r3.o.lencr.org/
23.36.76.249200 OK 503 B IP 23.36.76.249:0
ASN #20940 Akamai International B.V.
Hash 3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11106
Expires: Sun, 04 Dec 2022 01:34:18 GMT
Date: Sat, 03 Dec 2022 22:29:12 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 67e9370f1bf3e4946a01f346eeae8966
aaab391d1134302d718de7a0d5edbedf884633e6
27a8654fb14db88d4b2bb3b45c1b197fc498cd94143d4a68687742fa48a41358
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1072
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:29:12 GMT
Last-Modified: Sat, 03 Dec 2022 22:11:20 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.76.249200 OK 503 B IP 23.36.76.249:0
ASN #20940 Akamai International B.V.
Hash 55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4413
Expires: Sat, 03 Dec 2022 23:42:45 GMT
Date: Sat, 03 Dec 2022 22:29:12 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 03 Dec 2022 22:20:00 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 552
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: aeqWkvvEd1SMDLIIjEkBwFdYtUKQnnz0+ZrXCt133DMGI6gAKTTt2jia6E1kT4zll20o6Z4MZnk=
x-amz-request-id: ZQNWVHNS2J0RA3S8
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 03 Dec 2022 21:46:43 GMT
age: 2549
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
m.imagenesderopaparaperros.com/qfv5mJE
104.21.94.136200 OK 9.0 kB URL HTTP/1.1 m.imagenesderopaparaperros.com/qfv5mJE
IP 104.21.94.136:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2970), with CRLF, LF line terminators
Hash 78660d15a8af19e9767e48fdebb45a79
c95b7b8d8e0404137f4adff8779d0622740dd046
64ae7db8a779e1253d16eea4b030829d6340dbfdc7889e4a96813dca95e2a5f9
GET /qfv5mJE HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:12 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
X-Frame-Options: SAMEORIGIN
X-Robots-Tag: noindex, nofollow
Set-Cookie: lang=en_US; expires=Tue, 28-Nov-2023 22:29:12 GMT; Max-Age=31104000; path=/
AppSession=e9857a8961219aaf81d87119a9f446c9; path=/; HttpOnly
csrfToken=6f7863ab196cca39d5886ae8be1e19ddbf4c761f726f7823c01d31d9b4db367b5d4fa1135d8c96311706b218312f8db9bf485ce3ded5fba0733f4043a12e6450; path=/; HttpOnly
X-Served-By: m.imagenesderopaparaperros.com
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A9qrYDnr%2FXDk%2FTnrdBR%2Fe1D8qDQS3FiMNXsqwZTdjn3jQa2mmz70OvwicoCRPZ7ObDciWBJ3ddLkSx3oRHIjJ0jRMzdlmuN4QETA5GzD5kKVMgUz%2BNRozjMXmvQZZ4%2BqOtdX%2FlWGLe7VbOR8dNnQAWo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 773fbd5d2c5fb523-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:12 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
m.imagenesderopaparaperros.com/zshorte_theme/css/bootstrap.min.css
104.21.94.136200 OK 24 kB URL HTTP/1.1 m.imagenesderopaparaperros.com/zshorte_theme/css/bootstrap.min.css
IP 104.21.94.136:0
File type ASCII text, with very long lines (65324)
Hash d8b8037e618e0918d03629a24a43a355
7077dc2c260d5f0d65986a308a38f3053c290458
acbb0054514eb6bd2c1abf982c5a077e8e2b1feaf59beb0dfc4ccec937f16bef
GET /zshorte_theme/css/bootstrap.min.css HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/qfv5mJE
Cookie: lang=en_US; AppSession=e9857a8961219aaf81d87119a9f446c9; csrfToken=6f7863ab196cca39d5886ae8be1e19ddbf4c761f726f7823c01d31d9b4db367b5d4fa1135d8c96311706b218312f8db9bf485ce3ded5fba0733f4043a12e6450
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:12 GMT
Content-Type: text/css
Content-Length: 23845
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Last-Modified: Sat, 20 Jun 2020 00:08:09 GMT
Cache-Control: max-age=2592000
Expires: Fri, 23 Dec 2022 11:03:07 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: HIT
Age: 905165
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4X0GqTNMR4WyhuAkxW9wK5ZxCdrBI11QTGiStO7LgOb4ywiexng6P%2BcGhWpwmmfXXOMYFcf4sCGCPRElySs50ycX3Jfr8FfJqNyJoBi7B75H8PRZs5PmQnFGa%2BHic%2F09fYJbZ9ZfqxM5gjeU4syFnvg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 773fbd601f8bb523-OSL
alt-svc: h2=":443"; ma=60
m.imagenesderopaparaperros.com/zshorte_theme/css/style-dark.css
104.21.94.136200 OK 18 kB URL HTTP/1.1 m.imagenesderopaparaperros.com/zshorte_theme/css/style-dark.css
IP 104.21.94.136:0
File type assembler source, ASCII text
Hash 2fc9d9ff40827e61fc7f51892735e720
d9d394e53cc2031d5e21420392f9cd72736dfe0e
30d118c410b1ae35f7dddb1d35a22966a356c7ec3b80359e30b47a1a84d08067
GET /zshorte_theme/css/style-dark.css HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/qfv5mJE
Cookie: lang=en_US; AppSession=e9857a8961219aaf81d87119a9f446c9; csrfToken=6f7863ab196cca39d5886ae8be1e19ddbf4c761f726f7823c01d31d9b4db367b5d4fa1135d8c96311706b218312f8db9bf485ce3ded5fba0733f4043a12e6450
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:12 GMT
Content-Type: text/css
Content-Length: 18195
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Last-Modified: Sat, 20 Jun 2020 00:08:10 GMT
Cache-Control: max-age=2592000
Expires: Fri, 23 Dec 2022 11:03:08 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: HIT
Age: 905164
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ODFKkL3nYgXo885iuVf0p%2FUDczmHndH3xcgUolLPw5%2F9h3eJ6y%2F9uUwpRVAq5%2B1CJ6yzxgqGJTA8pk8FAIZh2FDo3aDbDaSVDZj2IuHmZiLP0CiytZgv7Zqd3C0xSQJt138FmQ1COgZLIZrpgxSKbbo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 773fbd602f96b523-OSL
alt-svc: h2=":443"; ma=60
m.imagenesderopaparaperros.com/zshorte_theme/css/magnific-popup.css
104.21.94.136200 OK 1.9 kB URL HTTP/1.1 m.imagenesderopaparaperros.com/zshorte_theme/css/magnific-popup.css
IP 104.21.94.136:0
Hash 17122c906dd1a862f96624fd2e672e7a
f14c3934989971cb348262fe16c8a846ad2ae224
fd821f975c1022810af8626972a55610a1a7bea8e05d8f3d5494fc1e8acb3c8e
GET /zshorte_theme/css/magnific-popup.css HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/qfv5mJE
Cookie: lang=en_US; AppSession=e9857a8961219aaf81d87119a9f446c9; csrfToken=6f7863ab196cca39d5886ae8be1e19ddbf4c761f726f7823c01d31d9b4db367b5d4fa1135d8c96311706b218312f8db9bf485ce3ded5fba0733f4043a12e6450
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:12 GMT
Content-Type: text/css
Content-Length: 1938
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Last-Modified: Sat, 20 Jun 2020 00:08:06 GMT
Cache-Control: max-age=2592000
Expires: Sat, 17 Dec 2022 01:45:11 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Served-By: m.imagenesderopaparaperros.com
CF-Cache-Status: HIT
Age: 1457041
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nJfzZxTeyaknPXPdDgR%2FvJ9uvjKnwYAFXCa0DiYE0z00oY0VdwzRv4QwUEQXRx3yq7nMv2wi5Udvm4OHbUvs2ebj8xGInrqx7HDwlhQ%2Fe%2Bm81hHTnyC9D%2Bgg9q49ZM6PKoQCrLAo8sThIDwE3eOp9%2Bc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 773fbd6019a1b4ed-OSL
alt-svc: h2=":443"; ma=60
m.imagenesderopaparaperros.com/zshorte_theme/css/materialdesignicons.min.css
104.21.94.136200 OK 40 kB URL HTTP/1.1 m.imagenesderopaparaperros.com/zshorte_theme/css/materialdesignicons.min.css
IP 104.21.94.136:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 1c13974888b04609978ba00d6861f6f9
e86980ee488c614cf4d8b3acbc361ce00739d270
1d563a9838ae252a4de14e821cb64fee3d8e757c995c7bfae6d3a94011dc4e82
GET /zshorte_theme/css/materialdesignicons.min.css HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/qfv5mJE
Cookie: lang=en_US; AppSession=e9857a8961219aaf81d87119a9f446c9; csrfToken=6f7863ab196cca39d5886ae8be1e19ddbf4c761f726f7823c01d31d9b4db367b5d4fa1135d8c96311706b218312f8db9bf485ce3ded5fba0733f4043a12e6450
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:12 GMT
Content-Type: text/css
Content-Length: 39896
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Last-Modified: Sat, 20 Jun 2020 00:08:10 GMT
Cache-Control: max-age=2592000
Expires: Fri, 23 Dec 2022 11:03:08 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Served-By: m.imagenesderopaparaperros.com
CF-Cache-Status: HIT
Age: 905164
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RoyK9hl00IicWvbakDlpj2MGfHXfWaXoxHGkody%2BXVIIkFE8kuklhsw6mm1zy5%2FwhInDGjCe5BOcVmqjxi6W2qBabYrrkMLY%2FE17C%2FchvAjtcDvSYMAYlJBjjp273YDtldnQ%2FWmb7Rrswt%2BByp6KLhw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 773fbd601d590b39-OSL
alt-svc: h2=":443"; ma=60
m.imagenesderopaparaperros.com/zshorte_theme/css/owl.theme.default.min.css
104.21.94.136200 OK 479 B URL HTTP/1.1 m.imagenesderopaparaperros.com/zshorte_theme/css/owl.theme.default.min.css
IP 104.21.94.136:0
File type ASCII text, with very long lines (846)
Hash ed01e339cf287cc8556f302210540fc9
4d4319bfb04d9a9939d387c7ff44dfa29b3772ef
4fdb569f083e05758aa13c7dc42c4b83c7c191ebc0c267c4afe926a81d4109fe
GET /zshorte_theme/css/owl.theme.default.min.css HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/qfv5mJE
Cookie: lang=en_US; AppSession=e9857a8961219aaf81d87119a9f446c9; csrfToken=6f7863ab196cca39d5886ae8be1e19ddbf4c761f726f7823c01d31d9b4db367b5d4fa1135d8c96311706b218312f8db9bf485ce3ded5fba0733f4043a12e6450
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:12 GMT
Content-Type: text/css
Content-Length: 479
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Last-Modified: Sat, 20 Jun 2020 00:08:07 GMT
Cache-Control: max-age=2592000
Expires: Sat, 17 Dec 2022 01:45:11 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Served-By: m.imagenesderopaparaperros.com
CF-Cache-Status: HIT
Age: 1457041
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DsmyVyBmq5ekG7UooFKc%2FQe5KdPLDJaIkAf2gjBvj%2FNPlyruoTOgKNfsu%2F4m4OyfNOms4IVgrL1ZodkBe2qQZ5MXA4bRgOY3PPYuDhFm%2FPuM%2FfNywz4H0FIY3aFtt66Ht3oPak%2Bk6%2BKxaZOO5lNBF4M%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 773fbd601ccb1c06-OSL
