ouo.press/79eehvq
403 Forbidden 3.8 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (836)
Hash b3d8d6d22a9ba56215d2ced440ab5608
84c95c4066e0af9e2d063f2e25954932bf740ffb
780321be06bc925b02c775ca0870df0a8df311f34e8708c80787046cc8c01cd8
GET /79eehvq HTTP/1.1
Host: ouo.press
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 403 Forbidden
Date: Sat, 26 Nov 2022 06:47:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
CF-Chl-Bypass: 1
Referrer-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),fullscreen=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Frame-Options: SAMEORIGIN
Set-Cookie: __cf_bm=1FGbP9dXzxZRnAbs3Ypq7mAuiOeroRqkFMPEG9QOYW8-1669445255-0-AczPWMZMH9agtuZU5bAcFWqv+6DWmHfvWneT4oPM8h7UBcQparJU/w1ojuVm6jklDKFav0Rvz6sEvJSjC2bODLM=; path=/; expires=Sat, 26-Nov-22 07:17:35 GMT; domain=.ouo.press; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7700ac6e9ba7b51b-OSL
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7c60904d097cde276e4e5632cef1b9f1
4f805026462589345d85e8df2d18eafba6237504
12af026999398f4976749e320667d43da3f99b7a2e8254aca7a410a964a106aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "12AF026999398F4976749E320667D43DA3F99B7A2E8254ACA7A410A964A106AA"
Last-Modified: Thu, 24 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4302
Expires: Sat, 26 Nov 2022 07:59:17 GMT
Date: Sat, 26 Nov 2022 06:47:35 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 10730f388c028d64e19b8a48d414768f
e43b104e57e5ea7ff8568835776858cf2ede6f00
f3c30c6d139288f1bfe13fce85c6ddc1514e1639fcf4d31a6012a3309ed1d50d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2590
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:47:35 GMT
Last-Modified: Sat, 26 Nov 2022 06:04:25 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 26 Nov 2022 06:17:30 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1805
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8c63b226725ca6e92e3ef586ac19e603
d21ae42a1927501e5293ff3564f52b49f6b0decc
141ac47acc3800e5d35a82012fa4b044277abad3a95dc24415f66fb72c972ae6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "141AC47ACC3800E5D35A82012FA4B044277ABAD3A95DC24415F66FB72C972AE6"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11967
Expires: Sat, 26 Nov 2022 10:07:02 GMT
Date: Sat, 26 Nov 2022 06:47:35 GMT
Connection: keep-alive
ouo.press/cdn-cgi/styles/challenges.css
200 OK 2.6 kB URL HTTP/1.1 ouo.press/cdn-cgi/styles/challenges.css
IP
File type ASCII text, with very long lines (6294), with no line terminators
Hash ba2d8534d208d2a5b158507e004d7150
ab81307634698ea304a68783fa38937f562009a2
63b366fdbfea7cbec639f9a5f24714a831e171570625def9462d724b5c8fdc59
GET /cdn-cgi/styles/challenges.css HTTP/1.1
Host: ouo.press
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ouo.press/79eehvq
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 06:47:35 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 22 Nov 2022 13:34:50 GMT
ETag: W/"637ccffa-1896"
Server: cloudflare
CF-RAY: 7700ac70ca9cb4f4-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Sat, 26 Nov 2022 08:47:35 GMT
Cache-Control: max-age=7200, public
Content-Encoding: gzip
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: pEiwHGXKppIgbkpO/iVbl3iETUpoW+oaxVRGRZdukyLFZ4wP7l9/8chCkoHJ36IT5e7ViA3XDcU=
x-amz-request-id: HZC8E0Q24JG0F02V
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 26 Nov 2022 06:41:06 GMT
age: 389
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ouo.press/favicon.ico
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: ouo.press
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ouo.press/79eehvq
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 06:47:35 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
Last-Modified: Sat, 14 Feb 2015 06:41:24 GMT
ETag: "54deee14-0"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=86400
CF-Cache-Status: HIT
Age: 4478
Accept-Ranges: bytes
Set-Cookie: __cf_bm=Y5w1HaOyqBeUkg0uUbtytkrKpfy7_taYrcf2eJdokwk-1669445255-0-AcG7jObGw7UzDbkKnbMnewmUtNMsrADEOMcZ01uRTb9Q4QSpKnFpPaK8kQr9gxdpgDg0vbuKQthdzho37dgtbS0=; path=/; expires=Sat, 26-Nov-22 07:17:35 GMT; domain=.ouo.press; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7700ac70ddd1b524-OSL
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 06:47:35 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ouo.press/cdn-cgi/images/trace/managed/js/transparent.gif?ray=7700ac6e9ba7b51b
200 OK 42 B URL HTTP/1.1 ouo.press/cdn-cgi/images/trace/managed/js/transparent.gif?ray=7700ac6e9ba7b51b
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /cdn-cgi/images/trace/managed/js/transparent.gif?ray=7700ac6e9ba7b51b HTTP/1.1
Host: ouo.press
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ouo.press/79eehvq
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 06:47:35 GMT
Content-Type: image/gif
Content-Length: 42
Connection: keep-alive
Last-Modified: Tue, 22 Nov 2022 13:34:50 GMT
ETag: "637ccffa-2a"
Server: cloudflare
CF-RAY: 7700ac716aefb4f4-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Sat, 26 Nov 2022 08:47:35 GMT
Cache-Control: max-age=7200, public
Accept-Ranges: bytes
ouo.press/cdn-cgi/challenge-platform/h/b/orchestrate/managed/v1?ray=7700ac6e9ba7b51b
200 OK 24 kB URL HTTP/1.1 ouo.press/cdn-cgi/challenge-platform/h/b/orchestrate/managed/v1?ray=7700ac6e9ba7b51b
IP
File type ASCII text, with very long lines (54896), with no line terminators
Hash 283919f07d226413007f9a7c4de4acc7
5466a4f5bf0336d7287f721b20357721351b264a
420dc44643c5a1644096ab02015c812593da34e3a4f98cbbf4db5f55c08c4844
GET /cdn-cgi/challenge-platform/h/b/orchestrate/managed/v1?ray=7700ac6e9ba7b51b HTTP/1.1
Host: ouo.press
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ouo.press/79eehvq?__cf_chl_rt_tk=8ElyxIedC2..XDPEZU1.DUt.zxPAuBwtKUizvHoJido-1669445255-0-gaNycGzNAv0
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 06:47:35 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: max-age=0, must-revalidate
Set-Cookie: __cf_bm=ChHEzqFjT.vkfB_479n_OeF5JiiblE1dJIG29zude4w-1669445255-0-ATtFAA4V3/i1Idy237VtxIVuwnTLvjrFnokcsR6cNndHydvqVuyksHd1oRygn1rKqWQiToZB/kUG8LYzHd8ywvc=; path=/; expires=Sat, 26-Nov-22 07:17:35 GMT; domain=.ouo.press; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 7700ac716e17b524-OSL
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 280 B IP
Hash fd601c130b7b4f59f3890fe0ce52ef6f
6393ef7f5cdc741f3bc0ba014fa626016c2cae08
3fa05de238618cda74ba856cf248988de73b0933fa7a61f8dfaba523e01ec086
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4286
Cache-Control: max-age=104837
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:47:35 GMT
Etag: "63809c4e-118"
Expires: Sun, 27 Nov 2022 11:54:52 GMT
Last-Modified: Fri, 25 Nov 2022 10:43:26 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 280
ouo.press/cdn-cgi/challenge-platform/h/b/flow/ov1/0.6251977164123053:1669442811:32EMcs1fiK1CJlGb8hywJVFqs4tWF6U9mOpOWP6HNeg/7700ac6e9ba7b51b/4b5ab9007077f48
200 OK 56 kB URL HTTP/1.1 ouo.press/cdn-cgi/challenge-platform/h/b/flow/ov1/0.6251977164123053:1669442811:32EMcs1fiK1CJlGb8hywJVFqs4tWF6U9mOpOWP6HNeg/7700ac6e9ba7b51b/4b5ab9007077f48
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash fff05c1fd831d23767416c8a13a3355b
5a2b2b6ea4dbf016a8af04531d07d7cffaa98a44
101fb715d3a8d2d8b2a56544dfaacd980f4a8267464fd439f38c37d99898f182
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/0.6251977164123053:1669442811:32EMcs1fiK1CJlGb8hywJVFqs4tWF6U9mOpOWP6HNeg/7700ac6e9ba7b51b/4b5ab9007077f48 HTTP/1.1
Host: ouo.press
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ouo.press/79eehvq
Content-type: application/x-www-form-urlencoded
CF-Challenge: 4b5ab9007077f48
Content-Length: 1804
Origin: http://ouo.press
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 06:47:36 GMT
Content-Type: text/plain; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cf_chl_gen: B+Tgah++ttl4uxgWn55/x53FPUwWatJqyGejhM/8iQ79VO84PREIezl8VAkJxBWLPVUreOphdk+SIj8LKNsgGDxRVqkqgKLuJuG++kEXwCvQC1HCiOFZLIfFM2sexzM8z9fMsMP7W1z9E0jtO/putFQGR9mRMG6wCCZ8ODlo9pvXENgJ8IfjhpEirdOpBp60p841g7wM74n2594YvzEK8z42DsJ5TrTJT71e9SHI6r1nCUzjbUOPUrgf4/o+vjiZlW4fg84aKIK77p8vs5WJoz7Qax64s/A51He/nZMkN4FZN8MMFbft43gK6kJ8NrU9HZRsvTEqF3kctBxceQU1VUXKJgRDzuqs/+8r1cCpcP8=$C+9uDg8XT44eEt0txvQU7A==
Set-Cookie: __cf_bm=gCbEVjjh9hr9Ep2UbzdYaVA6Uuds3.ICb1qAcEkUt_E-1669445256-0-AdYQP7zWGRezDrIm4XBPGv8KqUvIYKEBZ1CLCegzvOYSdRnxSycNNK5fjkDBZWC+NMPMhD0/Ddvab9DmtVN2Ooc=; path=/; expires=Sat, 26-Nov-22 07:17:36 GMT; domain=.ouo.press; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 7700ac727ed1b524-OSL
Content-Encoding: gzip
ouo.press/cdn-cgi/challenge-platform/h/b/img/7700ac6e9ba7b51b/1669445256083/bgSY-xjyPwZspil
200 OK 61 B URL HTTP/1.1 ouo.press/cdn-cgi/challenge-platform/h/b/img/7700ac6e9ba7b51b/1669445256083/bgSY-xjyPwZspil
IP
File type PNG image data, 5 x 40, 8-bit/color RGB, non-interlaced\012- data
Hash d07b4850e31d0b958ebe4373fd0928de
a3d0a01c791fe6d8ee60fa3a98ca8dc998cf0a4c
afb45ba0fe7bde13ca6b9f43a8da7ed7dc97766a5a30273c2dbda5179f99bb93
GET /cdn-cgi/challenge-platform/h/b/img/7700ac6e9ba7b51b/1669445256083/bgSY-xjyPwZspil HTTP/1.1
Host: ouo.press
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ouo.press/79eehvq
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 06:47:36 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cf_bm=2nLWjwn3HjTUeDmIHuqPpUwObflpg1ZINVtDPglq3hA-1669445256-0-AZyr/PLhzgFm/JGsboEtW658BL05VAm0JJF39fJw6+NO39uPOpdZvY94UBMj5W0lecPuHdJwtPB1+G6FQghvlkU=; path=/; expires=Sat, 26-Nov-22 07:17:36 GMT; domain=.ouo.press; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 7700ac732f66b524-OSL
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 26 Nov 2022 06:08:54 GMT
cache-control: public,max-age=3600
age: 2322
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash df06e70fc8a35facf1d8db463d18e231
fa8a2975566cc792898f870e48ae7518d3657326
4cef7e704f4d575ce6733f6f2d803d241b597be51ff3fb03f72e5c33a893b504
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2058
Cache-Control: max-age=96813
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:47:36 GMT
Etag: "638085ab-1d7"
Expires: Sun, 27 Nov 2022 09:41:09 GMT
Last-Modified: Fri, 25 Nov 2022 09:06:51 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: DaPT2pcKrBqTBUWHzj1CrA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 14uuWfUF7ZRz8hu+YCvSmYPhYLA=
ouo.press/cdn-cgi/challenge-platform/h/b/flow/ov1/0.6251977164123053:1669442811:32EMcs1fiK1CJlGb8hywJVFqs4tWF6U9mOpOWP6HNeg/7700ac6e9ba7b51b/4b5ab9007077f48
200 OK 3.9 kB URL HTTP/1.1 ouo.press/cdn-cgi/challenge-platform/h/b/flow/ov1/0.6251977164123053:1669442811:32EMcs1fiK1CJlGb8hywJVFqs4tWF6U9mOpOWP6HNeg/7700ac6e9ba7b51b/4b5ab9007077f48
IP
File type ASCII text, with very long lines (5196), with no line terminators
Hash fdc4e41b876fce245aa9c90a1e447ea4
d28dae29b8ed209ecbcc36b6b4a51e795490b0be
30c0026fc87ceb6835ef0ecb9c70e93bc71d6fa9e4f9f36b94c08ec0d55f4688
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/0.6251977164123053:1669442811:32EMcs1fiK1CJlGb8hywJVFqs4tWF6U9mOpOWP6HNeg/7700ac6e9ba7b51b/4b5ab9007077f48 HTTP/1.1
Host: ouo.press
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ouo.press/79eehvq
Content-type: application/x-www-form-urlencoded
CF-Challenge: 4b5ab9007077f48
Content-Length: 15623
Origin: http://ouo.press
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 06:47:37 GMT
Content-Type: text/plain; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cf_chl_gen: PSafFVluvJxmy0viVB9BQ+ZzYqfY4S/Tccse65B1yow=$cubpdi1ywiVXYwjvnnbrmw==
Set-Cookie: __cf_bm=jGZUgH.NejVDZ.GCRvdD65yOl6nkbnCRQEeIXuYeYpE-1669445257-0-AW0uYRpyzLnnFTtBIDmeelXsJUd/FX2hImIo9xvu8qnj/HaA/hXUFMssEE0/2jvHgA3XM6pAaUK5jL/8lGyDLMs=; path=/; expires=Sat, 26-Nov-22 07:17:37 GMT; domain=.ouo.press; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 7700ac7b7dcdb524-OSL
Content-Encoding: gzip
challenges.cloudflare.com/turnstile/v0/api.js?onload=_cf_chl_turnstile_l&render=explicit
302 Found 0 B URL HTTP/2 challenges.cloudflare.com/turnstile/v0/api.js?onload=_cf_chl_turnstile_l&render=explicit
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /turnstile/v0/api.js?onload=_cf_chl_turnstile_l&render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sat, 26 Nov 2022 06:47:37 GMT
content-length: 0
location: /turnstile/v0/75e640aa/api.js?onload=_cf_chl_turnstile_l&render=explicit
cache-control: max-age: 300
vary: Accept-Encoding
