grabify.link/js/ads.js
104.26.8.202 19 B IP 104.26.8.202:0
File type ASCII text, with no line terminators
Hash 14380b81da6c1f82d54ddad07bdca87c
a72b216e23ce2fd0c275f0c66381255e2b34c1be
6a0f6cf6b4648c192d81b5fc7b70cb2f6819ef4a799e421e8626cae9697aa85a
GET /js/ads.js HTTP/1.1
Host: grabify.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IjlCMUxvYUFTTFdkbHM5UExnU3o2MXc9PSIsInZhbHVlIjoiNGRHMCtOVGpIcncrQUIrRzIwaVc1U044VmpJVm53TThudWFZZkxJMFIzZEhiRUlmZ0NrbkRqaHJ5V2I4RGJKTGFnRDBQSGU5aWE4ZTBCejE5MWdnNU5RRnc5eHlXS3AxZHcvZlpoWWhQR3NsUWdjYkx2ZVFlVGJpN0RJaS9ROWMiLCJtYWMiOiJjMmYwYzJjYWMzZDY2MDE0Zjc1MjBiNDVhMGVjM2VkZDBlMDk4NTAwOWI3NWFiNzg2YmRlYzE0ZTkzNDMyMmUwIiwidGFnIjoiIn0%3D; g_session=eyJpdiI6IktmdGFhN1YrZUFwdUhUazRxMXhCTlE9PSIsInZhbHVlIjoiTnVENE8rSXdmbUtUYi9yZU90ZUdrcjZRMXd6V2tlWVk3cURiaWlPZVFtd0lJTUxUanBiOEhmeHhmc3RnSXZadXBUcGlLb2RYcFZTNVdvdmMvRGFFZ2oyc3NQUE0wdmV4TGFwaFdpck1XUi83RnFGaXhKZ0lZdlpuZTF0b2VLTnoiLCJtYWMiOiI1Yzg1OTI5ZjBhZTFmNTMxYTliMjdkMTczNjZhOTM4NDQ2MzQ4Zjk5ZDhhZjUxMzU1MTQ0YjQ5ZGRlNWU0MGYxIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 26 Sep 2023 07:51:31 GMT
content-type: application/javascript
content-length: 19
cf-bgj: minify
cf-polished: origSize=21
etag: "15-5f5e6e55d59b7"
last-modified: Thu, 02 Mar 2023 08:48:42 GMT
cf-cache-status: HIT
age: 18
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OqF9HfGyx1izOc%2BLu6wJl9W%2BUYpVgLAsCCj%2B7I3fdxJoh7jRBfjEBEGjjS3ybc2jUYErjKRnNJTf8T9AldSNIiwjFOpIco%2BQM6Eq2%2FtAac8nARdDgPLYoF45uNb71A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80c9ec17afe856c3-OSL
alt-svc: h3=":443"; ma=86400
grabify.link/cdn-cgi/rum?
104.26.8.202204 No Content 0 B URL POST HTTP/3 grabify.link/cdn-cgi/rum?
IP 104.26.8.202:443
Requested by https://grabify.link/location.php?location=CN6YET.exe
Certificate IssuerGoogle Trust Services LLC
Subjectgrabify.link
Fingerprint89:0A:F9:D7:B9:C8:FC:B6:93:66:83:4A:90:3B:1B:93:CF:D7:A9:BD
ValidityTue, 15 Aug 2023 15:18:28 GMT - Mon, 13 Nov 2023 15:18:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: grabify.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 2265
Origin: https://grabify.link
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IjlCMUxvYUFTTFdkbHM5UExnU3o2MXc9PSIsInZhbHVlIjoiNGRHMCtOVGpIcncrQUIrRzIwaVc1U044VmpJVm53TThudWFZZkxJMFIzZEhiRUlmZ0NrbkRqaHJ5V2I4RGJKTGFnRDBQSGU5aWE4ZTBCejE5MWdnNU5RRnc5eHlXS3AxZHcvZlpoWWhQR3NsUWdjYkx2ZVFlVGJpN0RJaS9ROWMiLCJtYWMiOiJjMmYwYzJjYWMzZDY2MDE0Zjc1MjBiNDVhMGVjM2VkZDBlMDk4NTAwOWI3NWFiNzg2YmRlYzE0ZTkzNDMyMmUwIiwidGFnIjoiIn0%3D; g_session=eyJpdiI6IktmdGFhN1YrZUFwdUhUazRxMXhCTlE9PSIsInZhbHVlIjoiTnVENE8rSXdmbUtUYi9yZU90ZUdrcjZRMXd6V2tlWVk3cURiaWlPZVFtd0lJTUxUanBiOEhmeHhmc3RnSXZadXBUcGlLb2RYcFZTNVdvdmMvRGFFZ2oyc3NQUE0wdmV4TGFwaFdpck1XUi83RnFGaXhKZ0lZdlpuZTF0b2VLTnoiLCJtYWMiOiI1Yzg1OTI5ZjBhZTFmNTMxYTliMjdkMTczNjZhOTM4NDQ2MzQ4Zjk5ZDhhZjUxMzU1MTQ0YjQ5ZGRlNWU0MGYxIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Tue, 26 Sep 2023 07:51:33 GMT
access-control-allow-origin: https://grabify.link
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 80c9ec253cc156c3-OSL
x-frame-options: DENY
x-content-type-options: nosniff
static.cloudflareinsights.com/beacon.min.js/v8b253dfea2ab4077af8c6f58422dfbfd1689876627854
104.16.56.101 6.9 kB URL static.cloudflareinsights.com/beacon.min.js/v8b253dfea2ab4077af8c6f58422dfbfd1689876627854
IP 104.16.56.101:0
File type gzip compressed data, from Unix\012- data
Hash 6509609ed484d347881783548993714d
38ff2d46762e8f577ff304707391ddb8e03a722a
90ba692138c2de69bb4ed8aecb16d5694d79abbdc7e19c2f26b09da3526dbac1
GET /beacon.min.js/v8b253dfea2ab4077af8c6f58422dfbfd1689876627854 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://grabify.link
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 26 Sep 2023 07:51:31 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2023.7.1"
last-modified: Thu, 20 Jul 2023 18:10:27 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 80c9ec17dbf656be-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
34.206.39.153 178 B IP 34.206.39.153:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash bd2695f4b079c71dbddde3436286fb9c
733c05da132193d6cf1d8e242d12e2525c03bab4
2e04a18ff185ba5b16f762a0538339bc4049aceaef9738edd43af77d2ceb788b
GET / HTTP/1.1
Host: donkey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 26 Sep 2023 07:51:35 GMT
Content-Type: text/html
Content-Length: 178
Location: http://www.donkey.com/
Set-Cookie: SERVERID=vpc4|ZRKP2|ZRKP2; path=/
Cache-control: private
34.206.39.153 3.3 kB IP 34.206.39.153:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (475)
Hash 924910e1a8e903397e5195088e55cbca
c9d0160ec19846a2af1268016bb45f194b759ebd
2e7aee8b4f9891f8705258eb1967d5bc83ce344ce62af2d1748aa609dfe15c4f
GET / HTTP/1.1
Host: www.donkey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 26 Sep 2023 07:51:35 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: strict-origin-when-cross-origin
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAL/3/SrV7P8AsTHMFSpPmYbyv2PkACHwmG9Z+1IFZq3vA54IN7pQcGnhgNo+8SN9r/KtUWCb9OPqTfWM1N4w/EUCAwEAAQ==_k3LpiUYB4bpWmwUQCyxjS0hCN25ZuSMlYFa2lQnjhMAnlVXXd83rci/5iFyEdR4U89XWvprZl7isHRDnZmzDgQ==
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: *
Access-Control-Request-Method: *
Access-Control-Allow-Headers: *
Access-Control-Max-Age: 86400
Link: </packs/js/abp2-e13b4cce38d2e6b3aea7.js>; rel=preload; as=script; nopush,</packs/js/ads-4b8a83b0bbaf60e589e0.js>; rel=preload; as=script; nopush,</packs/js/abp2-e13b4cce38d2e6b3aea7.js>; rel=preload; as=script; nopush,</assets/application-89128245420e03526773926b09a5a7512357bf5fc597732c13596d8a84efe0b7.css>; rel=preload; as=style; nopush,</packs/js/application-28182f954f58ae153a93.js>; rel=preload; as=script; nopush,</assets/style-89128245420e03526773926b09a5a7512357bf5fc597732c13596d8a84efe0b7.css>; rel=preload; as=style; nopush,</assets/google_caf_reflex-6df63921687d0d21b4e217ee9f2805eb5e8f85bc9122322b38048f5c71953473.css>; rel=preload; as=style; nopush,<///ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js>; rel=preload; as=script; nopush
ETag: W/"2e7aee8b4f9891f8705258eb1967d5bc"
Cache-Control: max-age=0, private, must-revalidate
X-Request-Id: 7935d175-a5b2-4476-93f7-c01aaf66bbe3
X-Runtime: 0.043118
Content-Encoding: gzip
Set-Cookie: _digiadmin3_session=5j%2BPvEj08nhNtyIPF94cfjluZTdfG5sjiEWpZAqRFIaidgoAAAxOq43qrz4%2BPU4mZr7bSB7OdyP784diUmXzH91uY1SQ8LcMiVFyL9dVstHYOJs3q1A0BkO6VssZk%2Boe%2FJF5TnHhwUB7Gi9TvWKnvIlyJ3CwPr4HgHBOn0Hy8FSxXvRzprN%2BYG9n%2F8wGimfpvSJJFk4IzNFcItPYxr3O%2BugpU%2FxNaEAqDQ3R5zXhvnFobdSxarybQ4tOliZBB30OshXp83AFL7YomtqxyDgDoetfVuQM7%2FlLGMEb--jYwuHQvh5tUQekj5--CSAqCe886L4gMCvOn0E9SQ%3D%3D; path=/; HttpOnly; SameSite=Lax
SERVERID=vpc3|ZRKP2|ZRKP2; path=/
grabify.link/cdn-cgi/rum?