alt-svc: h2=":443"; ma=60
m.imagenesderopaparaperros.com/zshorte_theme/css/aos.css
104.21.94.136200 OK 2.3 kB URL HTTP/1.1 m.imagenesderopaparaperros.com/zshorte_theme/css/aos.css
IP 104.21.94.136:0
File type ASCII text, with very long lines (25948)
Hash 8fc87e71c70b219e7d44152acf9a4e06
29b03c24a2abc1d40f6f2a5c3f171e511ca9cb3b
19a7b180bf5722c8541da27f3ebbf046c764830bbc5e5432798897e5f527f022
GET /zshorte_theme/css/aos.css HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/qfv5mJE
Cookie: lang=en_US; AppSession=e9857a8961219aaf81d87119a9f446c9; csrfToken=6f7863ab196cca39d5886ae8be1e19ddbf4c761f726f7823c01d31d9b4db367b5d4fa1135d8c96311706b218312f8db9bf485ce3ded5fba0733f4043a12e6450
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:12 GMT
Content-Type: text/css
Content-Length: 2260
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Last-Modified: Sat, 20 Jun 2020 00:08:05 GMT
Cache-Control: max-age=2592000
Expires: Mon, 05 Dec 2022 20:44:18 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: HIT
Age: 2425494
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zPZne%2Bim7Tr0jwddat%2BWauDWm19qXO2EdQqym6v0DbUy%2BG16ufMlX54AxG0NFf7cRlhfpDK0aCQtMT2XH6uWI31WQxf3DLqwA9kBfkX%2BI36lZgM7j%2FkYwfen%2BDL%2BQz2kZE%2FdD5qO51tMryYHHMkGCOE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 773fbd601b22b505-OSL
alt-svc: h2=":443"; ma=60
m.imagenesderopaparaperros.com/zshorte_theme/css/colors/skyblue.css
104.21.94.136200 OK 1.6 kB URL HTTP/1.1 m.imagenesderopaparaperros.com/zshorte_theme/css/colors/skyblue.css
IP 104.21.94.136:0
File type CSV text\012- assembler source text\012- assembler source, ASCII text
Hash 048a5c45178a2765d40e8899e7ec366d
8371c17b5c81b2e7390cf1da3175324265a55e4c
441515df9d10403ad43e63867d185ac25c99d30f1859b8b4b45dcdc9cec781ba
GET /zshorte_theme/css/colors/skyblue.css HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/qfv5mJE
Cookie: lang=en_US; AppSession=e9857a8961219aaf81d87119a9f446c9; csrfToken=6f7863ab196cca39d5886ae8be1e19ddbf4c761f726f7823c01d31d9b4db367b5d4fa1135d8c96311706b218312f8db9bf485ce3ded5fba0733f4043a12e6450
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:12 GMT
Content-Type: text/css
Content-Length: 1559
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Last-Modified: Sat, 20 Jun 2020 00:09:38 GMT
Cache-Control: max-age=2592000
Expires: Fri, 23 Dec 2022 11:03:08 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Served-By: m.imagenesderopaparaperros.com
CF-Cache-Status: HIT
Age: 905164
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Uv6VAr3Fo7dupXQ5MZsOw5UOg4Mxo69PnDCPB8wf1gkY0rvQn0BivvvRbWl1Q9s7cJJf4E2kmXpP31izGxmyi2LUxeDDYYSVljp0PY1xPg%2BokGfkPRnDXkQ%2FYDSXanE%2Fi0YqngXr%2BeLB5nuH0Rk6nWE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 773fbd603fa3b523-OSL
alt-svc: h2=":443"; ma=60
m.imagenesderopaparaperros.com/zshorte_theme/css/owl.carousel.min.css
104.21.94.136200 OK 1.1 kB URL HTTP/1.1 m.imagenesderopaparaperros.com/zshorte_theme/css/owl.carousel.min.css
IP 104.21.94.136:0
File type ASCII text, with very long lines (3184)
Hash 8864ff6a1198eecf45821c602593ff9a
c6097cea47ac44fcec94781f2af0110cb677ab0a
19eaae3fdfe574cd1b1cfd78d30633a4527bde9711dde88b467fe43ca854cda5
GET /zshorte_theme/css/owl.carousel.min.css HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/qfv5mJE
Cookie: lang=en_US; AppSession=e9857a8961219aaf81d87119a9f446c9; csrfToken=6f7863ab196cca39d5886ae8be1e19ddbf4c761f726f7823c01d31d9b4db367b5d4fa1135d8c96311706b218312f8db9bf485ce3ded5fba0733f4043a12e6450
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:12 GMT
Content-Type: text/css
Content-Length: 1068
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Last-Modified: Sat, 20 Jun 2020 00:08:07 GMT
Cache-Control: max-age=2592000
Expires: Fri, 23 Dec 2022 11:03:08 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: HIT
Age: 905164
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zb7NNjC430gh3EOJPwrC8GOh86jso1ezzNuVD5DvXVoIg0VSQkbzP65dt%2BZWjEKEG5kmjZZmddAzMicfowRaOCRSeo8rImrhfx74nvJml4%2Bp1wzA%2FE0sAMNj28Q36NS%2F%2B7Y4dUCiQLHutivI8DkJC7s%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 773fbd601d4a1bfa-OSL
alt-svc: h2=":443"; ma=60
m.imagenesderopaparaperros.com/zshorte_theme/js/bootstrap.bundle.min.js
104.21.94.136200 OK 22 kB URL HTTP/1.1 m.imagenesderopaparaperros.com/zshorte_theme/js/bootstrap.bundle.min.js
IP 104.21.94.136:0
File type ASCII text, with very long lines (65297)
Hash e0d6bd060ae45edfcf1426b1cf67930c
1a28940ee80d86a3d326239e2d9f974cac657f5b
ee7a5c9ac9eb841e8ad7ff86dc6fb9126c4cf850922618e9c7b650b327565ae0
GET /zshorte_theme/js/bootstrap.bundle.min.js HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/qfv5mJE
Cookie: lang=en_US; AppSession=e9857a8961219aaf81d87119a9f446c9; csrfToken=6f7863ab196cca39d5886ae8be1e19ddbf4c761f726f7823c01d31d9b4db367b5d4fa1135d8c96311706b218312f8db9bf485ce3ded5fba0733f4043a12e6450
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:12 GMT
Content-Type: application/javascript
Content-Length: 21724
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Last-Modified: Sat, 20 Jun 2020 00:08:42 GMT
Cache-Control: max-age=2592000
Expires: Sat, 31 Dec 2022 20:55:25 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Served-By: m.imagenesderopaparaperros.com
CF-Cache-Status: HIT
Age: 178427
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=okZKxNCWkyOyKC3F4ez%2B1OJYOuv4iuR9FPXm66V1ORQEvdKemaLAF8o4oSGId6OZdBtZPkPjiF18l0QXc29CP7Mw%2Bk4F%2FrS59GTXQwBVhr9Si4wwgP3AQpsVNH7StWQ15qc93uAJ1nQZR4NmlBKTZl4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 773fbd604d830b39-OSL
alt-svc: h2=":443"; ma=60
m.imagenesderopaparaperros.com/zshorte_theme/js/scrollspy.min.js
104.21.94.136200 OK 654 B URL HTTP/1.1 m.imagenesderopaparaperros.com/zshorte_theme/js/scrollspy.min.js
IP 104.21.94.136:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (1310), with no line terminators
Hash 52eb89a8cb5d149605707452a5b121ed
93a275664a44bc9eadc52740ba10b5b69ed153fb
b1fc99a4dd46cb4f26c6422a5f5bb57f9ba240637477a2f57dcdca96e1e39d08
GET /zshorte_theme/js/scrollspy.min.js HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/qfv5mJE
Cookie: lang=en_US; AppSession=e9857a8961219aaf81d87119a9f446c9; csrfToken=6f7863ab196cca39d5886ae8be1e19ddbf4c761f726f7823c01d31d9b4db367b5d4fa1135d8c96311706b218312f8db9bf485ce3ded5fba0733f4043a12e6450
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:12 GMT
Content-Type: application/javascript
Content-Length: 654
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Last-Modified: Sat, 20 Jun 2020 00:08:46 GMT
Cache-Control: max-age=2592000
Expires: Fri, 23 Dec 2022 11:03:27 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Served-By: m.imagenesderopaparaperros.com
CF-Cache-Status: HIT
Age: 905145
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zNAwQQEjN1%2F8pPSb14ZSFdCxH4SYtgTB2h8cW5tThq%2Fg%2FVbCo8OXWuBWS3Z1P1wltdKNxQg5bPeqhZ1XPxwT2mvgg9QYQZIaQsFYa1vrZFIHF2Xgfgb18Uq1HtFT0ZFZqNSvjx%2FlyPAubjr4csIEKLo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 773fbd604cef1c06-OSL
alt-svc: h2=":443"; ma=60
m.imagenesderopaparaperros.com/zshorte_theme/js/magnific.init.js
104.21.94.136200 OK 166 B URL HTTP/1.1 m.imagenesderopaparaperros.com/zshorte_theme/js/magnific.init.js
IP 104.21.94.136:0
Hash 40cec554fbaaf74145b9780c26962cd7
026dd27f403947cb0aecd23240e198018aaad910
bf1ebcf850056eabbb1d9657ed32008a7e1e841efc3e20145c3d73d21aeb32d3
GET /zshorte_theme/js/magnific.init.js HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/qfv5mJE
Cookie: lang=en_US; AppSession=e9857a8961219aaf81d87119a9f446c9; csrfToken=6f7863ab196cca39d5886ae8be1e19ddbf4c761f726f7823c01d31d9b4db367b5d4fa1135d8c96311706b218312f8db9bf485ce3ded5fba0733f4043a12e6450
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:12 GMT
Content-Type: application/javascript
Content-Length: 166
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Last-Modified: Sat, 20 Jun 2020 00:08:45 GMT
Cache-Control: max-age=2592000
Expires: Fri, 23 Dec 2022 11:03:28 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Served-By: m.imagenesderopaparaperros.com
CF-Cache-Status: HIT
Age: 905144
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e9IkV%2Bot2vTQv1GclRC%2B8G6yatm%2BEoURKJ8cVC2uGuybFetXlQ2QGPZ09pEjDkT5jzYL6YQxU7amLeEZjubYFz5Lz4egcfUO%2FTIst19%2BebLu6cJvm9jNaH8tmMVDcJ%2FinGdPh64KnsYvxF7RDoxJgtg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 773fbd605fcfb523-OSL
alt-svc: h2=":443"; ma=60
m.imagenesderopaparaperros.com/zshorte_theme/js/jquery.easing.min.js
104.21.94.136200 OK 817 B URL HTTP/1.1 m.imagenesderopaparaperros.com/zshorte_theme/js/jquery.easing.min.js
IP 104.21.94.136:0
File type ASCII text, with very long lines (2532), with no line terminators
Hash d1a8f2ab3b6408f68a4f01d31ac90bc1
42b49a5c362f0cc5ca31dab43a8b98d499cdbf78
17368cc18bda01725115cb1ea484fe4059f425c73ec69fdbc3708fb4a597d1a3
GET /zshorte_theme/js/jquery.easing.min.js HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/qfv5mJE
Cookie: lang=en_US; AppSession=e9857a8961219aaf81d87119a9f446c9; csrfToken=6f7863ab196cca39d5886ae8be1e19ddbf4c761f726f7823c01d31d9b4db367b5d4fa1135d8c96311706b218312f8db9bf485ce3ded5fba0733f4043a12e6450
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:12 GMT
Content-Type: application/javascript
Content-Length: 817
