tours.specia1.com/t/2076?t=55988&aid=123298&sid=407&opt=476d17f408366541&xk=d01150f0351ba0724d6a5bc4a3676a6a&bn=38&gu=https://go.moartraffic.com/go.php?t=20743&aid=123298&sid=407&clickid=36566aa37840eb7.80006798&ocode=NDA3LjEwNTExLjQ3MzkuNDk0NS4wLjAuMTc3MS4yNS4wLjAuMC4w&hts_id=3940970f-02d9-4e4e-b945-fbfcbb00c46e&clickid=36566aa37840eb7.80006798&i18n_country=US&hts_id=3940970f-02d9-4e4e-b945-fbfcbb00c46e/t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076/
313 B URL tours.specia1.com/t/2076?t=55988&aid=123298&sid=407&opt=476d17f408366541&xk=d01150f0351ba0724d6a5bc4a3676a6a&bn=38&gu=https://go.moartraffic.com/go.php?t=20743&aid=123298&sid=407&clickid=36566aa37840eb7.80006798&ocode=NDA3LjEwNTExLjQ3MzkuNDk0NS4wLjAuMTc3MS4yNS4wLjAuMC4w&hts_id=3940970f-02d9-4e4e-b945-fbfcbb00c46e&clickid=36566aa37840eb7.80006798&i18n_country=US&hts_id=3940970f-02d9-4e4e-b945-fbfcbb00c46e/t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076/
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e763a514f62d31cffce8b9da4e7cb249
f8daf8991217b59090bb499fb94a9dbfb5b189ad
01bd777ce6858358614f3575114bccfa31a10336b387e871524b1beb32190e81
GET /t/2076?t=55988&aid=123298&sid=407&opt=476d17f408366541&xk=d01150f0351ba0724d6a5bc4a3676a6a&bn=38&gu=https://go.moartraffic.com/go.php?t=20743&aid=123298&sid=407&clickid=36566aa37840eb7.80006798&ocode=NDA3LjEwNTExLjQ3MzkuNDk0NS4wLjAuMTc3MS4yNS4wLjAuMC4w&hts_id=3940970f-02d9-4e4e-b945-fbfcbb00c46e&clickid=36566aa37840eb7.80006798&i18n_country=US&hts_id=3940970f-02d9-4e4e-b945-fbfcbb00c46e/t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076/ HTTP/1.1
Host: tours.specia1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 313
x-amz-error-code: Found
x-amz-error-message: Resource Found
location: /t/2076/
date: Wed, 29 Nov 2023 04:10:22 GMT
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: K8eCz-Vu7kq3N8tEFyqhedKpwMs48AFB2ooa5IxLzDj7WJvbh2QFVA==
age: 11
X-Firefox-Spdy: h2
tours.specia1.com/t/common/js/opticks.js
879 B URL tours.specia1.com/t/common/js/opticks.js
IP
Hash ac06e12242ff3ce25969e983f7829d72
2566b4908ee175aa98de902093e41a1082d8681d
720c65cbe1bdca394f267cf306f21558ff6b34d1b55a70c63b919ac8096219fa
GET /t/common/js/opticks.js HTTP/1.1
Host: tours.specia1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/t/2076/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 879
last-modified: Tue, 28 Nov 2023 19:30:12 GMT
server: AmazonS3
date: Wed, 29 Nov 2023 04:10:23 GMT
etag: "ac06e12242ff3ce25969e983f7829d72"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: eNzrdSx3UE4xuyMgWoMUvYrZXg_EhMGWuSrI6LHzaOL_VMW2qKi0sg==
age: 77
X-Firefox-Spdy: h2
cdn.tours-78-94.wellhello.com/sinder/img/no.svg
862 B URL cdn.tours-78-94.wellhello.com/sinder/img/no.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (862), with no line terminators
Hash 65eeb52762bc89d879f3d7180fc2d976
064a0f1def0fff5b98cf82d86cd31e9a8acd78a7
95b1c99567d61185d7884b4ea9b285f849bfb46318b285cd2b25826fad57b1af
GET /sinder/img/no.svg HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 862
date: Wed, 04 Jan 2023 01:00:11 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: "6308fd73-35e"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mRG31lZylSYLfZPtjNgen0TRZNRn-5JN0ndHolbJWAxOBko1pk5cCQ==
age: 28437023
X-Firefox-Spdy: h2
cdn.tours-78-94.wellhello.com/sinder/img/yes.svg
893 B URL cdn.tours-78-94.wellhello.com/sinder/img/yes.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (893), with no line terminators
Hash 655cbe97d7ed34e8462504d7dae81b90
6fb3d056070d7e51032165913dab1721057d095d
5dda8e5ceb3f5f0cc9b274f97eff322d63d9917a39ca42f3a24412e3518c5b2a
GET /sinder/img/yes.svg HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 893
date: Thu, 27 Apr 2023 23:21:10 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: "6308fd73-37d"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TqwZZImbMIdivb5w_PGx2545XmuKuH-AGeyeAadbGuoMowTiFGw8UA==
age: 18593364
X-Firefox-Spdy: h2
cdn.tours-78-94.wellhello.com/sinder/img/girls.png
15 kB URL cdn.tours-78-94.wellhello.com/sinder/img/girls.png
IP
File type PNG image data, 279 x 127, 8-bit colormap, non-interlaced\012- data
Hash adeeb4e0a822bb522625c1953bab8490
7bd5ab07c3de7b4abdc851b3236ccab421f85a07
fbf3ddcc142e33e097c583a0eb5933e3e8a9ac0fc5c56054cb64ddf11762d078
GET /sinder/img/girls.png HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 14564
date: Sun, 01 Oct 2023 00:34:19 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: "6308fd73-38e4"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: e2XQuzOiWdG676gr0zj5aKNLs1IMspO9cr3_QDrLtI3zZ0xEzN_JbQ==
age: 5110575
X-Firefox-Spdy: h2
cdn.tours-78-94.wellhello.com/sinder/img/intro.jpg
16 kB URL cdn.tours-78-94.wellhello.com/sinder/img/intro.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 193x193, components 3\012- data
Hash b585eac69fffa1fd7970b383e6bddcb2
64f739bf983995f6556f945cb261bfe1fe1bbf05
52f9bd02fb60fdc760cde43610634316e644643dadb500a0d23de2077baa78d9
GET /sinder/img/intro.jpg HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 16283
date: Wed, 25 Oct 2023 21:01:13 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: "6308fd73-3f9b"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: e5wDzZNh7hAYpM-vp9Q_t2YDQXRmTwUy08jFCK86pXMLXTnAECxB3w==
age: 2963361
X-Firefox-Spdy: h2
cdn.tours-78-94.wellhello.com/sinder/img/chat.svg
533 B URL cdn.tours-78-94.wellhello.com/sinder/img/chat.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (533), with no line terminators
Hash 2ca57f1f2de2549720696a42a551b662
ce846ed07a3622f5280e930e46dd1e7fad183451
adaa303330a1370d61dc665a931abefae43be83e80b58c5477c51d246ee58b9e
GET /sinder/img/chat.svg HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 533
date: Wed, 20 Sep 2023 23:01:30 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: "6308fd73-215"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: G6NoGiHTlNorXub1vnNi1mlI8deh_CDrIq8sLLDirHA_ZEyhKYRc1w==
age: 5980144
X-Firefox-Spdy: h2
cdn.tours-78-94.wellhello.com/sinder/img/chat-off.svg
533 B URL cdn.tours-78-94.wellhello.com/sinder/img/chat-off.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (533), with no line terminators
Hash a69b89d9307f487ed58a41903f39bc0b
29e29802b95b0098be7525ba48f0ba9081bd5831
e2236170593ba1fc8095c6e61ed3fe443cd8d5247018d91211c00e7f2ab87b6d
GET /sinder/img/chat-off.svg HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 533
date: Sat, 11 Nov 2023 01:47:40 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: "6308fd73-215"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 13XRqS1hUUGXXIVLK7BL3zaYw2iFptlYNee6uIS5wKzmWaenTLrxlg==
age: 1563774
X-Firefox-Spdy: h2
cdn.tours-78-94.wellhello.com/sinder/img/arrow.svg
228 B URL cdn.tours-78-94.wellhello.com/sinder/img/arrow.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with no line terminators
Hash b9fa204329eb7174e9f771e34c7f3c53
1a11918d8529692b7b734f0b82c747f50bb69095
fe8fc656bd4bd41a636c489d1978ee2394d49068675184eeb43f1e0b0b945674
GET /sinder/img/arrow.svg HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 228
date: Fri, 10 Nov 2023 23:32:02 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: "6308fd73-e4"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WgBB209w-GG4HRzekVy33gAyf4h_dxL31UTHWPDfXMV53wDkVb19Ow==
age: 1571912
X-Firefox-Spdy: h2
cdn.tours-78-94.wellhello.com/sinder/img/map-pin-shadow.svg
295 B URL cdn.tours-78-94.wellhello.com/sinder/img/map-pin-shadow.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Hash 39084aa4edef89de7e0620722650e213
6bcf1794e842a6a945913ca8b610d634eb829dda
1406e8ad5a6f490d35e424539bb837841bf4dff4c885426b282ee750e0ccc45e
GET /sinder/img/map-pin-shadow.svg HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 295
date: Sun, 06 Aug 2023 19:49:04 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: "6308fd73-127"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Mh2P8ojP_x0WN23TgWG-ZpUTA3tLjXTlbGkiNG1GppigwD7YqmwY2A==
age: 9879690
X-Firefox-Spdy: h2
cdn.tours-78-94.wellhello.com/sinder/img/no-off.svg
712 B URL cdn.tours-78-94.wellhello.com/sinder/img/no-off.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (712), with no line terminators
Hash 9e940a031b4f0ad4721344ae81026a63
a915a8819a84fe4706e4b89d21a16e4f57a06e6f
ac014bf5225347be767bd63c85977fb9fd99fe6ba5cb045a0ee7368dd0fdb35f
GET /sinder/img/no-off.svg HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 712
date: Thu, 11 May 2023 23:33:41 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: "6308fd73-2c8"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zH6vImwQlPLaDqv3shp-Hp3Cj73yG7g45eW41KmVPvsNjyuqcwYXfQ==
age: 17383013
X-Firefox-Spdy: h2
cdn.tours-78-94.wellhello.com/sinder/img/yes-off.svg
704 B URL cdn.tours-78-94.wellhello.com/sinder/img/yes-off.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (704), with no line terminators
Hash a4eb7ee2185fc85fa10c0e0a591e800b
ebebbe8a12ef952effe3c88b7062caad8c7cffaf
59027987947a695716751edf6b21fe1ac1bf21dcb6b360443e075d166328a2c0
GET /sinder/img/yes-off.svg HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 704
date: Thu, 12 Oct 2023 04:13:50 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: "6308fd73-2c0"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uSnzxD_rTNxbrNbyrS0IQkEzcdzVsrS6CpeODLDZFwJCYSJTlqJAtQ==
age: 4147004
X-Firefox-Spdy: h2
utl-1.com/1.6.20/utl.min.js
307 kB URL utl-1.com/1.6.20/utl.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 307 kB (307271 bytes)
Hash 16abec94a42aa716dd831a52bca3b1b7
35ccd145a5ddeb1556c8995668b137769f3f4f3e
d2edbef8944e5e94cd67c37b0a6960841eacb87327c493790313ca2870feac34
GET /1.6.20/utl.min.js HTTP/1.1
Host: utl-1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 307271
date: Tue, 18 Jul 2023 01:02:18 GMT
last-modified: Mon, 06 Apr 2020 12:48:16 GMT
etag: "16abec94a42aa716dd831a52bca3b1b7"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Y_h-5MycYK8ZLHXhqtIaYIMnvI1fyjNeJ074aI1m0D_GmeAfZyyqMg==
age: 11588897
X-Firefox-Spdy: h2
utl-1.com/1.6.20/mst2.min.js
18 kB URL utl-1.com/1.6.20/mst2.min.js
IP
File type ASCII text, with very long lines (17707), with no line terminators
Hash 1ce673324943ed678ec7908cf7815cab
43bb8e53ec84a337356b04e3a63c15d96b3b729c
863efe6006e4a42f8b6312fc39d79c2aa4c22ce3d1fc845122a064779a26a74e
GET /1.6.20/mst2.min.js HTTP/1.1
Host: utl-1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 17707
date: Mon, 30 Oct 2023 00:44:09 GMT
last-modified: Mon, 06 Apr 2020 12:48:16 GMT
etag: "1ce673324943ed678ec7908cf7815cab"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: AdAHC9tCw_oc7vUWrJnMRapeDPKlkq7sihVQdiVjL0bzhmfoHBrV2w==
age: 2604385
X-Firefox-Spdy: h2
runsafeads.com/h/4898409d9693b180bc?opticks-url=https%3A%2F%2Ftours.specia1.com%2Ft%2F2076%2F&response-opticks-version=v3&_t0=1701231039528&_t1=1701231039714&_t2=1701231039714&_opthbFALfbAUiVi=65a58ea4&_m=1uc
1.4 kB URL runsafeads.com/h/4898409d9693b180bc?opticks-url=https%3A%2F%2Ftours.specia1.com%2Ft%2F2076%2F&response-opticks-version=v3&_t0=1701231039528&_t1=1701231039714&_t2=1701231039714&_opthbFALfbAUiVi=65a58ea4&_m=1uc
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with very long lines (1359), with no line terminators
Hash 284c715463b10524bc541717da61b30f
244726fc68423bf27246ad7dbd8b838b081cad7a
