| lda.submittrk.com/?aff_id=1339&c_id=U2FsdGVkX19jt8mjO5v6eI7MqTUmybnONOGL1MIXjjVizPA59f67 |  34.78.252.25 | 301 Moved Permanently | 169 B |
URL HTTP/1.1lda.submittrk.com/?aff_id=1339&c_id=U2FsdGVkX19jt8mjO5v6eI7MqTUmybnONOGL1MIXjjVizPA59f67 IP34.78.252.25:0
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash2b00de2b3dcaa8469dea097e4a5e5fb7 60c9f0151048886bf3824837aa2ee87056a26d3f bcb5bbd5fc8e7e699c411f46f7f79b186445c6cad7e5e559bc4a39f67551c030
GET /?aff_id=1339&c_id=U2FsdGVkX19jt8mjO5v6eI7MqTUmybnONOGL1MIXjjVizPA59f67 HTTP/1.1
Host: lda.submittrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx/1.19.0
Date: Fri, 25 Nov 2022 12:24:02 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://lda.submittrk.com:443/?aff_id=1339&c_id=U2FsdGVkX19jt8mjO5v6eI7MqTUmybnONOGL1MIXjjVizPA59f67
|
|
| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash7c60904d097cde276e4e5632cef1b9f1 4f805026462589345d85e8df2d18eafba6237504 12af026999398f4976749e320667d43da3f99b7a2e8254aca7a410a964a106aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "12AF026999398F4976749E320667D43DA3F99B7A2E8254ACA7A410A964A106AA"
Last-Modified: Thu, 24 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3170
Expires: Fri, 25 Nov 2022 13:16:52 GMT
Date: Fri, 25 Nov 2022 12:24:02 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash10730f388c028d64e19b8a48d414768f e43b104e57e5ea7ff8568835776858cf2ede6f00 f3c30c6d139288f1bfe13fce85c6ddc1514e1639fcf4d31a6012a3309ed1d50d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5680
Cache-Control: max-age=171712
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 12:24:02 GMT
Etag: "63809972-1d7"
Expires: Sun, 27 Nov 2022 12:05:54 GMT
Last-Modified: Fri, 25 Nov 2022 10:31:14 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
|
|
| firefox.settings.services.mozilla.com/v1/ |  34.102.187.140 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash4d7e4eed097b9c4e5d509419f1cfc85a 290bb3d428a7c6330e2e3d73a952b16f820896c8 0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 25 Nov 2022 12:19:06 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 296
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash8c63b226725ca6e92e3ef586ac19e603 d21ae42a1927501e5293ff3564f52b49f6b0decc 141ac47acc3800e5d35a82012fa4b044277abad3a95dc24415f66fb72c972ae6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "141AC47ACC3800E5D35A82012FA4B044277ABAD3A95DC24415F66FB72C972AE6"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5028
Expires: Fri, 25 Nov 2022 13:47:50 GMT
Date: Fri, 25 Nov 2022 12:24:02 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash9ebddc2b260d081ebbefee47c037cb28 492bad62a7ca6a74738921ef5ae6f0be5edebf39 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: larp3dxMV6MzEiRKlZ4eHNw3BHMI44a+svBhZJPogZgP1atigAHq6/Cxr/CFyRKdkRLbA92b5iY=
x-amz-request-id: 36XJTH7YFCFD5TYP
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 25 Nov 2022 11:43:49 GMT
age: 2413
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashbf22081365b6941717b70f5cae7e970d a107f6aec8ccee6603e59644c1e0c32d58e9274d fbc8ce74014c762fb1df5a975a5b825e97e87c7def3c74a2542163a5123039b6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FBC8CE74014C762FB1DF5A975A5B825E97E87C7DEF3C74A2542163A5123039B6"
Last-Modified: Thu, 24 Nov 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1007
Expires: Fri, 25 Nov 2022 12:40:49 GMT
Date: Fri, 25 Nov 2022 12:24:02 GMT
Connection: keep-alive
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 12:24:02 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| lda.submittrk.com/?aff_id=1339&c_id=U2FsdGVkX19jt8mjO5v6eI7MqTUmybnONOGL1MIXjjVizPA59f67 | 34.78.252.25 | 302 Found | 366 B |
URL HTTP/1.1lda.submittrk.com/?aff_id=1339&c_id=U2FsdGVkX19jt8mjO5v6eI7MqTUmybnONOGL1MIXjjVizPA59f67 IP34.78.252.25:0
File typeHTML document, ASCII text, with very long lines (1232), with no line terminators Hash52f0eb5481444c0faccd9ae91ea97c49 30bc726b49a6a233285daea2f6876ad1d1cf3176 332b2fa68e8708cc2d5cd8836561e111561a930e20825e786154ab49366215c1
GET /?aff_id=1339&c_id=U2FsdGVkX19jt8mjO5v6eI7MqTUmybnONOGL1MIXjjVizPA59f67 HTTP/1.1
Host: lda.submittrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Server: nginx/1.19.0
Date: Fri, 25 Nov 2022 12:24:02 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE, PATCH
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Authorization, Content-Type
Location: https://iga.nectarjunkie.com/cp/iga/au/index.html?pre=0&p_id=6266aa3a12eef6080491b6cf&_c_id=aff_code:LDA;request_id:f02422c3193ae7d7ae880c58a3d374de;aff_tid:;aff_goal_id:9531;aff_goal_id2:9532;aff_id:1339;aff_version:no_teaser;aff_adv_id:2;aff_offer_id:1953;aff_inc:iga&_c_user=ld_first_name:;ld_last_name:;ld_email:;ld_phone_cell:&_c_loc=ld_zip_code:;ld_city:&_c_dob=ld_dob:&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=dp&aff_ttp=&ch=&request_id=f02422c3193ae7d7ae880c58a3d374de&aff_id=1339
Vary: Accept, Accept-Encoding
Set-Cookie: hexa.sid=s%3Ao6NeYuex4fOgPwPQ3utCRPKwLmTt0euX.4iLR6d8OzT5Zb3ptGalGqVAwECWKOajlZWkZOCJhvoQ; Path=/; HttpOnly; Secure
Content-Encoding: gzip
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hasheb0e06d11d295610dc0f27f04331e5a8 1d251388b9653e7b7329737a44c5e72c6e16911b ae415296d6b0f10e8653ebcf2271885e3c80b95456d64ff6e1acf0cefd3c3ab0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=164566
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 12:24:03 GMT
Etag: "638093b9-117"
Expires: Sun, 27 Nov 2022 10:06:49 GMT
Last-Modified: Fri, 25 Nov 2022 10:06:49 GMT
Server: nginx
Content-Length: 279
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hasheb0e06d11d295610dc0f27f04331e5a8 1d251388b9653e7b7329737a44c5e72c6e16911b ae415296d6b0f10e8653ebcf2271885e3c80b95456d64ff6e1acf0cefd3c3ab0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: max-age=164566
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 12:24:03 GMT
Etag: "638093b9-117"
Expires: Sun, 27 Nov 2022 10:06:49 GMT
Last-Modified: Fri, 25 Nov 2022 10:06:49 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 279
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashe62367fb5e0af824dd1d11cd8497b3fe 4760db938f2a518eea468ca7e92a87971e663761 3264556e5fe1bc7885248a574915ee05845659b5f0517e7e2ee740206dd051ad
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6413
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 12:24:03 GMT
Last-Modified: Fri, 25 Nov 2022 10:37:10 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
|
|
| cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css |  151.101.85.229 | 200 OK | 24 kB |
URL HTTP/2cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css IP151.101.85.229:0
File typeUnicode text, UTF-8 text, with very long lines (65306) Hash57a992194d8a5b4bbd4ade561fd348bb bb66f00fe168c6df50af51abdededdfceb15c59f be95ec6ab71f5fa87401a698cb9566490258fa9012bb0e8467920b0f74163a0a
GET /npm/bootstrap@5.1.3/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://iga.nectarjunkie.com
Connection: keep-alive
Referer: https://iga.nectarjunkie.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.1.3
x-jsd-version-type: version
etag: W/"28021-7Ba9Gb9K6bwuIzasQJpQO7varK0"
content-encoding: gzip
accept-ranges: bytes
date: Fri, 25 Nov 2022 12:24:03 GMT
age: 18181198
x-served-by: cache-fra19136-FRA, cache-bma1624-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 23938
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js | 151.101.85.229 | 200 OK | 23 kB |
URL HTTP/2cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js IP151.101.85.229:0
File typeASCII text, with very long lines (65299) Hash1753c16688d0d51f0b3dc7ed7d4dbc4d 6a4842b3dc99394c6584c203175570ff8737c777 a61044d56003744699349a1ffbd6f85e0c62d4ac59b50d185363dd85d755b5c9
GET /npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://iga.nectarjunkie.com
Connection: keep-alive
Referer: https://iga.nectarjunkie.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.1.3
x-jsd-version-type: version
etag: W/"13131-qF5oFiTJGhBqUUwx6s+A3oF7LMM"
content-encoding: gzip
accept-ranges: bytes
date: Fri, 25 Nov 2022 12:24:03 GMT
age: 7748576
x-served-by: cache-fra19170-FRA, cache-bma1624-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 23046
X-Firefox-Spdy: h2
|
|
| ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1 |  104.18.20.226 | 200 OK | 1.5 kB |
URL HTTP/1.1ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1 IP104.18.20.226:0
Hash048aa41aeb88a6dd2769f0a0af7f6f65 f8ea06ac1113b4356f752a127a756490fc76a6d2 3de04d4603bb3e71f99a8f563a6320bc5753807487bcb5853a7cdf00f7a23597
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 12:24:03 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "1AD0429C312DD724862F14C33CDA87F29C426E26"
Expires: Fri, 25 Nov 2022 23:00:00 GMT
Last-Modified: Fri, 25 Nov 2022 11:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 1333
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76fa5bed1a69b503-OSL
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 34.102.187.140 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 25 Nov 2022 12:11:11 GMT
cache-control: public,max-age=3600
age: 772
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash407212adfee816365b8fa858c7700fd9 be562cad8e4cba90ca87cda6adbedbd7652e2daf 63a9c82ded17f2f7f3ea8adb52b640ec94f86543159c90b15f1fee4030dc8e09
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "63A9C82DED17F2F7F3EA8ADB52B640EC94F86543159C90B15F1FEE4030DC8E09"
Last-Modified: Thu, 24 Nov 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8667
Expires: Fri, 25 Nov 2022 14:48:30 GMT
Date: Fri, 25 Nov 2022 12:24:03 GMT
Connection: keep-alive
|
|
| content2020.qubiqlabs.com/cp/_assets/css/footer.css | 34.78.252.25 | 200 OK | 1.7 kB |