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Last-Modified: Sat, 20 Jun 2020 00:08:44 GMT
Cache-Control: max-age=2592000
Expires: Sat, 17 Dec 2022 01:45:15 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Served-By: m.imagenesderopaparaperros.com
CF-Cache-Status: HIT
Age: 1457037
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NXV8mjS4aaeovMGvLzCVqWfFmdbgTop%2BteytXJjiYOsugcs03aarLWYGz1LVQOcXy%2BsexkM2nNexO2LdzhXq%2Fa54ZjDJpbIK8prRCvCEqgOm5MMlski%2FDss4XnJ7APy%2FBuIouuHKHMs46sTa5vwGjho%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 773fbd6049f8b4ed-OSL
alt-svc: h2=":443"; ma=60
m.imagenesderopaparaperros.com/zshorte_theme/js/owl.carousel.min.js
104.21.94.136200 OK 11 kB URL HTTP/1.1 m.imagenesderopaparaperros.com/zshorte_theme/js/owl.carousel.min.js
IP 104.21.94.136:0
File type ASCII text, with very long lines (31997)
Hash 147ac1c530c19c721f2f08015355831f
36666c04ebfd91eb34a2bccfd77d5921f149719e
ad388396f2600caf304c74c3255d0cb91ec3eb6979eece045c096b4b8f0e0f3c
GET /zshorte_theme/js/owl.carousel.min.js HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/qfv5mJE
Cookie: lang=en_US; AppSession=e9857a8961219aaf81d87119a9f446c9; csrfToken=6f7863ab196cca39d5886ae8be1e19ddbf4c761f726f7823c01d31d9b4db367b5d4fa1135d8c96311706b218312f8db9bf485ce3ded5fba0733f4043a12e6450
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:12 GMT
Content-Type: application/javascript
Content-Length: 11412
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Last-Modified: Sat, 20 Jun 2020 00:08:46 GMT
Cache-Control: max-age=2592000
Expires: Sun, 01 Jan 2023 14:53:55 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: HIT
Age: 113717
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5VH0gujWdrUtvlt%2BQBbWDETFJa8QClyuIXt5EPKiZguhYOqp0N3y%2Fg1EQL48y1nmmxjXp37r7%2F7dulRSsrREWiTHyQRs3SrRHeMGv8gc1ECMzxGoCzhZL5YUhlv0UfbpmdEcLTMx3j7eWF6kLKNO52k%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 773fbd605d941bfa-OSL
alt-svc: h2=":443"; ma=60
m.imagenesderopaparaperros.com/zshorte_theme/js/owl.init.js
104.21.94.136200 OK 249 B URL HTTP/1.1 m.imagenesderopaparaperros.com/zshorte_theme/js/owl.init.js
IP 104.21.94.136:0
Hash 1178357de405dc512ad0141d032d4f7f
6bfbde16bb45c61844e8203ab1cc9792b2f40e68
3e75659a73869029299e5c33792296ee0905c097347dbc92d93b6a78efb25fbc
GET /zshorte_theme/js/owl.init.js HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/qfv5mJE
Cookie: lang=en_US; AppSession=e9857a8961219aaf81d87119a9f446c9; csrfToken=6f7863ab196cca39d5886ae8be1e19ddbf4c761f726f7823c01d31d9b4db367b5d4fa1135d8c96311706b218312f8db9bf485ce3ded5fba0733f4043a12e6450
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:12 GMT
Content-Type: application/javascript
Content-Length: 249
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Last-Modified: Sat, 20 Jun 2020 00:08:46 GMT
Cache-Control: max-age=2592000
Expires: Sun, 01 Jan 2023 14:53:55 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: HIT
Age: 113717
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aTdbceGOCgO4Jmgncdg3vDLt9GiEgKdMo9ZYrYgTN0WEXnSVQiZWY2Hg4UW6awekxPPpGL5sukKQk8TPUk242NbU%2FBFLsGANh9s2R8ZB%2F4SpBg0tMhFwzUBYEsqNAXy5p0VMUIXIWjOG%2BASsEEwwSsc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 773fbd606d8e0b39-OSL
alt-svc: h2=":443"; ma=60
m.imagenesderopaparaperros.com/zshorte_theme/js/aos.js
104.21.94.136200 OK 4.3 kB URL HTTP/1.1 m.imagenesderopaparaperros.com/zshorte_theme/js/aos.js
IP 104.21.94.136:0
File type ASCII text, with very long lines (12414)
Hash 9ee5eee0094f091319e52462de5aef97
a7c8daf227ad5486c29192ccb257093e0fc55072
a4901c10ad16602dd2df5ab175c58b82d1545e3f1b46dfed819c6de191e178a6
GET /zshorte_theme/js/aos.js HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/qfv5mJE
Cookie: lang=en_US; AppSession=e9857a8961219aaf81d87119a9f446c9; csrfToken=6f7863ab196cca39d5886ae8be1e19ddbf4c761f726f7823c01d31d9b4db367b5d4fa1135d8c96311706b218312f8db9bf485ce3ded5fba0733f4043a12e6450
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:12 GMT
Content-Type: application/javascript
Content-Length: 4296
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Last-Modified: Sat, 20 Jun 2020 00:08:40 GMT
Cache-Control: max-age=2592000
Expires: Mon, 05 Dec 2022 20:44:19 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: HIT
Age: 2425493
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0tOXZUZM9C%2BjjJFwzbK3HHM0Md7A0SXhK1ktflyggTykNuAa7ZLu7QrU8eNQuad0uQ9%2FvkZuJc3zC3pw%2BK9vIc%2F0wH4OvINNtaDOpkxNZOU2nLx%2Fk%2FWabLql5GLOXaDv%2FULWdJvHt5kOLfPX5pp9c5Y%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 773fbd606d031c06-OSL
alt-svc: h2=":443"; ma=60
m.imagenesderopaparaperros.com/zshorte_theme/js/jquery.magnific-popup.min.js
104.21.94.136200 OK 7.6 kB URL HTTP/1.1 m.imagenesderopaparaperros.com/zshorte_theme/js/jquery.magnific-popup.min.js
IP 104.21.94.136:0
File type ASCII text, with very long lines (20818)
Hash d3369104b2439ab727a1e8b6cb361d2a
0c99633f0c742643a13a66aed4ad22c39cbb5d0c
52a6ae90714006abcdec4e137b978d3c846025e6ae8c20bbb05f1929dad6383f
GET /zshorte_theme/js/jquery.magnific-popup.min.js HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/qfv5mJE
Cookie: lang=en_US; AppSession=e9857a8961219aaf81d87119a9f446c9; csrfToken=6f7863ab196cca39d5886ae8be1e19ddbf4c761f726f7823c01d31d9b4db367b5d4fa1135d8c96311706b218312f8db9bf485ce3ded5fba0733f4043a12e6450
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:12 GMT
Content-Type: application/javascript
Content-Length: 7594
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Last-Modified: Sat, 20 Jun 2020 00:08:45 GMT
Cache-Control: max-age=2592000
Expires: Sat, 31 Dec 2022 20:55:24 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Served-By: m.imagenesderopaparaperros.com
CF-Cache-Status: HIT
Age: 178427
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KP5PaeEpWpZuYGVOyO49ELnNshOcGrtSa%2FscLcYHALyqWGmNOQOGd%2FrOgc3VY1hXBcsu2vJsr8nWQFWVZoRisv7l4b7X0LBP13X9%2FYAlfu58sL4rbOcH7LNSwtwAzjPC%2Fo3JgZWzstbqFK9MVV62maI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 773fbd604b5db505-OSL
alt-svc: h2=":443"; ma=60
m.imagenesderopaparaperros.com/zshorte_theme/js/feather.min.js
104.21.94.136200 OK 20 kB URL HTTP/1.1 m.imagenesderopaparaperros.com/zshorte_theme/js/feather.min.js
IP 104.21.94.136:0
File type Unicode text, UTF-8 text, with very long lines (61490)
Hash f9a0e93e4d3e9da3a0ff9e3c7c887e6b
5c269e6f3860110826cb284c491c3e765a8e824f
a02a93d1a33fe837780f076fa0bff00b752d29d284f3e0d3a6c49460bb00bd89
GET /zshorte_theme/js/feather.min.js HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/qfv5mJE
Cookie: lang=en_US; AppSession=e9857a8961219aaf81d87119a9f446c9; csrfToken=6f7863ab196cca39d5886ae8be1e19ddbf4c761f726f7823c01d31d9b4db367b5d4fa1135d8c96311706b218312f8db9bf485ce3ded5fba0733f4043a12e6450
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:12 GMT
Content-Type: application/javascript
Content-Length: 20514
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Last-Modified: Sat, 20 Jun 2020 00:08:42 GMT
Cache-Control: max-age=2592000
Expires: Fri, 23 Dec 2022 11:03:28 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: HIT
Age: 905144
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fEFhIiainno99lDe9CTSMIhBWC%2BUEGEAXWCx9ljrQKvBThN16446IlGzugoQWniYG6gAWSDqMMDjILWjYDn353dJjbPWNb%2FgUQT5EFpPAQK6d5yxZGDYXYAT142rISEda%2F7rS%2FYlx7cep5D56RKBywA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 773fbd60a819b523-OSL
alt-svc: h2=":443"; ma=60
m.imagenesderopaparaperros.com/zshorte_theme/js/app.js
104.21.94.136200 OK 1.1 kB URL HTTP/1.1 m.imagenesderopaparaperros.com/zshorte_theme/js/app.js
IP 104.21.94.136:0
Hash b9e4d33520dc7d4923312ea7fa86be17
9903ed1c790dee38ccd18d39413cde0f1502ba07
22e17b2197c2664879557f334ef825037e57db88bbaa2b4955c95b3d13b1fe9d
GET /zshorte_theme/js/app.js HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/qfv5mJE
Cookie: lang=en_US; AppSession=e9857a8961219aaf81d87119a9f446c9; csrfToken=6f7863ab196cca39d5886ae8be1e19ddbf4c761f726f7823c01d31d9b4db367b5d4fa1135d8c96311706b218312f8db9bf485ce3ded5fba0733f4043a12e6450
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:12 GMT
Content-Type: application/javascript
Content-Length: 1059
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Last-Modified: Sat, 20 Jun 2020 00:08:40 GMT
Cache-Control: max-age=2592000
Expires: Sat, 17 Dec 2022 01:45:15 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Served-By: m.imagenesderopaparaperros.com
CF-Cache-Status: HIT
Age: 1457037
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vaTKVmlIR0DT7KyJ9ry8MOmGcAIBsoklmBG423IhvfoQJl48YZyhCRvr95tCw8jUJZ7A%2FQgB44ebTHRDTISn40CfCgJ%2F7ZZqUJwXwVgZYPIz4mRVpB6Ip60oOqGs3fFNyv2XN%2B7kQgrgR1%2FMfgMIWOo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 773fbd60aa68b4ed-OSL
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 89e3f3bfe29dabe402a1c5aa24f998d3
66c6667f346322f3af191eb0a2c5266b77e86c7c
c1453f4fc4d41e13ad55503b35c7aefda567fd210527261b9bbbee2c75a133af
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5074
Cache-Control: max-age=171111
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:29:12 GMT
Etag: "638bb34d-116"
Expires: Mon, 05 Dec 2022 22:01:03 GMT
Last-Modified: Sat, 03 Dec 2022 20:36:29 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 278
ads.themoneytizer.com/s/gen.js?type=11
185.76.9.14200 OK 2.4 kB URL HTTP/1.1 ads.themoneytizer.com/s/gen.js?type=11
IP 185.76.9.14:0
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (2659)