server: cloudflare
cf-ray: 7700ac7bcf3cfab4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6918
Expires: Sat, 26 Nov 2022 08:42:55 GMT
Date: Sat, 26 Nov 2022 06:47:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6918
Expires: Sat, 26 Nov 2022 08:42:55 GMT
Date: Sat, 26 Nov 2022 06:47:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6918
Expires: Sat, 26 Nov 2022 08:42:55 GMT
Date: Sat, 26 Nov 2022 06:47:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6918
Expires: Sat, 26 Nov 2022 08:42:55 GMT
Date: Sat, 26 Nov 2022 06:47:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6918
Expires: Sat, 26 Nov 2022 08:42:55 GMT
Date: Sat, 26 Nov 2022 06:47:37 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc537c2d0-d011-4ed0-a5d4-5f5d2190c49b.webp
200 OK 67 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc537c2d0-d011-4ed0-a5d4-5f5d2190c49b.webp
IP
Hash 3493dc46201d30f55926020872a79a1e
dcff033975d2fbd2fee7710884e6b9587421d864
7637f165ecced8372b8e0d332cbc2d0be284c9cf0d59f32550c7cd0411757f3a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc537c2d0-d011-4ed0-a5d4-5f5d2190c49b.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4366
x-amzn-requestid: ce25f5ab-0c92-431e-ae4e-618829594a74
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVNZFjHoAMFXLg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813588-6a3a8dff70e717011e3a0606;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:37:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 75AMMfa7oq0Y51YPEC_FEDOoNVc9cgfjg9bOSOXwikONPdhW7OG3uQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:48:10 GMT
age: 32367
etag: "8665e5f3026f2c2b9505eb139c478f4d359851c3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6c125eba-03aa-443e-b99e-10c7890258e8.webp
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6c125eba-03aa-443e-b99e-10c7890258e8.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 95101ded0fe92a85649a086992948008
afed98649590f2524a9e530c53eebbc1ba36da6a
7f754cb2105494045efe657c47313e77bb26361ca45a6f8cbce1fdb52a15ba01
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6c125eba-03aa-443e-b99e-10c7890258e8.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9787
x-amzn-requestid: 51d9848a-868c-4e51-b1a8-30596d0108b6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLUfxHjToAMFeGA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813464-749244df2aa06b23445d675c;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:32:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: mSCEUQ3aOXg6rxJV0iWPgFZ6TE2pCucWwOI3KAsdbu_EadcDDa5vwg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:07:47 GMT
age: 31190
etag: "afed98649590f2524a9e530c53eebbc1ba36da6a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 841a4b110022a99ddea6f7bf66df0fa1
126771b86638108050cf57c0d12faa27f80f0edb
240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: 47c2739d-73c5-4d91-914c-fe635cb09772
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1U8xGxgIAMF-qQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63786851-6fbe19dc5c4c20dd657604e3;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 05:23:29 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ezHvyK3va4SioabOjSittTiLQRs_Q8k4TPxkiGp_svtZ8omDPTUN-A==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 05:04:28 GMT
age: 6190
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b25450-4da4-45fe-97c4-620a26a2ac8f.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b25450-4da4-45fe-97c4-620a26a2ac8f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2f470fab0957e148a9c58dfeedc72463
2f88534696701cfdaf7e2aa78f6d4b8766a2b77f
c2c5617f8fbf3860578a9bcf821dea13e3225ccd02774f29f4bf022e4abd9ff9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b25450-4da4-45fe-97c4-620a26a2ac8f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11186
x-amzn-requestid: 67dbfbd2-ba7f-4540-8d2c-5c2c4de21cae
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLUf7HGdIAMFhow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813465-36b0d8fc4bdb5faf328bd99d;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:32:21 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: aWg_mLQcRYtCNYfaypt-rqwKNbzd4FOFd3mMT8sSQU_dmO7KP29Rsw==
via: 1.1 7b00c3fd9220034414107b03e53b1b8e.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:01:51 GMT
age: 31547
etag: "2f88534696701cfdaf7e2aa78f6d4b8766a2b77f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf04cc9f-ee4b-42fd-914f-cd86b9dc30eb.jpeg
200 OK 3.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf04cc9f-ee4b-42fd-914f-cd86b9dc30eb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a783df85f30f9c555f9df6b99f61744d
61f9bed607e81606be78285596acdc5e0e4f4994
19db42201d0fa059f680d890ede6683c04e893e6308a2256d0203f826a7f34de
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf04cc9f-ee4b-42fd-914f-cd86b9dc30eb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3502
x-amzn-requestid: ca3f2610-e03c-48a7-abb3-fbbab76f63d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCvYUHO5IAMFqDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637dc5ce-7e36137711dc4668278c1c94;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 07:03:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QS3ZKYetcm87GNwSr34eRPF2d4r8ppwf3fT19aV-u84f7ObX4bU8wQ==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 08:20:28 GMT
age: 80830
etag: "61f9bed607e81606be78285596acdc5e0e4f4994"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab1c6bf9-39a7-42ca-a718-a572401add09.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab1c6bf9-39a7-42ca-a718-a572401add09.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b72976b3f013ace345c85b0bdfea5f76
3e9004d90ed72f3034eae5cddd476eb50ac63ea6
068a487b9ae3d7461ef16e04cee8802a7b76a2bce19bf66df48b2b1cdb0c772c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab1c6bf9-39a7-42ca-a718-a572401add09.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6382
x-amzn-requestid: e1e4c180-7f90-4d4b-a5f4-094e5f542a18
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLacUFC4oAMFayA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813de8-09efee9d0604d16c61e3d452;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 22:12:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: SR2His1pCOwZHi7bBtnG8QeCtZQsCMeJxs-UCpd79SK_77eM5fWeog==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:24:51 GMT
age: 30167
etag: "3e9004d90ed72f3034eae5cddd476eb50ac63ea6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ouo.press/cdn-cgi/challenge-platform/h/b/flow/ov1/0.6251977164123053:1669442811:32EMcs1fiK1CJlGb8hywJVFqs4tWF6U9mOpOWP6HNeg/7700ac6e9ba7b51b/4b5ab9007077f48
200 OK 2.1 kB URL HTTP/1.1 ouo.press/cdn-cgi/challenge-platform/h/b/flow/ov1/0.6251977164123053:1669442811:32EMcs1fiK1CJlGb8hywJVFqs4tWF6U9mOpOWP6HNeg/7700ac6e9ba7b51b/4b5ab9007077f48
IP
File type ASCII text, with very long lines (2712), with no line terminators
Hash b753fdbcc370769a17f7061997aead7e
78c7793f458b6cd30129716ca4565e43059b0988
40c37ef6ee11e757122d31b351181d34830252a2e3cd05d37bec8c363722830c
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/0.6251977164123053:1669442811:32EMcs1fiK1CJlGb8hywJVFqs4tWF6U9mOpOWP6HNeg/7700ac6e9ba7b51b/4b5ab9007077f48 HTTP/1.1
Host: ouo.press
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ouo.press/79eehvq
Content-type: application/x-www-form-urlencoded
CF-Challenge: 4b5ab9007077f48
Content-Length: 16320
Origin: http://ouo.press
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 06:47:39 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cf_chl_out: JrLi8jDxbs/bxIg5UB1EeJjNA0eV8jYFI8SepLccL1aEtfs2YkhgWNiu25z6TX/ByjgO7NjfHl/mFmC78GoXSg==$5PjATYPKWf13rIu80uE8qA==
cf_chl_out_s: rmg4QvlIbwWCbCqZ/jf6LPrzpeaK+MZeOCL0xJ+J9DKPOg2P6DdNW/MATtW8oNISNZUSooeNbXWZpzJ90hZccCb6Tb8HRkosxPcHLbpvYLn/vEAk8+xH4rYE6f7AmfvoGpIog4CBkvCFleXSNVwQmZYoDeHlDr0TWgWnDRMU1XY9sEtO8a8BJfesgY1red/Y$lcUh9vnvKl4Y4PXmpwoTvQ==
set-cookie: cf_chl_rc_m=;Expires=Fri, 25 Nov 2022 06:47:39 GMT;SameSite=Strict
__cf_bm=xt1o3qbeh.RWBRweMSE8lsvsXL4LJSBPFfpbo0UAhHk-1669445259-0-AVM9jSA3o4qj9zLURjxuDl3f2yeBgQqpqoBVy1HiU2po9Famz6DWdOXl+HmisgQQaYrihyR9GpKOegJ2nZ61gdo=; path=/; expires=Sat, 26-Nov-22 07:17:39 GMT; domain=.ouo.press; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 7700ac83bb20b524-OSL
Content-Encoding: gzip
ouo.press/79eehvq
200 OK 3.5 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1938)
Hash e5968f75c3d6dfe7e9a45c8b6fc823d5
d7777f9029620f1d0ad2bf668bd8795d3f66fd77
fb0a4c0633ad255906c0dbabaaf27d928a69124e484a808b91d7beec6cb1688c
POST /79eehvq HTTP/1.1
Host: ouo.press
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ouo.press/79eehvq?__cf_chl_tk=8ElyxIedC2..XDPEZU1.DUt.zxPAuBwtKUizvHoJido-1669445255-0-gaNycGzNAv0
Content-Type: application/x-www-form-urlencoded
Content-Length: 1762
Origin: http://ouo.press
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 06:47:39 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
CF-Cache-Status: DYNAMIC
Set-Cookie: cf_clearance=IZwj3.3DI6Amlw2u_jGIX2vXzT4gmXe3LzHN8lT0GfM-1669445259-0-250; path=/; expires=Sun, 26-Nov-23 06:47:39 GMT; domain=.ouo.press; HttpOnly
ouoio_session=eyJpdiI6IjBHWjdkUHNhc0hmSTdlMHpKVU4xNnJtRkEyaUYybzhwTFVKcTUxb0NRVnM9IiwidmFsdWUiOiJtcUVBXC9RcTNRNytVdTBZcWJNUG95cGluQ21tRWN1TG1QeVV2SmM2eDB4NThURThQR2NoeFFrNWlDZ2dYSmpqMStPM3VMaWNoTjBOeEFIaG04Y1AzakE9PSIsIm1hYyI6ImIwMmU2NmVjNTQ0NGY5MzNhZWE1YjMxMTdkMDM0OGY3ZmVhMjE5Y2IwM2I0MWUwNzJmZDA1NzNmMjQ3Y2ViYTkifQ%3D%3D; path=/; httponly
language=eyJpdiI6Im1OZFRETWZSVDcyN1Y3cVdnOUx5ZVJ3TVk3c0U3YlNRa2thRlMrNUNybEk9IiwidmFsdWUiOiJlNVdcL2c2QWJvN282Z3Z0V2ZvanhMeURCWjBPZkpnZWtkdERkV3g5Vml6VT0iLCJtYWMiOiI4ZmNhNTQ4NTMyYzhmYjBiMDlhMzA0OWViYzFjN2M1YjNkMTJlMGJkNWUzMDgwNjMwZDk1MjU4ZjM1NTcyYzJjIn0%3D; expires=Thu, 25-Nov-2027 06:47:39 GMT; Max-Age=157680000; path=/; httponly
305f61b8ff702d336aa1616f45c07ffde50d12d7=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%3D; expires=Sat, 26-Nov-2022 08:47:39 GMT; Max-Age=7200; path=/; httponly
__cf_bm=Hiz2doihLq.sLo4a5et67LjyOwPxcC0Q8_KZFAiOC6I-1669445259-0-AdFaJjfFnj1ADcQb7fACKMuxb+LTyYw6x9ruPN7SqIoQnHQlJXKN8Oq3FcZS8BXqNKuWCzhnBLDow0EAKdIBcgI=; path=/; expires=Sat, 26-Nov-22 07:17:39 GMT; domain=.ouo.press; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 7700ac853c09b524-OSL
Content-Encoding: gzip
ouo.press/css/link-safe.css
200 OK 1.8 kB URL HTTP/1.1 ouo.press/css/link-safe.css
IP
Hash d91a45478adaa488ef4f1733dfa3c44c
3686ea901ce8ca85bb82f42bf0a8d39095ebf73d
4bb66b15dd5791ec4c9867c3a89ee2ef9bdb5f0bbd0d442a1fbfe2c34e9bc86b
GET /css/link-safe.css HTTP/1.1
Host: ouo.press
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/79eehvq
Cookie: cf_clearance=IZwj3.3DI6Amlw2u_jGIX2vXzT4gmXe3LzHN8lT0GfM-1669445259-0-250; ouoio_session=eyJpdiI6IjBHWjdkUHNhc0hmSTdlMHpKVU4xNnJtRkEyaUYybzhwTFVKcTUxb0NRVnM9IiwidmFsdWUiOiJtcUVBXC9RcTNRNytVdTBZcWJNUG95cGluQ21tRWN1TG1QeVV2SmM2eDB4NThURThQR2NoeFFrNWlDZ2dYSmpqMStPM3VMaWNoTjBOeEFIaG04Y1AzakE9PSIsIm1hYyI6ImIwMmU2NmVjNTQ0NGY5MzNhZWE1YjMxMTdkMDM0OGY3ZmVhMjE5Y2IwM2I0MWUwNzJmZDA1NzNmMjQ3Y2ViYTkifQ%3D%3D; language=eyJpdiI6Im1OZFRETWZSVDcyN1Y3cVdnOUx5ZVJ3TVk3c0U3YlNRa2thRlMrNUNybEk9IiwidmFsdWUiOiJlNVdcL2c2QWJvN282Z3Z0V2ZvanhMeURCWjBPZkpnZWtkdERkV3g5Vml6VT0iLCJtYWMiOiI4ZmNhNTQ4NTMyYzhmYjBiMDlhMzA0OWViYzFjN2M1YjNkMTJlMGJkNWUzMDgwNjMwZDk1MjU4ZjM1NTcyYzJjIn0%3D; 305f61b8ff702d336aa1616f45c07ffde50d12d7=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%3D
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 06:47:39 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=86400
Cf-Bgj: minify
Cf-Polished: status=cannot_optimize
ETag: W/"5d951ace-1830"
Expires: Sat, 26 Nov 2022 13:14:43 GMT
Last-Modified: Wed, 02 Oct 2019 21:46:54 GMT
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
CF-Cache-Status: HIT
Age: 19976
Set-Cookie: __cf_bm=2vcBG.6fFtwj9KakV3RDm7I5FKFFPTNnq4gWjpEewFg-1669445259-0-AYuYCe/8b8EgsmEYrpXqV0cNVFGkoDBuEN1yG695bJ8hgAXW11uAqAKxb0h3mL6LtLrtbSUKyD/DP4frOER70NU=; path=/; expires=Sat, 26-Nov-22 07:17:39 GMT; domain=.ouo.press; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7700ac87d9e3b4f4-OSL
Content-Encoding: gzip
ouo.press/css/bootstrap.css
200 OK 18 kB URL HTTP/1.1 ouo.press/css/bootstrap.css
IP
File type ASCII text, with very long lines (65452)
Hash ecd7a3b8fdf856cece681f760bad623c
3c16d8b0523e3c6de3b20f7c7f9de2ae48a2949a
40f5215bfeb4c595389b7d02127c47c94e173dbca21022c9f67eca101d03ab92
