datatechone.com/log/add?cid=e7ddf874-40d2-43d7-b8fd-56541bff0853
2 B URL datatechone.com/log/add?cid=e7ddf874-40d2-43d7-b8fd-56541bff0853
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /log/add?cid=e7ddf874-40d2-43d7-b8fd-56541bff0853 HTTP/1.1
Host: datatechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1593
Origin: https://cdntechone.com
DNT: 1
Connection: keep-alive
Referer: https://cdntechone.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Wed, 31 May 2023 23:20:49 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 2
Connection: keep-alive
Access-Control-Allow-Origin: https://cdntechone.com
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
www.googletagmanager.com/gtag/js?id=G-F0JFDXF7TQ
200 OK 88 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-F0JFDXF7TQ
IP
Requested by https://rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintEB:A2:AF:B3:20:F1:B1:77:23:0B:85:D2:B1:16:33:A7:97:49:EE:51
ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT
File type ASCII text, with very long lines (6408)
Hash 02f9f78e1772e08511e8e4d6de561b34
c6ba09a0ba6b197a925ac0991d649cf2569283c5
332b8bcaabc8c32cc57406b51a6056aba548c792d6aff478306193d07f1fe972
GET /gtag/js?id=G-F0JFDXF7TQ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rewardarium.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 31 May 2023 23:20:50 GMT
expires: Wed, 31 May 2023 23:20:50 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 88192
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
niwooghu.com/400/5776801?ymid=687914513426821995&var=zd_5833048&var3=726858ccd4
200 OK 42 kB URL GET HTTP/2 niwooghu.com/400/5776801?ymid=687914513426821995&var=zd_5833048&var3=726858ccd4
IP
Requested by https://rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
Certificate IssuerLet's Encrypt
Subjectniwooghu.com
FingerprintD6:61:D9:C1:16:B4:4D:E5:88:E3:06:BA:A2:09:52:99:B6:CE:9B:CF
ValiditySat, 06 May 2023 05:15:47 GMT - Fri, 04 Aug 2023 05:15:46 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 32f00bc74e7bd91ea4dc952e3a08c6b1
429393d79ec5d191cd3fd841dd39803e3476136f
2cb903da9a80701b676a40c572230826f1ab7129b8f3f5d2d158ac2a56b62853
GET /400/5776801?ymid=687914513426821995&var=zd_5833048&var3=726858ccd4 HTTP/1.1
Host: niwooghu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rewardarium.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 23:20:50 GMT
content-type: application/javascript
x-trace-id: c60e625a7785a40035903efbf548ae06
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
set-cookie: OAID=11c2d6a31bcc41818ca287e187956290; expires=Thu, 30 May 2024 23:20:50 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
datatechonert.com/log/add?cid=4fdc95c9-9001-4768-aac8-c1886405d3a9
200 OK 12 B URL POST HTTP/1.1 datatechonert.com/log/add?cid=4fdc95c9-9001-4768-aac8-c1886405d3a9
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
Certificate IssuerSectigo Limited
Subjectdatatechonert.com
Fingerprint6F:17:15:C2:7F:CC:16:6C:9D:C0:AD:C3:EE:DA:69:61:8C:77:0B:5B
ValiditySun, 18 Dec 2022 00:00:00 GMT - Sun, 24 Dec 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
POST /log/add?cid=4fdc95c9-9001-4768-aac8-c1886405d3a9 HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rewardarium.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 1447
Origin: https://rewardarium.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Wed, 31 May 2023 23:20:50 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://rewardarium.com
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
my.rtmark.net/img.gif?f=merge&userId=00c6dd941f5c41fabdecfb340dc6fd80
43 B URL my.rtmark.net/img.gif?f=merge&userId=00c6dd941f5c41fabdecfb340dc6fd80
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=merge&userId=00c6dd941f5c41fabdecfb340dc6fd80 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://psaudous.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 23:20:50 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=00c6dd941f5c41fabdecfb340dc6fd80; expires=Thu, 30 May 2024 23:20:50 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
my.rtmark.net/gid.js
200 OK 65 B IP
Requested by https://rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
Certificate IssuerLet's Encrypt
Subjectrtmark.net
Fingerprint84:56:36:C3:24:DE:FB:F0:E7:EB:EB:9D:C8:B6:28:31:B5:3C:8B:80
ValiditySat, 06 May 2023 08:48:01 GMT - Fri, 04 Aug 2023 08:48:00 GMT
File type JSON data\012- , ASCII text
Hash 1f9ade6873c1a4f9f2acff3c36087f8d
fbfe1570497e8a52dafb74b2a09d5d7590524917
95f8e0ea9f9a3454a0daa829de3a0069b14be60adf0e6d6c53012aff7a946459
GET /gid.js HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rewardarium.com/
Origin: https://rewardarium.com
DNT: 1
Connection: keep-alive
Cookie: ID=00c6dd941f5c41fabdecfb340dc6fd80
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 23:20:50 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://rewardarium.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=00c6dd941f5c41fabdecfb340dc6fd80; expires=Thu, 30 May 2024 23:20:50 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
stootsou.net/custom
200 OK 0 B IP
Requested by https://rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
Certificate IssuerLet's Encrypt
Subjectstootsou.net
Fingerprint8B:6D:C9:76:36:ED:10:46:55:21:54:23:8C:4E:AC:7D:02:17:DD:7C
ValiditySun, 26 Mar 2023 05:17:40 GMT - Sat, 24 Jun 2023 05:17:39 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://rewardarium.com/
Origin: https://rewardarium.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 23:20:50 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://rewardarium.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
stootsou.net/custom
200 OK 39 B IP
Requested by https://rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
Certificate IssuerLet's Encrypt
Subjectstootsou.net
Fingerprint8B:6D:C9:76:36:ED:10:46:55:21:54:23:8C:4E:AC:7D:02:17:DD:7C
ValiditySun, 26 Mar 2023 05:17:40 GMT - Sat, 24 Jun 2023 05:17:39 GMT
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rewardarium.com/
Content-Type: application/json
Content-Length: 557
Origin: https://rewardarium.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 23:20:51 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 9ec261bdf32e7e357ff4151ee0c267cc
access-control-allow-origin: https://rewardarium.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
stootsou.net/custom
200 OK 39 B IP
Requested by https://rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
Certificate IssuerLet's Encrypt
Subjectstootsou.net
Fingerprint8B:6D:C9:76:36:ED:10:46:55:21:54:23:8C:4E:AC:7D:02:17:DD:7C
ValiditySun, 26 Mar 2023 05:17:40 GMT - Sat, 24 Jun 2023 05:17:39 GMT
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rewardarium.com/
Content-Type: application/json
Content-Length: 909
Origin: https://rewardarium.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 23:20:51 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 00a8e0ee4f565cb16e1e78d651a54253
access-control-allow-origin: https://rewardarium.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
stootsou.net/custom
200 OK 39 B IP
Requested by https://rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
Certificate IssuerLet's Encrypt
Subjectstootsou.net
Fingerprint8B:6D:C9:76:36:ED:10:46:55:21:54:23:8C:4E:AC:7D:02:17:DD:7C
ValiditySun, 26 Mar 2023 05:17:40 GMT - Sat, 24 Jun 2023 05:17:39 GMT