URL HTTP/1.1content2020.qubiqlabs.com/cp/_assets/css/footer.css IP34.78.252.25:0
Hashb8c24be466dd044ddc136be9e2ea477e d05d66fee34a02d193d045ce48493b438d16a271 998ed2817e3c070e9f2d53a3cdaed41f6d12f3101ac63d6d6a561edb075bc52c
GET /cp/_assets/css/footer.css HTTP/1.1
Host: content2020.qubiqlabs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iga.nectarjunkie.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Fri, 25 Nov 2022 12:24:03 GMT
Content-Type: text/css
Content-Length: 1652
Connection: keep-alive
Last-Modified: Fri, 25 Nov 2022 08:14:13 GMT
ETag: "63807955-674"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 2.0 kB |
IP93.184.220.29:0
Hashaa124a9234005198445809ba61494c66 6ccb8637e6827de47c14a3cf324fd68113589661 a426f3c16ba9fdaf10f5546f0bd0bbc1b45e8b5cc854dcc7f1e66649ca2ac694
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2344
Cache-Control: max-age=163312
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 12:24:03 GMT
Etag: "638085ab-1d7"
Expires: Sun, 27 Nov 2022 09:45:55 GMT
Last-Modified: Fri, 25 Nov 2022 09:06:51 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash8508b5aa22877df6a1f7f3235c847258 b0104fdb727086aef07548dbd574dccadf7ce619 04eba681e814e47198be2f992c6fea4f95238b43b5318ae2908a6e97fa95b328
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "04EBA681E814E47198BE2F992C6FEA4F95238B43B5318AE2908A6E97FA95B328"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19712
Expires: Fri, 25 Nov 2022 17:52:35 GMT
Date: Fri, 25 Nov 2022 12:24:03 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash8508b5aa22877df6a1f7f3235c847258 b0104fdb727086aef07548dbd574dccadf7ce619 04eba681e814e47198be2f992c6fea4f95238b43b5318ae2908a6e97fa95b328
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "04EBA681E814E47198BE2F992C6FEA4F95238B43B5318AE2908A6E97FA95B328"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19712
Expires: Fri, 25 Nov 2022 17:52:35 GMT
Date: Fri, 25 Nov 2022 12:24:03 GMT
Connection: keep-alive
|
|
| cdn.formulead.com/css/main.min.css | 34.78.252.25 | 200 OK | 110 kB |
URL HTTP/1.1cdn.formulead.com/css/main.min.css IP34.78.252.25:0
Size110 kB (109488 bytes) Hashfe2b57c0c4e6a5d98847160a8ab7ebe0 e8c91eb4770f7a313483035072fe66216da5f320 406f685cb8e7aee053ea8c8df2c868f95dc7b94dc2d7f1ffad30da49b06ef341
GET /css/main.min.css HTTP/1.1
Host: cdn.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iga.nectarjunkie.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Fri, 25 Nov 2022 12:24:03 GMT
Content-Type: text/css; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Expose-Headers: Content-Length
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
Accept-Ranges: bytes
Cache-Control: public, max-age=2678400
Last-Modified: Tue, 15 Nov 2022 14:10:54 GMT
ETag: W/"b2182-1847ba0e9b0"
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.156 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.156:0
Hash21df9eaf84285c27f6faf658cfdc7bc6 31f990665e11dfb7b2464caba5bcaf2f564bee7d c9eda366498eca39dff0b5b8ef3a351507a0f10d8aa351ff5e45ce43fe899cf5
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=127154
Date: Fri, 25 Nov 2022 12:24:03 GMT
Etag: "63800195-1d7"
Expires: Sat, 26 Nov 2022 23:43:17 GMT
Last-Modified: Thu, 24 Nov 2022 23:43:17 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 8HQsyscUSvsIsjp86JN73M0-rvgU2paJc_FUQbCry3B9vV77GgJ_Cw==
|
|
| ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-solid-900.woff2 | 172.64.202.28 | 200 OK | 78 kB |
URL HTTP/2ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-solid-900.woff2 IP172.64.202.28:0
File typeWeb Open Font Format (Version 2), TrueType, length 78168, version 331.-31196\012- data Hasha9fd1225fb2cd32320e2b931dca01089 44ec5c6a868b4ce62350d9f040ed8e18f7a1d128 c5dd43f53f3af822cbf17b1fb75f46192cdbd51724f277acf6cf0dacb3fd57e7
GET /releases/v5.15.4/webfonts/free-fa-solid-900.woff2 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://iga.nectarjunkie.com
Connection: keep-alive
Referer: https://iga.nectarjunkie.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 12:24:03 GMT
content-type: font/woff2
content-length: 78168
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:58:24 GMT
etag: "a9fd1225fb2cd32320e2b931dca01089"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 76cca2ef798b9dc955bb151bf3bff218.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: aKXtSz31O8QPbhl_vEY2BOe5Ji_425mwnYUmADyXIGoQ5c7NwQiMtA==
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RUNUdmS50%2BQXqZMMo36DFLC3Vf8lr5XZrTZA9urorp2oIARnGOVujTkwXK%2FwHWBOR9%2B6z1zfP8wxS50YnHjr57No5FNu92c%2F2w8feme7A1t4yWeEfntxzeSJAya54pC%2BbZDmxV%2B8pA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76fa5bf02f32771a-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=0711a5d108 | 172.64.202.28 | 200 OK | 15 kB |
URL HTTP/2ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=0711a5d108 IP172.64.202.28:0
File typeASCII text, with very long lines (60130) Hashb187bbefe7e31b999a30f6073279147d d1a00f90213be3adbff62fe357d18438ee1cdbb5 d2f15d9813330bcdd9e37c7e0016318ef0340500ce4239e5a4b938bda429ad8b
GET /releases/v5.15.4/css/free.min.css?token=0711a5d108 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://iga.nectarjunkie.com/
Origin: https://iga.nectarjunkie.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 12:24:03 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"a12ec7ebe75a4d59a5dd6b79e2ba2e16"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 eb3d2bd89447108973b8d2779fc789e4.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: MjZEEpjPUPnk2TrA7byUVYPVRaRPJHNhL7O_YXTW59wYMMW-NgkBGQ==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sid08kxDb9Y28h%2B4XDPP6w1x2jm8W5gukCpe84K2%2FhWkF9CUeuYTdq9av6M%2F25BVAKnnN7bd%2B8iJu9o6U5cyDxFYkoF1sgQa%2Bawchmw1l8QakjEr%2BWN%2FSJUcNsD9K5OOm5UFNz7N9A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76fa5beedcb6771a-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| st.formulead.com/assets/img/recent_winners/image-4.png | 54.230.111.123 | 200 OK | 4.3 kB |
URL HTTP/2st.formulead.com/assets/img/recent_winners/image-4.png IP54.230.111.123:0
File typePNG image data, 60 x 60, 8-bit colormap, non-interlaced\012- data Hash09dcd2453720b66db251a92d9281ada8 e89a15a6ff801f4e9434ab74617726d276c0ccda 510d0ef7c8364b87979fe6bc4d46796e17b6d7953324a36b40e7818146769a10
GET /assets/img/recent_winners/image-4.png HTTP/1.1
Host: st.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iga.nectarjunkie.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 4320
server: nginx/1.19.0
last-modified: Tue, 20 Sep 2022 15:27:41 GMT
accept-ranges: bytes
access-control-allow-origin: *
date: Thu, 24 Nov 2022 15:15:34 GMT
etag: "6329dbed-10e0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wo4DgE5-I0e7niIUbcivRq94lqCKqbAXYsGj0x-HlDPrHN3r_z3ORw==
age: 76109
X-Firefox-Spdy: h2
|
|
| st.formulead.com/assets/img/recent_winners/image-5.png | 54.230.111.123 | 200 OK | 4.2 kB |
URL HTTP/2st.formulead.com/assets/img/recent_winners/image-5.png IP54.230.111.123:0
File typePNG image data, 60 x 60, 8-bit colormap, non-interlaced\012- data Hash606f41c2bb63d01ac1d3370791efeb41 1b5866271279cf2b321d976cd0a7b449d83cf04d ecc7aaf6a21affac09d882cd2b2711dba766dd634235928d06a417e89358bed3
GET /assets/img/recent_winners/image-5.png HTTP/1.1
Host: st.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iga.nectarjunkie.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 4227
server: nginx/1.19.0
last-modified: Tue, 20 Sep 2022 15:27:41 GMT
accept-ranges: bytes
access-control-allow-origin: *
date: Thu, 24 Nov 2022 15:38:55 GMT
etag: "6329dbed-1083"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: D0gdooAJM3vJcbhKA3EUylATsqqOZVPEJPyTv7cdZrCYSmEyEGwA9Q==
age: 74708
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 52.89.20.60 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP52.89.20.60:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: UkUpheLG8HEdk3jaPOw2rA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 0m+x08XuW8uVo+C8UqQhlaL8knM=
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.156 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.156:0
Hash21df9eaf84285c27f6faf658cfdc7bc6 31f990665e11dfb7b2464caba5bcaf2f564bee7d c9eda366498eca39dff0b5b8ef3a351507a0f10d8aa351ff5e45ce43fe899cf5
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=127154
Date: Fri, 25 Nov 2022 12:24:03 GMT
Etag: "63800195-1d7"
Expires: Sat, 26 Nov 2022 23:43:17 GMT
Last-Modified: Thu, 24 Nov 2022 23:43:17 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: k6neVAUE1GdkbhOpKm0_r5ExgVQL5M-m1zrgI29bUnPv3SVwJ8dFzQ==
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.156 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.156:0
Hash21df9eaf84285c27f6faf658cfdc7bc6 31f990665e11dfb7b2464caba5bcaf2f564bee7d c9eda366498eca39dff0b5b8ef3a351507a0f10d8aa351ff5e45ce43fe899cf5
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=127154
Date: Fri, 25 Nov 2022 12:24:03 GMT
Etag: "63800195-1d7"
Expires: Sat, 26 Nov 2022 23:43:17 GMT
Last-Modified: Thu, 24 Nov 2022 23:43:17 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: BIhmbj6Wvaz4ZSChAly1ZxCzKBjl9-w3u4HFJl0gMDAY5UKVpwvU_g==
|
|
| st.formulead.com/assets/img/recent_winners/image-12.png | 54.230.111.123 | 200 OK | 3.6 kB |
URL HTTP/2st.formulead.com/assets/img/recent_winners/image-12.png IP54.230.111.123:0
File typePNG image data, 60 x 60, 8-bit colormap, non-interlaced\012- data Hash55ab5b7d103b760bf9ba3ebe667f93a5 d5f703daad656e02f909493645096f7f7a8865c3 5b0caf6ab7acf096835f7afc27834e782fa56ddedb1154d0b3df588144ebebff
GET /assets/img/recent_winners/image-12.png HTTP/1.1