GET /css/bootstrap.css HTTP/1.1
Host: ouo.press
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/79eehvq
Cookie: cf_clearance=IZwj3.3DI6Amlw2u_jGIX2vXzT4gmXe3LzHN8lT0GfM-1669445259-0-250; ouoio_session=eyJpdiI6IjBHWjdkUHNhc0hmSTdlMHpKVU4xNnJtRkEyaUYybzhwTFVKcTUxb0NRVnM9IiwidmFsdWUiOiJtcUVBXC9RcTNRNytVdTBZcWJNUG95cGluQ21tRWN1TG1QeVV2SmM2eDB4NThURThQR2NoeFFrNWlDZ2dYSmpqMStPM3VMaWNoTjBOeEFIaG04Y1AzakE9PSIsIm1hYyI6ImIwMmU2NmVjNTQ0NGY5MzNhZWE1YjMxMTdkMDM0OGY3ZmVhMjE5Y2IwM2I0MWUwNzJmZDA1NzNmMjQ3Y2ViYTkifQ%3D%3D; language=eyJpdiI6Im1OZFRETWZSVDcyN1Y3cVdnOUx5ZVJ3TVk3c0U3YlNRa2thRlMrNUNybEk9IiwidmFsdWUiOiJlNVdcL2c2QWJvN282Z3Z0V2ZvanhMeURCWjBPZkpnZWtkdERkV3g5Vml6VT0iLCJtYWMiOiI4ZmNhNTQ4NTMyYzhmYjBiMDlhMzA0OWViYzFjN2M1YjNkMTJlMGJkNWUzMDgwNjMwZDk1MjU4ZjM1NTcyYzJjIn0%3D; 305f61b8ff702d336aa1616f45c07ffde50d12d7=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%3D
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 06:47:39 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=86400
Cf-Bgj: minify
Cf-Polished: origSize=109522
ETag: W/"54def1fc-1abd2"
Expires: Sat, 26 Nov 2022 10:27:59 GMT
Last-Modified: Sat, 14 Feb 2015 06:58:04 GMT
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
CF-Cache-Status: HIT
Age: 29980
Set-Cookie: __cf_bm=Rfv0j8uDzuc4IGkuu0_1eOagCp80zlnwKHTqNzLb3ZA-1669445259-0-ASy95xO/ZQ89X33yFt71FtNs/+Qbfu/hDJ09+iSzK51fHN2ZWnCJMuexTsWmyE4TD1ZJGUd4CGbd4qizNRCGveQ=; path=/; expires=Sat, 26-Nov-22 07:17:39 GMT; domain=.ouo.press; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7700ac87ddaab524-OSL
Content-Encoding: gzip
hhklc.com/c.js
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.js HTTP/1.1
Host: hhklc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/
HTTP/1.1 301 Moved Permanently
Date: Sat, 26 Nov 2022 06:47:39 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 26 Nov 2022 07:47:39 GMT
Location: https://hhklc.com/c.js
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r5cgd%2BVDDOIZQsUg2CEOBpc8Ad%2BdRC%2FUgsDgokGT%2BL7VjwnjMsc9dOuZUw4%2BO8LghAYXN2509Op6Jdv2uMCO31MwlP8n3wH1Jkjta8dgdIbNTCzu7zFgsdvtJZo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7700ac87e9b1b527-OSL
alt-svc: h2=":443"; ma=60
ouo.press/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
200 OK 31 kB URL HTTP/1.1 ouo.press/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP
Hash 3f93052f7684ddcfa96d5f67146ea0f9
ac1b941f5f81e0bb7e9e63afb39b8d62063b3b90
05e293b306ceb255e2d17dcbeaf3389b4bfb84e20e863f128c9d02040d9ee7e4
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: ouo.press
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/79eehvq
Cookie: cf_clearance=IZwj3.3DI6Amlw2u_jGIX2vXzT4gmXe3LzHN8lT0GfM-1669445259-0-250; ouoio_session=eyJpdiI6IjBHWjdkUHNhc0hmSTdlMHpKVU4xNnJtRkEyaUYybzhwTFVKcTUxb0NRVnM9IiwidmFsdWUiOiJtcUVBXC9RcTNRNytVdTBZcWJNUG95cGluQ21tRWN1TG1QeVV2SmM2eDB4NThURThQR2NoeFFrNWlDZ2dYSmpqMStPM3VMaWNoTjBOeEFIaG04Y1AzakE9PSIsIm1hYyI6ImIwMmU2NmVjNTQ0NGY5MzNhZWE1YjMxMTdkMDM0OGY3ZmVhMjE5Y2IwM2I0MWUwNzJmZDA1NzNmMjQ3Y2ViYTkifQ%3D%3D; language=eyJpdiI6Im1OZFRETWZSVDcyN1Y3cVdnOUx5ZVJ3TVk3c0U3YlNRa2thRlMrNUNybEk9IiwidmFsdWUiOiJlNVdcL2c2QWJvN282Z3Z0V2ZvanhMeURCWjBPZkpnZWtkdERkV3g5Vml6VT0iLCJtYWMiOiI4ZmNhNTQ4NTMyYzhmYjBiMDlhMzA0OWViYzFjN2M1YjNkMTJlMGJkNWUzMDgwNjMwZDk1MjU4ZjM1NTcyYzJjIn0%3D; 305f61b8ff702d336aa1616f45c07ffde50d12d7=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%3D
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 06:47:39 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 22 Nov 2022 13:35:09 GMT
ETag: W/"637cd00d-4d7"
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7700ac87f9f4b4f4-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Expires: Mon, 28 Nov 2022 06:47:39 GMT
Cache-Control: max-age=172800, public
Content-Encoding: gzip
fonts.googleapis.com/css?family=Questrial
200 OK 387 B URL HTTP/1.1 fonts.googleapis.com/css?family=Questrial
IP
Hash 7b73b3eed6a43db40b0640388112329f
ad4bb62a66f1f95c0a252f83345b40d40dcd5bb4
1776d3903d4f6fb36773bac4ccb4b86c0658838f29674d1fb506859506a41bc3
GET /css?family=Questrial HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Sat, 26 Nov 2022 06:47:39 GMT
Date: Sat, 26 Nov 2022 06:47:39 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
cdn.adtrue.com/rtb/async.js
301 Moved Permanently 0 B URL HTTP/1.1 cdn.adtrue.com/rtb/async.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rtb/async.js HTTP/1.1
Host: cdn.adtrue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/
HTTP/1.1 301 Moved Permanently
Date: Sat, 26 Nov 2022 06:47:39 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 26 Nov 2022 07:47:39 GMT
Location: https://cdn.adtrue.com/rtb/async.js
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Y6PigBKSfQCQpj81Db8lFKxVgY0IY6XyPzLeqYsAUpm0pP3tbJlYT34VoyjwMD8oe7nITf5lKcf%2FM5bQtver7B4fvF1L3KxbZpS90az%2FQM%2BwNu5F9nXNnx57PgGM4CJZIw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7700ac880b120b31-OSL
alt-svc: h2=":443"; ma=60
ecdn.analysis.fi/static/js/fab.js
200 OK 4.2 kB URL HTTP/1.1 ecdn.analysis.fi/static/js/fab.js
IP
File type ASCII text, with very long lines (574)
Hash 28a0bef1ecb63168106f97b637ab3414
e577575dd115f6a95aea8c2ae87d2c30c8464728
d8a34aeacc4054bd4e119e538c7eb4956421014f48a9b603d3f9314a7435b5a6
GET /static/js/fab.js HTTP/1.1
Host: ecdn.analysis.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 4240
Connection: keep-alive
Server: nginx/1.20.0
Last-Modified: Tue, 14 Dec 2021 15:30:51 GMT
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Date: Sat, 26 Nov 2022 06:23:14 GMT
Expires: Sat, 26 Nov 2022 07:23:10 GMT
Cache-Control: max-age=3600
ETag: "61b8b8ab-1090"
X-Cache: Hit from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 98K1-vVv8MmpB2cV2NM746g3T8v4gzOdq4y_1ly0ypY9XyQ1TAmvZQ==
Age: 1469
ocsp.digicert.com/
200 OK 279 B IP
Hash ab38abeb6e1559c84c3f7cb970c3a459
0281c6e31490fea00bdf63660d7402075316eaff
37250f3edc6a0f677d242f1c251608dd67b663acc4f0e9e5df15369bd127ef5d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6092
Cache-Control: max-age=160975
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:47:39 GMT
Etag: "6381708f-117"
Expires: Mon, 28 Nov 2022 03:30:34 GMT
Last-Modified: Sat, 26 Nov 2022 01:49:03 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 30f833b25d6e5af2229d9584c6f6cf97
ee79c3fa994d53c1d0687ca61353d63cce459e25
1bc091991c4663dbc86ae735e47ddc3e887a24661050ad9f24b8d458bfd11a6b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:47:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ecdn.firstimpression.io/fi_client.js
200 OK 100 kB URL HTTP/1.1 ecdn.firstimpression.io/fi_client.js
IP
File type ASCII text, with very long lines (618)
Size 100 kB (100129 bytes)
Hash deb02e3b2aa3b44493afaa949d207b35
bed849dbe52d10606c794fd72a4d3cc48400a416
790bd62a6bb2d2dd97e15b025d4db4b92372585eb3c1e37d2474a3ab235148b7
GET /fi_client.js HTTP/1.1
Host: ecdn.firstimpression.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sat, 26 Nov 2022 06:11:42 GMT
Server: nginx/1.20.0
X-Powered-By: PHP/8.0.14
X-XSS-Protection: 0
Last-Modified: Sat, 26 Nov 2022 06:11:42 UTC
ETag: W/"0347841b4433020f6fd0c98f4365224c"
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: IA1Qo0DIChnDyGgSgzXVY91BNphrNJSF0G-kDQ_Elp8c6L3rwIHBzg==
Age: 2157
www.google.com/recaptcha/api.js?render=6Lcr1ncUAAAAAH3cghg6cOTPGARa8adOf-y9zv2x
200 OK 582 B URL HTTP/2 www.google.com/recaptcha/api.js?render=6Lcr1ncUAAAAAH3cghg6cOTPGARa8adOf-y9zv2x
IP
File type ASCII text, with very long lines (884), with no line terminators
Hash 729acee2a72aedc9406dba71bf4c1d00
e7f1dea037aaa2df1c1e5b884dc5d73b7bc35e82
7e9b8e953f317a7a47db6df1d1ac8be5c78e9a9524a0a07755c748c2198f816a
GET /recaptcha/api.js?render=6Lcr1ncUAAAAAH3cghg6cOTPGARa8adOf-y9zv2x HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Sat, 26 Nov 2022 06:47:39 GMT
date: Sat, 26 Nov 2022 06:47:39 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 582
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash f6fba5266281b44a90149a255158598d
fca36cb5d5ceed074516ac7b7e60e8a0f5ec5700
cb0b42ffbf51270fcb48b3d43a6d698b95df528737b4f969a3e3409741371bcf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2332
Cache-Control: max-age=167289
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:47:39 GMT
Etag: "638197e8-117"
Expires: Mon, 28 Nov 2022 05:15:48 GMT
Last-Modified: Sat, 26 Nov 2022 04:36:56 GMT
Server: ECS (amb/6BBD)
X-Cache: HIT
Content-Length: 279
hhklc.com/c.js
200 OK 2.7 kB IP
File type ASCII text, with very long lines (8728), with no line terminators
Hash bc42a919bd405a25c32bfcca432bff01
ebd4c385a443c7543ca60721900cad11b9d5fc21
b52997edc31f2f4ee9748283f211f9b6c480c2e624fd0cf902a16a8a7c65254b
GET /c.js HTTP/1.1
Host: hhklc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ouo.press/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:47:39 GMT
content-type: application/javascript
last-modified: Fri, 11 Nov 2022 16:10:23 GMT
etag: W/"636e73ef-2218"
server-asp-net: Asp Net
expires: Sat, 26 Nov 2022 07:18:55 GMT
cache-control: public, max-age=14400
cf-cache-status: HIT
age: 824
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=igepiT1KZBNl0PHsM48SqaJSlrBMThiVQMRzFZrYqoLxdqIm0Ldg7Mk9G5JCF6C9HekQAnQT1mdaGgZAzmM6GIYzt92R%2BBNUSN6rspL1lWgbtSaMNH2CboRg9dU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7700ac884b2c0b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 1.6 kB IP
Hash 818abbedb2858d278c499a2fb1618b39
345bd05e8f19ff08c6f0a3e8c371bec58692b259
953b9a0586426aa460f8a7e94a1ed522c66dfbd3d9a53131fff1425c74afd8f4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2332
Cache-Control: max-age=167289
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:47:39 GMT
Etag: "638197e8-117"
Expires: Mon, 28 Nov 2022 05:15:48 GMT
Last-Modified: Sat, 26 Nov 2022 04:36:56 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e922b25acaba2d7f8921ebe973a4b261
5dd4c237c84a652cbcf3db163529f3788ceafc46
a7856c7777aa01b671ddae097494f2b031cbbddc7b244fe8714a8c02b85d8589
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:47:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tv.gourdycortes.com/1clkn/48786
200 OK 26 B URL HTTP/1.1 tv.gourdycortes.com/1clkn/48786
IP
File type ASCII text, with no line terminators
Hash 414a242a6fee8464282857e475d3ef61
f669890350347f53aa9bd19c1a355692e8d17d2f
d4914e81dd0b4c1d8ee8e789f6b369d107b93ac886f862930e1a98580e79aafa
GET /1clkn/48786 HTTP/1.1
Host: tv.gourdycortes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 06:47:39 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Set-Cookie: GL_UI4=eJw9jd1OhDAYRIHy42aFOAkPsI9QVBAvvfEVvCSl%2FcC60G5KXfTtbUz07mTmTCaKoqSuEF9zBvYpWpzU1HSS9428bx9417WPgtM09s9j%2F9Q1gvc46G3wYlzIp7idyZDTcpBWUYm7UP0lZ2N3kyIbnTCqRLYGYylRjM7uG7maITViJRSv2tFkv4IhPqwDa3gbWJvAMUdit5pVBxRv2qiwrI5IGl6VeYTjZRF%2Bsm4dtMpjZLMTihC%2F4EYKT7N13ygUbWdvL4Bd1PDv%2Fx6zveHIFV21JGTWv5P7AaoaStk%3D; expires=Sun, 27-Nov-2022 06:47:39 GMT; Max-Age=86400; path=/
GL_GI10=eJxNjM0KgkAYRW0qSwrjQg%2FQC2T%2Fi7bVMnThAwxmXzFg84kz%2FdjTpwbR5nI4cK7jOGLsQ6gcw%2B0i2M6D9TJYbNZoX4khwgjDlO%2FaFqXUyY3ghlw8kxJuQVfFGmK%2BwuDLMuUzoRtG0z%2FXRIPIZDzZ1z8lOqmqt1bwav52vaprXFuZHP4uU69JzNndVi8GniYrTU50hrdPThnNDvER%2Fs82H24LfWVkXvCrrHhk1Y3erEny5WLIVqr1cMUHDLFHVQ%3D%3D; expires=Sun, 27-Nov-2022 06:47:39 GMT; Max-Age=86400; path=/
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
itineraryupper.com/ed/36/01/ed36014633829dc70a42dccaefdf3f11.js
200 OK 13 kB URL HTTP/1.1 itineraryupper.com/ed/36/01/ed36014633829dc70a42dccaefdf3f11.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (37165), with no line terminators
Hash c89ce40679966dcc3c3aa661011a8f55
d9441ee42806c43006e1a38e7631d2143b313808
37f9b164bdc867e60583b055d9919d6d19fe7cc13a7184cc2a028017992bf640
Analyzer Verdict Alert fortinet Malware
GET /ed/36/01/ed36014633829dc70a42dccaefdf3f11.js HTTP/1.1
Host: itineraryupper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sat, 26 Nov 2022 06:47:39 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e09aeeff1f37b29afb161f5aa3b323d2
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
fonts.gstatic.com/s/questrial/v18/QdVUSTchPBm7nuUeVf70viFl.woff2
200 OK 19 kB URL HTTP/1.1 fonts.gstatic.com/s/questrial/v18/QdVUSTchPBm7nuUeVf70viFl.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 19292, version 1.0\012- data
Hash 19007b17e56daa60133bce9e9b352a95
bac1384caeae5762e7a1d8c18037f69c8cd21bc4
fd88a03358ba14440b78c6329717bdf6ed1a9fe97c3ad4e0a0a39d31fb1ac546