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rewardarium.com/
Content-Type: application/json
Content-Length: 567
Origin: https://rewardarium.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 23:20:51 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 1ec656650287e5336ebe1257010d091b
access-control-allow-origin: https://rewardarium.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
psaudous.com/?z=5776779&syncedCookie=true&rhd=false
302 Found 0 B URL POST HTTP/2 psaudous.com/?z=5776779&syncedCookie=true&rhd=false
IP
Requested by https://rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
Certificate IssuerLet's Encrypt
Subjectpsaudous.com
Fingerprint74:1B:0B:1B:1B:A5:B9:16:B3:8D:1B:39:D1:7D:7D:00:8A:53:AB:D0
ValidityThu, 23 Mar 2023 05:13:48 GMT - Wed, 21 Jun 2023 05:13:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /?z=5776779&syncedCookie=true&rhd=false HTTP/1.1
Host: psaudous.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 554
Origin: https://psaudous.com
DNT: 1
Connection: keep-alive
Referer: https://psaudous.com/afu.php?zoneid=5776779&var=5776779&rid=33-IJ2mCiw9DGbmF2LWarg%3D%3D&rhd=false
Cookie: OAID=00c6dd941f5c41fabdecfb340dc6fd80; oaidts=1685575250
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 31 May 2023 23:20:51 GMT
content-length: 0
location: https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5776779
x-trace-id: b48115114f353f519903dcde2506db30
link: <https://www.mysexymatches.com>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://xobr219pa.com>; rel="preconnect dns-prefetch"
referrer-policy: no-referrer
access-control-allow-origin: https://psaudous.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=00c6dd941f5c41fabdecfb340dc6fd80; expires=Thu, 30 May 2024 23:20:51 GMT; path=/; secure; SameSite=None
oaidts=1685575250; expires=Thu, 30 May 2024 23:20:51 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Wed, 07 Jun 2023 23:20:51 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
amunfezanttor.com/event
200 OK 0 B IP
Requested by https://rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
Certificate IssuerLet's Encrypt
Subjectamunfezanttor.com
Fingerprint06:75:EF:D1:99:AE:A5:FA:8B:93:D3:D4:ED:BD:88:51:DA:2A:62:B3
ValidityFri, 31 Mar 2023 10:01:30 GMT - Thu, 29 Jun 2023 10:01:29 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
OPTIONS /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://rewardarium.com/
Origin: https://rewardarium.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 23:20:51 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://rewardarium.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
amunfezanttor.com/event
200 OK 94 B IP
Requested by https://rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
Certificate IssuerLet's Encrypt
Subjectamunfezanttor.com
Fingerprint06:75:EF:D1:99:AE:A5:FA:8B:93:D3:D4:ED:BD:88:51:DA:2A:62:B3
ValidityFri, 31 Mar 2023 10:01:30 GMT - Thu, 29 Jun 2023 10:01:29 GMT
File type JSON data\012- , ASCII text
Hash 1eea8f542216c6552d54db9be2bf8a63
37ad12bdb87aa1b5fcca03ebdf3b79ee6ab1b800
2375aa581c5e3771e65e59b5daabfe712edec636ff019b3432e807701d2ad60f
Analyzer Verdict Alert quad9 Sinkholed
POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rewardarium.com/
Content-Type: application/json
Content-Length: 616
Origin: https://rewardarium.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 23:20:51 GMT
content-type: application/json; charset=utf-8
content-length: 94
x-trace-id: b0cde8c6adf70b8cdd52fe58f065762c
access-control-allow-origin: https://rewardarium.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
niwooghu.com/500/5776801?excludes=&oaid=00c6dd941f5c41fabdecfb340dc6fd80&var=zd_5833048&ymid=687914513426821995&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&pl=https%3A%2F%2Frewardarium.com%2F%3Fvar%3Dzd_5833048%26ar%3D1%26pb%3D3%26ymid%3D687914513426821995%26source%3D726858ccd4%26ret%3Dnull%26acb%3Dproxy%26axcusid2%3DSweepstakes%26axadvid%3D3599371%26axcamid%3D9357&drf=https%3A%2F%2Fcdntechone.com%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
200 OK 0 B URL OPTIONS HTTP/2 niwooghu.com/500/5776801?excludes=&oaid=00c6dd941f5c41fabdecfb340dc6fd80&var=zd_5833048&ymid=687914513426821995&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&pl=https%3A%2F%2Frewardarium.com%2F%3Fvar%3Dzd_5833048%26ar%3D1%26pb%3D3%26ymid%3D687914513426821995%26source%3D726858ccd4%26ret%3Dnull%26acb%3Dproxy%26axcusid2%3DSweepstakes%26axadvid%3D3599371%26axcamid%3D9357&drf=https%3A%2F%2Fcdntechone.com%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
Requested by https://rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
Certificate IssuerLet's Encrypt
Subjectniwooghu.com
FingerprintD6:61:D9:C1:16:B4:4D:E5:88:E3:06:BA:A2:09:52:99:B6:CE:9B:CF
ValiditySat, 06 May 2023 05:15:47 GMT - Fri, 04 Aug 2023 05:15:46 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /500/5776801?excludes=&oaid=00c6dd941f5c41fabdecfb340dc6fd80&var=zd_5833048&ymid=687914513426821995&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&pl=https%3A%2F%2Frewardarium.com%2F%3Fvar%3Dzd_5833048%26ar%3D1%26pb%3D3%26ymid%3D687914513426821995%26source%3D726858ccd4%26ret%3Dnull%26acb%3Dproxy%26axcusid2%3DSweepstakes%26axadvid%3D3599371%26axcamid%3D9357&drf=https%3A%2F%2Fcdntechone.com%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: niwooghu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://rewardarium.com/
Origin: https://rewardarium.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 23:20:51 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://rewardarium.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-allow-credentials: true
access-control-max-age: 600
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
offerimage.com/www/images/c203639f459b6e675afc744dd5393fc6.jpeg
200 OK 11 kB URL GET HTTP/2 offerimage.com/www/images/c203639f459b6e675afc744dd5393fc6.jpeg
IP
Requested by https://rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintDB:4D:42:F8:E2:4C:E3:E4:BB:22:D8:D1:F7:64:B5:9A:10:B6:25:E0
ValiditySun, 07 May 2023 00:00:00 GMT - Mon, 06 May 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3\012- data
Hash c203639f459b6e675afc744dd5393fc6
c83a0142c1a7f6a07c2dd360243197a27f560932
64b4e386658d3f5764261f576a4673eb506fcad5e38e69ef085723f8dab72263
GET /www/images/c203639f459b6e675afc744dd5393fc6.jpeg HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rewardarium.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 31 May 2023 23:20:51 GMT
content-type: image/jpeg
content-length: 10857
cache-control: max-age=86400
cf-bgj: h2pri
etag: "6388849a-2a69"
expires: Thu, 01 Jun 2023 06:46:40 GMT
last-modified: Thu, 01 Dec 2022 10:40:26 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 59651
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d02f3291ec798fd-ARN
X-Firefox-Spdy: h2
cdn-adef.akamaized.net/landings/277419/1669995966/js/backoffer.js?1669995966
200 OK 430 B URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/277419/1669995966/js/backoffer.js?1669995966
IP
ASN #20940 Akamai International B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5776779
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint7B:62:AB:D4:32:FB:D8:97:04:07:9A:AB:8E:BE:E6:48:AE:5C:8D:37
ValidityTue, 28 Jun 2022 00:00:00 GMT - Fri, 30 Jun 2023 23:59:59 GMT
File type ASCII text, with very long lines (430), with no line terminators