Hash befbfe8e008d3a1fc9b0a2991443888c
725357c328900ef423354fb678553a0dc29d22db
58fdbded093edae1662ccf0163a2a1e807029bcbc62a820d67795d0ef4253f67
GET /s/gen.js?type=11 HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:12 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=604800
X-Accel-Expires: @1670562288
Server: CDN77-Turbo
X-77-NZT: AblMCQ3UdVH/SEYCAA
X-77-NZT-Ray: c0a4cc285dd31937b8cd8b63185e4a20
X-Cache: HIT
X-Age: 149064
X-77-POP: stockholmSE
X-77-Cache: HIT
Content-Encoding: gzip
ads.themoneytizer.com/s/requestform.js?siteId=52788&formatId=11
185.76.9.14200 OK 19 kB URL HTTP/1.1 ads.themoneytizer.com/s/requestform.js?siteId=52788&formatId=11
IP 185.76.9.14:0
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (29846)
Hash 1c1b6b1ffeb83e250afeb3db041bcb89
b907d48a6076ba1351276d148ea8d9754050f2be
8c736244cedf79790fa2d2e4b4a3debe9b78198db2130d7d5b4649ac69c8eec9
GET /s/requestform.js?siteId=52788&formatId=11 HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:12 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=604800
X-Accel-Expires: @1670632108
Server: CDN77-Turbo
X-77-NZT: AblMCQ35nmvvjDUBAA
X-77-NZT-Ray: c0a4cc285dd31b37b8cd8b632259ec1f
X-Cache: HIT
X-Age: 79244
X-77-POP: stockholmSE
X-77-Cache: HIT
Content-Encoding: gzip
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 16bb79721c29f700e47b8ef26678e53f
ac5b8f2b0440eaffdde01b4e2e5e61fee245f4c9
ca796aeb7661c0908946abd126e2903c69e1db63472808788d56dad372771fac
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3760
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:29:12 GMT
Etag: "638a5c36-117"
Last-Modified: Sat, 03 Dec 2022 21:26:32 GMT
Server: ECS (amb/6BC6)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash e63a3fb1ef1a4ebbbd126969d6ee68ca
8bc9c26950b3899087e25ddea159c28f57b47200
f2ec30377e239f64286ae7dde8032e4e332b6c123f7decc07126fbbcff460a69
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:29:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 3938eb94f35bfec2ce07b4cb32dc2013
51a5c7d2bcecf83f24a28f9af7de982cbe236d7f
c75604d9f21614c3b8f4c79e7df72801fd258ddb27d4c50c6d18d06bd172722f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1855
Cache-Control: max-age=167538
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:29:12 GMT
Etag: "638bb1eb-117"
Expires: Mon, 05 Dec 2022 21:01:30 GMT
Last-Modified: Sat, 03 Dec 2022 20:30:35 GMT
Server: ECS (amb/6B8A)
X-Cache: HIT
Content-Length: 279
iononetravoy.com/1clkn/33405
23.109.248.169200 OK 26 B URL HTTP/1.1 iononetravoy.com/1clkn/33405
IP 23.109.248.169:0
File type ASCII text, with no line terminators
Hash 414a242a6fee8464282857e475d3ef61
f669890350347f53aa9bd19c1a355692e8d17d2f
d4914e81dd0b4c1d8ee8e789f6b369d107b93ac886f862930e1a98580e79aafa
GET /1clkn/33405 HTTP/1.1
Host: iononetravoy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 03 Dec 2022 22:29:12 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Set-Cookie: GL_UI4=eJw9jd1OhDAYRIHy42aFOAkPsI9QVBAvvfEVvCSl%2FcC60G5KXfTtbUz07mTmTCaKoqSuEF9zBvYpWpzU1HSS9428bx9417WPgtM09s9j%2F9Q1gvc46G3wYlzIp7idyZDTcpBWUYm7UP0lZ2N3kyIbnTCqRLYGYylRjM7uG7maITViJRSv2tFkv4IhPqwDa3gbWJvAMUdit5pVBxRv2qiwrI5IGl6VeYTjZRF%2Bsm4dtMpjZLMTihC%2F4EYKT7N13ygUbWdvL4Bd1PDv%2Fx6zveHIFV21JGTWv5P7AaoaStk%3D; expires=Sun, 04-Dec-2022 22:29:12 GMT; Max-Age=86400; path=/
GL_GI10=eJxNjM0KgkAYRW0qSwrjQg%2FQC2T%2Fi7bVMnThAwxmXzFg84kz%2FdjTpwbR5nI4cK7jOGLsQ6gcw%2B0i2M6D9TJYbNZoX4khwgjDlO%2FaFqXUyY3ghlw8kxJuQVfFGmK%2BwuDLMuUzoRtG0z%2FXRIPIZDzZ1z8lOqmqt1bwav52vaprXFuZHP4uU69JzNndVi8GniYrTU50hrdPThnNDvER%2Fs82H24LfWVkXvCrrHhk1Y3erEny5WLIVqr1cMUHDLFHVQ%3D%3D; expires=Sun, 04-Dec-2022 22:29:12 GMT; Max-Age=86400; path=/
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 3938eb94f35bfec2ce07b4cb32dc2013
51a5c7d2bcecf83f24a28f9af7de982cbe236d7f
c75604d9f21614c3b8f4c79e7df72801fd258ddb27d4c50c6d18d06bd172722f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1855
Cache-Control: max-age=167538
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:29:12 GMT
Etag: "638bb1eb-117"
Expires: Mon, 05 Dec 2022 21:01:30 GMT
Last-Modified: Sat, 03 Dec 2022 20:30:35 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 3938eb94f35bfec2ce07b4cb32dc2013
51a5c7d2bcecf83f24a28f9af7de982cbe236d7f
c75604d9f21614c3b8f4c79e7df72801fd258ddb27d4c50c6d18d06bd172722f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1855
Cache-Control: max-age=167538
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:29:12 GMT
Etag: "638bb1eb-117"
Expires: Mon, 05 Dec 2022 21:01:30 GMT
Last-Modified: Sat, 03 Dec 2022 20:30:35 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
www.googletagmanager.com/gtag/js?id=UA-77394287-2
172.217.21.168200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-77394287-2
IP 172.217.21.168:0
File type ASCII text, with very long lines (1921)
Hash 727234cd5ca5fc28df80fa96d89d48e5
aee6cf4dcad0f8b5286edc634995f8d3bdbc383a
bb37d360a9fa8ed424ea69caaaf3bc79589d8175a6941982e35959d93bccf841
GET /gtag/js?id=UA-77394287-2 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 03 Dec 2022 22:29:12 GMT
expires: Sat, 03 Dec 2022 22:29:12 GMT
cache-control: private, max-age=900
last-modified: Sat, 03 Dec 2022 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43652
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 89e3f3bfe29dabe402a1c5aa24f998d3
66c6667f346322f3af191eb0a2c5266b77e86c7c
c1453f4fc4d41e13ad55503b35c7aefda567fd210527261b9bbbee2c75a133af
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5074
Cache-Control: max-age=171111
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:29:12 GMT
Etag: "638bb34d-116"
Expires: Mon, 05 Dec 2022 22:01:03 GMT
Last-Modified: Sat, 03 Dec 2022 20:36:29 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 98fe7e5fd6b778bcdcc63028c3a49fbd
06b34160c344526fbe14ce41445b9fe76c0a878d
d45d898dfe5bf1151557bbbc3be6e6878fbadce386136d60777b4464199173a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:29:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 16bb79721c29f700e47b8ef26678e53f
ac5b8f2b0440eaffdde01b4e2e5e61fee245f4c9
ca796aeb7661c0908946abd126e2903c69e1db63472808788d56dad372771fac
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5315
Cache-Control: max-age=169912
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:29:12 GMT
Etag: "638badad-116"
Expires: Mon, 05 Dec 2022 21:41:04 GMT
Last-Modified: Sat, 03 Dec 2022 20:12:29 GMT
Server: ECS (amb/6B93)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 3938eb94f35bfec2ce07b4cb32dc2013
51a5c7d2bcecf83f24a28f9af7de982cbe236d7f
c75604d9f21614c3b8f4c79e7df72801fd258ddb27d4c50c6d18d06bd172722f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1855
Cache-Control: max-age=167538
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:29:12 GMT
Etag: "638bb1eb-117"
Expires: Mon, 05 Dec 2022 21:01:30 GMT
Last-Modified: Sat, 03 Dec 2022 20:30:35 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash e63a3fb1ef1a4ebbbd126969d6ee68ca
8bc9c26950b3899087e25ddea159c28f57b47200
f2ec30377e239f64286ae7dde8032e4e332b6c123f7decc07126fbbcff460a69
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:29:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 3938eb94f35bfec2ce07b4cb32dc2013
51a5c7d2bcecf83f24a28f9af7de982cbe236d7f
c75604d9f21614c3b8f4c79e7df72801fd258ddb27d4c50c6d18d06bd172722f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:29:12 GMT
Etag: "638a606e-118"
Server: ECS (amb/6BAE)
Content-Length: 279
m.imagenesderopaparaperros.com/img/banner300x250.png?v=2
104.21.94.136200 OK 22 kB URL HTTP/1.1 m.imagenesderopaparaperros.com/img/banner300x250.png?v=2
IP 104.21.94.136:0
File type PNG image data, 300 x 250, 8-bit/color RGB, non-interlaced\012- data
Hash 4dd187d299becdea20c32d192f53ffa3
8c5a9ccd16ce767b02e7bb73cee89a5f68603769
a3049a20cd7d731f0ba6ffe3d7dde64728068c971bb913077bd6383978bb35b7
GET /img/banner300x250.png?v=2 HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/qfv5mJE
Cookie: lang=en_US; AppSession=e9857a8961219aaf81d87119a9f446c9; csrfToken=6f7863ab196cca39d5886ae8be1e19ddbf4c761f726f7823c01d31d9b4db367b5d4fa1135d8c96311706b218312f8db9bf485ce3ded5fba0733f4043a12e6450
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:12 GMT
Content-Type: image/png
Content-Length: 22442
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 22 Jun 2020 20:22:42 GMT
Cache-Control: max-age=31536000
Expires: Mon, 23 Oct 2023 21:46:31 GMT
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Vary: User-Agent, Accept-Encoding
CF-Cache-Status: HIT
Age: 3544961
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8wR3G9ZAP8MXVx2mh2BVl74MCAa1ixalIKx6a4HA69MVAN9bW4MwfAnuBBDdEG1aykCGKEp9UZs6BjkEuiwM%2Bui0JU4kepgISFnzvM3jsXTjQTPtnh5Apt660Yq5e4y43BW3YeZVlz%2FRcsRrejFZ9yQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 773fbd627f440b39-OSL
alt-svc: h2=":443"; ma=60
m.imagenesderopaparaperros.com/zshorte_theme/images/illustrator/Marketing_strategy_SVG.svg
104.21.94.136200 OK 4.4 kB URL HTTP/1.1 m.imagenesderopaparaperros.com/zshorte_theme/images/illustrator/Marketing_strategy_SVG.svg
IP 104.21.94.136:0
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (11474), with no line terminators
Hash b0a442730d51099bd296582a33752941
bfc11997a02571df978e1924408668b290e9177b
87d8d2fa765a20cf746844b634c4ff948fc3cf82ec6780c1a50e97714b57ccd7
GET /zshorte_theme/images/illustrator/Marketing_strategy_SVG.svg HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/qfv5mJE