Host: st.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iga.nectarjunkie.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 3598
server: nginx/1.19.0
last-modified: Tue, 20 Sep 2022 15:27:41 GMT
accept-ranges: bytes
access-control-allow-origin: *
date: Thu, 24 Nov 2022 15:20:12 GMT
etag: "6329dbed-e0e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qim_LwDv7SoFCbABvsp3Wg36Ft7WchUavNxtGEWYNJqtlvjHHFayng==
age: 75832
X-Firefox-Spdy: h2
|
|
| content2020.qubiqlabs.com/fonts/Poppins/poppins-v19-latin-regular.woff2 | 34.78.252.25 | 200 OK | 9.8 kB |
URL HTTP/1.1content2020.qubiqlabs.com/fonts/Poppins/poppins-v19-latin-regular.woff2 IP34.78.252.25:0
Hash88c12148718e3bd66d6cede5e67340f6 759d6b37cc23311f81c17aeb7a5b72c218c34e76 91cbbf7f38a1906e4cb58f36467b3644201b59f1f489e6119470332dbbf1eabc
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /fonts/Poppins/poppins-v19-latin-regular.woff2 HTTP/1.1
Host: content2020.qubiqlabs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://iga.nectarjunkie.com
Connection: keep-alive
Referer: https://iga.nectarjunkie.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Fri, 25 Nov 2022 12:24:04 GMT
Content-Type: application/octet-stream
Content-Length: 7884
Connection: keep-alive
Last-Modified: Fri, 25 Nov 2022 08:15:03 GMT
ETag: "63807987-1ecc"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
|
|
| cdn.formulead.com/p/6266aa3a12eef6080491b6cf/p.js | 34.78.252.25 | 200 OK | 427 kB |
URL HTTP/1.1cdn.formulead.com/p/6266aa3a12eef6080491b6cf/p.js IP34.78.252.25:0
Size427 kB (427065 bytes) Hash48639c2e7dd23d1c7f1b3b08078d7404 92e1084a71ecd53738245981b374600ddacba062 3667f9c20634c8fc1abb6b7c4465fd621506cc78fc88ed900871e0f84d82c91f
GET /p/6266aa3a12eef6080491b6cf/p.js HTTP/1.1
Host: cdn.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iga.nectarjunkie.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Fri, 25 Nov 2022 12:24:03 GMT
Content-Type: text/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Expose-Headers: Content-Length
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
Pragma: no-cache
Cache-Control: no-cache
set-cookie: lid=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT
plc=6266aa3a12eef6080491b6cf; Path=/; Expires=Sun, 24 Nov 2024 12:24:03 GMT; Secure; SameSite=None
qst.sid=s%3AWlaq_BwAM42zE1jUytLdtmrtRRnvy_0E.Y9xR8HAAihNTyi1%2BKQV6D9IEEh3UBYvPPJWZ3GvRKxs; Path=/; HttpOnly
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.156 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.156:0
Hash21df9eaf84285c27f6faf658cfdc7bc6 31f990665e11dfb7b2464caba5bcaf2f564bee7d c9eda366498eca39dff0b5b8ef3a351507a0f10d8aa351ff5e45ce43fe899cf5
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=127154
Date: Fri, 25 Nov 2022 12:24:03 GMT
Etag: "63800195-1d7"
Expires: Sat, 26 Nov 2022 23:43:17 GMT
Last-Modified: Thu, 24 Nov 2022 23:43:17 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: IjssW_gX268FWWdYRmrMi_USjllyYGCVae2v3ct0VNNSeVwaHaWvig==
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.156 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.156:0
Hash21df9eaf84285c27f6faf658cfdc7bc6 31f990665e11dfb7b2464caba5bcaf2f564bee7d c9eda366498eca39dff0b5b8ef3a351507a0f10d8aa351ff5e45ce43fe899cf5
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=127154
Date: Fri, 25 Nov 2022 12:24:03 GMT
Etag: "63800195-1d7"
Expires: Sat, 26 Nov 2022 23:43:17 GMT
Last-Modified: Thu, 24 Nov 2022 23:43:17 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: EZMWMsq3Nn02-zcyozrDf8d-YAapjib__d9dYSLP0No4_0yISWZS8g==
|
|
| cdn.formulead.com/v/country | 34.78.252.25 | 200 OK | 51 B |
URL HTTP/1.1cdn.formulead.com/v/country IP34.78.252.25:0
File typeJSON data\012- , ASCII text, with no line terminators Hash91440c116c92d75cfc02cd72bd060a82 591d3adc1d1d80e012b0dd0214df1f0438ae37f5 1b35c679adcfb2f8fbf92afcaf9f7a741f3c6273503a54b6c55448e1b2807c80
GET /v/country HTTP/1.1
Host: cdn.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://iga.nectarjunkie.com
Connection: keep-alive
Referer: https://iga.nectarjunkie.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Fri, 25 Nov 2022 12:24:04 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 51
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: https://iga.nectarjunkie.com
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Expose-Headers: Content-Length
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
Pragma: no-cache
Cache-Control: no-cache
ETag: W/"33-WR063B0dgOASsN0CFN8fBDiuN/U"
set-cookie: qst.sid=s%3AXfma64-RQMqq3inoTKqlh28bAvqaYiQA.EF7YCD%2BUXUYTjcDci0E%2B4SZK4eIkqUMh57JoFmg6Ftc; Path=/; HttpOnly
Vary: Accept-Encoding
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash76544babbcf6515110bd81aaee8e7e63 043497692868c67ac84cdfe70d0a484517abd1c2 a19d5958d683662375a2469d1d7e551188469b967eb6f2bae2d5e43dac51a4f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 12:24:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| cdn.formulead.com/p/6266aa3a12eef6080491b6cf/feed?sc_domain=iga.nectarjunkie.com&cl_ip=91.90.42.154&qb_placement_id=6266aa3a12eef6080491b6cf&qb_offer_id=58b8199aad94620100c6003f&qb_flow_id=58b8199aad94620100c6003f&qb_vendor_id=570e5c924ce290010026cc24&qb_country=AU&ql_session_id=Wlaq_BwAM42zE1jUytLdtmrtRRnvy_0E&pre=0&p_id=6266aa3a12eef6080491b6cf&aff_code=LDA&request_id=f02422c3193ae7d7ae880c58a3d374de&aff_goal_id=9531&aff_goal_id2=9532&aff_id=1339&aff_version=no_teaser&aff_adv_id=2&aff_offer_id=1953&aff_inc=iga&aff_tt=dp&sc_url=https%3A%2F%2Figa.nectarjunkie.com%2Fcp%2Figa%2Fau%2Findex.html&sc_campaign_page=index.html&sc_campaign_path=%2Fcp%2Figa%2Fau%2F&sc_campaign_domain=https%3A%2F%2Figa.nectarjunkie.com&sc_url_wl=https%3A%2F%2Flp.nectarjunkie.com%2Fcp%2Figa%2Fau%2Findex.html&stp=1&feed_type=initial | 34.78.252.25 | 200 OK | 2 B |
URL HTTP/1.1cdn.formulead.com/p/6266aa3a12eef6080491b6cf/feed?sc_domain=iga.nectarjunkie.com&cl_ip=91.90.42.154&qb_placement_id=6266aa3a12eef6080491b6cf&qb_offer_id=58b8199aad94620100c6003f&qb_flow_id=58b8199aad94620100c6003f&qb_vendor_id=570e5c924ce290010026cc24&qb_country=AU&ql_session_id=Wlaq_BwAM42zE1jUytLdtmrtRRnvy_0E&pre=0&p_id=6266aa3a12eef6080491b6cf&aff_code=LDA&request_id=f02422c3193ae7d7ae880c58a3d374de&aff_goal_id=9531&aff_goal_id2=9532&aff_id=1339&aff_version=no_teaser&aff_adv_id=2&aff_offer_id=1953&aff_inc=iga&aff_tt=dp&sc_url=https%3A%2F%2Figa.nectarjunkie.com%2Fcp%2Figa%2Fau%2Findex.html&sc_campaign_page=index.html&sc_campaign_path=%2Fcp%2Figa%2Fau%2F&sc_campaign_domain=https%3A%2F%2Figa.nectarjunkie.com&sc_url_wl=https%3A%2F%2Flp.nectarjunkie.com%2Fcp%2Figa%2Fau%2Findex.html&stp=1&feed_type=initial IP34.78.252.25:0
File typeASCII text, with no line terminators Hashe0aa021e21dddbd6d8cecec71e9cf564 9ce3bd4224c8c1780db56b4125ecf3f24bf748b7 565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
OPTIONS /p/6266aa3a12eef6080491b6cf/feed?sc_domain=iga.nectarjunkie.com&cl_ip=91.90.42.154&qb_placement_id=6266aa3a12eef6080491b6cf&qb_offer_id=58b8199aad94620100c6003f&qb_flow_id=58b8199aad94620100c6003f&qb_vendor_id=570e5c924ce290010026cc24&qb_country=AU&ql_session_id=Wlaq_BwAM42zE1jUytLdtmrtRRnvy_0E&pre=0&p_id=6266aa3a12eef6080491b6cf&aff_code=LDA&request_id=f02422c3193ae7d7ae880c58a3d374de&aff_goal_id=9531&aff_goal_id2=9532&aff_id=1339&aff_version=no_teaser&aff_adv_id=2&aff_offer_id=1953&aff_inc=iga&aff_tt=dp&sc_url=https%3A%2F%2Figa.nectarjunkie.com%2Fcp%2Figa%2Fau%2Findex.html&sc_campaign_page=index.html&sc_campaign_path=%2Fcp%2Figa%2Fau%2F&sc_campaign_domain=https%3A%2F%2Figa.nectarjunkie.com&sc_url_wl=https%3A%2F%2Flp.nectarjunkie.com%2Fcp%2Figa%2Fau%2Findex.html&stp=1&feed_type=initial HTTP/1.1
Host: cdn.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-iivmxswc,x-request-id,x-session-id
Referer: https://iga.nectarjunkie.com/
Origin: https://iga.nectarjunkie.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Fri, 25 Nov 2022 12:24:04 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 2
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: https://iga.nectarjunkie.com
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Expose-Headers: Content-Length
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
Vary: Accept-Encoding
|
|
| www.google.com/recaptcha/api.js?render=6Le28S4hAAAAAA_HM_1PgW6fsQqLb2dZORF4Hbu- | 142.250.74.164 | 200 OK | 1.2 kB |
URL HTTP/2www.google.com/recaptcha/api.js?render=6Le28S4hAAAAAA_HM_1PgW6fsQqLb2dZORF4Hbu- IP142.250.74.164:0
Hash00ef4929aca9c16ee0ffc8a52490bf3f c424e10cc89b276b9c57bde48d7fcaf9ef8afc94 f25b94292017208b47c47b77e513b4e9ef876652e9fe44ce1dc783a10252e360
GET /recaptcha/api.js?render=6Le28S4hAAAAAA_HM_1PgW6fsQqLb2dZORF4Hbu- HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iga.nectarjunkie.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Fri, 25 Nov 2022 12:24:04 GMT
date: Fri, 25 Nov 2022 12:24:04 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 584
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| cdn.formulead.com/p/6266aa3a12eef6080491b6cf/feed?sc_domain=iga.nectarjunkie.com&cl_ip=91.90.42.154&qb_placement_id=6266aa3a12eef6080491b6cf&qb_offer_id=58b8199aad94620100c6003f&qb_flow_id=58b8199aad94620100c6003f&qb_vendor_id=570e5c924ce290010026cc24&qb_country=AU&ql_session_id=Wlaq_BwAM42zE1jUytLdtmrtRRnvy_0E&pre=0&p_id=6266aa3a12eef6080491b6cf&aff_code=LDA&request_id=f02422c3193ae7d7ae880c58a3d374de&aff_goal_id=9531&aff_goal_id2=9532&aff_id=1339&aff_version=no_teaser&aff_adv_id=2&aff_offer_id=1953&aff_inc=iga&aff_tt=dp&sc_url=https%3A%2F%2Figa.nectarjunkie.com%2Fcp%2Figa%2Fau%2Findex.html&sc_campaign_page=index.html&sc_campaign_path=%2Fcp%2Figa%2Fau%2F&sc_campaign_domain=https%3A%2F%2Figa.nectarjunkie.com&sc_url_wl=https%3A%2F%2Flp.nectarjunkie.com%2Fcp%2Figa%2Fau%2Findex.html&stp=1&feed_type=initial | 34.78.252.25 | 200 OK | 4.7 kB |