104.26.8.202204 No Content 0 B URL POST HTTP/3 grabify.link/cdn-cgi/rum?
IP 104.26.8.202:443
Requested by https://grabify.link/location.php?location=CN6YET.exe
Certificate IssuerGoogle Trust Services LLC
Subjectgrabify.link
Fingerprint89:0A:F9:D7:B9:C8:FC:B6:93:66:83:4A:90:3B:1B:93:CF:D7:A9:BD
ValidityTue, 15 Aug 2023 15:18:28 GMT - Mon, 13 Nov 2023 15:18:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: grabify.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 496
Origin: https://grabify.link
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IldIa05IQnp3Z29GMXJTNWx5bHdTckE9PSIsInZhbHVlIjoibmJhZFZwRHhpS1BVVkVRWXdvYldHQmpFTDkvNVlqYnFvL0FhalhnejE0SkpDWFhxeHhTbVhwZHc4SFI0aFRQcmtJa3owcFlPMm5uMXRjWHorZFAvMWJBMHdZMWtXV1AvTlJ1RzhQbjZUSGFvNVdrcFNCSTBST1VwamwvYVgvWjkiLCJtYWMiOiI3MmNkZDljNTU5MmNjY2I0YWNlZmQ3ZDdlMjU0OGQ1NjNiZjg5YmYzZDk3YjMyZTg3MWFlMDQzNzZjYTdlZDk3IiwidGFnIjoiIn0%3D; g_session=eyJpdiI6Imtkb3o3SWRlR0ZNNXRucTJMMENqQ1E9PSIsInZhbHVlIjoiVFVFcEtjd3E4aUNZRHc2OU9weFBRenFIVHFUbFVOa1JkQUhQSkF1VEFOMDRLVFN6VlNRUjBXS2ZOanZZdDRTSFJaK3FaZlNGblJqdFkxTXZhL3BjN2w2alk3N2YzMEJ6SGRWYVZjcDIveE01UXZVNzZRalBsWDRydU0yRVIvMHIiLCJtYWMiOiIwNTRjNmMwMzljZjM5NWU1Yzk5MTYwNjBmMzQ2YzE3OTk1MGQ2Y2VkZDI4ZjdiZjU0OGFjMzFhYzFhNzVmNDI0IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/3 204 No Content
date: Tue, 26 Sep 2023 07:51:36 GMT
access-control-allow-origin: https://grabify.link
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 80c9ec32081c56c3-OSL
x-frame-options: DENY
x-content-type-options: nosniff
ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
142.250.74.42200 OK 30 kB URL GET HTTP/1.1 ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
IP 142.250.74.42:80
File type ASCII text, with very long lines (65451)
Hash a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.donkey.com/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
Timing-Allow-Origin: *
Content-Length: 30399
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 22 Sep 2023 07:11:24 GMT
Expires: Sat, 21 Sep 2024 07:11:24 GMT
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
Age: 348012
www.google.com/adsense/domains/caf.js
172.217.21.164200 OK 55 kB URL GET HTTP/1.1 www.google.com/adsense/domains/caf.js
IP 172.217.21.164:80
File type ASCII text, with very long lines (2067)
Hash e17e8b2cefa462c832f2967e439b24c2
7c624265ec49d68c959258daef75199bf06cf57e
b952907624701655e26241c5b92361f076a23f1e5425736b8b273a779499b489
GET /adsense/domains/caf.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.donkey.com/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Type: text/javascript; charset=UTF-8
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui"
Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
Date: Tue, 26 Sep 2023 07:51:36 GMT
Expires: Tue, 26 Sep 2023 07:51:36 GMT
Cache-Control: private, max-age=3600
ETag: "3529692135267428694"
X-Content-Type-Options: nosniff
Link: <https://afs.googlesyndication.com>; rel="preconnect"
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: sffe
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 175c22bfd0414558440a0c90af70b3f4
19acfd9436ddf4f1dd0f3efb4e1dd46acbeb90d2
9bc056a4a42d118d3e80e305557d4f523149a3e5ecbc41512231a8f6c1f2f401
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 26 Sep 2023 07:51:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.donkey.com/packs/js/abp2-e13b4cce38d2e6b3aea7.js
34.206.39.153200 OK 1.4 kB URL GET HTTP/1.1 www.donkey.com/packs/js/abp2-e13b4cce38d2e6b3aea7.js
IP 34.206.39.153:80
File type ASCII text, with very long lines (1379)
Hash de4d79ff5a0d319e4e7cb62f864d5c30
749c41820658a3f61e4a9e78f4fb921884a96aec
474efcdd7ba27c07a5bcd2d65560be0853f8008a02d310d4fe79b1c1fb594622
GET /packs/js/abp2-e13b4cce38d2e6b3aea7.js HTTP/1.1
Host: www.donkey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.donkey.com/
DNT: 1
Connection: keep-alive
Cookie: _digiadmin3_session=5j%2BPvEj08nhNtyIPF94cfjluZTdfG5sjiEWpZAqRFIaidgoAAAxOq43qrz4%2BPU4mZr7bSB7OdyP784diUmXzH91uY1SQ8LcMiVFyL9dVstHYOJs3q1A0BkO6VssZk%2Boe%2FJF5TnHhwUB7Gi9TvWKnvIlyJ3CwPr4HgHBOn0Hy8FSxXvRzprN%2BYG9n%2F8wGimfpvSJJFk4IzNFcItPYxr3O%2BugpU%2FxNaEAqDQ3R5zXhvnFobdSxarybQ4tOliZBB30OshXp83AFL7YomtqxyDgDoetfVuQM7%2FlLGMEb--jYwuHQvh5tUQekj5--CSAqCe886L4gMCvOn0E9SQ%3D%3D; SERVERID=vpc3|ZRKP2|ZRKP2
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 26 Sep 2023 07:51:36 GMT
Content-Type: application/javascript
Content-Length: 1433
Last-Modified: Fri, 07 Jul 2023 02:56:05 GMT
ETag: "64a77ec5-599"
Accept-Ranges: bytes
www.googletagmanager.com/gtag/js?id=UA-32054758-1
142.250.74.168200 OK 69 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=UA-32054758-1
IP 142.250.74.168:443
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint00:ED:16:68:8D:DB:14:8B:43:01:81:CA:83:9A:AE:5B:24:AB:11:18
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type ASCII text, with very long lines (4179)
Hash c93e13e71a0c0921ccb4676c78896e60
bfdc7dfe40cb1d6e9cba25cbb6e563067d5016c1
88c57b38b83a335a40a9ad5d236b9b3fc3e40dcda6968455d3e345b466222976
GET /gtag/js?id=UA-32054758-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.donkey.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 26 Sep 2023 07:51:36 GMT
expires: Tue, 26 Sep 2023 07:51:36 GMT
cache-control: private, max-age=900
last-modified: Tue, 26 Sep 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 68999
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 175c22bfd0414558440a0c90af70b3f4