9d3cb90d1dd51549521f2ab65c61d2ecf106c3f6f9cd6edcb81b9406d1561942
POST /h/4898409d9693b180bc?opticks-url=https%3A%2F%2Ftours.specia1.com%2Ft%2F2076%2F&response-opticks-version=v3&_t0=1701231039528&_t1=1701231039714&_t2=1701231039714&_opthbFALfbAUiVi=65a58ea4&_m=1uc HTTP/1.1
Host: runsafeads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tours.specia1.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 2782
Origin: https://tours.specia1.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 29 Nov 2023 04:10:35 GMT
cache-control: private, max-age=0, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
content-type: application/json
vary: Accept-Encoding, User-Agent
content-length: 1359
X-Firefox-Spdy: h2
tours.specia1.com/t/common/js/backtoMA.js
1.1 kB URL tours.specia1.com/t/common/js/backtoMA.js
IP
File type gzip compressed data, from Unix\012- data
Hash 30d0986f4512accc6848ba957bb6f98b
f16e5c5a8c5873d7ee1ea4a2d01517f6fc3078bd
84814194951eb07bd1509522489fb6e8e6f1ded071337869862b4b22afe2c198
GET /t/common/js/backtoMA.js HTTP/1.1
Host: tours.specia1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/t/2076/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Tue, 28 Nov 2023 19:30:12 GMT
server: AmazonS3
content-encoding: gzip
date: Wed, 29 Nov 2023 04:10:23 GMT
etag: W/"5f30069ddc3b11beee672a38b6e6e38f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: UddC-doIy6S0C6BPlm_5PkjLfL5MZtjyonV8jbE6gRIMkYaJN20gng==
age: 77
X-Firefox-Spdy: h2
cdn.tours-78-94.wellhello.com/sinder/js/custom.min.js
1.8 kB URL cdn.tours-78-94.wellhello.com/sinder/js/custom.min.js
IP
File type gzip compressed data, from Unix\012- data
Hash 8e8603f564e43e3f81687e86172c3849
e8bcca9268984655e7e616f3ff231332cb096cbb
554b27e1d1b7c2ad4741bc6c45f5f6e646ae51d309ab4b07f4eb30b055df4553
GET /sinder/js/custom.min.js HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
date: Thu, 27 Jul 2023 00:42:02 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: W/"6308fd73-f8f"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ryFbrJZjHm_kWoMpmG37Ai9xVOy9wMWBe9_ItxO9WAF4f0xzzhKrKg==
age: 10812512
X-Firefox-Spdy: h2
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash 8aece79ef114d78375ef916ed8356087
7ded9463a6aa87627fd7acc65fc5bfc7c3d20a17
b16dba13c18f826cc6a541d56e7a6e3c3a4b956b50d8111904d1be50da8260b9
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Wed, 29 Nov 2023 04:10:37 GMT
Server: ECAcc (amb/6AE8)
X-Cache: Miss from cloudfront
Via: 1.1 2afd697fc5d0058ea30d6c4b939e714c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: p2nCAyyUQhfDTKrEWuBJ3Z8pEgmAKVSBP-Olun4QaSmln4KNxOy1bQ==
touchhh.com/touch?type=3&hts_id=7bacee34-79be-4a11-babc-f59efa085381&traffic_risk_score=-alpha&zone_id=334095376&campaign_id=238032523&creative_id=240429687&zone_name=Qkkie+Zone+Optiks&campaign_name=Zone+Optiks+Jerkmate+%28CrakRevenue%29+External+Performance+on+Qkkie&product_id=
68 B URL touchhh.com/touch?type=3&hts_id=7bacee34-79be-4a11-babc-f59efa085381&traffic_risk_score=-alpha&zone_id=334095376&campaign_id=238032523&creative_id=240429687&zone_name=Qkkie+Zone+Optiks&campaign_name=Zone+Optiks+Jerkmate+%28CrakRevenue%29+External+Performance+on+Qkkie&product_id=
IP
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
POST /touch?type=3&hts_id=7bacee34-79be-4a11-babc-f59efa085381&traffic_risk_score=-alpha&zone_id=334095376&campaign_id=238032523&creative_id=240429687&zone_name=Qkkie+Zone+Optiks&campaign_name=Zone+Optiks+Jerkmate+%28CrakRevenue%29+External+Performance+on+Qkkie&product_id= HTTP/1.1
Host: touchhh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://moartraffic.engine.adglare.net
DNT: 1
Connection: keep-alive
Referer: https://moartraffic.engine.adglare.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
content-type: image/png
content-length: 68
date: Wed, 29 Nov 2023 04:10:37 GMT
x-amzn-requestid: cd2036b6-ddf0-43d6-a659-e809eeac3bdb
x-amz-apigw-id: PJH1rHqHIAMEnYA=
cache-control: no-store, max-age=0
x-amzn-trace-id: Root=1-6566b9bd-62fedf3f506fa01f537aac2c;Sampled=0;lineage=23f7427b:0
x-cache: Miss from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5VtdRc-zT7dVqMAubYt1bxtuQ87esVkh-fEduy4aklec_0BEwTC1kg==
X-Firefox-Spdy: h2
go.moartraffic.com/go.php?t=55036&aid=&sid=_BIDCreative%3A+240429687&hts_id=7bacee34-79be-4a11-babc-f59efa085381&product_id=&agcid=fTFwa1FXMDIhPS0pKiE-Iz0qMWdQXDEoKiU2ISggIDwlNiQ_JnpqWlYqLScrLCMmOy4zPiQmNTpne21lJyM6ITAlNX9PVyYjKyAmOC4wKi8lPit0aW9wb0ZsYDAyJjIpKSEhOCc2MD8mcGgxKCouNDchIzw9JSs3JjA7NDFxZ2JrbWpqc2t1dzUxPjtWXEAqOyd9fWV7anInPDF0ejo_MGplam5rdmArLSdAenZ8fnxqKCY1LDYjMCU1aWd9Y2x5dHcqLSd8djE-K3h2JCkmTnF9dmdgdjs0MXZmemRvfSYjOmBibXRseCk9cWZ6JyoxZX1samJtNT87bWF-b3JgYjEoO3l3dGdlaHhsMSgrNSkkZnZ1R2F3bnJ3fGoxKCt_cXJjdyNEPE4nY2psamA8emdgZXplKDZwfWU1eA.._f4137491
302 Found 566 B URL User Request GET HTTP/2 go.moartraffic.com/go.php?t=55036&aid=&sid=_BIDCreative%3A+240429687&hts_id=7bacee34-79be-4a11-babc-f59efa085381&product_id=&agcid=fTFwa1FXMDIhPS0pKiE-Iz0qMWdQXDEoKiU2ISggIDwlNiQ_JnpqWlYqLScrLCMmOy4zPiQmNTpne21lJyM6ITAlNX9PVyYjKyAmOC4wKi8lPit0aW9wb0ZsYDAyJjIpKSEhOCc2MD8mcGgxKCouNDchIzw9JSs3JjA7NDFxZ2JrbWpqc2t1dzUxPjtWXEAqOyd9fWV7anInPDF0ejo_MGplam5rdmArLSdAenZ8fnxqKCY1LDYjMCU1aWd9Y2x5dHcqLSd8djE-K3h2JCkmTnF9dmdgdjs0MXZmemRvfSYjOmBibXRseCk9cWZ6JyoxZX1samJtNT87bWF-b3JgYjEoO3l3dGdlaHhsMSgrNSkkZnZ1R2F3bnJ3fGoxKCt_cXJjdyNEPE4nY2psamA8emdgZXplKDZwfWU1eA.._f4137491
IP
Certificate IssuerLet's Encrypt
Subjectgo.moartraffic.com
Fingerprint91:FF:37:7A:D8:9C:D1:52:28:CF:20:BD:36:CF:BA:AC:85:D4:DD:6A
ValidityWed, 11 Oct 2023 10:45:06 GMT - Tue, 09 Jan 2024 10:45:05 GMT
File type HTML document, ASCII text, with very long lines (566), with no line terminators
Hash 600e719dafb97a79fe7dee63c4931fb6
24b440f74a183d908bb07e150348366242506fd8
7e7649ab195f632e5e4b9846b060b9bf62c374cd67f843237bfe4a535909701e
GET /go.php?t=55036&aid=&sid=_BIDCreative%3A+240429687&hts_id=7bacee34-79be-4a11-babc-f59efa085381&product_id=&agcid=fTFwa1FXMDIhPS0pKiE-Iz0qMWdQXDEoKiU2ISggIDwlNiQ_JnpqWlYqLScrLCMmOy4zPiQmNTpne21lJyM6ITAlNX9PVyYjKyAmOC4wKi8lPit0aW9wb0ZsYDAyJjIpKSEhOCc2MD8mcGgxKCouNDchIzw9JSs3JjA7NDFxZ2JrbWpqc2t1dzUxPjtWXEAqOyd9fWV7anInPDF0ejo_MGplam5rdmArLSdAenZ8fnxqKCY1LDYjMCU1aWd9Y2x5dHcqLSd8djE-K3h2JCkmTnF9dmdgdjs0MXZmemRvfSYjOmBibXRseCk9cWZ6JyoxZX1samJtNT87bWF-b3JgYjEoO3l3dGdlaHhsMSgrNSkkZnZ1R2F3bnJ3fGoxKCt_cXJjdyNEPE4nY2psamA8emdgZXplKDZwfWU1eA.._f4137491 HTTP/1.1
Host: go.moartraffic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://moartraffic.engine.adglare.net/
Cookie: bdreff=https%3A%2F%2Ftours.specia1.com%2F; tour=53940; bdcounter=1; xk=a051c0c0d0b0e0509d629b74ab6c6b69
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
cache-control: no-store, no-cache, must-revalidate
content-type: text/html; charset=UTF-8
date: Wed, 29 Nov 2023 04:10:37 GMT
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://t.ajump1.com/2779/4551?aff_click_id=0133f818-f1a6-4189-9b50-77259ebe8939&source=55036+&xk=a051c0c0d0b0e0509d629b74ab6c6b69&hts_id=0133f818-f1a6-4189-9b50-77259ebe8939&i18n_country=NO
p3p: CP="NOI ADM DEV COM NAV OUR STP"
server: nginx
set-cookie: bd_ovtu=1; expires=Thu, 30-Nov-2023 04:10:37 GMT; Max-Age=86400; path=/; domain=.moartraffic.com
bdreff=https%3A%2F%2Fmoartraffic.engine.adglare.net%2F; expires=Mon, 27-May-2024 04:10:37 GMT; Max-Age=15552000; path=/; domain=.moartraffic.com
tour=55036; expires=Mon, 27-May-2024 04:10:37 GMT; Max-Age=15552000; path=/; domain=.moartraffic.com
bdcounter=2; expires=Thu, 30-Nov-2023 04:10:37 GMT; Max-Age=86400; path=/; domain=.moartraffic.com
xk=a051c0c0d0b0e0509d629b74ab6c6b69; expires=Mon, 27-May-2024 04:10:37 GMT; Max-Age=15552000; path=/; domain=.moartraffic.com
x-powered-by: PHP/8.1.19
x-robots-tag: otherbot: noindex, nofollow, googlebot: noindex, nofollow
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/_next/static/css/981b544153db6743.css
200 OK 1.2 kB URL GET HTTP/2 gateway.jerkmate.com/cno/_next/static/css/981b544153db6743.css
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (3871), with no line terminators
Hash a3badfa29764e1a3b42df21af493b19b
bce91474dda23570985b3cb1a2e6a7380a851a7c
020e9d33bb61c27c2f1f2ca4f55de14a064a942384d30dfad596b9f505ff3e8e
GET /cno/_next/static/css/981b544153db6743.css HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
content-length: 1167
date: Sat, 25 Nov 2023 16:54:23 GMT
server: nginx/1.17.8
apigw-requestid: O9r9-jDroAMEVyQ=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"f1f-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5lFlzPNdkEvY7BUkpBnAOXpXu6q5KU1LA198GCiUVactKsF9qxzOQw==
age: 299775
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/19ebcd0fbe/it.svg
200 OK 498 B URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/19ebcd0fbe/it.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 7dc8917a7068b1fd01c3ac35618cc818
aa9de0296e734d80f1fb1e9ec397cd8e086c916a
2cd8d86729bd8c6ef297d4026d73c8990ec6df85c8e7ffec376cac38d5963175
GET /cmscloud/dA/19ebcd0fbe/it.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 498
date: Sat, 25 Nov 2023 16:54:23 GMT
set-cookie: AWSALB=6sDXcNoYVcvIABTpFIIbYujI9Oz6GluA9bxLVKPAhPKS/I4wZ3qxcgt64bhm4cF9TOUiUDbXn3QjviripNhvOU3kIx0SZpa8QhOx3NmGNmCAUgDoB6VDKZx3UgBF; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/
AWSALBCORS=6sDXcNoYVcvIABTpFIIbYujI9Oz6GluA9bxLVKPAhPKS/I4wZ3qxcgt64bhm4cF9TOUiUDbXn3QjviripNhvOU3kIx0SZpa8QhOx3NmGNmCAUgDoB6VDKZx3UgBF; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="it.svg"
expires: Sun, 24 Nov 2024 16:54:23 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 22 Apr 2021 12:46:01 +0000
etag: dot:bff2d52f-dc33-4db5-aa64-d1d3d48a28af:1619095561000:498
accept-ranges: bytes
apigw-requestid: O9r9-gYzoAMEP2w=
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GyIfAlHPLafexoOkZVwu9p3DJCmQcmBiO5w4yku7NCMTsIA4GdekJQ==
age: 299775
referrer-policy: strict-origin-when-cross-origin
vary: Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/_next/static/chunks/120-7b4fc9d6543c2261.js
200 OK 20 kB URL GET HTTP/2 gateway.jerkmate.com/cno/_next/static/chunks/120-7b4fc9d6543c2261.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 38db4939128d73cb9108e6b350caa02b
8a4bd9d0f20eb4eb01ec6713b0d991b18f52201c
ca2f4e288f1a399592926fcb63373914292d79e02a2572cba3f65184d8da5b0d
GET /cno/_next/static/chunks/120-7b4fc9d6543c2261.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 19891
date: Sat, 25 Nov 2023 16:54:23 GMT
server: nginx/1.17.8
apigw-requestid: O9r99jShoAMEPGw=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"12071-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6h2xQSNFv28j6iTPQK8IKZsy_ToyD1k5cWbzbond7-pqF8n-YtYZ3w==
age: 299775
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/_next/static/_H7vFNH_oBuxYbBhMUL_0/_buildManifest.js
200 OK 347 B URL GET HTTP/2 gateway.jerkmate.com/cno/_next/static/_H7vFNH_oBuxYbBhMUL_0/_buildManifest.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (614), with no line terminators
Hash 4d3e0aab5c1eecfed530015032013643
95fec99dbbdd57baa1a72f9ec176bba31cf0c2fa
52590ed48342ccc85723243822eafe156a9357a5d14fe081a4e6506067075ecf
GET /cno/_next/static/_H7vFNH_oBuxYbBhMUL_0/_buildManifest.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 347
date: Sat, 25 Nov 2023 16:54:23 GMT
server: nginx/1.17.8
apigw-requestid: O9r9_jseIAMEPEQ=