URL HTTP/1.1cdn.formulead.com/p/6266aa3a12eef6080491b6cf/feed?sc_domain=iga.nectarjunkie.com&cl_ip=91.90.42.154&qb_placement_id=6266aa3a12eef6080491b6cf&qb_offer_id=58b8199aad94620100c6003f&qb_flow_id=58b8199aad94620100c6003f&qb_vendor_id=570e5c924ce290010026cc24&qb_country=AU&ql_session_id=Wlaq_BwAM42zE1jUytLdtmrtRRnvy_0E&pre=0&p_id=6266aa3a12eef6080491b6cf&aff_code=LDA&request_id=f02422c3193ae7d7ae880c58a3d374de&aff_goal_id=9531&aff_goal_id2=9532&aff_id=1339&aff_version=no_teaser&aff_adv_id=2&aff_offer_id=1953&aff_inc=iga&aff_tt=dp&sc_url=https%3A%2F%2Figa.nectarjunkie.com%2Fcp%2Figa%2Fau%2Findex.html&sc_campaign_page=index.html&sc_campaign_path=%2Fcp%2Figa%2Fau%2F&sc_campaign_domain=https%3A%2F%2Figa.nectarjunkie.com&sc_url_wl=https%3A%2F%2Flp.nectarjunkie.com%2Fcp%2Figa%2Fau%2Findex.html&stp=1&feed_type=initial IP34.78.252.25:0
File typeJSON data\012- HTML document, Unicode text, UTF-8 text, with very long lines (21255), with no line terminators Hashcec1d3bcbe8110133b4265a99f6c75e2 7f252cb9cf2ac25a7434b0efbc8a5e8fab99db77 02363bafa22a41ab65718e8c78f6c5ec40e413560b865e17022fafac1777e611
GET /p/6266aa3a12eef6080491b6cf/feed?sc_domain=iga.nectarjunkie.com&cl_ip=91.90.42.154&qb_placement_id=6266aa3a12eef6080491b6cf&qb_offer_id=58b8199aad94620100c6003f&qb_flow_id=58b8199aad94620100c6003f&qb_vendor_id=570e5c924ce290010026cc24&qb_country=AU&ql_session_id=Wlaq_BwAM42zE1jUytLdtmrtRRnvy_0E&pre=0&p_id=6266aa3a12eef6080491b6cf&aff_code=LDA&request_id=f02422c3193ae7d7ae880c58a3d374de&aff_goal_id=9531&aff_goal_id2=9532&aff_id=1339&aff_version=no_teaser&aff_adv_id=2&aff_offer_id=1953&aff_inc=iga&aff_tt=dp&sc_url=https%3A%2F%2Figa.nectarjunkie.com%2Fcp%2Figa%2Fau%2Findex.html&sc_campaign_page=index.html&sc_campaign_path=%2Fcp%2Figa%2Fau%2F&sc_campaign_domain=https%3A%2F%2Figa.nectarjunkie.com&sc_url_wl=https%3A%2F%2Flp.nectarjunkie.com%2Fcp%2Figa%2Fau%2Findex.html&stp=1&feed_type=initial HTTP/1.1
Host: cdn.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Session-Id: s:Wlaq_BwAM42zE1jUytLdtmrtRRnvy_0E.Y9xR8HAAihNTyi1+KQV6D9IEEh3UBYvPPJWZ3GvRKxs
X-Request-Id: 2f3a9fd74f6770ba73f9956a
X-iivmxswc: a6c269615588c101843415c7cd24ac10c78b076cb8c51b1738a83b2022c637bc
Origin: https://iga.nectarjunkie.com
Connection: keep-alive
Referer: https://iga.nectarjunkie.com/
Cookie: plc=6266aa3a12eef6080491b6cf
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Fri, 25 Nov 2022 12:24:04 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: https://iga.nectarjunkie.com
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Expose-Headers: Content-Length
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
Pragma: no-cache
Cache-Control: no-cache
Set-Cookie: stp=1; Path=/; Expires=Sun, 24 Nov 2024 12:24:04 GMT; Secure; SameSite=None
ck_tsp=2022-11-25T12%3A24%3A04.582Z; Path=/; Expires=Sun, 24 Nov 2024 12:24:04 GMT; Secure; SameSite=None
sip=91.90.42.154; Path=/; Expires=Sun, 24 Nov 2024 12:24:04 GMT; Secure; SameSite=None
ETag: W/"53e2-mmW1B13e60m3KUaFSQbnkH2PUKM"
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash65992aeb8efb9a0b8fd59687090733fe 526a2afccc93d32849185d153fafe44b72797df9 b6677984b6c3602d7b62df776158c09a3e57eec4c0edbddafb0624200715f10e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 12:24:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| cdn.formulead.com/v/reverse-dns-lookup | 34.78.252.25 | 200 OK | 2 B |
URL HTTP/1.1cdn.formulead.com/v/reverse-dns-lookup IP34.78.252.25:0
File typeASCII text, with no line terminators Hashe0aa021e21dddbd6d8cecec71e9cf564 9ce3bd4224c8c1780db56b4125ecf3f24bf748b7 565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
OPTIONS /v/reverse-dns-lookup HTTP/1.1
Host: cdn.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-lead-id
Referer: https://iga.nectarjunkie.com/
Origin: https://iga.nectarjunkie.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Fri, 25 Nov 2022 12:24:05 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 2
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: https://iga.nectarjunkie.com
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Expose-Headers: Content-Length
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
Vary: Accept-Encoding
|
|
| cdn.formulead.com/v/reverse-dns-lookup | 34.78.252.25 | 200 OK | 16 B |
URL HTTP/1.1cdn.formulead.com/v/reverse-dns-lookup IP34.78.252.25:0
File typeJSON data\012- , ASCII text, with no line terminators Hash7363e85fe9edee6f053a4b319588c086 a15e2127145548437173fc17f3e980e3f3dee2d0 c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
GET /v/reverse-dns-lookup HTTP/1.1
Host: cdn.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Lead-Id: 2f3a9fd74f6770ba73f9956a
Origin: https://iga.nectarjunkie.com
Connection: keep-alive
Referer: https://iga.nectarjunkie.com/
Cookie: plc=6266aa3a12eef6080491b6cf; stp=1; ck_tsp=2022-11-25T12%3A24%3A04.582Z; sip=91.90.42.154
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Fri, 25 Nov 2022 12:24:05 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 16
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: https://iga.nectarjunkie.com
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Expose-Headers: Content-Length
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
Pragma: no-cache
Cache-Control: no-cache
ETag: W/"10-oV4hJxRVSENxc/wX8+mA4/Pe4tA"
set-cookie: qst.sid=s%3A967BIaib044lf3pUK5af4N5Lqim-JAtz.p%2FncWw18dfVURk3kRTxMoE73oooLynzDQ6mRyh2Aa3g; Path=/; HttpOnly
Vary: Accept-Encoding
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash6827d82f488045e02e40d6a2fdbae4b3 4944139a4b08769511ffc6aa913857d88a0db7bc 0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8859
Expires: Fri, 25 Nov 2022 14:51:44 GMT
Date: Fri, 25 Nov 2022 12:24:05 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash6827d82f488045e02e40d6a2fdbae4b3 4944139a4b08769511ffc6aa913857d88a0db7bc 0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8859
Expires: Fri, 25 Nov 2022 14:51:44 GMT
Date: Fri, 25 Nov 2022 12:24:05 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash6827d82f488045e02e40d6a2fdbae4b3 4944139a4b08769511ffc6aa913857d88a0db7bc 0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8859
Expires: Fri, 25 Nov 2022 14:51:44 GMT
Date: Fri, 25 Nov 2022 12:24:05 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash6827d82f488045e02e40d6a2fdbae4b3 4944139a4b08769511ffc6aa913857d88a0db7bc 0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8859
Expires: Fri, 25 Nov 2022 14:51:44 GMT
Date: Fri, 25 Nov 2022 12:24:05 GMT
Connection: keep-alive
|
|
| content2020.qubiqlabs.com/fonts/myriad-pro/MyriadPro-Regular.woff | 34.78.252.25 | 200 OK | 52 kB |
URL HTTP/1.1content2020.qubiqlabs.com/fonts/myriad-pro/MyriadPro-Regular.woff IP34.78.252.25:0
Hashf56741733353bf6e69ebaba613e5a6b1 3aed3a3b77ba65ff68dc30927664e850028054cb efcda823e4d423c1065cccbb3da6251c12e7507ac433bf7bd81586bcd291857b
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /fonts/myriad-pro/MyriadPro-Regular.woff HTTP/1.1
Host: content2020.qubiqlabs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://iga.nectarjunkie.com
Connection: keep-alive
Referer: https://iga.nectarjunkie.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Fri, 25 Nov 2022 12:24:05 GMT
Content-Type: application/font-woff
Content-Length: 51572
Connection: keep-alive
Last-Modified: Fri, 25 Nov 2022 08:15:03 GMT
ETag: "63807987-c974"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash6827d82f488045e02e40d6a2fdbae4b3 4944139a4b08769511ffc6aa913857d88a0db7bc 0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8859
Expires: Fri, 25 Nov 2022 14:51:44 GMT
Date: Fri, 25 Nov 2022 12:24:05 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg | 34.120.237.76 | 200 OK | 9.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg IP34.120.237.76:0
Hashdf5e7a330f7a9aeb222750925ace10b3 2052021c220c393fd11bcacd7a40924dac1b3fbc 1aac34a7da097ce886e660a079e5974784d103cf58193fccd589fb8780de836f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7993
x-amzn-requestid: 9f0ff853-4819-47cd-959d-658401ea5748
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvCsG5mIAMFqAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9211-1c48b9223684f2942f8dd42d;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:35:13 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 7YSXUV-LZpsI7vciFhuqt1EVr6YRkhxcOgMg8z8bxLcOE01_baf6Gg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:47:53 GMT
age: 52572
etag: "43d1dec7fc06879988c9c3cadd800cc8145df988"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| cdn.formulead.com/v/fingerprint-cache?vl_fp=9233aa210fa7da7061a624224377a2bb&vl_fp_cljs=803716228 | 34.78.252.25 | 200 OK | 2 B |
URL HTTP/1.1cdn.formulead.com/v/fingerprint-cache?vl_fp=9233aa210fa7da7061a624224377a2bb&vl_fp_cljs=803716228 IP34.78.252.25:0
File typeASCII text, with no line terminators Hashe0aa021e21dddbd6d8cecec71e9cf564 9ce3bd4224c8c1780db56b4125ecf3f24bf748b7 565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
OPTIONS /v/fingerprint-cache?vl_fp=9233aa210fa7da7061a624224377a2bb&vl_fp_cljs=803716228 HTTP/1.1
Host: cdn.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-lead-id
Referer: https://iga.nectarjunkie.com/
Origin: https://iga.nectarjunkie.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Fri, 25 Nov 2022 12:24:05 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 2
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: https://iga.nectarjunkie.com
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Expose-Headers: Content-Length
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
Vary: Accept-Encoding