GET /s/questrial/v18/QdVUSTchPBm7nuUeVf70viFl.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://ouo.press
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 19292
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 15:53:57 GMT
Expires: Fri, 24 Nov 2023 15:53:57 GMT
Cache-Control: public, max-age=31536000
Age: 140023
Last-Modified: Wed, 27 Apr 2022 16:12:54 GMT
Content-Type: font/woff2
exchange.adtrue.com/delivery/impress?pzoneid=12953&ref=http%3A%2F%2Fouo.press%2F79eehvq&cb=1248530512&timeZone=0&adWidth=300&adHeight=250&loc=http://ouo.press/79eehvq
301 Moved Permanently 0 B URL HTTP/1.1 exchange.adtrue.com/delivery/impress?pzoneid=12953&ref=http%3A%2F%2Fouo.press%2F79eehvq&cb=1248530512&timeZone=0&adWidth=300&adHeight=250&loc=http://ouo.press/79eehvq
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /delivery/impress?pzoneid=12953&ref=http%3A%2F%2Fouo.press%2F79eehvq&cb=1248530512&timeZone=0&adWidth=300&adHeight=250&loc=http://ouo.press/79eehvq HTTP/1.1
Host: exchange.adtrue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/
HTTP/1.1 301 Moved Permanently
Date: Sat, 26 Nov 2022 06:47:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 26 Nov 2022 07:47:40 GMT
Location: https://exchange.adtrue.com/delivery/impress?pzoneid=12953&ref=http%3A%2F%2Fouo.press%2F79eehvq&cb=1248530512&timeZone=0&adWidth=300&adHeight=250&loc=http://ouo.press/79eehvq
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jCEl2mx2gzyaV4Kp%2BOCL%2FPZohS21xz40FX%2By6t%2Ff0yBGKKJrlt0a8XcrW4DmTk7ohhF2sINNrzHmgsyUGqSpdilVGN7Fak9yfbRYIQM1d7SgDa8BUdaglvUYoVIOMAHKz3gYjOW%2B"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7700ac8c2fc2fac0-OSL
alt-svc: h2=":443"; ma=60
friendshipmale.com/sfp.js
200 OK 28 kB URL HTTP/1.1 friendshipmale.com/sfp.js
IP
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash b1fa950e77a7db5425f9a5257af02e9c
2d5580451f34ad96218f8b97edf9708f9ee1be87
d999c4320df27dc4a1d3de5aec22bb3ef201560b47a7eff3f28f4133c1997a14
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 06:47:40 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: max-age=14400
X-Request-ID: 78302ff5ef8dc2535c940c12bd977dee
Strict-Transport-Security: max-age=0; includeSubdomains
CF-Cache-Status: EXPIRED
Last-Modified: Sat, 26 Nov 2022 06:47:39 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3EJMHdH9m08ayAQg6httuRaG3JIgWQAEYMpvLSNiAk2piRtwiBUOeUCAXkp2jCzsl8s9QcZd4nr4c2znpIEtslVQosK1ViidGJ0N5IX1CqvsnMY2JJBh6trvul1cDNIpqzjYIlU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7700ac8c3b0c06f1-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
cdn.adtrue.com/pb/prebid.js
301 Moved Permanently 0 B URL HTTP/1.1 cdn.adtrue.com/pb/prebid.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pb/prebid.js HTTP/1.1
Host: cdn.adtrue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/
HTTP/1.1 301 Moved Permanently
Date: Sat, 26 Nov 2022 06:47:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 26 Nov 2022 07:47:40 GMT
Location: https://cdn.adtrue.com/pb/prebid.js
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HXPJ4mcvIgpheX%2BuwiFSFFvLvP3Jl5pbXDczhFSkE%2Fq1Oj71LYBL7iDTe5tLirBIpikke%2BOiS52Da49Z%2FFpd7B34G6H%2FaIQrDRf19QEbo1bugQYo%2FolMI775H2RZXJuk%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7700ac8cdd6a0b31-OSL
alt-svc: h2=":443"; ma=60
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash e691756a7eaad68b37a05d81052d4625
51ae79d1a300529013b576ed5f30fd7eeb93f57d
b4057cce093dbc0c5928df15ca2dfa39a93ae1e9b9c0a2824a4bd09b8c356e75
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 26 Nov 2022 06:47:40 GMT
Last-Modified: Sat, 26 Nov 2022 05:00:05 GMT
Server: ECS (dcb/7EEF)
X-Cache: Miss from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: XJFa4nWCHIbR-Awmgu8S9pX9gRpsZd-9H_OFBw4pZVymlelQZo-d8g==
Age: 6455
track.adtrue.com/track/request?pzoneid=12953&domain=ouo.press&ref=http%3A%2F%2Fouo.press%2F79eehvq&loc=http%3A%2F%2Fouo.press%2F79eehvq
301 Moved Permanently 0 B URL HTTP/1.1 track.adtrue.com/track/request?pzoneid=12953&domain=ouo.press&ref=http%3A%2F%2Fouo.press%2F79eehvq&loc=http%3A%2F%2Fouo.press%2F79eehvq
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track/request?pzoneid=12953&domain=ouo.press&ref=http%3A%2F%2Fouo.press%2F79eehvq&loc=http%3A%2F%2Fouo.press%2F79eehvq HTTP/1.1
Host: track.adtrue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 26 Nov 2022 06:47:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 26 Nov 2022 07:47:40 GMT
Location: https://track.adtrue.com/track/request?pzoneid=12953&domain=ouo.press&ref=http%3A%2F%2Fouo.press%2F79eehvq&loc=http%3A%2F%2Fouo.press%2F79eehvq
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7woblVv54x3QP%2BLQC3CDJXdt4WJGgOk9JLUVSHdql0mTwTPjypNrZT1svfomRIgF9WP9j10OsFnlzrDy82SyMu50tnABLF39BfxgNA%2BLiyoJQ%2Bv0R4mto4g%2BkTQU9ZuhU%2Fhx"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7700ac8ce9570af6-OSL
alt-svc: h2=":443"; ma=60
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash e82ba2c2be23f32d64b2dc92f59bf681
b6e2ab94bef95126fd8f1bbab78c01eef27fc70f
9d75d32ac79fbc896ce2b1d1f7306260d61613ac3ab80cd9a88ce84d29a4772d
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ouo.press
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:47:40 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: http://ouo.press
access-control-allow-credentials: true
set-cookie: uid_id2=07c0bc1f-ae03-4b15-bd7f-d68eb0f6d3cd:3:1; expires=Tue, 23 Nov 2032 06:47:40 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash be0da545931a6e6f06c7eb8395b8a3af
bea09f1e5d361abfe41135f1497b1b469699b912
3428d08f184d29f34d4067e1796ecfa6aa9f9cc6e76006fac23aaf175bdd4eaf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:47:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:47:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ad.doubleclick.net/favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250
200 OK 104 B URL HTTP/2 ad.doubleclick.net/favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250
IP
File type MS Windows icon resource - 2 icons, 16x16, 16 colors, 32x32, 16 colors\012- data
Hash 32ac8a9b81788b981a3a7e13c14082d4
fbfd48a2bfe8d4247a975176f88d18c3c2ad1952
00cc7617e054596ff0aaabd8a93a9214dc5304bfe317316022dbf4fb3ea073d2
GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1
Host: ad.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
content-length: 104
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Fri, 25 Nov 2022 11:00:31 GMT
expires: Sat, 26 Nov 2022 11:00:31 GMT
cache-control: public, max-age=86400
age: 71229
last-modified: Tue, 08 May 2012 13:08:06 GMT
content-type: image/x-icon
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
200 OK 163 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
IP
File type ASCII text, with very long lines (730)
Size 163 kB (162976 bytes)
Hash 79d18cf4265108d7cecca1bf4ada6109
e51d0285a545381d4c39e9e0292a650ffeeecbb9
59ce7253f371df0833c3f72d4748ef812002b90a49413c56d0ca7c40bb5a0ab6
GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ouo.press
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 25 Nov 2022 08:12:22 GMT
expires: Sat, 25 Nov 2023 08:12:22 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
age: 81318
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e388353a642bc503beff27c23339e2b5
7849301df8cbfa3f9c019b1d4033b66e0f44c4bd
5e595e9ce96c6147c3ff79ebba0068ddb0d997237a671936cb05d9575c59a424
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:47:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash be0da545931a6e6f06c7eb8395b8a3af
bea09f1e5d361abfe41135f1497b1b469699b912
3428d08f184d29f34d4067e1796ecfa6aa9f9cc6e76006fac23aaf175bdd4eaf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:47:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:47:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=GTM-NPLC9ST
200 OK 47 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=GTM-NPLC9ST
IP
File type HTML document text\012- HTML document, ASCII text
Hash 9fcfc4f86c64f3d3fccf0e862ce3df1b
e250720336ab93f8bc4e612e813cd65d6019b229
f0fbf0bda37b822dfd44e1567e59970190d62d4e771cc2368f80461520fc2156
GET /gtag/js?id=GTM-NPLC9ST HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://track.adtrue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 26 Nov 2022 06:47:40 GMT
expires: Sat, 26 Nov 2022 06:47:40 GMT
cache-control: private, max-age=900
last-modified: Sat, 26 Nov 2022 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 47046
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.adtrue.com/rtb/async.js
200 OK 3.1 kB URL HTTP/2 cdn.adtrue.com/rtb/async.js
IP
File type HTML document, ASCII text, with very long lines (7327), with no line terminators
Hash d8ddd93ec068677b6d20f7388bd004f8
c1c5a1f42d2159bdd4fac7b43f7af137ef85ce85
67a586afd050f32fe6ca0193ae5183431bf954d0d8846bb0474fe96929497f60
GET /rtb/async.js HTTP/1.1
Host: cdn.adtrue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ouo.press/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:47:39 GMT
content-type: application/javascript
last-modified: Mon, 16 Nov 2020 01:20:45 GMT
etag: W/"5fb1d3ed-1c9f"
expires: Sun, 24 Sep 2023 03:46:20 GMT
cache-control: max-age=31104000
access-control-allow-origin: *
cf-cache-status: HIT
age: 5022079
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HKkGQ0kFfCgFzkuCpPGNd3a%2BUCq1ot4dlAxWGg13xqruVD4cWQ9bEa23SA1mpKJYpJjwaUQKxKJqAGMsUU4QXortdBApea9Krr4KGwl5QFeoWBMYYWMRH%2Fu4fN5faRMjbA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7700ac888e35b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash e87d5c628a1332905189e7661b787164
b9d5398e4c3988032da4fc2e3010def9907b7808
f8d4d71b96f74664ddd70227b8462bb527a35fd57eec243549f63b4d679381af
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3525
Cache-Control: max-age=105472
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:47:40 GMT
Etag: "6380a1c7-139"
Expires: Sun, 27 Nov 2022 12:05:32 GMT
Last-Modified: Fri, 25 Nov 2022 11:06:47 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 313
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e388353a642bc503beff27c23339e2b5
7849301df8cbfa3f9c019b1d4033b66e0f44c4bd
5e595e9ce96c6147c3ff79ebba0068ddb0d997237a671936cb05d9575c59a424
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:47:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fptadtrue-d.openx.net/w/1.0/arj?ju=http%3A%2F%2Fouo.press%2F79eehvq&ch=UTF-8&res=1280x1024x24&ifr=true&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=198c6c1b-3752-4bd4-8d34-2042e4b7aa32&nocache=1669445259636&aus=300x250&divids=adtrue_ads_12953_egmlibhgl36dsoluksn&aucs=adtrue_ads_12953_egmlibhgl36dsoluksn&auid=558223497&aumfs=100
200 OK 79 B URL HTTP/2 fptadtrue-d.openx.net/w/1.0/arj?ju=http%3A%2F%2Fouo.press%2F79eehvq&ch=UTF-8&res=1280x1024x24&ifr=true&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=198c6c1b-3752-4bd4-8d34-2042e4b7aa32&nocache=1669445259636&aus=300x250&divids=adtrue_ads_12953_egmlibhgl36dsoluksn&aucs=adtrue_ads_12953_egmlibhgl36dsoluksn&auid=558223497&aumfs=100
IP
File type JSON data\012- , ASCII text
Hash dbfcc90766011242ed06fc06e66a90a4
a9a51a030648673f27475da5691ed4118fe6d715
17e7caff1b981ad467d9c344e19533fb3659777e59450db02d11745ae11252e8
GET /w/1.0/arj?ju=http%3A%2F%2Fouo.press%2F79eehvq&ch=UTF-8&res=1280x1024x24&ifr=true&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=198c6c1b-3752-4bd4-8d34-2042e4b7aa32&nocache=1669445259636&aus=300x250&divids=adtrue_ads_12953_egmlibhgl36dsoluksn&aucs=adtrue_ads_12953_egmlibhgl36dsoluksn&auid=558223497&aumfs=100 HTTP/1.1
Host: fptadtrue-d.openx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://ouo.press
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept, Accept-Encoding
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Sat, 26 Nov 2022 06:47:40 GMT
content-type: application/json
content-length: 79
content-encoding: gzip
cache-control: private, max-age=0, no-cache
access-control-allow-origin: http://ouo.press
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash b0c217b1666dcd4822e5c64ad74f3035
13588c3ea23c48a45a3c47c10599173b785e464e
088e98051700d409704a0d4b30257ab01ef27db839a8e1413e2f78ebe300dc4a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6431
Cache-Control: max-age=102971
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:47:40 GMT
Etag: "63808ca8-1d7"
Expires: Sun, 27 Nov 2022 11:23:51 GMT
