futbollibre.net/embed/?r=Ly9yYXlzbmlrLmxpZmUvL3N0cmVhbS9mb3gvZnNwL2R0di5odG1s&p=Qe9TjgPs
301 Moved Permanently 0 B URL HTTP/1.1 futbollibre.net/embed/?r=Ly9yYXlzbmlrLmxpZmUvL3N0cmVhbS9mb3gvZnNwL2R0di5odG1s&p=Qe9TjgPs
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embed/?r=Ly9yYXlzbmlrLmxpZmUvL3N0cmVhbS9mb3gvZnNwL2R0di5odG1s&p=Qe9TjgPs HTTP/1.1
Host: futbollibre.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 18 Oct 2022 22:49:32 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 18 Oct 2022 23:49:32 GMT
Location: https://futbollibre.net/embed/?r=Ly9yYXlzbmlrLmxpZmUvL3N0cmVhbS9mb3gvZnNwL2R0di5odG1s&p=Qe9TjgPs
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rYZQcZ9Esk6OLCulISHeyPemeJi%2F9OJRhPr9LwKp07Y49UYLEnfeQZOvS%2BvVFNaV3rbnt5d%2BabuV%2Fivs9Ldn2IG%2FElH15tORjvdreNWuFcu2UM9JxZ7qIXEctBRKx7XKYHg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75c4d3e9cbd9407d-LHR
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 10ab470535c002d333b4f27d38b51091
ed3b0850c5d75881de410f7e8ca35e012e38bd38
31d6655d048ec8a62e00125766fea65cde04beae0b11f12ce7f722c9a5f7e232
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "31D6655D048EC8A62E00125766FEA65CDE04BEAE0B11F12CE7F722C9A5F7E232"
Last-Modified: Sun, 16 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9003
Expires: Wed, 19 Oct 2022 01:19:35 GMT
Date: Tue, 18 Oct 2022 22:49:32 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bdb8b66c705a7b996496d780f50c00b5
403ae92039fcc933870f51f913f78ccaf9652256
c923ed2539f4ce9f4d43743c402fbb2060a52a4cbedbf14c5f5742ab718073d6
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Content-Length, Retry-After, Backoff
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 18 Oct 2022 21:51:31 GMT
Expires: Tue, 18 Oct 2022 22:37:45 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 3bYFMWctUiU0kphEkftAav8qctxLmQ3Tw6du_J2iVewswHID7OKCMw==
Age: 3481
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 533e1d53f291993ed5886f88a85c6e55
eb4396e8422f71168d32ac6ff3ef49496f625e62
0d1b73b2a228fe76bf14688e603741025a40803971e05570f873b28788334b33
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0D1B73B2A228FE76BF14688E603741025A40803971E05570F873B28788334B33"
Last-Modified: Mon, 17 Oct 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4518
Expires: Wed, 19 Oct 2022 00:04:50 GMT
Date: Tue, 18 Oct 2022 22:49:32 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: UvtY6YFeQbwhl69v+j3UV+0RBtgpMi0ekWZ+/k53hA/wZLIuhQEvnEg59ihgtrQeOwL8ZkKCz1s=
x-amz-request-id: F3SF8X4GTSFGC67X
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 18 Oct 2022 22:36:03 GMT
age: 809
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 18 Oct 2022 22:49:32 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
code.jquery.com/jquery-3.3.1.min.js
200 OK 30 kB URL HTTP/2 code.jquery.com/jquery-3.3.1.min.js
IP
File type ASCII text, with very long lines (65451)
Hash d549b312f7a7d228b4ec229a6547dfdc
0766794582ad530ec0f8c2595f741086afffa312
f6488b2915e0ceee723f4320492511d46c6ba1860d5975d085e6da8913f55f44
GET /jquery-3.3.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://futbollibre.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 18 Oct 2022 22:49:33 GMT
content-encoding: gzip
content-length: 30288
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
accept-ranges: bytes
server: nginx
etag: W/"28feccc0-1538f"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1666133373.dop218.sk1.t,1666133373.cds254.sk1.hn,1666133373.cds217.sk1.c
X-Firefox-Spdy: h2
platform-api.sharethis.com/js/sharethis.js
200 OK 44 kB URL HTTP/2 platform-api.sharethis.com/js/sharethis.js
IP
Hash 42e66d450f1217d522b92d3879579a8c
3d34914d3458229e8fe26748f7ccd36deb751d4c
46cd23088e5865551a74f711eea3ad73d942d3a81ebfa19e3c03c9ed87413843
GET /js/sharethis.js HTTP/1.1
Host: platform-api.sharethis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://futbollibre.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-encoding: gzip
edge-control: cache-maxage=60m,downstream-ttl=60m
x-frame-options: SAMEORIGIN
date: Tue, 18 Oct 2022 22:49:01 GMT
cache-control: max-age=600, public
etag: W/"2fe41-B6RUASRBT1G2X6u3Ue+hBuA9DqQ"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: JplOh9lJvYFUCUVs_7HfD__1T2Rru1vL4QWGkyaM2bPr3NcA1IGexw==
age: 32
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 480831ca8dede16fa03b84c85beeaa5a
fd23b3550bc8afe16b45f09e9f9097c8faf42e39
89f1f34efb4d5c162d3d467465eee090864d29c4d51deab2db3a1bc6c0b2730f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5760
Cache-Control: max-age=149699
Content-Type: application/ocsp-response
Date: Tue, 18 Oct 2022 22:49:33 GMT
Etag: "634ebcc0-118"
Expires: Thu, 20 Oct 2022 16:24:32 GMT
Last-Modified: Tue, 18 Oct 2022 14:48:32 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 280
ocsp.sectigo.com/
200 OK 471 B IP
Hash 8355f2fb8be82627038d9907b68a5e66
055253d3ba9fb05d71111f811b58cdd1164ac4df
f1f7b70ee46ea6c65e52088ca8897045c116138c4130cd47cf24b7180c61cee6
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 18 Oct 2022 22:49:33 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 15 Oct 2022 17:22:26 GMT
Expires: Sat, 22 Oct 2022 17:22:25 GMT
Etag: "055253d3ba9fb05d71111f811b58cdd1164ac4df"
Cache-Control: max-age=325371,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75c4d3eeba041c16-OSL
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 18 Oct 2022 22:43:40 GMT
Cache-Control: max-age=3600
Expires: Tue, 18 Oct 2022 23:15:46 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Ayh9es73vAsnl651WqgVfOsnq71IxlnueEsKolOFuIEAbmdW2zHDWA==
Age: 353
ocsp.digicert.com/
200 OK 279 B IP
Hash b53d6d2f4aaba8eafc13d5874d6c0024
dc9b5f2d36fbd8757e5f4e9aa7b90a39ccece9ad
9436456404466f4278824aa023a22eacf195ec58a5a0443071a0a4598950a835
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6309
Cache-Control: max-age=166468
Content-Type: application/ocsp-response
Date: Tue, 18 Oct 2022 22:49:33 GMT
Etag: "634efc1c-117"
Expires: Thu, 20 Oct 2022 21:04:01 GMT
Last-Modified: Tue, 18 Oct 2022 19:18:52 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash b53d6d2f4aaba8eafc13d5874d6c0024
dc9b5f2d36fbd8757e5f4e9aa7b90a39ccece9ad
9436456404466f4278824aa023a22eacf195ec58a5a0443071a0a4598950a835
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6309
Cache-Control: max-age=166468
Content-Type: application/ocsp-response
Date: Tue, 18 Oct 2022 22:49:33 GMT
Etag: "634efc1c-117"
Expires: Thu, 20 Oct 2022 21:04:01 GMT
Last-Modified: Tue, 18 Oct 2022 19:18:52 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash b53d6d2f4aaba8eafc13d5874d6c0024
dc9b5f2d36fbd8757e5f4e9aa7b90a39ccece9ad
9436456404466f4278824aa023a22eacf195ec58a5a0443071a0a4598950a835
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6309
Cache-Control: max-age=166468
Content-Type: application/ocsp-response
Date: Tue, 18 Oct 2022 22:49:33 GMT
Etag: "634efc1c-117"
Expires: Thu, 20 Oct 2022 21:04:01 GMT
Last-Modified: Tue, 18 Oct 2022 19:18:52 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash b53d6d2f4aaba8eafc13d5874d6c0024
dc9b5f2d36fbd8757e5f4e9aa7b90a39ccece9ad
9436456404466f4278824aa023a22eacf195ec58a5a0443071a0a4598950a835
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6188
Cache-Control: max-age=166347
Content-Type: application/ocsp-response
Date: Tue, 18 Oct 2022 22:49:33 GMT
Etag: "634efc1c-117"
Expires: Thu, 20 Oct 2022 21:02:00 GMT
Last-Modified: Tue, 18 Oct 2022 19:18:52 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 279
www.chatbro.com/images/chat_google_logo.png
200 OK 656 B URL HTTP/2 www.chatbro.com/images/chat_google_logo.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 84e2bf2e06db3b9ef5f53e933cfaae30
6378efa7ccadfe5be02959f57ffa7c27b1da168a
7c1fc1f22827f0dabf3486fdc286f1c909e7acc4b5999365b9328c36c18d17d7
GET /images/chat_google_logo.png HTTP/1.1
Host: www.chatbro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://futbollibre.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 18 Oct 2022 22:49:33 GMT
content-type: image/png
content-length: 656
last-modified: Tue, 30 Aug 2022 18:54:10 GMT
etag: "630e5cd2-290"
expires: Tue, 18 Oct 2022 22:54:35 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 298
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VS6IaueKHAQWfRKDVsZaBtqJSOF4zjKEGeoQaomzz7vXuhvzxKI%2BArONePoST9brTx84gzb4fWaWHlyxY08cQLhTN19bEJ9RG6U5Zif2jknsQWiInpDJQw8DWE24u2jnkyM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75c4d3f03ef074a1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.chatbro.com/images/chat_telegram_logo.png
200 OK 777 B URL HTTP/2 www.chatbro.com/images/chat_telegram_logo.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 38e9345467aa316aae5c14d634382ce9
ab3b2e385ad90ae3a9b672f6822f0bf20d885de8
a2f63f18bbbe390a7a2d93c0f42bd05c549d856969ccba17ee2f1fc734a77f51
GET /images/chat_telegram_logo.png HTTP/1.1
Host: www.chatbro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://futbollibre.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 18 Oct 2022 22:49:33 GMT
content-type: image/png
content-length: 777
last-modified: Tue, 30 Aug 2022 18:54:10 GMT
etag: "630e5cd2-309"
expires: Tue, 18 Oct 2022 22:54:59 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 274
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0TkIB3%2FUvPMoFMeoOoo5S%2FxsTr8G87p7jQ1Cn3Z2sau2xlKA0O9we%2F63EVOxPMIejOCX3soEm3%2F9C%2BvK3TDDT3%2BVhrydNn6ATR0R39JVJCJcM4onx%2FDmuXXZdgMVbmxFLFA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75c4d3f04f0f74a1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.chatbro.com/images/chat_facebook_logo.png