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe021fc4e-f76c-4fe9-9470-b59452c93459.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe021fc4e-f76c-4fe9-9470-b59452c93459.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasheb94ecb5881a7e49d964e4287d11e7a4 4b131a189db1b615e2519a28cad83d78297ab67f f3693e29eb7b72361093434142e3f18969c1a0b02350fab430fa29c7c127bd1a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe021fc4e-f76c-4fe9-9470-b59452c93459.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11401
x-amzn-requestid: 3bc374eb-7d70-4b95-94a7-2ad06cae4726
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvCtHcmoAMFxgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9211-333793987245ff9e741b9aed;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:35:13 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kkI9Vh2vZeJPwz2JVL5MErsBBwk8-2Jo49yc0sFqv5pxIyBi6azFIw==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 22:00:34 GMT
age: 51811
etag: "4b131a189db1b615e2519a28cad83d78297ab67f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9e23502-5ace-42f4-a990-42412dc7e04e.jpeg | 34.120.237.76 | 200 OK | 6.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9e23502-5ace-42f4-a990-42412dc7e04e.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashf6292a2988fb4505d0098553b8e99ddc 9b8aafcda0e22edcc16d3048f4b88659d3b42419 16b7b473229c5e519ab81b385c50277424f3f3b2a5d7647035e84ba58e44f3be
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9e23502-5ace-42f4-a990-42412dc7e04e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6385
x-amzn-requestid: 4c2a84f7-f038-4f5a-86c2-5c8ce1a48c6e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cI5NVFMAoAMFn7g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63803bee-45c6411c2430e2375f530dd8;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 03:52:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Fj82i9qJmEiUy2DOkkowq8WRyzupMwNyQqu110sJ3o72HEW4yb7bjQ==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 07:35:26 GMT
age: 17319
etag: "9b8aafcda0e22edcc16d3048f4b88659d3b42419"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash481c033b9ffd030ff0de6e35cf788b47 85d3baad9217af2b5d75c019d2ef95dbb919a788 02443c7869914c2b29892deb0c645395bcf4e8379da3cf20974614ff9c92893b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11249
x-amzn-requestid: 8f679d7f-2ea5-4e47-b78d-79af59435a62
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cFPHYHkAIAMFpBg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637ec562-26108a785e910dc3355d58f1;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 01:14:10 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NKwpIdw2RZNZNh69AF5GNvunA_QfRGClvzcRP3zYwn7c8BLBlt097g==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 07:46:20 GMT
age: 16665
etag: "85d3baad9217af2b5d75c019d2ef95dbb919a788"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00e89fb5-5cb3-4f68-936b-5ee31d6061bc.jpeg | 34.120.237.76 | 200 OK | 8.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00e89fb5-5cb3-4f68-936b-5ee31d6061bc.jpeg IP34.120.237.76:0
Hashb6a0a18f27a0a0e9234c3d0157a1d0ac 550bffc74ec4584af6ea5a69d422b12231212686 decb51fb683345a46b58fb3ed1a33231cfe993453455e157c2e8240b26e7921a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00e89fb5-5cb3-4f68-936b-5ee31d6061bc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8006
x-amzn-requestid: 78aab013-df11-464b-a1c7-ee41b7e77b40
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIB-AHSrIAMFvKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe38c-4d795f410a57fc2c21d7075d;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:08 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NntLZ3wUdcX9kEo-afFLU0TPKgqAlSK3bToNh2mmoqoyLBJINNk7ow==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:54:39 GMT
age: 52166
etag: "5d15fd672e968d59b541e4d5d0d01cd5e69f4075"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg | 34.120.237.76 | 200 OK | 4.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg IP34.120.237.76:0
Hash0e44868ac28b183c422ba67a818523e5 822496a15ec07c99800820ee2c2bc150c78014e3 e0bb504c1804bff436f206e03798a07a697b49d58f9df8bc192f35feef55ae3d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3955
x-amzn-requestid: 42c8d309-a8d2-47cc-8d97-c7fa3a63f8cd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCM9NGJHoAMF4sQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d8eba-2a06cda9346bd02c46955444;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 03:08:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5MlzpHpq7auKLSAYikINuPAylXI11VJL3xxIJ9Dyub-7rjQaPfg0WQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 04:23:00 GMT
age: 28865
etag: "74cb2ccd6ae38b171bfbe5a74f0eccb09aa3836b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| cdn.formulead.com/v/fingerprint-cache?vl_fp=9233aa210fa7da7061a624224377a2bb&vl_fp_cljs=803716228 | 34.78.252.25 | 200 OK | 16 B |
URL HTTP/1.1cdn.formulead.com/v/fingerprint-cache?vl_fp=9233aa210fa7da7061a624224377a2bb&vl_fp_cljs=803716228 IP34.78.252.25:0
File typeJSON data\012- , ASCII text, with no line terminators Hash7363e85fe9edee6f053a4b319588c086 a15e2127145548437173fc17f3e980e3f3dee2d0 c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
GET /v/fingerprint-cache?vl_fp=9233aa210fa7da7061a624224377a2bb&vl_fp_cljs=803716228 HTTP/1.1
Host: cdn.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Lead-Id: 2f3a9fd74f6770ba73f9956a
Origin: https://iga.nectarjunkie.com
Connection: keep-alive
Referer: https://iga.nectarjunkie.com/
Cookie: plc=6266aa3a12eef6080491b6cf; stp=1; ck_tsp=2022-11-25T12%3A24%3A04.582Z; sip=91.90.42.154
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Fri, 25 Nov 2022 12:24:05 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 16
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: https://iga.nectarjunkie.com
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Expose-Headers: Content-Length
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
Pragma: no-cache
Cache-Control: no-cache
ETag: W/"10-oV4hJxRVSENxc/wX8+mA4/Pe4tA"
set-cookie: qst.sid=s%3APKzBSQkV6SDP3N3dueQ_kSbtaFj883bk.xOo26leOj0MIrFR2xphQsQrf%2BAaDxxcSRng1uGbHnUA; Path=/; HttpOnly
Vary: Accept-Encoding
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hashe5f442b51ded271208739a4b0de61907 53f23792cfdf5a52d4441a2b0f4b0b701303389e 2ec1be792ad0fe7506b0c656602f0ad76bfaa4a58a20311263664b5505632bc9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 282
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 12:24:05 GMT
Etag: "637fabb4-117"
Last-Modified: Fri, 25 Nov 2022 12:19:23 GMT
Server: ECS (amb/6B73)
X-Cache: HIT
Content-Length: 279
|
|
| cdn.formulead.com/p/6266aa3a12eef6080491b6cf/feed?sc_domain=iga.nectarjunkie.com&cl_ip=91.90.42.154&qb_placement_id=6266aa3a12eef6080491b6cf&qb_offer_id=58b8199aad94620100c6003f&qb_flow_id=58b8199aad94620100c6003f&qb_vendor_id=570e5c924ce290010026cc24&qb_country=AU&ql_session_id=Wlaq_BwAM42zE1jUytLdtmrtRRnvy_0E&pre=0&p_id=6266aa3a12eef6080491b6cf&aff_code=LDA&request_id=f02422c3193ae7d7ae880c58a3d374de&aff_goal_id=9531&aff_goal_id2=9532&aff_id=1339&aff_version=no_teaser&aff_adv_id=2&aff_offer_id=1953&aff_inc=iga&aff_tt=dp&sc_url=https%3A%2F%2Figa.nectarjunkie.com%2Fcp%2Figa%2Fau%2Findex.html&sc_campaign_page=index.html&sc_campaign_path=%2Fcp%2Figa%2Fau%2F&sc_campaign_domain=https%3A%2F%2Figa.nectarjunkie.com&sc_url_wl=https%3A%2F%2Flp.nectarjunkie.com%2Fcp%2Figa%2Fau%2Findex.html&stp=1&feed_type=full | 34.78.252.25 | 200 OK | 36 B |
URL HTTP/1.1cdn.formulead.com/p/6266aa3a12eef6080491b6cf/feed?sc_domain=iga.nectarjunkie.com&cl_ip=91.90.42.154&qb_placement_id=6266aa3a12eef6080491b6cf&qb_offer_id=58b8199aad94620100c6003f&qb_flow_id=58b8199aad94620100c6003f&qb_vendor_id=570e5c924ce290010026cc24&qb_country=AU&ql_session_id=Wlaq_BwAM42zE1jUytLdtmrtRRnvy_0E&pre=0&p_id=6266aa3a12eef6080491b6cf&aff_code=LDA&request_id=f02422c3193ae7d7ae880c58a3d374de&aff_goal_id=9531&aff_goal_id2=9532&aff_id=1339&aff_version=no_teaser&aff_adv_id=2&aff_offer_id=1953&aff_inc=iga&aff_tt=dp&sc_url=https%3A%2F%2Figa.nectarjunkie.com%2Fcp%2Figa%2Fau%2Findex.html&sc_campaign_page=index.html&sc_campaign_path=%2Fcp%2Figa%2Fau%2F&sc_campaign_domain=https%3A%2F%2Figa.nectarjunkie.com&sc_url_wl=https%3A%2F%2Flp.nectarjunkie.com%2Fcp%2Figa%2Fau%2Findex.html&stp=1&feed_type=full IP34.78.252.25:0
Hash7c51298fbee10459cd4ef143591022cd 3cbb41898a111d29c1bc38f3913cd34a7a449311 bf4ef4ad8e74ce0e1b6dff5c1801cd5d405fde9321319ab766cc0a60ee047d6c
OPTIONS /p/6266aa3a12eef6080491b6cf/feed?sc_domain=iga.nectarjunkie.com&cl_ip=91.90.42.154&qb_placement_id=6266aa3a12eef6080491b6cf&qb_offer_id=58b8199aad94620100c6003f&qb_flow_id=58b8199aad94620100c6003f&qb_vendor_id=570e5c924ce290010026cc24&qb_country=AU&ql_session_id=Wlaq_BwAM42zE1jUytLdtmrtRRnvy_0E&pre=0&p_id=6266aa3a12eef6080491b6cf&aff_code=LDA&request_id=f02422c3193ae7d7ae880c58a3d374de&aff_goal_id=9531&aff_goal_id2=9532&aff_id=1339&aff_version=no_teaser&aff_adv_id=2&aff_offer_id=1953&aff_inc=iga&aff_tt=dp&sc_url=https%3A%2F%2Figa.nectarjunkie.com%2Fcp%2Figa%2Fau%2Findex.html&sc_campaign_page=index.html&sc_campaign_path=%2Fcp%2Figa%2Fau%2F&sc_campaign_domain=https%3A%2F%2Figa.nectarjunkie.com&sc_url_wl=https%3A%2F%2Flp.nectarjunkie.com%2Fcp%2Figa%2Fau%2Findex.html&stp=1&feed_type=full HTTP/1.1
Host: cdn.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-iivmxswc,x-request-id,x-session-id
Referer: https://iga.nectarjunkie.com/
Origin: https://iga.nectarjunkie.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Fri, 25 Nov 2022 12:24:05 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 2
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: https://iga.nectarjunkie.com
