282.novitrk1.com/smartlink?mongo_id=63204f5ac7238c7d4e5a5772&mongo_grouped_id=63204938d31d9e6c23689a58&redirect_url=www.google.com&bot=1&suspicious=1&suspicious_reason=noscript
302 Found 718 B URL HTTP/1.1 282.novitrk1.com/smartlink?mongo_id=63204f5ac7238c7d4e5a5772&mongo_grouped_id=63204938d31d9e6c23689a58&redirect_url=www.google.com&bot=1&suspicious=1&suspicious_reason=noscript
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 537ad6c034f62bf3caf4f715599013d8
323c4931535f2913b6124e0023f0d5f12a59c36f
ae35aa46a0f318116eab0374f56cd1d73c27554c385206da1fea586e9bddda7c
GET /smartlink?mongo_id=63204f5ac7238c7d4e5a5772&mongo_grouped_id=63204938d31d9e6c23689a58&redirect_url=www.google.com&bot=1&suspicious=1&suspicious_reason=noscript HTTP/1.1
Host: 282.novitrk1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx/1.19.10
Date: Tue, 13 Sep 2022 09:37:40 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: private, must-revalidate
Location: https://282.novitrk1.com/smartlink?user_id=3&&creative_id=276030&extra_id=double_click&traffic_source=
pragma: no-cache
expires: -1
Set-Cookie: XSRF-TOKEN=eyJpdiI6IndvdnpzTFIwNkFqQ3QzNU9LWW9adXc9PSIsInZhbHVlIjoiZXptRk01VzgreU5WRXBLZGxmTFJ6KzJDZ3hVNEFWNnJUbEJXM3NtTXJiSm4wK2VnWDNrSWVKa0xkV1k0NmgyYXZXbG0vZUpCZ0tpUXgwa1ZZQzB6NUZLSkxUNUZyMitiRHNLYlB0bFhuRjJMOVNERk9RY3lGQ0pwY0ptdUxJUWEiLCJtYWMiOiI0OGY1Yzc1YmE1YTQwMDdlYTgwYzVhMjIwYjYzNjNhZDNiNDNlYmEzNjcwMWU1ZjQ2Yzk0MTE4YjI1M2QzNmQ2IiwidGFnIjoiIn0%3D; expires=Tue, 13-Sep-2022 11:37:40 GMT; Max-Age=7200; path=/; samesite=lax
novidash_session=eyJpdiI6ImY0OFhCYmZsL1FmSmJER0dlWW1jNFE9PSIsInZhbHVlIjoicDZLOTNrV0hwVEtwZjRRUDhhWTJOZTVTN3dtWHZ3aTdqcFpMSC91RjlMeW0waHRaVERzREhzbjlqMXZvNUhLUkowTjNNNzFjN25NZk8xZ3NZUlkwN3ZFUWVUK2tJZUlrUGdmUFR6WElzVW5tbDB6UkdvZ1J5TE9wMGgxNDJRbnYiLCJtYWMiOiJhMzA4NWRjMmYwNzZlY2Q3Y2Q3NzYwMTc5ZDY1ZGYwYzMzZWU5NjkwNmU4MTJiMjQ0NjI3NzE3ZWE0YTA1MDdiIiwidGFnIjoiIn0%3D; expires=Tue, 13-Sep-2022 11:37:40 GMT; Max-Age=7200; path=/; httponly; samesite=lax
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 76d5eb597558e3dee0d99719d17e71e0
f3a0f3932fa8059f27dc9422d523b938fa9a7d09
d16de6cc9eb0e1297f53dc1137bb764bf5c21a7727be32ad05afebd1fe9501ed
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D16DE6CC9EB0E1297F53DC1137BB764BF5C21A7727BE32AD05AFEBD1FE9501ED"
Last-Modified: Sat, 10 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7104
Expires: Tue, 13 Sep 2022 11:36:04 GMT
Date: Tue, 13 Sep 2022 09:37:40 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 13 Sep 2022 09:14:09 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: q--a6UNkn4T1p_QvgrllmmkOT8lvbs1g090r0IiT0rNsIxaal_Nyhw==
Age: 1411
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 13 Sep 2022 07:17:13 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xtTzLnTE5wdC9i2EW_juIiTgtlFcyjq0ZGX2-H7Y_zttiSJdw4_OiA==
age: 18146
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Sep 2022 09:37:41 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 13 Sep 2022 09:03:22 GMT
Cache-Control: max-age=3600
Expires: Tue, 13 Sep 2022 09:05:16 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: QqUzvNoLHMRbAv7i9PH2rDwszSYIPZZjMCMu1eVm805uphw0WrB2zw==
Age: 2059
ocsp.digicert.com/
200 OK 471 B IP
Hash cb674936db4af4be99c3c397eff8c6ae
de79d76bac3fae5799b0ff35ecc19360595dfb06
992b884b64f9f6fdb76a6ba91c48fed329325b95b99d8003b282879a52093c08
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5531
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 09:37:41 GMT
Last-Modified: Tue, 13 Sep 2022 08:05:30 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: hDVb+YOIXuYmZp4PLWP9Zg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 6zB3N+/nBZj9NwIDtS1p+aVnyOM=
www.tiltimagic.com/?sl=5467515-f6d9b&data1=Track1&data2=Track2&tag=M7142796304236675153&website=4472-bfdf314f-6f01772b&placement=4472&utm_content=e6c2c6dcd68fd49594fc9695a6a79597828bb8888e8f8ebdb2c6b0c4b6b78587b2bb88b0bdb68cbd82b280b3b6b6bcb4aaaba9a9aeafacada293a1919697f8f4848f9b8a8f9f89c09291898c87959de5cbfbf8cbcaffcec9f2f3f085848291f5cafac8f8fcf7fccdf3f3f2f5c6c7c4c5dae8edebe8ebebebebebe6e2e0efece61b84
200 OK 5.2 kB URL HTTP/1.1 www.tiltimagic.com/?sl=5467515-f6d9b&data1=Track1&data2=Track2&tag=M7142796304236675153&website=4472-bfdf314f-6f01772b&placement=4472&utm_content=e6c2c6dcd68fd49594fc9695a6a79597828bb8888e8f8ebdb2c6b0c4b6b78587b2bb88b0bdb68cbd82b280b3b6b6bcb4aaaba9a9aeafacada293a1919697f8f4848f9b8a8f9f89c09291898c87959de5cbfbf8cbcaffcec9f2f3f085848291f5cafac8f8fcf7fccdf3f3f2f5c6c7c4c5dae8edebe8ebebebebebe6e2e0efece61b84
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3760)
Hash f6579ca17446ae53291e3385f5522be7
04860f73d51662491b9abbfa01be410bf0dc4f1d
1941f88c2d850cd922ea58002422f1aadba198972b3cf813267c65a9dfab4a32
GET /?sl=5467515-f6d9b&data1=Track1&data2=Track2&tag=M7142796304236675153&website=4472-bfdf314f-6f01772b&placement=4472&utm_content=e6c2c6dcd68fd49594fc9695a6a79597828bb8888e8f8ebdb2c6b0c4b6b78587b2bb88b0bdb68cbd82b280b3b6b6bcb4aaaba9a9aeafacada293a1919697f8f4848f9b8a8f9f89c09291898c87959de5cbfbf8cbcaffcec9f2f3f085848291f5cafac8f8fcf7fccdf3f3f2f5c6c7c4c5dae8edebe8ebebebebebe6e2e0efece61b84 HTTP/1.1
Host: www.tiltimagic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.news-page.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 09:37:42 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-transform
www.tiltimagic.com/?sl=5467515-f6d9b&data1=Track1&data2=Track2&tag=M7142796304236675153&website=4472-bfdf314f-6f01772b&placement=4472&utm_content=e6c2c6dcd68fd49594fc9695a6a79597828bb8888e8f8ebdb2c6b0c4b6b78587b2bb88b0bdb68cbd82b280b3b6b6bcb4aaaba9a9aeafacada293a1919697f8f4848f9b8a8f9f89c09291898c87959de5cbfbf8cbcaffcec9f2f3f085848291f5cafac8f8fcf7fccdf3f3f2f5c6c7c4c5dae8edebe8ebebebebebe6e2e0efece61b84&eyeg=221227680a59051a06125cf55e25060c&eyer=0.7328191589599651&eyei=0&eyew=1280&eyeh=939&eyetd=220&eyef=m.news-page.net
302 Found 0 B URL HTTP/1.1 www.tiltimagic.com/?sl=5467515-f6d9b&data1=Track1&data2=Track2&tag=M7142796304236675153&website=4472-bfdf314f-6f01772b&placement=4472&utm_content=e6c2c6dcd68fd49594fc9695a6a79597828bb8888e8f8ebdb2c6b0c4b6b78587b2bb88b0bdb68cbd82b280b3b6b6bcb4aaaba9a9aeafacada293a1919697f8f4848f9b8a8f9f89c09291898c87959de5cbfbf8cbcaffcec9f2f3f085848291f5cafac8f8fcf7fccdf3f3f2f5c6c7c4c5dae8edebe8ebebebebebe6e2e0efece61b84&eyeg=221227680a59051a06125cf55e25060c&eyer=0.7328191589599651&eyei=0&eyew=1280&eyeh=939&eyetd=220&eyef=m.news-page.net
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?sl=5467515-f6d9b&data1=Track1&data2=Track2&tag=M7142796304236675153&website=4472-bfdf314f-6f01772b&placement=4472&utm_content=e6c2c6dcd68fd49594fc9695a6a79597828bb8888e8f8ebdb2c6b0c4b6b78587b2bb88b0bdb68cbd82b280b3b6b6bcb4aaaba9a9aeafacada293a1919697f8f4848f9b8a8f9f89c09291898c87959de5cbfbf8cbcaffcec9f2f3f085848291f5cafac8f8fcf7fccdf3f3f2f5c6c7c4c5dae8edebe8ebebebebebe6e2e0efece61b84&eyeg=221227680a59051a06125cf55e25060c&eyer=0.7328191589599651&eyei=0&eyew=1280&eyeh=939&eyetd=220&eyef=m.news-page.net HTTP/1.1
Host: www.tiltimagic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 302 Found
Date: Tue, 13 Sep 2022 09:37:42 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-transform
Location: https://www.tiltimagic.com/?sl=5467515-f6d9b&data1=Track1&data2=Track2&tag=M7142796304236675153&website=4472-bfdf314f-6f01772b&placement=4472&utm_content=e6c2c6dcd68fd49594fc9695a6a79597828bb8888e8f8ebdb2c6b0c4b6b78587b2bb88b0bdb68cbd82b280b3b6b6bcb4aaaba9a9aeafacada293a1919697f8f4848f9b8a8f9f89c09291898c87959de5cbfbf8cbcaffcec9f2f3f085848291f5cafac8f8fcf7fccdf3f3f2f5c6c7c4c5dae8edebe8ebebebebebe6e2e0efece61b84&eyeg=3&eyer=0.7328191589599651&eyei=0&eyew=1280&eyeh=939&eyetd=220&eyef=m.news-page.net
www.tiltimagic.com/?sl=5467515-f6d9b&data1=Track1&data2=Track2&tag=M7142796304236675153&website=4472-bfdf314f-6f01772b&placement=4472&utm_content=e6c2c6dcd68fd49594fc9695a6a79597828bb8888e8f8ebdb2c6b0c4b6b78587b2bb88b0bdb68cbd82b280b3b6b6bcb4aaaba9a9aeafacada293a1919697f8f4848f9b8a8f9f89c09291898c87959de5cbfbf8cbcaffcec9f2f3f085848291f5cafac8f8fcf7fccdf3f3f2f5c6c7c4c5dae8edebe8ebebebebebe6e2e0efece61b84&eyeg=3&eyer=0.7328191589599651&eyei=0&eyew=1280&eyeh=939&eyetd=220&eyef=m.news-page.net
302 Found 0 B URL HTTP/1.1 www.tiltimagic.com/?sl=5467515-f6d9b&data1=Track1&data2=Track2&tag=M7142796304236675153&website=4472-bfdf314f-6f01772b&placement=4472&utm_content=e6c2c6dcd68fd49594fc9695a6a79597828bb8888e8f8ebdb2c6b0c4b6b78587b2bb88b0bdb68cbd82b280b3b6b6bcb4aaaba9a9aeafacada293a1919697f8f4848f9b8a8f9f89c09291898c87959de5cbfbf8cbcaffcec9f2f3f085848291f5cafac8f8fcf7fccdf3f3f2f5c6c7c4c5dae8edebe8ebebebebebe6e2e0efece61b84&eyeg=3&eyer=0.7328191589599651&eyei=0&eyew=1280&eyeh=939&eyetd=220&eyef=m.news-page.net