19acfd9436ddf4f1dd0f3efb4e1dd46acbeb90d2
9bc056a4a42d118d3e80e305557d4f523149a3e5ecbc41512231a8f6c1f2f401
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 26 Sep 2023 07:51:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.donkey.com/packs/js/ads-4b8a83b0bbaf60e589e0.js
34.206.39.153200 OK 1.1 kB URL GET HTTP/1.1 www.donkey.com/packs/js/ads-4b8a83b0bbaf60e589e0.js
IP 34.206.39.153:80
File type ASCII text, with very long lines (1053)
Hash 100bee95b68898abaef985f2fb06e461
072d74e5f7fc51e537585a96cd1917328593c2f7
7417fe8e9921aa456d5e1e6146cd2e0fde826e2db1a50740edb96b3650a3c7d7
GET /packs/js/ads-4b8a83b0bbaf60e589e0.js HTTP/1.1
Host: www.donkey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.donkey.com/
DNT: 1
Connection: keep-alive
Cookie: _digiadmin3_session=5j%2BPvEj08nhNtyIPF94cfjluZTdfG5sjiEWpZAqRFIaidgoAAAxOq43qrz4%2BPU4mZr7bSB7OdyP784diUmXzH91uY1SQ8LcMiVFyL9dVstHYOJs3q1A0BkO6VssZk%2Boe%2FJF5TnHhwUB7Gi9TvWKnvIlyJ3CwPr4HgHBOn0Hy8FSxXvRzprN%2BYG9n%2F8wGimfpvSJJFk4IzNFcItPYxr3O%2BugpU%2FxNaEAqDQ3R5zXhvnFobdSxarybQ4tOliZBB30OshXp83AFL7YomtqxyDgDoetfVuQM7%2FlLGMEb--jYwuHQvh5tUQekj5--CSAqCe886L4gMCvOn0E9SQ%3D%3D; SERVERID=vpc3|ZRKP2|ZRKP2
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 26 Sep 2023 07:51:36 GMT
Content-Type: application/javascript
Content-Length: 1106
Last-Modified: Fri, 07 Jul 2023 02:56:05 GMT
ETag: "64a77ec5-452"
Accept-Ranges: bytes
www.donkey.com/assets/google_caf_reflex-6df63921687d0d21b4e217ee9f2805eb5e8f85bc9122322b38048f5c71953473.css
34.206.39.153200 OK 561 B URL GET HTTP/1.1 www.donkey.com/assets/google_caf_reflex-6df63921687d0d21b4e217ee9f2805eb5e8f85bc9122322b38048f5c71953473.css
IP 34.206.39.153:80
File type ASCII text, with very long lines (1448)
Hash dc9833da151bbc4be0e193714b7b9def
468c3792f48658df05697a4d91d33c9ec02867f8
3fc1366076b100b25dbe287aeb1c8469d8c372fd8448436e1ba66468bad455e8
GET /assets/google_caf_reflex-6df63921687d0d21b4e217ee9f2805eb5e8f85bc9122322b38048f5c71953473.css HTTP/1.1
Host: www.donkey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.donkey.com/
DNT: 1
Connection: keep-alive
Cookie: _digiadmin3_session=5j%2BPvEj08nhNtyIPF94cfjluZTdfG5sjiEWpZAqRFIaidgoAAAxOq43qrz4%2BPU4mZr7bSB7OdyP784diUmXzH91uY1SQ8LcMiVFyL9dVstHYOJs3q1A0BkO6VssZk%2Boe%2FJF5TnHhwUB7Gi9TvWKnvIlyJ3CwPr4HgHBOn0Hy8FSxXvRzprN%2BYG9n%2F8wGimfpvSJJFk4IzNFcItPYxr3O%2BugpU%2FxNaEAqDQ3R5zXhvnFobdSxarybQ4tOliZBB30OshXp83AFL7YomtqxyDgDoetfVuQM7%2FlLGMEb--jYwuHQvh5tUQekj5--CSAqCe886L4gMCvOn0E9SQ%3D%3D; SERVERID=vpc3|ZRKP2|ZRKP2
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 26 Sep 2023 07:51:36 GMT
Content-Type: text/css
Content-Length: 561
Last-Modified: Mon, 01 Mar 2021 20:44:24 GMT
ETag: "603d5228-231"
Content-Encoding: gzip
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
www.donkey.com/packs/js/application-28182f954f58ae153a93.js
34.206.39.153200 OK 1.0 kB URL GET HTTP/1.1 www.donkey.com/packs/js/application-28182f954f58ae153a93.js
IP 34.206.39.153:80
File type ASCII text, with very long lines (943)
Hash 7e3af64d672bb8f3441972518fc0562d
10b8e498015c8f1ece2eb2855678143727084131
25222a9bb2f4ce53fe548b1f368601e2ad94926735201ee7c1684bc1289b4c7d
GET /packs/js/application-28182f954f58ae153a93.js HTTP/1.1
Host: www.donkey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.donkey.com/
DNT: 1
Connection: keep-alive
Cookie: _digiadmin3_session=5j%2BPvEj08nhNtyIPF94cfjluZTdfG5sjiEWpZAqRFIaidgoAAAxOq43qrz4%2BPU4mZr7bSB7OdyP784diUmXzH91uY1SQ8LcMiVFyL9dVstHYOJs3q1A0BkO6VssZk%2Boe%2FJF5TnHhwUB7Gi9TvWKnvIlyJ3CwPr4HgHBOn0Hy8FSxXvRzprN%2BYG9n%2F8wGimfpvSJJFk4IzNFcItPYxr3O%2BugpU%2FxNaEAqDQ3R5zXhvnFobdSxarybQ4tOliZBB30OshXp83AFL7YomtqxyDgDoetfVuQM7%2FlLGMEb--jYwuHQvh5tUQekj5--CSAqCe886L4gMCvOn0E9SQ%3D%3D; SERVERID=vpc3|ZRKP2|ZRKP2
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 26 Sep 2023 07:51:36 GMT
Content-Type: application/javascript
Content-Length: 1004
Last-Modified: Fri, 07 Jul 2023 02:56:05 GMT
ETag: "64a77ec5-3ec"
Accept-Ranges: bytes
www.donkey.com/assets/style-89128245420e03526773926b09a5a7512357bf5fc597732c13596d8a84efe0b7.css
34.206.39.153200 OK 62 B URL GET HTTP/1.1 www.donkey.com/assets/style-89128245420e03526773926b09a5a7512357bf5fc597732c13596d8a84efe0b7.css
IP 34.206.39.153:80
Hash 401008be12543aec27fd384cbca0e959
2e43aa89c035bb8e7da5e55349437a439eeb30de
aa8311381cb5a4986b1a64e72b68eddf0ee1eff308053db282cacd409110736a
GET /assets/style-89128245420e03526773926b09a5a7512357bf5fc597732c13596d8a84efe0b7.css HTTP/1.1
Host: www.donkey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.donkey.com/
DNT: 1
Connection: keep-alive
Cookie: _digiadmin3_session=5j%2BPvEj08nhNtyIPF94cfjluZTdfG5sjiEWpZAqRFIaidgoAAAxOq43qrz4%2BPU4mZr7bSB7OdyP784diUmXzH91uY1SQ8LcMiVFyL9dVstHYOJs3q1A0BkO6VssZk%2Boe%2FJF5TnHhwUB7Gi9TvWKnvIlyJ3CwPr4HgHBOn0Hy8FSxXvRzprN%2BYG9n%2F8wGimfpvSJJFk4IzNFcItPYxr3O%2BugpU%2FxNaEAqDQ3R5zXhvnFobdSxarybQ4tOliZBB30OshXp83AFL7YomtqxyDgDoetfVuQM7%2FlLGMEb--jYwuHQvh5tUQekj5--CSAqCe886L4gMCvOn0E9SQ%3D%3D; SERVERID=vpc3|ZRKP2|ZRKP2
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 26 Sep 2023 07:51:36 GMT
Content-Type: text/css
Content-Length: 62
Last-Modified: Mon, 01 Mar 2021 20:44:24 GMT
ETag: "603d5228-3e"
Content-Encoding: gzip
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
www.donkey.com/assets/application-89128245420e03526773926b09a5a7512357bf5fc597732c13596d8a84efe0b7.css
34.206.39.153200 OK 62 B URL GET HTTP/1.1 www.donkey.com/assets/application-89128245420e03526773926b09a5a7512357bf5fc597732c13596d8a84efe0b7.css
