| tours.specia1.com/t/2076?t=55988&aid=123298&sid=407&opt=476d17f408366541&xk=d01150f0351ba0724d6a5bc4a3676a6a&bn=38&gu=https://go.moartraffic.com/go.php?t=20743&aid=123298&sid=407&clickid=36566aa37840eb7.80006798&ocode=NDA3LjEwNTExLjQ3MzkuNDk0NS4wLjAuMTc3MS4yNS4wLjAuMC4w&hts_id=3940970f-02d9-4e4e-b945-fbfcbb00c46e&clickid=36566aa37840eb7.80006798&i18n_country=US&hts_id=3940970f-02d9-4e4e-b945-fbfcbb00c46e/t/2076//t/2076//t/2076//t/2076//t/2076//t/2076/ |  143.204.55.92 | | 313 B |
URL tours.specia1.com/t/2076?t=55988&aid=123298&sid=407&opt=476d17f408366541&xk=d01150f0351ba0724d6a5bc4a3676a6a&bn=38&gu=https://go.moartraffic.com/go.php?t=20743&aid=123298&sid=407&clickid=36566aa37840eb7.80006798&ocode=NDA3LjEwNTExLjQ3MzkuNDk0NS4wLjAuMTc3MS4yNS4wLjAuMC4w&hts_id=3940970f-02d9-4e4e-b945-fbfcbb00c46e&clickid=36566aa37840eb7.80006798&i18n_country=US&hts_id=3940970f-02d9-4e4e-b945-fbfcbb00c46e/t/2076//t/2076//t/2076//t/2076//t/2076//t/2076/ IP143.204.55.92:0
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text Hashe763a514f62d31cffce8b9da4e7cb249 f8daf8991217b59090bb499fb94a9dbfb5b189ad 01bd777ce6858358614f3575114bccfa31a10336b387e871524b1beb32190e81
GET /t/2076?t=55988&aid=123298&sid=407&opt=476d17f408366541&xk=d01150f0351ba0724d6a5bc4a3676a6a&bn=38&gu=https://go.moartraffic.com/go.php?t=20743&aid=123298&sid=407&clickid=36566aa37840eb7.80006798&ocode=NDA3LjEwNTExLjQ3MzkuNDk0NS4wLjAuMTc3MS4yNS4wLjAuMC4w&hts_id=3940970f-02d9-4e4e-b945-fbfcbb00c46e&clickid=36566aa37840eb7.80006798&i18n_country=US&hts_id=3940970f-02d9-4e4e-b945-fbfcbb00c46e/t/2076//t/2076//t/2076//t/2076//t/2076//t/2076/ HTTP/1.1
Host: tours.specia1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 313
x-amz-error-code: Found
x-amz-error-message: Resource Found
location: /t/2076/
date: Wed, 29 Nov 2023 04:10:22 GMT
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: j314kp0q8-mYtL80L5h-oqaxxp5YHPu-2MlG7FUiexNoQ9dlJ_9suw==
X-Firefox-Spdy: h2
|
|
| tours.specia1.com/t/common/js/opticks.js | 143.204.55.92 | | 879 B |
URL tours.specia1.com/t/common/js/opticks.js IP143.204.55.92:0
Hashac06e12242ff3ce25969e983f7829d72 2566b4908ee175aa98de902093e41a1082d8681d 720c65cbe1bdca394f267cf306f21558ff6b34d1b55a70c63b919ac8096219fa
GET /t/common/js/opticks.js HTTP/1.1
Host: tours.specia1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/t/2076/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 879
last-modified: Tue, 28 Nov 2023 19:30:12 GMT
server: AmazonS3
date: Wed, 29 Nov 2023 04:10:23 GMT
etag: "ac06e12242ff3ce25969e983f7829d72"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: z6eDA0GdLi9lFURCkeX8rW6chuu5W3_PRT9FgYwYSaRA4FlQdvG_PQ==
age: 67
X-Firefox-Spdy: h2
|
|
| cdn.tours-78-94.wellhello.com/sinder/img/intro.jpg | 54.230.111.34 | | 16 kB |
URL cdn.tours-78-94.wellhello.com/sinder/img/intro.jpg IP54.230.111.34:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 193x193, components 3\012- data Hashb585eac69fffa1fd7970b383e6bddcb2 64f739bf983995f6556f945cb261bfe1fe1bbf05 52f9bd02fb60fdc760cde43610634316e644643dadb500a0d23de2077baa78d9
GET /sinder/img/intro.jpg HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 16283
date: Wed, 25 Oct 2023 21:01:13 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: "6308fd73-3f9b"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4FOq883pJcXJ0IgK32BQEeErvF4PyIm1lKZWuvgaFTlBJYPc7PcWTA==
age: 2963350
X-Firefox-Spdy: h2
|
|
| cdn.tours-78-94.wellhello.com/sinder/img/arrow.svg | 54.230.111.34 | | 228 B |
URL cdn.tours-78-94.wellhello.com/sinder/img/arrow.svg IP54.230.111.34:0
File typeSVG Scalable Vector Graphics image\012- HTML document, ASCII text, with no line terminators Hashb9fa204329eb7174e9f771e34c7f3c53 1a11918d8529692b7b734f0b82c747f50bb69095 fe8fc656bd4bd41a636c489d1978ee2394d49068675184eeb43f1e0b0b945674
GET /sinder/img/arrow.svg HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 228
date: Fri, 10 Nov 2023 23:32:02 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: "6308fd73-e4"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DcOdTzKm1KiCxrcEaDqqEHVtuycRRqRHzxzXfiRKrLIqgi_E7_Tgdw==
age: 1571901
X-Firefox-Spdy: h2
|
|
| cdn.tours-78-94.wellhello.com/sinder/img/girls.png | 54.230.111.34 | | 15 kB |
URL cdn.tours-78-94.wellhello.com/sinder/img/girls.png IP54.230.111.34:0
File typePNG image data, 279 x 127, 8-bit colormap, non-interlaced\012- data Hashadeeb4e0a822bb522625c1953bab8490 7bd5ab07c3de7b4abdc851b3236ccab421f85a07 fbf3ddcc142e33e097c583a0eb5933e3e8a9ac0fc5c56054cb64ddf11762d078
GET /sinder/img/girls.png HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 14564
date: Sun, 01 Oct 2023 00:34:19 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: "6308fd73-38e4"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xLWIX1_-DrVlkLSYXJknhxTsq7kO-WV5OWl4nSNAlYLjpok3T7q-8Q==
age: 5110564
X-Firefox-Spdy: h2
|
|
| cdn.tours-78-94.wellhello.com/sinder/img/chat-off.svg | 54.230.111.34 | | 533 B |
URL cdn.tours-78-94.wellhello.com/sinder/img/chat-off.svg IP54.230.111.34:0
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (533), with no line terminators Hasha69b89d9307f487ed58a41903f39bc0b 29e29802b95b0098be7525ba48f0ba9081bd5831 e2236170593ba1fc8095c6e61ed3fe443cd8d5247018d91211c00e7f2ab87b6d
GET /sinder/img/chat-off.svg HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 533
date: Sat, 11 Nov 2023 01:47:40 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: "6308fd73-215"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VuJCPtu0Zu1M_bZWAHejEYvkOU8ikoZoaLaEXUU1SO88q9eFqyNIhw==
age: 1563763
X-Firefox-Spdy: h2
|
|
| cdn.tours-78-94.wellhello.com/sinder/img/map-pin-shadow.svg | 54.230.111.34 | | 295 B |
URL cdn.tours-78-94.wellhello.com/sinder/img/map-pin-shadow.svg IP54.230.111.34:0
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators Hash39084aa4edef89de7e0620722650e213 6bcf1794e842a6a945913ca8b610d634eb829dda 1406e8ad5a6f490d35e424539bb837841bf4dff4c885426b282ee750e0ccc45e
GET /sinder/img/map-pin-shadow.svg HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 295
date: Sun, 06 Aug 2023 19:49:04 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: "6308fd73-127"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9Gq45HTTWVsoIoYPaALhLIVn8D6sJfSpdOKA8bnKY6pSInXZVYqIjQ==
age: 9879679
X-Firefox-Spdy: h2
|
|
| cdn.tours-78-94.wellhello.com/sinder/img/no-off.svg | 54.230.111.34 | | 712 B |
URL cdn.tours-78-94.wellhello.com/sinder/img/no-off.svg IP54.230.111.34:0
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (712), with no line terminators Hash9e940a031b4f0ad4721344ae81026a63 a915a8819a84fe4706e4b89d21a16e4f57a06e6f ac014bf5225347be767bd63c85977fb9fd99fe6ba5cb045a0ee7368dd0fdb35f
GET /sinder/img/no-off.svg HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 712
date: Thu, 11 May 2023 23:33:41 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: "6308fd73-2c8"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nMhjFz9yK3YEufwU2kfDOHJbzzZ7NNZNdDZkVTajz6BnBv4vPcVl2A==
age: 17383002
X-Firefox-Spdy: h2
|
|
| cdn.tours-78-94.wellhello.com/sinder/img/yes-off.svg | 54.230.111.34 | | 704 B |
URL cdn.tours-78-94.wellhello.com/sinder/img/yes-off.svg IP54.230.111.34:0
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (704), with no line terminators Hasha4eb7ee2185fc85fa10c0e0a591e800b ebebbe8a12ef952effe3c88b7062caad8c7cffaf 59027987947a695716751edf6b21fe1ac1bf21dcb6b360443e075d166328a2c0
GET /sinder/img/yes-off.svg HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 704
date: Thu, 12 Oct 2023 04:13:50 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: "6308fd73-2c0"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: s8gHiKS2iwlfHPXpfE182G5z_JYsTtf1x6PQSQ7S-t5sAZyUr1_gIw==
age: 4146993
X-Firefox-Spdy: h2
|
|
| cdn.tours-78-94.wellhello.com/sinder/img/no.svg | 54.230.111.34 | | 862 B |
URL cdn.tours-78-94.wellhello.com/sinder/img/no.svg IP54.230.111.34:0
File typeSVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (862), with no line terminators Hash65eeb52762bc89d879f3d7180fc2d976 064a0f1def0fff5b98cf82d86cd31e9a8acd78a7 95b1c99567d61185d7884b4ea9b285f849bfb46318b285cd2b25826fad57b1af
GET /sinder/img/no.svg HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 862
date: Wed, 04 Jan 2023 01:00:11 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: "6308fd73-35e"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: auVkZWrr4YkvXhjrscb7MNo9Z4Rx9cvkb047izRkavaGOVWiAbvPyA==
age: 28437012
X-Firefox-Spdy: h2
|
|
| cdn.tours-78-94.wellhello.com/sinder/img/yes.svg | 54.230.111.34 | | 893 B |
URL cdn.tours-78-94.wellhello.com/sinder/img/yes.svg IP54.230.111.34:0
File typeSVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (893), with no line terminators Hash655cbe97d7ed34e8462504d7dae81b90 6fb3d056070d7e51032165913dab1721057d095d 5dda8e5ceb3f5f0cc9b274f97eff322d63d9917a39ca42f3a24412e3518c5b2a
GET /sinder/img/yes.svg HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 893
date: Thu, 27 Apr 2023 23:21:10 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: "6308fd73-37d"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: E3vhLWDMF5HzxuvTGKPyI0d79M6jrP-oISzIHbxAGCclrEObaCAnOQ==
age: 18593353
X-Firefox-Spdy: h2
|
|
| cdn.tours-78-94.wellhello.com/sinder/img/chat.svg | 54.230.111.34 | | 533 B |
URL cdn.tours-78-94.wellhello.com/sinder/img/chat.svg IP54.230.111.34:0
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (533), with no line terminators Hash2ca57f1f2de2549720696a42a551b662 ce846ed07a3622f5280e930e46dd1e7fad183451 adaa303330a1370d61dc665a931abefae43be83e80b58c5477c51d246ee58b9e
GET /sinder/img/chat.svg HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 533
date: Wed, 20 Sep 2023 23:01:30 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: "6308fd73-215"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fbabegKEZS_QNkgtBNu3eumfmU0R6-tbFEcJEXMwjGWIfjVnwVxOjQ==
age: 5980133
X-Firefox-Spdy: h2
|
|
| utl-1.com/1.6.20/mst2.min.js | 143.204.55.32 | | 18 kB |
URL utl-1.com/1.6.20/mst2.min.js IP143.204.55.32:0
File typeASCII text, with very long lines (17707), with no line terminators Hash1ce673324943ed678ec7908cf7815cab 43bb8e53ec84a337356b04e3a63c15d96b3b729c 863efe6006e4a42f8b6312fc39d79c2aa4c22ce3d1fc845122a064779a26a74e
GET /1.6.20/mst2.min.js HTTP/1.1
Host: utl-1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 17707
date: Mon, 30 Oct 2023 00:44:09 GMT
last-modified: Mon, 06 Apr 2020 12:48:16 GMT
etag: "1ce673324943ed678ec7908cf7815cab"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 3f2Oha-XfWEV7AO7XQoLULPO0F-elnm4Fh27u_It3tMqnS2PlkEr4A==
age: 2604374
X-Firefox-Spdy: h2
|
|
| utl-1.com/1.6.20/utl.min.js | 143.204.55.32 | | 307 kB |
URL utl-1.com/1.6.20/utl.min.js IP143.204.55.32:0
File typeASCII text, with very long lines (65536), with no line terminators Size307 kB (307271 bytes) Hash16abec94a42aa716dd831a52bca3b1b7 35ccd145a5ddeb1556c8995668b137769f3f4f3e d2edbef8944e5e94cd67c37b0a6960841eacb87327c493790313ca2870feac34
GET /1.6.20/utl.min.js HTTP/1.1
Host: utl-1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 307271
date: Tue, 18 Jul 2023 01:02:18 GMT
last-modified: Mon, 06 Apr 2020 12:48:16 GMT
etag: "16abec94a42aa716dd831a52bca3b1b7"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pBDA6luwq_fK1xA5RLDXuJ-azbBwCTuDGcDYpn1_Yi38EcuJcMDabw==