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?sl=5467515-f6d9b&data1=Track1&data2=Track2&tag=M7142796304236675153&website=4472-bfdf314f-6f01772b&placement=4472&utm_content=e6c2c6dcd68fd49594fc9695a6a79597828bb8888e8f8ebdb2c6b0c4b6b78587b2bb88b0bdb68cbd82b280b3b6b6bcb4aaaba9a9aeafacada293a1919697f8f4848f9b8a8f9f89c09291898c87959de5cbfbf8cbcaffcec9f2f3f085848291f5cafac8f8fcf7fccdf3f3f2f5c6c7c4c5dae8edebe8ebebebebebe6e2e0efece61b84&eyeg=3&eyer=0.7328191589599651&eyei=0&eyew=1280&eyeh=939&eyetd=220&eyef=m.news-page.net HTTP/1.1
Host: www.tiltimagic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 302 Found
Date: Tue, 13 Sep 2022 09:37:42 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-transform
Location: https://admoustache.go2affise.com/sl?id=59a83ff913943bff7e8b4571&pid=503&sub1=33000103f8662532e717ccfc138b60861e68f0913-202209-flb*5467515-f6d9b*M7142796304236675153*sl_5467515-f6d9b*e4cd12b1be0eb2ffb370cdab72757d824db8030d*4472-bfdf314f-6f01772b*4472
www.tiltimagic.com/favicon.ico
204 No Content 0 B URL HTTP/1.1 www.tiltimagic.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.tiltimagic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 204 No Content
Server: openresty
Date: Tue, 13 Sep 2022 09:37:42 GMT
Connection: keep-alive
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash ac86f6dc8c1108c459759289919bcee5
f53bfbaf3960e4e950b9c0485ee4731313b0664a
736bc0457c2726451bf4220bbcb63cd4bbfc01cd6deb274bf59881de146c5f67
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 13 Sep 2022 09:37:42 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 12 Sep 2022 23:36:22 GMT
Expires: Tue, 13 Sep 2022 23:36:22 GMT
ETag: "f53bfbaf3960e4e950b9c0485ee4731313b0664a"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
admoustache.go2affise.com/sl?id=59a83ff913943bff7e8b4571&pid=503&sub1=33000103f8662532e717ccfc138b60861e68f0913-202209-flb*5467515-f6d9b*M7142796304236675153*sl_5467515-f6d9b*e4cd12b1be0eb2ffb370cdab72757d824db8030d*4472-bfdf314f-6f01772b*4472
302 Found 0 B URL HTTP/2 admoustache.go2affise.com/sl?id=59a83ff913943bff7e8b4571&pid=503&sub1=33000103f8662532e717ccfc138b60861e68f0913-202209-flb*5467515-f6d9b*M7142796304236675153*sl_5467515-f6d9b*e4cd12b1be0eb2ffb370cdab72757d824db8030d*4472-bfdf314f-6f01772b*4472
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sl?id=59a83ff913943bff7e8b4571&pid=503&sub1=33000103f8662532e717ccfc138b60861e68f0913-202209-flb*5467515-f6d9b*M7142796304236675153*sl_5467515-f6d9b*e4cd12b1be0eb2ffb370cdab72757d824db8030d*4472-bfdf314f-6f01772b*4472 HTTP/1.1
Host: admoustache.go2affise.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 13 Sep 2022 09:37:42 GMT
content-length: 0
location: https://www.makeitprof.com/rc/86b528a829?affclick=63204f66af6d97000193d1c9&pubid=503
referer:
referrer-policy: no-referrer
set-cookie: afclick=63204f66af6d97000193d1c9; expires=Wed, 13 Sep 2023 09:37:42 GMT; secure; SameSite=None
access-control-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5352
Expires: Tue, 13 Sep 2022 11:06:55 GMT
Date: Tue, 13 Sep 2022 09:37:43 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5352
Expires: Tue, 13 Sep 2022 11:06:55 GMT
Date: Tue, 13 Sep 2022 09:37:43 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5352
Expires: Tue, 13 Sep 2022 11:06:55 GMT
Date: Tue, 13 Sep 2022 09:37:43 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5352
Expires: Tue, 13 Sep 2022 11:06:55 GMT
Date: Tue, 13 Sep 2022 09:37:43 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5352
Expires: Tue, 13 Sep 2022 11:06:55 GMT
Date: Tue, 13 Sep 2022 09:37:43 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fabb8ed52-93ad-47ae-a006-da7de9e3d841.webp
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fabb8ed52-93ad-47ae-a006-da7de9e3d841.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8b9c6d44f93a72d6c03ebcfadda1a48a
f6100190de6244ae74b6c1250b997749a381ed89
4bf351795fb3a9e8a1a917d6ab202b1c75007bd5dc450a869b4db5dbfdd81dc4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fabb8ed52-93ad-47ae-a006-da7de9e3d841.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5209
x-amzn-requestid: 37514c84-b67c-4401-a1bf-580437355fcf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YRYy7G_joAMFl5w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631d3b45-72b73b6172fe5aa34e368e66;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 01:35:01 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 5B-ItCBBt8qViPlzDbWtyYNZc1Xxor5nXrn3KgxPiyIhM0dDH-htUw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 16:14:57 GMT
age: 62566
etag: "f6100190de6244ae74b6c1250b997749a381ed89"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc781d2a6-7a39-471c-a1a0-2e29918b63e9.jpeg
200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc781d2a6-7a39-471c-a1a0-2e29918b63e9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ed996f863e0d0dcce9e48acb79fd6827
af756dc52f6b5b042d99c3ceba7a64dcbfaa73b5
57ea1317d878e2727fd8b0f3823e6f14053c7d1d16c5e1872b23a510ab1efdd7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc781d2a6-7a39-471c-a1a0-2e29918b63e9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6530
x-amzn-requestid: dd634daa-0aee-4859-a956-c54d5eecf1be
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YSKEyHGlIAMFVcg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631d8a1e-51f715224318bfcf76d1c3ab;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 07:11:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: HMJgr4Kw1vyxFSbLpWcgarqHbVD3E8hPdFNFRzpwW4MqzV30mQyKog==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 17:39:46 GMT
age: 57477
etag: "af756dc52f6b5b042d99c3ceba7a64dcbfaa73b5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77296a12-991a-4ab6-9ce0-05b3a82d6664.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77296a12-991a-4ab6-9ce0-05b3a82d6664.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8c1314c7778ea0d32e8c69dae0c38b6d
c4772b9b182f9f905fead84f3761fe296073ca65
5fc8dc23f9b4d150b834aa69b358edd9f9f5f449607df07d579df66098d8aac6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77296a12-991a-4ab6-9ce0-05b3a82d6664.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10366
x-amzn-requestid: e4d41ba8-41c5-4350-bacb-850136434eaa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YEw28GD7IAMFjCQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63182e92-4098031d1475d45f4899654b;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 05:39:30 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: TPtgXtWkeCrsnGE_G-_MZj1U046kUiGsRaoGg-xCCavcQqt7p6jdwg==
via: 1.1 7d01bcfcfe27ce0b8979cf621dd081de.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 21:56:25 GMT
age: 42078
etag: "c4772b9b182f9f905fead84f3761fe296073ca65"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F496d6130-e9a6-4131-bec3-e54582de0a2a.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F496d6130-e9a6-4131-bec3-e54582de0a2a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0ed03673d192cb0e41d2ea8b02c4f491
82fbdaeea5e3fc8d25fe46c2409ae3ca81c9588f
82e966d41f89a217f481ea64ce4532c5d6bc335cf32c79e3b93f48b036353667
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F496d6130-e9a6-4131-bec3-e54582de0a2a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5039
x-amzn-requestid: a5fc7041-0cb3-47c7-9c1b-fbe1ad627d94
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YUIyRGDsIAMFoqg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631e54db-7ff83b9a00a620960fc471ec;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 21:36:27 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 00WMSpZE_xNQU-Gnd7pQV3xLZHOaedtZenwcFF8lSLV-fYWxgTcNgg==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 06:16:31 GMT
age: 12072
etag: "82fbdaeea5e3fc8d25fe46c2409ae3ca81c9588f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F106eeeca-4365-4ffc-b701-f952d0b09dcb.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F106eeeca-4365-4ffc-b701-f952d0b09dcb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 47e1f64348aa12d707bf070f39877c7e
7a1f13d32de956fd50fccba0f813fb71bda79f63
9b3cee8039a2adb1291006a9ad55cd5032a2a6c10de3c5f57222692b02c0faac
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F106eeeca-4365-4ffc-b701-f952d0b09dcb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7965
x-amzn-requestid: c0ddd7c6-9709-4251-8e7b-4a551f9a7d2f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YBro8EjxIAMFi0g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6316f305-26023e0714937dca063dcbfa;Sampled=0