IP 34.206.39.153:80
Hash 401008be12543aec27fd384cbca0e959
2e43aa89c035bb8e7da5e55349437a439eeb30de
aa8311381cb5a4986b1a64e72b68eddf0ee1eff308053db282cacd409110736a
GET /assets/application-89128245420e03526773926b09a5a7512357bf5fc597732c13596d8a84efe0b7.css HTTP/1.1
Host: www.donkey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.donkey.com/
DNT: 1
Connection: keep-alive
Cookie: _digiadmin3_session=5j%2BPvEj08nhNtyIPF94cfjluZTdfG5sjiEWpZAqRFIaidgoAAAxOq43qrz4%2BPU4mZr7bSB7OdyP784diUmXzH91uY1SQ8LcMiVFyL9dVstHYOJs3q1A0BkO6VssZk%2Boe%2FJF5TnHhwUB7Gi9TvWKnvIlyJ3CwPr4HgHBOn0Hy8FSxXvRzprN%2BYG9n%2F8wGimfpvSJJFk4IzNFcItPYxr3O%2BugpU%2FxNaEAqDQ3R5zXhvnFobdSxarybQ4tOliZBB30OshXp83AFL7YomtqxyDgDoetfVuQM7%2FlLGMEb--jYwuHQvh5tUQekj5--CSAqCe886L4gMCvOn0E9SQ%3D%3D; SERVERID=vpc3|ZRKP2|ZRKP2
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 26 Sep 2023 07:51:36 GMT
Content-Type: text/css
Content-Length: 62
Last-Modified: Mon, 01 Mar 2021 20:44:24 GMT
ETag: "603d5228-3e"
Content-Encoding: gzip
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
www.donkey.com/px.gif?ch=1&rn=8.239773776263572
34.206.39.153200 OK 43 B URL GET HTTP/1.1 www.donkey.com/px.gif?ch=1&rn=8.239773776263572
IP 34.206.39.153:80
File type GIF image data, version 89a, 1 x 1\012- data
Hash 57f11776153d858e8e53f4113d54acd1
31a69e70612fbb6237cc6408e53b3de77cf6821b
02ed57f2aa44d0aceb4525a578d6c8d4f0a74400cd6e2e4bed8ee8d9831f97b1
GET /px.gif?ch=1&rn=8.239773776263572 HTTP/1.1
Host: www.donkey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.donkey.com/
DNT: 1
Connection: keep-alive
Cookie: _digiadmin3_session=5j%2BPvEj08nhNtyIPF94cfjluZTdfG5sjiEWpZAqRFIaidgoAAAxOq43qrz4%2BPU4mZr7bSB7OdyP784diUmXzH91uY1SQ8LcMiVFyL9dVstHYOJs3q1A0BkO6VssZk%2Boe%2FJF5TnHhwUB7Gi9TvWKnvIlyJ3CwPr4HgHBOn0Hy8FSxXvRzprN%2BYG9n%2F8wGimfpvSJJFk4IzNFcItPYxr3O%2BugpU%2FxNaEAqDQ3R5zXhvnFobdSxarybQ4tOliZBB30OshXp83AFL7YomtqxyDgDoetfVuQM7%2FlLGMEb--jYwuHQvh5tUQekj5--CSAqCe886L4gMCvOn0E9SQ%3D%3D; SERVERID=vpc3|ZRKP2|ZRKP2
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 26 Sep 2023 07:51:36 GMT
Content-Type: image/gif
Content-Length: 43
Last-Modified: Fri, 07 Jul 2023 02:36:39 GMT
ETag: "64a77a37-2b"
Accept-Ranges: bytes
Set-Cookie: SERVERID=vpc3|ZRKP3|ZRKP2; path=/
Cache-control: private
www.donkey.com/px.gif?ch=2&rn=8.239773776263572
34.206.39.153200 OK 43 B URL GET HTTP/1.1 www.donkey.com/px.gif?ch=2&rn=8.239773776263572
IP 34.206.39.153:80
File type GIF image data, version 89a, 1 x 1\012- data
Hash 57f11776153d858e8e53f4113d54acd1
31a69e70612fbb6237cc6408e53b3de77cf6821b
02ed57f2aa44d0aceb4525a578d6c8d4f0a74400cd6e2e4bed8ee8d9831f97b1
GET /px.gif?ch=2&rn=8.239773776263572 HTTP/1.1
Host: www.donkey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.donkey.com/
DNT: 1
Connection: keep-alive
Cookie: _digiadmin3_session=5j%2BPvEj08nhNtyIPF94cfjluZTdfG5sjiEWpZAqRFIaidgoAAAxOq43qrz4%2BPU4mZr7bSB7OdyP784diUmXzH91uY1SQ8LcMiVFyL9dVstHYOJs3q1A0BkO6VssZk%2Boe%2FJF5TnHhwUB7Gi9TvWKnvIlyJ3CwPr4HgHBOn0Hy8FSxXvRzprN%2BYG9n%2F8wGimfpvSJJFk4IzNFcItPYxr3O%2BugpU%2FxNaEAqDQ3R5zXhvnFobdSxarybQ4tOliZBB30OshXp83AFL7YomtqxyDgDoetfVuQM7%2FlLGMEb--jYwuHQvh5tUQekj5--CSAqCe886L4gMCvOn0E9SQ%3D%3D; SERVERID=vpc3|ZRKP2|ZRKP2
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 26 Sep 2023 07:51:36 GMT
Content-Type: image/gif
Content-Length: 43
Last-Modified: Fri, 07 Jul 2023 02:36:39 GMT
ETag: "64a77a37-2b"
Accept-Ranges: bytes
Set-Cookie: SERVERID=vpc3|ZRKP3|ZRKP2; path=/
Cache-control: private
www.googletagmanager.com/gtag/js?id=G-83MENS0ZCY&l=dataLayer&cx=c
142.250.74.168200 OK 81 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-83MENS0ZCY&l=dataLayer&cx=c
IP 142.250.74.168:443
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint00:ED:16:68:8D:DB:14:8B:43:01:81:CA:83:9A:AE:5B:24:AB:11:18
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type ASCII text, with very long lines (5788)
Hash 2c91979864ab6f77295f9f963b8ba844
c4535700064e4f74318b608494bf5eb76e77f88e
04dffdfb8f825aeecdfe8821e997d7211c16b38312626b3aab40f2f442c28796
GET /gtag/js?id=G-83MENS0ZCY&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.donkey.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 26 Sep 2023 07:51:36 GMT
expires: Tue, 26 Sep 2023 07:51:36 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 80806
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.donkey.com/images/resized_and_crop/250/200/eyJpZCI6ImY5Y2FhNjNlNjUzYzI2NzllMzI0ZmRiOWE2MjI1OWY0Iiwic3RvcmFnZSI6InN0b3JlIn0?signature=eafb452f9d2bc442598695d2fb926e5a963d74a16711f80ef7b10d46f7390932
34.206.39.153200 OK 16 kB URL GET HTTP/1.1 www.donkey.com/images/resized_and_crop/250/200/eyJpZCI6ImY5Y2FhNjNlNjUzYzI2NzllMzI0ZmRiOWE2MjI1OWY0Iiwic3RvcmFnZSI6InN0b3JlIn0?signature=eafb452f9d2bc442598695d2fb926e5a963d74a16711f80ef7b10d46f7390932
IP 34.206.39.153:80
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 250x200, components 3\012- data
Hash 1e0d99412dd32bb071d4a796419a9d2c
c1f7f06c7a65fd12d8361fd59654c556c311c118
3a4c063c234aad9de9a2691161d78ffa1fdd16b769afc1b343f62a22b5c55748
GET /images/resized_and_crop/250/200/eyJpZCI6ImY5Y2FhNjNlNjUzYzI2NzllMzI0ZmRiOWE2MjI1OWY0Iiwic3RvcmFnZSI6InN0b3JlIn0?signature=eafb452f9d2bc442598695d2fb926e5a963d74a16711f80ef7b10d46f7390932 HTTP/1.1
Host: www.donkey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.donkey.com/
DNT: 1
Connection: keep-alive