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Expose-Headers: Content-Length
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
Vary: Accept-Encoding
|
|
| trk-consulatu.com/scripts/push/script/z75dnkdk4q?url=iga.nectarjunkie.com | 172.64.168.3 | 200 OK | 2.4 kB |
URL HTTP/2trk-consulatu.com/scripts/push/script/z75dnkdk4q?url=iga.nectarjunkie.com IP172.64.168.3:0
File typeASCII text, with very long lines (6943) Hash362570ce5b6dfc77dfc11b99a5600794 7d135b39c3688ae6869ecbb93a9095288322fb81 de0c0d859da30cb46fb7fa13183c1cc757414cb861f94f8f78732b21c57c9574
GET /scripts/push/script/z75dnkdk4q?url=iga.nectarjunkie.com HTTP/1.1
Host: trk-consulatu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iga.nectarjunkie.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 12:24:05 GMT
content-type: application/javascript;charset=UTF-8
expires: 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
x-xss-protection: 1; mode=block
pragma: no-cache
x-frame-options: DENY
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src https://* data:; font-src 'self' data:
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
x-content-type-options: nosniff
feature-policy: geolocation 'none'; midi 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; speaker 'none'; fullscreen 'self'; payment 'none'
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bW9W%2BttJHUtBr5tKUp9x0WBlobF%2BJj0imtcwtXeIVT%2FXUbYW9q1RVJ9eDMnnmwQvHeFByAUWYzZOtZeKcUUddyp1Z0NwuMGuW8X7NJ1yf%2FbeEspeWF8IRQ%2F%2F%2FIs6dB%2BO3XO31g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76fa5bfa2a5e8879-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 782 B |
IP142.250.74.3:0
Hash2e1d98f6c60065600ebb2e224dd3c550 0829945fa6c2715592b20a7e3e105f2da6b1f4ff 5edccbaa753dc27ac55e29182068861032d148b80f52bc1cd74ce45c604e49eb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 12:24:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js | 142.250.74.163 | 200 OK | 163 kB |
URL HTTP/2www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js IP142.250.74.163:0
File typeASCII text, with very long lines (730) Size163 kB (162976 bytes) Hash79d18cf4265108d7cecca1bf4ada6109 e51d0285a545381d4c39e9e0292a650ffeeecbb9 59ce7253f371df0833c3f72d4748ef812002b90a49413c56d0ca7c40bb5a0ab6
GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://iga.nectarjunkie.com
Connection: keep-alive
Referer: https://iga.nectarjunkie.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 25 Nov 2022 08:12:22 GMT
expires: Sat, 25 Nov 2023 08:12:22 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
age: 15103
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.195 | 200 OK | 15 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 19 Nov 2022 12:31:58 GMT
expires: Sun, 19 Nov 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 517928
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=0711a5d108 | 172.64.202.28 | 200 OK | 21 kB |
URL HTTP/2ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=0711a5d108 IP172.64.202.28:0
Hash93a80e83f8867aa79fcba9e76de10780 857215bdcb251c3aaf9a6651aa7bb6f504eb5b77 56836c9cb7725607ef664762166842f8ea4d367013f673f8d88a5fbd4ab7fca9
GET /releases/v5.15.4/css/free-v4-shims.min.css?token=0711a5d108 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://iga.nectarjunkie.com/
Origin: https://iga.nectarjunkie.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 12:24:03 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"76f34b71fc9fb641507ff6a822cc07f5"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c9e93510e33ab69af0de2f41455fbb80.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: KfymQ7RRNwuAKc1I6mbwKDpX-4h39t6YQ7pHiwB2XKI5p-YkBVz-aw==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WUqT6LASSdJM%2FIhA3rmwY3xsiAl%2FrwCyivbxC9LuhM9kdaMBwl6lAbpQ8sH4Xw3J%2FqrKKg63XuRYM8IWnl0Zt0kt5kfpNuuJ2qtVmpjI7ij1wck1nFldzQkuDvJ9f76GSPw6CxQ1Gg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76fa5beedcb8771a-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| event.trk-consulatu.com/register/event_log/l8em2zyvgk | 172.64.169.3 | 200 OK | 0 B |
URL HTTP/2event.trk-consulatu.com/register/event_log/l8em2zyvgk IP172.64.169.3:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /register/event_log/l8em2zyvgk HTTP/1.1
Host: event.trk-consulatu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://iga.nectarjunkie.com/
Origin: https://iga.nectarjunkie.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 12:24:06 GMT
content-length: 0
access-control-allow-headers: content-type
access-control-expose-headers: Authorization, Link, X-Total-Count
access-control-allow-origin: https://iga.nectarjunkie.com
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-max-age: 1800
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5Le4VcDY0NI8zMbc3IS5voY2ptPCEhGO5TosGuhVbCy%2F%2FqEhJCwR04ksOuFEDZT47eki3%2BC6QGlhFv9JLlZgEQOy3rW1AaXMkJhi4iq3bdO%2BwK90Qw7vUSgF9ALCLvI9eog8DKRZPW7Erw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76fa5bfeca5b71ed-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| event.trk-consulatu.com/register/event_log/l8em2zyvgk | 172.64.169.3 | 200 OK | 0 B |
URL HTTP/2event.trk-consulatu.com/register/event_log/l8em2zyvgk IP172.64.169.3:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /register/event_log/l8em2zyvgk HTTP/1.1
Host: event.trk-consulatu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://iga.nectarjunkie.com/
Origin: https://iga.nectarjunkie.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 12:24:06 GMT
content-length: 0
access-control-allow-headers: content-type
access-control-expose-headers: Authorization, Link, X-Total-Count
access-control-allow-origin: https://iga.nectarjunkie.com
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-max-age: 1800
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3MtOPehr%2FdSM%2F%2BU2NglYFMVzO5t9kCcgVazycLgzNVjWCvc4bEs6HXUJAJXrdvP9LuBY4CorJHbY0zcVzroAh%2BUSRrQiNhezt4Ix21QAV8xwJVlD54zhB0gl2rXjbfhaKwSwUIMo3cy2oQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76fa5bff0ad571ed-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| event.trk-consulatu.com/register/event_log/l8em2zyvgk | 172.64.169.3 | 200 OK | 0 B |
URL HTTP/2event.trk-consulatu.com/register/event_log/l8em2zyvgk IP172.64.169.3:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /register/event_log/l8em2zyvgk HTTP/1.1
Host: event.trk-consulatu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://iga.nectarjunkie.com/
Content-type: application/json
Origin: https://iga.nectarjunkie.com
Content-Length: 141
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 12:24:06 GMT
content-length: 0
expires: 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
x-xss-protection: 1; mode=block
pragma: no-cache
referrer-policy: strict-origin-when-cross-origin
x-pushplatformapp-params:
content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src https://* data:; font-src 'self' data:
x-pushplatformapp-alert: pushPlatformApp.pushSubscription.deleted
x-frame-options: DENY
access-control-expose-headers: Authorization, Link, X-Total-Count
access-control-allow-origin: https://iga.nectarjunkie.com
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-credentials: true
x-content-type-options: nosniff
feature-policy: geolocation 'none'; midi 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; speaker 'none'; fullscreen 'self'; payment 'none'
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FPEV%2FwegZv7UaPBWjg0xKbLdh8rimthBebsh%2F%2BKyq5Y0tyl%2FQ77rRgFWbDosKdEYR2WW3NDtyGWqnpcxG1Wt5eJi1rXSaJ%2FdmTC9lBbvJxONAnYMuMtKrYs%2BrhrCNRIx8XLPuV4ER0WrkA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76fa5c001c9c71ed-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| event.trk-consulatu.com/register/event_log/l8em2zyvgk | 172.64.169.3 | 200 OK | 0 B |
URL HTTP/2event.trk-consulatu.com/register/event_log/l8em2zyvgk IP172.64.169.3:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /register/event_log/l8em2zyvgk HTTP/1.1
Host: event.trk-consulatu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://iga.nectarjunkie.com/
Content-type: application/json
Origin: https://iga.nectarjunkie.com
Content-Length: 180
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 12:24:06 GMT
content-length: 0
expires: 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
x-xss-protection: 1; mode=block
pragma: no-cache
referrer-policy: strict-origin-when-cross-origin
x-pushplatformapp-params:
content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src https://* data:; font-src 'self' data:
x-pushplatformapp-alert: pushPlatformApp.pushSubscription.deleted
x-frame-options: DENY
access-control-expose-headers: Authorization, Link, X-Total-Count
access-control-allow-origin: https://iga.nectarjunkie.com
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-credentials: true
x-content-type-options: nosniff
feature-policy: geolocation 'none'; midi 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; speaker 'none'; fullscreen 'self'; payment 'none'
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Fi28PlABuUryqh6kRfKXNSOFD6ct7%2B55dIro39UsoHicVs4WxbI%2BjDhnAqMi3ke%2BUyga%2FtUvo5tj2A0I5yfSiWQk%2BDep7GW7NzgA7AXq0jSBRT5i1PT6UVtdUqulNGllBllb0vxLG7kBEw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76fa5c004cca71ed-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.formulead.com/t/page | 34.78.252.25 | 200 OK | 2 B |
IP34.78.252.25:0
File typeASCII text, with no line terminators Hashe0aa021e21dddbd6d8cecec71e9cf564 9ce3bd4224c8c1780db56b4125ecf3f24bf748b7 565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
OPTIONS /t/page HTTP/1.1
Host: cdn.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-session-id