x-amzn-remapped-date: Tue, 06 Sep 2022 07:13:09 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: M8hApWUPiRtGNRAjsaGnjo2w9myX6knC1Rk0-reejbUO7aVqYPttRw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 23:23:42 GMT
age: 36841
etag: "7a1f13d32de956fd50fccba0f813fb71bda79f63"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69e8f1cd-31bf-4844-9738-9405f7d06c28.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69e8f1cd-31bf-4844-9738-9405f7d06c28.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2046dcdfa0a6c46d8d18b54cadfd2cf1
5e4d409aa55bb8682b1accbbc9608f627d2f0eb0
677bb5de367bb264121fea40e8b7c97867b543c56844f52907064671e8749aa2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69e8f1cd-31bf-4844-9738-9405f7d06c28.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8881
x-amzn-requestid: bb64b6ca-90e4-42b0-93cd-6d2a63b92c80
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YLAqWG76oAMFwDQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631aae42-55583af101f8ec380c0d1026;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 03:08:50 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: dCmXSCw6BLyu3glIdrXkehroMpiUX5CSQmEVme7jrt0RPn4zbMjQ4w==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 07:27:37 GMT
age: 7806
etag: "5e4d409aa55bb8682b1accbbc9608f627d2f0eb0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 571185869c59b45e14dc96cac7847718
80973addcc6dcdd514127497f439bf28a6a6ad63
b278b0375d9da7fc6f6e15080335813fbce23be7b38cd43aafb63b788f04d348
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B278B0375D9DA7FC6F6E15080335813FBCE23BE7B38CD43AAFB63B788F04D348"
Last-Modified: Sun, 11 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20506
Expires: Tue, 13 Sep 2022 15:19:29 GMT
Date: Tue, 13 Sep 2022 09:37:43 GMT
Connection: keep-alive
www.wazazu.com/Smartlink/Dating/Soft?w=45580&ws=8063a697_503&wt=pub3de9c2f186d2480c962c35fb6c890ae1
307 Temporary Redirect 20 B URL HTTP/2 www.wazazu.com/Smartlink/Dating/Soft?w=45580&ws=8063a697_503&wt=pub3de9c2f186d2480c962c35fb6c890ae1
IP
Hash 4a4dd3598707603b3f76a2378a4504aa
a0fddd5458378c1bf3c10dd2f5c060d1347741ed
f61f27bd17de546264aa58f40f3aafaac7021e0ef69c17f6b1b4cd7664a037ec
GET /Smartlink/Dating/Soft?w=45580&ws=8063a697_503&wt=pub3de9c2f186d2480c962c35fb6c890ae1 HTTP/1.1
Host: www.wazazu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.makeitprof.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
access-control-allow-origin: *
set-cookie: w=45580; expires=Tue, 13-Sep-2022 09:37:43 GMT; Max-Age=0; SameSite=Lax
ws=8063a697_503; expires=Tue, 13-Sep-2022 09:37:43 GMT; Max-Age=0; SameSite=Lax
wt=pub3de9c2f186d2480c962c35fb6c890ae1; expires=Tue, 13-Sep-2022 09:37:43 GMT; Max-Age=0; SameSite=Lax
sid=%B1%AB%EC%D3%40k%A6%14%1A%DDM%D4%9B%12%5B%D6%5D%88%BA%AC%D77%FBy%CB%C8%F5%17b%2F%B1%23; expires=Thu, 15-Sep-2022 11:37:43 GMT; Max-Age=180000; path=/; SameSite=Strict
CSRFToken=48655bfcdb7bbfa8451bf8e54a12fc52e504b9ef1f85281720ad5ff79c8f8880.1663061863; expires=Tue, 13-Sep-2022 10:07:43 GMT; Max-Age=1800; path=/; SameSite=Strict
location: https://track.vxctr.com/b679be98-1f4b-40a3-8a42-70b1dc3605ca?adtv=11135.11104_dd28ec_af58a&w=45580&ws=8063a697_503&wt=pub3de9c2f186d2480c962c35fb6c890ae1&referer=https%3A%2F%2Fwww.makeitprof.com%2F
content-encoding: gzip
vary: Accept-Encoding
content-type: text/html; charset=UTF-8
content-length: 20
date: Tue, 13 Sep 2022 09:37:43 GMT
server: Webserver
X-Firefox-Spdy: h2
track.vxctr.com/b679be98-1f4b-40a3-8a42-70b1dc3605ca?adtv=11135.11104_dd28ec_af58a&w=45580&ws=8063a697_503&wt=pub3de9c2f186d2480c962c35fb6c890ae1&referer=https%3A%2F%2Fwww.makeitprof.com%2F
302 Found 0 B URL HTTP/2 track.vxctr.com/b679be98-1f4b-40a3-8a42-70b1dc3605ca?adtv=11135.11104_dd28ec_af58a&w=45580&ws=8063a697_503&wt=pub3de9c2f186d2480c962c35fb6c890ae1&referer=https%3A%2F%2Fwww.makeitprof.com%2F
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b679be98-1f4b-40a3-8a42-70b1dc3605ca?adtv=11135.11104_dd28ec_af58a&w=45580&ws=8063a697_503&wt=pub3de9c2f186d2480c962c35fb6c890ae1&referer=https%3A%2F%2Fwww.makeitprof.com%2F HTTP/1.1
Host: track.vxctr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.makeitprof.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 13 Sep 2022 09:37:43 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://www.vxctr.com/EXT/Pre/Umfrage/3?age=18&vkamp=b679be98-1f4b-40a3-8a42-70b1dc3605ca&cep=Y7_gQK_mxSYNsXJZYC9nr1rN87rBxKor6uaLwFsKG2w5_2saf0Y6oQ2CLcHbYF2YX2PvUZroJqcOhkBoK5A5hTg4VAhVuxYwcp81TvZWum_zIMd40_8y_FlPDvmXaZnAG0kO8b2KORXGpdCjZ7g0vADszQ43Ckxa-XGaES93pCBhAsmT7-BLG-MYI9vdaRRX_9gN0ycbaJNBFFcCR1jxzlVKLm2QVF6xyYv5I5FJbjPa7GW7wmYy8OirAz9sAhFGSbHnOW3leNizAUKnh5G1UAH76R7_0KKYAnp1nKovqQr7OTeVnVLAtyJkdlpTvLyKDRkYQsv5xIzkjOjPjErJw5IPQdwcgABu6vewnOM59ihBHAwCNNa6j9e7RKMH6PCPvUAnYfR8xlSKebMO9rIge98TmcEpnVV1VZD2tYO8bu5BbDQNYJPFlZfelkHh06n4CY1wN5J-418edVOMD0l7QQyqAIQ4JagGUgDz7AVaV6S6WgwEBMhwrMH4J5sQHxqq&lptoken=16d363c3064136126392&adtv=11135.11104_dd28ec_af58a&w=45580&ws=8063a697_503&wt=pub3de9c2f186d2480c962c35fb6c890ae1&referer=https%3A%2F%2Fwww.makeitprof.com%2F
pragma: no-cache
set-cookie: b679be98-1f4b-40a3-8a42-70b1dc3605ca-v4=6W8UxVxXl5l3DmY2ZfKNOiXLezKI7sPigPYe7pMp5uQ; Max-Age=86400; Expires=Wed, 14-Sep-2022 09:37:43 GMT; Domain=track.vxctr.com; Path=/; Secure; HttpOnly;SameSite=None
cep-v4=OHNhccdKUnL4g75w0nxAZ1mBUu6efsvwckB7idaD1fZ5Wv1I5C2_rb3WIwmZL31NagZm_k4lbjKWxeR6BydJMNUijl7-OwYflhtRHDxPDd1phjRW7KvIq1gXuQ-EjSx7pLyhux8vVs-eiLWt2pRoIPmXJC5PsnMInecH-CwzVn1x4x-R4ZeDOJ_nxsmWGRxucGZu7OmV2v8J86Rdi8HQf8g2cD0t-Y3sze0YsTR7h108dDfUd8f-o6bgDeT40I3xG-l6ewAqgrtmrWx1BXXlCPlC5Yg-jwEBARUeh7HE7YQDXWAuWHigd-oWj6muICECCxihBAHotO3bai16EWHKYFokqpMX_2eufwN6EvcveYhvrsmdjYkD8_FrYe7lOQ5YQ2qgHpEM3g4iKUVxab68xQ_ooLlxX0y-8cS7tRjuFKxwNCqQdZAitIpK9ZMR79K1EYS0WTptoqrvvDCteA-5va7Ne2iwFdPV9K3HxfbgU194ENbs4fJzp2ma_MnYM09l; Max-Age=86400; Expires=Wed, 14-Sep-2022 09:37:43 GMT; Domain=track.vxctr.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 63215f9b9774be6b68ac18348279b8df
2345f686e42bfd0cc762149ade95201bbfa62d9f
61e3b741e2b10568e150f0811d948f4f4b1ccb1762c7efb1cbebca0fba43fb6b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "61E3B741E2B10568E150F0811D948F4F4B1CCB1762C7EFB1CBEBCA0FBA43FB6B"
Last-Modified: Sun, 11 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2728
Expires: Tue, 13 Sep 2022 10:23:11 GMT
Date: Tue, 13 Sep 2022 09:37:43 GMT
Connection: keep-alive
www.vxctr.com/EXT/Pre/Umfrage/3?age=18&vkamp=b679be98-1f4b-40a3-8a42-70b1dc3605ca&cep=Y7_gQK_mxSYNsXJZYC9nr1rN87rBxKor6uaLwFsKG2w5_2saf0Y6oQ2CLcHbYF2YX2PvUZroJqcOhkBoK5A5hTg4VAhVuxYwcp81TvZWum_zIMd40_8y_FlPDvmXaZnAG0kO8b2KORXGpdCjZ7g0vADszQ43Ckxa-XGaES93pCBhAsmT7-BLG-MYI9vdaRRX_9gN0ycbaJNBFFcCR1jxzlVKLm2QVF6xyYv5I5FJbjPa7GW7wmYy8OirAz9sAhFGSbHnOW3leNizAUKnh5G1UAH76R7_0KKYAnp1nKovqQr7OTeVnVLAtyJkdlpTvLyKDRkYQsv5xIzkjOjPjErJw5IPQdwcgABu6vewnOM59ihBHAwCNNa6j9e7RKMH6PCPvUAnYfR8xlSKebMO9rIge98TmcEpnVV1VZD2tYO8bu5BbDQNYJPFlZfelkHh06n4CY1wN5J-418edVOMD0l7QQyqAIQ4JagGUgDz7AVaV6S6WgwEBMhwrMH4J5sQHxqq&lptoken=16d363c3064136126392&adtv=11135.11104_dd28ec_af58a&w=45580&ws=8063a697_503&wt=pub3de9c2f186d2480c962c35fb6c890ae1&referer=https%3A%2F%2Fwww.makeitprof.com%2F
200 OK 16 kB URL HTTP/2 www.vxctr.com/EXT/Pre/Umfrage/3?age=18&vkamp=b679be98-1f4b-40a3-8a42-70b1dc3605ca&cep=Y7_gQK_mxSYNsXJZYC9nr1rN87rBxKor6uaLwFsKG2w5_2saf0Y6oQ2CLcHbYF2YX2PvUZroJqcOhkBoK5A5hTg4VAhVuxYwcp81TvZWum_zIMd40_8y_FlPDvmXaZnAG0kO8b2KORXGpdCjZ7g0vADszQ43Ckxa-XGaES93pCBhAsmT7-BLG-MYI9vdaRRX_9gN0ycbaJNBFFcCR1jxzlVKLm2QVF6xyYv5I5FJbjPa7GW7wmYy8OirAz9sAhFGSbHnOW3leNizAUKnh5G1UAH76R7_0KKYAnp1nKovqQr7OTeVnVLAtyJkdlpTvLyKDRkYQsv5xIzkjOjPjErJw5IPQdwcgABu6vewnOM59ihBHAwCNNa6j9e7RKMH6PCPvUAnYfR8xlSKebMO9rIge98TmcEpnVV1VZD2tYO8bu5BbDQNYJPFlZfelkHh06n4CY1wN5J-418edVOMD0l7QQyqAIQ4JagGUgDz7AVaV6S6WgwEBMhwrMH4J5sQHxqq&lptoken=16d363c3064136126392&adtv=11135.11104_dd28ec_af58a&w=45580&ws=8063a697_503&wt=pub3de9c2f186d2480c962c35fb6c890ae1&referer=https%3A%2F%2Fwww.makeitprof.com%2F
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (876)
Hash fcbc282907b1132977e411c6b219f61d
192fc9583a9e487820ee58e47657ec49371d2c60
c273d3ce431ec09967b08a310e71c56a242b0c9f2146fb8422e3b5f1735394e2