Cookie: _digiadmin3_session=5j%2BPvEj08nhNtyIPF94cfjluZTdfG5sjiEWpZAqRFIaidgoAAAxOq43qrz4%2BPU4mZr7bSB7OdyP784diUmXzH91uY1SQ8LcMiVFyL9dVstHYOJs3q1A0BkO6VssZk%2Boe%2FJF5TnHhwUB7Gi9TvWKnvIlyJ3CwPr4HgHBOn0Hy8FSxXvRzprN%2BYG9n%2F8wGimfpvSJJFk4IzNFcItPYxr3O%2BugpU%2FxNaEAqDQ3R5zXhvnFobdSxarybQ4tOliZBB30OshXp83AFL7YomtqxyDgDoetfVuQM7%2FlLGMEb--jYwuHQvh5tUQekj5--CSAqCe886L4gMCvOn0E9SQ%3D%3D; SERVERID=vpc3|ZRKP2|ZRKP2
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 26 Sep 2023 07:51:36 GMT
Content-Type: image/jpeg
Content-Length: 16151
Content-Disposition: inline; filename="resized_and_crop-250-200-f9caa63e653c2679e324fdb9a62259f4.jpeg"; filename*=UTF-8''resized_and_crop-250-200-f9caa63e653c2679e324fdb9a62259f4.jpeg
Accept-Ranges: bytes
X-Request-Id: 9ebea505-34e7-41cd-be3e-d79f6983bee1
X-Runtime: 0.067853
Set-Cookie: SERVERID=vpc3|ZRKP3|ZRKP2; path=/
Cache-Control: public, max-age=31536000, private
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash e7134cb422275b42551f12abb2455400
8b74099ad1ead69313ef916dc21d4a5520ff1a19
45497c6514815f02fb020dd530afc1141f39d25156915345f9e942759ed52abe
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 26 Sep 2023 07:51:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash e7134cb422275b42551f12abb2455400
8b74099ad1ead69313ef916dc21d4a5520ff1a19
45497c6514815f02fb020dd530afc1141f39d25156915345f9e942759ed52abe
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 26 Sep 2023 07:51:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash e7134cb422275b42551f12abb2455400
8b74099ad1ead69313ef916dc21d4a5520ff1a19
45497c6514815f02fb020dd530afc1141f39d25156915345f9e942759ed52abe
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 26 Sep 2023 07:51:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/afs/ads/i/iframe.html
172.217.21.164200 OK 726 B URL GET HTTP/2 www.google.com/afs/ads/i/iframe.html
IP 172.217.21.164:443
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintD2:77:FE:08:C6:61:6A:42:5C:1F:85:13:DA:23:B2:B8:46:20:45:88
ValidityMon, 04 Sep 2023 08:23:29 GMT - Mon, 27 Nov 2023 08:23:28 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1559)
Hash e71642ccfb10780f6b10cba3ae156a65
13dc4e742ced833fbf5a31632f524ed4e8452aa3
2b2a06aa1089b99d95048d49fa778adb062d0e5f67b2d780b83a8d7428c6c8fc
GET /afs/ads/i/iframe.html HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.donkey.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/html
content-security-policy: script-src 'nonce-q-kTVOoXUpcXC1SoUDeKUA' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui; base-uri 'none'
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
content-length: 726
date: Tue, 26 Sep 2023 07:51:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
last-modified: Mon, 18 Oct 2021 14:30:00 GMT
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/afs/ads/i/iframe.html
172.217.21.164200 OK 728 B URL GET HTTP/2 www.google.com/afs/ads/i/iframe.html
IP 172.217.21.164:443
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintD2:77:FE:08:C6:61:6A:42:5C:1F:85:13:DA:23:B2:B8:46:20:45:88
ValidityMon, 04 Sep 2023 08:23:29 GMT - Mon, 27 Nov 2023 08:23:28 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1559)
Hash 3c2131364026545df4fa06bb425f391b
e592282bfb0489f97bd157015f53f83706dfac31
19dbdc3c83aaace67c22f8cf09eb1465e6ba1743521247d7a13bbbbdec3089e8
GET /afs/ads/i/iframe.html HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.donkey.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/html
content-security-policy: script-src 'nonce-7rrY7EKfkDrSb-5OIOlC3A' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui; base-uri 'none'
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
content-length: 728
date: Tue, 26 Sep 2023 07:51:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
last-modified: Mon, 18 Oct 2021 14:30:00 GMT
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.donkey.com/eyeolog?message=no%20ad%20blocker&sid=&terms=&utm_campaign=&query=
34.206.39.153200 OK 2 B URL GET HTTP/1.1 www.donkey.com/eyeolog?message=no%20ad%20blocker&sid=&terms=&utm_campaign=&query=
IP 34.206.39.153:80
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
GET /eyeolog?message=no%20ad%20blocker&sid=&terms=&utm_campaign=&query= HTTP/1.1
Host: www.donkey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.donkey.com/
DNT: 1
Connection: keep-alive
Cookie: _digiadmin3_session=5j%2BPvEj08nhNtyIPF94cfjluZTdfG5sjiEWpZAqRFIaidgoAAAxOq43qrz4%2BPU4mZr7bSB7OdyP784diUmXzH91uY1SQ8LcMiVFyL9dVstHYOJs3q1A0BkO6VssZk%2Boe%2FJF5TnHhwUB7Gi9TvWKnvIlyJ3CwPr4HgHBOn0Hy8FSxXvRzprN%2BYG9n%2F8wGimfpvSJJFk4IzNFcItPYxr3O%2BugpU%2FxNaEAqDQ3R5zXhvnFobdSxarybQ4tOliZBB30OshXp83AFL7YomtqxyDgDoetfVuQM7%2FlLGMEb--jYwuHQvh5tUQekj5--CSAqCe886L4gMCvOn0E9SQ%3D%3D; SERVERID=vpc3|ZRKP3|ZRKP2; _ga_83MENS0ZCY=GS1.1.1695714696.1.0.1695714696.0.0.0; _ga=GA1.1.295209454.1695714697
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 26 Sep 2023 07:51:37 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: strict-origin-when-cross-origin
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAL/3/SrV7P8AsTHMFSpPmYbyv2PkACHwmG9Z+1IFZq3vA54IN7pQcGnhgNo+8SN9r/KtUWCb9OPqTfWM1N4w/EUCAwEAAQ==_hLTLVHpjwAjNxF6Nekt/doszGtz4VzPLFpf1TWEFO5z57rGcrJv/hKNzGVhijPA7eBwEztH+fcSnLxxLDsYBIw==
Vary: Accept
ETag: W/"2689367b205c16ce32ed4200942b8b8b"
Cache-Control: max-age=0, private, must-revalidate