age: 11588886
X-Firefox-Spdy: h2
|
|
| cdn.tours-78-94.wellhello.com/sinder/img/map-pin-wh.svg | 54.230.111.34 | | 3.3 kB |
URL cdn.tours-78-94.wellhello.com/sinder/img/map-pin-wh.svg IP54.230.111.34:0
File typegzip compressed data, from Unix\012- data Hash51df50679082849aaa3f5bbacaa01524 b2ade26e99bd8e3909ee74fd52d562b421949691 76cd0892976e3054da1721f67c13509df2f003f8e71b5e976598553d000a3ade
GET /sinder/img/map-pin-wh.svg HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Fri, 21 Apr 2023 17:52:52 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: W/"6308fd73-fde"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ugwaOkze00qaKPfo-PfdbEqj1vAYh3qJRbGImwrW3_UsL-1gxSCR9g==
age: 19131451
X-Firefox-Spdy: h2
|
|
| touchhh.com/touch?type=3&hts_id=76ba200e-db6d-42d4-868f-1f8ef76b5c19&traffic_risk_score=-alpha&zone_id=334095376&campaign_id=238032523&creative_id=240429687&zone_name=Qkkie+Zone+Optiks&campaign_name=Zone+Optiks+Jerkmate+%28CrakRevenue%29+External+Performance+on+Qkkie&product_id= | 54.230.111.65 | | 68 B |
URL touchhh.com/touch?type=3&hts_id=76ba200e-db6d-42d4-868f-1f8ef76b5c19&traffic_risk_score=-alpha&zone_id=334095376&campaign_id=238032523&creative_id=240429687&zone_name=Qkkie+Zone+Optiks&campaign_name=Zone+Optiks+Jerkmate+%28CrakRevenue%29+External+Performance+on+Qkkie&product_id= IP54.230.111.65:0
File typePNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data Hash91e42db1c66c0b276abf6234dc50b2eb c1986af3c26609b8b7d8933f99c51c1a89e9ea6b 63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
POST /touch?type=3&hts_id=76ba200e-db6d-42d4-868f-1f8ef76b5c19&traffic_risk_score=-alpha&zone_id=334095376&campaign_id=238032523&creative_id=240429687&zone_name=Qkkie+Zone+Optiks&campaign_name=Zone+Optiks+Jerkmate+%28CrakRevenue%29+External+Performance+on+Qkkie&product_id= HTTP/1.1
Host: touchhh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://moartraffic.engine.adglare.net
DNT: 1
Connection: keep-alive
Referer: https://moartraffic.engine.adglare.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
content-type: image/png
content-length: 68
date: Wed, 29 Nov 2023 04:10:26 GMT
x-amzn-requestid: 8ca80e8e-59cc-48f6-b814-0e362b78eb71
x-amz-apigw-id: PJHz2H4VIAMEvKQ=
cache-control: no-store, max-age=0
x-amzn-trace-id: Root=1-6566b9b1-685ac51536c97afa2142a0fd;Sampled=0;lineage=23f7427b:0
x-cache: Miss from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _NZEdjMqNgtAxyspyxMueHQOnRv2FTaJeSSxxaGSTM686jYXbIg7zw==
X-Firefox-Spdy: h2
|
|
| t.ajump1.com/2779/4551?aff_click_id=bf2cad6f-93b6-49e2-9a88-48ba9e988733&source=55036+&xk=400150c0b0c010e07d523b34ab606b69&hts_id=bf2cad6f-93b6-49e2-9a88-48ba9e988733&i18n_country=NO | 54.230.111.58 | 303 See Other | 572 B |
URL User Request GET HTTP/2t.ajump1.com/2779/4551?aff_click_id=bf2cad6f-93b6-49e2-9a88-48ba9e988733&source=55036+&xk=400150c0b0c010e07d523b34ab606b69&hts_id=bf2cad6f-93b6-49e2-9a88-48ba9e988733&i18n_country=NO IP54.230.111.58:443
CertificateIssuerAmazon Subjectajump1.com Fingerprint75:54:D3:08:87:41:44:8C:53:DF:30:74:6A:D7:A1:65:3B:69:E0:3D ValidityWed, 01 Feb 2023 00:00:00 GMT - Fri, 01 Mar 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (572), with no line terminators Hash1f71a515a345133f5033e54920f1bc7a bf8ac2198916f6f90925fb6440ce450aa1ffd1c3 82ef58158cd09b82fe792138350dbb8192547cc7c06a7a3191bd9468ef19796e
GET /2779/4551?aff_click_id=bf2cad6f-93b6-49e2-9a88-48ba9e988733&source=55036+&xk=400150c0b0c010e07d523b34ab606b69&hts_id=bf2cad6f-93b6-49e2-9a88-48ba9e988733&i18n_country=NO HTTP/1.1
Host: t.ajump1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://moartraffic.engine.adglare.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 303 See Other
content-type: text/html; charset=utf-8
content-length: 572
location: https://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
server: nginx/1.19.0
date: Wed, 29 Nov 2023 04:10:26 GMT
set-cookie: aff_ran_url_8481=30110; Path=/; Expires=Thu, 30 Nov 2023 04:10:26 GMT; Secure
enc_aff_session_8481=ENC03be92e957c41eda358c7163e1b4888f0f076a4e845dd0139ae45af91cb3a90e4356f5f92699dedbaf187cd3d40dc500d9ce02256de8dd012554850ff0afd86e79c9b0bbe7fd426f2212652d68ad732ec818cdeaa260197ad29a85c721a78f6019f15d1625c7a697c89ff70abd0adbe73c62c75eb9469a8bbcc7653b568c02f8ca1f95d5bb59c65763c906409b237453e197e707d4827f6cdf56f78da8a8d7ab27bb3aa1a53a1d11385bb4661e9ade0ad3eace0a7278b075f1030e9460d4f459dc1fa50433; Path=/; Expires=Fri, 28 Nov 2025 04:10:26 GMT; Secure
ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIxMDUuMCIsIm1vYmlsZV9jYXJyaWVyIjoiPyIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgWDY0OyBSdjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMCIsImNvbm5lY3Rpb25fc3BlZWQiOiJicm9hZGJhbmQifQ%3D%3D; Path=/; Expires=Fri, 23 Oct 2026 14:50:26 GMT; Secure
tracking_id: 10293daab4a1896d36f2a7859f4685
vary: Accept
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: AZTp0kETO0JlL_mEL24VvTL-pw76bKjPGXibif51C-vznvWuq1rYfw==
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cno/_next/static/css/981b544153db6743.css | 54.230.111.39 | 200 OK | 1.2 kB |
URL GET HTTP/2gateway.jerkmate.com/cno/_next/static/css/981b544153db6743.css IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeASCII text, with very long lines (3871), with no line terminators Hasha3badfa29764e1a3b42df21af493b19b bce91474dda23570985b3cb1a2e6a7380a851a7c 020e9d33bb61c27c2f1f2ca4f55de14a064a942384d30dfad596b9f505ff3e8e
GET /cno/_next/static/css/981b544153db6743.css HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
content-length: 1167
date: Sat, 25 Nov 2023 16:54:23 GMT
server: nginx/1.17.8
apigw-requestid: O9r9-jDroAMEVyQ=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"f1f-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 21TtrRqz2tLtdvwcrsz-rdnbVc_p8P1i5uhVUAqkQWxqZuc6DAyP-w==
age: 299764
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| cdn.tours-78-94.wellhello.com/sinder/v2/wh_fix/css/style.min.css | 54.230.111.34 | | 4.0 kB |
URL cdn.tours-78-94.wellhello.com/sinder/v2/wh_fix/css/style.min.css IP54.230.111.34:0
File typeASCII text, with very long lines (14862), with no line terminators Hash272f8f190c5224b4ee50eca802e8c05f a2b252dfa90b6c977499913998246e600447719c 2d1c419171ee163b9c1462a262f26b1cbe8c1ce30b155029683de99fb52c23ce
GET /sinder/v2/wh_fix/css/style.min.css HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
date: Wed, 19 Apr 2023 11:45:14 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: W/"6308fd73-37f4"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: r92nRuPZo3E0JTBYnuILd3_7xcvLJxJcI-mXZXac_9XRsBJiv8e9dw==
age: 19326309
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cno/_next/static/_H7vFNH_oBuxYbBhMUL_0/_buildManifest.js | 54.230.111.39 | 200 OK | 347 B |
URL GET HTTP/2gateway.jerkmate.com/cno/_next/static/_H7vFNH_oBuxYbBhMUL_0/_buildManifest.js IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeASCII text, with very long lines (614), with no line terminators Hash4d3e0aab5c1eecfed530015032013643 95fec99dbbdd57baa1a72f9ec176bba31cf0c2fa 52590ed48342ccc85723243822eafe156a9357a5d14fe081a4e6506067075ecf
GET /cno/_next/static/_H7vFNH_oBuxYbBhMUL_0/_buildManifest.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 347
date: Sat, 25 Nov 2023 16:54:23 GMT
server: nginx/1.17.8
apigw-requestid: O9r9_jseIAMEPEQ=
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"266-18b8c0769d0"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UMzna3F7xZdVslNfgyEOJId5l9jCiiaDXJFI-O_v3ZTF0Kh8AVeP_A==
age: 299764
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding,Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cno/_next/static/chunks/120-7b4fc9d6543c2261.js | 54.230.111.39 | 200 OK | 20 kB |
URL GET HTTP/2gateway.jerkmate.com/cno/_next/static/chunks/120-7b4fc9d6543c2261.js IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash38db4939128d73cb9108e6b350caa02b 8a4bd9d0f20eb4eb01ec6713b0d991b18f52201c ca2f4e288f1a399592926fcb63373914292d79e02a2572cba3f65184d8da5b0d
GET /cno/_next/static/chunks/120-7b4fc9d6543c2261.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 19891
date: Sat, 25 Nov 2023 16:54:23 GMT
server: nginx/1.17.8
apigw-requestid: O9r99jShoAMEPGw=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"12071-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dOx8nnmudwJK7A74aOxuFMH8V1aPIufmJWT85Y4KuuoB5NskwqCgCQ==
age: 299764
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cmscloud/dA/82388797bc/fr.svg | 54.230.111.39 | 200 OK | 511 B |
URL GET HTTP/2gateway.jerkmate.com/cmscloud/dA/82388797bc/fr.svg IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image\012- , ASCII text Hash4223844d00707152d1d197d34da41ec0 cbf955b217a10e667b758cdfc6c6425f92a30384 ed3e5dbeaecd323e1ea4151ee01773314316443029e3d52c2074c293ff974c5e
GET /cmscloud/dA/82388797bc/fr.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 511
date: Sat, 25 Nov 2023 16:54:23 GMT
set-cookie: AWSALB=S2/Mj/EDueopCBb9zHhRf4c4B4n6rGNK+Xr0jebSQKiPXull/UxVIlhbiKX3uVup9dbtVctj2Nkcljfe5qjUqD/ArIsg2GFpm3gURn8BDU1+VUL+eDhd4ke0+QO/; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/
AWSALBCORS=S2/Mj/EDueopCBb9zHhRf4c4B4n6rGNK+Xr0jebSQKiPXull/UxVIlhbiKX3uVup9dbtVctj2Nkcljfe5qjUqD/ArIsg2GFpm3gURn8BDU1+VUL+eDhd4ke0+QO/; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="fr.svg"
expires: Sun, 24 Nov 2024 16:54:23 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 22 Apr 2021 12:46:01 +0000
etag: dot:636dcc91-b503-4cd0-8461-61780376d4a8:1619095561000:511
accept-ranges: bytes
apigw-requestid: O9r99jaqIAMEVWw=
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: unn1umQG5hosYvLH3-wZttFZKux-IHse1be3wdnikKBy90E4brGcgQ==
age: 299764
referrer-policy: strict-origin-when-cross-origin
vary: Origin
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cmscloud/dA/1a5ddf5804/pt.svg | 54.230.111.39 | 200 OK | 885 B |
URL GET HTTP/2gateway.jerkmate.com/cmscloud/dA/1a5ddf5804/pt.svg IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image\012- , ASCII text Hash5845c7110dd82ec186135455c756cded fa41f2a59c16509555a251138c6acc82e3cb3932 9d61a554c23ead1b41cd0cdc0f965de15fee48d279e84ef08a737d98f1f4075b
GET /cmscloud/dA/1a5ddf5804/pt.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 885
date: Sat, 25 Nov 2023 16:54:23 GMT
set-cookie: AWSALB=BwXu+rh6ahbet30cFqZVumO0x2s1QE1Dcs7Yz+EW6ZURp0a4rIqQ3MSGmceU6oLRPaCQk0vVLJwQwo5VIkLbJnRxQmcYnXvTn6qnJtnry7XIO7ZZSSmdFaLF/Wob; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/
AWSALBCORS=BwXu+rh6ahbet30cFqZVumO0x2s1QE1Dcs7Yz+EW6ZURp0a4rIqQ3MSGmceU6oLRPaCQk0vVLJwQwo5VIkLbJnRxQmcYnXvTn6qnJtnry7XIO7ZZSSmdFaLF/Wob; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="pt.svg"
expires: Sun, 24 Nov 2024 16:54:23 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 22 Apr 2021 12:46:01 +0000
etag: dot:93a17bc5-1353-463d-a778-0cfdeae4431f:1619095561000:885
accept-ranges: bytes
apigw-requestid: O9r9_j6EoAMESmg=
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gPlaw55jOG1s6I_3cM9n0GzNXbE--EyqO-sQ3B1KRTmqgbYglN-IVQ==
age: 299764
referrer-policy: strict-origin-when-cross-origin
vary: Origin
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Rochester | 142.250.74.106 | | 383 B |
URL fonts.googleapis.com/css?family=Rochester IP142.250.74.106:0