Last-Modified: Fri, 25 Nov 2022 09:36:40 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.12.0-pre&cb=29500700659&lsavail=0
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.12.0-pre&cb=29500700659&lsavail=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.12.0-pre&cb=29500700659&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 406
Origin: http://ouo.press
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 26 Nov 2022 06:47:39 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: http://ouo.press
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash a2f956982b060f795474e0e6a8fa2c19
c7bc0d64700cd7c9a66ced038ec82169225672b8
af04a6290fc8fad38db7165d09f829ce52e0b3e453537a27a7a502ea38fcb9d4
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1637
Cache-Control: max-age=117265
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:47:40 GMT
Etag: "6380d738-1d7"
Expires: Sun, 27 Nov 2022 15:22:05 GMT
Last-Modified: Fri, 25 Nov 2022 14:54:48 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
ib.adnxs.com/ut/v3/prebid
200 OK 144 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 044f1b2d999c39405abf1ca1c1a31b19
374f8c9e890d8b335d81e98785139f255bdf1b27
58664cddf89d5d8a5ab2b6f9a8550c6c4765a7490ce94504445fd84a629af07c
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 534
Origin: http://ouo.press
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 26 Nov 2022 06:47:40 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 144
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://ouo.press
AN-X-Request-Uuid: 95553c6c-d9f0-4baf-97ec-b739b330ad67
Set-Cookie: icu=ChkItZqGARAKGAEgASgBMIzthpwGOAFAAUgBEIzthpwGGAA.; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 24-Feb-2023 06:47:40 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=8257074623240490696; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 24-Feb-2023 06:47:40 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 867.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://track.adtrue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sat, 26 Nov 2022 06:41:08 GMT
expires: Sat, 26 Nov 2022 08:41:08 GMT
cache-control: public, max-age=7200
age: 392
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
hbopenbid.pubmatic.com/translator?source=prebid-client
204 No Content 0 B URL HTTP/2 hbopenbid.pubmatic.com/translator?source=prebid-client
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /translator?source=prebid-client HTTP/1.1
Host: hbopenbid.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 973
Origin: http://ouo.press
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: http://ouo.press
cache-control: no-cache, no-store, must-revalidate
date: Sat, 26 Nov 2022 06:47:39 GMT
X-Firefox-Spdy: h2
cdn.adtrue.com/rtb/passback.js
301 Moved Permanently 0 B URL HTTP/1.1 cdn.adtrue.com/rtb/passback.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rtb/passback.js HTTP/1.1
Host: cdn.adtrue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/
HTTP/1.1 301 Moved Permanently
Date: Sat, 26 Nov 2022 06:47:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 26 Nov 2022 07:47:40 GMT
Location: https://cdn.adtrue.com/rtb/passback.js
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=laZB63K%2FAgXSsMT0cm4ciuQM5Dj4ogyAoN6vs6H%2BFDmyZrROsM0EzDDnyr%2BrvEJ0UtWtg5sZFumk98UV27A%2Fb%2BhJzP1bmQ0uIz2C6IiOMVHyNllQ7EdqTI0fAH%2Bw5iynEw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7700ac90af230b31-OSL
alt-svc: h2=":443"; ma=60
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash e82ba2c2be23f32d64b2dc92f59bf681
b6e2ab94bef95126fd8f1bbab78c01eef27fc70f
9d75d32ac79fbc896ce2b1d1f7306260d61613ac3ab80cd9a88ce84d29a4772d
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ouo.press
Connection: keep-alive
Referer: http://ouo.press/
Cookie: uid_id2=07c0bc1f-ae03-4b15-bd7f-d68eb0f6d3cd:3:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:47:40 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: http://ouo.press
access-control-allow-credentials: true
X-Firefox-Spdy: h2
exchange.adtrue.com/tag/passback?adtrue_pzoneid=12953&divid=2005056860&ref=undefined
301 Moved Permanently 0 B URL HTTP/1.1 exchange.adtrue.com/tag/passback?adtrue_pzoneid=12953&divid=2005056860&ref=undefined
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tag/passback?adtrue_pzoneid=12953&divid=2005056860&ref=undefined HTTP/1.1
Host: exchange.adtrue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/
HTTP/1.1 301 Moved Permanently
Date: Sat, 26 Nov 2022 06:47:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 26 Nov 2022 07:47:41 GMT
Location: https://exchange.adtrue.com/tag/passback?adtrue_pzoneid=12953&divid=2005056860&ref=undefined
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FCZGlHSqLoA2G63%2FMFztWPz5H1AI%2B6TO7RCNR8eEExmf%2BXj70hitiDkbAok6Bap9BUb33QXUt1ZZasKBdNr8AUKEzZ4co5Xw1udC2lQFicrocNK3Ghc6iQ2oerI3SU2b6FaJ9gQR"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7700ac918994fac0-OSL
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
200 OK 280 B IP
Hash f9e8fc96b0342e221815b9c2865bd5d4
f7c688e5c010e44dfbab9f7476d2c45f0ca0cd0c
3a9ff869dd03896ce576d7d0c5c0b96a08e08ef7b9ef19681cba734671926b26
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5689
Cache-Control: max-age=171712
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:47:41 GMT
Etag: "63819c15-118"
Expires: Mon, 28 Nov 2022 06:29:33 GMT
Last-Modified: Sat, 26 Nov 2022 04:54:45 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 280
jsc.adskeeper.com/a/d/adtrue.ouo.press.991771.js
200 OK 921 B URL HTTP/2 jsc.adskeeper.com/a/d/adtrue.ouo.press.991771.js
IP
File type ASCII text, with very long lines (2361)
Hash dc406d72b5d7cb505ff0f720a76f333c
e848a1e516384718b9319acc891ff2f7d5d707b6
e92fc567697445a7896a332abf07536107c7b96112d287748ef9234292c80c58
GET /a/d/adtrue.ouo.press.991771.js HTTP/1.1
Host: jsc.adskeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:47:41 GMT
content-type: text/javascript
content-length: 921
x-amz-id-2: feXPNfpFaacSm8lt6RhzCbec1+gHhzZ+DriZQVNyKgZogPAFPtddKynKrrt3LGH5NtYxJR+TKjM=
x-amz-request-id: BSY1ZH442MF2G462
last-modified: Wed, 23 Nov 2022 08:34:07 GMT
etag: "dc406d72b5d7cb505ff0f720a76f333c"
content-encoding: gzip
x-amz-version-id: Nv3tnKsQJJFloLFD8ccmmePhVOX9ZV_J
cf-cache-status: HIT
expires: Sat, 26 Nov 2022 10:47:41 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7700ac92dc78b52d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
unseenreport.com/pxf.gif?uuid=07c0bc1f-ae03-4b15-bd7f-d68eb0f6d3cd&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1053&b_frame=0&pk=ed36014633829dc70a42dccaefdf3f11&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=6
200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=07c0bc1f-ae03-4b15-bd7f-d68eb0f6d3cd&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1053&b_frame=0&pk=ed36014633829dc70a42dccaefdf3f11&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=6
IP
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=07c0bc1f-ae03-4b15-bd7f-d68eb0f6d3cd&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1053&b_frame=0&pk=ed36014633829dc70a42dccaefdf3f11&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=6 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sat, 26 Nov 2022 06:47:41 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 93ea53ce5b780460e559770fc56eae3c
Strict-Transport-Security: max-age=0; includeSubdomains
ocsp.digicert.com/
200 OK 280 B IP
Hash f9e8fc96b0342e221815b9c2865bd5d4
f7c688e5c010e44dfbab9f7476d2c45f0ca0cd0c
3a9ff869dd03896ce576d7d0c5c0b96a08e08ef7b9ef19681cba734671926b26
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5689
Cache-Control: max-age=171712
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:47:41 GMT
Etag: "63819c15-118"
Expires: Mon, 28 Nov 2022 06:29:33 GMT
Last-Modified: Sat, 26 Nov 2022 04:54:45 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 2.0 kB IP
Hash 2c395dd20f7627bd3f375d1387651643
7cda54ecd797c4f2f1c651d3fd180ffa7bf1f30f
fc629e61170cbdb72fd02d8dd18027472389ccb13aacd049f255ce56ffbce763
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5283
Cache-Control: max-age=145385
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:47:41 GMT
Etag: "638136d3-138"
Expires: Sun, 27 Nov 2022 23:10:46 GMT
Last-Modified: Fri, 25 Nov 2022 21:42:43 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 312
jsc.adskeeper.com/a/d/adtrue.ouo.press.991771.es6.js
200 OK 77 kB URL HTTP/2 jsc.adskeeper.com/a/d/adtrue.ouo.press.991771.es6.js
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (33528)
Hash 685f1f92759cc00748247886fb65f456
415e063c765193a8144631d233cd65b19b385c01
6921a9a9cae5cb537f07548e9d5ef79f7b319786beda6c59a02978f8cd1d8d2e
GET /a/d/adtrue.ouo.press.991771.es6.js HTTP/1.1
Host: jsc.adskeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:47:41 GMT
content-type: text/javascript
content-length: 77357
x-amz-id-2: SdLATQQUj9V5MUL8GJ1mTs1+1df/fMAy3HfVNeruF7ESTW9dZob57qxzjdeDGW+pl5U+kkPACRY=
x-amz-request-id: SQNX5CVNZKKQ3B6M
last-modified: Wed, 23 Nov 2022 11:42:34 GMT
etag: "685f1f92759cc00748247886fb65f456"
content-encoding: gzip
x-amz-version-id: dd1Oy8DoTdUVgoS4j2prex4kOlpjN63N
cf-cache-status: HIT
expires: Sat, 26 Nov 2022 10:47:41 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7700ac942cf4b52d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9fd31d87c534e5fb16d503dd2fbbceb2
b33fbc44c6922e66290c70bfc5132d252d48f3cf
1cd8f7e0e067e25543f8e4310f8664e256cbadded9aa1c52cb2546b815fdfeee
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1CD8F7E0E067E25543F8E4310F8664E256CBADDED9AA1C52CB2546B815FDFEEE"
Last-Modified: Fri, 25 Nov 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1608
Expires: Sat, 26 Nov 2022 07:14:29 GMT
Date: Sat, 26 Nov 2022 06:47:41 GMT
Connection: keep-alive
static.criteo.net/js/ld/publishertag.prebid.123.js
200 OK 29 kB URL HTTP/2 static.criteo.net/js/ld/publishertag.prebid.123.js
IP
File type ASCII text, with very long lines (65354)
Hash 20ac2c4462879de5e87bb093a87877fb
0f5424e096ba541b4789ed910e7257493be343cd
cd064793ed5ae178ceaee41fc363174391f70a5813e33124c8483ecf68c0268b
GET /js/ld/publishertag.prebid.123.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 06:47:41 GMT
content-type: text/javascript
last-modified: Tue, 03 May 2022 11:21:03 GMT
etag: W/"6271101f-15b58"
expires: Sun, 27 Nov 2022 06:47:41 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 2f430e776295c8a092ddc55a2884da0a
e3f281f24cba695cffbadec33c5e84345cb85197
0b3dae016bcce1949ee52c22d6082e9a8e5477bf307cd629c45a55bbdd55f05b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3319
Cache-Control: max-age=129052
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:47:41 GMT
Etag: "6380feb2-139"
Expires: Sun, 27 Nov 2022 18:38:33 GMT
Last-Modified: Fri, 25 Nov 2022 17:43:14 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 313
dnacdn.net/dna
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:47:41 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=pfFOB180M0RITmhlJTJCZkMwOUJGQlhaMUN2czNzZzB5anV4TWRCaENhR0puaThibCUyQnJZaCUyRnpObmx2TVdTWk5DVjkzT2xv; expires=Thu, 21 Dec 2023 06:47:41 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 276199
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 6133568bfacb7548c70e5ebc0f9223c8
26f424b5dfe87e27a3057f6937b70f583caeead3
db5ce4366fb7fe75f1e2e79d7374da572fd78e84f35ce537bf734ff64a1beaa5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5291
Cache-Control: max-age=103296
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:47:41 GMT
Etag: "63809262-139"
Expires: Sun, 27 Nov 2022 11:29:17 GMT
Last-Modified: Fri, 25 Nov 2022 10:01:06 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash 6133568bfacb7548c70e5ebc0f9223c8
26f424b5dfe87e27a3057f6937b70f583caeead3
db5ce4366fb7fe75f1e2e79d7374da572fd78e84f35ce537bf734ff64a1beaa5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5291
Cache-Control: max-age=103296
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:47:41 GMT
Etag: "63809262-139"
Expires: Sun, 27 Nov 2022 11:29:17 GMT
Last-Modified: Fri, 25 Nov 2022 10:01:06 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 313
wastedinvaluable.com/sbar.json?key=ed36014633829dc70a42dccaefdf3f11&uuid=07c0bc1f-ae03-4b15-bd7f-d68eb0f6d3cd%3A3%3A1
200 OK 3.4 kB URL HTTP/1.1 wastedinvaluable.com/sbar.json?key=ed36014633829dc70a42dccaefdf3f11&uuid=07c0bc1f-ae03-4b15-bd7f-d68eb0f6d3cd%3A3%3A1
IP
ASN #39572 DataWeb Global Group B.V.