GET /EXT/Pre/Umfrage/3?age=18&vkamp=b679be98-1f4b-40a3-8a42-70b1dc3605ca&cep=Y7_gQK_mxSYNsXJZYC9nr1rN87rBxKor6uaLwFsKG2w5_2saf0Y6oQ2CLcHbYF2YX2PvUZroJqcOhkBoK5A5hTg4VAhVuxYwcp81TvZWum_zIMd40_8y_FlPDvmXaZnAG0kO8b2KORXGpdCjZ7g0vADszQ43Ckxa-XGaES93pCBhAsmT7-BLG-MYI9vdaRRX_9gN0ycbaJNBFFcCR1jxzlVKLm2QVF6xyYv5I5FJbjPa7GW7wmYy8OirAz9sAhFGSbHnOW3leNizAUKnh5G1UAH76R7_0KKYAnp1nKovqQr7OTeVnVLAtyJkdlpTvLyKDRkYQsv5xIzkjOjPjErJw5IPQdwcgABu6vewnOM59ihBHAwCNNa6j9e7RKMH6PCPvUAnYfR8xlSKebMO9rIge98TmcEpnVV1VZD2tYO8bu5BbDQNYJPFlZfelkHh06n4CY1wN5J-418edVOMD0l7QQyqAIQ4JagGUgDz7AVaV6S6WgwEBMhwrMH4J5sQHxqq&lptoken=16d363c3064136126392&adtv=11135.11104_dd28ec_af58a&w=45580&ws=8063a697_503&wt=pub3de9c2f186d2480c962c35fb6c890ae1&referer=https%3A%2F%2Fwww.makeitprof.com%2F HTTP/1.1
Host: www.vxctr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.makeitprof.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
set-cookie: w=45580; expires=Tue, 13-Sep-2022 09:37:43 GMT; Max-Age=0; SameSite=Lax
ws=8063a697_503; expires=Tue, 13-Sep-2022 09:37:43 GMT; Max-Age=0; SameSite=Lax
wt=pub3de9c2f186d2480c962c35fb6c890ae1; expires=Tue, 13-Sep-2022 09:37:43 GMT; Max-Age=0; SameSite=Lax
sid=%ED%FBH%E5%AF%FD%BA%06%95%CC%E1%1C%A8%D5o%D0%C0%F0%19%D5%C0oS%FF%5B%A8%FC7X%8E%DF%28; expires=Thu, 15-Sep-2022 11:37:43 GMT; Max-Age=180000; path=/; SameSite=Strict
CSRFToken=951489b70615f77c0ad74c7677bc9b7715303c028bb5d5b63e0e69ace26fb21d.1663061863; expires=Tue, 13-Sep-2022 10:07:43 GMT; Max-Age=1800; path=/; SameSite=Strict
content-type: text/html; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
content-length: 16073
date: Tue, 13 Sep 2022 09:37:43 GMT
server: Webserver
X-Firefox-Spdy: h2
www.vxctr.com/DynBanner/PreUmfrage3/bundle.91375b2395ffa3312264.css
200 OK 2.3 kB URL HTTP/2 www.vxctr.com/DynBanner/PreUmfrage3/bundle.91375b2395ffa3312264.css
IP
File type ASCII text, with very long lines (8148)
Hash d8968fdbf73f3c37064ef0cd0bfe8ee2
9f5ddf129469288bbeb9307e2e1810ffd8ecf488
7cb1490daa5253cad808653eb684c501de8d1a37bcf09cdbe71f702805bdf822
GET /DynBanner/PreUmfrage3/bundle.91375b2395ffa3312264.css HTTP/1.1
Host: www.vxctr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.vxctr.com/EXT/Pre/Umfrage/3?age=18&vkamp=b679be98-1f4b-40a3-8a42-70b1dc3605ca&cep=Y7_gQK_mxSYNsXJZYC9nr1rN87rBxKor6uaLwFsKG2w5_2saf0Y6oQ2CLcHbYF2YX2PvUZroJqcOhkBoK5A5hTg4VAhVuxYwcp81TvZWum_zIMd40_8y_FlPDvmXaZnAG0kO8b2KORXGpdCjZ7g0vADszQ43Ckxa-XGaES93pCBhAsmT7-BLG-MYI9vdaRRX_9gN0ycbaJNBFFcCR1jxzlVKLm2QVF6xyYv5I5FJbjPa7GW7wmYy8OirAz9sAhFGSbHnOW3leNizAUKnh5G1UAH76R7_0KKYAnp1nKovqQr7OTeVnVLAtyJkdlpTvLyKDRkYQsv5xIzkjOjPjErJw5IPQdwcgABu6vewnOM59ihBHAwCNNa6j9e7RKMH6PCPvUAnYfR8xlSKebMO9rIge98TmcEpnVV1VZD2tYO8bu5BbDQNYJPFlZfelkHh06n4CY1wN5J-418edVOMD0l7QQyqAIQ4JagGUgDz7AVaV6S6WgwEBMhwrMH4J5sQHxqq&lptoken=16d363c3064136126392&adtv=11135.11104_dd28ec_af58a&w=45580&ws=8063a697_503&wt=pub3de9c2f186d2480c962c35fb6c890ae1&referer=https%3A%2F%2Fwww.makeitprof.com%2F
Cookie: sid=%ED%FBH%E5%AF%FD%BA%06%95%CC%E1%1C%A8%D5o%D0%C0%F0%19%D5%C0oS%FF%5B%A8%FC7X%8E%DF%28; CSRFToken=951489b70615f77c0ad74c7677bc9b7715303c028bb5d5b63e0e69ace26fb21d.1663061863
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
etag: "2176-br"
last-modified: Tue, 23 Nov 2021 13:26:06 GMT
content-length: 2305
cache-control: public
vary: Accept-Encoding
content-encoding: br
date: Tue, 13 Sep 2022 09:37:44 GMT
server: Webserver
X-Firefox-Spdy: h2
www.vxctr.com/DynBanner/PreUmfrage3/img/18/user_01.jpg
200 OK 1.8 kB URL HTTP/2 www.vxctr.com/DynBanner/PreUmfrage3/img/18/user_01.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 64x64, components 3\012- data
Hash 23e2cea11cf05ab3f8119159f6f2f152
47fd7ebdd0220965f3627280e9f69b83ce16b2e0
203f86e9e52d29515cd326c03fa134d0b200d68fe5bfe3020003596261f9ec14
GET /DynBanner/PreUmfrage3/img/18/user_01.jpg HTTP/1.1
Host: www.vxctr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.vxctr.com/EXT/Pre/Umfrage/3?age=18&vkamp=b679be98-1f4b-40a3-8a42-70b1dc3605ca&cep=Y7_gQK_mxSYNsXJZYC9nr1rN87rBxKor6uaLwFsKG2w5_2saf0Y6oQ2CLcHbYF2YX2PvUZroJqcOhkBoK5A5hTg4VAhVuxYwcp81TvZWum_zIMd40_8y_FlPDvmXaZnAG0kO8b2KORXGpdCjZ7g0vADszQ43Ckxa-XGaES93pCBhAsmT7-BLG-MYI9vdaRRX_9gN0ycbaJNBFFcCR1jxzlVKLm2QVF6xyYv5I5FJbjPa7GW7wmYy8OirAz9sAhFGSbHnOW3leNizAUKnh5G1UAH76R7_0KKYAnp1nKovqQr7OTeVnVLAtyJkdlpTvLyKDRkYQsv5xIzkjOjPjErJw5IPQdwcgABu6vewnOM59ihBHAwCNNa6j9e7RKMH6PCPvUAnYfR8xlSKebMO9rIge98TmcEpnVV1VZD2tYO8bu5BbDQNYJPFlZfelkHh06n4CY1wN5J-418edVOMD0l7QQyqAIQ4JagGUgDz7AVaV6S6WgwEBMhwrMH4J5sQHxqq&lptoken=16d363c3064136126392&adtv=11135.11104_dd28ec_af58a&w=45580&ws=8063a697_503&wt=pub3de9c2f186d2480c962c35fb6c890ae1&referer=https%3A%2F%2Fwww.makeitprof.com%2F
Cookie: sid=%ED%FBH%E5%AF%FD%BA%06%95%CC%E1%1C%A8%D5o%D0%C0%F0%19%D5%C0oS%FF%5B%A8%FC7X%8E%DF%28; CSRFToken=951489b70615f77c0ad74c7677bc9b7715303c028bb5d5b63e0e69ace26fb21d.1663061863
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
etag: "3221227617"
last-modified: Mon, 28 Jun 2021 13:02:37 GMT
content-length: 1804
cache-control: public
date: Tue, 13 Sep 2022 09:37:44 GMT
server: Webserver
X-Firefox-Spdy: h2
www.vxctr.com/DynBanner/PreUmfrage3/img/18/user_02.jpg
200 OK 1.6 kB URL HTTP/2 www.vxctr.com/DynBanner/PreUmfrage3/img/18/user_02.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 64x64, components 3\012- data
Hash 8011cc8766140de0a906cf9560a242cf
e99e1e5510db79a0f833ad9d8eec892d8a6a949c
336c516303f00e086cd62fe8ef2709bfed56d7d981384ec95f3dccae0cd8e2fa
GET /DynBanner/PreUmfrage3/img/18/user_02.jpg HTTP/1.1
Host: www.vxctr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.vxctr.com/EXT/Pre/Umfrage/3?age=18&vkamp=b679be98-1f4b-40a3-8a42-70b1dc3605ca&cep=Y7_gQK_mxSYNsXJZYC9nr1rN87rBxKor6uaLwFsKG2w5_2saf0Y6oQ2CLcHbYF2YX2PvUZroJqcOhkBoK5A5hTg4VAhVuxYwcp81TvZWum_zIMd40_8y_FlPDvmXaZnAG0kO8b2KORXGpdCjZ7g0vADszQ43Ckxa-XGaES93pCBhAsmT7-BLG-MYI9vdaRRX_9gN0ycbaJNBFFcCR1jxzlVKLm2QVF6xyYv5I5FJbjPa7GW7wmYy8OirAz9sAhFGSbHnOW3leNizAUKnh5G1UAH76R7_0KKYAnp1nKovqQr7OTeVnVLAtyJkdlpTvLyKDRkYQsv5xIzkjOjPjErJw5IPQdwcgABu6vewnOM59ihBHAwCNNa6j9e7RKMH6PCPvUAnYfR8xlSKebMO9rIge98TmcEpnVV1VZD2tYO8bu5BbDQNYJPFlZfelkHh06n4CY1wN5J-418edVOMD0l7QQyqAIQ4JagGUgDz7AVaV6S6WgwEBMhwrMH4J5sQHxqq&lptoken=16d363c3064136126392&adtv=11135.11104_dd28ec_af58a&w=45580&ws=8063a697_503&wt=pub3de9c2f186d2480c962c35fb6c890ae1&referer=https%3A%2F%2Fwww.makeitprof.com%2F
Cookie: sid=%ED%FBH%E5%AF%FD%BA%06%95%CC%E1%1C%A8%D5o%D0%C0%F0%19%D5%C0oS%FF%5B%A8%FC7X%8E%DF%28; CSRFToken=951489b70615f77c0ad74c7677bc9b7715303c028bb5d5b63e0e69ace26fb21d.1663061863
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
etag: "2147486201"
last-modified: Mon, 28 Jun 2021 13:02:37 GMT
content-length: 1599
cache-control: public
date: Tue, 13 Sep 2022 09:37:44 GMT
server: Webserver
X-Firefox-Spdy: h2
cdn.addlnk.com/redirect.css
200 OK 16 kB URL HTTP/2 cdn.addlnk.com/redirect.css
IP
File type ASCII text, with very long lines (1242), with no line terminators
Hash 1ff11fa3f8e59ddff66f877e41d2f78a
6b5d71f09047a90abb0908a57eb6d091d22a47c3
8ef1b0746ae528a449ebdfd5f1394aa66a5e4a1648ade61ba83de26fa3ce9dc9
GET /redirect.css HTTP/1.1
Host: cdn.addlnk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.makeitprof.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 13 Sep 2022 09:37:43 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=1680
etag: W/"3ae56d32551602b41f9046c14d1cfde2"
last-modified: Wed, 13 Mar 2019 00:03:12 GMT
x-amz-id-2: BUW6rlWHZvzQnvJHp4gBkVRIGc8DfdhWdOpgruWqMqu7ownlHIapox/IYSueiBqz+QseNtzP+2A=
x-amz-request-id: KYXF7EGSHW20KRRM
cf-cache-status: HIT
age: 2286
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k8wpaNz%2B1lbMmseeSdXUscEo22Q9Oetj5Fj%2FomuqOO4hRtE8CjC%2BVBMExcDUSmTH2C11%2FIuWnBjB2jXmG3GPvFuF1T1oq%2B1fncAOfrgnOABoROh2waIQ16RtLHim%2Fqk2NA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 749fe7e54c9d1c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.vxctr.com/DynBanner/PreUmfrage3/img/18/user_04.jpg
200 OK 2.2 kB URL HTTP/2 www.vxctr.com/DynBanner/PreUmfrage3/img/18/user_04.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 64x64, components 3\012- data
Hash 05ea8b7b705ffebe57375718468649a5
2024cf1e2ec1edc1d2db0ddb27ea055eddb31b16
d97b742b75527e441e3201e3ca1b0ae7db689e26c3e049665acf2be666266acd
GET /DynBanner/PreUmfrage3/img/18/user_04.jpg HTTP/1.1
Host: www.vxctr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.vxctr.com/EXT/Pre/Umfrage/3?age=18&vkamp=b679be98-1f4b-40a3-8a42-70b1dc3605ca&cep=Y7_gQK_mxSYNsXJZYC9nr1rN87rBxKor6uaLwFsKG2w5_2saf0Y6oQ2CLcHbYF2YX2PvUZroJqcOhkBoK5A5hTg4VAhVuxYwcp81TvZWum_zIMd40_8y_FlPDvmXaZnAG0kO8b2KORXGpdCjZ7g0vADszQ43Ckxa-XGaES93pCBhAsmT7-BLG-MYI9vdaRRX_9gN0ycbaJNBFFcCR1jxzlVKLm2QVF6xyYv5I5FJbjPa7GW7wmYy8OirAz9sAhFGSbHnOW3leNizAUKnh5G1UAH76R7_0KKYAnp1nKovqQr7OTeVnVLAtyJkdlpTvLyKDRkYQsv5xIzkjOjPjErJw5IPQdwcgABu6vewnOM59ihBHAwCNNa6j9e7RKMH6PCPvUAnYfR8xlSKebMO9rIge98TmcEpnVV1VZD2tYO8bu5BbDQNYJPFlZfelkHh06n4CY1wN5J-418edVOMD0l7QQyqAIQ4JagGUgDz7AVaV6S6WgwEBMhwrMH4J5sQHxqq&lptoken=16d363c3064136126392&adtv=11135.11104_dd28ec_af58a&w=45580&ws=8063a697_503&wt=pub3de9c2f186d2480c962c35fb6c890ae1&referer=https%3A%2F%2Fwww.makeitprof.com%2F