File typegzip compressed data, max compression\012- data Hash0dda34b436a5f5e4089c0c78c65785da 884476479d65a02e2bc8c888164cd3619d559464 6763156d30cabf386a235054978b4df4aaf21e442467d4618d3a2c183c3c173e
GET /css?family=Rochester HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 29 Nov 2023 04:10:23 GMT
date: Wed, 29 Nov 2023 04:10:23 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cmscloud/dA/8970383085/de.svg | 54.230.111.39 | 200 OK | 639 B |
URL GET HTTP/2gateway.jerkmate.com/cmscloud/dA/8970383085/de.svg IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image\012- , ASCII text Hash99d7ec1914cffa444eca58c13c368ad4 def575d0dd1bbbf11d5fed1d2a9bdc238c9d65a7 d1583806f7e1a3a19eee75254decc54f9ef28c1302c2e5c143c6122159c0cc0b
GET /cmscloud/dA/8970383085/de.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 639
date: Sat, 25 Nov 2023 16:54:23 GMT
set-cookie: AWSALB=1JGYvypJ7pPI3KvD63CWSr1fbVNSeeeBQMPahCc0dqi2/Epnr8zgcGxTFrSEpr1atCobVPGZYuZ8q7oVj+6nS/1QT01bFMgLqp6q4P0+x5nWKM415tADE99BPv4w; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/
AWSALBCORS=1JGYvypJ7pPI3KvD63CWSr1fbVNSeeeBQMPahCc0dqi2/Epnr8zgcGxTFrSEpr1atCobVPGZYuZ8q7oVj+6nS/1QT01bFMgLqp6q4P0+x5nWKM415tADE99BPv4w; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="de.svg"
expires: Sun, 24 Nov 2024 16:54:23 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 22 Apr 2021 12:46:01 +0000
etag: dot:cac4b43f-8f76-4ac0-bbaa-f29da4e433ba:1619095561000:639
accept-ranges: bytes
apigw-requestid: O9r9-imIoAMEVKw=
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rHbd7hSGOuPJWjCUFNGV-woLzOOMN0B_oh6i0DUAEbkdONddU-jrfA==
age: 299764
referrer-policy: strict-origin-when-cross-origin
vary: Origin
X-Firefox-Spdy: h2
|
|
| cdn.tours-78-94.wellhello.com/sinder/img/logo-wh2.svg | 54.230.111.34 | | 2.8 kB |
URL cdn.tours-78-94.wellhello.com/sinder/img/logo-wh2.svg IP54.230.111.34:0
File typegzip compressed data, from Unix\012- data Hash4063066c21db34549b1251f7473e4afc ecbf8262dd3ebfbd2807869692ba290696d98b80 8197c886a41c377df7995c9d1cf3485f64c7fa8d10c90575687ed7010b8be506
GET /sinder/img/logo-wh2.svg HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Sat, 27 May 2023 01:47:42 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: W/"6308fd73-177c"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fYv-vk-zECEKHGdVkVrv6VXtCUFJ5g3D-B3SXuiYfRWzrdxcRMsrOA==
age: 16078961
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cmscloud/dA/d3000c5fa6/sv.svg | 54.230.111.39 | 200 OK | 801 B |
URL GET HTTP/2gateway.jerkmate.com/cmscloud/dA/d3000c5fa6/sv.svg IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image\012- , ASCII text Hash3449da9edf360eee1c02f61a92097eed 50bbfb01096e43866c82dcbcd4b86f64005cc904 86b1ebcc35b90ecd70469cbc084d4e9f712b9c078e08ffee11b1c8efae8cc1d7
GET /cmscloud/dA/d3000c5fa6/sv.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 801
date: Sat, 25 Nov 2023 16:54:23 GMT
set-cookie: AWSALB=bdr/euR+ofo3QN9awJzWRdmqs5Rc7TTaOoDmkYvMdZdcfSBr3sou4+0zDT2xSTy4Pk1OdVIsLGFODRnMgZHd+TCgmepQiKqUxvIVPP1psWeEL1ySkTwJX3aHi/ok; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/
AWSALBCORS=bdr/euR+ofo3QN9awJzWRdmqs5Rc7TTaOoDmkYvMdZdcfSBr3sou4+0zDT2xSTy4Pk1OdVIsLGFODRnMgZHd+TCgmepQiKqUxvIVPP1psWeEL1ySkTwJX3aHi/ok; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="sv.svg"
expires: Sun, 24 Nov 2024 16:54:23 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 22 Apr 2021 12:46:01 +0000
etag: dot:a1f2b483-d964-4946-916f-5fb71ad57787:1619095561000:801
accept-ranges: bytes
apigw-requestid: O9r9_hF3oAMESwQ=
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WMW-35zs66JsKTt5fZPMB1KpuLQYNBmONV-yVTygeJPKjs77RvlbjQ==
age: 299764
referrer-policy: strict-origin-when-cross-origin
vary: Origin
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cmscloud/dA/b88578965b/nl.svg | 54.230.111.39 | 200 OK | 496 B |
URL GET HTTP/2gateway.jerkmate.com/cmscloud/dA/b88578965b/nl.svg IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image\012- , ASCII text Hash88426efa127b09ebc25a22c23e359697 e825251659ba9c799ee1a36d24c7fc9dce7f0ab6 65983dd36bd6b78a3d3a94523390ca56500dfd7f03463720f7c97c799986f018
GET /cmscloud/dA/b88578965b/nl.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 496
date: Sat, 25 Nov 2023 16:54:23 GMT
set-cookie: AWSALB=DzWQZ8z0i7mqwWYlnBMKJihVcR5/YpMCtN32Ch5ZfKh7RryV5OtBcE86amgaq3g2SJ8/fvgKalefmJs4+nvTqR6IwnI3f6Oa0oQESxNqQ4GuBqgIDwZKAS6UuTAG; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/
AWSALBCORS=DzWQZ8z0i7mqwWYlnBMKJihVcR5/YpMCtN32Ch5ZfKh7RryV5OtBcE86amgaq3g2SJ8/fvgKalefmJs4+nvTqR6IwnI3f6Oa0oQESxNqQ4GuBqgIDwZKAS6UuTAG; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="nl.svg"
expires: Sun, 24 Nov 2024 16:54:23 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 22 Apr 2021 12:46:01 +0000
etag: dot:8b4a8e7b-ad08-4e12-a81a-31a462b04902:1619095561000:496
accept-ranges: bytes
apigw-requestid: O9r-AgmZoAMEVYg=
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zVVbMZfJJkJ6R8kWBb_GCeISCqS7iW1qyoebaFMJnC3VinYoIhr0kQ==
age: 299764
referrer-policy: strict-origin-when-cross-origin
vary: Origin
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cmscloud/dA/19ebcd0fbe/it.svg | 54.230.111.39 | 200 OK | 498 B |
URL GET HTTP/2gateway.jerkmate.com/cmscloud/dA/19ebcd0fbe/it.svg IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image\012- , ASCII text Hash7dc8917a7068b1fd01c3ac35618cc818 aa9de0296e734d80f1fb1e9ec397cd8e086c916a 2cd8d86729bd8c6ef297d4026d73c8990ec6df85c8e7ffec376cac38d5963175
GET /cmscloud/dA/19ebcd0fbe/it.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 498
date: Sat, 25 Nov 2023 16:54:23 GMT
set-cookie: AWSALB=6sDXcNoYVcvIABTpFIIbYujI9Oz6GluA9bxLVKPAhPKS/I4wZ3qxcgt64bhm4cF9TOUiUDbXn3QjviripNhvOU3kIx0SZpa8QhOx3NmGNmCAUgDoB6VDKZx3UgBF; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/
AWSALBCORS=6sDXcNoYVcvIABTpFIIbYujI9Oz6GluA9bxLVKPAhPKS/I4wZ3qxcgt64bhm4cF9TOUiUDbXn3QjviripNhvOU3kIx0SZpa8QhOx3NmGNmCAUgDoB6VDKZx3UgBF; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="it.svg"
expires: Sun, 24 Nov 2024 16:54:23 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 22 Apr 2021 12:46:01 +0000
etag: dot:bff2d52f-dc33-4db5-aa64-d1d3d48a28af:1619095561000:498
accept-ranges: bytes
apigw-requestid: O9r9-gYzoAMEP2w=
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9R3Gy9J-ymivi1NPYRYcwq_2WzI5qTgyaUla85cbU10L2Ruk_uXNYw==
age: 299764
referrer-policy: strict-origin-when-cross-origin
vary: Origin
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cno/_next/static/chunks/webpack-5050628ecf47f5fe.js | 54.230.111.39 | 200 OK | 2.0 kB |
URL GET HTTP/2gateway.jerkmate.com/cno/_next/static/chunks/webpack-5050628ecf47f5fe.js IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeASCII text, with very long lines (3863), with no line terminators Hasha4a56c3572810f804232da971c7b5822 6f6561818e6155ab8543c64d22d9ee10f904622d adca7e781cb926a3e8339e95b6f09253b596764844e4878ba78c7a3ce7e9bc61
GET /cno/_next/static/chunks/webpack-5050628ecf47f5fe.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 1953
date: Sat, 25 Nov 2023 16:54:23 GMT
server: nginx/1.17.8
apigw-requestid: O9r9-j0dIAMEVlQ=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"f17-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: iKa8c_vs0r7BSWGwoYkTBxbnS7V-gKx-JeB9Plg2FipaSVoOu5IhfA==
age: 299764
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cno/_next/static/chunks/framework-106f20edc271d368.js | 54.230.111.39 | 200 OK | 42 kB |
URL GET HTTP/2gateway.jerkmate.com/cno/_next/static/chunks/framework-106f20edc271d368.js IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash2d3a5b25cf92243157319955d2903093 51b8322a5bed1a7ceaad6da2af45e8ad5cfd90e4 81db2acd47fb90b05f8f0b585acf356b1bd9676bd2094468e8f4331d6ff7ef8f
GET /cno/_next/static/chunks/framework-106f20edc271d368.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 42169
date: Sat, 25 Nov 2023 16:54:23 GMT
server: nginx/1.17.8
apigw-requestid: O9r9-j4DoAMEPDg=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"1fbc1-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Mjl4F2kJtCtxwAVbixYoqx8Zoj_lfJGzzv_gOYG-V7qK_JisT-lBrw==
age: 299764
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| cl0udh0st1ng.com/bo.js |  188.114.96.1 | | 42 kB |
IP188.114.96.1:0
Hashbc019f3a8a5e44e157b0ec4eb6586f1f 13650f4a446d40c055b51724996c2d1481a7364e 962b1c11423ab56de082a5eb493ae1b6840eedb1b539e014f8becdda4ec1db43
GET /bo.js HTTP/1.1
Host: cl0udh0st1ng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 29 Nov 2023 04:10:23 GMT
content-type: text/plain
etag: W/"65647a4f-1029"
last-modified: Mon, 27 Nov 2023 11:15:27 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1771
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H1XAVR0B1N7VfCjkenKAKcPVgPpWaHhk9lxVsPqzLpl8GrIvU7rBolSnqzZ%2BE6SuFVbD1ArAs32kEekQFviW6fkCFWxDGqc801oipsIlVGsdzfIzcAyuSNAEGQ%2B9Py%2BQR0Yu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d80027e8c05684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cno/_next/static/chunks/main-37d2def6d34d131a.js | 54.230.111.39 | 200 OK | 30 kB |
URL GET HTTP/2gateway.jerkmate.com/cno/_next/static/chunks/main-37d2def6d34d131a.js IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashe3107c292b526cedac3a31edd3a1bbce 841222f7cdbda89bb73ac7c6db02799afa8a89db 40efec9e042bfda23739659eb0a1a8fc3d566f8fca207572e1c3cdba72f1f4ed
GET /cno/_next/static/chunks/main-37d2def6d34d131a.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 30387
date: Sat, 25 Nov 2023 16:54:23 GMT
server: nginx/1.17.8
apigw-requestid: O9r9-gesIAMEP9w=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"1950f-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2c-T2y3Caxz_mYcVLlhGJ8WEonKYG7CTZBgVrBU3SJ3uN6MUGnDJMA==
age: 299764
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cno/_next/static/chunks/pages/_app-d22cba5dce0a9ccb.js | 54.230.111.39 | 200 OK | 148 kB |
URL GET HTTP/2gateway.jerkmate.com/cno/_next/static/chunks/pages/_app-d22cba5dce0a9ccb.js IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size148 kB (148524 bytes) Hashfd3640de48800a4644bc86d9f3b8746f 6571c24dc9dc7c1939f9fe0a22fb43ed9d4ef740 c4dd22ecfa5452e6a9b48129ba46850264e78ef2c3f62402106cec7de380b569
GET /cno/_next/static/chunks/pages/_app-d22cba5dce0a9ccb.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 148524
date: Sat, 25 Nov 2023 16:54:23 GMT
server: nginx/1.17.8
apigw-requestid: O9r9-gEUoAMEPSA=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"8146b-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gcjEmvvWarVdiMqrzdeegRV4gaw9S22_FXdCD6z5Oz98cuBTo4rG1Q==
age: 299764
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cno/assets/cno/jerkmate-logo-stacked.svg | 54.230.111.39 | 200 OK | 3.7 kB |
URL GET HTTP/2gateway.jerkmate.com/cno/assets/cno/jerkmate-logo-stacked.svg IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (4413) Hash189c355d8f8bf8f87cedb5e4286be3da c3ac730a0b9b21019e051333653cd0bc2c520b42 3018ee238018f1090d7df5849e7114619d18654c14b3ebd781503c88466b01aa
GET /cno/assets/cno/jerkmate-logo-stacked.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 3674
date: Wed, 29 Nov 2023 04:10:27 GMT
server: nginx/1.17.8
apigw-requestid: PJH0EiqLIAMEVQQ=
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Wed, 01 Nov 2023 17:54:56 GMT