Cookie: lang=en_US; AppSession=e9857a8961219aaf81d87119a9f446c9; csrfToken=6f7863ab196cca39d5886ae8be1e19ddbf4c761f726f7823c01d31d9b4db367b5d4fa1135d8c96311706b218312f8db9bf485ce3ded5fba0733f4043a12e6450
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:12 GMT
Content-Type: image/svg+xml
Content-Length: 4373
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Last-Modified: Sat, 20 Jun 2020 00:12:33 GMT
Cache-Control: max-age=31536000
Expires: Mon, 23 Oct 2023 21:46:31 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: HIT
Age: 3544961
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Zvuddh82dqaOWIA7FQ%2BOtKhrz3zJosWJJ6am1oZQ%2FiNgvAHZgRpdY3%2F2ZTeNQ4VeFVlcdWbrPhlyOOYcqF6aTF4B70pCTGDOTZDo6TSzDfoZAGVfim8pbA8W3hiYkDBzl1Bf7qHvEfMk82nCGR7PVB4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 773fbd628f551bfa-OSL
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 3938eb94f35bfec2ce07b4cb32dc2013
51a5c7d2bcecf83f24a28f9af7de982cbe236d7f
c75604d9f21614c3b8f4c79e7df72801fd258ddb27d4c50c6d18d06bd172722f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=165683
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:29:12 GMT
Etag: "638bb1eb-117"
Expires: Mon, 05 Dec 2022 20:30:35 GMT
Last-Modified: Sat, 03 Dec 2022 20:30:35 GMT
Server: nginx
Content-Length: 279
m.imagenesderopaparaperros.com/zshorte_theme/images/logo-dark-2.png
104.21.94.136200 OK 45 kB URL HTTP/1.1 m.imagenesderopaparaperros.com/zshorte_theme/images/logo-dark-2.png
IP 104.21.94.136:0
File type PNG image data, 857 x 155, 8-bit/color RGBA, non-interlaced\012- data
Hash 28ed5694cb52b688df8f6cb9d3c38e9c
2ec4b679e43cd8bf66919b860bfd830f2b23c7d9
0541ab488abc3b9fcc067d1085aae4fadba1c42910207a8260a909dbf489ed31
GET /zshorte_theme/images/logo-dark-2.png HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/qfv5mJE
Cookie: lang=en_US; AppSession=e9857a8961219aaf81d87119a9f446c9; csrfToken=6f7863ab196cca39d5886ae8be1e19ddbf4c761f726f7823c01d31d9b4db367b5d4fa1135d8c96311706b218312f8db9bf485ce3ded5fba0733f4043a12e6450
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:12 GMT
Content-Type: image/png
Content-Length: 44788
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Last-Modified: Sat, 20 Jun 2020 00:08:34 GMT
Cache-Control: max-age=31536000
Expires: Thu, 28 Sep 2023 19:19:37 GMT
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Vary: User-Agent, Accept-Encoding
CF-Cache-Status: HIT
Age: 5713775
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tje1FylK0p8jLESZy5yWHnrYp8sFd51N1Eny3S5%2FQvIGL69ToyfGen3QESn5r9c91jnbxrC7B0pETh2xW28%2BPo6bo%2B4QcSw5%2FVUEI2b4Tr6WldZ0PZ6os6%2FYBDGRHmSGMf3ssFp5tnPBWWore68dxHY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 773fbd62bf7c0b39-OSL
alt-svc: h2=":443"; ma=60
m.imagenesderopaparaperros.com/zshorte_theme/images/illustrator/Startup_SVG.svg
104.21.94.136200 OK 7.3 kB URL HTTP/1.1 m.imagenesderopaparaperros.com/zshorte_theme/images/illustrator/Startup_SVG.svg
IP 104.21.94.136:0
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (19895), with no line terminators
Hash 427943d2300981717c994360d8568b72
ec958f6ab8fd3266262e778436f518611b732977
140ce571749413f2d23ec657b47e6025e3fd81b91d1b0439dbdae69cd8b4abda
GET /zshorte_theme/images/illustrator/Startup_SVG.svg HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/qfv5mJE
Cookie: lang=en_US; AppSession=e9857a8961219aaf81d87119a9f446c9; csrfToken=6f7863ab196cca39d5886ae8be1e19ddbf4c761f726f7823c01d31d9b4db367b5d4fa1135d8c96311706b218312f8db9bf485ce3ded5fba0733f4043a12e6450
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:12 GMT
Content-Type: image/svg+xml
Content-Length: 7290
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Last-Modified: Sat, 20 Jun 2020 00:12:35 GMT
Cache-Control: max-age=31536000
Expires: Fri, 17 Nov 2023 01:45:14 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Served-By: m.imagenesderopaparaperros.com
CF-Cache-Status: HIT
Age: 1457038
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4UcfrGnMAlvDdAEY5mtawGFBzsMPofhua38UXFMWsI0uqPdhyyjpYy1LSZoGNolEAIPLdZMWWAdX94LasIiJ1Yhh6vsTqVEqe2sDRI51123pufkxFuP%2B7MmzizmCz7pnVEiInpRMnyhv1SWQgf7IWvw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 773fbd62bf781bfa-OSL
alt-svc: h2=":443"; ma=60
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash 78aeb6c4df5d36e1e8387ccfef04989e
7e792f20fa8fa2fed06ee5cf14dfa4b7c2a486f5
823fe529f34f4e552462f6f2783e0a2b23db5f26b9c1f182b3a56e725121c84f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:12 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 03 Dec 2022 22:16:04 GMT
Expires: Sat, 10 Dec 2022 22:16:03 GMT
Etag: "7e792f20fa8fa2fed06ee5cf14dfa4b7c2a486f5"
Cache-Control: max-age=603410,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 773fbd62ccdab4ed-OSL
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 98fe7e5fd6b778bcdcc63028c3a49fbd
06b34160c344526fbe14ce41445b9fe76c0a878d
d45d898dfe5bf1151557bbbc3be6e6878fbadce386136d60777b4464199173a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:29:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 03 Dec 2022 22:11:19 GMT
cache-control: public,max-age=3600
age: 1074
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 3.0 kB IP 93.184.220.29:0
Hash e2493d17b495792892824c3a62a89114
bebbcc93f4b27b54fa2bf983f6ab72666a2905a8
c0023e776dcf3ade880acab8fa665a8d9d8309752f9762dd18bb0e59431f1e1b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4721
Cache-Control: max-age=136236
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:29:13 GMT
Etag: "638b2c74-116"
Expires: Mon, 05 Dec 2022 12:19:49 GMT
Last-Modified: Sat, 03 Dec 2022 11:01:08 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 278
quantcast.mgr.consensu.org/choice/6Fv0cGNfc_bw8/www.themoneytizer.com/choice.js
143.204.55.17200 OK 26 kB URL HTTP/2 quantcast.mgr.consensu.org/choice/6Fv0cGNfc_bw8/www.themoneytizer.com/choice.js
IP 143.204.55.17:0
File type ASCII text, with very long lines (1834)
Hash e307318350ecc0997b8925d5024f86c0
37c53b31519a3e440ca436bf4dfe94cc92d486d6
b4a0608c1777ea7df7722827fd3de8f151d952dcd18c9a9f34363ea07ade9fb8
GET /choice/6Fv0cGNfc_bw8/www.themoneytizer.com/choice.js HTTP/1.1
Host: quantcast.mgr.consensu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 28 Jun 2022 13:53:56 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
content-encoding: br
date: Sat, 03 Dec 2022 22:29:04 GMT
cache-control: max-age=3600
etag: W/"c53bd785b1ee57b613221019d7d72626"
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: G_XuqhPOcCgnEE-HTE2V9hs5rJPFk3A06GIbaPwbyzV23I5TB8WKUw==
age: 12
X-Firefox-Spdy: h2
arbourrenewal.com/cf/62/1e/cf621eb24aa5b4a128894819698170b8.js
173.233.137.36200 OK 11 kB URL HTTP/1.1 arbourrenewal.com/cf/62/1e/cf621eb24aa5b4a128894819698170b8.js
IP 173.233.137.36:0
File type ASCII text, with very long lines (32129), with no line terminators
Hash bea11f8104607ca390af78955daace28
1274dabeec2033dfae92cef9d90d4383bf38f9cb
627a9a210c81076e6941180ec5c61e0dabcd4d775d10625f99d78efe00071b4f
GET /cf/62/1e/cf621eb24aa5b4a128894819698170b8.js HTTP/1.1
Host: arbourrenewal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 03 Dec 2022 22:29:13 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: fceec2cd260da343c9e7ff27d1a10956
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash baaba92c2ccd740f080a25a9ea5cb3ad
3322d5a9fb0b3a2ec83247eac9865234cbcefece
5150dcbc7293378fff4a337fd0f61bdbbf6b4f64bddba6d0fd270be37e81fe07
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:29:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ads.vidoomy.com/imagenesderopaparaperros_14871.js
3.19.54.139200 OK 4.8 kB URL HTTP/1.1 ads.vidoomy.com/imagenesderopaparaperros_14871.js
IP 3.19.54.139:0
File type ASCII text, with very long lines (4753)
Hash dca7d770c45a86e8ed98a1a70b16b30a
8d09f9f86cd4dd3f0cf8cef950e4e1ade9ce9c1b
3cfd562889f90c112dadbb1d22fcc0a37235cb8a95484d4c285a13ae670042c9
GET /imagenesderopaparaperros_14871.js HTTP/1.1
Host: ads.vidoomy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:13 GMT
Server: Apache/2.4.54 (Amazon) OpenSSL/1.0.2k-fips PHP/7.0.33
X-Powered-By: PHP/7.0.33
Access-Control-Allow-Origin: *
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 4755
Keep-Alive: timeout=2, max=300
Connection: Keep-Alive
Content-Type: application/javascript
r3.o.lencr.org/
23.36.76.249200 OK 503 B IP 23.36.76.249:0
ASN #20940 Akamai International B.V.
Hash bcc23497ea9e19cd6e70c0165375e367
16ad68114b2e714159a7702709463082808d152d
eb66ca5e0f3745872530e8f4505b8ee044c842d2db62d825c4d2bdbb509e3e77
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB66CA5E0F3745872530E8F4505B8EE044C842D2DB62D825C4D2BDBB509E3E77"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6216
Expires: Sun, 04 Dec 2022 00:12:49 GMT
Date: Sat, 03 Dec 2022 22:29:13 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 313 B IP 93.184.220.29:0
Hash 96b3d00620dcd983b6058805813845fe
cd6ac2676217528ac79aab5b3a482354e5e506af
48a20e830e789d94b25058c34a149ce7c1cddf8e77ad1615bf2fc8c6cdfe2763
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6476
Cache-Control: max-age=99836
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:29:13 GMT
Etag: "638a9769-139"
Expires: Mon, 05 Dec 2022 02:13:09 GMT
Last-Modified: Sat, 03 Dec 2022 00:25:13 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 313
r3.o.lencr.org/
23.36.76.249200 OK 503 B IP 23.36.76.249:0
ASN #20940 Akamai International B.V.