Cookie: sid=%ED%FBH%E5%AF%FD%BA%06%95%CC%E1%1C%A8%D5o%D0%C0%F0%19%D5%C0oS%FF%5B%A8%FC7X%8E%DF%28; CSRFToken=951489b70615f77c0ad74c7677bc9b7715303c028bb5d5b63e0e69ace26fb21d.1663061863
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
etag: "3170"
last-modified: Mon, 28 Jun 2021 13:02:37 GMT
content-length: 2188
cache-control: public
date: Tue, 13 Sep 2022 09:37:44 GMT
server: Webserver
X-Firefox-Spdy: h2
www.vxctr.com/DynBanner/PreUmfrage3/img/18/user_05.jpg
200 OK 1.6 kB URL HTTP/2 www.vxctr.com/DynBanner/PreUmfrage3/img/18/user_05.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 64x64, components 3\012- data
Hash c31827faf46172aee0f5889ac89a33d8
658c99c1428cb4cfa28fda54fe24c2f5f26e56bb
a2bd2d629540ce01607e269646740bdf37fc8515c51523c625e37e5b818d9eb2
GET /DynBanner/PreUmfrage3/img/18/user_05.jpg HTTP/1.1
Host: www.vxctr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.vxctr.com/EXT/Pre/Umfrage/3?age=18&vkamp=b679be98-1f4b-40a3-8a42-70b1dc3605ca&cep=Y7_gQK_mxSYNsXJZYC9nr1rN87rBxKor6uaLwFsKG2w5_2saf0Y6oQ2CLcHbYF2YX2PvUZroJqcOhkBoK5A5hTg4VAhVuxYwcp81TvZWum_zIMd40_8y_FlPDvmXaZnAG0kO8b2KORXGpdCjZ7g0vADszQ43Ckxa-XGaES93pCBhAsmT7-BLG-MYI9vdaRRX_9gN0ycbaJNBFFcCR1jxzlVKLm2QVF6xyYv5I5FJbjPa7GW7wmYy8OirAz9sAhFGSbHnOW3leNizAUKnh5G1UAH76R7_0KKYAnp1nKovqQr7OTeVnVLAtyJkdlpTvLyKDRkYQsv5xIzkjOjPjErJw5IPQdwcgABu6vewnOM59ihBHAwCNNa6j9e7RKMH6PCPvUAnYfR8xlSKebMO9rIge98TmcEpnVV1VZD2tYO8bu5BbDQNYJPFlZfelkHh06n4CY1wN5J-418edVOMD0l7QQyqAIQ4JagGUgDz7AVaV6S6WgwEBMhwrMH4J5sQHxqq&lptoken=16d363c3064136126392&adtv=11135.11104_dd28ec_af58a&w=45580&ws=8063a697_503&wt=pub3de9c2f186d2480c962c35fb6c890ae1&referer=https%3A%2F%2Fwww.makeitprof.com%2F
Cookie: sid=%ED%FBH%E5%AF%FD%BA%06%95%CC%E1%1C%A8%D5o%D0%C0%F0%19%D5%C0oS%FF%5B%A8%FC7X%8E%DF%28; CSRFToken=951489b70615f77c0ad74c7677bc9b7715303c028bb5d5b63e0e69ace26fb21d.1663061863
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
etag: "2147486057"
last-modified: Mon, 28 Jun 2021 13:02:37 GMT
content-length: 1581
cache-control: public
date: Tue, 13 Sep 2022 09:37:44 GMT
server: Webserver
X-Firefox-Spdy: h2
www.vxctr.com/DynBanner/PreUmfrage3/img/18/user_06.jpg
200 OK 1.8 kB URL HTTP/2 www.vxctr.com/DynBanner/PreUmfrage3/img/18/user_06.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 64x64, components 3\012- data
Hash f2bed9b802ce13ed8f423dae8c0fadd6
9ee1206958fdf94b026d1d9e5fb0da4c94961fa3
b75aeb6feafd137680e89f2d1ac25d6e1ef343b30ab7dc144ad3affb55682319
GET /DynBanner/PreUmfrage3/img/18/user_06.jpg HTTP/1.1
Host: www.vxctr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.vxctr.com/EXT/Pre/Umfrage/3?age=18&vkamp=b679be98-1f4b-40a3-8a42-70b1dc3605ca&cep=Y7_gQK_mxSYNsXJZYC9nr1rN87rBxKor6uaLwFsKG2w5_2saf0Y6oQ2CLcHbYF2YX2PvUZroJqcOhkBoK5A5hTg4VAhVuxYwcp81TvZWum_zIMd40_8y_FlPDvmXaZnAG0kO8b2KORXGpdCjZ7g0vADszQ43Ckxa-XGaES93pCBhAsmT7-BLG-MYI9vdaRRX_9gN0ycbaJNBFFcCR1jxzlVKLm2QVF6xyYv5I5FJbjPa7GW7wmYy8OirAz9sAhFGSbHnOW3leNizAUKnh5G1UAH76R7_0KKYAnp1nKovqQr7OTeVnVLAtyJkdlpTvLyKDRkYQsv5xIzkjOjPjErJw5IPQdwcgABu6vewnOM59ihBHAwCNNa6j9e7RKMH6PCPvUAnYfR8xlSKebMO9rIge98TmcEpnVV1VZD2tYO8bu5BbDQNYJPFlZfelkHh06n4CY1wN5J-418edVOMD0l7QQyqAIQ4JagGUgDz7AVaV6S6WgwEBMhwrMH4J5sQHxqq&lptoken=16d363c3064136126392&adtv=11135.11104_dd28ec_af58a&w=45580&ws=8063a697_503&wt=pub3de9c2f186d2480c962c35fb6c890ae1&referer=https%3A%2F%2Fwww.makeitprof.com%2F
Cookie: sid=%ED%FBH%E5%AF%FD%BA%06%95%CC%E1%1C%A8%D5o%D0%C0%F0%19%D5%C0oS%FF%5B%A8%FC7X%8E%DF%28; CSRFToken=951489b70615f77c0ad74c7677bc9b7715303c028bb5d5b63e0e69ace26fb21d.1663061863
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
etag: "2147487729"
last-modified: Mon, 28 Jun 2021 13:02:37 GMT
content-length: 1790
cache-control: public
date: Tue, 13 Sep 2022 09:37:44 GMT
server: Webserver
X-Firefox-Spdy: h2
www.vxctr.com/DynBanner/PreUmfrage3/img/18/user_07.jpg
200 OK 2.2 kB URL HTTP/2 www.vxctr.com/DynBanner/PreUmfrage3/img/18/user_07.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 64x64, components 3\012- data
Hash 3ba2fbbcb3d0e2450f90e1c06f417777
3f8f72ab2af7412431c7be5bb0402db8dd823539
2d4d90c5c4774dd9268250e67a0384ff53841cecec79165d6f77ba929f91e814
GET /DynBanner/PreUmfrage3/img/18/user_07.jpg HTTP/1.1
Host: www.vxctr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.vxctr.com/EXT/Pre/Umfrage/3?age=18&vkamp=b679be98-1f4b-40a3-8a42-70b1dc3605ca&cep=Y7_gQK_mxSYNsXJZYC9nr1rN87rBxKor6uaLwFsKG2w5_2saf0Y6oQ2CLcHbYF2YX2PvUZroJqcOhkBoK5A5hTg4VAhVuxYwcp81TvZWum_zIMd40_8y_FlPDvmXaZnAG0kO8b2KORXGpdCjZ7g0vADszQ43Ckxa-XGaES93pCBhAsmT7-BLG-MYI9vdaRRX_9gN0ycbaJNBFFcCR1jxzlVKLm2QVF6xyYv5I5FJbjPa7GW7wmYy8OirAz9sAhFGSbHnOW3leNizAUKnh5G1UAH76R7_0KKYAnp1nKovqQr7OTeVnVLAtyJkdlpTvLyKDRkYQsv5xIzkjOjPjErJw5IPQdwcgABu6vewnOM59ihBHAwCNNa6j9e7RKMH6PCPvUAnYfR8xlSKebMO9rIge98TmcEpnVV1VZD2tYO8bu5BbDQNYJPFlZfelkHh06n4CY1wN5J-418edVOMD0l7QQyqAIQ4JagGUgDz7AVaV6S6WgwEBMhwrMH4J5sQHxqq&lptoken=16d363c3064136126392&adtv=11135.11104_dd28ec_af58a&w=45580&ws=8063a697_503&wt=pub3de9c2f186d2480c962c35fb6c890ae1&referer=https%3A%2F%2Fwww.makeitprof.com%2F
Cookie: sid=%ED%FBH%E5%AF%FD%BA%06%95%CC%E1%1C%A8%D5o%D0%C0%F0%19%D5%C0oS%FF%5B%A8%FC7X%8E%DF%28; CSRFToken=951489b70615f77c0ad74c7677bc9b7715303c028bb5d5b63e0e69ace26fb21d.1663061863
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
etag: "2970"
last-modified: Mon, 28 Jun 2021 13:02:37 GMT
content-length: 2163
cache-control: public
date: Tue, 13 Sep 2022 09:37:44 GMT
server: Webserver
X-Firefox-Spdy: h2
www.vxctr.com/DynBanner/PreUmfrage3/img/map-marker-alt-solid.svg
200 OK 495 B URL HTTP/2 www.vxctr.com/DynBanner/PreUmfrage3/img/map-marker-alt-solid.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (494)
Hash 46ca092853e106bb9459e5821b582bb9
b9881faa2716bf46c10d88e86cdae08517aecdd7
21567fa34740d15ceee439d4caabaeebd6f49b347cfa2fbf73ce18842573a8b7
Analyzer Verdict Alert fortinet Phishing
GET /DynBanner/PreUmfrage3/img/map-marker-alt-solid.svg HTTP/1.1
Host: www.vxctr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.vxctr.com/EXT/Pre/Umfrage/3?age=18&vkamp=b679be98-1f4b-40a3-8a42-70b1dc3605ca&cep=Y7_gQK_mxSYNsXJZYC9nr1rN87rBxKor6uaLwFsKG2w5_2saf0Y6oQ2CLcHbYF2YX2PvUZroJqcOhkBoK5A5hTg4VAhVuxYwcp81TvZWum_zIMd40_8y_FlPDvmXaZnAG0kO8b2KORXGpdCjZ7g0vADszQ43Ckxa-XGaES93pCBhAsmT7-BLG-MYI9vdaRRX_9gN0ycbaJNBFFcCR1jxzlVKLm2QVF6xyYv5I5FJbjPa7GW7wmYy8OirAz9sAhFGSbHnOW3leNizAUKnh5G1UAH76R7_0KKYAnp1nKovqQr7OTeVnVLAtyJkdlpTvLyKDRkYQsv5xIzkjOjPjErJw5IPQdwcgABu6vewnOM59ihBHAwCNNa6j9e7RKMH6PCPvUAnYfR8xlSKebMO9rIge98TmcEpnVV1VZD2tYO8bu5BbDQNYJPFlZfelkHh06n4CY1wN5J-418edVOMD0l7QQyqAIQ4JagGUgDz7AVaV6S6WgwEBMhwrMH4J5sQHxqq&lptoken=16d363c3064136126392&adtv=11135.11104_dd28ec_af58a&w=45580&ws=8063a697_503&wt=pub3de9c2f186d2480c962c35fb6c890ae1&referer=https%3A%2F%2Fwww.makeitprof.com%2F
Cookie: sid=%ED%FBH%E5%AF%FD%BA%06%95%CC%E1%1C%A8%D5o%D0%C0%F0%19%D5%C0oS%FF%5B%A8%FC7X%8E%DF%28; CSRFToken=951489b70615f77c0ad74c7677bc9b7715303c028bb5d5b63e0e69ace26fb21d.1663061863
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
etag: "1073745784"
last-modified: Wed, 14 Apr 2021 11:43:27 GMT
content-length: 495
cache-control: public
date: Tue, 13 Sep 2022 09:37:44 GMT
server: Webserver
X-Firefox-Spdy: h2
www.vxctr.com/DynBanner/PreUmfrage3/img/18/1.jpg
200 OK 42 kB URL HTTP/2 www.vxctr.com/DynBanner/PreUmfrage3/img/18/1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 560x430, components 3\012- data
Hash b150e2bfe6e3b745542cbb954f065e99
8a27b4110cce4665d1f1f938e1b10bb564ebbdba
a000f9c0efa705acb3eda76d9062b4acd46662d1bec922942d44eea2fac9e3c0
GET /DynBanner/PreUmfrage3/img/18/1.jpg HTTP/1.1
Host: www.vxctr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.vxctr.com/EXT/Pre/Umfrage/3?age=18&vkamp=b679be98-1f4b-40a3-8a42-70b1dc3605ca&cep=Y7_gQK_mxSYNsXJZYC9nr1rN87rBxKor6uaLwFsKG2w5_2saf0Y6oQ2CLcHbYF2YX2PvUZroJqcOhkBoK5A5hTg4VAhVuxYwcp81TvZWum_zIMd40_8y_FlPDvmXaZnAG0kO8b2KORXGpdCjZ7g0vADszQ43Ckxa-XGaES93pCBhAsmT7-BLG-MYI9vdaRRX_9gN0ycbaJNBFFcCR1jxzlVKLm2QVF6xyYv5I5FJbjPa7GW7wmYy8OirAz9sAhFGSbHnOW3leNizAUKnh5G1UAH76R7_0KKYAnp1nKovqQr7OTeVnVLAtyJkdlpTvLyKDRkYQsv5xIzkjOjPjErJw5IPQdwcgABu6vewnOM59ihBHAwCNNa6j9e7RKMH6PCPvUAnYfR8xlSKebMO9rIge98TmcEpnVV1VZD2tYO8bu5BbDQNYJPFlZfelkHh06n4CY1wN5J-418edVOMD0l7QQyqAIQ4JagGUgDz7AVaV6S6WgwEBMhwrMH4J5sQHxqq&lptoken=16d363c3064136126392&adtv=11135.11104_dd28ec_af58a&w=45580&ws=8063a697_503&wt=pub3de9c2f186d2480c962c35fb6c890ae1&referer=https%3A%2F%2Fwww.makeitprof.com%2F
Cookie: sid=%ED%FBH%E5%AF%FD%BA%06%95%CC%E1%1C%A8%D5o%D0%C0%F0%19%D5%C0oS%FF%5B%A8%FC7X%8E%DF%28; CSRFToken=951489b70615f77c0ad74c7677bc9b7715303c028bb5d5b63e0e69ace26fb21d.1663061863