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"266-18b8c0769d0"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7PSuYN9smfabHftUQS3GEjKckrLS2-JqO3x0cnGB_BvcdFqMs-9G5Q==
age: 299775
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding,Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/eb4e3ddc66/es.svg
200 OK 664 B URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/eb4e3ddc66/es.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash bc11181dd1d5465bc75fcec5207e8d6c
d7f860c0673cdc92d921be9439c6a07384d87e58
77c14d9c104c167a5bbd0b2b2bd03d9c0177e2677914656edf7cfd3b7568430d
GET /cmscloud/dA/eb4e3ddc66/es.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 664
date: Sat, 25 Nov 2023 16:54:23 GMT
set-cookie: AWSALB=dWIeNiKh4aHPSsmKv+apRffPwmtPLtP8XbA/eWmrO5Jh4BtpeVKSmlXPDJO/HYGqAEvZ1DGJU4PwFnPGDliwxocNqMaT9qm8ho4aKO78HkeBdxMXYDkjaDaBPE3B; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/
AWSALBCORS=dWIeNiKh4aHPSsmKv+apRffPwmtPLtP8XbA/eWmrO5Jh4BtpeVKSmlXPDJO/HYGqAEvZ1DGJU4PwFnPGDliwxocNqMaT9qm8ho4aKO78HkeBdxMXYDkjaDaBPE3B; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="es.svg"
expires: Sun, 24 Nov 2024 16:54:23 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 22 Apr 2021 12:46:01 +0000
etag: dot:2cc6772b-4348-4c9f-993c-7090b64d2a65:1619095561000:664
accept-ranges: bytes
apigw-requestid: O9r9_hg_IAMESJA=
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6cKY7IY5XTvBjxRleg4tDS9znSVUojkzgCfWM23iN1JwHaVPPT4_EA==
age: 299775
referrer-policy: strict-origin-when-cross-origin
vary: Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/82388797bc/fr.svg
200 OK 511 B URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/82388797bc/fr.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 4223844d00707152d1d197d34da41ec0
cbf955b217a10e667b758cdfc6c6425f92a30384
ed3e5dbeaecd323e1ea4151ee01773314316443029e3d52c2074c293ff974c5e
GET /cmscloud/dA/82388797bc/fr.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 511
date: Sat, 25 Nov 2023 16:54:23 GMT
set-cookie: AWSALB=S2/Mj/EDueopCBb9zHhRf4c4B4n6rGNK+Xr0jebSQKiPXull/UxVIlhbiKX3uVup9dbtVctj2Nkcljfe5qjUqD/ArIsg2GFpm3gURn8BDU1+VUL+eDhd4ke0+QO/; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/
AWSALBCORS=S2/Mj/EDueopCBb9zHhRf4c4B4n6rGNK+Xr0jebSQKiPXull/UxVIlhbiKX3uVup9dbtVctj2Nkcljfe5qjUqD/ArIsg2GFpm3gURn8BDU1+VUL+eDhd4ke0+QO/; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="fr.svg"
expires: Sun, 24 Nov 2024 16:54:23 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 22 Apr 2021 12:46:01 +0000
etag: dot:636dcc91-b503-4cd0-8461-61780376d4a8:1619095561000:511
accept-ranges: bytes
apigw-requestid: O9r99jaqIAMEVWw=
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cpbUyU6C5hJ8t92KjA1z9Y_iOJDDEFZNcWPHev-bVzk-UESHWpMroQ==
age: 299775
referrer-policy: strict-origin-when-cross-origin
vary: Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/_next/static/chunks/pages/index-97876df10145b412.js
200 OK 334 B URL GET HTTP/2 gateway.jerkmate.com/cno/_next/static/chunks/pages/index-97876df10145b412.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (538), with no line terminators
Hash 08f33722cb5cef67abc3ed4c8c118e3a
ab71bcd86f4a22512d00937ef7aa34202471677a
f8006228f21c7237839040b443bd86c95ce12a49c1c24671001ae8ac60e53e65
GET /cno/_next/static/chunks/pages/index-97876df10145b412.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 334
date: Sat, 25 Nov 2023 16:54:23 GMT
server: nginx/1.17.8
apigw-requestid: O9r99gHkoAMES5g=
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"21a-18b8c0769d0"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -crHH5BOFOFxfMIXdztOuUWSBL2MVfW_YEAdU8tOm4MEEJjDfdFM3g==
age: 299775
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding,Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/_next/static/_H7vFNH_oBuxYbBhMUL_0/_ssgManifest.js
200 OK 106 B URL GET HTTP/2 gateway.jerkmate.com/cno/_next/static/_H7vFNH_oBuxYbBhMUL_0/_ssgManifest.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 2cf6719bd8f124b159008cce5c44333e
7886848eef64ba935bd8078db5930500d9042c96
6a07aeccbb0fe440f1c7252d96a131039fa79780e7cafeb5355d7d3d9914e55b
GET /cno/_next/static/_H7vFNH_oBuxYbBhMUL_0/_ssgManifest.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 106
date: Sat, 25 Nov 2023 16:54:23 GMT
server: nginx/1.17.8
apigw-requestid: O9r9-igCoAMEVsA=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:39 GMT
etag: W/"6a-18b8c07bbd8"
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: eC7qzYA6LJJh_LovTCXvixpcSlc6SIdnLc5xz6BAs-KJ1RbFkGOnXQ==
age: 299775
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/8970383085/de.svg
200 OK 639 B URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/8970383085/de.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 99d7ec1914cffa444eca58c13c368ad4
def575d0dd1bbbf11d5fed1d2a9bdc238c9d65a7
d1583806f7e1a3a19eee75254decc54f9ef28c1302c2e5c143c6122159c0cc0b
GET /cmscloud/dA/8970383085/de.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 639
date: Sat, 25 Nov 2023 16:54:23 GMT
set-cookie: AWSALB=1JGYvypJ7pPI3KvD63CWSr1fbVNSeeeBQMPahCc0dqi2/Epnr8zgcGxTFrSEpr1atCobVPGZYuZ8q7oVj+6nS/1QT01bFMgLqp6q4P0+x5nWKM415tADE99BPv4w; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/
AWSALBCORS=1JGYvypJ7pPI3KvD63CWSr1fbVNSeeeBQMPahCc0dqi2/Epnr8zgcGxTFrSEpr1atCobVPGZYuZ8q7oVj+6nS/1QT01bFMgLqp6q4P0+x5nWKM415tADE99BPv4w; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="de.svg"
expires: Sun, 24 Nov 2024 16:54:23 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 22 Apr 2021 12:46:01 +0000
etag: dot:cac4b43f-8f76-4ac0-bbaa-f29da4e433ba:1619095561000:639
accept-ranges: bytes
apigw-requestid: O9r9-imIoAMEVKw=
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0JUJiINpL4-YnxkA-G3pB6FA9ZtMH-d9Da0UQEUzUzPiPErtE8octQ==
age: 299775
referrer-policy: strict-origin-when-cross-origin
vary: Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/1a5ddf5804/pt.svg
200 OK 885 B URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/1a5ddf5804/pt.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 5845c7110dd82ec186135455c756cded
fa41f2a59c16509555a251138c6acc82e3cb3932
9d61a554c23ead1b41cd0cdc0f965de15fee48d279e84ef08a737d98f1f4075b
GET /cmscloud/dA/1a5ddf5804/pt.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 885
date: Sat, 25 Nov 2023 16:54:23 GMT
set-cookie: AWSALB=BwXu+rh6ahbet30cFqZVumO0x2s1QE1Dcs7Yz+EW6ZURp0a4rIqQ3MSGmceU6oLRPaCQk0vVLJwQwo5VIkLbJnRxQmcYnXvTn6qnJtnry7XIO7ZZSSmdFaLF/Wob; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/
AWSALBCORS=BwXu+rh6ahbet30cFqZVumO0x2s1QE1Dcs7Yz+EW6ZURp0a4rIqQ3MSGmceU6oLRPaCQk0vVLJwQwo5VIkLbJnRxQmcYnXvTn6qnJtnry7XIO7ZZSSmdFaLF/Wob; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="pt.svg"
expires: Sun, 24 Nov 2024 16:54:23 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 22 Apr 2021 12:46:01 +0000
etag: dot:93a17bc5-1353-463d-a778-0cfdeae4431f:1619095561000:885
accept-ranges: bytes
apigw-requestid: O9r9_j6EoAMESmg=
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZZxWQWfvUgV1u9DEDQZ3tyYGo_O32xdAagiuuJG4so2NXj5tp_1mLg==
age: 299775
referrer-policy: strict-origin-when-cross-origin
vary: Origin
X-Firefox-Spdy: h2
tours.specia1.com/t/common/js/repoUtilsV2.js
3.0 kB URL tours.specia1.com/t/common/js/repoUtilsV2.js
IP
File type gzip compressed data, from Unix\012- data
Hash 9536fbde1ea8ad5810b74f07ee13e820
40f90dba804631fb501ca7e5b3d98d0fc00d9a38
7b643fe3da99b147dd1e77f940179e2ec256a8d68629e9d4cb2b97512311063a
GET /t/common/js/repoUtilsV2.js HTTP/1.1
Host: tours.specia1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/t/2076/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Tue, 28 Nov 2023 19:30:12 GMT
server: AmazonS3
content-encoding: gzip
date: Wed, 29 Nov 2023 04:10:23 GMT
etag: W/"463ab17c7b265e702f3c4390d78b31b3"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 3uXCTiVathFqgBcMgp6gAvI0ley7T080qng4dJZn0plIcbtGmmATCQ==
age: 294
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/b88578965b/nl.svg
200 OK 496 B URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/b88578965b/nl.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 88426efa127b09ebc25a22c23e359697
e825251659ba9c799ee1a36d24c7fc9dce7f0ab6
65983dd36bd6b78a3d3a94523390ca56500dfd7f03463720f7c97c799986f018
GET /cmscloud/dA/b88578965b/nl.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 496
date: Sat, 25 Nov 2023 16:54:23 GMT
set-cookie: AWSALB=DzWQZ8z0i7mqwWYlnBMKJihVcR5/YpMCtN32Ch5ZfKh7RryV5OtBcE86amgaq3g2SJ8/fvgKalefmJs4+nvTqR6IwnI3f6Oa0oQESxNqQ4GuBqgIDwZKAS6UuTAG; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/
AWSALBCORS=DzWQZ8z0i7mqwWYlnBMKJihVcR5/YpMCtN32Ch5ZfKh7RryV5OtBcE86amgaq3g2SJ8/fvgKalefmJs4+nvTqR6IwnI3f6Oa0oQESxNqQ4GuBqgIDwZKAS6UuTAG; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="nl.svg"
expires: Sun, 24 Nov 2024 16:54:23 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 22 Apr 2021 12:46:01 +0000
etag: dot:8b4a8e7b-ad08-4e12-a81a-31a462b04902:1619095561000:496
accept-ranges: bytes
apigw-requestid: O9r-AgmZoAMEVYg=
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8OW4P1U_FZFqTvAloXwbFNwxni6JECO2JasVeDxysH4CgJHYQqvJWQ==
age: 299775
referrer-policy: strict-origin-when-cross-origin
vary: Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/_next/static/chunks/framework-106f20edc271d368.js
200 OK 42 kB URL GET HTTP/2 gateway.jerkmate.com/cno/_next/static/chunks/framework-106f20edc271d368.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 2d3a5b25cf92243157319955d2903093
51b8322a5bed1a7ceaad6da2af45e8ad5cfd90e4
81db2acd47fb90b05f8f0b585acf356b1bd9676bd2094468e8f4331d6ff7ef8f
GET /cno/_next/static/chunks/framework-106f20edc271d368.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 42169
date: Sat, 25 Nov 2023 16:54:23 GMT
server: nginx/1.17.8
apigw-requestid: O9r9-j4DoAMEPDg=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"1fbc1-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: b0WtKC38wZNbdTgYWN8XS8yY-1rsEnAaD1m10XifqLVx-pTV3wbNIw==
age: 299775
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/_next/static/chunks/main-37d2def6d34d131a.js
200 OK 30 kB URL GET HTTP/2 gateway.jerkmate.com/cno/_next/static/chunks/main-37d2def6d34d131a.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash e3107c292b526cedac3a31edd3a1bbce
841222f7cdbda89bb73ac7c6db02799afa8a89db
40efec9e042bfda23739659eb0a1a8fc3d566f8fca207572e1c3cdba72f1f4ed
GET /cno/_next/static/chunks/main-37d2def6d34d131a.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 30387
date: Sat, 25 Nov 2023 16:54:23 GMT
server: nginx/1.17.8
apigw-requestid: O9r9-gesIAMEP9w=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"1950f-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ceAUxrTVJRe83-irV5YWYM3k4-chWnt450mrutynU6Hu24jCpZDuwQ==
age: 299775
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/_next/static/chunks/webpack-5050628ecf47f5fe.js
200 OK 2.0 kB URL GET HTTP/2 gateway.jerkmate.com/cno/_next/static/chunks/webpack-5050628ecf47f5fe.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (3863), with no line terminators
Hash a4a56c3572810f804232da971c7b5822
6f6561818e6155ab8543c64d22d9ee10f904622d
adca7e781cb926a3e8339e95b6f09253b596764844e4878ba78c7a3ce7e9bc61