Hash bcc23497ea9e19cd6e70c0165375e367
16ad68114b2e714159a7702709463082808d152d
eb66ca5e0f3745872530e8f4505b8ee044c842d2db62d825c4d2bdbb509e3e77
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB66CA5E0F3745872530E8F4505B8EE044C842D2DB62D825C4D2BDBB509E3E77"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6216
Expires: Sun, 04 Dec 2022 00:12:49 GMT
Date: Sat, 03 Dec 2022 22:29:13 GMT
Connection: keep-alive
fonts.gstatic.com/s/nunito/v25/XRXV3I6Li01BKofINeaB.woff2
216.58.207.227200 OK 36 kB URL HTTP/2 fonts.gstatic.com/s/nunito/v25/XRXV3I6Li01BKofINeaB.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 35904, version 1.0\012- data
Hash c26b97e7f5bb7a34d190703522d75e16
69d9e5aea0544dbaf9b78c1b65139c03eceece8f
96217f1d27fb909f92b4a6b35a0d3d6775f2f0b4d136d27aee88547d3ed87357
GET /s/nunito/v25/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35904
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 21:26:12 GMT
expires: Tue, 28 Nov 2023 21:26:12 GMT
cache-control: public, max-age=31536000
age: 435781
last-modified: Mon, 18 Jul 2022 19:34:47 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.249200 OK 503 B IP 23.36.76.249:0
ASN #20940 Akamai International B.V.
Hash bcc23497ea9e19cd6e70c0165375e367
16ad68114b2e714159a7702709463082808d152d
eb66ca5e0f3745872530e8f4505b8ee044c842d2db62d825c4d2bdbb509e3e77
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB66CA5E0F3745872530E8F4505B8EE044C842D2DB62D825C4D2BDBB509E3E77"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6216
Expires: Sun, 04 Dec 2022 00:12:49 GMT
Date: Sat, 03 Dec 2022 22:29:13 GMT
Connection: keep-alive
ads.themoneytizer.com/s/gen.js?type=19
185.76.9.14200 OK 2.2 kB URL HTTP/2 ads.themoneytizer.com/s/gen.js?type=19
IP 185.76.9.14:0
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (2659)
Hash 66e7dda61831b512ad37613d84a9fe25
dcd28868f5816f07cbd2461b4ed889f02754bd3f
9624e0d78f8af398e6b3c593bb1e89f5f6ce8d49fb58040d9efd21a43e7da76e
GET /s/gen.js?type=19 HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:12 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=604800
x-accel-expires: @1670562285
server: CDN77-Turbo
x-77-nzt: AblMCQ2ZsWD/S0YCAA
x-77-nzt-ray: c0a4cc2817d91737b8cd8b63aa77be27
x-cache: HIT
x-age: 149067
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
ocsp.godaddy.com/
192.124.249.41200 OK 1.8 kB IP 192.124.249.41:0
Hash f7ffd293034b9c6c76acde4d84ff1d2b
9a87c1cae88ae8861a402aa4acfe73521f1750fa
b73f075656ba331fa1c1c6a0e47cc451b8b9641eedf5c3ffc602267f3414fb32
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 03 Dec 2022 22:29:13 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 02 Dec 2022 21:12:24 GMT
Expires: Sat, 03 Dec 2022 22:29:13 GMT
ETag: "9a87c1cae88ae8861a402aa4acfe73521f1750fa"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash a151c326c67e1abb747847c1427db76f
80885d30ef8ba867bf33c40b861976958a27493a
de2b573ee1c8af980e593352e0c331b2595f62bd4499300ace30821d20814760
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1049
Cache-Control: max-age=125707
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:29:13 GMT
Etag: "638b11ab-1d7"
Expires: Mon, 05 Dec 2022 09:24:20 GMT
Last-Modified: Sat, 03 Dec 2022 09:06:51 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
arbourrenewal.com/2a/6d/fa/2a6dfa22c42f41c1c5d4b95b66a5509c.js
173.233.137.36200 OK 21 kB URL HTTP/1.1 arbourrenewal.com/2a/6d/fa/2a6dfa22c42f41c1c5d4b95b66a5509c.js
IP 173.233.137.36:0
File type HTML document, ASCII text, with very long lines (60172), with no line terminators
Hash abdd8040156fd74d89543539c2566bde
d940f4b6972a665d121a6898f4cf4adf4c8ac0d4
3dc2b29003400047ecb158847d26be95752a9c02e94700fcd3cf68b5183bc6a3
GET /2a/6d/fa/2a6dfa22c42f41c1c5d4b95b66a5509c.js HTTP/1.1
Host: arbourrenewal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 03 Dec 2022 22:29:13 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 204044dec3b499cd17a7652688f17103
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash baaba92c2ccd740f080a25a9ea5cb3ad
3322d5a9fb0b3a2ec83247eac9865234cbcefece
5150dcbc7293378fff4a337fd0f61bdbbf6b4f64bddba6d0fd270be37e81fe07
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:29:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
c.tmyzer.com/c/?s=52788&f=6&fi=99
54.38.64.100200 OK 0 B URL HTTP/1.1 c.tmyzer.com/c/?s=52788&f=6&fi=99
IP 54.38.64.100:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c/?s=52788&f=6&fi=99 HTTP/1.1
Host: c.tmyzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 03 Dec 2022 22:29:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Access-Control-Allow-Origin: *
X-IPLB-Request-ID: 5B5A2A9A:13B5_36264064:01BB_638BCDB9_15217BE:15F6F
X-IPLB-Instance: 38442
m.imagenesderopaparaperros.com/vendor/jquery.min.js?ver=6.4.0
104.21.94.136200 OK 33 kB URL HTTP/2 m.imagenesderopaparaperros.com/vendor/jquery.min.js?ver=6.4.0
IP 104.21.94.136:0
File type ASCII text, with very long lines (32065)
Hash 10eda8c4e949682ba392a00ef62f56dd
d1ad732961503f10547642da3045d8e645b31f7b
1e615d2d5f82aef23b3f43e575c07c245a7d3b40c63e1dc7df1530664d99356b
GET /vendor/jquery.min.js?ver=6.4.0 HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:12 GMT
content-type: application/javascript
x-frame-options: SAMEORIGIN
last-modified: Sat, 20 Jun 2020 00:07:34 GMT
cache-control: max-age=2592000
expires: Mon, 05 Dec 2022 20:44:19 GMT
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 2425493
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gYl8IUnl%2FKsKXwHzvblbwMqouuXKk1WoRklpMH0PqoZOw%2FQIPr0o0NJkkGG0FbtSCb%2BHDu%2BACBYO5nSpp1GdHNcxg83rKSIYICMFMEwC9xg%2Fmp0fZEopOuW%2FsYlt4ryv%2FYDBGY0FN2q0U%2FIQWt6Js8Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 773fbd622acfb509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
tag.leadplace.fr/libJsLP.js
145.239.192.166200 OK 5.5 kB URL HTTP/1.1 tag.leadplace.fr/libJsLP.js
IP 145.239.192.166:0
Hash a0c24f993bc0901cfe62d1e801cb2b45
7eb2bdce06161ae486bc8e7ecd0b5c9c4f7b2984
80fccb00db57a177d26368cda09f8a540cf1aa641b8b6837047e86d3bd8d6333
GET /libJsLP.js HTTP/1.1
Host: tag.leadplace.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 03 Dec 2022 22:29:13 GMT
Content-Type: application/javascript
Content-Length: 5547
Last-Modified: Thu, 14 Oct 2021 07:27:52 GMT
ETag: "6167dbf8-15ab"
Accept-Ranges: bytes
X-IPLB-Request-ID: 5B5A2A9A:C5BC_91EFC0A6:01BB_638BCDB9_3AA6B61C:6041
X-IPLB-Instance: 30196
m.imagenesderopaparaperros.com/vendor/owl/owl.carousel.min.js?ver=6.4.0
104.21.94.136200 OK 28 kB URL HTTP/2 m.imagenesderopaparaperros.com/vendor/owl/owl.carousel.min.js?ver=6.4.0
IP 104.21.94.136:0
File type ASCII text, with very long lines (31997)
Hash 53f548b043375e72e97b42cc82bb0785
c982f6bd5221811d4daeffdce883f25be5d5bc27
dd5f5960c757e8f27db312d0d9e7b6b823f2fd8ac9e9cb4a3fc9b2c2c41d7d80
GET /vendor/owl/owl.carousel.min.js?ver=6.4.0 HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:12 GMT
content-type: application/javascript
x-frame-options: SAMEORIGIN
last-modified: Sat, 20 Jun 2020 00:08:03 GMT
cache-control: max-age=2592000
expires: Fri, 23 Dec 2022 11:03:24 GMT
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 905148
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rm8A6r%2F6p0BPFyRgOqettHhrbwQODZBfH6cCLDIvuZ2nfBiRq6v%2BNjmbMQp1w0ZRSVgK6TA%2BY5kheZb8SRrKbtzcKr3tQIeIARwuIk%2Bj3KXZqJOnREOweCufMDJqdt4YNvOX3U4BzA0ZmWnKwpqRcUc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 773fbd61ea72b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
c.tmyzer.com/c/?s=52788&f=1&fi=99
54.38.64.100200 OK 0 B URL HTTP/1.1 c.tmyzer.com/c/?s=52788&f=1&fi=99
IP 54.38.64.100:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c/?s=52788&f=1&fi=99 HTTP/1.1
Host: c.tmyzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 03 Dec 2022 22:29:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Access-Control-Allow-Origin: *
X-IPLB-Request-ID: 5B5A2A9A:C8E3_36264064:01BB_638BCDB9_1522F8F:489B
X-IPLB-Instance: 41595
spl.zeotap.com/?env=mWeb&eventType=pageview&zdid=1258
104.22.24.87308 Permanent Redirect 104 B URL HTTP/1.1 spl.zeotap.com/?env=mWeb&eventType=pageview&zdid=1258
IP 104.22.24.87:0
File type HTML document, ASCII text
Hash f6374de2b16ca49a4b7f2c19227141a2
9a63b26916d675ec764c2d6fdf991052c3fdcd4f
f5042dc89e970724b5778beea2fa613e4ca930c45dfa1dfb510bbba968c2cdbe
GET /?env=mWeb&eventType=pageview&zdid=1258 HTTP/1.1
Host: spl.zeotap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
HTTP/1.1 308 Permanent Redirect
Date: Sat, 03 Dec 2022 22:29:13 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: *
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Location: https://spl.zeotap.com/?env=mWeb&eventType=pageview&zdid=1258
Vary: Origin
Via: 1.1 google
CF-Cache-Status: DYNAMIC
Server-Timing: cf-q-config;dur=3.9999977161642e-06
Server: cloudflare
CF-RAY: 773fbd65ad0b0b06-OSL
c.tmyzer.com/c/?s=52788&f=19&fi=99
54.38.64.100200 OK 0 B URL HTTP/1.1 c.tmyzer.com/c/?s=52788&f=19&fi=99
IP 54.38.64.100:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c/?s=52788&f=19&fi=99 HTTP/1.1
Host: c.tmyzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 03 Dec 2022 22:29:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Access-Control-Allow-Origin: *