Set-Cookie: _digiadmin3_session=twFTZm%2BvLqS0eAjq0wUXefVsMfX%2BwH3RtaSnnCvMg8vvSRcrJ0XyRSbXlNTJHNgAhyxA%2Bei93uMo5xKSYUkDGGMzTkTVtMv1ShCNby%2BcPb%2BPCtEUW8GH7rrWSOnnrOOvjBWt6FooNzLYF1LzJMy%2FAY66hoHyeqFx24%2BWbRGObBjpVQlEgPEfSaGE%2B3IXMxsePKpUeMdID3ZtvBRmFu%2FniFByCE%2F0%2BngaeJ71OmQUgLRSRRhDD%2BqurH1gGYTpLNf93wCBd%2B8mocH0PAYV39g%2FwnAITzt4bjVUR7KHdll%2BDUPqA5fOO18%2BTymiJ9EhkdD7mhwdd%2FzzASE8%2BsdHjgCjws2xgYfw7bV%2FlP03WchIshOYhcZOGDkRQkQWYg%3D%3D--ussz%2F2RgsQwVjkfT--RdNgaingj%2BHrPXGt4xWrhg%3D%3D; path=/; HttpOnly; SameSite=Lax
X-Request-Id: 0357a2fe-68a2-4a9d-9f13-8e8c26f81e27
X-Runtime: 0.026711
www.google.com/afs/ads?adtest=false&psid=9039920606&channel=digi-caf_pef%2Bdigimedia-template-04&client=dp-digimedia3_js&r=m&rpbu=http%3A%2F%2Fwww.donkey.com%2Fresults%3F&terms=Donkey%2CMiniature%20Donkey%2CDonkey%20Riding%2CRent%20A%20Donkey%2CDonkey%20Rides&swp=as-drid-oo-1626960400946279&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301293%2C17301321%2C17301323&format=s%7Cs%7Cr5&nocache=7031695714697189&num=0&output=afd_ads&domain_name=www.donkey.com&v=3&bsl=8&pac=0&u_his=3&u_tz=0&dt=1695714697200&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1264&psh=397&frm=0&cl=566716232&uio=---&cont=gencats&jsid=caf&jsv=566716232&rurl=http%3A%2F%2Fwww.donkey.com%2F&adbw=slave-1-1%3A728%2Cslave-2-1%3A478%2Cmaster-1%3A728
172.217.21.164200 OK 3.5 kB URL GET HTTP/2 www.google.com/afs/ads?adtest=false&psid=9039920606&channel=digi-caf_pef%2Bdigimedia-template-04&client=dp-digimedia3_js&r=m&rpbu=http%3A%2F%2Fwww.donkey.com%2Fresults%3F&terms=Donkey%2CMiniature%20Donkey%2CDonkey%20Riding%2CRent%20A%20Donkey%2CDonkey%20Rides&swp=as-drid-oo-1626960400946279&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301293%2C17301321%2C17301323&format=s%7Cs%7Cr5&nocache=7031695714697189&num=0&output=afd_ads&domain_name=www.donkey.com&v=3&bsl=8&pac=0&u_his=3&u_tz=0&dt=1695714697200&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1264&psh=397&frm=0&cl=566716232&uio=---&cont=gencats&jsid=caf&jsv=566716232&rurl=http%3A%2F%2Fwww.donkey.com%2F&adbw=slave-1-1%3A728%2Cslave-2-1%3A478%2Cmaster-1%3A728
IP 172.217.21.164:443
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintD2:77:FE:08:C6:61:6A:42:5C:1F:85:13:DA:23:B2:B8:46:20:45:88
ValidityMon, 04 Sep 2023 08:23:29 GMT - Mon, 27 Nov 2023 08:23:28 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (17746)
Hash 12f95dcf83227028af411bedc01e441f
638c587508bb201e58f1aeb3a649c501455819c7
f61f79d653a601274508fd030e65ed869f63594c137705ef2cd5a42eac996722
GET /afs/ads?adtest=false&psid=9039920606&channel=digi-caf_pef%2Bdigimedia-template-04&client=dp-digimedia3_js&r=m&rpbu=http%3A%2F%2Fwww.donkey.com%2Fresults%3F&terms=Donkey%2CMiniature%20Donkey%2CDonkey%20Riding%2CRent%20A%20Donkey%2CDonkey%20Rides&swp=as-drid-oo-1626960400946279&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301293%2C17301321%2C17301323&format=s%7Cs%7Cr5&nocache=7031695714697189&num=0&output=afd_ads&domain_name=www.donkey.com&v=3&bsl=8&pac=0&u_his=3&u_tz=0&dt=1695714697200&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1264&psh=397&frm=0&cl=566716232&uio=---&cont=gencats&jsid=caf&jsv=566716232&rurl=http%3A%2F%2Fwww.donkey.com%2F&adbw=slave-1-1%3A728%2Cslave-2-1%3A478%2Cmaster-1%3A728 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.donkey.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Tue, 26 Sep 2023 07:51:37 GMT
expires: Tue, 26 Sep 2023 07:51:37 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-07doXu00s1WFIHqCnCIg7Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 3505
x-xss-protection: 0
set-cookie: CONSENT=PENDING+535; expires=Thu, 25-Sep-2025 07:51:37 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash e5f9f802e548a076e6066ecff6aa5bbb
fb8dfabace38ae24e462d84eddc3d25b48b23a20
20dbe13a82e0d8f734ff3b0e89a008ef31f3523d410957da15a9578c0f68afce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 26 Sep 2023 07:51:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 86f13e0e5bd629070766ef73e2a67867
ad5b1b8ff0f711e046a0a83a2c9969e92f4eb10d
3d49564d51eb83328222af2ff2787ac9e1a91d06c37aad1ad06a9a977366093e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 26 Sep 2023 07:51:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%231967D2
142.250.74.97200 OK 174 B URL GET HTTP/2 afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%231967D2
IP 142.250.74.97:443
Requested by https://www.google.com/afs/ads/i/iframe.html
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint25:24:05:0B:D2:5F:DF:ED:3B:BE:B8:47:80:C5:AE:2B:51:94:69:F5
ValidityMon, 04 Sep 2023 08:23:19 GMT - Mon, 27 Nov 2023 08:23:18 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Hash fc4487156e15233887a05c4c4e2744c9
2ad35bbfb0d2bb500a4f1fcd678477d7b01ce6a2
93fad9e8b746119c723b0f0f470ac4eeb2f336bad98295bec7fd28d185a10ddb
GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%231967D2 HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 26 Sep 2023 02:46:42 GMT
expires: Wed, 27 Sep 2023 01:46:42 GMT
cache-control: public, max-age=82800
age: 18295
last-modified: Tue, 27 Jun 2023 17:28:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 86f13e0e5bd629070766ef73e2a67867
ad5b1b8ff0f711e046a0a83a2c9969e92f4eb10d
3d49564d51eb83328222af2ff2787ac9e1a91d06c37aad1ad06a9a977366093e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 26 Sep 2023 07:51:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%231967D2
142.250.74.97200 OK 273 B URL GET HTTP/2 afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%231967D2
IP 142.250.74.97:443