200 OK 329 B URL HTTP/2 www.chatbro.com/images/chat_facebook_logo.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 62136bbb9342052c20579d384292b02f
321044fc8b20951d67e82f00aae6edd319faca5e
d813de68c702196d2eeaa7e2e5d55167638741533191d3e5038e329ac3f54940
GET /images/chat_facebook_logo.png HTTP/1.1
Host: www.chatbro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://futbollibre.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 18 Oct 2022 22:49:33 GMT
content-type: image/png
content-length: 329
last-modified: Tue, 30 Aug 2022 18:54:10 GMT
etag: "630e5cd2-149"
expires: Tue, 18 Oct 2022 22:54:35 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 298
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W%2FR4BcghIFpZwFhCF5786PXyI78JjK9cMGvu1V7DY7bsR1pXsDhrJur7M6y4VTWjWj8nTTyVtjJQRMrDIuJZzodEKJLLMzJ%2BZGSJIQLriKS62kiTYOCogiaBk9jU%2F8kMsaY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75c4d3f05f1e74a1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.chatbro.com/fonts/chatbro.woff?10
200 OK 14 kB URL HTTP/2 www.chatbro.com/fonts/chatbro.woff?10
IP
File type Web Open Font Format, CFF, length 14396, version 1.0\012- data
Hash 58980c138190f1f32bb04c5a9d6c4653
c2635b4ab6bd7464aa5e97f18c706911a6b24dfd
f74fcaf9c728521c218b7bf05a0bf7173b522e7769165c8f97fdf74734cf0907
GET /fonts/chatbro.woff?10 HTTP/1.1
Host: www.chatbro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://futbollibre.net
Connection: keep-alive
Referer: https://futbollibre.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 18 Oct 2022 22:49:33 GMT
content-type: application/font-woff
content-length: 14396
last-modified: Tue, 30 Aug 2022 18:54:10 GMT
etag: "630e5cd2-383c"
expires: Tue, 18 Oct 2022 22:58:15 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
cf-cache-status: HIT
age: 78
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hc0%2B7A%2B%2FqslquoZGttDca66xjBaXJTSwPiErxPMWVlqCeQsiZGwf7%2BmhMsw%2FtemVbUyYFNsDS7U1U8iO9bu%2FZWXP91E1KZAi2c5lDJZOH9y8n%2BTW1raj%2FxuDwK6Z%2Bwry3Fo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75c4d3f06b6774c9-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.chatbro.com/images/chat_vk_logo.png
200 OK 735 B URL HTTP/2 www.chatbro.com/images/chat_vk_logo.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 124622ded412c2fde635c9338ce9fddc
71890a5762084a476f876b73edc694be433d0497
163a89e59b219649c013ead3230f372f0e7dca9c8ea0dc0463f991b671b14404
GET /images/chat_vk_logo.png HTTP/1.1
Host: www.chatbro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://futbollibre.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 18 Oct 2022 22:49:33 GMT
content-type: image/png
content-length: 735
last-modified: Tue, 30 Aug 2022 18:54:10 GMT
etag: "630e5cd2-2df"
expires: Tue, 18 Oct 2022 22:53:59 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 334
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U7Xj6cC%2BDbEEwxLCWhOhQoITzjycP6hMaTgSyYFjBerNJXxxuJm53qtKb3GTPIMo0HQtuL3F%2BwF%2BS1V65IUPsoEmlW%2Fu2UD%2BubSExMaS8wrNQnShRhJXY3cqMCAjxYW%2B5M0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75c4d3f07f8074a1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.chatbro.com/images/no_connection.png
200 OK 1.6 kB URL HTTP/2 www.chatbro.com/images/no_connection.png
IP
File type PNG image data, 128 x 128, 8-bit colormap, non-interlaced\012- data
Hash d5a40ac60610fe0573b63c4889b5dd63
e56b468930e949671397129e00b3e0815a1ac2c5
d026f555341e85649cd2edd6848b55b6cedfcca0c62bba5099e69b62ea713e40
GET /images/no_connection.png HTTP/1.1
Host: www.chatbro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://futbollibre.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 18 Oct 2022 22:49:33 GMT
content-type: image/png
content-length: 1614
last-modified: Tue, 30 Aug 2022 18:54:10 GMT
etag: "630e5cd2-64e"
expires: Tue, 18 Oct 2022 22:54:33 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 300
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AHHmJp4dVejowl7ONpUnv4MELLstMXB7NrMPntRvZefYZKEp4uNkdnY5dqEjfDqjLZCgyEGsMAby6MxgscOF8fFNPYC8mQl6nvc%2FIcyEpcfrlx6pBv1aZYNXwtC3r%2B5t6zE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75c4d3f07f8574a1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash c9b278637bdca251f78b46e4a0850473
a48fe5095fc27af1c6b6628149d9e8f655295621
eea38f271e134a85a7b586631a8831888ab81f0edb33120b26bd35cdfa032e52
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5859
Cache-Control: max-age=125691
Content-Type: application/ocsp-response
Date: Tue, 18 Oct 2022 22:49:33 GMT
Etag: "634e5e95-1d7"
Expires: Thu, 20 Oct 2022 09:44:24 GMT
Last-Modified: Tue, 18 Oct 2022 08:06:45 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
ocsp.sectigo.com/
200 OK 471 B IP
Hash 8355f2fb8be82627038d9907b68a5e66
055253d3ba9fb05d71111f811b58cdd1164ac4df
f1f7b70ee46ea6c65e52088ca8897045c116138c4130cd47cf24b7180c61cee6
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 18 Oct 2022 22:49:33 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 15 Oct 2022 17:22:26 GMT
Expires: Sat, 22 Oct 2022 17:22:25 GMT
Etag: "055253d3ba9fb05d71111f811b58cdd1164ac4df"
Cache-Control: max-age=325371,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75c4d3f08ae31c16-OSL
ocsp.digicert.com/
200 OK 279 B IP
Hash b53d6d2f4aaba8eafc13d5874d6c0024
dc9b5f2d36fbd8757e5f4e9aa7b90a39ccece9ad
9436456404466f4278824aa023a22eacf195ec58a5a0443071a0a4598950a835
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5861
Cache-Control: max-age=166020
Content-Type: application/ocsp-response
Date: Tue, 18 Oct 2022 22:49:33 GMT
Etag: "634efc1c-117"
Expires: Thu, 20 Oct 2022 20:56:33 GMT
Last-Modified: Tue, 18 Oct 2022 19:18:52 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 281650fe9e772c470d6615f306e6c52f
659b2222b2262e1be1cb603cc82480df904355e9
a0cc3e5f6859f0729daaf167c26e5f138e983aa6c7f9ded289206fd583a66c68
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A0CC3E5F6859F0729DAAF167C26E5F138E983AA6C7F9DED289206FD583A66C68"
Last-Modified: Sun, 16 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5251
Expires: Wed, 19 Oct 2022 00:17:04 GMT
Date: Tue, 18 Oct 2022 22:49:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bb597d0ab0c67a44219b1a44192d28e4
8f2d38445fddd40f90860cce7196b939dfea6f8d
320b2a273bf830bdb1767c08d8ed1b1446eea26e8fdea0aa5a2e92f520068674
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "320B2A273BF830BDB1767C08D8ED1B1446EEA26E8FDEA0AA5A2E92F520068674"
Last-Modified: Sun, 16 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4436
Expires: Wed, 19 Oct 2022 00:03:29 GMT
Date: Tue, 18 Oct 2022 22:49:33 GMT
Connection: keep-alive
www.flashscore.es/res/image/data/6T5YTkZA-OMzLrvmI.png
200 OK 2.9 kB URL HTTP/2 www.flashscore.es/res/image/data/6T5YTkZA-OMzLrvmI.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 6fc2402fed0949f3e703e3012737c1b8
eae4bde3c0b1b566e6a86d5a3346eb0086e4d17a
41f8a2f40baa5de132d8b6d2a99d52a08bfc36cf8503ca83e461c9d858c9a6b8
GET /res/image/data/6T5YTkZA-OMzLrvmI.png HTTP/1.1
Host: www.flashscore.es
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://futbollibre.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: image/png
etag: "i-6fc2402fed0949f3e703e3012737c1b8"
expires: Sun, 16 Apr 2023 22:18:54 GMT
cache-control: public, max-age=15552000
x-vname: lsproxy-69589b4db8-8prxj/varnish1[P]|lsbproxy-7886d8cd45-5d986/varnish1[A]|lsproxy42/varnish1[P]|lsbproxy1/varnish1[A]
x-ttlset: BEH[P]|BEH[A]|BEH[P]|BEH[A]
content-length: 2910
accept-ranges: bytes
date: Tue, 18 Oct 2022 22:49:33 GMT
age: 3626
x-times: 1666133373684|1666133373684
x-age: 3626[P]|1787[A]|1787[P]|1787[A]
x-pc: HIT[P]|MISS[A]|MISS[P]|HIT[A]
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bb597d0ab0c67a44219b1a44192d28e4
8f2d38445fddd40f90860cce7196b939dfea6f8d
320b2a273bf830bdb1767c08d8ed1b1446eea26e8fdea0aa5a2e92f520068674
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "320B2A273BF830BDB1767C08D8ED1B1446EEA26E8FDEA0AA5A2E92F520068674"
Last-Modified: Sun, 16 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4436
Expires: Wed, 19 Oct 2022 00:03:29 GMT
Date: Tue, 18 Oct 2022 22:49:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bb597d0ab0c67a44219b1a44192d28e4
8f2d38445fddd40f90860cce7196b939dfea6f8d
320b2a273bf830bdb1767c08d8ed1b1446eea26e8fdea0aa5a2e92f520068674
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "320B2A273BF830BDB1767C08D8ED1B1446EEA26E8FDEA0AA5A2E92F520068674"
Last-Modified: Sun, 16 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4564
Expires: Wed, 19 Oct 2022 00:05:37 GMT
Date: Tue, 18 Oct 2022 22:49:33 GMT
Connection: keep-alive
ocsp.sectigo.com/
200 OK 471 B IP
Hash a2d8b678694e62075eeeca7ea4c0ea92
7c4d1ee2ab819c3de414b01136a154306a596e79
48b2b28140dad2f63068e474bb947ddc7cbfd44806b2e46fc4357ec3e0c8b015
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 18 Oct 2022 22:49:33 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 18 Oct 2022 18:12:19 GMT
Expires: Tue, 25 Oct 2022 18:12:18 GMT
Etag: "7c4d1ee2ab819c3de414b01136a154306a596e79"
Cache-Control: max-age=587564,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75c4d3f16b591c16-OSL
push.services.mozilla.com/
101 Switching Protocols 95 kB URL HTTP/1.1 push.services.mozilla.com/
IP
Hash 91ae584d1d92c4596ab20737a3d87f99
ed41f5d19838bbc179c4924e887c89556acb72d8
f39790356d757522b5691ad66629c930bd10e9021ab7e648fde20e2bf8dc1f33
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: cJR/6p4mvxl7WTicAhhghw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: HU1QvPrt2bvCgNTZQeVcBYSKGcI=
muchmiller.com/46/ca/b0/46cab0482d679d4b3993fdf8e8be6238.js
200 OK 49 kB URL HTTP/1.1 muchmiller.com/46/ca/b0/46cab0482d679d4b3993fdf8e8be6238.js
IP
ASN #39572 DataWeb Global Group B.V.