GET /cno/_next/static/chunks/webpack-5050628ecf47f5fe.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 1953
date: Sat, 25 Nov 2023 16:54:23 GMT
server: nginx/1.17.8
apigw-requestid: O9r9-j0dIAMEVlQ=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"f17-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CpKwySfOR1Pz3U4nD9ttGeRqtKqoX19NLg-mbTTGcjuWWVC9BuZrmA==
age: 299775
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/_next/static/chunks/pages/_app-d22cba5dce0a9ccb.js
200 OK 148 kB URL GET HTTP/2 gateway.jerkmate.com/cno/_next/static/chunks/pages/_app-d22cba5dce0a9ccb.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 148 kB (148524 bytes)
Hash fd3640de48800a4644bc86d9f3b8746f
6571c24dc9dc7c1939f9fe0a22fb43ed9d4ef740
c4dd22ecfa5452e6a9b48129ba46850264e78ef2c3f62402106cec7de380b569
GET /cno/_next/static/chunks/pages/_app-d22cba5dce0a9ccb.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 148524
date: Sat, 25 Nov 2023 16:54:23 GMT
server: nginx/1.17.8
apigw-requestid: O9r9-gEUoAMEPSA=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"8146b-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ArchiTrATdJklbZHq7goO2u5nIPANvLIRkZtBFn5r1zd2Qlw93yKdw==
age: 299775
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/_next/static/chunks/361-784cbad91e244c85.js
200 OK 40 kB URL GET HTTP/2 gateway.jerkmate.com/cno/_next/static/chunks/361-784cbad91e244c85.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash fa5be163d6708407e3fa137d0b404ab9
2bbe86887fa704cd736ba29fbf1490a0b45e56e1
c14636a2e9a19991354462a4dc6431299c166f09aec2c761426c921a7294146d
GET /cno/_next/static/chunks/361-784cbad91e244c85.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 40184
date: Sat, 25 Nov 2023 16:54:23 GMT
server: nginx/1.17.8
apigw-requestid: O9r9-gZwIAMEVhw=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"21ba9-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1Eh4PPLlNfan5jFHmocPSa94oEL9N9tmoJ2RBLaSlnKAYMPTaPAQzA==
age: 299775
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
cdn.tours-78-94.wellhello.com/sinder/img/map-pin-wh.svg
5.7 kB URL cdn.tours-78-94.wellhello.com/sinder/img/map-pin-wh.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4413)
Hash 43b0cae4092dc281e82bd99a916302fb
adf4c07a90af15ae12dcdcd64f647c1bb2d1d666
113d29070dba32f8f0e6cff998f67dd623510e2bdede49057002cd7bd2d13660
GET /sinder/img/map-pin-wh.svg HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Fri, 21 Apr 2023 17:52:52 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: W/"6308fd73-fde"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Ddm8CXpU4yJEKJAP6WUiQPJhjuHAKofhfsneO7BW84ihFWgS4FF-tA==
age: 19131462
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/assets/cno/jerkmate-logo.svg
200 OK 3.6 kB URL GET HTTP/2 gateway.jerkmate.com/cno/assets/cno/jerkmate-logo.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (4429)
Hash 63bd4d06abcc17b960a84e9d4cad707f
3ed5674bb842e76495f3c6374a2d331239725930
f0eb97c1af10efcbd66d57b8ee1d3bfb75df50c02714defc76c1e539510077f7
GET /cno/assets/cno/jerkmate-logo.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 3555
date: Wed, 29 Nov 2023 04:10:38 GMT
server: nginx/1.17.8
apigw-requestid: PJH13h4TIAMEP0w=
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Wed, 01 Nov 2023 17:54:56 GMT
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
etag: W/"27fb-18b8c062980"
x-cache: Miss from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DPqXj2LD3dU4jV6rrgqFwnBQ8bosZhTL4Opn-2BOCiZ1Q81kLl73sQ==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/images/copyright/asacp.png
200 OK 1.7 kB URL GET HTTP/2 gateway.jerkmate.com/cno/images/copyright/asacp.png
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type PNG image data, 40 x 20, 8-bit colormap, non-interlaced\012- data
Hash f6ff6eaa0c8129ee9ddc6cfc031cfdce
f68f2920f1f56a5b1e0d1d09028c0acb2cfa8fc0
26e2c90b392d1986bd8e662d48385bd4de47aaf1602cbdc8da562b15b76ed7d7
GET /cno/images/copyright/asacp.png HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1668
date: Wed, 29 Nov 2023 04:10:38 GMT
server: nginx/1.17.8
apigw-requestid: PJH13ikWoAMEPYw=
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Wed, 01 Nov 2023 17:54:56 GMT
strict-transport-security: max-age=15724800; includeSubDomains
etag: W/"684-18b8c062980"
x-cache: Miss from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SDze7bvA9XZhSJ6SIJ9AacfrXKaJZLXbJVVIqL7aWJB6tSM7MDTByg==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/images/copyright/rta.jpg
200 OK 1.1 kB URL GET HTTP/2 gateway.jerkmate.com/cno/images/copyright/rta.jpg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 40x20, components 3\012- data
Hash 8be0a11d05f28033c145ac44ed811c54
9b70e400380447a1d3454157df4d704516765c07
500609be0c6b4ea773c4c10087f549410014bf4e35d483d3b4dce284d6ce035d
GET /cno/images/copyright/rta.jpg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 1056
date: Wed, 29 Nov 2023 04:10:38 GMT
server: nginx/1.17.8
apigw-requestid: PJH13irGIAMEStw=
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Wed, 01 Nov 2023 17:54:56 GMT
strict-transport-security: max-age=15724800; includeSubDomains
etag: W/"420-18b8c062980"
x-cache: Miss from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Yj1aP_dfUKTkn5um9ETc_N5zBwLwX0JaAWEkOz7wtn5ycvTyE7hvuA==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Origin
X-Firefox-Spdy: h2
hw-cdn2.adtng.com/delivery/idsync/idsync.min.js
200 OK 48 kB URL GET HTTP/2 hw-cdn2.adtng.com/delivery/idsync/idsync.min.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerDigiCert Inc
Subject*.adtng.com
FingerprintE3:A5:72:2C:70:97:86:2D:8A:21:17:4E:DC:02:6A:84:F1:B3:09:40
ValidityFri, 09 Jun 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (47550), with no line terminators
Hash 930adae67545064bc14c6678361c0974
b441eaaac3118e44f3b1300fbdf9bd9d95b046e4
35598acd20349e1fe6a84aad36121c51589e7017a8855ccd3a2409479cdd7d72
GET /delivery/idsync/idsync.min.js HTTP/1.1
Host: hw-cdn2.adtng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 29 Nov 2023 04:10:39 GMT
content-type: application/javascript
content-length: 47557
last-modified: Thu, 02 Mar 2023 15:50:17 GMT
expires: Wed, 28 Feb 2024 06:16:08 GMT
cache-control: max-age=10385753
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
accept-ranges: bytes
x-cdn-diag: ams5-6577-1-38992-h-0-0---;7402-32-34954----0-0-1
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/images/svg/icon-audio-muted.svg
200 OK 386 B URL GET HTTP/2 gateway.jerkmate.com/cno/images/svg/icon-audio-muted.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (700), with no line terminators
Hash 2ab61911c119f36840449016fb7ca986
076e0e793f0af5168bf09e1f1d6a362ed5483974
cda3148abe6b7dadff8ca9e980754152b5ef277baf4d3eefe8b143a0115c4c8e
GET /cno/images/svg/icon-audio-muted.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE; AWSALBCORS=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 386
date: Wed, 29 Nov 2023 04:10:39 GMT
server: nginx/1.17.8
apigw-requestid: PJH1_goiIAMES9w=
cache-control: public, max-age=0
last-modified: Wed, 01 Nov 2023 17:54:56 GMT
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
etag: W/"2bc-18b8c062980"
x-cache: Miss from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NSnUE_XSigSB3_QbRO-Yw0-07Z7GSaXh30XwUokyUd6pyvRyEn3UNg==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding,Accept-Encoding, Origin
X-Firefox-Spdy: h2
cdn.tours-78-94.wellhello.com/sinder/img/logo-wh2.svg
2.7 kB URL cdn.tours-78-94.wellhello.com/sinder/img/logo-wh2.svg
IP
File type gzip compressed data, from Unix\012- data
Hash a9188945d1d957478b068b94b645f5ae
791103cb6ea84dbbd66a30e6542ca2e63df9063b
1a9be5f8ee2058661c848944b1b480a27faeae6f5355d9cf418f5d2ca9b9354c
GET /sinder/img/logo-wh2.svg HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Sat, 27 May 2023 01:47:42 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: W/"6308fd73-177c"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 79hgasCK4Oy5Vo0B4Q9b0IWFhJf3XaUQ7R9RIyx-d4xxKpUWJB3hQw==
age: 16078972
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/images/svg/close.svg
200 OK 278 B URL GET HTTP/2 gateway.jerkmate.com/cno/images/svg/close.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text
Hash 375233a30c002a4d0069648c5d4adbb2
54d4592ac2c5d2c56f02372677433ed780efd8a8
a6d45b55c729895b6800dcdf3c403e68a5f32b1735ab04e8f2fe7bf204ae9150
GET /cno/images/svg/close.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE; AWSALBCORS=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 278
date: Wed, 29 Nov 2023 04:10:39 GMT
server: nginx/1.17.8
apigw-requestid: PJH2Ah2UIAMEVcw=
cache-control: public, max-age=0
last-modified: Wed, 01 Nov 2023 17:54:56 GMT
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
etag: W/"1cc-18b8c062980"
x-cache: Miss from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: F-Z0WApixPCpVtsb2R7HlLjKHGRC7slv1RRLX6mOMYmf7MBoXfX0dQ==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding,Accept-Encoding, Origin
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2
200 OK 33 kB URL GET HTTP/2 fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 33148, version 1.0\012- data
Hash e88b1871ed8eef59b7df05a91a6f2157
feebf868e5bc28362677fd6e92ac3d41c5c9715e
34208e63c50cc27f5c13b0c29629cf0561fa788f564a07f82cf877dc28e46b82
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33148
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 23:27:34 GMT
expires: Fri, 22 Nov 2024 23:27:34 GMT
cache-control: public, max-age=31536000
age: 448985
last-modified: Wed, 13 Sep 2023 22:39:50 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2
200 OK 33 kB URL GET HTTP/2 fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 33148, version 1.0\012- data
Hash e88b1871ed8eef59b7df05a91a6f2157
feebf868e5bc28362677fd6e92ac3d41c5c9715e
34208e63c50cc27f5c13b0c29629cf0561fa788f564a07f82cf877dc28e46b82
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33148
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 23:27:34 GMT
expires: Fri, 22 Nov 2024 23:27:34 GMT
cache-control: public, max-age=31536000
age: 448985
last-modified: Wed, 13 Sep 2023 22:39:50 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
200 OK 16 kB URL User Request GET HTTP/2 cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
IP
Certificate IssuerLet's Encrypt
Subjectcno.jerkmate.com
Fingerprint52:F2:4E:B6:5B:86:9B:E6:9E:C1:DD:BB:F7:57:E6:13:4E:9C:FD:FB
ValiditySat, 25 Nov 2023 09:19:42 GMT - Fri, 23 Feb 2024 09:19:41 GMT
File type gzip compressed data, from Unix\012- data
Hash b053d5c50a46088401b4daa1614cc089
d31b5bdb957ef82ed5ad04a36289943d4b38e40a
045721fbbe295491e017ac91284b422f8cd6a5e75ee1a20d08d33448e2a7b51a
GET /?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376 HTTP/1.1
Host: cno.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://moartraffic.engine.adglare.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.17.8
date: Wed, 29 Nov 2023 04:10:38 GMT
content-type: text/html; charset=utf-8
x-nextjs-cache: HIT
x-powered-by: Next.js
etag: "84k5dl6pje1u19"
cache-control: s-maxage=600, stale-while-revalidate
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-W8XR2C2
200 OK 97 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-W8XR2C2
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (33883)