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
etag: "2209"
last-modified: Wed, 14 Apr 2021 11:43:27 GMT
content-length: 42001
cache-control: public
date: Tue, 13 Sep 2022 09:37:44 GMT
server: Webserver
X-Firefox-Spdy: h2
www.vxctr.com/DynBanner/PreUmfrage3/bundle.91375b2395ffa3312264.js
200 OK 33 kB URL HTTP/2 www.vxctr.com/DynBanner/PreUmfrage3/bundle.91375b2395ffa3312264.js
IP
File type Unicode text, UTF-8 text, with very long lines (49059), with NEL line terminators
Hash 83be3a9f352ba3ff48af2b433b5552fb
6eac35e5a0f63bad736be75bb51f8e2c5199b315
85afc967a60c182d59a0e8ba0461172f0de340c9dd01354a120165c6e79767d5
Analyzer Verdict Alert fortinet Phishing
GET /DynBanner/PreUmfrage3/bundle.91375b2395ffa3312264.js HTTP/1.1
Host: www.vxctr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.vxctr.com/EXT/Pre/Umfrage/3?age=18&vkamp=b679be98-1f4b-40a3-8a42-70b1dc3605ca&cep=Y7_gQK_mxSYNsXJZYC9nr1rN87rBxKor6uaLwFsKG2w5_2saf0Y6oQ2CLcHbYF2YX2PvUZroJqcOhkBoK5A5hTg4VAhVuxYwcp81TvZWum_zIMd40_8y_FlPDvmXaZnAG0kO8b2KORXGpdCjZ7g0vADszQ43Ckxa-XGaES93pCBhAsmT7-BLG-MYI9vdaRRX_9gN0ycbaJNBFFcCR1jxzlVKLm2QVF6xyYv5I5FJbjPa7GW7wmYy8OirAz9sAhFGSbHnOW3leNizAUKnh5G1UAH76R7_0KKYAnp1nKovqQr7OTeVnVLAtyJkdlpTvLyKDRkYQsv5xIzkjOjPjErJw5IPQdwcgABu6vewnOM59ihBHAwCNNa6j9e7RKMH6PCPvUAnYfR8xlSKebMO9rIge98TmcEpnVV1VZD2tYO8bu5BbDQNYJPFlZfelkHh06n4CY1wN5J-418edVOMD0l7QQyqAIQ4JagGUgDz7AVaV6S6WgwEBMhwrMH4J5sQHxqq&lptoken=16d363c3064136126392&adtv=11135.11104_dd28ec_af58a&w=45580&ws=8063a697_503&wt=pub3de9c2f186d2480c962c35fb6c890ae1&referer=https%3A%2F%2Fwww.makeitprof.com%2F
Cookie: sid=%ED%FBH%E5%AF%FD%BA%06%95%CC%E1%1C%A8%D5o%D0%C0%F0%19%D5%C0oS%FF%5B%A8%FC7X%8E%DF%28; CSRFToken=951489b70615f77c0ad74c7677bc9b7715303c028bb5d5b63e0e69ace26fb21d.1663061863
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
etag: "3254783406-br"
last-modified: Tue, 23 Nov 2021 13:26:06 GMT
content-length: 32779
cache-control: public
vary: Accept-Encoding
content-encoding: br
date: Tue, 13 Sep 2022 09:37:44 GMT
server: Webserver
X-Firefox-Spdy: h2
www.vxctr.com/DynBanner/PreUmfrage3/fonts/OpenSans-Regular.8abbb9d98c0c7304060190592408ab78.woff2
200 OK 45 kB URL HTTP/2 www.vxctr.com/DynBanner/PreUmfrage3/fonts/OpenSans-Regular.8abbb9d98c0c7304060190592408ab78.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44672, version 1.0\012- data
Hash 8abbb9d98c0c7304060190592408ab78
9f3b18b564d841c179edd73f471d50fb9afbe9f7
9a2f879336b3b182afb6b4cfc49db53f4593f88e4cb7158ce223c201991b7f4e
Analyzer Verdict Alert fortinet Phishing
GET /DynBanner/PreUmfrage3/fonts/OpenSans-Regular.8abbb9d98c0c7304060190592408ab78.woff2 HTTP/1.1
Host: www.vxctr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.vxctr.com/DynBanner/PreUmfrage3/bundle.91375b2395ffa3312264.css
Cookie: sid=%ED%FBH%E5%AF%FD%BA%06%95%CC%E1%1C%A8%D5o%D0%C0%F0%19%D5%C0oS%FF%5B%A8%FC7X%8E%DF%28; CSRFToken=951489b70615f77c0ad74c7677bc9b7715303c028bb5d5b63e0e69ace26fb21d.1663061863
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/font-woff2
etag: "2147486763"
last-modified: Wed, 14 Apr 2021 11:43:27 GMT
content-length: 44672
cache-control: public
date: Tue, 13 Sep 2022 09:37:44 GMT
server: Webserver
X-Firefox-Spdy: h2
www.vxctr.com/CrM/Close/Smart?age=18&vkamp=b679be98-1f4b-40a3-8a42-70b1dc3605ca&cep=Y7_gQK_mxSYNsXJZYC9nr1rN87rBxKor6uaLwFsKG2w5_2saf0Y6oQ2CLcHbYF2YX2PvUZroJqcOhkBoK5A5hTg4VAhVuxYwcp81TvZWum_zIMd40_8y_FlPDvmXaZnAG0kO8b2KORXGpdCjZ7g0vADszQ43Ckxa-XGaES93pCBhAsmT7-BLG-MYI9vdaRRX_9gN0ycbaJNBFFcCR1jxzlVKLm2QVF6xyYv5I5FJbjPa7GW7wmYy8OirAz9sAhFGSbHnOW3leNizAUKnh5G1UAH76R7_0KKYAnp1nKovqQr7OTeVnVLAtyJkdlpTvLyKDRkYQsv5xIzkjOjPjErJw5IPQdwcgABu6vewnOM59ihBHAwCNNa6j9e7RKMH6PCPvUAnYfR8xlSKebMO9rIge98TmcEpnVV1VZD2tYO8bu5BbDQNYJPFlZfelkHh06n4CY1wN5J-418edVOMD0l7QQyqAIQ4JagGUgDz7AVaV6S6WgwEBMhwrMH4J5sQHxqq&lptoken=16d363c3064136126392&adtv=11135.11104_dd28ec_af58a&w=45580&ws=8063a697_503&wt=pub3de9c2f186d2480c962c35fb6c890ae1&referer=https%3A%2F%2Fwww.makeitprof.com%2F&js=1&initial=DynBanner%3A12954.11104_195511_df217
200 OK 18 kB URL HTTP/2 www.vxctr.com/CrM/Close/Smart?age=18&vkamp=b679be98-1f4b-40a3-8a42-70b1dc3605ca&cep=Y7_gQK_mxSYNsXJZYC9nr1rN87rBxKor6uaLwFsKG2w5_2saf0Y6oQ2CLcHbYF2YX2PvUZroJqcOhkBoK5A5hTg4VAhVuxYwcp81TvZWum_zIMd40_8y_FlPDvmXaZnAG0kO8b2KORXGpdCjZ7g0vADszQ43Ckxa-XGaES93pCBhAsmT7-BLG-MYI9vdaRRX_9gN0ycbaJNBFFcCR1jxzlVKLm2QVF6xyYv5I5FJbjPa7GW7wmYy8OirAz9sAhFGSbHnOW3leNizAUKnh5G1UAH76R7_0KKYAnp1nKovqQr7OTeVnVLAtyJkdlpTvLyKDRkYQsv5xIzkjOjPjErJw5IPQdwcgABu6vewnOM59ihBHAwCNNa6j9e7RKMH6PCPvUAnYfR8xlSKebMO9rIge98TmcEpnVV1VZD2tYO8bu5BbDQNYJPFlZfelkHh06n4CY1wN5J-418edVOMD0l7QQyqAIQ4JagGUgDz7AVaV6S6WgwEBMhwrMH4J5sQHxqq&lptoken=16d363c3064136126392&adtv=11135.11104_dd28ec_af58a&w=45580&ws=8063a697_503&wt=pub3de9c2f186d2480c962c35fb6c890ae1&referer=https%3A%2F%2Fwww.makeitprof.com%2F&js=1&initial=DynBanner%3A12954.11104_195511_df217
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (25220)
Hash 1e6a41571797547cc87e615a7a434c65
8dc66a07da3f148c28fbd6321ffb60ad1701f7f9
2ee7ffb30aa386f3dff7badf61f093bc1fdf30434e54f88474426ab1f6914351
GET /CrM/Close/Smart?age=18&vkamp=b679be98-1f4b-40a3-8a42-70b1dc3605ca&cep=Y7_gQK_mxSYNsXJZYC9nr1rN87rBxKor6uaLwFsKG2w5_2saf0Y6oQ2CLcHbYF2YX2PvUZroJqcOhkBoK5A5hTg4VAhVuxYwcp81TvZWum_zIMd40_8y_FlPDvmXaZnAG0kO8b2KORXGpdCjZ7g0vADszQ43Ckxa-XGaES93pCBhAsmT7-BLG-MYI9vdaRRX_9gN0ycbaJNBFFcCR1jxzlVKLm2QVF6xyYv5I5FJbjPa7GW7wmYy8OirAz9sAhFGSbHnOW3leNizAUKnh5G1UAH76R7_0KKYAnp1nKovqQr7OTeVnVLAtyJkdlpTvLyKDRkYQsv5xIzkjOjPjErJw5IPQdwcgABu6vewnOM59ihBHAwCNNa6j9e7RKMH6PCPvUAnYfR8xlSKebMO9rIge98TmcEpnVV1VZD2tYO8bu5BbDQNYJPFlZfelkHh06n4CY1wN5J-418edVOMD0l7QQyqAIQ4JagGUgDz7AVaV6S6WgwEBMhwrMH4J5sQHxqq&lptoken=16d363c3064136126392&adtv=11135.11104_dd28ec_af58a&w=45580&ws=8063a697_503&wt=pub3de9c2f186d2480c962c35fb6c890ae1&referer=https%3A%2F%2Fwww.makeitprof.com%2F&js=1&initial=DynBanner%3A12954.11104_195511_df217 HTTP/1.1
Host: www.vxctr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.vxctr.com/EXT/Pre/Umfrage/3?age=18&vkamp=b679be98-1f4b-40a3-8a42-70b1dc3605ca&cep=Y7_gQK_mxSYNsXJZYC9nr1rN87rBxKor6uaLwFsKG2w5_2saf0Y6oQ2CLcHbYF2YX2PvUZroJqcOhkBoK5A5hTg4VAhVuxYwcp81TvZWum_zIMd40_8y_FlPDvmXaZnAG0kO8b2KORXGpdCjZ7g0vADszQ43Ckxa-XGaES93pCBhAsmT7-BLG-MYI9vdaRRX_9gN0ycbaJNBFFcCR1jxzlVKLm2QVF6xyYv5I5FJbjPa7GW7wmYy8OirAz9sAhFGSbHnOW3leNizAUKnh5G1UAH76R7_0KKYAnp1nKovqQr7OTeVnVLAtyJkdlpTvLyKDRkYQsv5xIzkjOjPjErJw5IPQdwcgABu6vewnOM59ihBHAwCNNa6j9e7RKMH6PCPvUAnYfR8xlSKebMO9rIge98TmcEpnVV1VZD2tYO8bu5BbDQNYJPFlZfelkHh06n4CY1wN5J-418edVOMD0l7QQyqAIQ4JagGUgDz7AVaV6S6WgwEBMhwrMH4J5sQHxqq&lptoken=16d363c3064136126392&adtv=11135.11104_dd28ec_af58a&w=45580&ws=8063a697_503&wt=pub3de9c2f186d2480c962c35fb6c890ae1&referer=https%3A%2F%2Fwww.makeitprof.com%2F
Cookie: sid=%ED%FBH%E5%AF%FD%BA%06%95%CC%E1%1C%A8%D5o%D0%C0%F0%19%D5%C0oS%FF%5B%A8%FC7X%8E%DF%28; CSRFToken=951489b70615f77c0ad74c7677bc9b7715303c028bb5d5b63e0e69ace26fb21d.1663061863
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
set-cookie: w=45580; expires=Tue, 13-Sep-2022 09:37:44 GMT; Max-Age=0; SameSite=Lax
ws=8063a697_503; expires=Tue, 13-Sep-2022 09:37:44 GMT; Max-Age=0; SameSite=Lax
wt=pub3de9c2f186d2480c962c35fb6c890ae1; expires=Tue, 13-Sep-2022 09:37:44 GMT; Max-Age=0; SameSite=Lax
sid=%ED%FBH%E5%AF%FD%BA%06%95%CC%E1%1C%A8%D5o%D0%C0%F0%19%D5%C0oS%FF%5B%A8%FC7X%8E%DF%28; expires=Thu, 15-Sep-2022 11:37:44 GMT; Max-Age=180000; path=/; SameSite=Strict
CSRFToken=b39551ae4f0b9cb31f3ce9d8184bd0527e8cfab4079ffe0a26ae0eaffb366e75.1663061864; expires=Tue, 13-Sep-2022 10:07:44 GMT; Max-Age=1800; path=/; SameSite=Strict
content-type: text/html; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
content-length: 18182
date: Tue, 13 Sep 2022 09:37:44 GMT
server: Webserver
X-Firefox-Spdy: h2
www.vxctr.com/Dyn/Webpush/Pre?w=45580&ws=8063a697_503&wt=pub3de9c2f186d2480c962c35fb6c890ae1&js=1&age=18
200 OK 7.0 kB URL HTTP/2 www.vxctr.com/Dyn/Webpush/Pre?w=45580&ws=8063a697_503&wt=pub3de9c2f186d2480c962c35fb6c890ae1&js=1&age=18
IP
File type HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (18846)
Hash b2e985e074bca2fc19866bf93b660c00
1557d3fbe81c7f2eee4677a436e234eb4a1c7671
e4ea08266d4832744f35d054aeebf7530b3e5a12f15f74423da830eaa5dc7c9d
GET /Dyn/Webpush/Pre?w=45580&ws=8063a697_503&wt=pub3de9c2f186d2480c962c35fb6c890ae1&js=1&age=18 HTTP/1.1