Hash cb7ccbbf4213b1c6500979dbeaa511e2
8c2a83da97f8cc720592d0f3309b6905f7639081
cf17b417d590c4adf1bb3a3289b9505b0616e1ede5cffb144a89b68424dadd41
Analyzer Verdict Alert quad9 Sinkholed
GET /46/ca/b0/46cab0482d679d4b3993fdf8e8be6238.js HTTP/1.1
Host: muchmiller.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://futbollibre.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Tue, 18 Oct 2022 22:49:33 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a945294d29670801de5e6b8582c6f9f0
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ws.chatbro.com/ws?chatId=1457113&clientId=0.4319855488172324
101 Switching Protocols 0 B URL HTTP/1.1 ws.chatbro.com/ws?chatId=1457113&clientId=0.4319855488172324
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ws?chatId=1457113&clientId=0.4319855488172324 HTTP/1.1
Host: ws.chatbro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://futbollibre.net
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 9Z+l2IB5O+98EuO9Egtbmw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Tue, 18 Oct 2022 22:49:34 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: /v8pdQCjZc8MRs9cIoE+w+Rgo9I=
Sec-WebSocket-Extensions: permessage-deflate; client_no_context_takeover
Sec-WebSocket-Version: 13
WebSocket-Server: uWebSockets
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S7CijfpM4JRZJKpk5606std73YQT3Dj6kK4jWO%2FUqVy7693XFc75KgMgqWYuNNqEaKpijpftKU9F%2FF4vLY%2BH3rV6X4NwDwiXqO51JheTIjinK%2FUVQ%2BRkGktV1y8WYLiOhg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75c4d3f25b3f75c9-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 635cee0191df9ca8de80d3edd4cd0767
8cc72972a9d39f48d41b5a1a65250fcf422e69e7
3294eafa7357cd86b134f922710a32ce70af94c9cce2195a3c0c69e08182fe4d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "3294EAFA7357CD86B134F922710A32CE70AF94C9CCE2195A3C0C69E08182FE4D"
Last-Modified: Sun, 16 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5571
Expires: Wed, 19 Oct 2022 00:22:25 GMT
Date: Tue, 18 Oct 2022 22:49:34 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 93e0f3cd84efda771c3c77f29c58fcd9
b8f70a062e387f09f3c9afbdc384c0d5ffba12bc
167df407b23a408af8af4b33c3f54ee2a191e87e154e98a9df7813e30e3affe5
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "167DF407B23A408AF8AF4B33C3F54EE2A191E87E154E98A9DF7813E30E3AFFE5"
Last-Modified: Mon, 17 Oct 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16437
Expires: Wed, 19 Oct 2022 03:23:31 GMT
Date: Tue, 18 Oct 2022 22:49:34 GMT
Connection: keep-alive
st.chatango.com/js/gz/emb.js
200 OK 24 kB URL HTTP/1.1 st.chatango.com/js/gz/emb.js
IP
File type ASCII text, with very long lines (1651)
Hash 43a6e3a24c5f6d710f01cd9ea166bedf
2b172372c84de07111687133d38ecaee8a15c99e
65878e1003da0b2d589980ebda0a59206831ff7e8be7747532c4080e35c600d7
GET /js/gz/emb.js HTTP/1.1
Host: st.chatango.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://futbollibre.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 18 Oct 2022 22:49:33 GMT
Content-Type: application/x-javascript
Content-Length: 23804
Last-Modified: Wed, 17 Aug 2022 23:45:11 GMT
Connection: keep-alive
Expires: Tue, 18 Oct 2022 22:49:33 GMT
Cache-Control: max-age=0
Content-Encoding: gzip
Accept-Ranges: bytes
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 93e0f3cd84efda771c3c77f29c58fcd9
b8f70a062e387f09f3c9afbdc384c0d5ffba12bc
167df407b23a408af8af4b33c3f54ee2a191e87e154e98a9df7813e30e3affe5
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "167DF407B23A408AF8AF4B33C3F54EE2A191E87E154E98A9DF7813E30E3AFFE5"
Last-Modified: Mon, 17 Oct 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16437
Expires: Wed, 19 Oct 2022 03:23:31 GMT
Date: Tue, 18 Oct 2022 22:49:34 GMT
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 32940147b6a47c03acbcc91d286d32e7
ffb98bb3965fc258d534cba9da9c626cd74ae4e6
aa93e9851ae9e0a24d0560e3dda73b35198a2c5222eb249111b31bcc2b1096ec
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=139476
Date: Tue, 18 Oct 2022 22:49:34 GMT
Etag: "634e9c89-1d7"
Expires: Thu, 20 Oct 2022 13:34:10 GMT
Last-Modified: Tue, 18 Oct 2022 12:31:05 GMT
Server: ECS (nyb/1D1D)
X-Cache: Miss from cloudfront
Via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: X8_q3Z7L_owSlNOlkE74u0AI0RV7AP6eNh-evUsBXYqXlZ-kr2mJSA==
Age: 3785
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash b4e805aa7b913f621ce0206d16ebbb3f
9b76789ae5e6e8fceb8a95d3e298abcc908aabbb
42c8c92eed6337b645765a4d390e1f7101c910121e52343573a3610fbdb397ea
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://futbollibre.net
Connection: keep-alive
Referer: https://futbollibre.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 18 Oct 2022 22:49:34 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://futbollibre.net
access-control-allow-credentials: true
set-cookie: uid_id2=4774f211-e788-4017-8aa6-3ef1ef68a8c2:2:1; expires=Fri, 15 Oct 2032 22:49:34 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
ssl.p.jwpcdn.com/player/v/8.21.0/jwplayer.js
200 OK 37 kB URL HTTP/2 ssl.p.jwpcdn.com/player/v/8.21.0/jwplayer.js
IP
File type ASCII text, with very long lines (65143)
Hash c59313eb0eab3f49f8167d30f54c4e52
a7f6b08f0d61213ff56680995399b50878a8c813
b9bbf6a6b284322cb8324fd8db35395ff1e83cf5e1ecc2304820c5140f2fb1a3
GET /player/v/8.21.0/jwplayer.js HTTP/1.1
Host: ssl.p.jwpcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://raysnik.life/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=31536000, immutable
last-modified: Tue, 06 Jul 2021 21:01:14 GMT
etag: "59aefa4a6facdeff3bd09966799ba21b"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Tue, 18 Oct 2022 22:49:34 GMT
via: 1.1 varnish
age: 528589
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1666133374.245111,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 37301
X-Firefox-Spdy: h2
ssl.p.jwpcdn.com/player/v/8.21.0/jwpsrv.js
200 OK 19 kB URL HTTP/2 ssl.p.jwpcdn.com/player/v/8.21.0/jwpsrv.js
IP
File type ASCII text, with very long lines (62165)
Hash 9ff4a115596fcc18749b51ec99f8cbd2
fc840870c7cf91bc7489c1ce914623cee7240592
fcd67095be96095418ed2d0ebada3da118764adeb919cb7d411c9cc2fd828407
GET /player/v/8.21.0/jwpsrv.js HTTP/1.1
Host: ssl.p.jwpcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://raysnik.life/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=900, immutable
last-modified: Wed, 15 Dec 2021 14:19:48 GMT
etag: "2353f13c8094f122815add38f3060256"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Tue, 18 Oct 2022 22:49:34 GMT
via: 1.1 varnish
age: 512
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1666133374.307077,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 18617
X-Firefox-Spdy: h2
ssl.p.jwpcdn.com/player/v/8.21.0/jwplayer.core.controls.js
200 OK 80 kB URL HTTP/2 ssl.p.jwpcdn.com/player/v/8.21.0/jwplayer.core.controls.js
IP
File type Unicode text, UTF-8 text, with very long lines (65135)
Hash 57190ebf0e7ea26eefc572a989352a29
411d7fd138558d4a7f2f34b10b754ce005c6985b
a058c2457dda6e0bf2381eb33a16a21ff0a91497311fcad7e71ffc6cafd90453
GET /player/v/8.21.0/jwplayer.core.controls.js HTTP/1.1
Host: ssl.p.jwpcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://raysnik.life/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000, immutable
last-modified: Tue, 06 Jul 2021 21:01:13 GMT
etag: "9b8c959e9e3602bcced646b1fd106192"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Tue, 18 Oct 2022 22:49:34 GMT
via: 1.1 varnish
age: 668592
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1666133374.308153,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 79934
X-Firefox-Spdy: h2
ssl.p.jwpcdn.com/player/v/8.21.0/translations/es.json
200 OK 1.4 kB URL HTTP/2 ssl.p.jwpcdn.com/player/v/8.21.0/translations/es.json
IP
File type JSON data\012- , Unicode text, UTF-8 text
Hash 9d185aca4a2dc77be9826639791fed53
6a22bb0b60989a17b2383ea1538ef9432278a8fa
67f8f8cb531e53de052f54f592d49f55897a7fcc3131e09738f578ae7de1966b
GET /player/v/8.21.0/translations/es.json HTTP/1.1
Host: ssl.p.jwpcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://raysnik.life
Connection: keep-alive
Referer: https://raysnik.life/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET
access-control-max-age: 3000
cache-control: max-age=31536000, immutable
last-modified: Tue, 06 Jul 2021 21:01:23 GMT
etag: "65c9c20ec057faa9f9115e26a9305664"
content-type: application/json
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Tue, 18 Oct 2022 22:49:34 GMT