Hash 546822fcaf898e216efd0988453c0c58
7c5f85f56873e836ded08c88073c5db58173d018
bb01f059408af04b41b42c7e79e7ac56e2e04ca419ea19a3b2ccfe65d6146095
GET /gtm.js?id=GTM-W8XR2C2 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 29 Nov 2023 04:10:39 GMT
expires: Wed, 29 Nov 2023 04:10:39 GMT
cache-control: private, max-age=900
last-modified: Wed, 29 Nov 2023 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 97074
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/_next/static/chunks/847.9f6fd81aab105eac.js
200 OK 783 B URL GET HTTP/2 gateway.jerkmate.com/cno/_next/static/chunks/847.9f6fd81aab105eac.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (1576), with no line terminators
Hash 5d8d02ecf0f97eb59ac9fc597dc67fb1
145e952729a03299cfbbab027e998116f78ba68b
8a59940b637b518327794005200a1375533b191c9584bc3111314cbdbacd196b
GET /cno/_next/static/chunks/847.9f6fd81aab105eac.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE; AWSALBCORS=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 783
date: Sat, 25 Nov 2023 16:54:24 GMT
server: nginx/1.17.8
apigw-requestid: O9r-EgRwIAMEVHg=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"628-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dtVXNaPCzpNljnGhICWkASTokU_tHYSqOMjGpx_sficPecTY9NKZsg==
age: 299775
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/_next/static/chunks/33.07dc177144c3cd24.js
200 OK 2.1 kB URL GET HTTP/2 gateway.jerkmate.com/cno/_next/static/chunks/33.07dc177144c3cd24.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (6070), with no line terminators
Hash b0f3bf1018053a8db03e91f78cd691df
e57721f85009a44ee9c952c67b775d4d463ddeed
a5a2971d05f637d789cf7568e681958f47d22fb77b067976196841ae74f1cfba
GET /cno/_next/static/chunks/33.07dc177144c3cd24.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE; AWSALBCORS=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 2091
date: Sat, 25 Nov 2023 16:54:24 GMT
server: nginx/1.17.8
apigw-requestid: O9r-EgyqIAMEPGg=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"17b6-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qciTjFdHh_jgMFB7ZbBxGqMJ8p8t-3TJQWtCgi0ju3z0VSObLbmRWA==
age: 299775
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/chathead/chathead.min.js
200 OK 31 kB URL GET HTTP/2 gateway.jerkmate.com/chathead/chathead.min.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (30966)
Hash 16f902294080f36ded4c798ece090be2
6c98d13c631c14efcbb6bae59edd5bd0ea4589de
d43749c14955b4e89e29c82cd4ca0b64e86f79e8e7e055bb38de39962892c4ba
GET /chathead/chathead.min.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE; AWSALBCORS=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 31008
date: Wed, 29 Nov 2023 04:10:28 GMT
server: AmazonS3
last-modified: Tue, 27 Jun 2023 13:31:12 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
test: max-age=300
apigw-requestid: PJH0MhK-oAMESew=
etag: "16f902294080f36ded4c798ece090be2"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7KQ2i0_h2iSU-DSDecCPDsJIF-vBtYwoPGNkt49zhsgd4ixQE4knVw==
age: 12
X-Firefox-Spdy: h2
gateway.jerkmate.com/wswidget/ws-session-widget.min.js
200 OK 36 kB URL GET HTTP/2 gateway.jerkmate.com/wswidget/ws-session-widget.min.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type C source, ASCII text, with very long lines (36094), with no line terminators
Hash c06710f1f08d0451be35cdccf64501a6
e6a6b6deef4ac11654ed99a88950f246574578cd
b3ea67a96c89c18865ec2ee16d9041e4025539df8f0bb07d7c4f0011162d606f
GET /wswidget/ws-session-widget.min.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE; AWSALBCORS=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 36094
date: Wed, 29 Nov 2023 04:10:28 GMT
server: AmazonS3
last-modified: Mon, 16 Oct 2023 13:09:29 GMT
etag: "c06710f1f08d0451be35cdccf64501a6"
x-amz-server-side-encryption: AES256
cache-control: max-age=300
accept-ranges: bytes
apigw-requestid: PJH0MhiaIAMEa-g=
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AXhglAHZvGadUJ9OlEMfFHI4cT3mvijlJTtLJHtRKqAYPYKj4H3R4Q==
age: 12
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno-queries/profile?imgParam=q4m22O&lang=en
200 OK 1.1 kB URL GET HTTP/2 gateway.jerkmate.com/cno-queries/profile?imgParam=q4m22O&lang=en
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (6434)
Hash db21395798eb017c30dace5f03bff792
7720bdd5d87a120733cf16ceb446592f04582c6e
d2c413b2dc428e0812ab381fae9b15a3455d59b48c8259ebe43ad5f9481d839e
GET /cno-queries/profile?imgParam=q4m22O&lang=en HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 1072
date: Wed, 29 Nov 2023 04:10:40 GMT
apigw-requestid: PJH2Ejj_oAMEV4A=
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
access-control-allow-origin: *
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: W3r1lmx6fx7_y-TlHemGuMo8DRYpg0FzPlMMLgeZxh49js0n09wUDw==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/images/svg/gold-coin.svg
200 OK 861 B URL GET HTTP/2 gateway.jerkmate.com/cno/images/svg/gold-coin.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (479)
Hash 1327a9157aca30bb7a0b642aaf381710
98e43661030ec672ff2db2298896bd3bcd2cf391
e73c0d04968435fd0836d34f98b52937cdf8dc24e9ec2d23de1cbe6114f5dc05
GET /cno/images/svg/gold-coin.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE; AWSALBCORS=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 861
date: Wed, 29 Nov 2023 04:10:40 GMT
server: nginx/1.17.8
apigw-requestid: PJH2FhF5oAMEVNw=
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Wed, 01 Nov 2023 17:54:56 GMT
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
etag: W/"6b8-18b8c062980"
x-cache: Miss from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pmryNOQfE9ebJgcxpVImXtj4zEA3OqlneUpli91WEicYTt3wxurPEg==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/assets/cno/favicon/favicon-16x16.png
200 OK 1.0 kB URL GET HTTP/2 gateway.jerkmate.com/cno/assets/cno/favicon/favicon-16x16.png
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 8edf5f5b5af66f673d8fe60f8f9d6518
20e9ac1a90b684f1b029c7425723cb55412bf245
6a241a5306747918237619dfbd5d2bd975e56f3614a453ed6607fe50cef6c16a
GET /cno/assets/cno/favicon/favicon-16x16.png HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE; AWSALBCORS=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1023
date: Wed, 29 Nov 2023 04:10:40 GMT
server: nginx/1.17.8
apigw-requestid: PJH2Hg53oAMEVMw=
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Wed, 01 Nov 2023 17:54:56 GMT
strict-transport-security: max-age=15724800; includeSubDomains
etag: W/"3ff-18b8c062980"
x-cache: Miss from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xvteJIHLW0XPZtP_MnmphO7MCDBrE0xtP16Yx-dbbMqRwgaeBJmIVQ==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/assets/cno/favicon/apple-touch-icon.png
200 OK 9.7 kB URL GET HTTP/2 gateway.jerkmate.com/cno/assets/cno/favicon/apple-touch-icon.png
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash 1db81ea062c88fc3ceb7ad912c947b64
7df4aa8eadac0fdd0abc3a76fc775b1127edd152
90dc9041d03338343df09df4c75251bede72d757f24fe10ccab4d23ee4a087e8
GET /cno/assets/cno/favicon/apple-touch-icon.png HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE; AWSALBCORS=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 9714
date: Wed, 29 Nov 2023 04:10:40 GMT
server: nginx/1.17.8
apigw-requestid: PJH2HiaoIAMEP-A=
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Wed, 01 Nov 2023 17:54:56 GMT
strict-transport-security: max-age=15724800; includeSubDomains
etag: W/"25f2-18b8c062980"
x-cache: Miss from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UUyDwvf29v-DO0vtkgJ6sF2iPrpw5RlbZDULGpKyp0AKm13EToKrqQ==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/_next/static/chunks/pages/2257-6fda0a1a7a85eeeb.js
200 OK 2.1 kB URL GET HTTP/2 gateway.jerkmate.com/cno/_next/static/chunks/pages/2257-6fda0a1a7a85eeeb.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (4780), with no line terminators
Hash e5cd75134f7010373f6a4c144c24bec1
8163f4eedc9ad2da72b4dccf2163979c17b9c15b
6b308312eb98c0b75d65cf59029e00d49b5b8d9aa33c10f47e61953633de6d74
GET /cno/_next/static/chunks/pages/2257-6fda0a1a7a85eeeb.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE; AWSALBCORS=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 2086
date: Sun, 26 Nov 2023 07:37:20 GMT
server: nginx/1.17.8
apigw-requestid: O_tTlipXIAMEV1w=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"12ac-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: j7VdAFdNdUJMJY29lfh4UJzlrrMN-GVy5D8RnVKHO_dX3WZlirSL4A==
age: 246800
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/_next/static/chunks/pages/antispam-91929b49973764a8.js
200 OK 1.9 kB URL GET HTTP/2 gateway.jerkmate.com/cno/_next/static/chunks/pages/antispam-91929b49973764a8.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (4024), with no line terminators
Hash fe2884f1217d2eefc7b16f3bdf80bf8b
0c094e5c2c0ecbd3e8262c01bfa469ddab5a6f85
9e0d3282f6588ff78ec80786aea56be9a97ef010ba32c65ad8e042bb868d4f18
GET /cno/_next/static/chunks/pages/antispam-91929b49973764a8.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE; AWSALBCORS=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 1931
date: Wed, 29 Nov 2023 04:10:29 GMT
server: nginx/1.17.8
apigw-requestid: PJH0ahwFIAMESkg=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"fb8-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QnJlW0IXpRqFpumrzWaTXPQlpyKvTaniGAeGDnDsvSOua9K9A0Nf8Q==
age: 11
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/session-api/ws-session?referer=https%3A%2F%2Fmoartraffic.engine.adglare.net%2F
200 OK 1.1 kB URL POST HTTP/2 gateway.jerkmate.com/session-api/ws-session?referer=https%3A%2F%2Fmoartraffic.engine.adglare.net%2F
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (2976), with no line terminators
Hash 30d7e10f50b6a20296bbe6b3035813a2
240745b862c4e77414f194c250d8d98845d69c7b
a423e4fc6a2eef6f8a133b609938ae9f3252fb4f95bfb868d6f14a9431b2c862
POST /session-api/ws-session?referer=https%3A%2F%2Fmoartraffic.engine.adglare.net%2F HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cno.jerkmate.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 1361
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 1142
date: Wed, 29 Nov 2023 04:10:40 GMT
server: nginx/1.19.0
apigw-requestid: PJH2KiqgIAMEVCQ=
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
access-control-allow-origin: *
x-cache: Miss from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BgTcqabmOb_0utJ5MAw7oEhfMJEDgxt5kk0myCeYnt2cRUg-_wGi4Q==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/9e1aeb949a/icone/dildo.svg
200 OK 942 B URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/9e1aeb949a/icone/dildo.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (854)
Hash 92e6f2331bd9ca6f9f1b3d0c28354ee2
5a5124ae0f22df154490b1ee42e02e8e610ff7e3
c38a33570931bb0e962a06ad12462fadd87bfcb279ca760cf45760a6f55236c8
GET /cmscloud/dA/9e1aeb949a/icone/dildo.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cno.jerkmate.com/
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 942
date: Sat, 25 Nov 2023 17:19:08 GMT
set-cookie: AWSALB=v9SHgleFKM9Gb9bqF39Vnl6RZ4hUFVjIMR3qwAs2tWm29kaHYTkLHWleYSA5wdORfAXVGSGH8HZnK+QSIX58RjzxFuA+fz+QbRSoqaZrbYEz3CY/xxbOX8GV9u4U; Expires=Sat, 02 Dec 2023 17:19:08 GMT; Path=/