Hash 6d5aa83d23ce0b9f72d3b87d000d8fae
034fb8768eb58ffc0b5849e2c162989741a6cbec
89266112a6c823b9c03dd5a32d8f1c5e9f4cbf4cf876b56c825781ea389d0800
GET /landings/277419/1669995966/js/backoffer.js?1669995966 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: v1f1Ns7fb7Q4cR2Ntee8ybeaybY18IfPH9BqwE0dAo018VonckiRUPfeBvuUVrbfV7OT2dETY8k=
x-amz-request-id: YXPPYDEP11K3TXZJ
Last-Modified: Fri, 02 Dec 2022 15:46:08 GMT
ETag: "6d5aa83d23ce0b9f72d3b87d000d8fae"
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Content-Length: 430
Date: Wed, 31 May 2023 23:20:51 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdntechone.com/stattag.js
200 OK 43 kB URL GET HTTP/2 cdntechone.com/stattag.js
IP
Requested by https://rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint22:B1:48:87:A8:EF:B2:9B:65:EB:D6:C6:FD:8D:EF:A7:A7:DE:52:29
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (17871)
Hash 0fdff67feab23cc69ecfb6800fc54cb7
eb84c650e6d27e290795207b1f37dd7b67f2aa06
456e420aecd5ac679cc2bcb33daf7c063f54894fd076e99e05c06629234d3378
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rewardarium.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 31 May 2023 23:20:50 GMT
content-type: application/javascript
last-modified: Fri, 19 May 2023 08:43:53 GMT
etag: W/"646736c9-4859"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 4725
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F92yykveyzLEc89L5Fch8MJO%2BrbxrTA8O7MUQdpelUgaAYlBC5kldxyBTLLWn0GLpKtbjfb5CM6LuNu6YjYOlIuBbRNX%2Bfm0XZCARgjNew6q%2Ft063qH4cL1Aguhx%2FAMvpg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d02f3223f32b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn-adef.akamaized.net/landings/277419/1669995966/js/secondofferv2.js?1669995966
200 OK 454 B URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/277419/1669995966/js/secondofferv2.js?1669995966
IP
ASN #20940 Akamai International B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5776779
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint7B:62:AB:D4:32:FB:D8:97:04:07:9A:AB:8E:BE:E6:48:AE:5C:8D:37
ValidityTue, 28 Jun 2022 00:00:00 GMT - Fri, 30 Jun 2023 23:59:59 GMT
Hash 9bbe216b8e526fd98d219f2b91ccaa57
3f5d1be91ba58b6501c022155fe6778ce82b1663
1c83d2863f746a234e46c5578826ceeb8cbe126bc4c274ca679295441c44b948
GET /landings/277419/1669995966/js/secondofferv2.js?1669995966 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: xT1VfiD/gDu7mGS2SB+4fEAa7xPf3tUn5q0B+kr1Sn6JzaJm3G2pSjcldU0dUusQrkTB3yljSMc=
x-amz-request-id: YXPMHDVQP0FEF9C8
Last-Modified: Fri, 02 Dec 2022 15:46:09 GMT
ETag: "9bbe216b8e526fd98d219f2b91ccaa57"
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Wed, 31 May 2023 23:20:51 GMT
Content-Length: 454
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn-adef.akamaized.net/landings/277419/1669995966/js/MB_push_NEW.js?1669995966
200 OK 671 B URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/277419/1669995966/js/MB_push_NEW.js?1669995966
IP
ASN #20940 Akamai International B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5776779
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint7B:62:AB:D4:32:FB:D8:97:04:07:9A:AB:8E:BE:E6:48:AE:5C:8D:37
ValidityTue, 28 Jun 2022 00:00:00 GMT - Fri, 30 Jun 2023 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 533a9cb9c41907529c3d603edb25d5d9
222bee472465971cf71bfa210d04136eb765ccc0
45d257677164ebc2c1fd4ff44b4ee5a1ce9c87682f165836a3e38113d1e09eaf
GET /landings/277419/1669995966/js/MB_push_NEW.js?1669995966 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: RCvhgqsVseFmfOXEnKcVyncLyjtIYNVqpZ/z9pJWd1fKjKPSySK/XYR9gYQ7bawk+9MXb9U41pw=
x-amz-request-id: 3N3F0T1ZDTHRAQZC
Last-Modified: Fri, 02 Dec 2022 15:46:09 GMT
ETag: "533a9cb9c41907529c3d603edb25d5d9"
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Content-Length: 671
Date: Wed, 31 May 2023 23:20:51 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn-adef.akamaized.net/landings/277419/1669995966/js/jquery.min.js?1669995966
200 OK 30 kB URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/277419/1669995966/js/jquery.min.js?1669995966
IP
ASN #20940 Akamai International B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5776779
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint7B:62:AB:D4:32:FB:D8:97:04:07:9A:AB:8E:BE:E6:48:AE:5C:8D:37
ValidityTue, 28 Jun 2022 00:00:00 GMT - Fri, 30 Jun 2023 23:59:59 GMT
File type ASCII text, with very long lines (32065)
Hash 2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /landings/277419/1669995966/js/jquery.min.js?1669995966 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: 1tdB4q9dfEQd1bC2mMotNqHRjbCEGQ0QDcnXBc8wgZ/gJd828utRw69oHtptMEmurgXovUOoufU=
x-amz-request-id: 3N39SVF38SJ7N63Y
Last-Modified: Fri, 02 Dec 2022 15:46:08 GMT
ETag: "2f6b11a7e914718e0290410e85366fe9"
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Wed, 31 May 2023 23:20:51 GMT
Content-Length: 29855
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn-adef.akamaized.net/landings/277419/1669995966/js/main.js?1669995966
200 OK 40 kB URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/277419/1669995966/js/main.js?1669995966
IP
ASN #20940 Akamai International B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5776779
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint7B:62:AB:D4:32:FB:D8:97:04:07:9A:AB:8E:BE:E6:48:AE:5C:8D:37
ValidityTue, 28 Jun 2022 00:00:00 GMT - Fri, 30 Jun 2023 23:59:59 GMT
File type ASCII text, with very long lines (568), with CRLF line terminators
Hash a0f4da40bd81c65d824afc106743d47f
55b2d4c57fdb017314f62ac2fe8a3e287dcadf7f
e40e7cc368c897d6a3a5095fae6ccd6d9a3f88af5ef9c590f79b9fd22293ad10
GET /landings/277419/1669995966/js/main.js?1669995966 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: f+QX96vu+ApDvIrT4YH3Pyrk61kjWPQIIMeKbfQF6nz+0w0be+Npchhi1miy2Nc9CT7ymeeejGQ=
x-amz-request-id: 3N3CJF20S2DP1V3Q
Last-Modified: Fri, 02 Dec 2022 15:46:08 GMT
ETag: "a0f4da40bd81c65d824afc106743d47f"
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Wed, 31 May 2023 23:20:51 GMT
Content-Length: 40511
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn-adef.akamaized.net/landings/277419/1669995966/images/bg.gif
200 OK 3.0 MB URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/277419/1669995966/images/bg.gif
IP
ASN #20940 Akamai International B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5776779
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint7B:62:AB:D4:32:FB:D8:97:04:07:9A:AB:8E:BE:E6:48:AE:5C:8D:37
ValidityTue, 28 Jun 2022 00:00:00 GMT - Fri, 30 Jun 2023 23:59:59 GMT
File type GIF image data, version 89a, 403 x 655\012- data
Size 3.0 MB (3015268 bytes)
Hash 49a2459c98974c49e78e4838a8a91020
3878cc447715455a199246de7621930bb94c0671
f27c1915d07f59b1040092c6eb696a4e450b3e70ab4988234c9c5911d3b07aef
GET /landings/277419/1669995966/images/bg.gif HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn-adef.akamaized.net/landings/277419/1669995966/css/stylesheet.css?1669995966
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: dqtHzzMTHxoqMqy5ok0cr6i0XG3miiPWIrtYO3x5nFs+znKJ/KDBo/Xj41Rdn7xfILmb3eKnrE4=
x-amz-request-id: 7P31F2ZV9F2FJ8SM
Last-Modified: Fri, 02 Dec 2022 15:46:08 GMT
ETag: "49a2459c98974c49e78e4838a8a91020"
Accept-Ranges: bytes
Content-Type: image/gif
Server: AmazonS3
Content-Length: 3015268
Date: Wed, 31 May 2023 23:20:51 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
www.googletagmanager.com/gtm.js?id=GTM-MLVPDTJ