File type JSON data\012- , ASCII text, with very long lines (5927), with no line terminators
Hash 829c86e3a9f0cda4e150c6f6e54b2a0c
1692d9ab2c717dc615b03e58ac295d3760be4ae6
a8fc69a0fa0b5df4699a12cb7fd93f148d1203cf28ec409e2229e05772dbed67
GET /sbar.json?key=ed36014633829dc70a42dccaefdf3f11&uuid=07c0bc1f-ae03-4b15-bd7f-d68eb0f6d3cd%3A3%3A1 HTTP/1.1
Host: wastedinvaluable.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ouo.press
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sat, 26 Nov 2022 06:47:42 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://ouo.press
Access-Control-Allow-Origin: http://ouo.press
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=15424691; expires=Sun, 27 Nov 2022 06:47:41 GMT; secure; SameSite=None
uid_id2=07c0bc1f-ae03-4b15-bd7f-d68eb0f6d3cd:3:1; expires=Sat, 03 Dec 2022 06:47:41 GMT; secure; SameSite=None
pdhtkv=true; expires=Sun, 27 Nov 2022 06:47:42 GMT; secure; SameSite=None
uncs=1; expires=Sun, 27 Nov 2022 06:47:42 GMT; secure; SameSite=None
pdhtkv29=true; expires=Sun, 27 Nov 2022 06:47:42 GMT; secure; SameSite=None
uncs29=1; expires=Sun, 27 Nov 2022 06:47:42 GMT; secure; SameSite=None
sleced36014633829dc70a42dccaefdf3f11=[3789941]; expires=Sat, 26 Nov 2022 06:47:47 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: cb8d2a65a8e39dfa1b4f4b54e1b3fb70
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b6600618d25a3e9acc27391d3f680d2b
4b416cee1249ac910f6fb8225e17390a644e3628
213d66ef9ad1f59458b0a4e68bb1b23c8fd349e0ee3010445000a2de12165127
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "213D66EF9AD1F59458B0A4E68BB1B23C8FD349E0EE3010445000A2DE12165127"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4196
Expires: Sat, 26 Nov 2022 07:57:38 GMT
Date: Sat, 26 Nov 2022 06:47:42 GMT
Connection: keep-alive
wastedinvaluable.com/ren.gif?sid=H4sIAAAAAAAC%2F1SSz4scxRvGq%2FPj8P0KgsGLB2UQDwrubPX0zM6MOQRjEgnGbEgiAfFg%2FerZcqu7mqru6cmeooEQD8p40mPPM5ss0SAGwZskzHrRBWFHMSzi%2Bgd4EYScZWYHFt9Dve9bn%2FfwvE%2FVrVGxTygKtnfpbbuhjWHLrTqtvXxNp9KWvnbxai2kdXqydk2nK82TtcHscP3XQtqq01dqbyqxbpcbNKQ0pGHtnHYqtoPlOYXO7nfDepfWm4162Gpi4P7b%2ByKAZwFkf5%2BcgJbT42s%2FPoAWE6TJN2eUX89t9urZpDAstw59ufVOup7aMkVyWMYuQJxuLaZh%2FZSQL47ApluLDWD7m7MNwPWUBI9D8HRrIRO8f%2BdAKTdQKbh8CmV%2FAmUm0GwCYW9Cy10CCImLq0iTuxetK9n1A8pmdEqOPfkHupySY388izT5%2BrTRg9oVa4pc29RjEFfQgwl0b4Ks2Ea%2BEUCX2xD5R9DyZ7L85ALSZHPVGwst916ibUG5COMlpmi01ORha4nLdrwkVzqK03hFRkLOLdJ6Ah1PYNQQzB9F4QMUOkARByiyAIncq7FWN6a0HfM4ijpNIUQUCdHqrMiWjJqdmKIQsx2GyLMhhBlCuBvI3A2s6yFc8Qh%2BrYKXAXxO0JcVSkVQeoKSEZSaoMwJyn51Rxrf8NVdaXzBw0VuLHJUjW3eG7E7Nu%2BplIyyffLM3Li%2F3vsW62qvpmS0QsPmShR1Gl0p2pQ1G1IIpmIZR3EYwusK2h8B8wE29O7Tj5Hp3f9V4Gwb3mxD6BfBiufBynG7QcHWxs0OxUZ6zxa2njnlPaStkOXHkV8PRmafPDcX0P21gBI7p347O%2Frp0c0TEK5C5ip8oH8g6Jnb48u2JJuXbenJg9Us14neYLNXvZKzXB378i11vbROnj%2Fjh%2FdeFzMwK%2B9fVT6%2FwFKp054nX53WUip3zjqhyPfn%2FTXFLxV%2B7XTh0iK7cOmNc%2BeTuUBt0wmY3n3%2FIYSekv8nt%2Bb%2F9YXfP4Z2E7iiQlLskEVA222I7AZ8tnPq809W%2Fzwp34W3BM4czvAsQFlUY9fgh5dGExh12DNewatDC7jaefj3ARv52%2Bi5ACy%2FiTSp0HcV%2BqYCM0P44ug4z9zOqV%2BieYCbYMyNCza5ceazA2u93qupVkxjRRuKx10etxmV3bjZ5awbqjZvsRC5n4oPv%2Fv0XwAAAP%2F%2FAQAA%2F%2F9J0NkPhwQAAA%3D%3D
200 OK 7 B URL HTTP/1.1 wastedinvaluable.com/ren.gif?sid=H4sIAAAAAAAC%2F1SSz4scxRvGq%2FPj8P0KgsGLB2UQDwrubPX0zM6MOQRjEgnGbEgiAfFg%2FerZcqu7mqru6cmeooEQD8p40mPPM5ss0SAGwZskzHrRBWFHMSzi%2Bgd4EYScZWYHFt9Dve9bn%2FfwvE%2FVrVGxTygKtnfpbbuhjWHLrTqtvXxNp9KWvnbxai2kdXqydk2nK82TtcHscP3XQtqq01dqbyqxbpcbNKQ0pGHtnHYqtoPlOYXO7nfDepfWm4162Gpi4P7b%2ByKAZwFkf5%2BcgJbT42s%2FPoAWE6TJN2eUX89t9urZpDAstw59ufVOup7aMkVyWMYuQJxuLaZh%2FZSQL47ApluLDWD7m7MNwPWUBI9D8HRrIRO8f%2BdAKTdQKbh8CmV%2FAmUm0GwCYW9Cy10CCImLq0iTuxetK9n1A8pmdEqOPfkHupySY388izT5%2BrTRg9oVa4pc29RjEFfQgwl0b4Ks2Ea%2BEUCX2xD5R9DyZ7L85ALSZHPVGwst916ibUG5COMlpmi01ORha4nLdrwkVzqK03hFRkLOLdJ6Ah1PYNQQzB9F4QMUOkARByiyAIncq7FWN6a0HfM4ijpNIUQUCdHqrMiWjJqdmKIQsx2GyLMhhBlCuBvI3A2s6yFc8Qh%2BrYKXAXxO0JcVSkVQeoKSEZSaoMwJyn51Rxrf8NVdaXzBw0VuLHJUjW3eG7E7Nu%2BplIyyffLM3Li%2F3vsW62qvpmS0QsPmShR1Gl0p2pQ1G1IIpmIZR3EYwusK2h8B8wE29O7Tj5Hp3f9V4Gwb3mxD6BfBiufBynG7QcHWxs0OxUZ6zxa2njnlPaStkOXHkV8PRmafPDcX0P21gBI7p347O%2Frp0c0TEK5C5ip8oH8g6Jnb48u2JJuXbenJg9Us14neYLNXvZKzXB378i11vbROnj%2Fjh%2FdeFzMwK%2B9fVT6%2FwFKp054nX53WUip3zjqhyPfn%2FTXFLxV%2B7XTh0iK7cOmNc%2BeTuUBt0wmY3n3%2FIYSekv8nt%2Bb%2F9YXfP4Z2E7iiQlLskEVA222I7AZ8tnPq809W%2Fzwp34W3BM4czvAsQFlUY9fgh5dGExh12DNewatDC7jaefj3ARv52%2Bi5ACy%2FiTSp0HcV%2BqYCM0P44ug4z9zOqV%2BieYCbYMyNCza5ceazA2u93qupVkxjRRuKx10etxmV3bjZ5awbqjZvsRC5n4oPv%2Fv0XwAAAP%2F%2FAQAA%2F%2F9J0NkPhwQAAA%3D%3D
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1SSz4scxRvGq%2FPj8P0KgsGLB2UQDwrubPX0zM6MOQRjEgnGbEgiAfFg%2FerZcqu7mqru6cmeooEQD8p40mPPM5ss0SAGwZskzHrRBWFHMSzi%2Bgd4EYScZWYHFt9Dve9bn%2FfwvE%2FVrVGxTygKtnfpbbuhjWHLrTqtvXxNp9KWvnbxai2kdXqydk2nK82TtcHscP3XQtqq01dqbyqxbpcbNKQ0pGHtnHYqtoPlOYXO7nfDepfWm4162Gpi4P7b%2ByKAZwFkf5%2BcgJbT42s%2FPoAWE6TJN2eUX89t9urZpDAstw59ufVOup7aMkVyWMYuQJxuLaZh%2FZSQL47ApluLDWD7m7MNwPWUBI9D8HRrIRO8f%2BdAKTdQKbh8CmV%2FAmUm0GwCYW9Cy10CCImLq0iTuxetK9n1A8pmdEqOPfkHupySY388izT5%2BrTRg9oVa4pc29RjEFfQgwl0b4Ks2Ea%2BEUCX2xD5R9DyZ7L85ALSZHPVGwst916ibUG5COMlpmi01ORha4nLdrwkVzqK03hFRkLOLdJ6Ah1PYNQQzB9F4QMUOkARByiyAIncq7FWN6a0HfM4ijpNIUQUCdHqrMiWjJqdmKIQsx2GyLMhhBlCuBvI3A2s6yFc8Qh%2BrYKXAXxO0JcVSkVQeoKSEZSaoMwJyn51Rxrf8NVdaXzBw0VuLHJUjW3eG7E7Nu%2BplIyyffLM3Li%2F3vsW62qvpmS0QsPmShR1Gl0p2pQ1G1IIpmIZR3EYwusK2h8B8wE29O7Tj5Hp3f9V4Gwb3mxD6BfBiufBynG7QcHWxs0OxUZ6zxa2njnlPaStkOXHkV8PRmafPDcX0P21gBI7p347O%2Frp0c0TEK5C5ip8oH8g6Jnb48u2JJuXbenJg9Us14neYLNXvZKzXB378i11vbROnj%2Fjh%2FdeFzMwK%2B9fVT6%2FwFKp054nX53WUip3zjqhyPfn%2FTXFLxV%2B7XTh0iK7cOmNc%2BeTuUBt0wmY3n3%2FIYSekv8nt%2Bb%2F9YXfP4Z2E7iiQlLskEVA222I7AZ8tnPq809W%2Fzwp34W3BM4czvAsQFlUY9fgh5dGExh12DNewatDC7jaefj3ARv52%2Bi5ACy%2FiTSp0HcV%2BqYCM0P44ug4z9zOqV%2BieYCbYMyNCza5ceazA2u93qupVkxjRRuKx10etxmV3bjZ5awbqjZvsRC5n4oPv%2Fv0XwAAAP%2F%2FAQAA%2F%2F9J0NkPhwQAAA%3D%3D HTTP/1.1
Host: wastedinvaluable.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ouo.press/
Cookie: u_pl=15424691; uid_id2=07c0bc1f-ae03-4b15-bd7f-d68eb0f6d3cd:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; sleced36014633829dc70a42dccaefdf3f11=[3789941]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sat, 26 Nov 2022 06:47:42 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: bbd8a5803051507e7807cfff2950643c
Strict-Transport-Security: max-age=0; includeSubdomains
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 0eae74238d1c9828cd086271241b5e66
4cdd2c9e819b5c71d1d3e4836063a7a9f89ccf15
4884107002b9840725b58cd3ff13215471bdcd8c2a1029c3eeadd16abe4d91d2
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "4884107002B9840725B58CD3FF13215471BDCD8C2A1029C3EEADD16ABE4D91D2"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6225
Expires: Sat, 26 Nov 2022 08:31:27 GMT
Date: Sat, 26 Nov 2022 06:47:42 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 0eae74238d1c9828cd086271241b5e66
4cdd2c9e819b5c71d1d3e4836063a7a9f89ccf15
4884107002b9840725b58cd3ff13215471bdcd8c2a1029c3eeadd16abe4d91d2
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "4884107002B9840725B58CD3FF13215471BDCD8C2A1029C3EEADD16ABE4D91D2"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6225
Expires: Sat, 26 Nov 2022 08:31:27 GMT
Date: Sat, 26 Nov 2022 06:47:42 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 0eae74238d1c9828cd086271241b5e66
4cdd2c9e819b5c71d1d3e4836063a7a9f89ccf15
4884107002b9840725b58cd3ff13215471bdcd8c2a1029c3eeadd16abe4d91d2
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "4884107002B9840725B58CD3FF13215471BDCD8C2A1029C3EEADD16ABE4D91D2"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6225
Expires: Sat, 26 Nov 2022 08:31:27 GMT
Date: Sat, 26 Nov 2022 06:47:42 GMT
Connection: keep-alive
fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
200 OK 660 B URL HTTP/1.1 fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
IP
Hash 55130bf120bd75a4bba7d678be617cdf
77b172c0cc1d15e60ab95edccf3ac1e640d16812
262b9e8c2eeba18bdc3dd53ac7bbacdbbec713a9443ff5dc34e359de56ea040d
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Sat, 26 Nov 2022 06:47:42 GMT
Date: Sat, 26 Nov 2022 06:47:42 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/4/css/animate.css
200 OK 5.1 kB URL HTTP/2 cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/4/css/animate.css
IP
File type ASCII text, with very long lines (60365)
Hash 58ebebf11bd605abb429c2d70a138fa5
a68c6ce627a85cac718483c701bb2edb87c35848
4b056a8b19e376801a0266580cb971e747c5cd968d3b83f4803212794a4472e5
GET /sb/notifications/games/nutaku/multi/4/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:47:42 GMT
content-type: text/css
last-modified: Fri, 19 Aug 2022 09:15:04 GMT
etag: W/"62ff5498-ec8b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 924993
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=847GzZO5xqn3eR8%2FoWycnj6YGxQNhur6OqlZAeQ9Ao4uXUAgPh0AragFSDIRO4ga9s30Jn3oyyXhGVQUc5kGfmNsCxVlGVE76EH6mkZ6g2toWyK8qWG9RlqDbM%2B2F3ErpPnFLXfoHQ%2Fg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7700ac9a9fac768f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
match.adsrvr.org/track/rid?ttd_pid=pubmatic&fmt=json
301 Moved Permanently 134 B URL HTTP/1.1 match.adsrvr.org/track/rid?ttd_pid=pubmatic&fmt=json
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /track/rid?ttd_pid=pubmatic&fmt=json HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain
Origin: http://ouo.press
Connection: keep-alive
Referer: http://ouo.press/
HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Sat, 26 Nov 2022 06:47:42 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://match.adsrvr.org:443/track/rid?ttd_pid=pubmatic&fmt=json
id5-sync.com/g/v2/806.json
200 216 B URL HTTP/1.1 id5-sync.com/g/v2/806.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash aaaac21fddf37eda97e4fe1c409cb757
d779052fdef6b57d808b3546a9160bbb0dc34875
9da86facb6d1fd170a1b799590c5e78a63d31e2430f6a9f8be0f32cb029dd077
POST /g/v2/806.json HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 193
Origin: http://ouo.press
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: http://ouo.press
access-control-allow-credentials: true
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Sat, 26 Nov 2022 06:47:42 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 0eae74238d1c9828cd086271241b5e66
4cdd2c9e819b5c71d1d3e4836063a7a9f89ccf15
4884107002b9840725b58cd3ff13215471bdcd8c2a1029c3eeadd16abe4d91d2
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "4884107002B9840725B58CD3FF13215471BDCD8C2A1029C3EEADD16ABE4D91D2"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6225
Expires: Sat, 26 Nov 2022 08:31:27 GMT
Date: Sat, 26 Nov 2022 06:47:42 GMT
Connection: keep-alive
wastedinvaluable.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fnotifications%2Fgames%2Fnutaku%2Fmulti%2F4%2Findex.html&l=1598&fd=101
200 OK 0 B URL HTTP/1.1 wastedinvaluable.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fnotifications%2Fgames%2Fnutaku%2Fmulti%2F4%2Findex.html&l=1598&fd=101
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fnotifications%2Fgames%2Fnutaku%2Fmulti%2F4%2Findex.html&l=1598&fd=101 HTTP/1.1
Host: wastedinvaluable.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sat, 26 Nov 2022 06:47:42 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/4/images/landing/booty-calls/13/bg-removebg-preview.png
200 OK 1.4 MB URL HTTP/2 cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/4/images/landing/booty-calls/13/bg-removebg-preview.png
IP
File type PNG image data, 1316 x 1848, 8-bit/color RGBA, non-interlaced\012- data
Size 1.4 MB (1445587 bytes)
Hash 950cbc4a86f9305f9cab1899d35cee25
75a126fbee600ceee47a696bfe7cd76de1b6d1cc
16b688a8183ee40269af3fde1f59635b6c16bbc538d9dd6261d4f6dec42f8c65
GET /sb/notifications/games/nutaku/multi/4/images/landing/booty-calls/13/bg-removebg-preview.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:47:42 GMT