Referer: https://iga.nectarjunkie.com/
Origin: https://iga.nectarjunkie.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Fri, 25 Nov 2022 12:24:06 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 2
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: https://iga.nectarjunkie.com
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Expose-Headers: Content-Length
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
Vary: Accept-Encoding
|
|
| cdn.formulead.com/t/validator | 34.78.252.25 | 200 OK | 2 B |
URL HTTP/1.1cdn.formulead.com/t/validator IP34.78.252.25:0
File typeASCII text, with no line terminators Hashe0aa021e21dddbd6d8cecec71e9cf564 9ce3bd4224c8c1780db56b4125ecf3f24bf748b7 565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
OPTIONS /t/validator HTTP/1.1
Host: cdn.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-session-id
Referer: https://iga.nectarjunkie.com/
Origin: https://iga.nectarjunkie.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Fri, 25 Nov 2022 12:24:06 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 2
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: https://iga.nectarjunkie.com
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Expose-Headers: Content-Length
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
Vary: Accept-Encoding
|
|
| cdn.formulead.com/v/recaptcha3?token=03AEkXODAyPZzHnOT_2sQQhPNCJEEw_SZofl3VLam3w4DE0HBZtqjHZ0fI5OmzD4zJ1MpPQEL99Q4X0OvAmXUQPMKX9HxPP3vztTslNizu6tbIATZ3bvcH_GPcQTa-EEmbwY6AQVt5mGOeQNwzZEhPtdEeRTQuLFq1EhzDMNiOk_8boJypOQk3n2TJDf6mc-2PUxGWB5eO-zpFx4mZV_2NDib5HeKDs5TqdQfPPuLAWn-Jr_HydeMUzJw2Okbg3fSvzfTyZ79bHnYg7ctLvUjOfRNU8ngmwnlRXUpQpBhEwav8J55X82n5L41WxSif4PoDP17EsZMEEGyuiwSyhoiXdCziizRo46wnIodEQD7jtRowlwssfmeapRrI7ELyT0aDsu_0yqAhJiHh2GIViNPlurTg8dA816eAH7dXjCYa6O_s3lMFPgQ1GEVmg7HT3qVgoNq6l5iSzdwHdBWmKdtbTLF_NHhdjkmkx1BLnTpy8v_NOo0m9-nrD521eo3X-niEJfioXA642L-CofbICAV_riuVZsGOnjQjQw&step=1 | 34.78.252.25 | 200 OK | 2 B |
URL HTTP/1.1cdn.formulead.com/v/recaptcha3?token=03AEkXODAyPZzHnOT_2sQQhPNCJEEw_SZofl3VLam3w4DE0HBZtqjHZ0fI5OmzD4zJ1MpPQEL99Q4X0OvAmXUQPMKX9HxPP3vztTslNizu6tbIATZ3bvcH_GPcQTa-EEmbwY6AQVt5mGOeQNwzZEhPtdEeRTQuLFq1EhzDMNiOk_8boJypOQk3n2TJDf6mc-2PUxGWB5eO-zpFx4mZV_2NDib5HeKDs5TqdQfPPuLAWn-Jr_HydeMUzJw2Okbg3fSvzfTyZ79bHnYg7ctLvUjOfRNU8ngmwnlRXUpQpBhEwav8J55X82n5L41WxSif4PoDP17EsZMEEGyuiwSyhoiXdCziizRo46wnIodEQD7jtRowlwssfmeapRrI7ELyT0aDsu_0yqAhJiHh2GIViNPlurTg8dA816eAH7dXjCYa6O_s3lMFPgQ1GEVmg7HT3qVgoNq6l5iSzdwHdBWmKdtbTLF_NHhdjkmkx1BLnTpy8v_NOo0m9-nrD521eo3X-niEJfioXA642L-CofbICAV_riuVZsGOnjQjQw&step=1 IP34.78.252.25:0
File typeASCII text, with no line terminators Hashe0aa021e21dddbd6d8cecec71e9cf564 9ce3bd4224c8c1780db56b4125ecf3f24bf748b7 565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
OPTIONS /v/recaptcha3?token=03AEkXODAyPZzHnOT_2sQQhPNCJEEw_SZofl3VLam3w4DE0HBZtqjHZ0fI5OmzD4zJ1MpPQEL99Q4X0OvAmXUQPMKX9HxPP3vztTslNizu6tbIATZ3bvcH_GPcQTa-EEmbwY6AQVt5mGOeQNwzZEhPtdEeRTQuLFq1EhzDMNiOk_8boJypOQk3n2TJDf6mc-2PUxGWB5eO-zpFx4mZV_2NDib5HeKDs5TqdQfPPuLAWn-Jr_HydeMUzJw2Okbg3fSvzfTyZ79bHnYg7ctLvUjOfRNU8ngmwnlRXUpQpBhEwav8J55X82n5L41WxSif4PoDP17EsZMEEGyuiwSyhoiXdCziizRo46wnIodEQD7jtRowlwssfmeapRrI7ELyT0aDsu_0yqAhJiHh2GIViNPlurTg8dA816eAH7dXjCYa6O_s3lMFPgQ1GEVmg7HT3qVgoNq6l5iSzdwHdBWmKdtbTLF_NHhdjkmkx1BLnTpy8v_NOo0m9-nrD521eo3X-niEJfioXA642L-CofbICAV_riuVZsGOnjQjQw&step=1 HTTP/1.1
Host: cdn.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-lead-id
Referer: https://iga.nectarjunkie.com/
Origin: https://iga.nectarjunkie.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Fri, 25 Nov 2022 12:24:06 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 2
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: https://iga.nectarjunkie.com
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Expose-Headers: Content-Length
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
Vary: Accept-Encoding
|
|
| cdn.formulead.com/t/validator | 34.78.252.25 | 200 OK | 16 B |
URL HTTP/1.1cdn.formulead.com/t/validator IP34.78.252.25:0
File typeJSON data\012- , ASCII text, with no line terminators Hash7363e85fe9edee6f053a4b319588c086 a15e2127145548437173fc17f3e980e3f3dee2d0 c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
POST /t/validator HTTP/1.1
Host: cdn.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Session-Id: s:Wlaq_BwAM42zE1jUytLdtmrtRRnvy_0E.Y9xR8HAAihNTyi1+KQV6D9IEEh3UBYvPPJWZ3GvRKxs
Content-Type: application/json
Content-Length: 1854
Origin: https://iga.nectarjunkie.com
Connection: keep-alive
Referer: https://iga.nectarjunkie.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Fri, 25 Nov 2022 12:24:06 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 16
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: https://iga.nectarjunkie.com
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Expose-Headers: Content-Length
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
Pragma: no-cache
Cache-Control: no-cache
ETag: W/"10-oV4hJxRVSENxc/wX8+mA4/Pe4tA"
Vary: Accept-Encoding
|
|
| cdn.formulead.com/v/recaptcha3?token=03AEkXODAyPZzHnOT_2sQQhPNCJEEw_SZofl3VLam3w4DE0HBZtqjHZ0fI5OmzD4zJ1MpPQEL99Q4X0OvAmXUQPMKX9HxPP3vztTslNizu6tbIATZ3bvcH_GPcQTa-EEmbwY6AQVt5mGOeQNwzZEhPtdEeRTQuLFq1EhzDMNiOk_8boJypOQk3n2TJDf6mc-2PUxGWB5eO-zpFx4mZV_2NDib5HeKDs5TqdQfPPuLAWn-Jr_HydeMUzJw2Okbg3fSvzfTyZ79bHnYg7ctLvUjOfRNU8ngmwnlRXUpQpBhEwav8J55X82n5L41WxSif4PoDP17EsZMEEGyuiwSyhoiXdCziizRo46wnIodEQD7jtRowlwssfmeapRrI7ELyT0aDsu_0yqAhJiHh2GIViNPlurTg8dA816eAH7dXjCYa6O_s3lMFPgQ1GEVmg7HT3qVgoNq6l5iSzdwHdBWmKdtbTLF_NHhdjkmkx1BLnTpy8v_NOo0m9-nrD521eo3X-niEJfioXA642L-CofbICAV_riuVZsGOnjQjQw&step=1 | 34.78.252.25 | 200 OK | 167 B |
URL HTTP/1.1cdn.formulead.com/v/recaptcha3?token=03AEkXODAyPZzHnOT_2sQQhPNCJEEw_SZofl3VLam3w4DE0HBZtqjHZ0fI5OmzD4zJ1MpPQEL99Q4X0OvAmXUQPMKX9HxPP3vztTslNizu6tbIATZ3bvcH_GPcQTa-EEmbwY6AQVt5mGOeQNwzZEhPtdEeRTQuLFq1EhzDMNiOk_8boJypOQk3n2TJDf6mc-2PUxGWB5eO-zpFx4mZV_2NDib5HeKDs5TqdQfPPuLAWn-Jr_HydeMUzJw2Okbg3fSvzfTyZ79bHnYg7ctLvUjOfRNU8ngmwnlRXUpQpBhEwav8J55X82n5L41WxSif4PoDP17EsZMEEGyuiwSyhoiXdCziizRo46wnIodEQD7jtRowlwssfmeapRrI7ELyT0aDsu_0yqAhJiHh2GIViNPlurTg8dA816eAH7dXjCYa6O_s3lMFPgQ1GEVmg7HT3qVgoNq6l5iSzdwHdBWmKdtbTLF_NHhdjkmkx1BLnTpy8v_NOo0m9-nrD521eo3X-niEJfioXA642L-CofbICAV_riuVZsGOnjQjQw&step=1 IP34.78.252.25:0
File typeJSON data\012- , ASCII text, with no line terminators Hash34284f958dbfae9a8fca625d4f0008ad 32e6ce4ce25a1befe0e42b3c05161d1e10db9265 7ee639499f3f63d26f065bef33f43ce4e8dd6101842cfcb1c336a71ae21def63
GET /v/recaptcha3?token=03AEkXODAyPZzHnOT_2sQQhPNCJEEw_SZofl3VLam3w4DE0HBZtqjHZ0fI5OmzD4zJ1MpPQEL99Q4X0OvAmXUQPMKX9HxPP3vztTslNizu6tbIATZ3bvcH_GPcQTa-EEmbwY6AQVt5mGOeQNwzZEhPtdEeRTQuLFq1EhzDMNiOk_8boJypOQk3n2TJDf6mc-2PUxGWB5eO-zpFx4mZV_2NDib5HeKDs5TqdQfPPuLAWn-Jr_HydeMUzJw2Okbg3fSvzfTyZ79bHnYg7ctLvUjOfRNU8ngmwnlRXUpQpBhEwav8J55X82n5L41WxSif4PoDP17EsZMEEGyuiwSyhoiXdCziizRo46wnIodEQD7jtRowlwssfmeapRrI7ELyT0aDsu_0yqAhJiHh2GIViNPlurTg8dA816eAH7dXjCYa6O_s3lMFPgQ1GEVmg7HT3qVgoNq6l5iSzdwHdBWmKdtbTLF_NHhdjkmkx1BLnTpy8v_NOo0m9-nrD521eo3X-niEJfioXA642L-CofbICAV_riuVZsGOnjQjQw&step=1 HTTP/1.1
Host: cdn.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Lead-Id: 2f3a9fd74f6770ba73f9956a
Origin: https://iga.nectarjunkie.com
Connection: keep-alive
Referer: https://iga.nectarjunkie.com/
Cookie: plc=6266aa3a12eef6080491b6cf; stp=1; ck_tsp=2022-11-25T12%3A24%3A04.582Z; sip=91.90.42.154
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Fri, 25 Nov 2022 12:24:06 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 167
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: https://iga.nectarjunkie.com
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Expose-Headers: Content-Length
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
Pragma: no-cache
Cache-Control: no-cache
ETag: W/"a7-MubOTOJaG+/g5Cs8BRYdHhDbkmU"
set-cookie: qst.sid=s%3AVfE0_mVH76GXw3gFKRvPnK1JXsN5omLu.WeCcnQ5mgctRtfGaxlbOp0awNaiqCseTvwokQp%2Fb37M; Path=/; HttpOnly
Vary: Accept-Encoding
|
|
| cdn.formulead.com/p/6266aa3a12eef6080491b6cf/feed?sc_domain=iga.nectarjunkie.com&cl_ip=91.90.42.154&qb_placement_id=6266aa3a12eef6080491b6cf&qb_offer_id=58b8199aad94620100c6003f&qb_flow_id=58b8199aad94620100c6003f&qb_vendor_id=570e5c924ce290010026cc24&qb_country=AU&ql_session_id=Wlaq_BwAM42zE1jUytLdtmrtRRnvy_0E&pre=0&p_id=6266aa3a12eef6080491b6cf&aff_code=LDA&request_id=f02422c3193ae7d7ae880c58a3d374de&aff_goal_id=9531&aff_goal_id2=9532&aff_id=1339&aff_version=no_teaser&aff_adv_id=2&aff_offer_id=1953&aff_inc=iga&aff_tt=dp&sc_url=https%3A%2F%2Figa.nectarjunkie.com%2Fcp%2Figa%2Fau%2Findex.html&sc_campaign_page=index.html&sc_campaign_path=%2Fcp%2Figa%2Fau%2F&sc_campaign_domain=https%3A%2F%2Figa.nectarjunkie.com&sc_url_wl=https%3A%2F%2Flp.nectarjunkie.com%2Fcp%2Figa%2Fau%2Findex.html&stp=1&feed_type=full | 34.78.252.25 | 200 OK | 13 kB |
URL HTTP/1.1cdn.formulead.com/p/6266aa3a12eef6080491b6cf/feed?sc_domain=iga.nectarjunkie.com&cl_ip=91.90.42.154&qb_placement_id=6266aa3a12eef6080491b6cf&qb_offer_id=58b8199aad94620100c6003f&qb_flow_id=58b8199aad94620100c6003f&qb_vendor_id=570e5c924ce290010026cc24&qb_country=AU&ql_session_id=Wlaq_BwAM42zE1jUytLdtmrtRRnvy_0E&pre=0&p_id=6266aa3a12eef6080491b6cf&aff_code=LDA&request_id=f02422c3193ae7d7ae880c58a3d374de&aff_goal_id=9531&aff_goal_id2=9532&aff_id=1339&aff_version=no_teaser&aff_adv_id=2&aff_offer_id=1953&aff_inc=iga&aff_tt=dp&sc_url=https%3A%2F%2Figa.nectarjunkie.com%2Fcp%2Figa%2Fau%2Findex.html&sc_campaign_page=index.html&sc_campaign_path=%2Fcp%2Figa%2Fau%2F&sc_campaign_domain=https%3A%2F%2Figa.nectarjunkie.com&sc_url_wl=https%3A%2F%2Flp.nectarjunkie.com%2Fcp%2Figa%2Fau%2Findex.html&stp=1&feed_type=full IP34.78.252.25:0