X-IPLB-Request-ID: 5B5A2A9A:13B5_36264064:01BB_638BCDB9_15217C5:15F6F
X-IPLB-Instance: 38442
unicons.iconscout.com/release/v2.1.7/css/unicons.css
104.18.28.243200 OK 9.9 kB URL HTTP/2 unicons.iconscout.com/release/v2.1.7/css/unicons.css
IP 104.18.28.243:0
File type ASCII text, with very long lines (55387), with no line terminators
Hash fbcf806ad9a65dfeba08c5ca64431646
4fb3b4c12f84dd5be3208b695f5b883a537aed91
4a1c11ab76ded8aa2520e00710845ea75f108a4f8660788156e5d000ea715f2a
GET /release/v2.1.7/css/unicons.css HTTP/1.1
Host: unicons.iconscout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:12 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=63509
etag: W/"aaeb6aed7a9c71959a3b51e937c363f0"
last-modified: Tue, 28 Apr 2020 10:01:21 GMT
x-amz-id-2: qSduub1s3mFmCfde2XDgqPc08zdrY5EGOqvrCKN/6T4V9eqzeXI3mUndTj3zhrgkkk8TiMbEISM=
x-amz-request-id: V3PY903MVV55FPTX
cf-cache-status: HIT
age: 544520
expires: Sun, 03 Dec 2023 22:29:12 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 773fbd61f9beb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash dac57aee83fd3a2ddc6062078a14c96b
5f1d474a4240d864d1f9ca72bfb20c26667663d9
679ebe4565db79ab8eb3487a99c7b9aa54562c3a41e1be21db8de145997f8b40
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:13 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 02 Dec 2022 12:12:00 GMT
Expires: Fri, 09 Dec 2022 12:11:59 GMT
Etag: "5f1d474a4240d864d1f9ca72bfb20c26667663d9"
Cache-Control: max-age=480765,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 773fbd659fcdb4ed-OSL
www.cdn4ads.com/w2ui.min.css
185.76.9.21200 OK 0 B URL HTTP/2 www.cdn4ads.com/w2ui.min.css
IP 185.76.9.21:0
ASN #60068 Datacamp Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /w2ui.min.css HTTP/1.1
Host: www.cdn4ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:13 GMT
content-type: text/html; charset=UTF-8
content-length: 0
alt-svc: quic="185.76.9.20:443"; ma=2592000; v="44,43,39"
x-accel-expires: @1671050496
server: CDN77-Turbo
x-77-nzt: AblMCRTt3Q//uWoBAA
x-77-nzt-ray: af585630b4a21defb9cd8b63a7e45919
x-cache: HIT
x-age: 92857
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
addresseepaper.com/sfp.js
34.160.73.230429 Too Many Requests 298 B URL HTTP/1.1 addresseepaper.com/sfp.js
IP 34.160.73.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 2d276fc22806d34e2355196fe7bea1f3
0f2c85ecd7a43e866345fd0eafe5e0fdd4aa7acf
9e522902dee04e1345219cee056a1a291ba4eca674870853ab05f3579875ff38
GET /sfp.js HTTP/1.1
Host: addresseepaper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
HTTP/1.1 429 Too Many Requests
Server: openresty
Date: Sat, 03 Dec 2022 22:29:13 GMT
Content-Type: text/html
Content-Length: 298
ETag: "6382c3e0-12a"
Via: 1.1 google
z.cdn.ftd.agency/load?z=1339915142&div=1538f89l5ou&cw=1280&ch=939&sr=1280x1024&df=1&bh=1&tl=1491&hc=16&n=1670106551128&url=m.imagenesderopaparaperros.com%2Fqfv5mJE&vc=0&ti=zShorte.net%20%7C%20zShorte.net&zyx=1676036930
37.48.117.210204 No Content 0 B URL HTTP/1.1 z.cdn.ftd.agency/load?z=1339915142&div=1538f89l5ou&cw=1280&ch=939&sr=1280x1024&df=1&bh=1&tl=1491&hc=16&n=1670106551128&url=m.imagenesderopaparaperros.com%2Fqfv5mJE&vc=0&ti=zShorte.net%20%7C%20zShorte.net&zyx=1676036930
IP 37.48.117.210:0
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /load?z=1339915142&div=1538f89l5ou&cw=1280&ch=939&sr=1280x1024&df=1&bh=1&tl=1491&hc=16&n=1670106551128&url=m.imagenesderopaparaperros.com%2Fqfv5mJE&vc=0&ti=zShorte.net%20%7C%20zShorte.net&zyx=1676036930 HTTP/1.1
Host: z.cdn.ftd.agency
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Sat, 03 Dec 2022 22:29:13 GMT
Connection: keep-alive
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
Expires: -1
P3P: policyref="/p3p.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Set-Cookie: AU=66910b6b58fa7cc8; Expires=Sun, 03 Dec 2034 22:00:36 GMT; Path=/; HttpOnly; Domain=.cdn.ftd.agency; SameSite=None; Secure
m.imagenesderopaparaperros.com/modern_theme/js/front.js?ver=6.4.0
104.21.94.136200 OK 1.5 kB URL HTTP/2 m.imagenesderopaparaperros.com/modern_theme/js/front.js?ver=6.4.0
IP 104.21.94.136:0
Hash cb464b7313888e1827a781250728173a
0249c998e55ee8d6f1ffb4fed446dd0d59192e64
91eec2384a23ad5057b484a5f9c3f691a0b8e846fb99ef2c3845ac83d67ee112
GET /modern_theme/js/front.js?ver=6.4.0 HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:12 GMT
content-type: application/javascript
x-frame-options: SAMEORIGIN
last-modified: Sat, 20 Jun 2020 00:08:01 GMT
cache-control: max-age=2592000
expires: Sun, 01 Jan 2023 07:03:58 GMT
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-served-by: m.imagenesderopaparaperros.com
cf-cache-status: HIT
age: 141914
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GXQ4%2BIbgaa0wULaPA0Saz2E9oZ8SS%2BK2cwfKsiobiCBjXT3%2B%2BUvZbVA%2FeKhm3uiRuyDTHnbTe%2Fy4%2By8VNq%2ByC5wfk5WKBFBNfLb%2BZcldIju2H0cmIz8P2VlMu%2FtTR2NwNs6G8nEiUugrlf%2FVBMXQ%2BTg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 773fbd61ea73b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
p.cpx.to/p/12762/px.js
34.242.30.97200 OK 2.0 kB IP 34.242.30.97:0
File type ASCII text, with very long lines (1990), with no line terminators
Hash 96bff8608d7c1f626b59ae10df6ea453
ee770e9213dd8a56b7887b8d1451546aa05d8e64
ee9923b738244929a3c2209848466bccd86eae3672fdef053a0272b60a9e0dfe
GET /p/12762/px.js HTTP/1.1
Host: p.cpx.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=2419200, public
Content-Type: application/javascript; charset=UTF-8
Date: Sat, 03 Dec 2022 22:29:12 GMT
Content-Length: 1990
Connection: keep-alive
push.services.mozilla.com/
34.212.166.60101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.212.166.60:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 4g60RNv/3AnP+cIOyvZCLg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: F64bpm0b/PjGTPuXEKO1ILr8UVc=
friendshipmale.com/sfp.js
172.64.108.35200 OK 28 kB URL HTTP/1.1 friendshipmale.com/sfp.js
IP 172.64.108.35:0
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash b1fa950e77a7db5425f9a5257af02e9c
2d5580451f34ad96218f8b97edf9708f9ee1be87
d999c4320df27dc4a1d3de5aec22bb3ef201560b47a7eff3f28f4133c1997a14
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:13 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: max-age=14400
X-Request-ID: 0d1c9db73bb858ad1f349c51d35ce8c1
Strict-Transport-Security: max-age=0; includeSubdomains
CF-Cache-Status: EXPIRED
Last-Modified: Sat, 03 Dec 2022 22:29:13 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=joqIEJCg7zU6KcrpUGI4m4DwqHat3tnmBU7tfJvMflTYfrzFV4T%2FZNKzEjMITqz4NFs3pbo%2Bk5mjlja%2FVb%2FPaMm7m3S3xb7RlkCGCh2hPGbsai4vWQKNr20sKzK0kqa8t606xWc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 773fbd66ae64768c-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
m.imagenesderopaparaperros.com/zshorte_theme/fonts/materialdesignicons-webfont.woff2?v=5.3.45
104.21.94.136200 OK 290 kB URL HTTP/1.1 m.imagenesderopaparaperros.com/zshorte_theme/fonts/materialdesignicons-webfont.woff2?v=5.3.45
IP 104.21.94.136:0
File type Web Open Font Format (Version 2), TrueType, length 290164, version 1.0\012- data
Size 290 kB (290164 bytes)
Hash dc85ceeb0daba687e36d8dde4ed4d352
07b7375770ca6989fdf9872a960727743bd9da5d
f94a9bc93d318bc1bc5d07ca5aad4eb651553ef7a0e6a3b06f6f5abbc72fea75
GET /zshorte_theme/fonts/materialdesignicons-webfont.woff2?v=5.3.45 HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/zshorte_theme/css/materialdesignicons.min.css
Cookie: lang=en_US; AppSession=e9857a8961219aaf81d87119a9f446c9; csrfToken=6f7863ab196cca39d5886ae8be1e19ddbf4c761f726f7823c01d31d9b4db367b5d4fa1135d8c96311706b218312f8db9bf485ce3ded5fba0733f4043a12e6450
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:13 GMT
Content-Type: font/woff2
Content-Length: 290164
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Last-Modified: Sat, 20 Jun 2020 00:08:18 GMT
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Vary: User-Agent, Accept-Encoding
X-Served-By: m.imagenesderopaparaperros.com
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iXYBjJKphCLfHpVZQygqbC2rsVACxgQyUafJ3I4IoZ9gbDXsDzGUmqvOOaGpWRW%2B7Ks4N%2BWJL4J9OEKdcUssPDgheVvv2U41TAkcBrCcF%2F3CYqKDyO6HPJPVdnOLibD0JtKPbU1KBik6boJhnKxgD%2BE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 773fbd66ab620b39-OSL
alt-svc: h2=":443"; ma=60
ocsp.sca1b.amazontrust.com/
143.204.42.165200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.165:0
Hash 3ac233072203aa898099a9f19d5c89f1
49e15a39534a9dadb3a87e90295a1f568e6665d3
025c971b8163c8429372f5be9fed72e934b3c68d6050412f425c08acac55747f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=141054
Date: Sat, 03 Dec 2022 22:29:13 GMT
Etag: "638b4f9a-1d7"
Expires: Mon, 05 Dec 2022 13:40:07 GMT
Last-Modified: Sat, 03 Dec 2022 13:31:06 GMT
Server: ECS (nyb/1D0A)
X-Cache: Miss from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: YcZUAM9A1kv0xGvPJ3eTMzTEf9jayoxt_DsRH8YaQB6ybWQUMuAeZA==
Age: 541
ocsp.sca1b.amazontrust.com/
143.204.42.165200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.165:0
Hash 3ac233072203aa898099a9f19d5c89f1
49e15a39534a9dadb3a87e90295a1f568e6665d3
025c971b8163c8429372f5be9fed72e934b3c68d6050412f425c08acac55747f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=141052