200 OK 56 kB URL GET HTTP/3 www.googletagmanager.com/gtm.js?id=GTM-MLVPDTJ
IP
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5776779
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintEB:A2:AF:B3:20:F1:B1:77:23:0B:85:D2:B1:16:33:A7:97:49:EE:51
ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT
File type ASCII text, with very long lines (4691)
Hash c7932877087dd900d76eba487682d017
cf16964d2a79965ed540f100c99701a8bf4513f9
9c528eb84d75808eede625b73c81a7835468e233bb3a668f78e48172548b7809
GET /gtm.js?id=GTM-MLVPDTJ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 31 May 2023 23:20:51 GMT
expires: Wed, 31 May 2023 23:20:51 GMT
cache-control: private, max-age=900
last-modified: Wed, 31 May 2023 22:36:28 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 55545
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/firebasejs/5.0.2/firebase-app.js
200 OK 8.6 kB URL GET HTTP/2 www.gstatic.com/firebasejs/5.0.2/firebase-app.js
IP
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5776779
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT
File type ASCII text, with very long lines (25088)
Hash 9164d0e8a317eceb870cca88c9683127
4617c910005f7100b4ff26a458a8b4463e33cdc6
15c9bd66992ef54979c981763cae280f28b6845520020ed38b5ab5f3f70f7931
GET /firebasejs/5.0.2/firebase-app.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 8604
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 30 May 2023 17:31:35 GMT
expires: Wed, 29 May 2024 17:31:35 GMT
cache-control: public, max-age=31536000
age: 107356
last-modified: Thu, 10 May 2018 20:35:51 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/firebasejs/5.0.2/firebase-messaging.js
200 OK 10 kB URL GET HTTP/2 www.gstatic.com/firebasejs/5.0.2/firebase-messaging.js
IP
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5776779
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT
File type ASCII text, with very long lines (35547)
Hash 0cb7a0eb328ea70ab360f861314c8820
e3e20eb50dae36f4cbcef1890b1cc7878acb537a
4569845f7c550a55311814032e88541bd3b4a055ec3894e9cf58c4fff1be91d9
GET /firebasejs/5.0.2/firebase-messaging.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 10017
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 30 May 2023 21:40:29 GMT
expires: Wed, 29 May 2024 21:40:29 GMT
cache-control: public, max-age=31536000
age: 92422
last-modified: Thu, 10 May 2018 20:35:52 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
syndication.exdynsrv.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=244721475
200 OK 20 B URL GET HTTP/1.1 syndication.exdynsrv.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=244721475
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5776779
Certificate IssuerLet's Encrypt
Subjectexdynsrv.com
Fingerprint88:9B:CC:F7:80:AC:5C:5A:6E:76:34:08:8B:FE:79:1A:CE:1F:8E:D6
ValidityTue, 09 May 2023 12:38:11 GMT - Mon, 07 Aug 2023 12:38:10 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=244721475 HTTP/1.1
Host: syndication.exdynsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 31 May 2023 23:20:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A71748%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-05-31%22%3B%7D%7D; expires=Thu, 30 May 2024 23:20:51 GMT; path=/; domain=.exdynsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
syndication.realsrv.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=1824108620
200 OK 20 B URL GET HTTP/1.1 syndication.realsrv.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=1824108620
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5776779
Certificate IssuerLet's Encrypt
Subjectrealsrv.com
FingerprintDA:82:DD:C1:53:3F:CA:F0:02:97:FF:72:0C:91:7E:D4:08:8E:0A:64
ValidityTue, 09 May 2023 12:55:24 GMT - Mon, 07 Aug 2023 12:55:23 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=1824108620 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 31 May 2023 23:20:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A71748%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-05-31%22%3B%7D%7D; expires=Thu, 30 May 2024 23:20:51 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
psaudous.com/4/5776779/?ymid=687914513426821995&var=zd_5833048&var3=726858ccd4
200 OK 18 kB URL GET HTTP/2 psaudous.com/4/5776779/?ymid=687914513426821995&var=zd_5833048&var3=726858ccd4
IP
Requested by https://rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
Certificate IssuerLet's Encrypt
Subjectpsaudous.com
Fingerprint74:1B:0B:1B:1B:A5:B9:16:B3:8D:1B:39:D1:7D:7D:00:8A:53:AB:D0
ValidityThu, 23 Mar 2023 05:13:48 GMT - Wed, 21 Jun 2023 05:13:47 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash ae07e19634b81f70c9c386f99869c03c
d46032fa570ccedb4ce13deab2a587792dccfde0
7baaa07b4e5e68064830d5c2789ce9f137f4f35d8d6c5058c354f0b359616286
GET /4/5776779/?ymid=687914513426821995&var=zd_5833048&var3=726858ccd4 HTTP/1.1
Host: psaudous.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 23:20:50 GMT
content-type: text/html; charset=utf8
x-trace-id: 0d2f57a72b8e65d7374fb2c617a21b0e
link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch"
access-control-allow-credentials: true
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=00c6dd941f5c41fabdecfb340dc6fd80; expires=Thu, 30 May 2024 23:20:50 GMT; path=/; secure; SameSite=None
oaidts=1685575250; expires=Thu, 30 May 2024 23:20:50 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: *, *
access-control-allow-methods: GET, POST, OPTIONS, POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, Accept, Content-Type, Content-Length, Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
www.mysexymatches.com/js/pushjs/1.0.0/utils.js
200 OK 3.4 kB URL GET HTTP/2 www.mysexymatches.com/js/pushjs/1.0.0/utils.js
IP
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5776779
Certificate IssuerLet's Encrypt
Subject*.mysexymatches.com
Fingerprint7D:35:18:C7:41:6B:DC:68:1E:F2:FB:E0:71:F3:96:D3:FE:1A:B7:7C
ValiditySat, 20 May 2023 00:31:45 GMT - Fri, 18 Aug 2023 00:31:44 GMT
File type gzip compressed data, from Unix\012- data
Hash c63ea56fb36d3d69100cd095a29dea40
88b8ebf8133576707b65875639b7fe643698595e
fb13f62b4bac00a32cc349e6204965627c41a2d0ff491d5029d8fa507d760e48
GET /js/pushjs/1.0.0/utils.js HTTP/1.1
Host: www.mysexymatches.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5776779
Cookie: unique_id=6477d6530004b4ee; unique_id2=6477d6530004be3a; 6477d6530004be3a_sl=[277419]
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 23:20:51 GMT
content-type: application/javascript
expires: Wed, 07 Jun 2023 23:20:51 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
tsyndicate.com/api/v2/retargeting/set/57bd9f77-0f27-4a59-a866-cfcb44429b1d
200 OK 35 B URL GET HTTP/2 tsyndicate.com/api/v2/retargeting/set/57bd9f77-0f27-4a59-a866-cfcb44429b1d
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5776779
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
Fingerprint65:46:F2:D7:A3:CC:E8:43:98:8C:E3:BE:EC:0D:A8:2B:E6:9B:AE:1A
ValidityFri, 12 May 2023 09:06:40 GMT - Thu, 10 Aug 2023 09:06:39 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /api/v2/retargeting/set/57bd9f77-0f27-4a59-a866-cfcb44429b1d HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 23:20:52 GMT
content-type: text/plain; charset=utf-8
content-length: 35
pragma: no-cache
expires: 0
vary: *
x-api-version: 2
x-request-id: 6f6fe2e0853cbb03