via: 1.1 varnish
age: 197119
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1666133374.309500,VS0,VE1
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
content-length: 1409
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 635cee0191df9ca8de80d3edd4cd0767
8cc72972a9d39f48d41b5a1a65250fcf422e69e7
3294eafa7357cd86b134f922710a32ce70af94c9cce2195a3c0c69e08182fe4d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "3294EAFA7357CD86B134F922710A32CE70AF94C9CCE2195A3C0C69E08182FE4D"
Last-Modified: Sun, 16 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5571
Expires: Wed, 19 Oct 2022 00:22:25 GMT
Date: Tue, 18 Oct 2022 22:49:34 GMT
Connection: keep-alive
ssl.p.jwpcdn.com/player/v/8.21.0/provider.shaka.js
200 OK 135 kB URL HTTP/2 ssl.p.jwpcdn.com/player/v/8.21.0/provider.shaka.js
IP
File type Unicode text, UTF-8 text, with very long lines (31344)
Size 135 kB (135123 bytes)
Hash 193db9c9f2ee84ea29ff4494547a3c1d
6c9f3db5549116060eb249740d8409134226e727
8831ee9273115916c07aa81aee2660cc9df58cb658abeb0931dc7a0874e4a7dd
GET /player/v/8.21.0/provider.shaka.js HTTP/1.1
Host: ssl.p.jwpcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://raysnik.life/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000, immutable
last-modified: Tue, 06 Jul 2021 21:01:16 GMT
etag: "7dd9ad90969ad99bf96a35139937dd1a"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Tue, 18 Oct 2022 22:49:34 GMT
via: 1.1 varnish
age: 2415688
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1666133374.414989,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 135123
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 73e35ef36462984acc8baa89b5615e7a
693f5ed6823695ece79a6eb03b09a026691be46a
a21a6d722a7f6c752e23397bef3798dcb2e92dbfdc585a5daa90e521c9f5f694
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A21A6D722A7F6C752E23397BEF3798DCB2E92DBFDC585A5DAA90E521C9F5F694"
Last-Modified: Tue, 18 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2285
Expires: Tue, 18 Oct 2022 23:27:39 GMT
Date: Tue, 18 Oct 2022 22:49:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 73e35ef36462984acc8baa89b5615e7a
693f5ed6823695ece79a6eb03b09a026691be46a
a21a6d722a7f6c752e23397bef3798dcb2e92dbfdc585a5daa90e521c9f5f694
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A21A6D722A7F6C752E23397BEF3798DCB2E92DBFDC585A5DAA90E521C9F5F694"
Last-Modified: Tue, 18 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2285
Expires: Tue, 18 Oct 2022 23:27:39 GMT
Date: Tue, 18 Oct 2022 22:49:34 GMT
Connection: keep-alive
ocsp.sectigo.com/
200 OK 472 B IP
Hash 2f780cbc5c61c0d20bd70d29349a59c6
c898ba79ac9f82cf5bc34c9ee0ee4c20a0d81044
096ece4cf11d5c114cfe5f48a328b2c2aa55a2b3694351e3feeec1562d375fd7
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 18 Oct 2022 22:49:34 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 18 Oct 2022 17:29:15 GMT
Expires: Tue, 25 Oct 2022 17:29:14 GMT
Etag: "c898ba79ac9f82cf5bc34c9ee0ee4c20a0d81044"
Cache-Control: max-age=584979,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75c4d3f75e161c16-OSL
hermichermicfurnished.com/97/38/a3/9738a343b207c9bd51f72da77988779d.js
200 OK 13 kB URL HTTP/1.1 hermichermicfurnished.com/97/38/a3/9738a343b207c9bd51f72da77988779d.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (37147), with no line terminators
Hash 149569e659118c00c71948ea6fe864bd
04c3b90f315d8365814849b2a54c8a4aeb491db4
d387ce8961c18c1015051b41768e5946d141b02d549a601a22f3a9be76a1db8d
Analyzer Verdict Alert quad9 Sinkholed
GET /97/38/a3/9738a343b207c9bd51f72da77988779d.js HTTP/1.1
Host: hermichermicfurnished.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://futbollibre.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Tue, 18 Oct 2022 22:49:34 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 00f1e2b354f84473fdad266a92c7f014
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
hermichermicfurnished.com/pixel/purst?dl=0&th=0&sc=0&rs=1624&rd=1624&fd=855&bv=22.8.v.1&tmpl=70
200 OK 0 B URL HTTP/1.1 hermichermicfurnished.com/pixel/purst?dl=0&th=0&sc=0&rs=1624&rd=1624&fd=855&bv=22.8.v.1&tmpl=70
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=1624&rd=1624&fd=855&bv=22.8.v.1&tmpl=70 HTTP/1.1
Host: hermichermicfurnished.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://futbollibre.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Tue, 18 Oct 2022 22:49:34 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 63b982e7f844cc51381d552e3da5ce9d
7f16eb96947093afb428ff2332df19696c1b54c0
b4772fd31c635b1fdb9c077eda62748ad3574d7e7e6a32371f5be272cc5926d4
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=158130
Date: Tue, 18 Oct 2022 22:49:34 GMT
Etag: "634ede9a-1d7"
Expires: Thu, 20 Oct 2022 18:45:04 GMT
Last-Modified: Tue, 18 Oct 2022 17:12:58 GMT
Server: ECS (nyb/1D27)
X-Cache: Miss from cloudfront
Via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 9CkJnvFVkT696NYLqMbcqomoxMIkAZNe4ZHH4d1u2EMd9brgSPKQGA==
Age: 5526
ocsp.digicert.com/
200 OK 279 B IP
Hash a6661f05d8a6e39e73d7e10726114f36
7757778aa757e0d3b812b1182a45919722f4fa76
b61cfa90d2f1b650cc93b9447942d4a08a8e123d1f225f39f3ee7f8f64962966
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2919
Cache-Control: max-age=161987
Content-Type: application/ocsp-response
Date: Tue, 18 Oct 2022 22:49:34 GMT
Etag: "634ef7da-117"
Expires: Thu, 20 Oct 2022 19:49:21 GMT
Last-Modified: Tue, 18 Oct 2022 19:00:42 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 279
l.sharethis.com/pview?event=pview&hostname=futbollibre.net&location=%2Fembed%2F&product=inline-share-buttons&url=https%3A%2F%2Ffutbollibre.net%2Fembed%2F%3Fr%3DLy9yYXlzbmlrLmxpZmUvL3N0cmVhbS9mb3gvZnNwL2R0di5odG1s%26p%3DQe9TjgPs&source=sharethis.js&fcmp=false&fcmpv2=false&has_segmentio=false&title=Reproductor%20-%20F%C3%BAtbol%20Libre%20TV&cms=unknown&publisher=5ab9c9531fff98001395a59a&sop=true&version=st_sop.js&lang=en
204 No Content 0 B URL HTTP/1.1 l.sharethis.com/pview?event=pview&hostname=futbollibre.net&location=%2Fembed%2F&product=inline-share-buttons&url=https%3A%2F%2Ffutbollibre.net%2Fembed%2F%3Fr%3DLy9yYXlzbmlrLmxpZmUvL3N0cmVhbS9mb3gvZnNwL2R0di5odG1s%26p%3DQe9TjgPs&source=sharethis.js&fcmp=false&fcmpv2=false&has_segmentio=false&title=Reproductor%20-%20F%C3%BAtbol%20Libre%20TV&cms=unknown&publisher=5ab9c9531fff98001395a59a&sop=true&version=st_sop.js&lang=en
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pview?event=pview&hostname=futbollibre.net&location=%2Fembed%2F&product=inline-share-buttons&url=https%3A%2F%2Ffutbollibre.net%2Fembed%2F%3Fr%3DLy9yYXlzbmlrLmxpZmUvL3N0cmVhbS9mb3gvZnNwL2R0di5odG1s%26p%3DQe9TjgPs&source=sharethis.js&fcmp=false&fcmpv2=false&has_segmentio=false&title=Reproductor%20-%20F%C3%BAtbol%20Libre%20TV&cms=unknown&publisher=5ab9c9531fff98001395a59a&sop=true&version=st_sop.js&lang=en HTTP/1.1
Host: l.sharethis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://futbollibre.net
Connection: keep-alive
Referer: https://futbollibre.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: *
Access-Control-Allow-Origin: https://futbollibre.net
Access-Control-Expose-Headers: stid
Access-Control-Max-Age: 1728000
Cache-Control: no-cache, no-store, must-revalidate
Date: Tue, 18 Oct 2022 22:49:34 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains;
Connection: keep-alive
st.chatango.com/h5/gz/r0817221641/id.html
200 OK 224 kB URL HTTP/1.1 st.chatango.com/h5/gz/r0817221641/id.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (54430), with CRLF, LF line terminators
Size 224 kB (224127 bytes)
Hash fc3ae4d65fdfcf6587ee0fd2e6341ca1
29b97c7cfc4081d173d28c84c774bc3ce891724d
b0a40dcfdea8674321e505dac154350a1bb1ef6067670208b02b6e4bd874f3a9
GET /h5/gz/r0817221641/id.html HTTP/1.1
Host: st.chatango.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://futbollibre.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 18 Oct 2022 22:49:34 GMT
Content-Type: text/html
Content-Length: 224127
Last-Modified: Wed, 17 Aug 2022 23:45:11 GMT
Connection: keep-alive
Expires: Wed, 18 Oct 2023 22:49:34 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
P3P: CP="Chatango does not have a P3P policy. Please see our privacy policy: http://chatango.com/page?full_privacy"
Accept-Ranges: bytes
buttons-config.sharethis.com/js/5ab9c9531fff98001395a59a.js
200 OK 492 B URL HTTP/2 buttons-config.sharethis.com/js/5ab9c9531fff98001395a59a.js
IP
File type ASCII text, with very long lines (492), with no line terminators