AWSALBCORS=v9SHgleFKM9Gb9bqF39Vnl6RZ4hUFVjIMR3qwAs2tWm29kaHYTkLHWleYSA5wdORfAXVGSGH8HZnK+QSIX58RjzxFuA+fz+QbRSoqaZrbYEz3CY/xxbOX8GV9u4U; Expires=Sat, 02 Dec 2023 17:19:08 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="dildo.svg"
expires: Sun, 24 Nov 2024 17:19:08 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 24 Feb 2022 18:59:00 +0000
etag: dot:96cea090-79a7-4c50-9939-b0ed4042ac8e:1645729140000:942
accept-ranges: bytes
access-control-allow-origin: *
apigw-requestid: O9vl_gYpIAMEaQA=
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Z3PB9KNxuLwxfH0n7pQInifu9-l3WdTe_lXTxMNl4Cj4AyT6jY_pNA==
age: 298292
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2
200 OK 33 kB URL GET HTTP/2 fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 33148, version 1.0\012- data
Hash e88b1871ed8eef59b7df05a91a6f2157
feebf868e5bc28362677fd6e92ac3d41c5c9715e
34208e63c50cc27f5c13b0c29629cf0561fa788f564a07f82cf877dc28e46b82
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33148
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 23:27:34 GMT
expires: Fri, 22 Nov 2024 23:27:34 GMT
cache-control: public, max-age=31536000
age: 448986
last-modified: Wed, 13 Sep 2023 22:39:50 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/a7376915f9/icone/blowjob.svg
200 OK 2.0 kB URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/a7376915f9/icone/blowjob.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4373), with CRLF line terminators
Hash f1e13e8593d7049305c94486fb1320fc
577ccfb9cada5b406e1542da7bdcfe3b89319a86
7bcd231a5c1b5013c76e8c033b6cf95b47d894da4fa9d048081674aed1815301
GET /cmscloud/dA/a7376915f9/icone/blowjob.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cno.jerkmate.com/
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Sat, 25 Nov 2023 17:19:08 GMT
set-cookie: AWSALB=Qzvwjvyeeoe6o12foOpcBKnBJ4dD3mu58scUxMi6NOHppSRmxTIOunMOmRiu53VhJzIkpT/sbnTXQ7VJBRYX58V2YH7zw88UIYWy4ZPhxYkA5wE0SaHao9aKLK7V; Expires=Sat, 02 Dec 2023 17:19:08 GMT; Path=/
AWSALBCORS=Qzvwjvyeeoe6o12foOpcBKnBJ4dD3mu58scUxMi6NOHppSRmxTIOunMOmRiu53VhJzIkpT/sbnTXQ7VJBRYX58V2YH7zw88UIYWy4ZPhxYkA5wE0SaHao9aKLK7V; Expires=Sat, 02 Dec 2023 17:19:08 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="blowjob.svg"
expires: Sun, 24 Nov 2024 17:19:08 +0000
cache-control: public, max-age=31536000
last-modified: Mon, 30 May 2022 18:47:17 +0000
access-control-allow-origin: *
apigw-requestid: O9vl_h26IAMEVtw=
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: o2p1SJAj0_0SgOYJNjaP9R6qnS3eoMuvVaVazxFlTWCvvVGHU4i6dQ==
age: 298292
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/b30d11aaf3/poster/1920x1080_av.png
200 OK 458 kB URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/b30d11aaf3/poster/1920x1080_av.png
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced\012- data
Size 458 kB (458444 bytes)
Hash f5bbabb66d1a60be7cd2a65541dc6b3d
a3ac9aa4772edabe4076d81fc8d853f8b565e02d
2e0decf461ef9161b4ef4ec82f22eca5f425c0342bac6332dc8ff2ee90979173
GET /cmscloud/dA/b30d11aaf3/poster/1920x1080_av.png HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE; AWSALBCORS=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 458444
date: Wed, 29 Nov 2023 04:10:41 GMT
set-cookie: AWSALB=F7Y8odCebVQ0Kid54QdJbx3XYDP+srKbnZIIWJsALSKnAW6LXsdlhOlNWA/6Xjk1y56l+Blz+UnlGBY+ziTycYnOElogsOJEALIMd10NW78f5R2CF07nwirP916B; Expires=Wed, 06 Dec 2023 04:10:40 GMT; Path=/
AWSALBCORS=F7Y8odCebVQ0Kid54QdJbx3XYDP+srKbnZIIWJsALSKnAW6LXsdlhOlNWA/6Xjk1y56l+Blz+UnlGBY+ziTycYnOElogsOJEALIMd10NW78f5R2CF07nwirP916B; Expires=Wed, 06 Dec 2023 04:10:40 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="1920x1080_av.png"
expires: Thu, 28 Nov 2024 04:10:40 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 06 Oct 2022 14:57:45 +0000
etag: dot:8933c732-e8de-4fd7-9f0f-f24eccef9880:1665068265000:458444
accept-ranges: bytes
apigw-requestid: PJH2MgPAIAMEaMA=
x-cache: Miss from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1rB4lVud_LqSokhYLARfrApmuP80j_958QuFaSh3WbshezSKS_Iftg==
referrer-policy: strict-origin-when-cross-origin
vary: Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/af79c4e71f/icone/boobs.svg
200 OK 87 kB URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/af79c4e71f/icone/boobs.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1472), with CRLF line terminators
Hash 4e8775be45780f68a1b68e3f2a17fc68
99d87f7954b4317f5093bb536fb5ee7fd0ffe8d1
23152b5a59df2622fb3402eced4eb0da83bc2df8b8346ca55b10225be5e821df
GET /cmscloud/dA/af79c4e71f/icone/boobs.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cno.jerkmate.com/
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Sat, 25 Nov 2023 16:54:25 GMT
set-cookie: AWSALB=BIiLVhB5Bf2i/Jt+6qIV5aCKe4HlCB+Zr0q0FuggH9o8QORgah7AFlXtC7hudcIlCzYV4gaSK/sm/JBdEZ/C+63U/hThRur02jaFr/XqemPpMnwn7weqBJi619l3; Expires=Sat, 02 Dec 2023 16:54:25 GMT; Path=/
AWSALBCORS=BIiLVhB5Bf2i/Jt+6qIV5aCKe4HlCB+Zr0q0FuggH9o8QORgah7AFlXtC7hudcIlCzYV4gaSK/sm/JBdEZ/C+63U/hThRur02jaFr/XqemPpMnwn7weqBJi619l3; Expires=Sat, 02 Dec 2023 16:54:25 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="boobs.svg"
expires: Sun, 24 Nov 2024 16:54:25 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 24 Feb 2022 18:57:43 +0000
access-control-allow-origin: *
apigw-requestid: O9r-NgOAIAMEPdg=
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: S62r__z9-Lha3QlhniDmvwElmD7JWkABmSHY8jG05fOVHhpDYSpARg==
age: 299775
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/b09b3d872c/icone/squirt.svg
200 OK 48 kB URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/b09b3d872c/icone/squirt.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1271), with CRLF line terminators
Hash 56811d5bd1753caa760571d801a3648e
91d9dded665d059bc0cded17b0785c729e223d9b
ad89a2903ee0d0eb7efcca98938a23efa95927d9c5d87462b99af8fe64770495
GET /cmscloud/dA/b09b3d872c/icone/squirt.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cno.jerkmate.com/
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Wed, 29 Nov 2023 04:10:41 GMT
set-cookie: AWSALB=ZNFlEM149zkbqHl0HebCL2oOK0vu6buPi63k6NDv3nkRj3A/6PeYVXAoDhDSTQD4X9nMzNEp+tqPFr4lsHCnyQd6rZc5r4nvAsMJ3d8as+pvUECJHR3SJPFeZtQa; Expires=Wed, 06 Dec 2023 04:10:40 GMT; Path=/
AWSALBCORS=ZNFlEM149zkbqHl0HebCL2oOK0vu6buPi63k6NDv3nkRj3A/6PeYVXAoDhDSTQD4X9nMzNEp+tqPFr4lsHCnyQd6rZc5r4nvAsMJ3d8as+pvUECJHR3SJPFeZtQa; Expires=Wed, 06 Dec 2023 04:10:40 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="squirt.svg"
expires: Thu, 28 Nov 2024 04:10:41 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 24 Feb 2022 18:57:45 +0000
access-control-allow-origin: *
apigw-requestid: PJH2MgWtIAMEazw=
content-encoding: br
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hoqk_LpH1qpHk7rUAbOmfhdEvBkuMGY47eJW_2sns0BgwTYqiKYyNw==
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
rtb2-useast.afkwa.com/universalPixel?account=53338
200 OK 42 B URL GET HTTP/1.1 rtb2-useast.afkwa.com/universalPixel?account=53338
IP
ASN #27257 WEBAIR-INTERNET
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerLet's Encrypt
Subjectafkwa.com
Fingerprint79:36:C0:44:D2:C9:AC:76:30:AC:E4:A7:2D:0F:44:C0:82:A6:F6:07
ValidityWed, 25 Oct 2023 06:37:23 GMT - Tue, 23 Jan 2024 06:37:22 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /universalPixel?account=53338 HTTP/1.1
Host: rtb2-useast.afkwa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 29 Nov 2023 04:10:41 GMT
Content-Type: image/gif
Content-Length: 42
Connection: keep-alive
Cache-Control: no-store
Age: 0
Pragma: no-cache
gateway.jerkmate.com/cno/_next/static/chunks/pages/2257-6fda0a1a7a85eeeb.js
200 OK 2.1 kB URL GET HTTP/2 gateway.jerkmate.com/cno/_next/static/chunks/pages/2257-6fda0a1a7a85eeeb.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (4780), with no line terminators
Hash e5cd75134f7010373f6a4c144c24bec1
8163f4eedc9ad2da72b4dccf2163979c17b9c15b
6b308312eb98c0b75d65cf59029e00d49b5b8d9aa33c10f47e61953633de6d74
GET /cno/_next/static/chunks/pages/2257-6fda0a1a7a85eeeb.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=+v++DeZ1YOuW9j3RlK6S9Q3tanLVQHMGyEVugE8wpCeldsFL/6Gf5Cf4znNfH+fQ47k5Okn9L6qo6YV1hf5NFIqDRjM+XI2lmLih5iAPJCk8t9HZcgFQMtH/mVr0; AWSALBCORS=+v++DeZ1YOuW9j3RlK6S9Q3tanLVQHMGyEVugE8wpCeldsFL/6Gf5Cf4znNfH+fQ47k5Okn9L6qo6YV1hf5NFIqDRjM+XI2lmLih5iAPJCk8t9HZcgFQMtH/mVr0; _gcl_au=1.1.1934319187.1701231045; _ga_S6XTBZ5V47=GS1.1.1701231045.1.0.1701231045.0.0.0; _ga=GA1.1.432209682.1701231046; d_fs=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 2086
date: Sun, 26 Nov 2023 07:37:20 GMT
server: nginx/1.17.8
apigw-requestid: O_tTlipXIAMEV1w=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"12ac-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nvcNd5J0TlGR9ZWRHjavogEn_XWjH-usGrE-JBNdOrNejtqnF2l7YA==
age: 246802
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/_next/static/chunks/pages/antispam-91929b49973764a8.js
200 OK 1.9 kB URL GET HTTP/2 gateway.jerkmate.com/cno/_next/static/chunks/pages/antispam-91929b49973764a8.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (4024), with no line terminators
Hash fe2884f1217d2eefc7b16f3bdf80bf8b
0c094e5c2c0ecbd3e8262c01bfa469ddab5a6f85
9e0d3282f6588ff78ec80786aea56be9a97ef010ba32c65ad8e042bb868d4f18
GET /cno/_next/static/chunks/pages/antispam-91929b49973764a8.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=+v++DeZ1YOuW9j3RlK6S9Q3tanLVQHMGyEVugE8wpCeldsFL/6Gf5Cf4znNfH+fQ47k5Okn9L6qo6YV1hf5NFIqDRjM+XI2lmLih5iAPJCk8t9HZcgFQMtH/mVr0; AWSALBCORS=+v++DeZ1YOuW9j3RlK6S9Q3tanLVQHMGyEVugE8wpCeldsFL/6Gf5Cf4znNfH+fQ47k5Okn9L6qo6YV1hf5NFIqDRjM+XI2lmLih5iAPJCk8t9HZcgFQMtH/mVr0; _gcl_au=1.1.1934319187.1701231045; _ga_S6XTBZ5V47=GS1.1.1701231045.1.0.1701231045.0.0.0; _ga=GA1.1.432209682.1701231046; d_fs=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 1931
date: Wed, 29 Nov 2023 04:10:29 GMT
server: nginx/1.17.8
apigw-requestid: PJH0ahwFIAMESkg=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"fb8-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zM8n2h9IvbKYaKB5Am9lGka3Fwuo3td21zD8n4sNyfAGsLKvTc3FCA==
age: 13
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/abba6e886a/videoFile1920x1080Webm/Intro-1920X1080.webm?language_id=1
206 Partial Content 16 MB URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/abba6e886a/videoFile1920x1080Webm/Intro-1920X1080.webm?language_id=1
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type WebM\012- EBML file, creator webmB\20\012- data
Size 16 MB (15710764 bytes)
Hash fe05b95f6548253a3554f617dca5ed21
3cd94ccc7cd9ee9b74e9c12b11c9981786d1d33b
f89cbbfd614a754c789d2ba6786f6d555b215817694d72af177389070d495b0d
Analyzer Verdict Alert YARAhub by abuse.ch malware meth_get_eip
GET /cmscloud/dA/abba6e886a/videoFile1920x1080Webm/Intro-1920X1080.webm?language_id=1 HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE; AWSALBCORS=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
content-type: video/webm
content-length: 15710764
date: Wed, 29 Nov 2023 04:10:41 GMT
set-cookie: AWSALB=+v++DeZ1YOuW9j3RlK6S9Q3tanLVQHMGyEVugE8wpCeldsFL/6Gf5Cf4znNfH+fQ47k5Okn9L6qo6YV1hf5NFIqDRjM+XI2lmLih5iAPJCk8t9HZcgFQMtH/mVr0; Expires=Wed, 06 Dec 2023 04:10:41 GMT; Path=/
AWSALBCORS=+v++DeZ1YOuW9j3RlK6S9Q3tanLVQHMGyEVugE8wpCeldsFL/6Gf5Cf4znNfH+fQ47k5Okn9L6qo6YV1hf5NFIqDRjM+XI2lmLih5iAPJCk8t9HZcgFQMtH/mVr0; Expires=Wed, 06 Dec 2023 04:10:41 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="Intro-1920X1080.webm"