File typeHTML document, Unicode text, UTF-8 text, with very long lines (65329), with no line terminators Hash3ed42a16f25eff01d6f4aaf256ed02ed 1f4b538e9df78d1164ec2787f190aad91e020398 2a95d22bff88dd0af831a68a09fce04b6f9d112cfac313782f4c13cc1fcfd47d
GET /p/6266aa3a12eef6080491b6cf/feed?sc_domain=iga.nectarjunkie.com&cl_ip=91.90.42.154&qb_placement_id=6266aa3a12eef6080491b6cf&qb_offer_id=58b8199aad94620100c6003f&qb_flow_id=58b8199aad94620100c6003f&qb_vendor_id=570e5c924ce290010026cc24&qb_country=AU&ql_session_id=Wlaq_BwAM42zE1jUytLdtmrtRRnvy_0E&pre=0&p_id=6266aa3a12eef6080491b6cf&aff_code=LDA&request_id=f02422c3193ae7d7ae880c58a3d374de&aff_goal_id=9531&aff_goal_id2=9532&aff_id=1339&aff_version=no_teaser&aff_adv_id=2&aff_offer_id=1953&aff_inc=iga&aff_tt=dp&sc_url=https%3A%2F%2Figa.nectarjunkie.com%2Fcp%2Figa%2Fau%2Findex.html&sc_campaign_page=index.html&sc_campaign_path=%2Fcp%2Figa%2Fau%2F&sc_campaign_domain=https%3A%2F%2Figa.nectarjunkie.com&sc_url_wl=https%3A%2F%2Flp.nectarjunkie.com%2Fcp%2Figa%2Fau%2Findex.html&stp=1&feed_type=full HTTP/1.1
Host: cdn.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Session-Id: s:Wlaq_BwAM42zE1jUytLdtmrtRRnvy_0E.Y9xR8HAAihNTyi1+KQV6D9IEEh3UBYvPPJWZ3GvRKxs
X-Request-Id: 2f3a9fd74f6770ba73f9956a
X-iivmxswc: a6c269615588c101843415c7cd24ac10c78b076cb8c51b1738a83b2022c637bc
Origin: https://iga.nectarjunkie.com
Connection: keep-alive
Referer: https://iga.nectarjunkie.com/
Cookie: plc=6266aa3a12eef6080491b6cf; stp=1; ck_tsp=2022-11-25T12%3A24%3A04.582Z; sip=91.90.42.154
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Fri, 25 Nov 2022 12:24:09 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: https://iga.nectarjunkie.com
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Expose-Headers: Content-Length
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
Pragma: no-cache
Cache-Control: no-cache
Set-Cookie: stp=1; Path=/; Expires=Sun, 24 Nov 2024 12:24:05 GMT; Secure; SameSite=None
ck_tsp=2022-11-25T12%3A24%3A05.492Z; Path=/; Expires=Sun, 24 Nov 2024 12:24:05 GMT; Secure; SameSite=None
sip=91.90.42.154; Path=/; Expires=Sun, 24 Nov 2024 12:24:05 GMT; Secure; SameSite=None
ETag: W/"104f3-7L7zi17Ty6Uy6NqBjD+yup/hBL8"
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| cdn.formulead.com/t/page | 34.78.252.25 | 200 OK | 16 B |
IP34.78.252.25:0
File typeJSON data\012- , ASCII text, with no line terminators Hash7363e85fe9edee6f053a4b319588c086 a15e2127145548437173fc17f3e980e3f3dee2d0 c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
POST /t/page HTTP/1.1
Host: cdn.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Session-Id: s:Wlaq_BwAM42zE1jUytLdtmrtRRnvy_0E.Y9xR8HAAihNTyi1+KQV6D9IEEh3UBYvPPJWZ3GvRKxs
Content-Type: application/json
Content-Length: 146
Origin: https://iga.nectarjunkie.com
Connection: keep-alive
Referer: https://iga.nectarjunkie.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Fri, 25 Nov 2022 12:24:10 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 16
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: https://iga.nectarjunkie.com
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Expose-Headers: Content-Length
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
Pragma: no-cache
Cache-Control: no-cache
ETag: W/"10-oV4hJxRVSENxc/wX8+mA4/Pe4tA"
Vary: Accept-Encoding
|
|
| ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-font-face.min.css?token=0711a5d108 | 172.64.202.28 | 200 OK | 0 B |
URL HTTP/2ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-font-face.min.css?token=0711a5d108 IP172.64.202.28:0
GET /releases/v5.15.4/css/free-v4-font-face.min.css?token=0711a5d108 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://iga.nectarjunkie.com/
Origin: https://iga.nectarjunkie.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 12:24:03 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"f2e0b2680d9b0bcb6e0039c4424e5a59"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 7fcc9354bd594831abf31608fb6cde60.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: IW6AcgLG7imyMhIj-RNUmIbbFiQunzBDA4o0cvpJnwkOWp4r9e4NAw==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=axk%2ByX9R4f52PdYJFaqHGcs%2Fle0KeDTEAh1DNsJMr%2F0wNdVvuHECcsXO6uN3e81pxYqG1jgYQBKGHqJyOWw83iRsoH5V%2F%2B4O48YF1XIq1%2FdIpfh4mUQO0Z%2BihAmuuFLFzY8884WBMw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76fa5beedcba771a-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| st.formulead.com/assets/js/bioep.min.js | 54.230.111.123 | 200 OK | 0 B |
URL HTTP/2st.formulead.com/assets/js/bioep.min.js IP54.230.111.123:0
GET /assets/js/bioep.min.js HTTP/1.1
Host: st.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iga.nectarjunkie.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf8
server: nginx/1.19.0
last-modified: Tue, 20 Sep 2022 15:27:41 GMT
access-control-allow-origin: *
content-encoding: gzip
date: Thu, 24 Nov 2022 12:43:19 GMT
etag: W/"6329dbed-14c4"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dHMkPlAvMPEjCAh5-KfyGZ1xNxbqb22drg--Nw0Qa8zpraWuEZPC4A==
age: 85245
X-Firefox-Spdy: h2
|
|
| st.formulead.com/assets/js/helpers.js | 54.230.111.123 | 200 OK | 0 B |
URL HTTP/2st.formulead.com/assets/js/helpers.js IP54.230.111.123:0
GET /assets/js/helpers.js HTTP/1.1
Host: st.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iga.nectarjunkie.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf8
server: nginx/1.19.0
last-modified: Tue, 20 Sep 2022 15:27:41 GMT
access-control-allow-origin: *
content-encoding: gzip
date: Fri, 25 Nov 2022 12:24:04 GMT
etag: W/"6329dbed-fefc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: u4bbiMrFgAk4CFN0wN22V4GBgVqXFdxEM8uthA9zcZi1jJSATeUwIw==
age: 449
X-Firefox-Spdy: h2
|
|
| iga.nectarjunkie.com/cp/iga/au/index.html?pre=0&p_id=6266aa3a12eef6080491b6cf&_c_id=aff_code:LDA;request_id:f02422c3193ae7d7ae880c58a3d374de;aff_tid:;aff_goal_id:9531;aff_goal_id2:9532;aff_id:1339;aff_version:no_teaser;aff_adv_id:2;aff_offer_id:1953;aff_inc:iga&_c_user=ld_first_name:;ld_last_name:;ld_email:;ld_phone_cell:&_c_loc=ld_zip_code:;ld_city:&_c_dob=ld_dob:&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=dp&aff_ttp=&ch=&request_id=f02422c3193ae7d7ae880c58a3d374de&aff_id=1339 | 104.21.93.118 | 200 OK | 0 B |
URL HTTP/2iga.nectarjunkie.com/cp/iga/au/index.html?pre=0&p_id=6266aa3a12eef6080491b6cf&_c_id=aff_code:LDA;request_id:f02422c3193ae7d7ae880c58a3d374de;aff_tid:;aff_goal_id:9531;aff_goal_id2:9532;aff_id:1339;aff_version:no_teaser;aff_adv_id:2;aff_offer_id:1953;aff_inc:iga&_c_user=ld_first_name:;ld_last_name:;ld_email:;ld_phone_cell:&_c_loc=ld_zip_code:;ld_city:&_c_dob=ld_dob:&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=dp&aff_ttp=&ch=&request_id=f02422c3193ae7d7ae880c58a3d374de&aff_id=1339 IP104.21.93.118:0
GET /cp/iga/au/index.html?pre=0&p_id=6266aa3a12eef6080491b6cf&_c_id=aff_code:LDA;request_id:f02422c3193ae7d7ae880c58a3d374de;aff_tid:;aff_goal_id:9531;aff_goal_id2:9532;aff_id:1339;aff_version:no_teaser;aff_adv_id:2;aff_offer_id:1953;aff_inc:iga&_c_user=ld_first_name:;ld_last_name:;ld_email:;ld_phone_cell:&_c_loc=ld_zip_code:;ld_city:&_c_dob=ld_dob:&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=dp&aff_ttp=&ch=&request_id=f02422c3193ae7d7ae880c58a3d374de&aff_id=1339 HTTP/1.1
Host: iga.nectarjunkie.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Fri, 25 Nov 2022 12:24:03 GMT
content-type: text/html; charset=utf8
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QleC7dSR271LWH2LoZyxtHNNdFsKdGuw1%2BFllokhXDRSXhr4V15anfgnuHpp%2FcfafzrD0GuJbps1OBzIsfoWi1j1XAWxjvcSYlfUBnjLeAyn1ZSfrksQkw9Rm6ATMIIcv0hj4xjSjg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76fa5beb5f1cb51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| kit.fontawesome.com/0711a5d108.js | 104.18.23.52 | 200 OK | 0 B |
URL HTTP/2kit.fontawesome.com/0711a5d108.js IP104.18.23.52:0
GET /0711a5d108.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://iga.nectarjunkie.com
Connection: keep-alive
Referer: https://iga.nectarjunkie.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 12:24:03 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, must-revalidate
strict-transport-security: max-age=31536000; preload
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: FyrTZTTmq8QHCEErHIci
cf-cache-status: MISS
server: cloudflare
cf-ray: 76fa5becd8edb51b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| st.formulead.com/assets/css/recent_winners.css | 54.230.111.123 | 200 OK | 0 B |
URL HTTP/2st.formulead.com/assets/css/recent_winners.css IP54.230.111.123:0
GET /assets/css/recent_winners.css HTTP/1.1
Host: st.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iga.nectarjunkie.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
server: nginx/1.19.0
last-modified: Tue, 20 Sep 2022 15:27:41 GMT
access-control-allow-origin: *
content-encoding: gzip
date: Thu, 24 Nov 2022 12:49:16 GMT
etag: W/"6329dbed-461"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QBhd80x00CD0Sg09QOgjDhwT4HU5X8D4drAz6Tr8gRzl9xMx8JQd0Q==
age: 84888
X-Firefox-Spdy: h2
|
|
| st.formulead.com/assets/img/spinner/puff.svg | 54.230.111.123 | 200 OK | 0 B |
URL HTTP/2st.formulead.com/assets/img/spinner/puff.svg IP54.230.111.123:0
GET /assets/img/spinner/puff.svg HTTP/1.1
Host: st.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://iga.nectarjunkie.com
Connection: keep-alive
Referer: https://iga.nectarjunkie.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
server: nginx/1.19.0
last-modified: Tue, 20 Sep 2022 15:27:41 GMT
access-control-allow-origin: *
content-encoding: gzip
date: Fri, 25 Nov 2022 00:15:58 GMT
etag: W/"6329dbed-5b4"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: P59-sWTt6DF2CmY9pl_-wuuHnMh_4ad7uj1HCDIpyDWW-xmol-oGxA==
age: 43685
X-Firefox-Spdy: h2
|
|