Hash f724fa1a4d1150940280592957442aac
254b6495924f5e46bc68da8e995d354a1135e3b2
185eb9e30f94e66607b671f6ab6a09e4ef62b0a35d4303bd59ac0b25dc356646
GET /js/5ab9c9531fff98001395a59a.js HTTP/1.1
Host: buttons-config.sharethis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://futbollibre.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 492
last-modified: Tue, 27 Mar 2018 04:32:21 GMT
accept-ranges: bytes
server: AmazonS3
date: Tue, 18 Oct 2022 22:49:35 GMT
cache-control: max-age=60,public
etag: "f724fa1a4d1150940280592957442aac"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -9NOt4HA7LLdbYIEPePZCzejfsBVu1eDelKa0po5TCJdwTE8Z_t6DA==
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
whos.amung.us/cwidget/futbollibre/000000ffffff.png
307 Temporary Redirect 21 kB URL HTTP/2 whos.amung.us/cwidget/futbollibre/000000ffffff.png
IP
File type gzip compressed data, from Unix\012- data
Hash 38cffabe43ff5ff7d5823c232cd3de45
b0da8ee3d8121eb994a95ad7b19a5470d91bb93f
c1c88e36dc5ae5a94c8b2ccbea70315baea1544e70a51b4fee1b08266e1b44c3
GET /cwidget/futbollibre/000000ffffff.png HTTP/1.1
Host: whos.amung.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://futbollibre.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
date: Tue, 18 Oct 2022 22:49:34 GMT
content-type: text/html; charset=UTF-8
location: https://widgets.amung.us/draw/?w=colored&n=47900&c=000000ffffff&p=left
cache-control: max-age=295
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 75c4d3f7bc1795ea-ARN
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash a6661f05d8a6e39e73d7e10726114f36
7757778aa757e0d3b812b1182a45919722f4fa76
b61cfa90d2f1b650cc93b9447942d4a08a8e123d1f225f39f3ee7f8f64962966
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2920
Cache-Control: max-age=161987
Content-Type: application/ocsp-response
Date: Tue, 18 Oct 2022 22:49:35 GMT
Etag: "634ef7da-117"
Expires: Thu, 20 Oct 2022 19:49:22 GMT
Last-Modified: Tue, 18 Oct 2022 19:00:42 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 279
st.chatango.com/cfg/nc/r.json?2c19280020000210215680771
200 OK 20 B URL HTTP/1.1 st.chatango.com/cfg/nc/r.json?2c19280020000210215680771
IP
File type JSON data\012- , ASCII text
Hash 67a235cdf67d15044e66db2b3b799581
c6ddd33c979392cd5ba3a70d7c90360641e60c29
6eea499926669878dc267d25feeebbfd7826db0e55b82ce10db9e0004a3172b7
GET /cfg/nc/r.json?2c19280020000210215680771 HTTP/1.1
Host: st.chatango.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://futbollibre.net
Connection: keep-alive
Referer: https://futbollibre.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 18 Oct 2022 22:49:35 GMT
Content-Type: application/octet-stream
Content-Length: 20
Last-Modified: Wed, 17 Aug 2022 23:45:11 GMT
Connection: keep-alive
Cache-Control: max-age=0, no-cache, no-store, must-revalidate
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
widgets.amung.us/draw/?w=colored&n=47900&c=000000ffffff&p=left
200 OK 2.0 kB URL HTTP/2 widgets.amung.us/draw/?w=colored&n=47900&c=000000ffffff&p=left
IP
File type PNG image data, 81 x 29, 8-bit colormap, non-interlaced\012- data
Hash 20f6b5f5501068614944b2a4dc3c3c26
a3c85be74a726d55c6a14b89ddc53a69380d99d0
82a34aa1fbacfaa9c12f7390ce458482ac4d4d233333bd0a556d595091dfa54d
GET /draw/?w=colored&n=47900&c=000000ffffff&p=left HTTP/1.1
Host: widgets.amung.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://futbollibre.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 18 Oct 2022 22:49:35 GMT
content-type: image/png
content-disposition: filename=wau-widget.png
expires: Wed, 19 Oct 2022 19:06:20 GMT
cache-control: max-age=2678400
access-control-allow-origin: *
cf-cache-status: HIT
age: 13395
last-modified: Tue, 18 Oct 2022 19:06:20 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 75c4d3f9ee2595ea-ARN
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Tue, 18 Oct 2022 22:41:09 GMT
expires: Wed, 19 Oct 2022 00:41:09 GMT
cache-control: public, max-age=7200
age: 506
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 59c9f4b6a5cb5571f7e8ec52f3548732
9bd1c495d09547b8cc983f71b90471f42ec61f94
25c4798d1ef0730368cc5c6d41a4596c5c914865f6f7a4fad97bdd4ce017894e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "25C4798D1EF0730368CC5C6D41A4596C5C914865F6F7A4FAD97BDD4CE017894E"
Last-Modified: Sun, 16 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7631
Expires: Wed, 19 Oct 2022 00:56:46 GMT
Date: Tue, 18 Oct 2022 22:49:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 59c9f4b6a5cb5571f7e8ec52f3548732
9bd1c495d09547b8cc983f71b90471f42ec61f94
25c4798d1ef0730368cc5c6d41a4596c5c914865f6f7a4fad97bdd4ce017894e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "25C4798D1EF0730368CC5C6D41A4596C5C914865F6F7A4FAD97BDD4CE017894E"
Last-Modified: Sun, 16 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7631
Expires: Wed, 19 Oct 2022 00:56:46 GMT
Date: Tue, 18 Oct 2022 22:49:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 59c9f4b6a5cb5571f7e8ec52f3548732
9bd1c495d09547b8cc983f71b90471f42ec61f94
25c4798d1ef0730368cc5c6d41a4596c5c914865f6f7a4fad97bdd4ce017894e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "25C4798D1EF0730368CC5C6D41A4596C5C914865F6F7A4FAD97BDD4CE017894E"
Last-Modified: Sun, 16 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7631
Expires: Wed, 19 Oct 2022 00:56:46 GMT
Date: Tue, 18 Oct 2022 22:49:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 59c9f4b6a5cb5571f7e8ec52f3548732
9bd1c495d09547b8cc983f71b90471f42ec61f94
25c4798d1ef0730368cc5c6d41a4596c5c914865f6f7a4fad97bdd4ce017894e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "25C4798D1EF0730368CC5C6D41A4596C5C914865F6F7A4FAD97BDD4CE017894E"
Last-Modified: Sun, 16 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7631
Expires: Wed, 19 Oct 2022 00:56:46 GMT
Date: Tue, 18 Oct 2022 22:49:35 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09ee9fc2-069f-4d47-8dc4-92164338568f.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09ee9fc2-069f-4d47-8dc4-92164338568f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4fbdd9eb79e636b5543f5e46fe04ea31
20c5fb32a63d98075777829cc363785e2f4ffed2
6596cd730a0caaa9d1a997153fad51e9f958c6cae6916c27e0b6b4f2a512e0ec
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09ee9fc2-069f-4d47-8dc4-92164338568f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8047
x-amzn-requestid: 365880af-3731-4bb2-b90c-9cb4fa442e66
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aBsM-E9zoAMFvwA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634a271f-2cc91f8e54a08ce06255bc6b;Sampled=0
x-amzn-remapped-date: Sat, 15 Oct 2022 03:21:03 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: dLx9u0nMlvSa7w38t4ueu2B-fxGljKvJtRLD6cc3da5ub9Rc0J3-IA==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Tue, 18 Oct 2022 21:55:51 GMT
age: 3224
etag: "20c5fb32a63d98075777829cc363785e2f4ffed2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87514736-0d8f-4476-92ba-b15762c98332.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87514736-0d8f-4476-92ba-b15762c98332.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7cf86d59e28da601117810faf66d57c4
7ea3dc5cec73e3003430fd4ecfd0b5eb58a4d513
2dc2bfcbd1ae97396ee2f95c436d48b27b056a2922b9415329e34144a5950472
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87514736-0d8f-4476-92ba-b15762c98332.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8696
x-amzn-requestid: 8a14fadf-4f6f-4dca-9d39-75d89cbf9a4b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z1CmlEKeIAMFUWA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634517c3-6d1f242d2dd574235f570b87;Sampled=0
x-amzn-remapped-date: Tue, 11 Oct 2022 07:14:11 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: MMfbWp_ZrEOesN9JUmg1PM_I_ivUbd0E3Qt5B1KhzN5svIIDbhPuKA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 18 Oct 2022 06:57:52 GMT
age: 57103
etag: "7ea3dc5cec73e3003430fd4ecfd0b5eb58a4d513"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b5a91b4-f537-421e-8b13-62843ad940ad.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b5a91b4-f537-421e-8b13-62843ad940ad.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 92a90f3b620eabc7ed15fa14182ab0d1
2250764fd089f9b34180ef5cfd20dc3486261107
40ffc2e0b243630aba041940aa239c82720057525b9591399c4cfcefa3509b56
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b5a91b4-f537-421e-8b13-62843ad940ad.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7702