Host: www.vxctr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.vxctr.com/EXT/Pre/Umfrage/3?age=18&vkamp=b679be98-1f4b-40a3-8a42-70b1dc3605ca&cep=Y7_gQK_mxSYNsXJZYC9nr1rN87rBxKor6uaLwFsKG2w5_2saf0Y6oQ2CLcHbYF2YX2PvUZroJqcOhkBoK5A5hTg4VAhVuxYwcp81TvZWum_zIMd40_8y_FlPDvmXaZnAG0kO8b2KORXGpdCjZ7g0vADszQ43Ckxa-XGaES93pCBhAsmT7-BLG-MYI9vdaRRX_9gN0ycbaJNBFFcCR1jxzlVKLm2QVF6xyYv5I5FJbjPa7GW7wmYy8OirAz9sAhFGSbHnOW3leNizAUKnh5G1UAH76R7_0KKYAnp1nKovqQr7OTeVnVLAtyJkdlpTvLyKDRkYQsv5xIzkjOjPjErJw5IPQdwcgABu6vewnOM59ihBHAwCNNa6j9e7RKMH6PCPvUAnYfR8xlSKebMO9rIge98TmcEpnVV1VZD2tYO8bu5BbDQNYJPFlZfelkHh06n4CY1wN5J-418edVOMD0l7QQyqAIQ4JagGUgDz7AVaV6S6WgwEBMhwrMH4J5sQHxqq&lptoken=16d363c3064136126392&adtv=11135.11104_dd28ec_af58a&w=45580&ws=8063a697_503&wt=pub3de9c2f186d2480c962c35fb6c890ae1&referer=https%3A%2F%2Fwww.makeitprof.com%2F
Cookie: sid=%ED%FBH%E5%AF%FD%BA%06%95%CC%E1%1C%A8%D5o%D0%C0%F0%19%D5%C0oS%FF%5B%A8%FC7X%8E%DF%28; CSRFToken=951489b70615f77c0ad74c7677bc9b7715303c028bb5d5b63e0e69ace26fb21d.1663061863
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
set-cookie: w=45580; expires=Tue, 13-Sep-2022 09:37:44 GMT; Max-Age=0; SameSite=Lax
ws=8063a697_503; expires=Tue, 13-Sep-2022 09:37:44 GMT; Max-Age=0; SameSite=Lax
wt=pub3de9c2f186d2480c962c35fb6c890ae1; expires=Tue, 13-Sep-2022 09:37:44 GMT; Max-Age=0; SameSite=Lax
sid=%ED%FBH%E5%AF%FD%BA%06%95%CC%E1%1C%A8%D5o%D0%C0%F0%19%D5%C0oS%FF%5B%A8%FC7X%8E%DF%28; expires=Thu, 15-Sep-2022 11:37:44 GMT; Max-Age=180000; path=/; SameSite=Strict
CSRFToken=b39551ae4f0b9cb31f3ce9d8184bd0527e8cfab4079ffe0a26ae0eaffb366e75.1663061864; expires=Tue, 13-Sep-2022 10:07:44 GMT; Max-Age=1800; path=/; SameSite=Strict
content-type: text/html; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
content-length: 6974
date: Tue, 13 Sep 2022 09:37:44 GMT
server: Webserver
X-Firefox-Spdy: h2
www.vxctr.com/icons/ext.png
200 OK 2.2 kB URL HTTP/2 www.vxctr.com/icons/ext.png
IP
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash 3b58b839ade1bae5069a4eb40822322d
e326255ec2882ce0dcca92fb9b3eeb1050362076
4b06e0a2080f0c0ccd4442b336ab382bbf45de1092b28c4db7f1e2825daee07f
GET /icons/ext.png HTTP/1.1
Host: www.vxctr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.vxctr.com/EXT/Pre/Umfrage/3?age=18&vkamp=b679be98-1f4b-40a3-8a42-70b1dc3605ca&cep=Y7_gQK_mxSYNsXJZYC9nr1rN87rBxKor6uaLwFsKG2w5_2saf0Y6oQ2CLcHbYF2YX2PvUZroJqcOhkBoK5A5hTg4VAhVuxYwcp81TvZWum_zIMd40_8y_FlPDvmXaZnAG0kO8b2KORXGpdCjZ7g0vADszQ43Ckxa-XGaES93pCBhAsmT7-BLG-MYI9vdaRRX_9gN0ycbaJNBFFcCR1jxzlVKLm2QVF6xyYv5I5FJbjPa7GW7wmYy8OirAz9sAhFGSbHnOW3leNizAUKnh5G1UAH76R7_0KKYAnp1nKovqQr7OTeVnVLAtyJkdlpTvLyKDRkYQsv5xIzkjOjPjErJw5IPQdwcgABu6vewnOM59ihBHAwCNNa6j9e7RKMH6PCPvUAnYfR8xlSKebMO9rIge98TmcEpnVV1VZD2tYO8bu5BbDQNYJPFlZfelkHh06n4CY1wN5J-418edVOMD0l7QQyqAIQ4JagGUgDz7AVaV6S6WgwEBMhwrMH4J5sQHxqq&lptoken=16d363c3064136126392&adtv=11135.11104_dd28ec_af58a&w=45580&ws=8063a697_503&wt=pub3de9c2f186d2480c962c35fb6c890ae1&referer=https%3A%2F%2Fwww.makeitprof.com%2F
Cookie: sid=%ED%FBH%E5%AF%FD%BA%06%95%CC%E1%1C%A8%D5o%D0%C0%F0%19%D5%C0oS%FF%5B%A8%FC7X%8E%DF%28; CSRFToken=b39551ae4f0b9cb31f3ce9d8184bd0527e8cfab4079ffe0a26ae0eaffb366e75.1663061864
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
etag: "3018"
last-modified: Wed, 02 Dec 2020 08:15:40 GMT
content-length: 2169
cache-control: public
date: Tue, 13 Sep 2022 09:37:44 GMT
server: Webserver
X-Firefox-Spdy: h2
cdn.fantecio.com/dynbanner/webpush/52_webpush_7835398.jpg
200 OK 122 kB URL HTTP/1.1 cdn.fantecio.com/dynbanner/webpush/52_webpush_7835398.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6], baseline, precision 8, 360x360, components 3\012- data
Size 122 kB (122349 bytes)
Hash 3658b6d4cd520d8c8a6be92cafb00744
ffa7feca981fb1acea0121a751a9623ade595bf2
3da4030c4a3aa818a8f27c8fc31a5504e6de95cdbf51a601c0f1ba0a7383098a
GET /dynbanner/webpush/52_webpush_7835398.jpg HTTP/1.1
Host: cdn.fantecio.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.vxctr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Headers: X-Requested-With,Content-Range,If-Range,Range,Content-Type,Authorization,X-Request,Accept
Access-Control-Allow-Methods: *
Access-Control-Allow-Origin: *
Cache-Control: max-age=86400
Last-Modified: Tue, 12 Jul 2022 12:34:34 GMT
P3p: CP="OTI DSP COR IVDo IVAo PSA PSD TAI DEV ADM CUR CONo OUR IND PHY ONL UNI PUR FIN COM NAV INT CNT PRE", policyref="/w3c/p3p.xml"
Date: Mon, 12 Sep 2022 13:59:56 GMT
Content-Length: 122349
Content-Type: image/jpeg
Accept-Ranges: bytes
Connection: keep-alive
www.vxctr.com/DynBanner/PreUmfrage3/img/18/user_08.jpg
200 OK 2.2 kB URL HTTP/2 www.vxctr.com/DynBanner/PreUmfrage3/img/18/user_08.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 64x64, components 3\012- data
Hash ba8e18e4bce6c3c4d07a309c690d0543
4d93e471663fa7573066e16d397e72bce5af4a92
f18ab6773ae7924a0b9ec517fb1e56e572b1fc803b429320b3e0e59a60e2322b
GET /DynBanner/PreUmfrage3/img/18/user_08.jpg HTTP/1.1
Host: www.vxctr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.vxctr.com/EXT/Pre/Umfrage/3?age=18&vkamp=b679be98-1f4b-40a3-8a42-70b1dc3605ca&cep=Y7_gQK_mxSYNsXJZYC9nr1rN87rBxKor6uaLwFsKG2w5_2saf0Y6oQ2CLcHbYF2YX2PvUZroJqcOhkBoK5A5hTg4VAhVuxYwcp81TvZWum_zIMd40_8y_FlPDvmXaZnAG0kO8b2KORXGpdCjZ7g0vADszQ43Ckxa-XGaES93pCBhAsmT7-BLG-MYI9vdaRRX_9gN0ycbaJNBFFcCR1jxzlVKLm2QVF6xyYv5I5FJbjPa7GW7wmYy8OirAz9sAhFGSbHnOW3leNizAUKnh5G1UAH76R7_0KKYAnp1nKovqQr7OTeVnVLAtyJkdlpTvLyKDRkYQsv5xIzkjOjPjErJw5IPQdwcgABu6vewnOM59ihBHAwCNNa6j9e7RKMH6PCPvUAnYfR8xlSKebMO9rIge98TmcEpnVV1VZD2tYO8bu5BbDQNYJPFlZfelkHh06n4CY1wN5J-418edVOMD0l7QQyqAIQ4JagGUgDz7AVaV6S6WgwEBMhwrMH4J5sQHxqq&lptoken=16d363c3064136126392&adtv=11135.11104_dd28ec_af58a&w=45580&ws=8063a697_503&wt=pub3de9c2f186d2480c962c35fb6c890ae1&referer=https%3A%2F%2Fwww.makeitprof.com%2F
Cookie: sid=%ED%FBH%E5%AF%FD%BA%06%95%CC%E1%1C%A8%D5o%D0%C0%F0%19%D5%C0oS%FF%5B%A8%FC7X%8E%DF%28; CSRFToken=b39551ae4f0b9cb31f3ce9d8184bd0527e8cfab4079ffe0a26ae0eaffb366e75.1663061864
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
etag: "3202"
last-modified: Mon, 28 Jun 2021 13:02:37 GMT
content-length: 2192
cache-control: public
date: Tue, 13 Sep 2022 09:37:48 GMT
server: Webserver
X-Firefox-Spdy: h2
282.novitrk1.com/smartlink?mongo_id=63204f65c7238c7d4e5a5777&mongo_grouped_id=63204f65c7238c7d4e5a5778&redirect_url=https%3A%2F%2Fm.news-page.net%2F%3Futm_medium%3D98774ae3068a24906aeee5af1282751e21ca5683%26utm_campaign%3Dmainstream_np%261%3D3%262%3D%7Bsubid%7D%26cid%3D902795295%26np%3D1&fingerprint=eyJ3ZWJkcml2ZXIiOjAsImhlYWRsZXNzIjowLCJjaHJvbWUiOjAsIm9uTGluZSI6MSwiY29va2llRW5hYmxlZCI6MSwicGx1Z2lucyI6MCwibWltZVR5cGVzIjowLCJzY3JlZW5XaWR0aCI6MTI4MCwic2NyZWVuSGVpZ2h0IjoxMDI0LCJvdXRlcldpZHRoIjoxMTUyLCJvdXRlckhlaWdodCI6OTAxLCJjb2xvckRlcHRoIjoyNCwiZGV2aWNlTWVtb3J5IjowLCJoYXJkd2FyZUNvbmN1cnJlbmN5IjoxNiwic3RhbmRhbG9uZSI6MCwidGltZXpvbmUiOiJVVEMiLCJsYW5ndWFnZSI6ImVuLVVTIiwibGFuZ3VhZ2VzIjpbImVuLVVTIiwiZW4iXSwicGxhdGZvcm0iOiJMaW51eCB4ODZfNjQiLCJ0b3VjaCI6MCwiaWZyYW1lIjowLCJldmFsIjozNywidXNlcmFnZW50IjoiTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo5Ni4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94Lzk2LjAiLCJvdmVycmlkZSI6MSwiZHVyYXRpb24iOjMyfQ==&js=1
302 Found 0 B URL HTTP/2 282.novitrk1.com/smartlink?mongo_id=63204f65c7238c7d4e5a5777&mongo_grouped_id=63204f65c7238c7d4e5a5778&redirect_url=https%3A%2F%2Fm.news-page.net%2F%3Futm_medium%3D98774ae3068a24906aeee5af1282751e21ca5683%26utm_campaign%3Dmainstream_np%261%3D3%262%3D%7Bsubid%7D%26cid%3D902795295%26np%3D1&fingerprint=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&js=1
IP
GET /smartlink?mongo_id=63204f65c7238c7d4e5a5777&mongo_grouped_id=63204f65c7238c7d4e5a5778&redirect_url=https%3A%2F%2Fm.news-page.net%2F%3Futm_medium%3D98774ae3068a24906aeee5af1282751e21ca5683%26utm_campaign%3Dmainstream_np%261%3D3%262%3D%7Bsubid%7D%26cid%3D902795295%26np%3D1&fingerprint=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&js=1 HTTP/1.1
Host: 282.novitrk1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IjBOVHNTdnRHanE3Y0U0WEg4VFJvT1E9PSIsInZhbHVlIjoiZkVPa3N3NGFEVVZ2SGduTnNobCtwdFk1SzJjRFk0UGFwNER5R2grdWtYbTRjRW81aXIrR2xqdWlwMWFKZ00zUjloczZ6MXVsSEkyTm1maWZ3bHRoNGx5c1BDVnBTU3ZRNS83dWFlenNVOWo5emVqYUo2UTZkS3IvQTZralh1RTEiLCJtYWMiOiI4OWY2OGMxOTAwMzljZTg3MTBkYjAzYTUyMzExMzM3OWJlODZiNmFiODRkOTZhOWFhODg3MmNmNjdlODVmMjFlIiwidGFnIjoiIn0%3D; novidash_session=eyJpdiI6IkxZVHFWeEI2OXJQREp3TXpyVTJBblE9PSIsInZhbHVlIjoiNGFZM1kwSldLSmg2NmJxMUE3RUcyWUhBVzFjM2I4ODNEeCtCc0s0S0l4SW5hNGhNL1BuZGtObnhQVEVnR2JkeFphM3hKSThQeFVuK2tncmhFMjB2QTJ2VFY4VjJnWXlSUGFDOFZBWHkzUmlrY013KzhSK3ZzZERRTzJsMW0vZ08iLCJtYWMiOiI2MTU1OGRhODY4YzlmZWQzYWU2ZDA0NWJkMDk5ZWFhNWI1MzZiNTcwNDA4MGU4OTljY2YzMjZkZjZkMDAxNmNkIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
server: nginx/1.19.10
date: Tue, 13 Sep 2022 09:37:41 GMT
content-type: text/html; charset=UTF-8
