com
cache-control: max-age=0, private, must-revalidate
date: Fri, 08 Dec 2023 13:45:38 GMT
server: envoy
vary: origin, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 0
X-Firefox-Spdy: h2
script.4dex.io/adagio.js
24 kB IP
File type ASCII text, with very long lines (65354)
Hash 6faf3acfde3bb82adada71be4fc1deb0
20f08498f821936592273d8f755d94f31c9b9c7a
26305a08644b4f51b55812cf0ecf879c22da303a365b3d2769baa1b54c028c4d
GET /adagio.js HTTP/1.1
Host: script.4dex.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/
Origin: https://www.rdr2mods.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 08 Dec 2023 13:45:38 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=1800
ETag: W/"6faf3acfde3bb82adada71be4fc1deb0"
Last-Modified: Mon, 27 Nov 2023 07:14:07 GMT
Vary: Origin, Accept-Encoding
Access-Control-Expose-Headers:
CF-Cache-Status: HIT
Age: 962333
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zx3XZdzN6xZ7wSIBCwPW8kXZD8QdhNlnkA13JS5uua14%2BUy7lWXqBdZTRWHEjxVywq%2BomHp7QiTL0Nlty4dUobmnCvBWFz6ud142H9uTrLUIUTC6pmYUaV4gYJxUzjPW"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 832573308c15b4f3-OSL
Content-Encoding: br
ib.adnxs-simple.com/ut/v3/prebid
137 B URL ib.adnxs-simple.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 4b2300616edd32bb4db1b91982470b25
eed086a8c6529ba5126b9ae5890a9729f3a132f3
90b7df8f9cc01722e0bc2c74b01f9eddbebe697c8f9615baa8e3afac48904244
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs-simple.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/
Content-Type: text/plain
Content-Length: 978
Origin: https://www.rdr2mods.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.23.4
date: Fri, 08 Dec 2023 13:45:38 GMT
content-type: application/json; charset=utf-8
content-length: 137
cache-control: no-store, no-cache, private
pragma: no-cache
expires: Sat, 15 Nov 2008 16:00:00 GMT
p3p: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
x-xss-protection: 0
access-control-allow-credentials: true
access-control-allow-origin: https://www.rdr2mods.com
accept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
an-x-request-uuid: cfbe8d5e-8777-4e95-b304-79bf68a9a14a
x-proxy-origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs-simple.com
X-Firefox-Spdy: h2
www.rdr2mods.com/uploads/page_objects/countdown.js.126bc31425a0c0a91c2bd058dc6866b8.js?v=271316c1861701990551
200 OK 28 kB URL GET HTTP/2 www.rdr2mods.com/uploads/page_objects/countdown.js.126bc31425a0c0a91c2bd058dc6866b8.js?v=271316c1861701990551
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
Hash 32ba99d2c67d43df15002eb2f911015f
d3048134cd3ee347009d01c6aaee53c1d0b7b1f8
f3eeffefe3e221388e337f1a551f883b25a293518c00cd4c886ebcb13ec1895d
GET /uploads/page_objects/countdown.js.126bc31425a0c0a91c2bd058dc6866b8.js?v=271316c1861701990551 HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 12 Oct 2023 18:04:48 GMT
vary: Accept-Encoding
etag: W/"65283540-6f5d"
content-encoding: br
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:24 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.rdr2mods.com/uploads/page_objects/quantcastchoice.js.3e24c227937ae824d7be40f3e342ac1c.js
200 OK 4.2 kB URL GET HTTP/2 www.rdr2mods.com/uploads/page_objects/quantcastchoice.js.3e24c227937ae824d7be40f3e342ac1c.js
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type ASCII text, with very long lines (4386), with no line terminators
Hash 18c62dce781ab93bb2618ca976e4973c
d401506492ce8f93d37cf4026f24dc96a0a46a22
5c7f9f4d45983fdefce73353b2173a80542df215bede610ba4878f9b2ce65552
GET /uploads/page_objects/quantcastchoice.js.3e24c227937ae824d7be40f3e342ac1c.js HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 12 Oct 2023 18:04:48 GMT
vary: Accept-Encoding
etag: W/"65283540-107d"
content-encoding: br
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:24 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.rdr2mods.com/uploads/page_objects/countdownipsshim.js.f6f0273502f9cd335064bac2ac35efe7.js?v=271316c1861701990551
200 OK 1.5 kB URL GET HTTP/2 www.rdr2mods.com/uploads/page_objects/countdownipsshim.js.f6f0273502f9cd335064bac2ac35efe7.js?v=271316c1861701990551
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type ASCII text, with very long lines (1580), with no line terminators
Hash 723341271ef3453c736bd00f529426e2
a5232ff7e903e1bdc96a37f377dd0d9efc2e94e0
44f3a1bd528befa094960f3e24183f707c18fa5851027d4c9e75eb346fd08194
GET /uploads/page_objects/countdownipsshim.js.f6f0273502f9cd335064bac2ac35efe7.js?v=271316c1861701990551 HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 12 Oct 2023 18:04:48 GMT
vary: Accept-Encoding
etag: W/"65283540-5f8"
content-encoding: br
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:24 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
200 OK 184 kB URL User Request GET HTTP/2 www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
IP
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