x-amzn-requestid: 8fa4e14b-317b-4ca8-9a32-52e58f493a69
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aBsM-EUEIAMF8Sg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634a271f-07a02fd8190b163d50ebb5c4;Sampled=0
x-amzn-remapped-date: Sat, 15 Oct 2022 03:21:03 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: TzOjtmvdmf1X8EeDJiOHrqZ6Lafujfzhpk-rqtx29F_3y_EyvL-nxQ==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 18 Oct 2022 07:55:33 GMT
age: 53642
etag: "2250764fd089f9b34180ef5cfd20dc3486261107"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F194b4740-96c9-4288-beb4-2bb6b10771b1.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F194b4740-96c9-4288-beb4-2bb6b10771b1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8b18cc36d516d20449dbba4fa894e898
40f6c41e0259a820bec12e31c6e650fd6c5dea57
1202e14ec5edc289d0be7b7f9d8538b9bc23a35f4ede6eae39179a61f6128bb1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F194b4740-96c9-4288-beb4-2bb6b10771b1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4044
x-amzn-requestid: 08cb82b3-386b-4d87-b11c-ab7c4c66173b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aOFFWEDjIAMF5jA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634f1bbb-4d516cbb74baf2a0228f8cbe;Sampled=0
x-amzn-remapped-date: Tue, 18 Oct 2022 21:33:47 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 4gPxIb8DzdibfZ-TsuJIDW7YYeeMvz5vpXrp4wsUenEzjEHnRn7yzg==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 18 Oct 2022 21:56:09 GMT
age: 3206
etag: "40f6c41e0259a820bec12e31c6e650fd6c5dea57"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87d6cfa7-6d1f-40ca-bf2d-507a8fffc5dd.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87d6cfa7-6d1f-40ca-bf2d-507a8fffc5dd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 34233831dc5c15001753b8bcc03382b0
00790fcdc95ebb458a67c1de32fbb58039795d81
a63d7d3ff74534fa2edfef6aae76074b228fdd3966917903176d897e7ea1e1c5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87d6cfa7-6d1f-40ca-bf2d-507a8fffc5dd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7749
x-amzn-requestid: 389e9ef8-8bf4-4aa4-9255-e71f64442dd6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aBq4FFKioAMFoOQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634a2500-307d1b4103e58eb400cdc6bc;Sampled=0
x-amzn-remapped-date: Sat, 15 Oct 2022 03:12:00 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: CSmVVhHYJ0HW3D61Xse0jsVoDBqKGx-scT6Vno55Ld8x3aK5gDU41w==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Tue, 18 Oct 2022 05:06:33 GMT
age: 63782
etag: "00790fcdc95ebb458a67c1de32fbb58039795d81"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbc809406-f843-4494-9a76-eab77bec4daa.jpeg
200 OK 35 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbc809406-f843-4494-9a76-eab77bec4daa.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b683fafb36238c7da6be76247f60600b
e975f7a307a970ab45b03f861fd7d875ec66028d
b65fa7f3e7e0d999ebdfc1a4beb74e21221e4ceabd9e57ed0af6ab4560e12fdd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbc809406-f843-4494-9a76-eab77bec4daa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 35276
x-amzn-requestid: 6e8a79ad-d0f3-4290-a1ed-ef9b1239f193
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aOFApGzbIAMFRGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634f1b9d-65cf1b926ab122b1716a2983;Sampled=0
x-amzn-remapped-date: Tue, 18 Oct 2022 21:33:17 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: hPbTIgByMSbi22qlqk74Vk8h6AWf5DxSWDZHjew5y-RHl6X0uRu_wQ==
via: 1.1 0a2ce08fa1ec3c33302a7547d3305978.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 18 Oct 2022 21:42:49 GMT
age: 4006
etag: "e975f7a307a970ab45b03f861fd7d875ec66028d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 00793600302d280c0f99bf96cfb0f009
98cea63c09c9c100bfdfc64ce73946d0a916aafb
31634dcf178009925d65ad67462bfa02c239b5b5f2c9a79aecc3b9a011015957
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 18 Oct 2022 22:49:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
st.chatango.com/js/gz/r0817221641/CollapsedViewModule.js
200 OK 3.5 kB URL HTTP/1.1 st.chatango.com/js/gz/r0817221641/CollapsedViewModule.js
IP
File type ASCII text, with very long lines (800)
Hash 8d95c129d125f07a279d389b4136b184
a1f4ab28c5ce8673f099a4562ce0d3f733bb26e6
62ea5ff0264e541e9ac5590bdc55105398b81bf2d92bbedbab61cdf750f7a745
GET /js/gz/r0817221641/CollapsedViewModule.js HTTP/1.1
Host: st.chatango.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://st.chatango.com/h5/gz/r0817221641/id.html
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 18 Oct 2022 22:49:35 GMT
Content-Type: application/x-javascript
Content-Length: 3508
Last-Modified: Wed, 17 Aug 2022 23:45:11 GMT
Connection: keep-alive
Expires: Wed, 18 Oct 2023 22:49:35 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
Accept-Ranges: bytes
cdn.taboola.com/libtrc/impl.20221018-10-RELEASE.js
200 OK 146 kB URL HTTP/2 cdn.taboola.com/libtrc/impl.20221018-10-RELEASE.js
IP
File type ASCII text, with very long lines (65508)
Size 146 kB (145751 bytes)
Hash 86c8616e5cf2d3fd60ea451c684a248f
14a206611f694762ab74352c497328d144f5c431
4dd47249f166251e95dc9c7984f5cd4c33ca0bd3e303d87b2c80e5fbc02d4260
GET /libtrc/impl.20221018-10-RELEASE.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: dc7OaHJtTnPUoglYKrxsxb62eHBDXlKl9P/S3lwJ6DvbTQiFyhZoYDnxqwUIC6aDRmQPzRAkUeI=
x-amz-request-id: WV68PFDRFJ4BJJKD
last-modified: Tue, 18 Oct 2022 12:08:40 GMT
etag: "86c8616e5cf2d3fd60ea451c684a248f"
content-encoding: br
x-amz-version-id: FevPzg_cga1SDC2LKR6mKsWNsY5.zhF6
content-type: application/javascript
accept-ranges: bytes
date: Tue, 18 Oct 2022 22:49:35 GMT
via: 1.1 varnish
age: 9643
x-served-by: cache-bma1661-BMA
x-cache: HIT
x-cache-hits: 3731
x-timer: S1666133375.317772,VS0,VE0
cache-control: private,max-age=31536000
vary: Accept-Encoding
abp: 82
server: AmazonS3-br
content-length: 145751
X-Firefox-Spdy: h2
sb.scorecardresearch.com/b?c1=7&c2=34354936&c3=1&cs_it=b3&cv=3.8.0.210223&ns__t=1666133383035&ns_c=windows-1252&ns_if=1&c7=https%3A%2F%2Fst.chatango.com%2Fh5%2Fgz%2Fr0817221641%2Fid.html&c8=&c9=https%3A%2F%2Ffutbollibre.net%2F
204 No Content 0 B URL HTTP/2 sb.scorecardresearch.com/b?c1=7&c2=34354936&c3=1&cs_it=b3&cv=3.8.0.210223&ns__t=1666133383035&ns_c=windows-1252&ns_if=1&c7=https%3A%2F%2Fst.chatango.com%2Fh5%2Fgz%2Fr0817221641%2Fid.html&c8=&c9=https%3A%2F%2Ffutbollibre.net%2F
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b?c1=7&c2=34354936&c3=1&cs_it=b3&cv=3.8.0.210223&ns__t=1666133383035&ns_c=windows-1252&ns_if=1&c7=https%3A%2F%2Fst.chatango.com%2Fh5%2Fgz%2Fr0817221641%2Fid.html&c8=&c9=https%3A%2F%2Ffutbollibre.net%2F HTTP/1.1
Host: sb.scorecardresearch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 18 Oct 2022 22:49:35 GMT
set-cookie: UID=1343449131afc802633c0bd1666133375; domain=.scorecardresearch.com; path=/; max-age=62208000
x-cache: Miss from cloudfront
via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 3gKlXJtmFckWu6ZvCGBDhpT7RM3D_te_MiyxNTBSnB3TLszJWYtJsQ==
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 0b7faf583b499358dc80e89da20a04ae
caf821a3725b36884973d7e5741f6e1b9a83a6ce
ca3af00979a98f208cac3c5b1aa6fbfd82cdf074d46830655b6a15faa0763820
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2880
Cache-Control: max-age=101506
Content-Type: application/ocsp-response
Date: Tue, 18 Oct 2022 22:49:35 GMT
Etag: "634e0bc1-139"
Expires: Thu, 20 Oct 2022 03:01:21 GMT
Last-Modified: Tue, 18 Oct 2022 02:13:21 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 313
trc-events.taboola.com/chatango-chatango1/log/2/debug?tim=22%3A49%3A43.161&type=usage&msg=rtus&llvl=2&id=536&cv=20221018-10-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/chatango-chatango1/log/2/debug?tim=22%3A49%3A43.161&type=usage&msg=rtus&llvl=2&id=536&cv=20221018-10-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /chatango-chatango1/log/2/debug?tim=22%3A49%3A43.161&type=usage&msg=rtus&llvl=2&id=536&cv=20221018-10-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Tue, 18 Oct 2022 22:49:35 GMT
x-fastly-to-nlb-rtt: 22046
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash 3a9a6ef6f6184d2f5cc19d92e87bc218
c26b9aeeca1b95127736c30bdb9bb8bb9646c695
b501a2551681dbd88bc4ce59daaab572db9fa0cb9aac154b13f26f18d15fb91a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5740
Cache-Control: max-age=107568
Content-Type: application/ocsp-response