etag: W/"2834-18b8c062980"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Nw6FSwotppVbpXb5y8zHDtOuqjR79qtnqDXSY2LjDEz6m-DyNQHGBA==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| tours.specia1.com/t/common/js/repoUtilsV2.js | 143.204.55.92 | | 5.7 kB |
URL tours.specia1.com/t/common/js/repoUtilsV2.js IP143.204.55.92:0
File typeHTML document, Unicode text, UTF-8 text, with very long lines (4429) Hashe1fe8337cb3ff836af25595b0148f9cd 15313e96650b74151fd680cadf0f7dd933027dcf 27d87f3bc3db994ef5097bfa1b982fab03972f000a9ef7046c542205873e05b3
GET /t/common/js/repoUtilsV2.js HTTP/1.1
Host: tours.specia1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/t/2076/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Tue, 28 Nov 2023 19:30:12 GMT
server: AmazonS3
content-encoding: gzip
date: Wed, 29 Nov 2023 04:10:23 GMT
etag: W/"463ab17c7b265e702f3c4390d78b31b3"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: jYfkEpuPaMi_ULgYQu1uW9N-axM3Dum78Kka5OBPg_InBZxBajU5sw==
age: 284
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cno/images/copyright/rta.jpg | 54.230.111.39 | 200 OK | 1.1 kB |
URL GET HTTP/2gateway.jerkmate.com/cno/images/copyright/rta.jpg IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 40x20, components 3\012- data Hash8be0a11d05f28033c145ac44ed811c54 9b70e400380447a1d3454157df4d704516765c07 500609be0c6b4ea773c4c10087f549410014bf4e35d483d3b4dce284d6ce035d
GET /cno/images/copyright/rta.jpg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 1056
date: Wed, 29 Nov 2023 04:10:27 GMT
server: nginx/1.17.8
apigw-requestid: PJH0EjXNoAMES3w=
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Wed, 01 Nov 2023 17:54:56 GMT
etag: W/"420-18b8c062980"
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -cnXTSGY13dU40PZnAEHQNB9RZ34_p_aTMl1hdqVvZp5r-GntZxkpQ==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Origin
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cno/images/copyright/asacp.png | 54.230.111.39 | 200 OK | 1.7 kB |
URL GET HTTP/2gateway.jerkmate.com/cno/images/copyright/asacp.png IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typePNG image data, 40 x 20, 8-bit colormap, non-interlaced\012- data Hashf6ff6eaa0c8129ee9ddc6cfc031cfdce f68f2920f1f56a5b1e0d1d09028c0acb2cfa8fc0 26e2c90b392d1986bd8e662d48385bd4de47aaf1602cbdc8da562b15b76ed7d7
GET /cno/images/copyright/asacp.png HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1668
date: Wed, 29 Nov 2023 04:10:27 GMT
server: nginx/1.17.8
apigw-requestid: PJH0EiRRIAMEPFg=
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Wed, 01 Nov 2023 17:54:56 GMT
etag: W/"684-18b8c062980"
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1ABHkdRCP44cLvOEw3CxMzsR7hWsynoLChqRV9xxIUSaV7r4GMKK1g==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Origin
X-Firefox-Spdy: h2
|
|
| hw-cdn2.adtng.com/delivery/idsync/idsync.min.js | 64.210.135.144 | 200 OK | 48 kB |
URL GET HTTP/2hw-cdn2.adtng.com/delivery/idsync/idsync.min.js IP64.210.135.144:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerDigiCert Inc Subject*.adtng.com FingerprintE3:A5:72:2C:70:97:86:2D:8A:21:17:4E:DC:02:6A:84:F1:B3:09:40 ValidityFri, 09 Jun 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT
File typeUnicode text, UTF-8 text, with very long lines (47550), with no line terminators Hash930adae67545064bc14c6678361c0974 b441eaaac3118e44f3b1300fbdf9bd9d95b046e4 35598acd20349e1fe6a84aad36121c51589e7017a8855ccd3a2409479cdd7d72
GET /delivery/idsync/idsync.min.js HTTP/1.1
Host: hw-cdn2.adtng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 29 Nov 2023 04:10:27 GMT
content-type: application/javascript
content-length: 47557
last-modified: Thu, 02 Mar 2023 15:50:17 GMT
expires: Wed, 28 Feb 2024 06:16:08 GMT
cache-control: max-age=10385753
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
accept-ranges: bytes
x-cdn-diag: ams5-6577-1-39065-h-0-0---;6297-24-2007114----0-0-0
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2 | 216.58.207.227 | 200 OK | 33 kB |
URL GET HTTP/2fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2 IP216.58.207.227:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 33148, version 1.0\012- data Hashe88b1871ed8eef59b7df05a91a6f2157 feebf868e5bc28362677fd6e92ac3d41c5c9715e 34208e63c50cc27f5c13b0c29629cf0561fa788f564a07f82cf877dc28e46b82
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33148
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 23:27:34 GMT
expires: Fri, 22 Nov 2024 23:27:34 GMT
cache-control: public, max-age=31536000
age: 448973
last-modified: Wed, 13 Sep 2023 22:39:50 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cmscloud/dA/6b738c21c0/en-us.svg | 54.230.111.39 | 200 OK | 34 kB |
URL GET HTTP/2gateway.jerkmate.com/cmscloud/dA/6b738c21c0/en-us.svg IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with CRLF line terminators Hash9a691f132e608a31d222630286523f11 c3b9a254046c8de338e7f20fb5774f7f684072f3 b80db0f9495ef35a1d73030bd0048cd8a6b793c31bb50d2bc3a8d64ab97a6d4c
GET /cmscloud/dA/6b738c21c0/en-us.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Sat, 25 Nov 2023 16:54:23 GMT
set-cookie: AWSALB=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/
AWSALBCORS=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="en-us.svg"
expires: Sun, 24 Nov 2024 16:54:23 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 22 Apr 2021 12:46:01 +0000
apigw-requestid: O9r9-jDxoAMEVyQ=
content-encoding: br
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: h3p_5adF7HO1O_kFo9p9UrENvwKGsuvt09mqFFBza1eFqmVgba2DcA==
age: 299764
referrer-policy: strict-origin-when-cross-origin
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 | 34.194.77.101 | 200 OK | 112 kB |
URL User Request GET HTTP/2cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 IP34.194.77.101:443
CertificateIssuerLet's Encrypt Subjectcno.jerkmate.com Fingerprint52:F2:4E:B6:5B:86:9B:E6:9E:C1:DD:BB:F7:57:E6:13:4E:9C:FD:FB ValiditySat, 25 Nov 2023 09:19:42 GMT - Fri, 23 Feb 2024 09:19:41 GMT
File typegzip compressed data, from Unix\012- data Size112 kB (112233 bytes) Hash7e3829be99634b785d77e7d27d55e297 f855f0dab32581bcd09931c754b71e7f211e73cc 27986fde0cffeae7e229513db8336f57ea47cdae7e61d567be538479c3f3b0ef
GET /?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 HTTP/1.1
Host: cno.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://moartraffic.engine.adglare.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.17.8
date: Wed, 29 Nov 2023 04:10:26 GMT
content-type: text/html; charset=utf-8
x-nextjs-cache: HIT
x-powered-by: Next.js
etag: "84k5dl6pje1u19"
cache-control: s-maxage=600, stale-while-revalidate
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cno/images/svg/icon-audio-muted.svg | 54.230.111.39 | 200 OK | 386 B |
URL GET HTTP/2gateway.jerkmate.com/cno/images/svg/icon-audio-muted.svg IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (700), with no line terminators Hash2ab61911c119f36840449016fb7ca986 076e0e793f0af5168bf09e1f1d6a362ed5483974 cda3148abe6b7dadff8ca9e980754152b5ef277baf4d3eefe8b143a0115c4c8e
GET /cno/images/svg/icon-audio-muted.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE; AWSALBCORS=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 386
date: Wed, 29 Nov 2023 04:10:27 GMT
server: nginx/1.17.8
apigw-requestid: PJH0KjoOoAMESgA=
cache-control: public, max-age=0
last-modified: Wed, 01 Nov 2023 17:54:56 GMT
etag: W/"2bc-18b8c062980"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yNdasSC-zGfHoSLnxH-Nt0Q-Uzmw0M4Xe6iHTa1yw5C9ggwzn51RwA==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding,Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cno/images/svg/close.svg | 54.230.111.39 | 200 OK | 278 B |
URL GET HTTP/2gateway.jerkmate.com/cno/images/svg/close.svg IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image\012- HTML document, ASCII text Hash375233a30c002a4d0069648c5d4adbb2 54d4592ac2c5d2c56f02372677433ed780efd8a8 a6d45b55c729895b6800dcdf3c403e68a5f32b1735ab04e8f2fe7bf204ae9150
GET /cno/images/svg/close.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE; AWSALBCORS=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 278
date: Wed, 29 Nov 2023 04:10:27 GMT
server: nginx/1.17.8
apigw-requestid: PJH0KiyDIAMEPNA=
cache-control: public, max-age=0
last-modified: Wed, 01 Nov 2023 17:54:56 GMT
etag: W/"1cc-18b8c062980"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: O2Lo-bVqgTcZQP7Qlq07sTJGTR-IJFPzlInkBa5NzLni56SfZT-1Lw==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding,Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cno/_next/static/chunks/847.9f6fd81aab105eac.js | 54.230.111.39 | 200 OK | 783 B |
URL GET HTTP/2gateway.jerkmate.com/cno/_next/static/chunks/847.9f6fd81aab105eac.js IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeASCII text, with very long lines (1576), with no line terminators Hash5d8d02ecf0f97eb59ac9fc597dc67fb1 145e952729a03299cfbbab027e998116f78ba68b 8a59940b637b518327794005200a1375533b191c9584bc3111314cbdbacd196b
GET /cno/_next/static/chunks/847.9f6fd81aab105eac.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE; AWSALBCORS=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 783
date: Sat, 25 Nov 2023 16:54:24 GMT
server: nginx/1.17.8
apigw-requestid: O9r-EgRwIAMEVHg=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"628-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: k5gMnx2nCw7PI1b6EJGwDYH1UlIUqseEJW8cYrg57WyJcSFxRILEzQ==
age: 299764
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cno/_next/static/chunks/33.07dc177144c3cd24.js | 54.230.111.39 | 200 OK | 2.1 kB |
URL GET HTTP/2gateway.jerkmate.com/cno/_next/static/chunks/33.07dc177144c3cd24.js IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeASCII text, with very long lines (6070), with no line terminators Hashb0f3bf1018053a8db03e91f78cd691df e57721f85009a44ee9c952c67b775d4d463ddeed a5a2971d05f637d789cf7568e681958f47d22fb77b067976196841ae74f1cfba
GET /cno/_next/static/chunks/33.07dc177144c3cd24.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE; AWSALBCORS=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 2091
date: Sat, 25 Nov 2023 16:54:24 GMT
server: nginx/1.17.8
apigw-requestid: O9r-EgyqIAMEPGg=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"17b6-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: M-hm36ab44QHgHLrtVg07K_A5PQjSOlJo82a6LjS0dhTbBRKVk_MIA==
age: 299764
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/wswidget/ws-session-widget.min.js | 54.230.111.39 | 200 OK | 36 kB |
URL GET HTTP/2gateway.jerkmate.com/wswidget/ws-session-widget.min.js IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeC source, ASCII text, with very long lines (36094), with no line terminators Hashc06710f1f08d0451be35cdccf64501a6 e6a6b6deef4ac11654ed99a88950f246574578cd b3ea67a96c89c18865ec2ee16d9041e4025539df8f0bb07d7c4f0011162d606f
GET /wswidget/ws-session-widget.min.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE; AWSALBCORS=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 36094
date: Wed, 29 Nov 2023 04:10:28 GMT
server: AmazonS3
last-modified: Mon, 16 Oct 2023 13:09:29 GMT
etag: "c06710f1f08d0451be35cdccf64501a6"
x-amz-server-side-encryption: AES256
cache-control: max-age=300
accept-ranges: bytes
apigw-requestid: PJH0MhiaIAMEa-g=