set-cookie: ts_rt_57bd9f77-0f27-4a59-a866-cfcb44429b1d=AAMC; expires=Thu, 30 May 2024 23:20:52 GMT; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2
niwooghu.com/impression/69uAhYkYMyC5LuKNEkoxSa-bAiPEdoDVfdxVExXTrC2UzW4zDCyhngJ6q9wZ_kKe5aUAySgFNsL3L-MT9b2hfY-Swc2NeYQcY4vW7j5HiNiAs3tIINTfUik057fz8l8T5r0K-m075QdhoeKvcYinqp0Ze7fEB41u1yS-GChtwvGih0DBS6wDoTrV2FjdPyz89zwU-41LAZCZJmpY6JOdXKOG6nzcHEJBgADvbNNi9gTy8KTPJAMI2vHbHILfxHlbWyCvTgRHB_NKlPnDOnuQ9NaQZDW9sbe_pw3W27qPhRgf7ZTamHDipyFW7DQPAqNhEp0bVIWD-fE4dUsU4HOKxu0uWzFkxK3_TLECT5nYyMhBCTyAv2QSXjfgOxd5xj8FEvk4P1-JJDw2Hj9FjpaQgJFWbEzC0p6k5jsG6ugXX5D01nE8_0JO2nYfRIElElDwjuvwmcJZmrZ1_GLg63S8s-8JhRfRMW2SosNf0MNaGKVJTVmZSJpAJQsdh37sPVo78Poen6K--8SN8M4YXERaS68Qjp9q9kZvvCscIzifl2hl5XF-ah_ZcdKtUSyYHT4345ZLU3aRVAwcnfsJO9Yz4pMdWluy-7m1fG93VUB3BsRvse6C4-0Tj5-kThd_8GXQ?_z=5776801&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&pl=https%3A%2F%2Frewardarium.com%2F%3Fvar%3Dzd_5833048%26ar%3D1%26pb%3D3%26ymid%3D687914513426821995%26source%3D726858ccd4%26ret%3Dnull%26acb%3Dproxy%26axcusid2%3DSweepstakes%26axadvid%3D3599371%26axcamid%3D9357&drf=https%3A%2F%2Fcdntechone.com%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
200 OK 43 B URL GET HTTP/2 niwooghu.com/impression/69uAhYkYMyC5LuKNEkoxSa-bAiPEdoDVfdxVExXTrC2UzW4zDCyhngJ6q9wZ_kKe5aUAySgFNsL3L-MT9b2hfY-Swc2NeYQcY4vW7j5HiNiAs3tIINTfUik057fz8l8T5r0K-m075QdhoeKvcYinqp0Ze7fEB41u1yS-GChtwvGih0DBS6wDoTrV2FjdPyz89zwU-41LAZCZJmpY6JOdXKOG6nzcHEJBgADvbNNi9gTy8KTPJAMI2vHbHILfxHlbWyCvTgRHB_NKlPnDOnuQ9NaQZDW9sbe_pw3W27qPhRgf7ZTamHDipyFW7DQPAqNhEp0bVIWD-fE4dUsU4HOKxu0uWzFkxK3_TLECT5nYyMhBCTyAv2QSXjfgOxd5xj8FEvk4P1-JJDw2Hj9FjpaQgJFWbEzC0p6k5jsG6ugXX5D01nE8_0JO2nYfRIElElDwjuvwmcJZmrZ1_GLg63S8s-8JhRfRMW2SosNf0MNaGKVJTVmZSJpAJQsdh37sPVo78Poen6K--8SN8M4YXERaS68Qjp9q9kZvvCscIzifl2hl5XF-ah_ZcdKtUSyYHT4345ZLU3aRVAwcnfsJO9Yz4pMdWluy-7m1fG93VUB3BsRvse6C4-0Tj5-kThd_8GXQ?_z=5776801&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&pl=https%3A%2F%2Frewardarium.com%2F%3Fvar%3Dzd_5833048%26ar%3D1%26pb%3D3%26ymid%3D687914513426821995%26source%3D726858ccd4%26ret%3Dnull%26acb%3Dproxy%26axcusid2%3DSweepstakes%26axadvid%3D3599371%26axcamid%3D9357&drf=https%3A%2F%2Fcdntechone.com%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
Requested by https://rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
Certificate IssuerLet's Encrypt
Subjectniwooghu.com
FingerprintD6:61:D9:C1:16:B4:4D:E5:88:E3:06:BA:A2:09:52:99:B6:CE:9B:CF
ValiditySat, 06 May 2023 05:15:47 GMT - Fri, 04 Aug 2023 05:15:46 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /impression/69uAhYkYMyC5LuKNEkoxSa-bAiPEdoDVfdxVExXTrC2UzW4zDCyhngJ6q9wZ_kKe5aUAySgFNsL3L-MT9b2hfY-Swc2NeYQcY4vW7j5HiNiAs3tIINTfUik057fz8l8T5r0K-m075QdhoeKvcYinqp0Ze7fEB41u1yS-GChtwvGih0DBS6wDoTrV2FjdPyz89zwU-41LAZCZJmpY6JOdXKOG6nzcHEJBgADvbNNi9gTy8KTPJAMI2vHbHILfxHlbWyCvTgRHB_NKlPnDOnuQ9NaQZDW9sbe_pw3W27qPhRgf7ZTamHDipyFW7DQPAqNhEp0bVIWD-fE4dUsU4HOKxu0uWzFkxK3_TLECT5nYyMhBCTyAv2QSXjfgOxd5xj8FEvk4P1-JJDw2Hj9FjpaQgJFWbEzC0p6k5jsG6ugXX5D01nE8_0JO2nYfRIElElDwjuvwmcJZmrZ1_GLg63S8s-8JhRfRMW2SosNf0MNaGKVJTVmZSJpAJQsdh37sPVo78Poen6K--8SN8M4YXERaS68Qjp9q9kZvvCscIzifl2hl5XF-ah_ZcdKtUSyYHT4345ZLU3aRVAwcnfsJO9Yz4pMdWluy-7m1fG93VUB3BsRvse6C4-0Tj5-kThd_8GXQ?_z=5776801&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&pl=https%3A%2F%2Frewardarium.com%2F%3Fvar%3Dzd_5833048%26ar%3D1%26pb%3D3%26ymid%3D687914513426821995%26source%3D726858ccd4%26ret%3Dnull%26acb%3Dproxy%26axcusid2%3DSweepstakes%26axadvid%3D3599371%26axcamid%3D9357&drf=https%3A%2F%2Fcdntechone.com%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: niwooghu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rewardarium.com/
DNT: 1
Connection: keep-alive
Cookie: OAID=00c6dd941f5c41fabdecfb340dc6fd80
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 23:20:52 GMT
content-type: image/gif
content-length: 43
x-trace-id: d7806d48992362a64214f054e9ce489d
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
niwooghu.com/500/5776801?excludes=16368911&oaid=00c6dd941f5c41fabdecfb340dc6fd80&var=zd_5833048&ymid=687914513426821995&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Frewardarium.com%2F%3Fvar%3Dzd_5833048%26ar%3D1%26pb%3D3%26ymid%3D687914513426821995%26source%3D726858ccd4%26ret%3Dnull%26acb%3Dproxy%26axcusid2%3DSweepstakes%26axadvid%3D3599371%26axcamid%3D9357&drf=https%3A%2F%2Fcdntechone.com%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
200 OK 0 B URL OPTIONS HTTP/2 niwooghu.com/500/5776801?excludes=16368911&oaid=00c6dd941f5c41fabdecfb340dc6fd80&var=zd_5833048&ymid=687914513426821995&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Frewardarium.com%2F%3Fvar%3Dzd_5833048%26ar%3D1%26pb%3D3%26ymid%3D687914513426821995%26source%3D726858ccd4%26ret%3Dnull%26acb%3Dproxy%26axcusid2%3DSweepstakes%26axadvid%3D3599371%26axcamid%3D9357&drf=https%3A%2F%2Fcdntechone.com%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
Requested by https://rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
Certificate IssuerLet's Encrypt
Subjectniwooghu.com
FingerprintD6:61:D9:C1:16:B4:4D:E5:88:E3:06:BA:A2:09:52:99:B6:CE:9B:CF
ValiditySat, 06 May 2023 05:15:47 GMT - Fri, 04 Aug 2023 05:15:46 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /500/5776801?excludes=16368911&oaid=00c6dd941f5c41fabdecfb340dc6fd80&var=zd_5833048&ymid=687914513426821995&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Frewardarium.com%2F%3Fvar%3Dzd_5833048%26ar%3D1%26pb%3D3%26ymid%3D687914513426821995%26source%3D726858ccd4%26ret%3Dnull%26acb%3Dproxy%26axcusid2%3DSweepstakes%26axadvid%3D3599371%26axcamid%3D9357&drf=https%3A%2F%2Fcdntechone.com%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: niwooghu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://rewardarium.com/
Origin: https://rewardarium.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 23:20:52 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://rewardarium.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-allow-credentials: true
access-control-max-age: 600
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
niwooghu.com/500/5776801?excludes=16368911&oaid=00c6dd941f5c41fabdecfb340dc6fd80&var=zd_5833048&ymid=687914513426821995&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Frewardarium.com%2F%3Fvar%3Dzd_5833048%26ar%3D1%26pb%3D3%26ymid%3D687914513426821995%26source%3D726858ccd4%26ret%3Dnull%26acb%3Dproxy%26axcusid2%3DSweepstakes%26axadvid%3D3599371%26axcamid%3D9357&drf=https%3A%2F%2Fcdntechone.com%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
200 OK 14 kB URL OPTIONS HTTP/2 niwooghu.com/500/5776801?excludes=16368911&oaid=00c6dd941f5c41fabdecfb340dc6fd80&var=zd_5833048&ymid=687914513426821995&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Frewardarium.com%2F%3Fvar%3Dzd_5833048%26ar%3D1%26pb%3D3%26ymid%3D687914513426821995%26source%3D726858ccd4%26ret%3Dnull%26acb%3Dproxy%26axcusid2%3DSweepstakes%26axadvid%3D3599371%26axcamid%3D9357&drf=https%3A%2F%2Fcdntechone.com%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
Requested by https://rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
Certificate IssuerLet's Encrypt
Subjectniwooghu.com
FingerprintD6:61:D9:C1:16:B4:4D:E5:88:E3:06:BA:A2:09:52:99:B6:CE:9B:CF
ValiditySat, 06 May 2023 05:15:47 GMT - Fri, 04 Aug 2023 05:15:46 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 6a26ebf9db2934fe6acc3f16a8ef1acf
fd8c20c8a391a464095260f7a99b4eb3983a9dd2
355ba98c23bf4870d4829d21037d50f4a451a267ceb1c9f2d706a242377377a0