Requested by https://www.google.com/afs/ads/i/iframe.html
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint25:24:05:0B:D2:5F:DF:ED:3B:BE:B8:47:80:C5:AE:2B:51:94:69:F5
ValidityMon, 04 Sep 2023 08:23:19 GMT - Mon, 27 Nov 2023 08:23:18 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (390)
Hash 6751e07e0f93bd43ab90822f4b2eb62a
d1d0c6f0b4697b0a4e61ffbf171e8c60eac7c832
ff563f41765da081fe9fd40e8bb33a623df033b10050a8ae8c1b46e15107d8f1
GET /ad_icons/standard/publisher_icon_image/search.svg?c=%231967D2 HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 273
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 25 Sep 2023 17:10:03 GMT
expires: Tue, 26 Sep 2023 16:10:03 GMT
cache-control: public, max-age=82800
age: 52894
last-modified: Thu, 20 Jul 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 86f13e0e5bd629070766ef73e2a67867
ad5b1b8ff0f711e046a0a83a2c9969e92f4eb10d
3d49564d51eb83328222af2ff2787ac9e1a91d06c37aad1ad06a9a977366093e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 26 Sep 2023 07:51:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/afs/gen_204?client=dp-digimedia3_js&output=uds_ads_only&zx=gynu1sol8xjh&aqid=iY0SZcnHBOmKiM0Pq_aF-Ag&psid=9039920606&pbt=bs&adbx=276&adby=109&adbh=309&adbw=478&adbah=56%2C56%2C56%2C56%2C56&adbn=slave-2-1&eawp=partner-dp-digimedia3_js&errv=566716232&csala=9%7C0%7C520%7C217%7C286&lle=0&ifv=1&usr=0&hpt=0
172.217.21.164204 No Content 0 B URL GET HTTP/3 www.google.com/afs/gen_204?client=dp-digimedia3_js&output=uds_ads_only&zx=gynu1sol8xjh&aqid=iY0SZcnHBOmKiM0Pq_aF-Ag&psid=9039920606&pbt=bs&adbx=276&adby=109&adbh=309&adbw=478&adbah=56%2C56%2C56%2C56%2C56&adbn=slave-2-1&eawp=partner-dp-digimedia3_js&errv=566716232&csala=9%7C0%7C520%7C217%7C286&lle=0&ifv=1&usr=0&hpt=0
IP 172.217.21.164:443
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-digimedia3_js&output=uds_ads_only&zx=gynu1sol8xjh&aqid=iY0SZcnHBOmKiM0Pq_aF-Ag&psid=9039920606&pbt=bs&adbx=276&adby=109&adbh=309&adbw=478&adbah=56%2C56%2C56%2C56%2C56&adbn=slave-2-1&eawp=partner-dp-digimedia3_js&errv=566716232&csala=9%7C0%7C520%7C217%7C286&lle=0&ifv=1&usr=0&hpt=0 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.donkey.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-909Q47PZScqL5c6CI9QBPQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
date: Tue, 26 Sep 2023 07:51:39 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: NID=511=Xgk_AtKh0xuqC7km_StmQP0O9QC3PnGZvLVAKczyXbAnrP1W6oVfX49L2kFHFKR-KnAsEv9za2DyGUK3e7N131QY8fmstpHpL-CGr4q7kP6twjQexST8J_tXn1QkklW1MyPt6ORDC8iF3kGctOIpapicS7cw8eN_noThp6oO6rY; expires=Wed, 27-Mar-2024 07:51:39 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+476; expires=Thu, 25-Sep-2025 07:51:39 GMT; path=/; domain=.google.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/afs/gen_204?client=dp-digimedia3_js&output=uds_ads_only&zx=f7xcxfju9ued&aqid=iY0SZcnHBOmKiM0Pq_aF-Ag&psid=9039920606&pbt=bs&adbx=281&adby=67&adbh=25&adbw=718&adbn=master-1&eawp=partner-dp-digimedia3_js&errv=566716232&csala=23%7C0%7C506%7C217%7C285&lle=0&ifv=1&usr=0&hpt=0
172.217.21.164204 No Content 0 B URL GET HTTP/3 www.google.com/afs/gen_204?client=dp-digimedia3_js&output=uds_ads_only&zx=f7xcxfju9ued&aqid=iY0SZcnHBOmKiM0Pq_aF-Ag&psid=9039920606&pbt=bs&adbx=281&adby=67&adbh=25&adbw=718&adbn=master-1&eawp=partner-dp-digimedia3_js&errv=566716232&csala=23%7C0%7C506%7C217%7C285&lle=0&ifv=1&usr=0&hpt=0
IP 172.217.21.164:443
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-digimedia3_js&output=uds_ads_only&zx=f7xcxfju9ued&aqid=iY0SZcnHBOmKiM0Pq_aF-Ag&psid=9039920606&pbt=bs&adbx=281&adby=67&adbh=25&adbw=718&adbn=master-1&eawp=partner-dp-digimedia3_js&errv=566716232&csala=23%7C0%7C506%7C217%7C285&lle=0&ifv=1&usr=0&hpt=0 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.donkey.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-TbBruGJ9giLqPGcq27HLwg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
date: Tue, 26 Sep 2023 07:51:39 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: NID=511=f7sRNLz-uP6nS5hhJxCen2dGXvpqR6B9dkhGQwaCIQ1PlXhpVvV6DpVkP7Abv3xbGfk_70G3bfxcjOQl9xnxI-2RlTYdxu6VX5zLYEcITwVT6b0sasGKsuZPFCWfAocGliqMd1Nknryqee6tbJTtk9_QmNDrklq_KfcQOGEQ3X4; expires=Wed, 27-Mar-2024 07:51:39 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+803; expires=Thu, 25-Sep-2025 07:51:39 GMT; path=/; domain=.google.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/afs/gen_204?client=dp-digimedia3_js&output=uds_ads_only&zx=sj7irocula5x&aqid=iY0SZcnHBOmKiM0Pq_aF-Ag&psid=9039920606&pbt=bs&adbx=281&adby=435&adbh=25&adbw=718&adbn=slave-1-1&eawp=partner-dp-digimedia3_js&errv=566716232&csala=13%7C0%7C516%7C217%7C286&lle=0&ifv=1&usr=0&hpt=0
172.217.21.164204 No Content 0 B URL GET HTTP/3 www.google.com/afs/gen_204?client=dp-digimedia3_js&output=uds_ads_only&zx=sj7irocula5x&aqid=iY0SZcnHBOmKiM0Pq_aF-Ag&psid=9039920606&pbt=bs&adbx=281&adby=435&adbh=25&adbw=718&adbn=slave-1-1&eawp=partner-dp-digimedia3_js&errv=566716232&csala=13%7C0%7C516%7C217%7C286&lle=0&ifv=1&usr=0&hpt=0
IP 172.217.21.164:443
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-digimedia3_js&output=uds_ads_only&zx=sj7irocula5x&aqid=iY0SZcnHBOmKiM0Pq_aF-Ag&psid=9039920606&pbt=bs&adbx=281&adby=435&adbh=25&adbw=718&adbn=slave-1-1&eawp=partner-dp-digimedia3_js&errv=566716232&csala=13%7C0%7C516%7C217%7C286&lle=0&ifv=1&usr=0&hpt=0 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.donkey.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-CazJ6iL66dZejC_LKacAnw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