x-cache: Miss from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3385LMW5oXWGbVxQKEgJ8Y4SFKR4C11ArKqaWKXxWoek2mV3iVpR5g==
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/chathead/chathead.min.js | 54.230.111.39 | 200 OK | 31 kB |
URL GET HTTP/2gateway.jerkmate.com/chathead/chathead.min.js IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeASCII text, with very long lines (30966) Hash16f902294080f36ded4c798ece090be2 6c98d13c631c14efcbb6bae59edd5bd0ea4589de d43749c14955b4e89e29c82cd4ca0b64e86f79e8e7e055bb38de39962892c4ba
GET /chathead/chathead.min.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE; AWSALBCORS=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 31008
date: Wed, 29 Nov 2023 04:10:28 GMT
server: AmazonS3
last-modified: Tue, 27 Jun 2023 13:31:12 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
test: max-age=300
apigw-requestid: PJH0MhK-oAMESew=
etag: "16f902294080f36ded4c798ece090be2"
x-cache: Miss from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ue6mApDF43XJGLOWpgyD3PjqA5GM97rKMgWET-uemnCeYdqn8yozug==
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cno/images/svg/gold-coin.svg | 54.230.111.39 | 200 OK | 861 B |
URL GET HTTP/2gateway.jerkmate.com/cno/images/svg/gold-coin.svg IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (479) Hash1327a9157aca30bb7a0b642aaf381710 98e43661030ec672ff2db2298896bd3bcd2cf391 e73c0d04968435fd0836d34f98b52937cdf8dc24e9ec2d23de1cbe6114f5dc05
GET /cno/images/svg/gold-coin.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE; AWSALBCORS=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 861
date: Wed, 29 Nov 2023 04:10:28 GMT
server: nginx/1.17.8
apigw-requestid: PJH0OjtVoAMEVIQ=
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Wed, 01 Nov 2023 17:54:56 GMT
etag: W/"6b8-18b8c062980"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3ccQBnVC7nHOblsCS55ClaoWnfGtZc5FwmLDeQGqurr2lDNMaMKnsw==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cno-queries/profile?imgParam=WBnG6Z&lang=en | 54.230.111.39 | 200 OK | 1.1 kB |
URL GET HTTP/2gateway.jerkmate.com/cno-queries/profile?imgParam=WBnG6Z&lang=en IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeJSON data\012- , ASCII text, with very long lines (6412) Hash8b45613b79b59fadda73f3073369ea63 5c5de0bb364135ae527a8003397b9bbb349ec540 d2bdefbede5866cc3de82553e678e6964f001194c14b3b2ae4313d866c72c0f9
GET /cno-queries/profile?imgParam=WBnG6Z&lang=en HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 1070
date: Wed, 29 Nov 2023 04:10:28 GMT
apigw-requestid: PJH0NiECIAMEV4w=
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
access-control-allow-origin: *
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mujELX3AuwcUgPGKcDE7fH29bAJLyR7nkGcRbf7ay8-sy_dYBzFG1g==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-S6XTBZ5V47&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 85 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-S6XTBZ5V47&l=dataLayer&cx=c IP142.250.74.168:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34 ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File typeASCII text, with very long lines (22604) Hash68cc14b2a331a02116c01569fe4f7316 b1f524471d2aeda8eb3bcf0d93c872e542d6b8f1 eeab3f526ef7ca695dcc42a64e62d58f71781b808c13fc8c0a9acd002366ef8d
GET /gtag/js?id=G-S6XTBZ5V47&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 29 Nov 2023 04:10:28 GMT
expires: Wed, 29 Nov 2023 04:10:28 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 85136
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| gateway.jerkmate.com/cno/assets/cno/favicon/favicon-16x16.png | 54.230.111.39 | 200 OK | 1.0 kB |
URL GET HTTP/2gateway.jerkmate.com/cno/assets/cno/favicon/favicon-16x16.png IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typePNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data Hash8edf5f5b5af66f673d8fe60f8f9d6518 20e9ac1a90b684f1b029c7425723cb55412bf245 6a241a5306747918237619dfbd5d2bd975e56f3614a453ed6607fe50cef6c16a
GET /cno/assets/cno/favicon/favicon-16x16.png HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE; AWSALBCORS=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1023
date: Wed, 29 Nov 2023 04:10:28 GMT
server: nginx/1.17.8
apigw-requestid: PJH0RjzPoAMEVOw=
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Wed, 01 Nov 2023 17:54:56 GMT
etag: W/"3ff-18b8c062980"
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: iL1DOSuSIlalEihMHKfh-G7U2f5Bj3mDFQdpoIaaELnSwc2PIx6esw==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Origin
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cno/assets/cno/favicon/apple-touch-icon.png | 54.230.111.39 | 200 OK | 9.7 kB |
URL GET HTTP/2gateway.jerkmate.com/cno/assets/cno/favicon/apple-touch-icon.png IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data Hash1db81ea062c88fc3ceb7ad912c947b64 7df4aa8eadac0fdd0abc3a76fc775b1127edd152 90dc9041d03338343df09df4c75251bede72d757f24fe10ccab4d23ee4a087e8
GET /cno/assets/cno/favicon/apple-touch-icon.png HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE; AWSALBCORS=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 9714
date: Wed, 29 Nov 2023 04:10:28 GMT
server: nginx/1.17.8
apigw-requestid: PJH0RiE0IAMEPEw=
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Wed, 01 Nov 2023 17:54:56 GMT
etag: W/"25f2-18b8c062980"
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jRHK_E_ZNS6Wliwai2cLk4Mnm1OQZs2ynzJzCUvW0HP_m8Vy-cqNLQ==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Origin
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/session-api/ws-session?referer=https%3A%2F%2Fmoartraffic.engine.adglare.net%2F | 54.230.111.39 | 200 OK | 1.1 kB |
URL POST HTTP/2gateway.jerkmate.com/session-api/ws-session?referer=https%3A%2F%2Fmoartraffic.engine.adglare.net%2F IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeJSON data\012- , Unicode text, UTF-8 text, with very long lines (2976), with no line terminators Hash8a77ea46829ae86d81554e7aa224b0e8 9c4850817f64c7bc6b4fa002fbb1381d31f8c760 8b29096725e541fa1ef6ff2600a88e8e98854f58bfea7835a7f77866f8264d32
POST /session-api/ws-session?referer=https%3A%2F%2Fmoartraffic.engine.adglare.net%2F HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cno.jerkmate.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 1370
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 1140
date: Wed, 29 Nov 2023 04:10:28 GMT
server: nginx/1.19.0
apigw-requestid: PJH0SioeoAMEPEg=
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
access-control-allow-origin: *
x-cache: Miss from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: edQNhmTdRuMA6dw0UqNU43GXvOC-7WwDtJ3TS-HQAhMQ1O0YOV5l2A==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| hw-cdn2.adtng.com/delivery/idsync/idsync.min.js | 64.210.135.144 | 200 OK | 48 kB |
URL GET HTTP/2hw-cdn2.adtng.com/delivery/idsync/idsync.min.js IP64.210.135.144:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerDigiCert Inc Subject*.adtng.com FingerprintE3:A5:72:2C:70:97:86:2D:8A:21:17:4E:DC:02:6A:84:F1:B3:09:40 ValidityFri, 09 Jun 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT
File typeUnicode text, UTF-8 text, with very long lines (47550), with no line terminators Hash930adae67545064bc14c6678361c0974 b441eaaac3118e44f3b1300fbdf9bd9d95b046e4 35598acd20349e1fe6a84aad36121c51589e7017a8855ccd3a2409479cdd7d72
GET /delivery/idsync/idsync.min.js HTTP/1.1
Host: hw-cdn2.adtng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 29 Nov 2023 04:10:28 GMT
content-type: application/javascript
content-length: 47557
last-modified: Thu, 02 Mar 2023 15:50:17 GMT
expires: Wed, 28 Feb 2024 06:16:08 GMT
cache-control: max-age=10385753
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
accept-ranges: bytes
x-cdn-diag: ams5-6577-1-39065-h-0-0---;6297-30-2007114----0-0-1
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cmscloud/dA/9e1aeb949a/icone/dildo.svg | 54.230.111.39 | 200 OK | 942 B |
URL GET HTTP/2gateway.jerkmate.com/cmscloud/dA/9e1aeb949a/icone/dildo.svg IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (854) Hash92e6f2331bd9ca6f9f1b3d0c28354ee2 5a5124ae0f22df154490b1ee42e02e8e610ff7e3 c38a33570931bb0e962a06ad12462fadd87bfcb279ca760cf45760a6f55236c8
GET /cmscloud/dA/9e1aeb949a/icone/dildo.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cno.jerkmate.com/
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 942
date: Sat, 25 Nov 2023 17:19:08 GMT
set-cookie: AWSALB=v9SHgleFKM9Gb9bqF39Vnl6RZ4hUFVjIMR3qwAs2tWm29kaHYTkLHWleYSA5wdORfAXVGSGH8HZnK+QSIX58RjzxFuA+fz+QbRSoqaZrbYEz3CY/xxbOX8GV9u4U; Expires=Sat, 02 Dec 2023 17:19:08 GMT; Path=/
AWSALBCORS=v9SHgleFKM9Gb9bqF39Vnl6RZ4hUFVjIMR3qwAs2tWm29kaHYTkLHWleYSA5wdORfAXVGSGH8HZnK+QSIX58RjzxFuA+fz+QbRSoqaZrbYEz3CY/xxbOX8GV9u4U; Expires=Sat, 02 Dec 2023 17:19:08 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="dildo.svg"
expires: Sun, 24 Nov 2024 17:19:08 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 24 Feb 2022 18:59:00 +0000
etag: dot:96cea090-79a7-4c50-9939-b0ed4042ac8e:1645729140000:942
accept-ranges: bytes
access-control-allow-origin: *
apigw-requestid: O9vl_gYpIAMEaQA=
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9b-rbpZkcELVWvnRtMoSDg6U6SrDYdhih4coO50BPymoHtGn2hldXA==
age: 298280
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cmscloud/dA/1beecdef0f/icone/bonus.svg | 54.230.111.39 | 200 OK | 354 B |
URL GET HTTP/2gateway.jerkmate.com/cmscloud/dA/1beecdef0f/icone/bonus.svg IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image\012- , ASCII text Hash8f262193d91850e63ad9803736bbb037 79273a45967c622fd7eb4fc7dc7f1b990fe95069 741bc535a252b6e8d2a82a5744c09318853932fc9964b6735c99cbca9af0012a
GET /cmscloud/dA/1beecdef0f/icone/bonus.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cno.jerkmate.com/
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 354
date: Sat, 25 Nov 2023 16:54:25 GMT
set-cookie: AWSALB=dkW/BajvF4vZ6GwdGzksf6DVh93Ql7EGOmCs1pKZl168A1B7JP28F7KGKrmPerqKMPKMcvz+1GSSMgR8FD4Hq9mCBiUcYzf5vEgG+bAGY5PGP/Mv61imHEQy74nO; Expires=Sat, 02 Dec 2023 16:54:25 GMT; Path=/
AWSALBCORS=dkW/BajvF4vZ6GwdGzksf6DVh93Ql7EGOmCs1pKZl168A1B7JP28F7KGKrmPerqKMPKMcvz+1GSSMgR8FD4Hq9mCBiUcYzf5vEgG+bAGY5PGP/Mv61imHEQy74nO; Expires=Sat, 02 Dec 2023 16:54:25 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="bonus.svg"
expires: Sun, 24 Nov 2024 16:54:25 +0000
cache-control: public, max-age=31536000
last-modified: Mon, 30 May 2022 18:48:16 +0000
etag: dot:42570b57-b5ed-4e94-90b8-4dd97f5c4647:1653936496000:354
accept-ranges: bytes
access-control-allow-origin: *
apigw-requestid: O9r-NjSsoAMEVcw=
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Ucqew4fskfX34JumnPq-7RxcZB_tfYjX6qr7Z0iYfeUq-eJcZXZb3w==
age: 299763
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cmscloud/dA/ab5b50d2b1/icone/pussy.svg | 54.230.111.39 | 200 OK | 143 kB |
URL GET HTTP/2gateway.jerkmate.com/cmscloud/dA/ab5b50d2b1/icone/pussy.svg IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1381), with CRLF line terminators Size143 kB (142586 bytes) Hashdd5ff176d2a98b38242ff06339fa3b9a 271a02d15622c0cf4e7930a162c492b4e5073545 77de262d704dfb07500540db99d823663caa4b226d6d338990ffb1097e5fe7e6
GET /cmscloud/dA/ab5b50d2b1/icone/pussy.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cno.jerkmate.com/