expires: Thu, 28 Nov 2024 04:10:41 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 06 Oct 2022 14:56:00 +0000
etag: dot:37b1fdba-2ec3-434a-9745-c46a9245a539:1665068160000:15710764
accept-ranges: bytes
apigw-requestid: PJH2NiXSoAMEPhw=
content-range: bytes 0-15710763/15710764
x-cache: Miss from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ooKDFYROo8vSTuglgoIPPqGUkrvHo_IPBF99m96XEn1Y7QrS2nmcbg==
referrer-policy: strict-origin-when-cross-origin
vary: Origin
X-Firefox-Spdy: h2
sync.atsptp.com/d/jsfp/4cb725660c43031e3b06c75892d96c5a
200 OK 36 B URL GET HTTP/2 sync.atsptp.com/d/jsfp/4cb725660c43031e3b06c75892d96c5a
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerLet's Encrypt
Subjectatsptp.com
FingerprintFA:9C:B6:E3:80:79:B1:4C:0A:4F:62:F2:5B:FC:59:2B:7B:5D:DF:91
ValidityTue, 17 Oct 2023 23:28:59 GMT - Mon, 15 Jan 2024 23:28:58 GMT
File type ASCII text, with no line terminators
Hash 3558911d63648b5e1ba3cafc6808b581
5e38b07e8cd6bbc10bbbfec445ff662f1a2058cd
7ced72031459202d78ba2e76d284c9548b0e0c7fc3899b19585136faf7dcb10e
GET /d/jsfp/4cb725660c43031e3b06c75892d96c5a HTTP/1.1
Host: sync.atsptp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
set-cookie: d_uidb=4d476c00-13db-a0f5-0ab3-bd39a851979c; Max-Age=31536000; Expires=Thu, 28 Nov 2024 04:10:42 GMT; Path=/; Domain=sync.atsptp.com; SameSite=Lax
date: Wed, 29 Nov 2023 04:10:42 GMT
access-control-allow-origin: https://cno.jerkmate.com
vary: Origin
access-control-allow-credentials: true
content-type: text/plain
content-length: 36
x-trace: 2B492ADADF17FE7C3340E6E7E8041426AB4EBE1282000000000000000000
via: 1.1 google
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
X-Firefox-Spdy: h2
sync.atsptp.com/d/jsfp/4cb725660c43031e3b06c75892d96c5a
200 OK 36 B URL GET HTTP/2 sync.atsptp.com/d/jsfp/4cb725660c43031e3b06c75892d96c5a
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerLet's Encrypt
Subjectatsptp.com
FingerprintFA:9C:B6:E3:80:79:B1:4C:0A:4F:62:F2:5B:FC:59:2B:7B:5D:DF:91
ValidityTue, 17 Oct 2023 23:28:59 GMT - Mon, 15 Jan 2024 23:28:58 GMT
File type ASCII text, with no line terminators
Hash 3558911d63648b5e1ba3cafc6808b581
5e38b07e8cd6bbc10bbbfec445ff662f1a2058cd
7ced72031459202d78ba2e76d284c9548b0e0c7fc3899b19585136faf7dcb10e
GET /d/jsfp/4cb725660c43031e3b06c75892d96c5a HTTP/1.1
Host: sync.atsptp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
set-cookie: d_uidb=4d476c00-13db-a0f5-0ab3-bd39a851979c; Max-Age=31536000; Expires=Thu, 28 Nov 2024 04:10:42 GMT; Path=/; Domain=sync.atsptp.com; SameSite=Lax
date: Wed, 29 Nov 2023 04:10:42 GMT
access-control-allow-origin: https://cno.jerkmate.com
vary: Origin
access-control-allow-credentials: true
content-type: text/plain
content-length: 36
x-trace: 2B409E3919B78DD562326140AFC793DF295AC10ECF000000000000000000
via: 1.1 google
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
X-Firefox-Spdy: h2
sync.atsptp.com/link/4d476c00-13db-a0f5-0ab3-bd39a851979c/origin/a/oldd/4d476c00-13db-a0f5-0ab3-bd39a851979c
200 OK 36 B URL POST HTTP/2 sync.atsptp.com/link/4d476c00-13db-a0f5-0ab3-bd39a851979c/origin/a/oldd/4d476c00-13db-a0f5-0ab3-bd39a851979c
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerLet's Encrypt
Subjectatsptp.com
FingerprintFA:9C:B6:E3:80:79:B1:4C:0A:4F:62:F2:5B:FC:59:2B:7B:5D:DF:91
ValidityTue, 17 Oct 2023 23:28:59 GMT - Mon, 15 Jan 2024 23:28:58 GMT
File type ASCII text, with no line terminators
Hash 3558911d63648b5e1ba3cafc6808b581
5e38b07e8cd6bbc10bbbfec445ff662f1a2058cd
7ced72031459202d78ba2e76d284c9548b0e0c7fc3899b19585136faf7dcb10e
POST /link/4d476c00-13db-a0f5-0ab3-bd39a851979c/origin/a/oldd/4d476c00-13db-a0f5-0ab3-bd39a851979c HTTP/1.1
Host: sync.atsptp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 144
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
set-cookie: d_uidb=4d476c00-13db-a0f5-0ab3-bd39a851979c; Max-Age=31536000; Expires=Thu, 28 Nov 2024 04:10:43 GMT; Path=/; Domain=sync.atsptp.com; SameSite=Lax
date: Wed, 29 Nov 2023 04:10:43 GMT
access-control-allow-origin: https://cno.jerkmate.com
vary: Origin
access-control-allow-credentials: true
content-type: text/plain
content-length: 36
x-trace: 2B73E0A05E94F564FDFD40F1CF96C46D82197875C0000000000000000000
via: 1.1 google
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
X-Firefox-Spdy: h2
sync.atsptp.com/link/4d476c00-13db-a0f5-0ab3-bd39a851979c/origin/a/oldd/4d476c00-13db-a0f5-0ab3-bd39a851979c
200 OK 36 B URL POST HTTP/2 sync.atsptp.com/link/4d476c00-13db-a0f5-0ab3-bd39a851979c/origin/a/oldd/4d476c00-13db-a0f5-0ab3-bd39a851979c
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerLet's Encrypt
Subjectatsptp.com
FingerprintFA:9C:B6:E3:80:79:B1:4C:0A:4F:62:F2:5B:FC:59:2B:7B:5D:DF:91
ValidityTue, 17 Oct 2023 23:28:59 GMT - Mon, 15 Jan 2024 23:28:58 GMT
File type ASCII text, with no line terminators
Hash 3558911d63648b5e1ba3cafc6808b581
5e38b07e8cd6bbc10bbbfec445ff662f1a2058cd
7ced72031459202d78ba2e76d284c9548b0e0c7fc3899b19585136faf7dcb10e
POST /link/4d476c00-13db-a0f5-0ab3-bd39a851979c/origin/a/oldd/4d476c00-13db-a0f5-0ab3-bd39a851979c HTTP/1.1
Host: sync.atsptp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 144
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
set-cookie: d_uidb=4d476c00-13db-a0f5-0ab3-bd39a851979c; Max-Age=31536000; Expires=Thu, 28 Nov 2024 04:10:44 GMT; Path=/; Domain=sync.atsptp.com; SameSite=Lax
date: Wed, 29 Nov 2023 04:10:44 GMT
access-control-allow-origin: https://cno.jerkmate.com
vary: Origin
access-control-allow-credentials: true
content-type: text/plain
content-length: 36
x-trace: 2B9A423B75BF9B411E14A158A0EB53C5DAEB2DB250000000000000000000
via: 1.1 google
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
X-Firefox-Spdy: h2
t.ajump1.com/2779/4551?aff_click_id=0133f818-f1a6-4189-9b50-77259ebe8939&source=55036+&xk=a051c0c0d0b0e0509d629b74ab6c6b69&hts_id=0133f818-f1a6-4189-9b50-77259ebe8939&i18n_country=NO
303 See Other 86 kB URL User Request GET HTTP/2 t.ajump1.com/2779/4551?aff_click_id=0133f818-f1a6-4189-9b50-77259ebe8939&source=55036+&xk=a051c0c0d0b0e0509d629b74ab6c6b69&hts_id=0133f818-f1a6-4189-9b50-77259ebe8939&i18n_country=NO
IP
Certificate IssuerAmazon
Subjectajump1.com
Fingerprint75:54:D3:08:87:41:44:8C:53:DF:30:74:6A:D7:A1:65:3B:69:E0:3D
ValidityWed, 01 Feb 2023 00:00:00 GMT - Fri, 01 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /2779/4551?aff_click_id=0133f818-f1a6-4189-9b50-77259ebe8939&source=55036+&xk=a051c0c0d0b0e0509d629b74ab6c6b69&hts_id=0133f818-f1a6-4189-9b50-77259ebe8939&i18n_country=NO HTTP/1.1
Host: t.ajump1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://moartraffic.engine.adglare.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 303 See Other
content-type: text/html; charset=utf-8
content-length: 566
location: https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
server: nginx/1.19.0
date: Wed, 29 Nov 2023 04:10:38 GMT
set-cookie: aff_ran_url_8481=30376; Path=/; Expires=Thu, 30 Nov 2023 04:10:38 GMT; Secure
enc_aff_session_8481=ENC03d29b499be7ded1f3e455e6b93e494c99cdf14bc9960042fc8e3756581dad40a982eeafe8106828c004848c6a670ac35e1a9bc0928ade0f06ae9d7d224d4b46301bdf2dfc8997140d0fb250ab9062a196da0867becdbfd2597303782879f7f2348c3b9db82227626938c368f63dbd50f4524cfc910a159baa65120875571a2bf7a29530ed194deda07c4badb65d2313a8e19d259784387d210e4465951fbf26d8822b1c3a9bf496e79afd49954dc1871d0ae29f1ca9f27b7ad4828f33efe8a3b920484117; Path=/; Expires=Fri, 28 Nov 2025 04:10:38 GMT; Secure
ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIxMDUuMCIsIm1vYmlsZV9jYXJyaWVyIjoiPyIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgWDY0OyBSdjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMCIsImNvbm5lY3Rpb25fc3BlZWQiOiJicm9hZGJhbmQifQ%3D%3D; Path=/; Expires=Fri, 23 Oct 2026 14:50:38 GMT; Secure
tracking_id: 102a73c8b117768f9e1c8799bd1b18
vary: Accept
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: svkRi6Py6YjjDQyqbhf_B4HH4hib5DO5p1DHQCC46OrbmLaCYha2gA==
X-Firefox-Spdy: h2
cdn.onesignal.com/sdks/OneSignalSDK.js
200 OK 9.2 kB URL GET HTTP/2 cdn.onesignal.com/sdks/OneSignalSDK.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint68:AF:AC:17:CA:79:7A:8F:ED:F8:D8:57:93:79:CA:FB:69:50:9B:19
ValidityWed, 03 May 2023 00:00:00 GMT - Thu, 02 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (9410), with no line terminators
Hash 5eb2adfca36be15c8d4a206576132abd
f507beb2560693723f4b360af70bfe9bd8bed534
6ad1aa44625325d8e975bccee776e9a60ae134d2de1cb8d98852de9f3109aa4a
GET /sdks/OneSignalSDK.js HTTP/1.1
Host: cdn.onesignal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 29 Nov 2023 04:10:46 GMT
content-type: application/javascript
etag: W/"a87c48d211877c49b878679b2e3cdab8"
access-control-allow-headers: OneSignal-Subscription-Id
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 89
expires: Sat, 02 Dec 2023 04:10:46 GMT
cache-control: public, max-age=259200
set-cookie: __cf_bm=S183RuSk17Uek.ume655ntbws_U4Nd_FLUpIL6EP39k-1701231046-0-Af2T17GQMwTYY8xjgjUrsR33dUKewj+mns1OW8BmT1YOZ10PVRy7ea/1qtaCwAs6Yj6CxR84+VKg7Ggfn36xqfI=; path=/; expires=Wed, 29-Nov-23 04:40:46 GMT; domain=.onesignal.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
server: cloudflare
cf-ray: 82d800b6d86d7129-OSL
content-encoding: br
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/70eca64a3a/nb.svg
200 OK 1.1 kB URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/70eca64a3a/nb.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1161), with no line terminators
Hash 80a983d82b53f93b865f98962a32cd84
178e04acfc3e82694899d777e0f262646b205df1
1bdb8cac916a63618e3c423ce865c42110400b1b5eecb1981da52f9a7bd0bf1a
GET /cmscloud/dA/70eca64a3a/nb.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Sat, 25 Nov 2023 16:54:23 GMT
set-cookie: AWSALB=JHqcWVESzWFuF00Zz/0yY1HKvUyGuor+6cLTpn1jnphswc4YTWOi8NynQqwrxqsdU4xS/BS1JtZSCyse/Zyye3xefUQwOfnWhY8b7bqdMqlZhmEnSV2qO8nA+SBq; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/
AWSALBCORS=JHqcWVESzWFuF00Zz/0yY1HKvUyGuor+6cLTpn1jnphswc4YTWOi8NynQqwrxqsdU4xS/BS1JtZSCyse/Zyye3xefUQwOfnWhY8b7bqdMqlZhmEnSV2qO8nA+SBq; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="nb.svg"
expires: Sun, 24 Nov 2024 16:54:23 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 22 Apr 2021 12:46:01 +0000
apigw-requestid: O9r9-in1IAMEPiw=
content-encoding: br
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PV_aBmNxxK7X76XG27Fe6DEQJXAnblIAhFi0nbs6MhFmzFmNVIzl7A==
age: 299775
referrer-policy: strict-origin-when-cross-origin
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/6b738c21c0/en-us.svg
200 OK 2.0 kB URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/6b738c21c0/en-us.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2062), with no line terminators
Hash dbae53392e1bda29fa6da1a4513e5e65
86ca9dae83eb138a2619239611e9e3fd637bbc22
92a20806fe949ff03a34e34eee21468e4b5f93deea1c8219cb2f518108d53ccf
GET /cmscloud/dA/6b738c21c0/en-us.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Sat, 25 Nov 2023 16:54:23 GMT
set-cookie: AWSALB=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/
AWSALBCORS=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="en-us.svg"