Date: Tue, 18 Oct 2022 22:49:35 GMT
Etag: "634e1843-13a"
Expires: Thu, 20 Oct 2022 04:42:23 GMT
Last-Modified: Tue, 18 Oct 2022 03:06:43 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 314
dnacdn.net/dna
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 18 Oct 2022 22:49:35 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=vJMTIl80M0RITmhlJTJCZkMwOUJGQlhaMUN2czE1WFolMkJwSThBSVdJdDhSeVZRTEhIV0Vkbldpd1FIZVVPNEVBU2hNOFY4Qw; expires=Sun, 12 Nov 2023 22:49:36 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 507613
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash 49729d0a83e6fad84674b5f6e3a91e1c
373beb9ebe02dc5771d704a0a74318635ddfc69d
f3aaaaaa56a599a9a7cbb2b58f7e51f01c625ad309f05d8f3563f43b8abbc828
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1116
Cache-Control: max-age=124195
Content-Type: application/ocsp-response
Date: Tue, 18 Oct 2022 22:49:36 GMT
Etag: "634e6b47-138"
Expires: Thu, 20 Oct 2022 09:19:31 GMT
Last-Modified: Tue, 18 Oct 2022 09:00:55 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 312
ust.chatango.com/groupinfo/f/u/futbollibre444/gprofile.xml
200 OK 46 B URL HTTP/1.1 ust.chatango.com/groupinfo/f/u/futbollibre444/gprofile.xml
IP
File type XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with no line terminators
Hash 489a85ae9059fbab14c176e10bdceae7
23a167e15ff489c149a1c1f633bfcd4597d9c0bd
2bf0b59a7518f8b73db880ecb0e510763231b2a8ef3a789504c9ab98e549904a
GET /groupinfo/f/u/futbollibre444/gprofile.xml HTTP/1.1
Host: ust.chatango.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://st.chatango.com
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 18 Oct 2022 22:49:36 GMT
Content-Type: text/xml
Content-Length: 46
Last-Modified: Sat, 11 Jun 2022 15:43:25 GMT
Connection: keep-alive
Expires: Tue, 18 Oct 2022 22:49:36 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
gum.criteo.com/sid/json?origin=rtus&domain=st.chatango.com&sn=FirefoxSyncframe&so=0&topUrl=futbollibre.net&info=XLI4tV80M0RITmhlJTJCZkMwOUJGQlhaMUN2czE1WFolMkJwSThBSVdJdDhSeVZRTEhIVnFxS3hpMnFHRzFHZWhMZ2JPdDRwNA&idsd=-432986104,-338796783&rtusCallerId=72&lsw=1
200 OK 316 B URL HTTP/2 gum.criteo.com/sid/json?origin=rtus&domain=st.chatango.com&sn=FirefoxSyncframe&so=0&topUrl=futbollibre.net&info=XLI4tV80M0RITmhlJTJCZkMwOUJGQlhaMUN2czE1WFolMkJwSThBSVdJdDhSeVZRTEhIVnFxS3hpMnFHRzFHZWhMZ2JPdDRwNA&idsd=-432986104,-338796783&rtusCallerId=72&lsw=1
IP
File type JSON data\012- , ASCII text, with very long lines (383), with no line terminators
Hash ee20775367c1f9bdff049c24c0003141
c9faff8856f6c509c6c1413438b63f57165e4ecb
547d720837e1ceb31674e3b3b082114c31cdf5ebfa769dc6155965f3017e4a72
GET /sid/json?origin=rtus&domain=st.chatango.com&sn=FirefoxSyncframe&so=0&topUrl=futbollibre.net&info=XLI4tV80M0RITmhlJTJCZkMwOUJGQlhaMUN2czE1WFolMkJwSThBSVdJdDhSeVZRTEhIVnFxS3hpMnFHRzFHZWhMZ2JPdDRwNA&idsd=-432986104,-338796783&rtusCallerId=72&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?origin=rtus&topUrl=futbollibre.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 18 Oct 2022 22:49:35 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 927449
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 1.9 kB IP
Hash a957dd161f9b8da8d28a95aede227001
10ea504902bc5636ab3608d496b5f8332b221a06
10aaba5cf85784eafa0fe6694ad024d84a12f7c455655975fa2262842623fb57
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1226
Cache-Control: max-age=114581
Content-Type: application/ocsp-response
Date: Tue, 18 Oct 2022 22:49:36 GMT
Etag: "634e454b-138"
Expires: Thu, 20 Oct 2022 06:39:17 GMT
Last-Modified: Tue, 18 Oct 2022 06:18:51 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 312
gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
200 OK 8.8 kB URL HTTP/2 gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
IP
Hash 5c9ecf5d4a90505f2bdf088d201a5ed2
bdec54b1d430a1e249394aec02500ea03be1fc0a
f7a1dd68cb2bd134388bbd402b4fe143f64eaae29ab37744a357926aef5152aa
GET /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://st.chatango.com/
x-crto-bundle: 6X3v8V9PaU51TkEySG5uVHk1aHJIS3NxTXptR21oNmVXSFFZSWJMcDNNZGhBUzQxSmtEMjEwdmc2bmxoaWFNeW1HY0Y2SGVlblFuTEpJVFFBWlVmZGNxc1liblJMOVEzV1ZWbEVOcTBrRXdHZkQ2ZjBMWTFMY0xhTm1RMzZyNTM0bFB2dDI2ekN3SFdrJTJCcDdOY1FJajFEVXJCUSUzRCUzRA
Origin: https://st.chatango.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 18 Oct 2022 22:49:36 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
access-control-allow-credentials: true
access-control-allow-origin: https://st.chatango.com
server-processing-duration-in-ticks: 2424333
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e838174f787f000e6707e58e1247bbf7
d48db15188d1eec3b0103a47fc8264d49496e058
27447c05944540c1012b421384ae1acc2b23c7f31eaba0b38240aaa910cd91a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "27447C05944540C1012B421384AE1ACC2B23C7F31EABA0B38240AAA910CD91A1"
Last-Modified: Sun, 16 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13699
Expires: Wed, 19 Oct 2022 02:37:55 GMT
Date: Tue, 18 Oct 2022 22:49:36 GMT
Connection: keep-alive
raysnik.life//stream/fox/fsp/dtv.html
200 OK 1.5 kB URL HTTP/2 raysnik.life//stream/fox/fsp/dtv.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (799)
Hash 051793be80f1b06043c114c815c0f359
65f281e77fd7a8b99400a9f067255f2305849bda
6052041a01665746875b17c0d54e5fcedc3ec0ffe315039dccfd2e9f4aead08b
GET //stream/fox/fsp/dtv.html HTTP/1.1
Host: raysnik.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://futbollibre.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 18 Oct 2022 22:49:34 GMT
content-type: text/html
vary: Accept-Encoding
x-page-speed: 1.13.35.2-0
cache-control: max-age=0, no-cache
x-varnish: 507852826
age: 0
via: 1.1 varnish (Varnish/5.2)
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XUFykPSc1VMQYIktOKBC50OiXownhcWSWi%2FbZhhvUhviUCRKDnF2TmcEnHlDsbgz%2BLQJJB1UiJCArnR37K6SOK4d5AUX48xLcF%2Frq%2FXPp1JxozlhFj%2FTCWFnz35GDGg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75c4d3f3fc15b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
unseenreport.com/pxf.gif?uuid=4774f211-e788-4017-8aa6-3ef1ef68a8c2&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=14.31&b_frame=0&pk=46cab0482d679d4b3993fdf8e8be6238&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=22
200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=4774f211-e788-4017-8aa6-3ef1ef68a8c2&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=14.31&b_frame=0&pk=46cab0482d679d4b3993fdf8e8be6238&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=22
IP
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=4774f211-e788-4017-8aa6-3ef1ef68a8c2&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=14.31&b_frame=0&pk=46cab0482d679d4b3993fdf8e8be6238&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=22 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://futbollibre.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Tue, 18 Oct 2022 22:49:36 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 14f43213379728927a54ad1faa251550
Strict-Transport-Security: max-age=0; includeSubdomains
unseenreport.com/pxf.gif?uuid=4774f211-e788-4017-8aa6-3ef1ef68a8c2&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=14.31&b_frame=0&pk=9738a343b207c9bd51f72da77988779d&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=22
200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=4774f211-e788-4017-8aa6-3ef1ef68a8c2&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=14.31&b_frame=0&pk=9738a343b207c9bd51f72da77988779d&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=22
IP
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=4774f211-e788-4017-8aa6-3ef1ef68a8c2&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=14.31&b_frame=0&pk=9738a343b207c9bd51f72da77988779d&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=22 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://futbollibre.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Tue, 18 Oct 2022 22:49:36 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5861adbff70d6e3292366455395ab97c
Strict-Transport-Security: max-age=0; includeSubdomains
gum.criteo.com/syncframe?origin=rtus&topUrl=futbollibre.net
200 OK 0 B URL HTTP/2 gum.criteo.com/syncframe?origin=rtus&topUrl=futbollibre.net
IP