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Sat, 25 Nov 2023 16:54:25 GMT
set-cookie: AWSALB=zNk3rlMvWUtEShU1dgVT/s0t7wK74fjq2QmB9CZ/oWFSY15K3Tm5jMSV8oTxKbXqv0LJQzbzNzcVyIAcQBx6ww+KJrdGoxLFZXIF59eqxerx587wlmUxBoR8T4jJ; Expires=Sat, 02 Dec 2023 16:54:25 GMT; Path=/
AWSALBCORS=zNk3rlMvWUtEShU1dgVT/s0t7wK74fjq2QmB9CZ/oWFSY15K3Tm5jMSV8oTxKbXqv0LJQzbzNzcVyIAcQBx6ww+KJrdGoxLFZXIF59eqxerx587wlmUxBoR8T4jJ; Expires=Sat, 02 Dec 2023 16:54:25 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="pussy.svg"
expires: Sun, 24 Nov 2024 16:54:25 +0000
cache-control: public, max-age=31536000
last-modified: Mon, 19 Dec 2022 13:29:06 +0000
access-control-allow-origin: *
apigw-requestid: O9r-Ni3goAMEajQ=
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 53dFeJW3fV-VftXA-DR-yh2klKzPPEyx9S_LDO46BwD6ZioBzsLSZA==
age: 299763
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2 | 216.58.207.227 | 200 OK | 33 kB |
URL GET HTTP/2fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2 IP216.58.207.227:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 33148, version 1.0\012- data Hashe88b1871ed8eef59b7df05a91a6f2157 feebf868e5bc28362677fd6e92ac3d41c5c9715e 34208e63c50cc27f5c13b0c29629cf0561fa788f564a07f82cf877dc28e46b82
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33148
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 23:27:34 GMT
expires: Fri, 22 Nov 2024 23:27:34 GMT
cache-control: public, max-age=31536000
age: 448974
last-modified: Wed, 13 Sep 2023 22:39:50 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cmscloud/dA/8c41111c2a/icone/feet.svg | 54.230.111.39 | 200 OK | 1.4 kB |
URL GET HTTP/2gateway.jerkmate.com/cmscloud/dA/8c41111c2a/icone/feet.svg IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1617), with CRLF line terminators Hash8cf3c77a814a409507ba19439fd885bb b0ee4edc60896a1ed8673ebf92232d3b69c79743 a920ad3c7bbc3294afc2979df641db4b00368292546f418e3ffd5cb29628b9d4
GET /cmscloud/dA/8c41111c2a/icone/feet.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cno.jerkmate.com/
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Sat, 25 Nov 2023 16:54:25 GMT
set-cookie: AWSALB=+P4A1yah2Ti3AkYOLVbsctCrar24GgTw7j/fVSPVd8SG+3IYAN3ABB0zxtNo8sTa1jH5RFdE3x125kRBlm4ERl7VlrN2rKzL4zSvaHU1PtPS1G0BbRQOGzMVTkNK; Expires=Sat, 02 Dec 2023 16:54:25 GMT; Path=/
AWSALBCORS=+P4A1yah2Ti3AkYOLVbsctCrar24GgTw7j/fVSPVd8SG+3IYAN3ABB0zxtNo8sTa1jH5RFdE3x125kRBlm4ERl7VlrN2rKzL4zSvaHU1PtPS1G0BbRQOGzMVTkNK; Expires=Sat, 02 Dec 2023 16:54:25 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="feet.svg"
expires: Sun, 24 Nov 2024 16:54:25 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 24 Feb 2022 19:00:22 +0000
access-control-allow-origin: *
apigw-requestid: O9r-NiQBoAMEaGg=
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gyl6ZVO4wNDr6Hz9IAigqsR7Fn0jGbbIVPXDZcjvlTY-rHAbBx-tag==
age: 299763
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
|
|
| rtb2-useast.afkwa.com/universalPixel?account=53338 | 174.137.133.49 | 200 OK | 42 B |
URL GET HTTP/1.1rtb2-useast.afkwa.com/universalPixel?account=53338 IP174.137.133.49:443 ASN#27257 WEBAIR-INTERNET
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerLet's Encrypt Subjectafkwa.com Fingerprint79:36:C0:44:D2:C9:AC:76:30:AC:E4:A7:2D:0F:44:C0:82:A6:F6:07 ValidityWed, 25 Oct 2023 06:37:23 GMT - Tue, 23 Jan 2024 06:37:22 GMT
File typeGIF image data, version 89a, 1 x 1\012- data Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /universalPixel?account=53338 HTTP/1.1
Host: rtb2-useast.afkwa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 04:10:29 GMT
Content-Type: image/gif
Content-Length: 42
Connection: keep-alive
Cache-Control: no-store
Age: 0
Pragma: no-cache
|
|
| gateway.jerkmate.com/cno/_next/static/chunks/pages/2257-6fda0a1a7a85eeeb.js | 54.230.111.39 | 200 OK | 2.1 kB |
URL GET HTTP/2gateway.jerkmate.com/cno/_next/static/chunks/pages/2257-6fda0a1a7a85eeeb.js IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeASCII text, with very long lines (4780), with no line terminators Hashe5cd75134f7010373f6a4c144c24bec1 8163f4eedc9ad2da72b4dccf2163979c17b9c15b 6b308312eb98c0b75d65cf59029e00d49b5b8d9aa33c10f47e61953633de6d74
GET /cno/_next/static/chunks/pages/2257-6fda0a1a7a85eeeb.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=6HfH05vokuSYeVDcgVDnT9czpSduP9jhRPLYHa/CmSHVfVuBq3VsXiw8w98TFRExqMYskvvdM7+QqbW5wUsGuYGrEEzPM0Zs/WY+JTt8/6rYKllh6V92ShM2dIUS; AWSALBCORS=6HfH05vokuSYeVDcgVDnT9czpSduP9jhRPLYHa/CmSHVfVuBq3VsXiw8w98TFRExqMYskvvdM7+QqbW5wUsGuYGrEEzPM0Zs/WY+JTt8/6rYKllh6V92ShM2dIUS; _gcl_au=1.1.858358057.1701231033; _ga_S6XTBZ5V47=GS1.1.1701231033.1.0.1701231033.0.0.0; _ga=GA1.1.1331298773.1701231033; d_fs=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 2086
date: Sun, 26 Nov 2023 07:37:20 GMT
server: nginx/1.17.8
apigw-requestid: O_tTlipXIAMEV1w=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"12ac-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wTI0sDZs7_B8s4PtB3Uw-erLI_AxMUHLfliMShusmi8wGMdUNEJ6MA==
age: 246789
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cmscloud/dA/612ef408c9/videoFile1920x1080Webm/Intro-1920X1080.webm?language_id=1 | 54.230.111.39 | 206 Partial Content | 15 MB |
URL GET HTTP/2gateway.jerkmate.com/cmscloud/dA/612ef408c9/videoFile1920x1080Webm/Intro-1920X1080.webm?language_id=1 IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeWebM\012- EBML file, creator webmB\20\012- data Size15 MB (15097430 bytes) Hash0fb391d740138301173657e14df9f1c1 43b5bc28e4470cb65a4aa9f1cf0896b60a2f27bf 2c4cedb1e8aeebb2f3b487edb03020d62255eec49093e662ef804fec8a1d77dc
| Analyzer | Verdict | Alert |
|---|
| YARAhub by abuse.ch | malware | meth_get_eip |
GET /cmscloud/dA/612ef408c9/videoFile1920x1080Webm/Intro-1920X1080.webm?language_id=1 HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=WFv4O8rTvhyl9RNa+4+mhr2F4Q2cAM8vkRUGvQPt7TOBIlwsNBo/0lQK1na9mnv3uL2vXAPVAZcHADwst5nuxNKjYdvei1mpf0S8YmuCk4KDd0ICD3GB9lSFEBB5; AWSALBCORS=WFv4O8rTvhyl9RNa+4+mhr2F4Q2cAM8vkRUGvQPt7TOBIlwsNBo/0lQK1na9mnv3uL2vXAPVAZcHADwst5nuxNKjYdvei1mpf0S8YmuCk4KDd0ICD3GB9lSFEBB5; _gcl_au=1.1.858358057.1701231033
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
content-type: video/webm
content-length: 15097430
date: Sat, 25 Nov 2023 16:54:25 GMT
set-cookie: AWSALB=6HfH05vokuSYeVDcgVDnT9czpSduP9jhRPLYHa/CmSHVfVuBq3VsXiw8w98TFRExqMYskvvdM7+QqbW5wUsGuYGrEEzPM0Zs/WY+JTt8/6rYKllh6V92ShM2dIUS; Expires=Sat, 02 Dec 2023 16:54:25 GMT; Path=/
AWSALBCORS=6HfH05vokuSYeVDcgVDnT9czpSduP9jhRPLYHa/CmSHVfVuBq3VsXiw8w98TFRExqMYskvvdM7+QqbW5wUsGuYGrEEzPM0Zs/WY+JTt8/6rYKllh6V92ShM2dIUS; Expires=Sat, 02 Dec 2023 16:54:25 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="Intro-1920X1080.webm"
expires: Sun, 24 Nov 2024 16:54:25 +0000
cache-control: public, max-age=31536000
last-modified: Fri, 10 Dec 2021 16:23:56 +0000
etag: dot:e1ad0f2a-5872-459d-90a3-bf0c2c4b4ac7:1639153436000:15097430
accept-ranges: bytes
apigw-requestid: O9r-QjhLoAMEVag=
content-range: bytes 0-15097429/15097430
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bQAcUPgGx9mIMTmbbfQDcUF3Xmo3wPufklIYkbCPuqA1Ux36nGJatA==
age: 299763
referrer-policy: strict-origin-when-cross-origin
vary: Origin
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cno/_next/static/chunks/pages/antispam-91929b49973764a8.js | 54.230.111.39 | | 1.9 kB |
URL GET gateway.jerkmate.com/cno/_next/static/chunks/pages/antispam-91929b49973764a8.js IP54.230.111.39:0
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeASCII text, with very long lines (4024), with no line terminators Hashfe2884f1217d2eefc7b16f3bdf80bf8b 0c094e5c2c0ecbd3e8262c01bfa469ddab5a6f85 9e0d3282f6588ff78ec80786aea56be9a97ef010ba32c65ad8e042bb868d4f18
GET /cno/_next/static/chunks/pages/antispam-91929b49973764a8.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=6HfH05vokuSYeVDcgVDnT9czpSduP9jhRPLYHa/CmSHVfVuBq3VsXiw8w98TFRExqMYskvvdM7+QqbW5wUsGuYGrEEzPM0Zs/WY+JTt8/6rYKllh6V92ShM2dIUS; AWSALBCORS=6HfH05vokuSYeVDcgVDnT9czpSduP9jhRPLYHa/CmSHVfVuBq3VsXiw8w98TFRExqMYskvvdM7+QqbW5wUsGuYGrEEzPM0Zs/WY+JTt8/6rYKllh6V92ShM2dIUS; _gcl_au=1.1.858358057.1701231033; _ga_S6XTBZ5V47=GS1.1.1701231033.1.0.1701231033.0.0.0; _ga=GA1.1.1331298773.1701231033; d_fs=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 1931
date: Wed, 29 Nov 2023 04:10:29 GMT
server: nginx/1.17.8
apigw-requestid: PJH0ahwFIAMESkg=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"fb8-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: aKxCUZbRJ1k-u8UtSVowtFItOD6cLN3Pti82M3QbBgeNJqt2-x8rHw==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| sync.atsptp.com/d/jsfp/4cb725660c43031e3b06c75892d96c5a | 66.254.114.220 | 200 OK | 36 B |
URL GET HTTP/2sync.atsptp.com/d/jsfp/4cb725660c43031e3b06c75892d96c5a IP66.254.114.220:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerLet's Encrypt Subjectatsptp.com FingerprintFA:9C:B6:E3:80:79:B1:4C:0A:4F:62:F2:5B:FC:59:2B:7B:5D:DF:91 ValidityTue, 17 Oct 2023 23:28:59 GMT - Mon, 15 Jan 2024 23:28:58 GMT
File typeASCII text, with no line terminators Hash3558911d63648b5e1ba3cafc6808b581 5e38b07e8cd6bbc10bbbfec445ff662f1a2058cd 7ced72031459202d78ba2e76d284c9548b0e0c7fc3899b19585136faf7dcb10e
GET /d/jsfp/4cb725660c43031e3b06c75892d96c5a HTTP/1.1
Host: sync.atsptp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
set-cookie: d_uidb=4d476c00-13db-a0f5-0ab3-bd39a851979c; Max-Age=31536000; Expires=Thu, 28 Nov 2024 04:10:29 GMT; Path=/; Domain=sync.atsptp.com; SameSite=Lax
date: Wed, 29 Nov 2023 04:10:29 GMT
access-control-allow-origin: https://cno.jerkmate.com
vary: Origin
access-control-allow-credentials: true
content-type: text/plain
content-length: 36
x-trace: 2B59DE93776474ED084A21A1256143B89847E389C9000000000000000000
via: 1.1 google
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
X-Firefox-Spdy: h2
|
|
| sync.atsptp.com/d/jsfp/4cb725660c43031e3b06c75892d96c5a | 66.254.114.220 | 200 OK | 36 B |
URL GET HTTP/2sync.atsptp.com/d/jsfp/4cb725660c43031e3b06c75892d96c5a IP66.254.114.220:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerLet's Encrypt Subjectatsptp.com FingerprintFA:9C:B6:E3:80:79:B1:4C:0A:4F:62:F2:5B:FC:59:2B:7B:5D:DF:91 ValidityTue, 17 Oct 2023 23:28:59 GMT - Mon, 15 Jan 2024 23:28:58 GMT
File typeASCII text, with no line terminators Hash3558911d63648b5e1ba3cafc6808b581 5e38b07e8cd6bbc10bbbfec445ff662f1a2058cd 7ced72031459202d78ba2e76d284c9548b0e0c7fc3899b19585136faf7dcb10e
GET /d/jsfp/4cb725660c43031e3b06c75892d96c5a HTTP/1.1
Host: sync.atsptp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
set-cookie: d_uidb=4d476c00-13db-a0f5-0ab3-bd39a851979c; Max-Age=31536000; Expires=Thu, 28 Nov 2024 04:10:29 GMT; Path=/; Domain=sync.atsptp.com; SameSite=Lax
date: Wed, 29 Nov 2023 04:10:29 GMT
access-control-allow-origin: https://cno.jerkmate.com
vary: Origin
access-control-allow-credentials: true
content-type: text/plain
content-length: 36
x-trace: 2B8BF33D6921F303A1048798E8B848DDAA32EE7FD9000000000000000000
via: 1.1 google
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
X-Firefox-Spdy: h2
|
|
| cdn.onesignal.com/sdks/OneSignalSDK.js |  104.18.214.59 | 200 OK | 2.9 kB |
URL GET HTTP/2cdn.onesignal.com/sdks/OneSignalSDK.js IP104.18.214.59:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint68:AF:AC:17:CA:79:7A:8F:ED:F8:D8:57:93:79:CA:FB:69:50:9B:19 ValidityWed, 03 May 2023 00:00:00 GMT - Thu, 02 May 2024 23:59:59 GMT