Size 184 kB (184066 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /downloads/rdr2/scripts/278-drag-npcs/ HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
vary: Cookie
x-frame-options: sameorigin
content-security-policy: frame-ancestors 'self'
x-ips-loggedin: 0
x-content-security-policy: frame-ancestors 'self'
referrer-policy: strict-origin-when-cross-origin
date: Fri, 08 Dec 2023 13:45:24 GMT
last-modified: Fri, 08 Dec 2023 13:38:12 GMT
cache-control: no-cache="Set-Cookie", max-age=600, public, s-max-age=600, stale-while-revalidate, stale-if-error
x-xss-protection: 0
expires: Fri, 08 Dec 2023 13:55:24 GMT
server: shortflare-fe
alt-svc: h3=":443"; ma=86400
content-encoding: br
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-D56BTQHPQW>m=45je3bt0v885606320&_p=1702043131072&_gaz=1&gcs=G1--&gcd=11l1l1l1l5&dma_cps=sypham&dma=1&tcfd=1000l&cid=1895731674.1702043134&ul=en-us&sr=1280x1024&_eu=AAAI&_s=1&sid=1702043133&sct=1&seg=0&dl=https%3A%2F%2Fwww.rdr2mods.com%2Fdownloads%2Frdr2%2Fscripts%2F278-drag-npcs%2F&dt=Drag%20NPC%27s%20-%20Scripts%20-%20RDR2Mods.com&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=4188
204 No Content 0 B URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-D56BTQHPQW>m=45je3bt0v885606320&_p=1702043131072&_gaz=1&gcs=G1--&gcd=11l1l1l1l5&dma_cps=sypham&dma=1&tcfd=1000l&cid=1895731674.1702043134&ul=en-us&sr=1280x1024&_eu=AAAI&_s=1&sid=1702043133&sct=1&seg=0&dl=https%3A%2F%2Fwww.rdr2mods.com%2Fdownloads%2Frdr2%2Fscripts%2F278-drag-npcs%2F&dt=Drag%20NPC%27s%20-%20Scripts%20-%20RDR2Mods.com&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=4188
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-D56BTQHPQW>m=45je3bt0v885606320&_p=1702043131072&_gaz=1&gcs=G1--&gcd=11l1l1l1l5&dma_cps=sypham&dma=1&tcfd=1000l&cid=1895731674.1702043134&ul=en-us&sr=1280x1024&_eu=AAAI&_s=1&sid=1702043133&sct=1&seg=0&dl=https%3A%2F%2Fwww.rdr2mods.com%2Fdownloads%2Frdr2%2Fscripts%2F278-drag-npcs%2F&dt=Drag%20NPC%27s%20-%20Scripts%20-%20RDR2Mods.com&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=4188 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/
Origin: https://www.rdr2mods.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.rdr2mods.com
date: Fri, 08 Dec 2023 13:45:27 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.rdr2mods.com/uploads/javascript_downloadsng/front_front_global.js?v=271316c1861701990551
200 OK 57 kB URL GET HTTP/2 www.rdr2mods.com/uploads/javascript_downloadsng/front_front_global.js?v=271316c1861701990551
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type ASCII text, with very long lines (37501)
Hash c2ef38cfee14fc8cd7ed195931d4f9e6
7898317b0841561133c1fd864f514510379f3ed4
26758710ccc2885b503ea2b0a910bae02dbf3edf58f3f0ae1ae28b500fc0c1d3
GET /uploads/javascript_downloadsng/front_front_global.js?v=271316c1861701990551 HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 07 Dec 2023 19:05:28 GMT
vary: Accept-Encoding
etag: W/"65721778-def7"
content-encoding: br
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:24 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.rdr2mods.com/uploads/page_objects/externalLinkWarning.js.bc78d188444726286e980dd136644370.js?v=271316c1861701990551
200 OK 3.5 kB URL GET HTTP/2 www.rdr2mods.com/uploads/page_objects/externalLinkWarning.js.bc78d188444726286e980dd136644370.js?v=271316c1861701990551
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type ASCII text, with very long lines (3697), with no line terminators
Hash a7c748f5ed2d83ac131d858ddff1b620
6e5ee49cd65010323104ea54f6b46cacb385b7fb
9001f5f0a91f846d5a69dbb2954d5c870322402eed14c7f39c593edc8a86b0e4
GET /uploads/page_objects/externalLinkWarning.js.bc78d188444726286e980dd136644370.js?v=271316c1861701990551 HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 12 Oct 2023 18:04:48 GMT
vary: Accept-Encoding
etag: W/"65283540-dca"
content-encoding: br
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:24 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.rdr2mods.com/uploads/javascript_downloadsng/front_front_view.js?v=271316c1861701990551
200 OK 272 kB URL GET HTTP/2 www.rdr2mods.com/uploads/javascript_downloadsng/front_front_view.js?v=271316c1861701990551
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type ASCII text, with very long lines (5953)
Size 272 kB (272435 bytes)
Hash 41a64b65dab15cda185cc0ff03c9c3b8
c3bc9f276b0f8155045f1bf3f3dc46b2de07ab62
58709cf518d30bd5dec3bd4a30051c67cbf1c5af4c3cc5c6f354e930981ba245
GET /uploads/javascript_downloadsng/front_front_view.js?v=271316c1861701990551 HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 07 Dec 2023 19:05:31 GMT
vary: Accept-Encoding
etag: W/"6572177b-42833"
content-encoding: br
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:24 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
hb.brainlyads.com/pbjs_wrapper.js
200 OK 21 kB URL GET HTTP/2 hb.brainlyads.com/pbjs_wrapper.js
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerGoDaddy.com, Inc.