location: https://m.news-page.net/?utm_medium=98774ae3068a24906aeee5af1282751e21ca5683&utm_campaign=mainstream_np&1=3&2={subid}&cid=902795295&np=1
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
set-cookie: XSRF-TOKEN=eyJpdiI6Im9UOXAyaUdPNE9xK3haYVNXWHhoRGc9PSIsInZhbHVlIjoiK2hyNXliN0F1eko5d2I5ZnJzaGp4ZmRHa1IvUXM3R3NNL21sNTRSRXRwREVDdSt6MGhsdWZNRnhraEY0NnZyRzJiSlQxK3FaVXlralNsdktXM2Z5cXMwU0gwY0hUUVZKN2lNdFh0RTJPQ2lLQzlkaWF6MnpWTWdqNEZXUWN0ZkYiLCJtYWMiOiJjODE0MzU5OTc0NGFjY2UxODU1YjY4ODQ5ZDU1MjUzN2VjYzgyNmYxODMzY2YyODE4NmYyZjUwOWQ0NTgyMzlhIiwidGFnIjoiIn0%3D; expires=Tue, 13-Sep-2022 11:37:41 GMT; Max-Age=7200; path=/; samesite=lax
novidash_session=eyJpdiI6ImtvOStuVXg1cGJwSDBkQmtYaktPT3c9PSIsInZhbHVlIjoiZEVrcHBpSkNZUnZHc1pKRVNLbjVkM2hjL1FTWVM0UFFBSVl3a09LTndFK05ibENOMUN4MlZJUk12RjB0Umd5TWpicXRvQm9ybEY5cENrY3MzUUJqNFZPUXArUWw5L05IK3ZHdEpBNDFURk94M3ZMdmtQUDAwRmphNmUreDJiK0IiLCJtYWMiOiJhNGNkZDlmODhjN2I3ZmVlMWFhZWMyYWJlMjQ3NjAwYzk1NzQ1NWFiMDg2ZjFhNzE4NWQ5ZDE1YzA0NzU5MWIzIiwidGFnIjoiIn0%3D; expires=Tue, 13-Sep-2022 11:37:41 GMT; Max-Age=7200; path=/; httponly; samesite=lax
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
m.news-page.net/?utm_medium=98774ae3068a24906aeee5af1282751e21ca5683&utm_campaign=mainstream_np&1=3&2={subid}&cid=902795295&np=1
200 OK 0 B URL HTTP/2 m.news-page.net/?utm_medium=98774ae3068a24906aeee5af1282751e21ca5683&utm_campaign=mainstream_np&1=3&2={subid}&cid=902795295&np=1
IP
GET /?utm_medium=98774ae3068a24906aeee5af1282751e21ca5683&utm_campaign=mainstream_np&1=3&2={subid}&cid=902795295&np=1 HTTP/1.1
Host: m.news-page.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Sep 2022 09:37:41 GMT
content-type: text/html; charset=UTF-8
location: https://m.news-page.net/?utm_term=7142796304236675153&ver=4viyaptcjo
vary: Accept-Encoding
x-powered-by: PHP/8.1.9
cache-control: no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
set-cookie: u=a1248112dff3aa6df31bace648c415d7; expires=Wed, 13-Sep-2023 09:37:41 GMT; Max-Age=31536000; path=/
strict-transport-security: max-age=31536000; includeSubdomains;
content-encoding: gzip
X-Firefox-Spdy: h2
m.news-page.net/?utm_term=7142796304236675153&ver=4viyaptcjo&utm_content=e6c2c6dcd68fd49594fc9695a6a79597828bb8888e8f8ebdb2c6b0c4b6b78587b2bb88b0bdb68cbd82b380b3b6b6bcb4aaaba9a9aeafacada293a1919697f8f4848f9b8a8f9f89c09291898c87959de5cbfbf8cbcaffcec9f2f3f085848291f5cafac8f8fcf7fccdf3f3f2f5c6c7c4c5dae8edebe8ebebebebebe6e2e0efece61b85
200 OK 0 B URL HTTP/2 m.news-page.net/?utm_term=7142796304236675153&ver=4viyaptcjo&utm_content=e6c2c6dcd68fd49594fc9695a6a79597828bb8888e8f8ebdb2c6b0c4b6b78587b2bb88b0bdb68cbd82b380b3b6b6bcb4aaaba9a9aeafacada293a1919697f8f4848f9b8a8f9f89c09291898c87959de5cbfbf8cbcaffcec9f2f3f085848291f5cafac8f8fcf7fccdf3f3f2f5c6c7c4c5dae8edebe8ebebebebebe6e2e0efece61b85
IP
GET /?utm_term=7142796304236675153&ver=4viyaptcjo&utm_content=e6c2c6dcd68fd49594fc9695a6a79597828bb8888e8f8ebdb2c6b0c4b6b78587b2bb88b0bdb68cbd82b380b3b6b6bcb4aaaba9a9aeafacada293a1919697f8f4848f9b8a8f9f89c09291898c87959de5cbfbf8cbcaffcec9f2f3f085848291f5cafac8f8fcf7fccdf3f3f2f5c6c7c4c5dae8edebe8ebebebebebe6e2e0efece61b85 HTTP/1.1
Host: m.news-page.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.news-page.net/?utm_medium=98774ae3068a24906aeee5af1282751e21ca5683&utm_campaign=mainstream_np&1=3&2={subid}&cid=902795295&np=1
Cookie: u=a1248112dff3aa6df31bace648c415d7
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Sep 2022 09:37:42 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
x-powered-by: PHP/8.1.9
cache-control: no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubdomains;
content-encoding: gzip
X-Firefox-Spdy: h2
www.makeitprof.com/rc/86b528a829?affclick=63204f66af6d97000193d1c9&pubid=503
200 OK 0 B URL HTTP/2 www.makeitprof.com/rc/86b528a829?affclick=63204f66af6d97000193d1c9&pubid=503
IP
GET /rc/86b528a829?affclick=63204f66af6d97000193d1c9&pubid=503 HTTP/1.1
Host: www.makeitprof.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 13 Sep 2022 09:37:43 GMT
content-type: text/html; charset=utf-8
set-cookie: AWSALB=ECAcy37dNxhIy+28Fmo3JnZCev15VZF3R9V2iagEu/KAPr5h+UFex6u5FILkCJ90xTLhR+TuENV9o3inOq2gDz2afcW3m5zjmmj2vHzgBhU7rdOz/GP0EUy2VpMq; Expires=Tue, 20 Sep 2022 09:37:43 GMT; Path=/
AWSALBCORS=ECAcy37dNxhIy+28Fmo3JnZCev15VZF3R9V2iagEu/KAPr5h+UFex6u5FILkCJ90xTLhR+TuENV9o3inOq2gDz2afcW3m5zjmmj2vHzgBhU7rdOz/GP0EUy2VpMq; Expires=Tue, 20 Sep 2022 09:37:43 GMT; Path=/; SameSite=None
vary: Accept-Encoding, Accept-Language, Cookie
content-language: en
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9OW%2FQeIjNjrf9MTEilqG%2B9bCDWtDiVAzl9LICqtNzzkWvYvXHtSRdmGXUmISungMGxV971v61NBjlSRHnLqRqRqqrqdZRUGBPAs8QXc1LbGHa3vcalWssnY26aKwtdqguiHGOeI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 749fe7e3ff39b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
282.novitrk1.com/smartlink?user_id=3&&creative_id=276030&extra_id=double_click&traffic_source=
200 OK 0 B URL HTTP/2 282.novitrk1.com/smartlink?user_id=3&&creative_id=276030&extra_id=double_click&traffic_source=
IP
GET /smartlink?user_id=3&&creative_id=276030&extra_id=double_click&traffic_source= HTTP/1.1
Host: 282.novitrk1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx/1.19.10
date: Tue, 13 Sep 2022 09:37:41 GMT
content-type: text/html; charset=UTF-8
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
set-cookie: XSRF-TOKEN=eyJpdiI6InJlTVZkMVR3TEJacWFEc1RaUDRzdXc9PSIsInZhbHVlIjoiWVNZcUJ2SXIxYzhBUUQ2TmhTclZLVDRxZEJRLy92ekUxeHJ4N053MFh0Q2U2ZjczS2VhOUMvb0ZiNUJ5aTZJbGxBbzYwVHpzNHpBcXVuRmlmYTQvZjM4dXFTVUhHRUlDWmR5WUtmL2lKcDJ5ekdiaFRVZHp4Qytiem5ackF4UjIiLCJtYWMiOiI0OWZhOTlmMWQ3MzU5NWI1ZGFkMTIyZWY1M2EzOTcwY2MzYjgwN2Q0NzE2Y2I5NGRhY2M5NjU2MTYyNGVkNjIzIiwidGFnIjoiIn0%3D; expires=Tue, 13-Sep-2022 11:37:41 GMT; Max-Age=7200; path=/; samesite=lax
novidash_session=eyJpdiI6IjVHdC9ueitzOHYxTFd4STNDaWJpTVE9PSIsInZhbHVlIjoiUWZGcHJhUmt4N1E5ME90enpHVDFJbmRvRXdmMWh3MXhtREJGTXhqaTBZSVQzTUYyYUMrZ1ZXUHNxRzhCOFBWdUhFSzJES29DVEY5RFpsdEI1d09GNDcxRWp5THBxNUtZTjh3QUU2YmlmRTQyaWg2OGFsVDZRM0tLbm9zQ1VMZEciLCJtYWMiOiI3ZmY3YjczMDQ0NDk4YjYyMTYzZTlmYmY5YWRiZTgzZDVjYmQwZGMwYTBhMTBkMjMwMTFlMjYwNjVmYTFhNTNkIiwidGFnIjoiIn0%3D; expires=Tue, 13-Sep-2022 11:37:41 GMT; Max-Age=7200; path=/; httponly; samesite=lax
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
282.novitrk1.com/smartlink-css/63204f65c7238c7d4e5a5777
200 OK 0 B URL HTTP/2 282.novitrk1.com/smartlink-css/63204f65c7238c7d4e5a5777
IP
GET /smartlink-css/63204f65c7238c7d4e5a5777 HTTP/1.1
Host: 282.novitrk1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://282.novitrk1.com/smartlink?user_id=3&&creative_id=276030&extra_id=double_click&traffic_source=
Cookie: XSRF-TOKEN=eyJpdiI6InJlTVZkMVR3TEJacWFEc1RaUDRzdXc9PSIsInZhbHVlIjoiWVNZcUJ2SXIxYzhBUUQ2TmhTclZLVDRxZEJRLy92ekUxeHJ4N053MFh0Q2U2ZjczS2VhOUMvb0ZiNUJ5aTZJbGxBbzYwVHpzNHpBcXVuRmlmYTQvZjM4dXFTVUhHRUlDWmR5WUtmL2lKcDJ5ekdiaFRVZHp4Qytiem5ackF4UjIiLCJtYWMiOiI0OWZhOTlmMWQ3MzU5NWI1ZGFkMTIyZWY1M2EzOTcwY2MzYjgwN2Q0NzE2Y2I5NGRhY2M5NjU2MTYyNGVkNjIzIiwidGFnIjoiIn0%3D; novidash_session=eyJpdiI6IjVHdC9ueitzOHYxTFd4STNDaWJpTVE9PSIsInZhbHVlIjoiUWZGcHJhUmt4N1E5ME90enpHVDFJbmRvRXdmMWh3MXhtREJGTXhqaTBZSVQzTUYyYUMrZ1ZXUHNxRzhCOFBWdUhFSzJES29DVEY5RFpsdEI1d09GNDcxRWp5THBxNUtZTjh3QUU2YmlmRTQyaWg2OGFsVDZRM0tLbm9zQ1VMZEciLCJtYWMiOiI3ZmY3YjczMDQ0NDk4YjYyMTYzZTlmYmY5YWRiZTgzZDVjYmQwZGMwYTBhMTBkMjMwMTFlMjYwNjVmYTFhNTNkIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.19.10
date: Tue, 13 Sep 2022 09:37:41 GMT
content-type: text/css; charset=UTF-8
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
access-control-allow-origin: *
set-cookie: XSRF-TOKEN=eyJpdiI6IjBOVHNTdnRHanE3Y0U0WEg4VFJvT1E9PSIsInZhbHVlIjoiZkVPa3N3NGFEVVZ2SGduTnNobCtwdFk1SzJjRFk0UGFwNER5R2grdWtYbTRjRW81aXIrR2xqdWlwMWFKZ00zUjloczZ6MXVsSEkyTm1maWZ3bHRoNGx5c1BDVnBTU3ZRNS83dWFlenNVOWo5emVqYUo2UTZkS3IvQTZralh1RTEiLCJtYWMiOiI4OWY2OGMxOTAwMzljZTg3MTBkYjAzYTUyMzExMzM3OWJlODZiNmFiODRkOTZhOWFhODg3MmNmNjdlODVmMjFlIiwidGFnIjoiIn0%3D; expires=Tue, 13-Sep-2022 11:37:41 GMT; Max-Age=7200; path=/; samesite=lax
novidash_session=eyJpdiI6IkxZVHFWeEI2OXJQREp3TXpyVTJBblE9PSIsInZhbHVlIjoiNGFZM1kwSldLSmg2NmJxMUE3RUcyWUhBVzFjM2I4ODNEeCtCc0s0S0l4SW5hNGhNL1BuZGtObnhQVEVnR2JkeFphM3hKSThQeFVuK2tncmhFMjB2QTJ2VFY4VjJnWXlSUGFDOFZBWHkzUmlrY013KzhSK3ZzZERRTzJsMW0vZ08iLCJtYWMiOiI2MTU1OGRhODY4YzlmZWQzYWU2ZDA0NWJkMDk5ZWFhNWI1MzZiNTcwNDA4MGU4OTljY2YzMjZkZjZkMDAxNmNkIiwidGFnIjoiIn0%3D; expires=Tue, 13-Sep-2022 11:37:41 GMT; Max-Age=7200; path=/; httponly; samesite=lax
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
188.240.52.20
194.116.150.161
99.198.108.195
195.160.203.18
104.21.20.70
93.184.220.29
51.68.81.31
23.33.119.27