File typeASCII text, with very long lines (9163) Hasha87c48d211877c49b878679b2e3cdab8 e75653dd0156806682e39abe8b1323ed40d840ca 4191d89ec03bce5dc273716075335e31851031184b0fff0ab9fc900a8442019f
GET /sdks/OneSignalSDK.js HTTP/1.1
Host: cdn.onesignal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 29 Nov 2023 04:10:33 GMT
content-type: application/javascript
etag: W/"a87c48d211877c49b878679b2e3cdab8"
access-control-allow-headers: OneSignal-Subscription-Id
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 76
expires: Sat, 02 Dec 2023 04:10:33 GMT
cache-control: public, max-age=259200
set-cookie: __cf_bm=u1dLeBIajQdw_sNqZdgM24pa32FkOQrxv2ix8FmGgYU-1701231033-0-AWVALSPUS/nr7fTnUEtCrimStGeFnWydOV4pyHvIJeb/dowlp8VJ8Dmr5ltqzfsP278Pr1XQ7B53TeQ9CpITAac=; path=/; expires=Wed, 29-Nov-23 04:40:33 GMT; domain=.onesignal.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
server: cloudflare
cf-ray: 82d800696b55712e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| sync.atsptp.com/link/4d476c00-13db-a0f5-0ab3-bd39a851979c/origin/a/oldd/4d476c00-13db-a0f5-0ab3-bd39a851979c | 66.254.114.220 | 200 OK | 36 B |
URL POST HTTP/2sync.atsptp.com/link/4d476c00-13db-a0f5-0ab3-bd39a851979c/origin/a/oldd/4d476c00-13db-a0f5-0ab3-bd39a851979c IP66.254.114.220:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerLet's Encrypt Subjectatsptp.com FingerprintFA:9C:B6:E3:80:79:B1:4C:0A:4F:62:F2:5B:FC:59:2B:7B:5D:DF:91 ValidityTue, 17 Oct 2023 23:28:59 GMT - Mon, 15 Jan 2024 23:28:58 GMT
File typeASCII text, with no line terminators Hash3558911d63648b5e1ba3cafc6808b581 5e38b07e8cd6bbc10bbbfec445ff662f1a2058cd 7ced72031459202d78ba2e76d284c9548b0e0c7fc3899b19585136faf7dcb10e
POST /link/4d476c00-13db-a0f5-0ab3-bd39a851979c/origin/a/oldd/4d476c00-13db-a0f5-0ab3-bd39a851979c HTTP/1.1
Host: sync.atsptp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 144
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
set-cookie: d_uidb=4d476c00-13db-a0f5-0ab3-bd39a851979c; Max-Age=31536000; Expires=Thu, 28 Nov 2024 04:10:34 GMT; Path=/; Domain=sync.atsptp.com; SameSite=Lax
date: Wed, 29 Nov 2023 04:10:34 GMT
access-control-allow-origin: https://cno.jerkmate.com
vary: Origin
access-control-allow-credentials: true
content-type: text/plain
content-length: 36
x-trace: 2BB656BB4F53913139CFB492C40E6A8EE968B63E07000000000000000000
via: 1.1 google
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cmscloud/dA/565c6ec629/icone/spank.svg | 54.230.111.39 | 200 OK | 2.0 kB |
URL GET HTTP/2gateway.jerkmate.com/cmscloud/dA/565c6ec629/icone/spank.svg IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2060), with no line terminators Hasha14d3e9b27c801899ff38bbc2828d453 613e22ea39e91d64f20838c306e1a9c1dc061300 365d1e15c08c5f6a32d52369082583ffad239f9d611c687845e1b24b5707b736
GET /cmscloud/dA/565c6ec629/icone/spank.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cno.jerkmate.com/
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Sat, 25 Nov 2023 16:54:25 GMT
set-cookie: AWSALB=JXbYshJw21hEtZ6ejvVtOJNMzBnY6A2wvlpdEOIKUW0BHsN/65zKob2JCZuWDZbgqzRNoPWjr67PBj7lauLHrBvKaaJXFyUQ+C5U8Mb5OCPOMvoxeGR8u+A+Gwry; Expires=Sat, 02 Dec 2023 16:54:25 GMT; Path=/
AWSALBCORS=JXbYshJw21hEtZ6ejvVtOJNMzBnY6A2wvlpdEOIKUW0BHsN/65zKob2JCZuWDZbgqzRNoPWjr67PBj7lauLHrBvKaaJXFyUQ+C5U8Mb5OCPOMvoxeGR8u+A+Gwry; Expires=Sat, 02 Dec 2023 16:54:25 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="spank.svg"
expires: Sun, 24 Nov 2024 16:54:25 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 24 Feb 2022 18:58:00 +0000
access-control-allow-origin: *
apigw-requestid: O9r-Nh8QoAMEaCA=
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: R5TAKhAhtt-NjkdkZiwWdJpUiUYk5s_n47wxbcSY-cndEeGxcq8GzA==
age: 299763
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cno/_next/static/chunks/pages/index-97876df10145b412.js | 54.230.111.39 | 200 OK | 538 B |
URL GET HTTP/2gateway.jerkmate.com/cno/_next/static/chunks/pages/index-97876df10145b412.js IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeASCII text, with very long lines (542), with no line terminators Hashc6af5e80b6f89269f33eb86b2b23c0dc dddc81f83803c05f17e8875f26e1f8e677ad288b 63784a148cb230fbdd8fc63b8a039952717c81a4c5bcace9e630e09fa55207eb
GET /cno/_next/static/chunks/pages/index-97876df10145b412.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 334
date: Sat, 25 Nov 2023 16:54:23 GMT
server: nginx/1.17.8
apigw-requestid: O9r99gHkoAMES5g=
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"21a-18b8c0769d0"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 71sLFlxNAsofi6FiBm3nhINK2nl_GWxPLYAxX67iG6glfBuCKfvBrg==
age: 299764
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding,Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cno/images/svg/empty-coin.svg | 54.230.111.39 | 200 OK | 1.2 kB |
URL GET HTTP/2gateway.jerkmate.com/cno/images/svg/empty-coin.svg IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (1344), with no line terminators Hash57695e4620c99ba928ce56a23788008e 9d7ad6c0625215e7df8cef40d8b406e86d2be8a0 3ab19e1a398aa990bec15b35338ff9110a941fd6066082f767e72ee085959fde
GET /cno/images/svg/empty-coin.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE; AWSALBCORS=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE; _gcl_au=1.1.858358057.1701231033
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 635
date: Wed, 29 Nov 2023 04:10:28 GMT
server: nginx/1.17.8
apigw-requestid: PJH0UiPeIAMEVmw=
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Wed, 01 Nov 2023 17:54:56 GMT
etag: W/"4cd-18b8c062980"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: S20dhlXDrqglYOy_sv2XPAOmC97Y30oaaIwnNGZ3elbXRRpLbuw1wg==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cmscloud/dA/42c0118012/icone/licking.svg | 54.230.111.39 | 200 OK | 2.0 kB |
URL GET HTTP/2gateway.jerkmate.com/cmscloud/dA/42c0118012/icone/licking.svg IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2060), with no line terminators Hash9629121ba2ff23415304d7d2622bd07a ad59640f70b80061eac6090eeed086b86e1ca87a 2b4ee0fd4ce738943c894930221a5d4d4443128a057e9eb8d6e309e06a29d493
GET /cmscloud/dA/42c0118012/icone/licking.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cno.jerkmate.com/
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Sat, 25 Nov 2023 16:54:25 GMT
set-cookie: AWSALB=QUmFyEr+fRI1gcFOdbg9agh3Wn+xBl5jlXnppH97Nd4P3/nyurN227RHeud11NAX6jRhga81RtMFi3heT+61VstX/7rtTFshh7Atv4Xq5i1SRE/+RRy5jLM0/Krr; Expires=Sat, 02 Dec 2023 16:54:25 GMT; Path=/
AWSALBCORS=QUmFyEr+fRI1gcFOdbg9agh3Wn+xBl5jlXnppH97Nd4P3/nyurN227RHeud11NAX6jRhga81RtMFi3heT+61VstX/7rtTFshh7Atv4Xq5i1SRE/+RRy5jLM0/Krr; Expires=Sat, 02 Dec 2023 16:54:25 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="licking.svg"
expires: Sun, 24 Nov 2024 16:54:25 +0000
cache-control: public, max-age=31536000
last-modified: Mon, 30 May 2022 18:46:58 +0000
access-control-allow-origin: *
apigw-requestid: O9r-NgsSoAMEV5w=
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZbBzYmdQgbndNoMrUkb2zlc4ORIS-65I3lJuNwM-NNU-YcjSRUkPWQ==
age: 299763
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cno/_next/static/_H7vFNH_oBuxYbBhMUL_0/_ssgManifest.js | 54.230.111.39 | 200 OK | 106 B |
URL GET HTTP/2gateway.jerkmate.com/cno/_next/static/_H7vFNH_oBuxYbBhMUL_0/_ssgManifest.js IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash8a35b6b49855fde507fa22e7c07440dc d1d9b47b4a448b3775cdf4295b03e6931612564b 84b2c31549840c48ebb24f28a285f8d72d9098c8a918521b34db51491245392f
GET /cno/_next/static/_H7vFNH_oBuxYbBhMUL_0/_ssgManifest.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 106
date: Sat, 25 Nov 2023 16:54:23 GMT
server: nginx/1.17.8
apigw-requestid: O9r9-igCoAMEVsA=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:39 GMT
etag: W/"6a-18b8c07bbd8"
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 28bQC51nSrDwbM_40hwaWor-2k9rcXqN_6lWouYM_z13R5kerJvRJg==
age: 299764
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cmscloud/dA/789b74db67/poster/April.O.jpg | 54.230.111.39 | 200 OK | 142 kB |
URL GET HTTP/2gateway.jerkmate.com/cmscloud/dA/789b74db67/poster/April.O.jpg IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, datetime=2021:08:27 09:34:21], baseline, precision 8, 1920x1080, components 3\012- data Size142 kB (141932 bytes) Hash15b9224237150f19ceb27ad3e2f024a8 e28d97ad95dae308dbf8ede68786ac6ab3f45343 a6360ce603478028682de735177fb02a855f7543875545bcf38cb8b0afa84001
GET /cmscloud/dA/789b74db67/poster/April.O.jpg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE; AWSALBCORS=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE; _gcl_au=1.1.858358057.1701231033
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 141932
date: Sat, 25 Nov 2023 16:54:25 GMT
set-cookie: AWSALB=WFv4O8rTvhyl9RNa+4+mhr2F4Q2cAM8vkRUGvQPt7TOBIlwsNBo/0lQK1na9mnv3uL2vXAPVAZcHADwst5nuxNKjYdvei1mpf0S8YmuCk4KDd0ICD3GB9lSFEBB5; Expires=Sat, 02 Dec 2023 16:54:25 GMT; Path=/
AWSALBCORS=WFv4O8rTvhyl9RNa+4+mhr2F4Q2cAM8vkRUGvQPt7TOBIlwsNBo/0lQK1na9mnv3uL2vXAPVAZcHADwst5nuxNKjYdvei1mpf0S8YmuCk4KDd0ICD3GB9lSFEBB5; Expires=Sat, 02 Dec 2023 16:54:25 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="April.O.jpg"
expires: Sun, 24 Nov 2024 16:54:25 +0000
cache-control: public, max-age=31536000
last-modified: Fri, 16 Dec 2022 20:54:04 +0000
etag: dot:a4d84244-5d9f-4865-93de-5dcaa4f2e80d:1671224044000:141932
accept-ranges: bytes
apigw-requestid: O9r-NitUoAMEVeA=
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7PHELGEdcPXtV5tT6rAULW-laSFqh4n8oiWq_r5ulOQcDEFwryqQtQ==
age: 299763
referrer-policy: strict-origin-when-cross-origin
vary: Origin
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cno/assets/cno/jerkmate-logo.svg | 54.230.111.39 | 200 OK | 10 kB |
URL GET HTTP/2gateway.jerkmate.com/cno/assets/cno/jerkmate-logo.svg IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (4429) Hash63bd4d06abcc17b960a84e9d4cad707f 3ed5674bb842e76495f3c6374a2d331239725930 f0eb97c1af10efcbd66d57b8ee1d3bfb75df50c02714defc76c1e539510077f7
GET /cno/assets/cno/jerkmate-logo.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 3555
date: Wed, 29 Nov 2023 04:10:27 GMT
server: nginx/1.17.8
apigw-requestid: PJH0EjGXoAMEVaw=
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Wed, 01 Nov 2023 17:54:56 GMT
etag: W/"27fb-18b8c062980"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DkUF4JKdZZ2Y0U6lwHIuvCpzxGdhEid7FQEZHBOASeSzhrJOW5YUjg==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cmscloud/dA/af79c4e71f/icone/boobs.svg | 54.230.111.39 | 200 OK | 1.5 kB |
URL GET HTTP/2gateway.jerkmate.com/cmscloud/dA/af79c4e71f/icone/boobs.svg IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1557), with no line terminators Hash6e3c8bc16795694c7b6346574e6c34c1 ee2e92404871c871adf8e2d55e411e23b95e2d1e 5d44e057858dfb1f46569f63cbdd8f418beeab88f38db89bb7ec4984e868e281
GET /cmscloud/dA/af79c4e71f/icone/boobs.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cno.jerkmate.com/
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Sat, 25 Nov 2023 16:54:25 GMT
set-cookie: AWSALB=BIiLVhB5Bf2i/Jt+6qIV5aCKe4HlCB+Zr0q0FuggH9o8QORgah7AFlXtC7hudcIlCzYV4gaSK/sm/JBdEZ/C+63U/hThRur02jaFr/XqemPpMnwn7weqBJi619l3; Expires=Sat, 02 Dec 2023 16:54:25 GMT; Path=/