content-type: image/png
content-length: 1445587
last-modified: Fri, 19 Aug 2022 09:15:12 GMT
etag: "62ff54a0-160ed3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 924993
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=90zNMZ9n41P9kfem%2FYYea%2F52yLstOQeYh0O4z7y7Nruj4h5YZ0eLIvL0wm4kXbZT%2BuBNV%2BKdnu9JuuIXO3kpOynhHfe6X1rMQYIvDQVL4wuicGov%2BkKjPu9p5%2FM3mOQ3sOFe8DLHQpUK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7700ac9abfc6768f-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash bc7e682c4ab4642cc125624b2889b0d7
a8b6a2fb2ae55005a0e7f6e913e66d2d889589e9
81c4332167fe5454a04e2b831b1cf0461119dabd61245e48788e042c12bf095e
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 26 Nov 2022 06:47:42 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 25 Nov 2022 21:40:29 GMT
Expires: Sat, 26 Nov 2022 21:40:29 GMT
ETag: "a8b6a2fb2ae55005a0e7f6e913e66d2d889589e9"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.sectigo.com/
200 OK 471 B IP
Hash daf5984226a272d126cf82d057cc5ea2
d097a2b8d014dfc169e1b504174fcce6e28b4921
a929ea0794d0676a470e00383acde6ef02e5bd84e7c22ad18cf30e09c9163cc7
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 06:47:42 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 23 Nov 2022 13:42:55 GMT
Expires: Wed, 30 Nov 2022 13:42:54 GMT
Etag: "d097a2b8d014dfc169e1b504174fcce6e28b4921"
Cache-Control: max-age=369911,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7700ac9aba93b505-OSL
id.crwdcntrl.net/id
200 OK 43 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 90eeff5111bbbdce769d4130cc3cca3c
d62886c1a85d51814cb7f124761c5e6aca6d8933
a96e1e97d62ab9747678b947bdf0a0ea5f81790b1e3a1df2d4607a86bf802596
GET /id HTTP/1.1
Host: id.crwdcntrl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://ouo.press
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:47:42 GMT
content-type: application/json;charset=utf-8
content-length: 43
p3p: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV
cache-control: no-cache
pragma: no-cache
expires: 0
x-server: 10.45.0.38
access-control-allow-credentials: true
access-control-allow-origin: http://ouo.press
server: Jetty(9.4.38.v20210224)
X-Firefox-Spdy: h2
api.rlcdn.com/api/identity/envelope?pid=1258
401 Unauthorized 19 B URL HTTP/2 api.rlcdn.com/api/identity/envelope?pid=1258
IP
Hash 63dfbd2b39fe4f536a04e7b32ada47b4
207298c4a215ad5d97d888522927910ae772ba48
26e51290d12b4fea0bb98da3ed118837b744555ba723061771ab3df30000b6b7
GET /api/identity/envelope?pid=1258 HTTP/1.1
Host: api.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://ouo.press
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 401 Unauthorized
content-type: text/plain; charset=utf-8
x-content-type-options: nosniff
date: Sat, 26 Nov 2022 06:47:42 GMT
content-length: 19
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
wastedinvaluable.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgames%2Fnutaku%2Fmulti%2F4%2Fimages%2Flanding%2Fcss%2Fstyles.css&l=3801&fd=342
200 OK 0 B URL HTTP/1.1 wastedinvaluable.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgames%2Fnutaku%2Fmulti%2F4%2Fimages%2Flanding%2Fcss%2Fstyles.css&l=3801&fd=342
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgames%2Fnutaku%2Fmulti%2F4%2Fimages%2Flanding%2Fcss%2Fstyles.css&l=3801&fd=342 HTTP/1.1
Host: wastedinvaluable.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sat, 26 Nov 2022 06:47:42 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/4/js/script.js
200 OK 2.1 kB URL HTTP/2 cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/4/js/script.js
IP
Hash 3af9b53574d4eaa00363df660f3b7e36
354c5b6846359cbfead68576205980536111477a
af7d000da037dc5cb5782e62f30a840873719c15d9d277376faf9473058838f4
GET /sb/notifications/games/nutaku/multi/4/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ouo.press
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:47:42 GMT
content-type: application/javascript
last-modified: Wed, 21 Sep 2022 07:42:11 GMT
etag: W/"632ac053-1160"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wXcaE1N0ir300%2Fzwwat0CKKvmniEL4pKqmRRXJJxP%2BocgRKi42LH5EWB7Ntt6CU56BrlzPO37u7OgEW%2B15Iui16wQfeZCjIBZ23%2BugjuD4NIWBhdaI%2FXRfmMEgq0UgdR3BQcxCPqvVu7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7700ac9b4d2d75cc-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/1.1 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://ouo.press
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 15744
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 23 Nov 2022 20:16:50 GMT
Expires: Thu, 23 Nov 2023 20:16:50 GMT
Cache-Control: public, max-age=31536000
Age: 210652
Last-Modified: Wed, 11 May 2022 19:24:48 GMT
Content-Type: font/woff2
ocsp.sectigo.com/
200 OK 471 B IP
Hash daf5984226a272d126cf82d057cc5ea2
d097a2b8d014dfc169e1b504174fcce6e28b4921
a929ea0794d0676a470e00383acde6ef02e5bd84e7c22ad18cf30e09c9163cc7
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 06:47:42 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 23 Nov 2022 13:42:55 GMT
Expires: Wed, 30 Nov 2022 13:42:54 GMT
Etag: "d097a2b8d014dfc169e1b504174fcce6e28b4921"
Cache-Control: max-age=369911,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7700ac9c6b86b505-OSL
wastedinvaluable.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgames%2Fnutaku%2Fmulti%2F4%2Fcss%2Fstyle.css&l=8110&fd=341
200 OK 0 B URL HTTP/1.1 wastedinvaluable.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgames%2Fnutaku%2Fmulti%2F4%2Fcss%2Fstyle.css&l=8110&fd=341
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgames%2Fnutaku%2Fmulti%2F4%2Fcss%2Fstyle.css&l=8110&fd=341 HTTP/1.1
Host: wastedinvaluable.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sat, 26 Nov 2022 06:47:42 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
wastedinvaluable.com/impr.gif?sid=H4sIAAAAAAAC%2F1SSz4scxRvGq%2FPj8P0KgsGLB2UQDwrubPX0%2FDSHYEwiwZhdksiCeLC6qnq23Oqupqp7enZPqwshHpTxpMeeZ3azRIMYBG%2BSMOtFF4QdxbCI6x%2FgRRBylpkdWHwP9b5vfd7D8z5Vt4f5EaHI2eHy22ZDac0WG1VaeXlFJcIUrnL9VsWnVXq%2BsqKSZv18pT89bO81nzaq9JXKm5KvmcUa9Sn1qV%2B5oqyMTH9xRqHS%2Bx2%2F2qHVeq3qN%2Bro2%2F%2F2LvfgmAfROyLnoMTk7OqPD6D4GEn8zSXp1jKTvno5zjXLjEVP7L6TrCWmSBCflJH1ECW782kYNyHki1Mwye58A5je9nQDhGpCvMc%2BwmR3LhNhb%2BdYaaghE4TiKRS9MaQeQ7ExuNmCEgcE4ALXl5DEd68bW7D1Y8qmdELOPPkHqpiQM388iyT%2B%2BqJW%2FcpNo%2FNMmcShH5VQ%2FTFUd4w030O24UEVe%2BDZR1DiZ7L45BqSeHvJaQMlDl%2BiLU5D7kcLTNJgoR76jYVQtKIF0WzLkEZNEXAxs0ipMVQ0hpYDMHcaufOQKw955CFPPcTisMIanYjSVhRGQdCuc86DgPNGuykaIqi3I4qcT3cYIEsH4HoAbjeR2k2sqQFs%2FghutYQTHlxG0BMlCklQOIKCERSKoMgIil65I7SrufKu0C4P%2FXmuzXNQjkzWHbIdk3VlQobpEXlmZtxf732LNXlYkSJoUr%2FeDIJ2rSN4i7J6TXDOZCSiIPJ9OFVCuVNgzsOGOnj6MVJ18L8SIduD03vg6kWw%2FHmwYtSqUbDVUb1NsZHcM7mpplY6B2FKpNlZZOveUB%2BR52YCOr%2FmkHz%2Fwm%2BXhz892joHbkuktsQH6geCrr4zumEKsn3DFI48WEozFasNNn3VmxnL5Jkv35LrhbHi6iU3uPc6n4Jpef%2BWdNk1lgiVdB356qISQtorxnJJvr%2FqVmS4nLvVi7lN8vTa8htXrsYzgcokYzB18P5DcDUh%2F49vz%2F7rC79%2FDGXHsHmJON8n84Aye%2BDpJly6f%2BHzT5b%2BPC%2FehTMEVp%2FMhKmHIi9HthaeXGpFoOVJz8ISTp5YEMr9h38fs6G7g671wLItJHGJni3R0yWYHsDlp0dZavcv%2FBLMAqH2RqG23naorf7s2FqnDisNvy7bYbvFhQglF36rFrQDSmtC1Fsd6XeQuQn%2F8LtP%2FwUAAP%2F%2FAQAA%2F%2F9d2FfphwQAAA%3D%3D
200 OK 7 B URL HTTP/1.1 wastedinvaluable.com/impr.gif?sid=H4sIAAAAAAAC%2F1SSz4scxRvGq%2FPj8P0KgsGLB2UQDwrubPX0%2FDSHYEwiwZhdksiCeLC6qnq23Oqupqp7enZPqwshHpTxpMeeZ3azRIMYBG%2BSMOtFF4QdxbCI6x%2FgRRBylpkdWHwP9b5vfd7D8z5Vt4f5EaHI2eHy22ZDac0WG1VaeXlFJcIUrnL9VsWnVXq%2BsqKSZv18pT89bO81nzaq9JXKm5KvmcUa9Sn1qV%2B5oqyMTH9xRqHS%2Bx2%2F2qHVeq3qN%2Bro2%2F%2F2LvfgmAfROyLnoMTk7OqPD6D4GEn8zSXp1jKTvno5zjXLjEVP7L6TrCWmSBCflJH1ECW782kYNyHki1Mwye58A5je9nQDhGpCvMc%2BwmR3LhNhb%2BdYaaghE4TiKRS9MaQeQ7ExuNmCEgcE4ALXl5DEd68bW7D1Y8qmdELOPPkHqpiQM388iyT%2B%2BqJW%2FcpNo%2FNMmcShH5VQ%2FTFUd4w030O24UEVe%2BDZR1DiZ7L45BqSeHvJaQMlDl%2BiLU5D7kcLTNJgoR76jYVQtKIF0WzLkEZNEXAxs0ipMVQ0hpYDMHcaufOQKw955CFPPcTisMIanYjSVhRGQdCuc86DgPNGuykaIqi3I4qcT3cYIEsH4HoAbjeR2k2sqQFs%2FghutYQTHlxG0BMlCklQOIKCERSKoMgIil65I7SrufKu0C4P%2FXmuzXNQjkzWHbIdk3VlQobpEXlmZtxf732LNXlYkSJoUr%2FeDIJ2rSN4i7J6TXDOZCSiIPJ9OFVCuVNgzsOGOnj6MVJ18L8SIduD03vg6kWw%2FHmwYtSqUbDVUb1NsZHcM7mpplY6B2FKpNlZZOveUB%2BR52YCOr%2FmkHz%2Fwm%2BXhz892joHbkuktsQH6geCrr4zumEKsn3DFI48WEozFasNNn3VmxnL5Jkv35LrhbHi6iU3uPc6n4Jpef%2BWdNk1lgiVdB356qISQtorxnJJvr%2FqVmS4nLvVi7lN8vTa8htXrsYzgcokYzB18P5DcDUh%2F49vz%2F7rC79%2FDGXHsHmJON8n84Aye%2BDpJly6f%2BHzT5b%2BPC%2FehTMEVp%2FMhKmHIi9HthaeXGpFoOVJz8ISTp5YEMr9h38fs6G7g671wLItJHGJni3R0yWYHsDlp0dZavcv%2FBLMAqH2RqG23naorf7s2FqnDisNvy7bYbvFhQglF36rFrQDSmtC1Fsd6XeQuQn%2F8LtP%2FwUAAP%2F%2FAQAA%2F%2F9d2FfphwQAAA%3D%3D
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /impr.gif?sid=H4sIAAAAAAAC%2F1SSz4scxRvGq%2FPj8P0KgsGLB2UQDwrubPX0%2FDSHYEwiwZhdksiCeLC6qnq23Oqupqp7enZPqwshHpTxpMeeZ3azRIMYBG%2BSMOtFF4QdxbCI6x%2FgRRBylpkdWHwP9b5vfd7D8z5Vt4f5EaHI2eHy22ZDac0WG1VaeXlFJcIUrnL9VsWnVXq%2BsqKSZv18pT89bO81nzaq9JXKm5KvmcUa9Sn1qV%2B5oqyMTH9xRqHS%2Bx2%2F2qHVeq3qN%2Bro2%2F%2F2LvfgmAfROyLnoMTk7OqPD6D4GEn8zSXp1jKTvno5zjXLjEVP7L6TrCWmSBCflJH1ECW782kYNyHki1Mwye58A5je9nQDhGpCvMc%2BwmR3LhNhb%2BdYaaghE4TiKRS9MaQeQ7ExuNmCEgcE4ALXl5DEd68bW7D1Y8qmdELOPPkHqpiQM388iyT%2B%2BqJW%2FcpNo%2FNMmcShH5VQ%2FTFUd4w030O24UEVe%2BDZR1DiZ7L45BqSeHvJaQMlDl%2BiLU5D7kcLTNJgoR76jYVQtKIF0WzLkEZNEXAxs0ipMVQ0hpYDMHcaufOQKw955CFPPcTisMIanYjSVhRGQdCuc86DgPNGuykaIqi3I4qcT3cYIEsH4HoAbjeR2k2sqQFs%2FghutYQTHlxG0BMlCklQOIKCERSKoMgIil65I7SrufKu0C4P%2FXmuzXNQjkzWHbIdk3VlQobpEXlmZtxf732LNXlYkSJoUr%2FeDIJ2rSN4i7J6TXDOZCSiIPJ9OFVCuVNgzsOGOnj6MVJ18L8SIduD03vg6kWw%2FHmwYtSqUbDVUb1NsZHcM7mpplY6B2FKpNlZZOveUB%2BR52YCOr%2FmkHz%2Fwm%2BXhz892joHbkuktsQH6geCrr4zumEKsn3DFI48WEozFasNNn3VmxnL5Jkv35LrhbHi6iU3uPc6n4Jpef%2BWdNk1lgiVdB356qISQtorxnJJvr%2FqVmS4nLvVi7lN8vTa8htXrsYzgcokYzB18P5DcDUh%2F49vz%2F7rC79%2FDGXHsHmJON8n84Aye%2BDpJly6f%2BHzT5b%2BPC%2FehTMEVp%2FMhKmHIi9HthaeXGpFoOVJz8ISTp5YEMr9h38fs6G7g671wLItJHGJni3R0yWYHsDlp0dZavcv%2FBLMAqH2RqG23naorf7s2FqnDisNvy7bYbvFhQglF36rFrQDSmtC1Fsd6XeQuQn%2F8LtP%2FwUAAP%2F%2FAQAA%2F%2F9d2FfphwQAAA%3D%3D HTTP/1.1
Host: wastedinvaluable.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ouo.press/
Cookie: u_pl=15424691; uid_id2=07c0bc1f-ae03-4b15-bd7f-d68eb0f6d3cd:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; sleced36014633829dc70a42dccaefdf3f11=[3789941]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sat, 26 Nov 2022 06:47:43 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1b4bc3cfb0fa7aaf032f01a70fc41afd
Strict-Transport-Security: max-age=0; includeSubdomains
wastedinvaluable.com/pixel/sbs?c=1
200 OK 0 B URL HTTP/1.1 wastedinvaluable.com/pixel/sbs?c=1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbs?c=1 HTTP/1.1
Host: wastedinvaluable.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ouo.press/
Cookie: u_pl=15424691; uid_id2=07c0bc1f-ae03-4b15-bd7f-d68eb0f6d3cd:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; sleced36014633829dc70a42dccaefdf3f11=[3789941]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sat, 26 Nov 2022 06:47:43 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=155495
200 OK 5.5 kB URL HTTP/2 ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=155495
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (15844), with no line terminators
Hash 7725e8e949141c8ded449d86975d4c04
8cd8c314a2002cc26f821d331ab9512f52a551a2
a0c49aacf6f552bce544eb8516404f696918253cd934a6404ebeafd71f8780ae
GET /AdServer/js/user_sync.html?kdntuid=1&p=155495 HTTP/1.1
Host: ads.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ouo.press/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 01 Feb 2022 06:38:00 GMT
etag: "1300708-3de4-5d6ef246ef4cf"
server: Apache
accept-ranges: bytes
content-encoding: gzip
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC", CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
content-length: 5549