GET /syncframe?origin=rtus&topUrl=futbollibre.net HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://st.chatango.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 18 Oct 2022 22:49:34 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=31476485-2975-4e20-8c2d-967f13649b7d; expires=Sun, 12 Nov 2023 22:49:34 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 610407
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
futbollibre.net/embed/?r=Ly9yYXlzbmlrLmxpZmUvL3N0cmVhbS9mb3gvZnNwL2R0di5odG1s&p=Qe9TjgPs
200 OK 0 B URL HTTP/2 futbollibre.net/embed/?r=Ly9yYXlzbmlrLmxpZmUvL3N0cmVhbS9mb3gvZnNwL2R0di5odG1s&p=Qe9TjgPs
IP
GET /embed/?r=Ly9yYXlzbmlrLmxpZmUvL3N0cmVhbS9mb3gvZnNwL2R0di5odG1s&p=Qe9TjgPs HTTP/1.1
Host: futbollibre.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Tue, 18 Oct 2022 22:49:32 GMT
content-type: text/html
cf-ray: 75c4d3ec1ffa7193-LHR
age: 4910
cache-control: max-age=691200
last-modified: Thu, 06 Oct 2022 21:52:51 GMT
vary: Accept-Encoding
via: 1.1 varnish (Varnish/6.5)
cf-cache-status: HIT
x-cache: MISS
x-cache-hits: 0
x-content-type-options: nosniff
x-varnish: 6681459
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4yQn490RGx5rs%2BTcz4CM3x%2BiKDT8BnQmbpzFY0cCo5F1YLifYyIXJJZXnmghCLD3xu2yM4L2BaL1NfqT27QmHsKmS2ke6cVGkkSn1gtsbO3IJ%2BOYqN4gfwCL5ep2GDGmm4c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
sb.scorecardresearch.com/beacon.js
200 OK 0 B URL HTTP/2 sb.scorecardresearch.com/beacon.js
IP
GET /beacon.js HTTP/1.1
Host: sb.scorecardresearch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 28 Jun 2022 13:19:23 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Tue, 18 Oct 2022 02:19:19 GMT
cache-control: max-age=86400
etag: W/"eaf85c1c6758e84acfe134efd70e9373"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: kiMPiWcslnRrgsdumwc5zIesZ39cIq8IAW1SxIZNYikW9-HL-c5Paw==
age: 78431
X-Firefox-Spdy: h2
creepingbrings.com/sfp.js
200 OK 0 B URL HTTP/2 creepingbrings.com/sfp.js
IP
GET /sfp.js HTTP/1.1
Host: creepingbrings.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://futbollibre.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 18 Oct 2022 22:49:35 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 4eb51fc2cfcaa26eca53541f6f27cf0e
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Tue, 18 Oct 2022 22:49:34 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QA35Uqr69jH3F3PMroxWAczEF1YqAnWNjA0ML2luFOKFZfRRrQ0BlkGN4D0VCopAqqCTu%2FDLi%2Fn20lYSMIy5av0xncaH4RsApWhqsqguAquSlg6y3jJ71Pnr69nc4FifhzPaJSg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75c4d3f89eb8730e-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
gem.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 18 Oct 2022 22:49:35 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 120020
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
sv.tsnt2.xyz/json/p/Qe9TjgPs.json?mb4pv
200 OK 0 B URL HTTP/2 sv.tsnt2.xyz/json/p/Qe9TjgPs.json?mb4pv
IP
GET /json/p/Qe9TjgPs.json?mb4pv HTTP/1.1
Host: sv.tsnt2.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://futbollibre.net
Connection: keep-alive
Referer: https://futbollibre.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 18 Oct 2022 22:49:33 GMT
content-type: application/json
last-modified: Tue, 18 Oct 2022 19:29:29 GMT
vary: Accept-Encoding
etag: W/"634efe99-153"
access-control-allow-origin: https://futbollibre.net
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rVfhWXg6aK7%2Bt6%2F9Pn0%2B6V8v5C3k%2FaiU8ZnwMSL83bQDh%2B6s6cGOowkC7C8PZjMYT5G%2BXd8IHxTVsZDwFtCcDUbO4xNjPQvP2rA5QKnBl95T4uWSyusNY1hGhLllUM4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75c4d3ee4c6f0b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 0 B IP
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=vJMTIl80M0RITmhlJTJCZkMwOUJGQlhaMUN2czE1WFolMkJwSThBSVdJdDhSeVZRTEhIV0Vkbldpd1FIZVVPNEVBU2hNOFY4Qw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 18 Oct 2022 22:49:35 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=XLI4tV80M0RITmhlJTJCZkMwOUJGQlhaMUN2czE1WFolMkJwSThBSVdJdDhSeVZRTEhIVnFxS3hpMnFHRzFHZWhMZ2JPdDRwNA; expires=Sun, 12 Nov 2023 22:49:36 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 352271
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
acscdn.com/script/suv4.js
200 OK 0 B URL HTTP/2 acscdn.com/script/suv4.js
IP
GET /script/suv4.js HTTP/1.1
Host: acscdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://futbollibre.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 18 Oct 2022 22:49:33 GMT
content-type: application/javascript
x-guploader-uploadid: ADPycdv3q2k_-Vhvc_J4jlYe_LyZykJFPzGcr3BmkG4Kq_-9tSwX4YJ_gKI6RADFCtKAZErqtnzh98hBVW8NSo6Zf8me8w
x-goog-generation: 1662626465441111
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 100523
x-goog-hash: crc32c=PsCFGQ==, md5=kKQG58EUy5y9vRcdgoLiJA==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Tue, 18 Oct 2022 23:41:37 GMT
cache-control: public, max-age=14400
last-modified: Thu, 08 Sep 2022 08:41:05 GMT
etag: W/"90a406e7c114cb9cbdbd171d8282e224"
age: 476
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FZMTmXedi%2FYmPNixO%2B6IMZp7k5FRt85RkGvgp%2Be5n8cZDKR2Lm%2Fx0TBxOPr0MyCWSNozd5N0o5NfJAB0dQ8IY1NMMlXkRHBr2vf1Te1jGvieoBBmU%2F%2FOowxdlEFK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75c4d3edcad1f41b-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
youradexchange.com/script/suurl4.php?r=5798766&cbur=0.5827884134764325&cbiframe=0&cbWidth=1280&cbHeight=939&cbtitle=Reproductor%20-%20F%C3%BAtbol%20Libre%20TV&cbpage=https%3A%2F%2Ffutbollibre.net%2Fembed%2F%3Fr%3DLy9yYXlzbmlrLmxpZmUvL3N0cmVhbS9mb3gvZnNwL2R0di5odG1s%26p%3DQe9TjgPs&cbref=&cbdescription=&cbkeywords=&cbcdn=acscdn.com&aggr=0
200 OK 0 B URL HTTP/2 youradexchange.com/script/suurl4.php?r=5798766&cbur=0.5827884134764325&cbiframe=0&cbWidth=1280&cbHeight=939&cbtitle=Reproductor%20-%20F%C3%BAtbol%20Libre%20TV&cbpage=https%3A%2F%2Ffutbollibre.net%2Fembed%2F%3Fr%3DLy9yYXlzbmlrLmxpZmUvL3N0cmVhbS9mb3gvZnNwL2R0di5odG1s%26p%3DQe9TjgPs&cbref=&cbdescription=&cbkeywords=&cbcdn=acscdn.com&aggr=0
IP
GET /script/suurl4.php?r=5798766&cbur=0.5827884134764325&cbiframe=0&cbWidth=1280&cbHeight=939&cbtitle=Reproductor%20-%20F%C3%BAtbol%20Libre%20TV&cbpage=https%3A%2F%2Ffutbollibre.net%2Fembed%2F%3Fr%3DLy9yYXlzbmlrLmxpZmUvL3N0cmVhbS9mb3gvZnNwL2R0di5odG1s%26p%3DQe9TjgPs&cbref=&cbdescription=&cbkeywords=&cbcdn=acscdn.com&aggr=0 HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://futbollibre.net/
Origin: https://futbollibre.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Tue, 18 Oct 2022 22:49:33 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lpgs.chatbro.com/g
200 OK 0 B IP
POST /g HTTP/1.1
Host: lpgs.chatbro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 18
Origin: https://futbollibre.net
Connection: keep-alive
Referer: https://futbollibre.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 18 Oct 2022 22:49:33 GMT
content-type: text/plain;charset=utf-8
cache-control: no-cache, must-revalidate
access-control-allow-credentials: true
access-control-allow-origin: https://futbollibre.net
content-encoding: gzip
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rEzEIMhgk2IrZUf36dIkkoyzp9AsZCOT3qHKzSnnX%2B8kD6QqZnX6fuG4dGYjza8lM73P4rY4a98cMtixs32eppvmzyOeujOnTElTRQ%2FWXMi%2B9FHnwCNNVy5pa8pxNH4zTARf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75c4d3f04f1a74a1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
addresseepaper.com/sfp.js
200 OK 0 B URL HTTP/2 addresseepaper.com/sfp.js
IP
GET /sfp.js HTTP/1.1
Host: addresseepaper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://futbollibre.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 18 Oct 2022 22:49:34 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 8a503df4bd8df985d749939b7310b55a
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Tue, 18 Oct 2022 22:49:33 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Xa5eL7T3HF66%2F5InQHMMaw45CERt3i7XzCqQjMAkH88xYF5t3gnRpLAr44LndNziHS5XHaLJ3EY7Sp%2FD8XGVVlpco7TOJmwvNQbxAOG6nm6J4BoadfEkyg9j%2BmbC1b%2F86lW5B4c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75c4d3f40fc27761-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ag.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 ag.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: ag.gbc.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 18 Oct 2022 22:49:36 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 89433
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
172.64.163.27
93.184.220.29
18.193.142.27
104.22.74.171
141.226.228.48
178.250.2.146
23.36.76.226
151.101.86.114