AWSALBCORS=BIiLVhB5Bf2i/Jt+6qIV5aCKe4HlCB+Zr0q0FuggH9o8QORgah7AFlXtC7hudcIlCzYV4gaSK/sm/JBdEZ/C+63U/hThRur02jaFr/XqemPpMnwn7weqBJi619l3; Expires=Sat, 02 Dec 2023 16:54:25 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="boobs.svg"
expires: Sun, 24 Nov 2024 16:54:25 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 24 Feb 2022 18:57:43 +0000
access-control-allow-origin: *
apigw-requestid: O9r-NgOAIAMEPdg=
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cnKkL31KTmdzzvAP-kQq9XcRqgfuX4kUCy4liutSv6Sl892wNlrmIg==
age: 299763
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cno/_next/static/chunks/361-784cbad91e244c85.js | 54.230.111.39 | 200 OK | 138 kB |
URL GET HTTP/2gateway.jerkmate.com/cno/_next/static/chunks/361-784cbad91e244c85.js IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size138 kB (138153 bytes) Hashfa5be163d6708407e3fa137d0b404ab9 2bbe86887fa704cd736ba29fbf1490a0b45e56e1 c14636a2e9a19991354462a4dc6431299c166f09aec2c761426c921a7294146d
GET /cno/_next/static/chunks/361-784cbad91e244c85.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 40184
date: Sat, 25 Nov 2023 16:54:23 GMT
server: nginx/1.17.8
apigw-requestid: O9r9-gZwIAMEVhw=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"21ba9-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pNWXqeGlYSVyAQyXv5hlAU1VQUuxiDRtNrUpeCr1HetPaU2ablLf6Q==
age: 299764
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cmscloud/dA/eb4e3ddc66/es.svg | 54.230.111.39 | 200 OK | 664 B |
URL GET HTTP/2gateway.jerkmate.com/cmscloud/dA/eb4e3ddc66/es.svg IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (702), with no line terminators Hash4b8b4c341f7c3c427773fd5a6e1f5fba 4195b6d263f5cc712d02df7cfee66bc487cb42f0 490b8e76c0d1268a0f4ef622fef51b4d77b1e166aba848a580bdc634b9058490
GET /cmscloud/dA/eb4e3ddc66/es.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 664
date: Sat, 25 Nov 2023 16:54:23 GMT
set-cookie: AWSALB=dWIeNiKh4aHPSsmKv+apRffPwmtPLtP8XbA/eWmrO5Jh4BtpeVKSmlXPDJO/HYGqAEvZ1DGJU4PwFnPGDliwxocNqMaT9qm8ho4aKO78HkeBdxMXYDkjaDaBPE3B; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/
AWSALBCORS=dWIeNiKh4aHPSsmKv+apRffPwmtPLtP8XbA/eWmrO5Jh4BtpeVKSmlXPDJO/HYGqAEvZ1DGJU4PwFnPGDliwxocNqMaT9qm8ho4aKO78HkeBdxMXYDkjaDaBPE3B; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="es.svg"
expires: Sun, 24 Nov 2024 16:54:23 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 22 Apr 2021 12:46:01 +0000
etag: dot:2cc6772b-4348-4c9f-993c-7090b64d2a65:1619095561000:664
accept-ranges: bytes
apigw-requestid: O9r9_hg_IAMESJA=
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TeVlsGdAz7p2Z3kONBaz2lsTyYVOsl6tYr82Q3QRVaeSlLJl5Yh8jQ==
age: 299764
referrer-policy: strict-origin-when-cross-origin
vary: Origin
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cmscloud/dA/3b3403f739/icone/ass.svg | 54.230.111.39 | 200 OK | 1.9 kB |
URL GET HTTP/2gateway.jerkmate.com/cmscloud/dA/3b3403f739/icone/ass.svg IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1948), with no line terminators Hash8c711f02837d3c049cadba9d4bded493 ce7c6cfa27ed4ae67154c9ffa1809d1408db5e81 0a122a144fb188600ea2d1484965e4ae795b3e9a6cb45422672d32150e6a10af
GET /cmscloud/dA/3b3403f739/icone/ass.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cno.jerkmate.com/
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Sat, 25 Nov 2023 16:54:25 GMT
set-cookie: AWSALB=vvpFDr1bCEaLb2gp5CZnJM6oK5fUdK0gnsz1lCePRJ7mAdya69BXWQfIJaObN9/eh5FxN7xPNuunhRpe22Ajxr+tt3ZcLnpNsR2FGyLs2GrWDxQTs0AKYqDVmVFv; Expires=Sat, 02 Dec 2023 16:54:25 GMT; Path=/
AWSALBCORS=vvpFDr1bCEaLb2gp5CZnJM6oK5fUdK0gnsz1lCePRJ7mAdya69BXWQfIJaObN9/eh5FxN7xPNuunhRpe22Ajxr+tt3ZcLnpNsR2FGyLs2GrWDxQTs0AKYqDVmVFv; Expires=Sat, 02 Dec 2023 16:54:25 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="ass.svg"
expires: Sun, 24 Nov 2024 16:54:25 +0000
cache-control: public, max-age=31536000
last-modified: Mon, 19 Dec 2022 13:22:38 +0000
access-control-allow-origin: *
apigw-requestid: O9r-NgUEoAMEV9A=
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7UXHaf1fAnkb7pziNxJj0Z8eHJqI5dnZ4dPaqbISlhdL67E2vCpziQ==
age: 299763
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-W8XR2C2 | 142.250.74.168 | 200 OK | 315 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-W8XR2C2 IP142.250.74.168:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34 ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File typeASCII text, with very long lines (33883) Size315 kB (315395 bytes) Hash546822fcaf898e216efd0988453c0c58 7c5f85f56873e836ded08c88073c5db58173d018 bb01f059408af04b41b42c7e79e7ac56e2e04ca419ea19a3b2ccfe65d6146095
GET /gtm.js?id=GTM-W8XR2C2 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 29 Nov 2023 04:10:27 GMT
expires: Wed, 29 Nov 2023 04:10:27 GMT
cache-control: private, max-age=900
last-modified: Wed, 29 Nov 2023 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 97074
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cmscloud/dA/a7376915f9/icone/blowjob.svg | 54.230.111.39 | 200 OK | 4.4 kB |
URL GET HTTP/2gateway.jerkmate.com/cmscloud/dA/a7376915f9/icone/blowjob.svg IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4458), with no line terminators Hash0a711646499ee8bb4f565197200e327b 5b4df5ccdf07eb8c4850acaaba4b2ac23bb3dfdf 0d3e44bfbdebd0153fb2804dd8b42bcd1686ae64dbf79705a0510c8b4b981070
GET /cmscloud/dA/a7376915f9/icone/blowjob.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cno.jerkmate.com/
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Sat, 25 Nov 2023 17:19:08 GMT
set-cookie: AWSALB=Qzvwjvyeeoe6o12foOpcBKnBJ4dD3mu58scUxMi6NOHppSRmxTIOunMOmRiu53VhJzIkpT/sbnTXQ7VJBRYX58V2YH7zw88UIYWy4ZPhxYkA5wE0SaHao9aKLK7V; Expires=Sat, 02 Dec 2023 17:19:08 GMT; Path=/
AWSALBCORS=Qzvwjvyeeoe6o12foOpcBKnBJ4dD3mu58scUxMi6NOHppSRmxTIOunMOmRiu53VhJzIkpT/sbnTXQ7VJBRYX58V2YH7zw88UIYWy4ZPhxYkA5wE0SaHao9aKLK7V; Expires=Sat, 02 Dec 2023 17:19:08 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="blowjob.svg"
expires: Sun, 24 Nov 2024 17:19:08 +0000
cache-control: public, max-age=31536000
last-modified: Mon, 30 May 2022 18:47:17 +0000
access-control-allow-origin: *
apigw-requestid: O9vl_h26IAMEVtw=
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: puhtG9qZ69rSKjLgk0QBJFu8QJ0ojtw7M3azo0g3tWmwhiuFwfdFUg==
age: 298280
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
|
|
| go.moartraffic.com/go.php?t=55036&aid=&sid=_BIDCreative%3A+240429687&hts_id=76ba200e-db6d-42d4-868f-1f8ef76b5c19&product_id=&agcid=fTFwa1FXMDIhPS0pKiE-Iz0qMWdQXDEoKiU2ISggIDwlNiQ_JnpqWlYqLScrLCMmOy4zPiQmNTpne21lJyM6ITAlNX9PVyYjKyAmOC4wKi8lPit0aW9wb0ZsYDAyJjIpKSEhOCc3Mz8mcGgxKCouNDchIzw9JSs3JjA7NDFxZ2JrbWpqc2t1dzUxPjtWXEAqOyd9fWV7anInPDF0ejo_MGplam5rdmArLSdAenZ8fnxqKCY1LDYjMCU1aWd9Y2x5dHcqLSd8djE-K3h2JCkmTnF9dmdgdjs0MXZmemRvfSYjOmBibXRseCk9cWZ6JyoxZX1samJtNT87bWF-b3JgYjEoO3l3dGdlaHhsMSgrNSkkZnZ1R2F3bnJ3fGoxKCt_cXJjdyNEPE4nY2psamA8emdgZXplKDZwfWU1eA.._004dc800 | 52.86.83.175 | 302 Found | 86 kB |
URL User Request GET HTTP/2go.moartraffic.com/go.php?t=55036&aid=&sid=_BIDCreative%3A+240429687&hts_id=76ba200e-db6d-42d4-868f-1f8ef76b5c19&product_id=&agcid=fTFwa1FXMDIhPS0pKiE-Iz0qMWdQXDEoKiU2ISggIDwlNiQ_JnpqWlYqLScrLCMmOy4zPiQmNTpne21lJyM6ITAlNX9PVyYjKyAmOC4wKi8lPit0aW9wb0ZsYDAyJjIpKSEhOCc3Mz8mcGgxKCouNDchIzw9JSs3JjA7NDFxZ2JrbWpqc2t1dzUxPjtWXEAqOyd9fWV7anInPDF0ejo_MGplam5rdmArLSdAenZ8fnxqKCY1LDYjMCU1aWd9Y2x5dHcqLSd8djE-K3h2JCkmTnF9dmdgdjs0MXZmemRvfSYjOmBibXRseCk9cWZ6JyoxZX1samJtNT87bWF-b3JgYjEoO3l3dGdlaHhsMSgrNSkkZnZ1R2F3bnJ3fGoxKCt_cXJjdyNEPE4nY2psamA8emdgZXplKDZwfWU1eA.._004dc800 IP52.86.83.175:443
CertificateIssuerLet's Encrypt Subjectgo.moartraffic.com Fingerprint91:FF:37:7A:D8:9C:D1:52:28:CF:20:BD:36:CF:BA:AC:85:D4:DD:6A ValidityWed, 11 Oct 2023 10:45:06 GMT - Tue, 09 Jan 2024 10:45:05 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go.php?t=55036&aid=&sid=_BIDCreative%3A+240429687&hts_id=76ba200e-db6d-42d4-868f-1f8ef76b5c19&product_id=&agcid=fTFwa1FXMDIhPS0pKiE-Iz0qMWdQXDEoKiU2ISggIDwlNiQ_JnpqWlYqLScrLCMmOy4zPiQmNTpne21lJyM6ITAlNX9PVyYjKyAmOC4wKi8lPit0aW9wb0ZsYDAyJjIpKSEhOCc3Mz8mcGgxKCouNDchIzw9JSs3JjA7NDFxZ2JrbWpqc2t1dzUxPjtWXEAqOyd9fWV7anInPDF0ejo_MGplam5rdmArLSdAenZ8fnxqKCY1LDYjMCU1aWd9Y2x5dHcqLSd8djE-K3h2JCkmTnF9dmdgdjs0MXZmemRvfSYjOmBibXRseCk9cWZ6JyoxZX1samJtNT87bWF-b3JgYjEoO3l3dGdlaHhsMSgrNSkkZnZ1R2F3bnJ3fGoxKCt_cXJjdyNEPE4nY2psamA8emdgZXplKDZwfWU1eA.._004dc800 HTTP/1.1
Host: go.moartraffic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://moartraffic.engine.adglare.net/
Cookie: bdreff=https%3A%2F%2Ftours.specia1.com%2F; tour=53940; bdcounter=1; xk=400150c0b0c010e07d523b34ab606b69
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: no-store, no-cache, must-revalidate
content-type: text/html; charset=UTF-8
date: Wed, 29 Nov 2023 04:10:25 GMT
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://t.ajump1.com/2779/4551?aff_click_id=bf2cad6f-93b6-49e2-9a88-48ba9e988733&source=55036+&xk=400150c0b0c010e07d523b34ab606b69&hts_id=bf2cad6f-93b6-49e2-9a88-48ba9e988733&i18n_country=NO
p3p: CP="NOI ADM DEV COM NAV OUR STP"
server: nginx
set-cookie: bd_ovtu=1; expires=Thu, 30-Nov-2023 04:10:25 GMT; Max-Age=86400; path=/; domain=.moartraffic.com
bdreff=https%3A%2F%2Fmoartraffic.engine.adglare.net%2F; expires=Mon, 27-May-2024 04:10:25 GMT; Max-Age=15552000; path=/; domain=.moartraffic.com
tour=55036; expires=Mon, 27-May-2024 04:10:25 GMT; Max-Age=15552000; path=/; domain=.moartraffic.com
bdcounter=2; expires=Thu, 30-Nov-2023 04:10:25 GMT; Max-Age=86400; path=/; domain=.moartraffic.com
xk=400150c0b0c010e07d523b34ab606b69; expires=Mon, 27-May-2024 04:10:25 GMT; Max-Age=15552000; path=/; domain=.moartraffic.com
x-powered-by: PHP/8.1.19
x-robots-tag: otherbot: noindex, nofollow, googlebot: noindex, nofollow
X-Firefox-Spdy: h2
|
|
| gateway.jerkmate.com/cmscloud/dA/70eca64a3a/nb.svg | 54.230.111.39 | 200 OK | 1.1 kB |
URL GET HTTP/2gateway.jerkmate.com/cmscloud/dA/70eca64a3a/nb.svg IP54.230.111.39:443
Requested byhttps://cno.jerkmate.com/?transaction_id=10293daab4a1896d36f2a7859f4685:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 CertificateIssuerAmazon Subject*.jerkmate.com Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66 ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1161), with no line terminators Hash80a983d82b53f93b865f98962a32cd84 178e04acfc3e82694899d777e0f262646b205df1 1bdb8cac916a63618e3c423ce865c42110400b1b5eecb1981da52f9a7bd0bf1a
GET /cmscloud/dA/70eca64a3a/nb.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Sat, 25 Nov 2023 16:54:23 GMT
set-cookie: AWSALB=JHqcWVESzWFuF00Zz/0yY1HKvUyGuor+6cLTpn1jnphswc4YTWOi8NynQqwrxqsdU4xS/BS1JtZSCyse/Zyye3xefUQwOfnWhY8b7bqdMqlZhmEnSV2qO8nA+SBq; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/
AWSALBCORS=JHqcWVESzWFuF00Zz/0yY1HKvUyGuor+6cLTpn1jnphswc4YTWOi8NynQqwrxqsdU4xS/BS1JtZSCyse/Zyye3xefUQwOfnWhY8b7bqdMqlZhmEnSV2qO8nA+SBq; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="nb.svg"
expires: Sun, 24 Nov 2024 16:54:23 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 22 Apr 2021 12:46:01 +0000
apigw-requestid: O9r9-in1IAMEPiw=
content-encoding: br
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zzvXTcZxRBBWj3GJYsclVH-nPvAqCZ5uZPUPJM3oIF9oI4WKaqUtug==
age: 299764
referrer-policy: strict-origin-when-cross-origin
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
0.0.0.0