expires: Sun, 24 Nov 2024 16:54:23 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 22 Apr 2021 12:46:01 +0000
apigw-requestid: O9r9-jDxoAMEVyQ=
content-encoding: br
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dQhOsOjow_7XopbG96U2RxNQVzR0JEVT9MhIBU5rvRSGsqe2u0gS1A==
age: 299775
referrer-policy: strict-origin-when-cross-origin
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/3b3403f739/icone/ass.svg
200 OK 1.9 kB URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/3b3403f739/icone/ass.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1948), with no line terminators
Hash 8c711f02837d3c049cadba9d4bded493
ce7c6cfa27ed4ae67154c9ffa1809d1408db5e81
0a122a144fb188600ea2d1484965e4ae795b3e9a6cb45422672d32150e6a10af
GET /cmscloud/dA/3b3403f739/icone/ass.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cno.jerkmate.com/
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Sat, 25 Nov 2023 16:54:25 GMT
set-cookie: AWSALB=vvpFDr1bCEaLb2gp5CZnJM6oK5fUdK0gnsz1lCePRJ7mAdya69BXWQfIJaObN9/eh5FxN7xPNuunhRpe22Ajxr+tt3ZcLnpNsR2FGyLs2GrWDxQTs0AKYqDVmVFv; Expires=Sat, 02 Dec 2023 16:54:25 GMT; Path=/
AWSALBCORS=vvpFDr1bCEaLb2gp5CZnJM6oK5fUdK0gnsz1lCePRJ7mAdya69BXWQfIJaObN9/eh5FxN7xPNuunhRpe22Ajxr+tt3ZcLnpNsR2FGyLs2GrWDxQTs0AKYqDVmVFv; Expires=Sat, 02 Dec 2023 16:54:25 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="ass.svg"
expires: Sun, 24 Nov 2024 16:54:25 +0000
cache-control: public, max-age=31536000
last-modified: Mon, 19 Dec 2022 13:22:38 +0000
access-control-allow-origin: *
apigw-requestid: O9r-NgUEoAMEV9A=
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 17CKDArSHBe_tlqYc9Vj9kNoTgzRhjRGQvp0zaEDLZV76qyscGGlrw==
age: 299775
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/8c41111c2a/icone/feet.svg
200 OK 1.7 kB URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/8c41111c2a/icone/feet.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1702), with no line terminators
Hash 4d475ed1ca5ad6332b8c20244a25ec16
c9ad19c36b2402f9a947d3433f2330327b72cfb2
bc546fcfbb17e08a09ea4e23ccb3167c1d9521e6eb3124299cf824c40e4b4d51
GET /cmscloud/dA/8c41111c2a/icone/feet.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cno.jerkmate.com/
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Sat, 25 Nov 2023 16:54:25 GMT
set-cookie: AWSALB=+P4A1yah2Ti3AkYOLVbsctCrar24GgTw7j/fVSPVd8SG+3IYAN3ABB0zxtNo8sTa1jH5RFdE3x125kRBlm4ERl7VlrN2rKzL4zSvaHU1PtPS1G0BbRQOGzMVTkNK; Expires=Sat, 02 Dec 2023 16:54:25 GMT; Path=/
AWSALBCORS=+P4A1yah2Ti3AkYOLVbsctCrar24GgTw7j/fVSPVd8SG+3IYAN3ABB0zxtNo8sTa1jH5RFdE3x125kRBlm4ERl7VlrN2rKzL4zSvaHU1PtPS1G0BbRQOGzMVTkNK; Expires=Sat, 02 Dec 2023 16:54:25 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="feet.svg"
expires: Sun, 24 Nov 2024 16:54:25 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 24 Feb 2022 19:00:22 +0000
access-control-allow-origin: *
apigw-requestid: O9r-NiQBoAMEaGg=
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: B1AEGcD8SrpRsXoRFhNnSoql4B7UBkaJrnwe0vvIuhai86TvpfQwtA==
age: 299775
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/ab5b50d2b1/icone/pussy.svg
200 OK 1.5 kB URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/ab5b50d2b1/icone/pussy.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1464), with no line terminators
Hash 5964ccef7a9ef18fe88ac96d14b12ecf
578f521f0df9a268a17176a05c015bbf1eb4df4c
ccede54a86982e2e38aeb96c367e56976b2cca08e2726823080335042ef7b64b
GET /cmscloud/dA/ab5b50d2b1/icone/pussy.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cno.jerkmate.com/
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Sat, 25 Nov 2023 16:54:25 GMT
set-cookie: AWSALB=zNk3rlMvWUtEShU1dgVT/s0t7wK74fjq2QmB9CZ/oWFSY15K3Tm5jMSV8oTxKbXqv0LJQzbzNzcVyIAcQBx6ww+KJrdGoxLFZXIF59eqxerx587wlmUxBoR8T4jJ; Expires=Sat, 02 Dec 2023 16:54:25 GMT; Path=/
AWSALBCORS=zNk3rlMvWUtEShU1dgVT/s0t7wK74fjq2QmB9CZ/oWFSY15K3Tm5jMSV8oTxKbXqv0LJQzbzNzcVyIAcQBx6ww+KJrdGoxLFZXIF59eqxerx587wlmUxBoR8T4jJ; Expires=Sat, 02 Dec 2023 16:54:25 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="pussy.svg"
expires: Sun, 24 Nov 2024 16:54:25 +0000
cache-control: public, max-age=31536000
last-modified: Mon, 19 Dec 2022 13:29:06 +0000
access-control-allow-origin: *
apigw-requestid: O9r-Ni3goAMEajQ=
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fKGNxCLAVTfoo14jBRsNU1CZkrMFz9gA5OIejbyAvy072djp1pbEEw==
age: 299775
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/d3000c5fa6/sv.svg
200 OK 801 B URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/d3000c5fa6/sv.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (858), with no line terminators
Hash 92172ccd65613c12ab8264b5868ef968
559f7cab12cca32ef4d1e7a8ea8c7aa187859c49
15a0f6c82cffe0cc984c5fdd58b8effc8c26827771826306d5b3b623de4ad65b
GET /cmscloud/dA/d3000c5fa6/sv.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 801
date: Sat, 25 Nov 2023 16:54:23 GMT
set-cookie: AWSALB=bdr/euR+ofo3QN9awJzWRdmqs5Rc7TTaOoDmkYvMdZdcfSBr3sou4+0zDT2xSTy4Pk1OdVIsLGFODRnMgZHd+TCgmepQiKqUxvIVPP1psWeEL1ySkTwJX3aHi/ok; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/
AWSALBCORS=bdr/euR+ofo3QN9awJzWRdmqs5Rc7TTaOoDmkYvMdZdcfSBr3sou4+0zDT2xSTy4Pk1OdVIsLGFODRnMgZHd+TCgmepQiKqUxvIVPP1psWeEL1ySkTwJX3aHi/ok; Expires=Sat, 02 Dec 2023 16:54:23 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="sv.svg"
expires: Sun, 24 Nov 2024 16:54:23 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 22 Apr 2021 12:46:01 +0000
etag: dot:a1f2b483-d964-4946-916f-5fb71ad57787:1619095561000:801
accept-ranges: bytes
apigw-requestid: O9r9_hF3oAMESwQ=
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: OHJMgz64BLN5JJsvLt2-i23zsjtAOxAmgR6nZeYgkTEGhCsugzcdkA==
age: 299775
referrer-policy: strict-origin-when-cross-origin
vary: Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/images/svg/empty-coin.svg
200 OK 1.2 kB URL GET HTTP/2 gateway.jerkmate.com/cno/images/svg/empty-coin.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (1344), with no line terminators
Hash 57695e4620c99ba928ce56a23788008e
9d7ad6c0625215e7df8cef40d8b406e86d2be8a0
3ab19e1a398aa990bec15b35338ff9110a941fd6066082f767e72ee085959fde
GET /cno/images/svg/empty-coin.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE; AWSALBCORS=bZxdLTpVE1uA/e1r0NXSXME6GmwPKIHDVk1RVBiyWrI8+nreV+25SNvBEVS7KkMbVOzJyO8aql6PI3QRXSVN1OQ0nNSc56qTZvMdYtDSfGmg4isj5xsgTCBBBmEE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 635
date: Wed, 29 Nov 2023 04:10:40 GMT
server: nginx/1.17.8
apigw-requestid: PJH2MgCDIAMEVIQ=
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Wed, 01 Nov 2023 17:54:56 GMT
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
etag: W/"4cd-18b8c062980"
x-cache: Miss from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: osm7V20TDzFaW45kpuv2QXSxffSIMf4mvBnannCeQxNqy66YHYqESQ==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/8b33247588/icone/twerk.svg
200 OK 1.9 kB URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/8b33247588/icone/twerk.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1993), with no line terminators
Hash c7cc7cdcab6aa65903f24e03c1d7832c
c57f0710946185859760ad07418deb8159fbb3f7
38c153cdccaac55056e578ab2c1dac4b31e73fd65b5e41ab550b0bee7b7aaac7
GET /cmscloud/dA/8b33247588/icone/twerk.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cno.jerkmate.com/
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Wed, 29 Nov 2023 04:10:40 GMT
set-cookie: AWSALB=hj++whyOyUnF4rcWqo3HbtOyOkn8cod9i2qu+9E3dp2uIiBf043Bb6byS140NTiSy5S4Rf5hQRq/98aqtvP5bvld970FyrWcWu4Tu/AELbUfEW5+joU3h0eYL1xD; Expires=Wed, 06 Dec 2023 04:10:40 GMT; Path=/
AWSALBCORS=hj++whyOyUnF4rcWqo3HbtOyOkn8cod9i2qu+9E3dp2uIiBf043Bb6byS140NTiSy5S4Rf5hQRq/98aqtvP5bvld970FyrWcWu4Tu/AELbUfEW5+joU3h0eYL1xD; Expires=Wed, 06 Dec 2023 04:10:40 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="twerk.svg"
expires: Thu, 28 Nov 2024 04:10:40 +0000
cache-control: public, max-age=31536000
last-modified: Tue, 13 Sep 2022 19:15:53 +0000
access-control-allow-origin: *
apigw-requestid: PJH2MgwEIAMEVIg=
content-encoding: br
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -yj6Ce2SyOBSS-biGZLMkMpoM3Zyzfb5NjAM4T_d7xutkXL4DcIXSw==
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-S6XTBZ5V47&l=dataLayer&cx=c
200 OK 262 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-S6XTBZ5V47&l=dataLayer&cx=c
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (22604)
Size 262 kB (261764 bytes)
Hash 8757cea16e455dd7e6ee418596ab3ee7
ef5eff81e8e07e0324ee853ed385a51f517d5ff9
f92511aa86f56c4297e744879fccc50697623f1130930c8c1ef6b3307d3a254d
GET /gtag/js?id=G-S6XTBZ5V47&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 29 Nov 2023 04:10:41 GMT
expires: Wed, 29 Nov 2023 04:10:41 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 85140
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
gateway.jerkmate.com/cno/assets/cno/jerkmate-logo-stacked.svg
200 OK 10 kB URL GET HTTP/2 gateway.jerkmate.com/cno/assets/cno/jerkmate-logo-stacked.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (4413)
Hash 189c355d8f8bf8f87cedb5e4286be3da
c3ac730a0b9b21019e051333653cd0bc2c520b42
3018ee238018f1090d7df5849e7114619d18654c14b3ebd781503c88466b01aa
GET /cno/assets/cno/jerkmate-logo-stacked.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 3674
date: Wed, 29 Nov 2023 04:10:38 GMT
server: nginx/1.17.8
apigw-requestid: PJH13gknIAMES-g=
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Wed, 01 Nov 2023 17:54:56 GMT
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
etag: W/"2834-18b8c062980"
x-cache: Miss from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: z3sLdYOK0YBRpSPbhCNVJ0xFuqvHQYi4PHcTFB3dgD2F2EtacOncXA==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/565c6ec629/icone/spank.svg
200 OK 2.0 kB URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/565c6ec629/icone/spank.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102a73c8b117768f9e1c8799bd1b18:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=q4m22O&url=7&xid=jm-hpf-8481-jmlcom&imgfrm=45&wallet=50&actions=0&pop=no&landing_id=30376
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2060), with no line terminators
Hash a14d3e9b27c801899ff38bbc2828d453
613e22ea39e91d64f20838c306e1a9c1dc061300
365d1e15c08c5f6a32d52369082583ffad239f9d611c687845e1b24b5707b736
GET /cmscloud/dA/565c6ec629/icone/spank.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cno.jerkmate.com/
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Sat, 25 Nov 2023 16:54:25 GMT
set-cookie: AWSALB=JXbYshJw21hEtZ6ejvVtOJNMzBnY6A2wvlpdEOIKUW0BHsN/65zKob2JCZuWDZbgqzRNoPWjr67PBj7lauLHrBvKaaJXFyUQ+C5U8Mb5OCPOMvoxeGR8u+A+Gwry; Expires=Sat, 02 Dec 2023 16:54:25 GMT; Path=/
AWSALBCORS=JXbYshJw21hEtZ6ejvVtOJNMzBnY6A2wvlpdEOIKUW0BHsN/65zKob2JCZuWDZbgqzRNoPWjr67PBj7lauLHrBvKaaJXFyUQ+C5U8Mb5OCPOMvoxeGR8u+A+Gwry; Expires=Sat, 02 Dec 2023 16:54:25 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="spank.svg"
expires: Sun, 24 Nov 2024 16:54:25 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 24 Feb 2022 18:58:00 +0000
access-control-allow-origin: *
apigw-requestid: O9r-Nh8QoAMEaCA=
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3n729KCbotP4w4BRUrh5e2FMMB__IEu9xSZ74h7Iej3-qTXcGyvrSg==
age: 299775
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
143.204.55.19
62.212.87.243
104.18.215.59
0.0.0.0