date: Tue, 26 Sep 2023 07:51:39 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: NID=511=PNE2PNw7nkLvHOyL-erngPmmwOgpybcvq8e-oxHOtMIazOk_8Lzjj8-HWVrbrM-U5sFVfWbCNeUJ-dIMiM1FzJCaa5iwAMda2W_h-S760OjIxYZM2Vc2wsa6es3CrvXSJDowi7P73GAIj7G-_iSwsUoe_1EmEZmdnWZ7NKLOSM4; expires=Wed, 27-Mar-2024 07:51:39 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+171; expires=Thu, 25-Sep-2025 07:51:39 GMT; path=/; domain=.google.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/afs/gen_204?client=dp-digimedia3_js&output=uds_ads_only&zx=kb5tftsavf3y&aqid=iY0SZcnHBOmKiM0Pq_aF-Ag&psid=9039920606&pbt=bv&adbx=281&adby=67&adbh=25&adbw=718&adbn=master-1&eawp=partner-dp-digimedia3_js&errv=566716232&csala=23%7C0%7C506%7C217%7C285&lle=0&ifv=1&usr=0&hpt=0
172.217.21.164204 No Content 0 B URL GET HTTP/3 www.google.com/afs/gen_204?client=dp-digimedia3_js&output=uds_ads_only&zx=kb5tftsavf3y&aqid=iY0SZcnHBOmKiM0Pq_aF-Ag&psid=9039920606&pbt=bv&adbx=281&adby=67&adbh=25&adbw=718&adbn=master-1&eawp=partner-dp-digimedia3_js&errv=566716232&csala=23%7C0%7C506%7C217%7C285&lle=0&ifv=1&usr=0&hpt=0
IP 172.217.21.164:443
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-digimedia3_js&output=uds_ads_only&zx=kb5tftsavf3y&aqid=iY0SZcnHBOmKiM0Pq_aF-Ag&psid=9039920606&pbt=bv&adbx=281&adby=67&adbh=25&adbw=718&adbn=master-1&eawp=partner-dp-digimedia3_js&errv=566716232&csala=23%7C0%7C506%7C217%7C285&lle=0&ifv=1&usr=0&hpt=0 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.donkey.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-l7dvVbt_j7DDCmUM7jMT_w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
date: Tue, 26 Sep 2023 07:51:39 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: NID=511=DYYnA_Mf32SUcjwApc7tsTaPWypkpkoGOZWxWHsjHwqBZXSnnwuJe8VNlC6URBQ_Z_XhISxUXAcPGBtH4rWx2FFtNPaiF8n7nHwwPTv1TXU4mioOES6TpUfe9LV1LmDfx2r5niQXD1E1VKVSzjxXTE_f7HKhbUs-MoKbcmZFQPk; expires=Wed, 27-Mar-2024 07:51:39 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+023; expires=Thu, 25-Sep-2025 07:51:39 GMT; path=/; domain=.google.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/afs/gen_204?client=dp-digimedia3_js&output=uds_ads_only&zx=ct9rvov5w4bm&aqid=iY0SZcnHBOmKiM0Pq_aF-Ag&psid=9039920606&pbt=bv&adbx=276&adby=109&adbh=309&adbw=478&adbah=56%2C56%2C56%2C56%2C56&adbn=slave-2-1&eawp=partner-dp-digimedia3_js&errv=566716232&csala=9%7C0%7C520%7C217%7C286&lle=0&ifv=1&usr=0&hpt=0
172.217.21.164204 No Content 0 B URL GET HTTP/3 www.google.com/afs/gen_204?client=dp-digimedia3_js&output=uds_ads_only&zx=ct9rvov5w4bm&aqid=iY0SZcnHBOmKiM0Pq_aF-Ag&psid=9039920606&pbt=bv&adbx=276&adby=109&adbh=309&adbw=478&adbah=56%2C56%2C56%2C56%2C56&adbn=slave-2-1&eawp=partner-dp-digimedia3_js&errv=566716232&csala=9%7C0%7C520%7C217%7C286&lle=0&ifv=1&usr=0&hpt=0
IP 172.217.21.164:443
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-digimedia3_js&output=uds_ads_only&zx=ct9rvov5w4bm&aqid=iY0SZcnHBOmKiM0Pq_aF-Ag&psid=9039920606&pbt=bv&adbx=276&adby=109&adbh=309&adbw=478&adbah=56%2C56%2C56%2C56%2C56&adbn=slave-2-1&eawp=partner-dp-digimedia3_js&errv=566716232&csala=9%7C0%7C520%7C217%7C286&lle=0&ifv=1&usr=0&hpt=0 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.donkey.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-i5x1YVHtlS7VInLjwtUnPQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
date: Tue, 26 Sep 2023 07:51:39 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: NID=511=gvWg3tVJ90cq_ZZ0qK58Vj9JqlKkhEzrD0yFjqSrr_LTeG8wcoVIcUzzN4uYaK5QW5w0usWMo1ll4h24-haLk0SyCZaioacojdLy_5Lr0hg_YYWeB-dCN81YjpvNV9wJVuIk62WMWqtMFO-rS-ko7nr0GH539f-P2577s7_pGUE; expires=Wed, 27-Mar-2024 07:51:39 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+504; expires=Thu, 25-Sep-2025 07:51:39 GMT; path=/; domain=.google.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/afs/gen_204?client=dp-digimedia3_js&output=uds_ads_only&zx=phamgalu1sh3&aqid=iY0SZcnHBOmKiM0Pq_aF-Ag&psid=9039920606&pbt=bv&adbx=281&adby=435&adbh=25&adbw=718&adbn=slave-1-1&eawp=partner-dp-digimedia3_js&errv=566716232&csala=13%7C0%7C516%7C217%7C286&lle=0&ifv=1&usr=0&hpt=0
172.217.21.164204 No Content 0 B URL GET HTTP/3 www.google.com/afs/gen_204?client=dp-digimedia3_js&output=uds_ads_only&zx=phamgalu1sh3&aqid=iY0SZcnHBOmKiM0Pq_aF-Ag&psid=9039920606&pbt=bv&adbx=281&adby=435&adbh=25&adbw=718&adbn=slave-1-1&eawp=partner-dp-digimedia3_js&errv=566716232&csala=13%7C0%7C516%7C217%7C286&lle=0&ifv=1&usr=0&hpt=0
IP 172.217.21.164:443
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-digimedia3_js&output=uds_ads_only&zx=phamgalu1sh3&aqid=iY0SZcnHBOmKiM0Pq_aF-Ag&psid=9039920606&pbt=bv&adbx=281&adby=435&adbh=25&adbw=718&adbn=slave-1-1&eawp=partner-dp-digimedia3_js&errv=566716232&csala=13%7C0%7C516%7C217%7C286&lle=0&ifv=1&usr=0&hpt=0 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.donkey.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-LgbkXOKYh59DAfH0C6oKug' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
date: Tue, 26 Sep 2023 07:51:39 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: NID=511=HAJmbsB4-1aGNP3PzhHSan6Aho4ywgpiT4_FnN5wbEuoV6VbYM94KBgE5qL6dRScedDh0c-ce2HGlrgmKPEi0TeckR1EwCU2I22U41Nuqyt_F_LCNdtgpVtbRhmxdM-w70ITyEjEIJUr6nAOuXBYAM2uherEXJtxyI5P57uvVUc; expires=Wed, 27-Mar-2024 07:51:39 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+816; expires=Thu, 25-Sep-2025 07:51:39 GMT; path=/; domain=.google.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000