GET /500/5776801?excludes=16368911&oaid=00c6dd941f5c41fabdecfb340dc6fd80&var=zd_5833048&ymid=687914513426821995&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Frewardarium.com%2F%3Fvar%3Dzd_5833048%26ar%3D1%26pb%3D3%26ymid%3D687914513426821995%26source%3D726858ccd4%26ret%3Dnull%26acb%3Dproxy%26axcusid2%3DSweepstakes%26axadvid%3D3599371%26axcamid%3D9357&drf=https%3A%2F%2Fcdntechone.com%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: niwooghu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rewardarium.com/
Content-Type: application/json
Origin: https://rewardarium.com
DNT: 1
Connection: keep-alive
Cookie: OAID=00c6dd941f5c41fabdecfb340dc6fd80
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 23:20:53 GMT
content-type: application/javascript
x-trace-id: 371cf14648ada46f9c4287e428005ee6
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
vary: Origin
access-control-allow-origin: https://rewardarium.com
access-control-expose-headers: Link
access-control-allow-credentials: true
set-cookie: OAID=00c6dd941f5c41fabdecfb340dc6fd80; expires=Thu, 30 May 2024 23:20:52 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
offerimage.com/www/images/c203639f459b6e675afc744dd5393fc6.jpeg
200 OK 11 kB URL GET HTTP/2 offerimage.com/www/images/c203639f459b6e675afc744dd5393fc6.jpeg
IP
Requested by https://rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintDB:4D:42:F8:E2:4C:E3:E4:BB:22:D8:D1:F7:64:B5:9A:10:B6:25:E0
ValiditySun, 07 May 2023 00:00:00 GMT - Mon, 06 May 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3\012- data
Hash c203639f459b6e675afc744dd5393fc6
c83a0142c1a7f6a07c2dd360243197a27f560932
64b4e386658d3f5764261f576a4673eb506fcad5e38e69ef085723f8dab72263
GET /www/images/c203639f459b6e675afc744dd5393fc6.jpeg HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 31 May 2023 23:20:53 GMT
content-type: image/jpeg
content-length: 10857
cache-control: max-age=86400
cf-bgj: h2pri
etag: "6388849a-2a69"
expires: Thu, 01 Jun 2023 06:46:40 GMT
last-modified: Thu, 01 Dec 2022 10:40:26 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 59653
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d02f3343ccd98fd-ARN
X-Firefox-Spdy: h2
niwooghu.com/impression/4vnmTf_T-I2gyiELHod_SVEXDuguQHMbk_AMaPqgHay7hp-dQ6n5N9isuXaMPMkAudPVyLfeSGW0r8W069Iyfi6L14IzBPEmCRT1kvaDKfKFM_RgUVLtSzyoqPSsk7mG2vd2tkiN1QO_fVQ6MyVHHecB6VMWlCAG2u2UJqbjvmdptRDTyQbtKhF8pSh3VpqRxnmLKv3tD7BpfF0dMkeISiR5MhBOSBFQHoozQXJsY1HNurQ8ON13RcBfGkqVBLRstgnncxm2UyAYRhmfehnIC8gLPoaA5uJpsOzfaf3kOQoMxemxCVvu28CvSL6UcdZDALK2I_RU20n9Us6lvHZZOdUnchQCgvsCmWpEF-XhRl9MQaiuzrWL9_uGcRkIhr6Fx2zxS-7WkdDHdpiD_j-aSMifNjFWtQgkgcrErRqBVLxikNqAgNFQhQiY2VItVYn95bwlGA_Rp-lSXvn9j1tq9D6GQn2-Mn2ezy0H31BBMpVq-HjtGa7nEg4nUY7n-14YJRemsQNGsk9_lvgO8-VAUPUCYoThyJj-jQ3zOjHwkvJon03gdjScVnuvgzfPGw-jll5iuEkPEcpu_3kzUlOz3Vd7lKgcBwaC06jNjCliObT6VUrph6KYXucpyO2g_8hP?_z=5776801&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Frewardarium.com%2F%3Fvar%3Dzd_5833048%26ar%3D1%26pb%3D3%26ymid%3D687914513426821995%26source%3D726858ccd4%26ret%3Dnull%26acb%3Dproxy%26axcusid2%3DSweepstakes%26axadvid%3D3599371%26axcamid%3D9357&drf=https%3A%2F%2Fcdntechone.com%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
200 OK 43 B URL GET HTTP/2 niwooghu.com/impression/4vnmTf_T-I2gyiELHod_SVEXDuguQHMbk_AMaPqgHay7hp-dQ6n5N9isuXaMPMkAudPVyLfeSGW0r8W069Iyfi6L14IzBPEmCRT1kvaDKfKFM_RgUVLtSzyoqPSsk7mG2vd2tkiN1QO_fVQ6MyVHHecB6VMWlCAG2u2UJqbjvmdptRDTyQbtKhF8pSh3VpqRxnmLKv3tD7BpfF0dMkeISiR5MhBOSBFQHoozQXJsY1HNurQ8ON13RcBfGkqVBLRstgnncxm2UyAYRhmfehnIC8gLPoaA5uJpsOzfaf3kOQoMxemxCVvu28CvSL6UcdZDALK2I_RU20n9Us6lvHZZOdUnchQCgvsCmWpEF-XhRl9MQaiuzrWL9_uGcRkIhr6Fx2zxS-7WkdDHdpiD_j-aSMifNjFWtQgkgcrErRqBVLxikNqAgNFQhQiY2VItVYn95bwlGA_Rp-lSXvn9j1tq9D6GQn2-Mn2ezy0H31BBMpVq-HjtGa7nEg4nUY7n-14YJRemsQNGsk9_lvgO8-VAUPUCYoThyJj-jQ3zOjHwkvJon03gdjScVnuvgzfPGw-jll5iuEkPEcpu_3kzUlOz3Vd7lKgcBwaC06jNjCliObT6VUrph6KYXucpyO2g_8hP?_z=5776801&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Frewardarium.com%2F%3Fvar%3Dzd_5833048%26ar%3D1%26pb%3D3%26ymid%3D687914513426821995%26source%3D726858ccd4%26ret%3Dnull%26acb%3Dproxy%26axcusid2%3DSweepstakes%26axadvid%3D3599371%26axcamid%3D9357&drf=https%3A%2F%2Fcdntechone.com%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
Requested by https://rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
Certificate IssuerLet's Encrypt
Subjectniwooghu.com
FingerprintD6:61:D9:C1:16:B4:4D:E5:88:E3:06:BA:A2:09:52:99:B6:CE:9B:CF
ValiditySat, 06 May 2023 05:15:47 GMT - Fri, 04 Aug 2023 05:15:46 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /impression/4vnmTf_T-I2gyiELHod_SVEXDuguQHMbk_AMaPqgHay7hp-dQ6n5N9isuXaMPMkAudPVyLfeSGW0r8W069Iyfi6L14IzBPEmCRT1kvaDKfKFM_RgUVLtSzyoqPSsk7mG2vd2tkiN1QO_fVQ6MyVHHecB6VMWlCAG2u2UJqbjvmdptRDTyQbtKhF8pSh3VpqRxnmLKv3tD7BpfF0dMkeISiR5MhBOSBFQHoozQXJsY1HNurQ8ON13RcBfGkqVBLRstgnncxm2UyAYRhmfehnIC8gLPoaA5uJpsOzfaf3kOQoMxemxCVvu28CvSL6UcdZDALK2I_RU20n9Us6lvHZZOdUnchQCgvsCmWpEF-XhRl9MQaiuzrWL9_uGcRkIhr6Fx2zxS-7WkdDHdpiD_j-aSMifNjFWtQgkgcrErRqBVLxikNqAgNFQhQiY2VItVYn95bwlGA_Rp-lSXvn9j1tq9D6GQn2-Mn2ezy0H31BBMpVq-HjtGa7nEg4nUY7n-14YJRemsQNGsk9_lvgO8-VAUPUCYoThyJj-jQ3zOjHwkvJon03gdjScVnuvgzfPGw-jll5iuEkPEcpu_3kzUlOz3Vd7lKgcBwaC06jNjCliObT6VUrph6KYXucpyO2g_8hP?_z=5776801&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Frewardarium.com%2F%3Fvar%3Dzd_5833048%26ar%3D1%26pb%3D3%26ymid%3D687914513426821995%26source%3D726858ccd4%26ret%3Dnull%26acb%3Dproxy%26axcusid2%3DSweepstakes%26axadvid%3D3599371%26axcamid%3D9357&drf=https%3A%2F%2Fcdntechone.com%2F&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: niwooghu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rewardarium.com/
DNT: 1
Connection: keep-alive
Cookie: OAID=00c6dd941f5c41fabdecfb340dc6fd80
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 23:20:55 GMT
content-type: image/gif
content-length: 43
x-trace-id: 741cc9311e7904d85b525e4daeb307ac
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
offerimage.com/www/images/1355aa125a385056845e0ee1d5384e9a.jpeg
200 OK 13 kB URL GET HTTP/2 offerimage.com/www/images/1355aa125a385056845e0ee1d5384e9a.jpeg
IP
Requested by https://rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintDB:4D:42:F8:E2:4C:E3:E4:BB:22:D8:D1:F7:64:B5:9A:10:B6:25:E0
ValiditySun, 07 May 2023 00:00:00 GMT - Mon, 06 May 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3\012- data
Hash 1355aa125a385056845e0ee1d5384e9a
cfa5fd1b2dd6b299c0aecdf19fec3532ce4392ea
248797fff982ee400ab78ff6831182372f9ef8a6916364192ca0f30556577733
GET /www/images/1355aa125a385056845e0ee1d5384e9a.jpeg HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 31 May 2023 23:20:56 GMT
content-type: image/jpeg
content-length: 13093
cache-control: max-age=86400
cf-bgj: h2pri
etag: "6388849b-3325"
expires: Thu, 01 Jun 2023 07:25:37 GMT
last-modified: Thu, 01 Dec 2022 10:40:27 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 57319
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d02f346fdf298fd-ARN
X-Firefox-Spdy: h2
tzegilo.com/stattag.js
200 OK 18 kB IP
Requested by https://rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
Certificate IssuerGoogle Trust Services LLC
Subject*.tzegilo.com
FingerprintDF:12:8C:B5:F2:22:D6:BE:72:F3:C6:9A:FA:DD:9E:1F:4E:58:63:1E
ValidityTue, 11 Apr 2023 10:11:54 GMT - Mon, 10 Jul 2023 10:11:53 GMT
File type ASCII text, with very long lines (17479), with no line terminators