Subjecthb.brainlyads.com
FingerprintC5:87:8D:6F:1C:6A:9A:6C:5F:08:60:74:73:6E:2D:97:57:AB:CD:AF
ValidityWed, 23 Nov 2022 17:16:33 GMT - Mon, 25 Dec 2023 17:16:33 GMT
File type ASCII text, with very long lines (482)C source, ASCII text, with very long lines (21009)
Hash 3f26b3e0e22bd770b750110ba34a935f
16f435e4174c45b5de10afe84c7490837a2087a1
f793cd49159635b65151c2e0c8c3cb1495ada7a9b2c66d1395b60ff20e106107
GET /pbjs_wrapper.js HTTP/1.1
Host: hb.brainlyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rdr2mods.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Fri, 08 Dec 2023 13:45:26 GMT
content-type: application/javascript
last-modified: Wed, 15 Nov 2023 13:32:58 GMT
vary: Accept-Encoding
etag: W/"6554c88a-5212"
expires: Fri, 15 Dec 2023 13:45:26 GMT
cache-control: max-age=604800
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
hb.brainlyads.com/pbjs_wrapper.v2.0.js
200 OK 51 kB URL GET HTTP/2 hb.brainlyads.com/pbjs_wrapper.v2.0.js
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerGoDaddy.com, Inc.
Subjecthb.brainlyads.com
FingerprintC5:87:8D:6F:1C:6A:9A:6C:5F:08:60:74:73:6E:2D:97:57:AB:CD:AF
ValidityWed, 23 Nov 2022 17:16:33 GMT - Mon, 25 Dec 2023 17:16:33 GMT
File type ASCII text, with very long lines (50828), with no line terminators
Hash 543364ee3239127314957ce8f24a36f3
7424793f910afa87f3a51c66e659c48fdda20179
b1c0b908eda2fbab9b94572c2b8bca8f49d948c90a2e315de72afa9bf0e793a8
GET /pbjs_wrapper.v2.0.js HTTP/1.1
Host: hb.brainlyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rdr2mods.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Fri, 08 Dec 2023 13:45:26 GMT
content-type: application/javascript
last-modified: Wed, 15 Nov 2023 13:29:23 GMT
vary: Accept-Encoding
etag: W/"6554c7b3-c68c"
expires: Fri, 15 Dec 2023 13:45:26 GMT
cache-control: max-age=604800
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
www.rdr2mods.com/uploads/javascript_core/front_front_core.js?v=271316c1861701990551
200 OK 38 kB URL GET HTTP/2 www.rdr2mods.com/uploads/javascript_core/front_front_core.js?v=271316c1861701990551
IP
Requested by https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
Certificate IssuerLet's Encrypt
Subject*.lcpdfr.com
Fingerprint79:CE:39:8D:D6:4D:06:C8:F5:F2:48:EB:11:A7:2A:96:7A:1D:53:F1
ValidityFri, 10 Nov 2023 03:05:52 GMT - Thu, 08 Feb 2024 03:05:51 GMT
File type ASCII text, with very long lines (1968)
Hash 58de74e4d9f153f3fe9caffcca74b9ae
d2486b6daeaaed6afa25787e0336f2d3fa1ffda1
8630c0923da6afe8a75f877d5ea5987e9ad623d0d3c28a7473ea8a4c41aecefa
GET /uploads/javascript_core/front_front_core.js?v=271316c1861701990551 HTTP/1.1
Host: www.rdr2mods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rdr2mods.com/downloads/rdr2/scripts/278-drag-npcs/
DNT: 1
Connection: keep-alive
Cookie: Shortflare_Sec=3ac313e4d4867e554a5149cc37e10947; ips4_IPSSessionFront=1b67a041fabbd5ed8cca62f8903e9f7d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 13:45:24 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 07 Dec 2023 19:05:25 GMT
vary: Accept-Encoding
etag: W/"65721775-9371"
content-encoding: br
server: shortflare-fe
expires: Sat, 09 Dec 2023 13:45:24 GMT
cache-control: max-age=86400
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
198.251.90.186
185.89.210.212
194.242.11.186
104.22.46.142
34.248.215.174
145.40.97.67
51.89.9.252
0.0.0.0