content-type: text/html; charset=UTF-8
cache-control: max-age=33026
expires: Sat, 26 Nov 2022 15:58:09 GMT
date: Sat, 26 Nov 2022 06:47:43 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
image6.pubmatic.com/AdServer/UCookieSetPug?oid=2&cb=PubMatic._uidCB
200 OK 60 B URL HTTP/2 image6.pubmatic.com/AdServer/UCookieSetPug?oid=2&cb=PubMatic._uidCB
IP
File type ASCII text, with no line terminators
Hash aa8d747931cb971d2a1ffb21ebfcbb3d
e39b56667c6ff41105d31af8280a86d22ffa3f23
3c9ea186388a5ae2cbb5b12cdc19f1bdd849fb4d0f0ab094286b628ae9be04b0
GET /AdServer/UCookieSetPug?oid=2&cb=PubMatic._uidCB HTTP/1.1
Host: image6.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.pubmatic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
cache-control: private
content-type: text/html; charset=UTF-8
expires: Thu, 23 Feb 2023 22:45:45 GMT
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
date: Sat, 26 Nov 2022 06:47:43 GMT
content-length: 60
X-Firefox-Spdy: h2
ads.pubmatic.com/AdServer/js/cl_partner.html?pid=2&gdpr=0&gdpr_consent=&rdu=https%3A%2F%2Fsimage4.pubmatic.com%2FAdServer%2FSPug%3Fo%3D3%26u%3DFAD836AA-0CCA-4AE6-87D2-0341ADA5CAFB%26vcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD00MzIwMA%3D%3D%26piggybackCookie%3Duid%3A%23%23P_UID
200 OK 953 B URL HTTP/2 ads.pubmatic.com/AdServer/js/cl_partner.html?pid=2&gdpr=0&gdpr_consent=&rdu=https%3A%2F%2Fsimage4.pubmatic.com%2FAdServer%2FSPug%3Fo%3D3%26u%3DFAD836AA-0CCA-4AE6-87D2-0341ADA5CAFB%26vcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD00MzIwMA%3D%3D%26piggybackCookie%3Duid%3A%23%23P_UID
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (1720), with no line terminators
Hash 499546dec064c08e4c7c354bab138f7f
f155d071d071e4e7c1d45e22943915df9d9f2b75
1a9219bc3962479cfa6ff0ca64e2f810aab8b816ae4f937b252d0ca044d693b4
GET /AdServer/js/cl_partner.html?pid=2&gdpr=0&gdpr_consent=&rdu=https%3A%2F%2Fsimage4.pubmatic.com%2FAdServer%2FSPug%3Fo%3D3%26u%3DFAD836AA-0CCA-4AE6-87D2-0341ADA5CAFB%26vcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD00MzIwMA%3D%3D%26piggybackCookie%3Duid%3A%23%23P_UID HTTP/1.1
Host: ads.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://simage4.pubmatic.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 17 Aug 2016 09:36:32 GMT
etag: "fa18f0-6b8-53a413358bd01"
server: Apache
accept-ranges: bytes
content-encoding: gzip
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC", CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
content-length: 953
content-type: text/html; charset=UTF-8
cache-control: max-age=117458
expires: Sun, 27 Nov 2022 15:25:22 GMT
date: Sat, 26 Nov 2022 06:47:44 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 0 B IP
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=pfFOB180M0RITmhlJTJCZkMwOUJGQlhaMUN2czNzZzB5anV4TWRCaENhR0puaThibCUyQnJZaCUyRnpObmx2TVdTWk5DVjkzT2xv
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:47:41 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=3oPvGl80M0RITmhlJTJCZkMwOUJGQlhaMUN2czNzZzB5anV4TWRCaENhR0puaThibDhvMmZvRW9TT0RjQW5HdTNxc255ejg; expires=Thu, 21 Dec 2023 06:47:41 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 346062
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/4/images/landing/css/styles.css
200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/4/images/landing/css/styles.css
IP
GET /sb/notifications/games/nutaku/multi/4/images/landing/css/styles.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ouo.press
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:47:42 GMT
content-type: text/css
last-modified: Fri, 19 Aug 2022 09:15:08 GMT
etag: W/"62ff549c-ed9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3TPhmyFNe%2F8dugTBom5Oax09Y7YqnEJfDsvH2Lbv0l1qXHTjPmZsY9HlWEEAfItmWJnX9q8MuIuLAB%2BE6EjtQ%2FMx0M0g53GkmyXmJ8wWvhfJv0yJG01cEMI2bLEjxlFHUBLp%2B8s9hTMz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7700ac9a7ccc75cc-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
simage4.pubmatic.com/AdServer/SPug?o=1&p=155495&sc=1&u=FAD836AA-0CCA-4AE6-87D2-0341ADA5CAFB&rs=3&gdpr=0&gdpr_consent=&us_privacy=
200 OK 0 B URL HTTP/2 simage4.pubmatic.com/AdServer/SPug?o=1&p=155495&sc=1&u=FAD836AA-0CCA-4AE6-87D2-0341ADA5CAFB&rs=3&gdpr=0&gdpr_consent=&us_privacy=
IP
GET /AdServer/SPug?o=1&p=155495&sc=1&u=FAD836AA-0CCA-4AE6-87D2-0341ADA5CAFB&rs=3&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1
Host: simage4.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.pubmatic.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 06:47:42 GMT
content-type: text/html; charset=utf-8
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
cache-control: no-store, no-cache, private
content-encoding: gzip
X-Firefox-Spdy: h2
challenges.cloudflare.com/turnstile/v0/75e640aa/api.js?onload=_cf_chl_turnstile_l&render=explicit
200 OK 0 B URL HTTP/2 challenges.cloudflare.com/turnstile/v0/75e640aa/api.js?onload=_cf_chl_turnstile_l&render=explicit
IP
GET /turnstile/v0/75e640aa/api.js?onload=_cf_chl_turnstile_l&render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:47:37 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 7700ac7c0f53fab4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.criteo.net/js/ld/publishertag.prebid.js
200 OK 0 B URL HTTP/2 static.criteo.net/js/ld/publishertag.prebid.js
IP
GET /js/ld/publishertag.prebid.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ouo.press
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 06:47:41 GMT
content-type: text/javascript
last-modified: Mon, 24 Oct 2022 11:21:19 GMT
etag: W/"6356752f-16294"
expires: Sun, 27 Nov 2022 06:47:41 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/4/js/jquery.min.js
200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/4/js/jquery.min.js
IP
GET /sb/notifications/games/nutaku/multi/4/js/jquery.min.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:47:42 GMT
content-type: application/javascript
last-modified: Fri, 19 Aug 2022 09:15:15 GMT
etag: W/"62ff54a3-149b8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 924993
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gNWnDw1gd%2FF7CqspvOmwJbAaIiKg8NQ7djwDFQ78PvuD%2FuGKYKmJLAEupQVqxm03SMo%2Bu2yPMj3re14dxQgPrMpg%2FRkpH6Bvl3l9suU0GA2dn0hgHJOwfoYcXxm%2FX4E41jBXLtRFv%2FGJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7700ac9abfc7768f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/4/images/close.svg
200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/4/images/close.svg
IP
GET /sb/notifications/games/nutaku/multi/4/images/close.svg HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:47:42 GMT
content-type: image/svg+xml
last-modified: Fri, 19 Aug 2022 09:15:06 GMT
etag: W/"62ff549a-4ff"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 924993
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uyCtjLSXziJN8ot9tlrs0p%2FPmbFhRe0jUYl3rjVSnkW0Avs8ObUROwrAwedBSzYEdxP6vNe5388ANoyVYHzaKKv0F%2FcrUXbCJ8LxGgx6p6eutNOe6mgeszL4zKZ2J5hI0WJH24xePuis"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7700ac9abfc5768f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cloudflare.hcaptcha.com/1/api.js?endpoint=https%3A%2F%2Fcloudflare.hcaptcha.com&assethost=https%3A%2F%2Fcf-assets.hcaptcha.com&imghost=https%3A%2F%2Fcf-imgs.hcaptcha.com&render=explicit&recaptchacompat=off&onload=_cf_chl_hload
200 OK 0 B URL HTTP/2 cloudflare.hcaptcha.com/1/api.js?endpoint=https%3A%2F%2Fcloudflare.hcaptcha.com&assethost=https%3A%2F%2Fcf-assets.hcaptcha.com&imghost=https%3A%2F%2Fcf-imgs.hcaptcha.com&render=explicit&recaptchacompat=off&onload=_cf_chl_hload
IP
GET /1/api.js?endpoint=https%3A%2F%2Fcloudflare.hcaptcha.com&assethost=https%3A%2F%2Fcf-assets.hcaptcha.com&imghost=https%3A%2F%2Fcf-imgs.hcaptcha.com&render=explicit&recaptchacompat=off&onload=_cf_chl_hload HTTP/1.1
Host: cloudflare.hcaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:47:35 GMT
content-type: application/javascript
cf-ray: 7700ac71fbc5b4f3-OSL
access-control-allow-origin: *
age: 0
cache-control: max-age=120
etag: W/"4a87133d7cfb9f9797187d43ffdd5417"
last-modified: Fri, 25 Nov 2022 11:46:32 GMT
strict-transport-security: max-age=0
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
cf-cache-status: HIT
x-amz-cf-id: e-vtjjiTuJNWqympaO3s7V_aWlOK4yXOIyZWB7ZnvSo2w49xVfwmGQ==
x-amz-cf-pop: OSL50-P1
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
ag.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 ag.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: ag.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:47:40 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 70732
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gem.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:47:41 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 119509
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=http%3A%2F%2Fouo.press%2F&domain=ouo.press&cw=1&pbt=1&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=http%3A%2F%2Fouo.press%2F&domain=ouo.press&cw=1&pbt=1&lsw=1
IP
GET /sid/json?origin=prebid&topUrl=http%3A%2F%2Fouo.press%2F&domain=ouo.press&cw=1&pbt=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: http://ouo.press
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:47:42 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: http://ouo.press
server-processing-duration-in-ticks: 865363
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=http%3A%2F%2Fouo.press%2F&domain=ouo.press&cw=1&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=http%3A%2F%2Fouo.press%2F&domain=ouo.press&cw=1&lsw=1
IP
OPTIONS /sid/json?origin=prebid&topUrl=http%3A%2F%2Fouo.press%2F&domain=ouo.press&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: http://ouo.press/
Origin: http://ouo.press
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:47:40 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: GET
access-control-allow-origin: http://ouo.press
server-processing-duration-in-ticks: 370854
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=http%3A%2F%2Fouo.press%2F&domain=ouo.press&cw=1&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=http%3A%2F%2Fouo.press%2F&domain=ouo.press&cw=1&lsw=1
IP
GET /sid/json?origin=prebid&topUrl=http%3A%2F%2Fouo.press%2F&domain=ouo.press&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: http://ouo.press
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:47:40 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: http://ouo.press
server-processing-duration-in-ticks: 886505
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?origin=publishertag&topUrl=ouo.press
200 OK 0 B URL HTTP/2 gum.criteo.com/syncframe?origin=publishertag&topUrl=ouo.press
IP
GET /syncframe?origin=publishertag&topUrl=ouo.press HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ouo.press/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:47:41 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=885070af-9bad-411c-b4fb-837e59e40014; expires=Thu, 21 Dec 2023 06:47:40 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 578590
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=http%3A%2F%2Fouo.press%2F&domain=ouo.press&cw=1&pbt=1&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=http%3A%2F%2Fouo.press%2F&domain=ouo.press&cw=1&pbt=1&lsw=1
IP
OPTIONS /sid/json?origin=prebid&topUrl=http%3A%2F%2Fouo.press%2F&domain=ouo.press&cw=1&pbt=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: http://ouo.press/
Origin: http://ouo.press
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:47:43 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: GET
access-control-allow-origin: http://ouo.press
server-processing-duration-in-ticks: 415313
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
104.22.58.251
104.18.19.132
172.255.6.38
172.64.155.188
185.64.189.115
23.36.77.32
178.250.0.165
52.49.181.242
52.28.211.11