Hash dd2f9f2bb1e1c74b905556d0a7bc5545
0c831c8c56da8167b9e2dfd1d3eb3288348da85d
63f957dde1ae04a83eaff7e442e693725562c4aa1062bc072b7509640ec4f663
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rewardarium.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 31 May 2023 23:20:50 GMT
content-type: application/javascript
last-modified: Fri, 19 May 2023 08:43:59 GMT
etag: W/"646736cf-4447"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 4246
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o6J%2FbB35patnGZpgNh3gslaej7LxOKsyX0u%2FX5SRg8o0oSBPbfJv4IuuMuK7HBzkbw%2BNwffLu%2BE8vc0zYOxW2R5N0%2BPSzleniAybqXWuK1PYqRzmc90FmuvN32lQwA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d02f3259e9775cb-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.mysexymatches.com/js/pushjs/1.0.0/subscriber.js
200 OK 9.4 kB URL GET HTTP/2 www.mysexymatches.com/js/pushjs/1.0.0/subscriber.js
IP
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5776779
Certificate IssuerLet's Encrypt
Subject*.mysexymatches.com
Fingerprint7D:35:18:C7:41:6B:DC:68:1E:F2:FB:E0:71:F3:96:D3:FE:1A:B7:7C
ValiditySat, 20 May 2023 00:31:45 GMT - Fri, 18 Aug 2023 00:31:44 GMT
File type C source text\012- troff or preprocessor input, ASCII text, with very long lines (9653), with no line terminators
Hash 84b622eb79d84a20b4fb5d3e2e122e2a
73eb77325e2b070e36f393eb4db66fa5af549ac6
514e603036c84a1e1afbc3b0eb748362dbd294f6af16bf88637d7b27f7a224dc
GET /js/pushjs/1.0.0/subscriber.js HTTP/1.1
Host: www.mysexymatches.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5776779
Cookie: unique_id=6477d6530004b4ee; unique_id2=6477d6530004be3a; 6477d6530004be3a_sl=[277419]
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 23:20:51 GMT
content-type: application/javascript
expires: Wed, 07 Jun 2023 23:20:51 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
tsyndicate.com/api/v1/retargeting/set/57bd9f77-0f27-4a59-a866-cfcb44429b1d
200 OK 35 B URL GET HTTP/2 tsyndicate.com/api/v1/retargeting/set/57bd9f77-0f27-4a59-a866-cfcb44429b1d
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5776779
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
Fingerprint65:46:F2:D7:A3:CC:E8:43:98:8C:E3:BE:EC:0D:A8:2B:E6:9B:AE:1A
ValidityFri, 12 May 2023 09:06:40 GMT - Thu, 10 Aug 2023 09:06:39 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /api/v1/retargeting/set/57bd9f77-0f27-4a59-a866-cfcb44429b1d HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 23:20:52 GMT
content-type: text/plain; charset=utf-8
content-length: 35
pragma: no-cache
expires: 0
vary: *
x-api-version: 1
x-request-id: 11a059fe20185583
set-cookie: ts_rt_57bd9f77-0f27-4a59-a866-cfcb44429b1d=AAMC; expires=Thu, 30 May 2024 23:20:52 GMT; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2
stootsou.net/pfe/current/universal.min.js?v=3.1.436
200 OK 103 kB URL GET HTTP/2 stootsou.net/pfe/current/universal.min.js?v=3.1.436
IP
Requested by https://rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
Certificate IssuerLet's Encrypt
Subjectstootsou.net
Fingerprint8B:6D:C9:76:36:ED:10:46:55:21:54:23:8C:4E:AC:7D:02:17:DD:7C
ValiditySun, 26 Mar 2023 05:17:40 GMT - Sat, 24 Jun 2023 05:17:39 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 103 kB (103271 bytes)
Hash 1b123fd41baea32c1eb585b61dfa974a
79e249b08f2d60b923a335f0bd061fd0e4156cf8
738289e65a303f6c32178e4a0783cd1bf807628e20e522e7d84e7e764ea49f67
GET /pfe/current/universal.min.js?v=3.1.436 HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rewardarium.com/
Origin: https://rewardarium.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 23:20:50 GMT
content-type: application/javascript
last-modified: Tue, 30 May 2023 12:46:17 GMT
etag: W/"6475f019-19367"
access-control-allow-origin: https://rewardarium.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
stootsou.net/zone?pub=0&zone_id=5776812&is_mobile=false&domain=rewardarium.com&var=zd_5833048&ymid=687914513426821995&var_3=
200 OK 880 B URL GET HTTP/2 stootsou.net/zone?pub=0&zone_id=5776812&is_mobile=false&domain=rewardarium.com&var=zd_5833048&ymid=687914513426821995&var_3=
IP
Requested by https://rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
Certificate IssuerLet's Encrypt
Subjectstootsou.net
Fingerprint8B:6D:C9:76:36:ED:10:46:55:21:54:23:8C:4E:AC:7D:02:17:DD:7C
ValiditySun, 26 Mar 2023 05:17:40 GMT - Sat, 24 Jun 2023 05:17:39 GMT
File type troff or preprocessor input, ASCII text, with very long lines (977), with no line terminators
Hash 68a6d61d9ff42278711c88fd618e29d4
1f04e419443be2c8873674f409c2d4bea56f3b65
4c3d0bfc5902fe0f38cea1f82026458bad06ef57145999a5ddd6c0e23e33d5b9
GET /zone?pub=0&zone_id=5776812&is_mobile=false&domain=rewardarium.com&var=zd_5833048&ymid=687914513426821995&var_3= HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rewardarium.com/
Origin: https://rewardarium.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 23:20:50 GMT
content-type: application/json; charset=utf-8
content-length: 880
x-trace-id: 619448b2673f6f69fe5b5273ef3576e1
access-control-allow-origin: https://rewardarium.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
s.exv6.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=350574637
200 OK 0 B URL GET HTTP/1.1 s.exv6.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=350574637
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5776779
Certificate IssuerLet's Encrypt
Subjectexv6.com
Fingerprint95:DF:82:34:08:E0:F8:A7:24:C5:64:DB:75:CB:C7:E5:8D:E1:4D:6E
ValidityTue, 09 May 2023 12:39:36 GMT - Mon, 07 Aug 2023 12:39:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=350574637 HTTP/1.1
Host: s.exv6.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 31 May 2023 23:20:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A71748%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-05-31%22%3B%7D%7D; expires=Thu, 30 May 2024 23:20:51 GMT; path=/; domain=.exv6.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
rewardarium.com/sw.js
200 OK 5.2 kB IP
Requested by https://rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
Certificate IssuerLet's Encrypt
Subjectrewardarium.com
FingerprintE9:09:05:81:43:DE:42:13:8F:E6:CA:66:34:30:0C:F1:2C:8D:E1:7E
ValidityThu, 06 Apr 2023 14:36:16 GMT - Wed, 05 Jul 2023 14:36:15 GMT
File type ASCII text, with very long lines (5239), with no line terminators
Hash 4cbb0ff246a63d7532a1e8cfe1182922
e9c6e9f6f657916674c3f7dcc71f43fed10e06a6
c07e590b3007278d3bbe305da9f8604ee29c65b2f7997a722f491c4900761854
GET /sw.js HTTP/1.1
Host: rewardarium.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
DNT: 1
Connection: keep-alive
Cookie: _ga_F0JFDXF7TQ=GS1.1.1685575250.1.0.1685575250.0.0.0; _ga=GA1.1.565916028.1685575250
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 31 May 2023 23:20:50 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"ca2bad6cb20023661b53ea682a457ede"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=siXrp5lmyxMZWi%2BsHvosFprxbQJMRVgKcM2XFSGU1Odi0hIoO8jnaQkKMbZBVFe%2F2SKLahHdWGvqbq45bxmTtCzfYffpLrreChsarwd7k%2BB1YhcDGddabpetOW%2B6kS8Y%2Bq4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 6171
server: cloudflare
cf-ray: 7d02f3262f83b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdn-adef.akamaized.net/landings/277419/1669995966/css/stylesheet.css?1669995966
200 OK 3.7 kB URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/277419/1669995966/css/stylesheet.css?1669995966
IP
ASN #20940 Akamai International B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5776779
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint7B:62:AB:D4:32:FB:D8:97:04:07:9A:AB:8E:BE:E6:48:AE:5C:8D:37
ValidityTue, 28 Jun 2022 00:00:00 GMT - Fri, 30 Jun 2023 23:59:59 GMT
File type ASCII text, with very long lines (3923), with no line terminators
Hash 50a838000340c3c4a66e6c943b7f88d4
68d2cda8bb2182116c596cb4a32e68fef8326d77
b05d0dc5a468ee260dae347ee653f186da777545ba738c2be8065b145170ea8c
GET /landings/277419/1669995966/css/stylesheet.css?1669995966 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: 8+Ko1lb4bEGjQFtc0vUOloHz9qE5GWEeW5qyEH/3I1tNo6wyPeMxwj9NR1J0MaoTioNl77ksxwM=
x-amz-request-id: F34EQHW776AA2E3S
Last-Modified: Fri, 02 Dec 2022 15:46:08 GMT
ETag: "8196a9f7321975d3b06574de1095f7b8"
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Wed, 31 May 2023 23:20:51 GMT
Content-Length: 1266
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
200 OK 27 kB URL User Request GET HTTP/2 rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
IP
Certificate IssuerLet's Encrypt
Subjectrewardarium.com
FingerprintE9:09:05:81:43:DE:42:13:8F:E6:CA:66:34:30:0C:F1:2C:8D:E1:7E
ValidityThu, 06 Apr 2023 14:36:16 GMT - Wed, 05 Jul 2023 14:36:15 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357 HTTP/1.1
Host: rewardarium.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdntechone.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 31 May 2023 23:20:50 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LPGOzWaTx9SEmNBW%2FhHs1hT8u3ypz1YWLlwoqndcnQsZ4l3lEqPxCLJco9CGXzkJi0euK4bPQ8ijGYT5AmDf%2B%2FijHrIOM3d65KK3l4INZFjcU8SWCCLjamQY12MeYMCpjDs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7d02f3206b79b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
i.th61.com/watch?zone=5776779&var=zd_5833048&ymid=687914513426821995&s=3
200 OK 0 B URL POST HTTP/2 i.th61.com/watch?zone=5776779&var=zd_5833048&ymid=687914513426821995&s=3
IP
Requested by https://rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint80:B8:25:47:ED:82:D4:A7:46:25:E7:D0:EF:21:B6:EE:31:E1:D5:63
ValidityMon, 20 Feb 2023 00:00:00 GMT - Tue, 20 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /watch?zone=5776779&var=zd_5833048&ymid=687914513426821995&s=3 HTTP/1.1
Host: i.th61.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rewardarium.com/
Origin: https://rewardarium.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
date: Wed, 31 May 2023 23:20:50 GMT
content-type: text/html; charset=utf-8
x-powered-by: Express
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uwqYLo7nARN5k9ViHsemRErJh6h%2FpxNY0jEM4hsuYLOTomQW3DVWId06dol5FuFVHehN7Y37sRiwFFdrUML6Z7qGEd8AQIFE%2FuxeJAcr1Mi4HIwltgKvQ6cyXR%2Ft"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d02f3226e200b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5776779
200 OK 4.4 kB URL GET HTTP/2 www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5776779
IP
Requested by https://rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
Certificate IssuerLet's Encrypt
Subject*.mysexymatches.com
Fingerprint7D:35:18:C7:41:6B:DC:68:1E:F2:FB:E0:71:F3:96:D3:FE:1A:B7:7C
ValiditySat, 20 May 2023 00:31:45 GMT - Fri, 18 Aug 2023 00:31:44 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4478), with no line terminators
Hash 5a10cf4d67f744ee03596afa3c4d5c91
369149921c63e8fae639169c0109c8f7748e8f81
fcca171d0c8705218dd755943101a78f82e1c314c3fefaaafd557dc33342fa59
GET /c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5776779 HTTP/1.1
Host: www.mysexymatches.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 23:20:51 GMT
content-type: text/html; charset=utf-8
set-cookie: unique_id=6477d6530004b4ee; Path=/; Expires=Sun, 30 Jul 2023 23:20:51 GMT; Secure; SameSite=None
unique_id2=6477d6530004be3a; Path=/; Expires=Tue, 29 Aug 2023 23:20:51 GMT; Secure; SameSite=None
impression=; Path=/; Expires=Wed, 31 May 2023 23:20:51 GMT; Secure; SameSite=None
6477d6530004be3a_sl=[277419]; Path=/; Expires=Wed, 14 Jun 2023 23:20:51 GMT; Secure; SameSite=None
content-encoding: gzip
X-Firefox-Spdy: h2
rewardarium.com/favicon.ico
200 OK 27 kB URL GET HTTP/3 rewardarium.com/favicon.ico
IP
Requested by https://rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
Certificate IssuerLet's Encrypt
Subjectrewardarium.com
FingerprintE9:09:05:81:43:DE:42:13:8F:E6:CA:66:34:30:0C:F1:2C:8D:E1:7E
ValidityThu, 06 Apr 2023 14:36:16 GMT - Wed, 05 Jul 2023 14:36:15 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: rewardarium.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 31 May 2023 23:20:50 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vEgtFMzmOloXx%2FvP7bUlP%2B%2F24i%2B1dQD%2FiWFFjemng4q%2B96QlXLzEUh88mj4HGYUoyzureRuhy99wlmwj16ANzZ28pmjJXICupYby%2F1SBPgFvLJQaP9R54F%2BSI0cmJLvS8Z4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 2231
server: cloudflare
cf-ray: 7d02f323add8b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
rewardarium.com/lightning.svg
200 OK 558 B URL GET HTTP/3 rewardarium.com/lightning.svg
IP
Requested by https://rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
Certificate IssuerLet's Encrypt
Subjectrewardarium.com
FingerprintE9:09:05:81:43:DE:42:13:8F:E6:CA:66:34:30:0C:F1:2C:8D:E1:7E
ValidityThu, 06 Apr 2023 14:36:16 GMT - Wed, 05 Jul 2023 14:36:15 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (603), with no line terminators
Hash 9c0ef0f4019464092e924742904d75ea
33ed4dae960a9bfc33b63882d39e47ec431ec46d
2b810d0b2fb0339bca96276a4646b209804b992d8dbffb6e0d62651e48d97e83
GET /lightning.svg HTTP/1.1
Host: rewardarium.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 31 May 2023 23:20:50 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"9cbec3ef22e57179a0901d90b7b6e2fd"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qpQpBOFvDdK%2BoTU1VOGw4MJcVcW0ADzCZvxq6lrZXi3NbUQshNi8Ws0G2vDf%2BzSYkZtmHSOJbpZLXlM2I%2BE7FLYkXA9q6a%2FwLIaKpiW7R2fhsJ%2B25gwQKXTzbxRad997NKJGXrmiqMxerEFWjZg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 4744
server: cloudflare
cf-ray: 7d02f321ac49b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
stootsou.net/pfe/current/tag.min.js?z=5776812&ymid=687914513426821995&var=zd_5833048&var3=726858ccd4
200 OK 15 kB URL GET HTTP/2 stootsou.net/pfe/current/tag.min.js?z=5776812&ymid=687914513426821995&var=zd_5833048&var3=726858ccd4
IP
Requested by https://rewardarium.com/?var=zd_5833048&ar=1&pb=3&ymid=687914513426821995&source=726858ccd4&ret=null&acb=proxy&axcusid2=Sweepstakes&axadvid=3599371&axcamid=9357
Certificate IssuerLet's Encrypt
Subjectstootsou.net
Fingerprint8B:6D:C9:76:36:ED:10:46:55:21:54:23:8C:4E:AC:7D:02:17:DD:7C
ValiditySun, 26 Mar 2023 05:17:40 GMT - Sat, 24 Jun 2023 05:17:39 GMT
File type C source, ASCII text, with very long lines (14679), with no line terminators
Hash dd1bd926c9d267f953b3631fa55c8597
1a37cc25c5dbeb4edd216419587df4c3f270adf0
6e021b2b21122242fa40175b8df6316a9386aa36454efd2c234e891258003d27
GET /pfe/current/tag.min.js?z=5776812&ymid=687914513426821995&var=zd_5833048&var3=726858ccd4 HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rewardarium.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 23:20:50 GMT
content-type: application/javascript
last-modified: Tue, 30 May 2023 12:46:17 GMT
etag: W/"6475f019-3957"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
104.21.29.183
172.67.164.207
139.45.197.237
95.211.229.245
23.36.76.96
52.17.88.125
46.4.114.55
0.0.0.0