Date: Sat, 03 Dec 2022 22:29:13 GMT
Etag: "638b4f9a-1d7"
Expires: Mon, 05 Dec 2022 13:40:05 GMT
Last-Modified: Sat, 03 Dec 2022 13:31:06 GMT
Server: ECS (nyb/1D0D)
X-Cache: Miss from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: hQE6HrAopqKNFDW5LigutJ6BzdlqbP0frCyDx6Poup0YGtMuSNkjXA==
Age: 539
tractorfoolproofstandard.com/pixel/purst?dl=0&th=0&sc=0&rs=1403&rd=1403&fd=992&bv=22.10.v.9&tmpl=70
192.243.61.225200 OK 0 B URL HTTP/1.1 tractorfoolproofstandard.com/pixel/purst?dl=0&th=0&sc=0&rs=1403&rd=1403&fd=992&bv=22.10.v.9&tmpl=70
IP 192.243.61.225:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=1403&rd=1403&fd=992&bv=22.10.v.9&tmpl=70 HTTP/1.1
Host: tractorfoolproofstandard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sat, 03 Dec 2022 22:29:13 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
simplewebanalysis.com/stats
52.28.211.11200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP 52.28.211.11:0
File type ASCII text, with no line terminators
Hash 8f5a5a005e5268369fae2a717c0708fd
a6fedea1842fd382a5b83a4fc42e8d42be3291e1
d8636b8fbac808968ca73de975430c8fab517444294a3372604aa3b36c943332
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:13 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: http://m.imagenesderopaparaperros.com
access-control-allow-credentials: true
set-cookie: uid_id2=d3d5766c-177a-4317-8953-f28ccd9e6562:1:1; expires=Tue, 30 Nov 2032 22:29:13 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
52.28.211.11200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP 52.28.211.11:0
File type ASCII text, with no line terminators
Hash 3ef6fbd9252f2fa11a2c7d0f0bc1dfe5
ee269f419f80c580b821a40b12956115cbba3e5b
b602e9883dc6fde298fecf8c041545b6efa633bfd7390345e4d200d2cd2b4195
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:13 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: http://m.imagenesderopaparaperros.com
access-control-allow-credentials: true
set-cookie: uid_id2=bd2bf0f3-095b-457f-97ea-b62bde565ecb:1:1; expires=Tue, 30 Nov 2032 22:29:13 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
a.teads.tv/analytics/tag.js
23.38.201.50200 OK 3.4 kB URL HTTP/2 a.teads.tv/analytics/tag.js
IP 23.38.201.50:0
File type ASCII text, with very long lines (4822)
Hash 6ddfb3a828a563a7719081ff9aeedaba
80286455b7c85311df5f997714b83380ac02fd6d
826524e59a21d4190f923f804a17db1513e1ee3cb4a5ed12f3bb6a5b4f370835
GET /analytics/tag.js HTTP/1.1
Host: a.teads.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: +hi3J8gLh7odTbzzwPTTi1cNLRiMIMeCbLwhFS3fdhvnkPc6F/KidF+aylAlaVgqP4umQC5X3TY=
x-amz-request-id: VYTSDGA8QVA7F7Y0
last-modified: Wed, 02 Nov 2022 09:38:15 GMT
etag: "6ddfb3a828a563a7719081ff9aeedaba"
x-amz-server-side-encryption: AES256
x-amz-version-id: Y6qsPmt0o95KDo3Ibo2euzqSnxQebNV8
accept-ranges: bytes
content-type: text/javascript;charset=utf-8
content-length: 3391
cache-control: private, max-age=3600
date: Sat, 03 Dec 2022 22:29:13 GMT
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
d2zur9cc2gf1tx.cloudfront.net/a96081b6-db78-48c4-9f82-b93e316fb1f7/notifyme.js
143.204.42.64200 OK 26 kB URL HTTP/1.1 d2zur9cc2gf1tx.cloudfront.net/a96081b6-db78-48c4-9f82-b93e316fb1f7/notifyme.js
IP 143.204.42.64:0
File type ASCII text, with very long lines (16085)
Hash 8703fc9eead243fe2f47380e962d7fa2
3d9f707259112fa9ccdd1e676f00eadcff71906c
b47b4ca26c57e3dceebd7abd067df9622599bed6bfb11b480f92d09a945cd213
GET /a96081b6-db78-48c4-9f82-b93e316fb1f7/notifyme.js HTTP/1.1
Host: d2zur9cc2gf1tx.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript
Content-Length: 25704
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Mon, 18 Feb 2019 16:54:28 GMT
Server: Apache
Date: Sat, 03 Dec 2022 20:46:16 GMT
X-Cache: Hit from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: SsJ8T6T2Jk2oSowWMZb3D84-o_K3gCm8sXy6g-01v02JYoH4fxewNg==
Age: 6179
ced.sascdn.com/tag/1097/smart.js
23.36.77.48200 OK 33 kB URL HTTP/1.1 ced.sascdn.com/tag/1097/smart.js
IP 23.36.77.48:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 4686ea4ceef48bf4d7b06bf70fe2a6ef
6a1348d13eca8b7882c4679c53019a51f48a94fd
685fc19fe5c57ebff672b1a9c03ea8b85f78d37558cc6743a39baa034f852d0d
GET /tag/1097/smart.js HTTP/1.1
Host: ced.sascdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 32836
Cache-Control: public, max-age=7200
Expires: Sun, 04 Dec 2022 00:29:13 GMT
Date: Sat, 03 Dec 2022 22:29:13 GMT
Connection: keep-alive
d3g5ovfngjw9bw.cloudfront.net/leaflet.toolbar.js
143.204.42.44200 OK 9.7 kB URL HTTP/2 d3g5ovfngjw9bw.cloudfront.net/leaflet.toolbar.js
IP 143.204.42.44:0
File type HTML document, ASCII text, with very long lines (1568), with CRLF line terminators
Hash 697a6651ba2a8776ab5819142cb93f01
71d429cb342ce48141d75fa5fc79f10664dcf97d
5544377ffe2b03fafb53905c8d7a79aac62d118a62e29a07290bd6f0e62b163f
Analyzer Verdict Alert fortinet Malware
GET /leaflet.toolbar.js HTTP/1.1
Host: d3g5ovfngjw9bw.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 9698
expires: Thu, 08 Dec 2022 01:08:33 GMT
access-control-allow-origin: *
link: <https://cdn4ads.com/>;rel=preconnect,<https://c.adsco.re/>;rel=preconnect,<https://adsco.re/>;rel=preconnect
cache-control: public, max-age=604800
content-encoding: gzip
date: Thu, 01 Dec 2022 01:08:33 GMT
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: evP2EDmT2yocK6N40LXOOrjsJFEp8rOs0PINnX3I2ntv2OBPS2sRMw==
age: 249639
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 9b61e042ff9f7c8d3cbb3a46c565cb51
15a4546461f01ded4677206b47e507e6c308e6c2
bf4cc613ac8c3a993891a255dbde7791cb24f73dca3ce19e962f5ebe2ac3a1c6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:29:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 312 B IP 93.184.220.29:0
Hash 8b129125171aa50e40f0d0e26d1a6c4e
d1376718e6dd2b03aab6f632af2438b8ae3e49b2
96b4c4d6e7843adcee8a1cda47dc0d485752afc26d633c0e97892c6040e460fd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1008
Cache-Control: max-age=132876
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:29:13 GMT
Etag: "638b2dd5-138"
Expires: Mon, 05 Dec 2022 11:23:49 GMT
Last-Modified: Sat, 03 Dec 2022 11:07:01 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 312
ocsp.digicert.com/
93.184.220.29200 OK 727 B IP 93.184.220.29:0
Hash bd118d3a96b246a997520f6513a7afe9
e7811defec0885aa2099556f06749444ac6b1284
12cfbeec292b4c6c2a63766ea88a6bdbb492e0c9d5aed62cec6df361d66e39a4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2622
Cache-Control: max-age=88761
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:29:13 GMT
Etag: "638a7b34-2d7"
Expires: Sun, 04 Dec 2022 23:08:34 GMT
Last-Modified: Fri, 02 Dec 2022 22:24:52 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 727
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash b64b3cd4701733e5be64209249083515
b81692038002b5c878b7606b5396d6099f0009b4
cd50d1f1f4a09e47355664207ce1c8651a4d17ec33b64d5ec208a179226ac355
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 527
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:29:13 GMT
Etag: "638b9039-1d7"
Last-Modified: Sat, 03 Dec 2022 22:20:26 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
spl.zeotap.com/?env=mWeb&eventType=pageview&zdid=1258
104.22.24.87200 OK 767 B URL HTTP/2 spl.zeotap.com/?env=mWeb&eventType=pageview&zdid=1258
IP 104.22.24.87:0
File type ASCII text, with no line terminators
Hash 1bc4597ae93b837def9059001b071d74
0f862e73c98798fcf0e6cf7320f842f8ac82a355
641941fa4a8e45b017d844fa6c188e70ab0fd758edd085728bfa40b757075604
GET /?env=mWeb&eventType=pageview&zdid=1258 HTTP/1.1
Host: spl.zeotap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Referer: http://m.imagenesderopaparaperros.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:13 GMT
content-type: text/html
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-origin: http://m.imagenesderopaparaperros.com
set-cookie: zc=bb438cad-71f5-498a-493d-a3d5c5fdbe6f; Path=/; Domain=.zeotap.com; Max-Age=31536000; SameSite=None; Secure
zsc=%F2%BE%AD%8Fm%D4%FF%F2%FC%E7%7D%A3%15%24%18%29x%0F%25t%F7%EF%1F%8B%E4%08%81%BC%87%86%A24%95QW%FF%88%5Ei%C1v6%94%F1%14%3F%AAwj%E8%11%DE%C6%2Cj%0C%C2%C1%B7%01%29%FFq%BAR%A1ic%ED%3E%0C%A0%E9%C6%0F%F9%FA%D0%DCsS%09%83; Path=/; Domain=.zeotap.com; Max-Age=86400; SameSite=None; Secure
vary: Origin
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 773fbd674c9ab506-OSL
content-encoding: br
X-Firefox-Spdy: h2
test.cmp.quantcast.com/GVL-v2/cmp-list.json
143.204.55.14200 OK 2.6 kB URL HTTP/2 test.cmp.quantcast.com/GVL-v2/cmp-list.json
IP 143.204.55.14:0
File type JSON data\012- , ASCII text, with very long lines (10044), with no line terminators
Hash babc90a2681867b8659d955b68f4eb1d
0880e5e8b9334b3aeb42eabed75ef7a9cedeacd6
933676125c42c63dcec170a79c982a636916ff72a4c37e1e6716b448edfc719e
GET /GVL-v2/cmp-list.json HTTP/1.1
Host: test.cmp.quantcast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
access-control-max-age: 86400
cache-control: max-age=172800
date: Sat, 03 Dec 2022 03:00:39 GMT
last-modified: Wed, 30 Nov 2022 19:52:29 GMT
etag: W/"8980f3096e8d1a15cdb9518354d546f7"
x-amz-server-side-encryption: AES256
x-amz-version-id: KZ_abct9fxSnQsZ4cInZdlEfLgTLD6XT
server: AmazonS3
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 52HJilbnPSVg5NSW20V6seQ7QZNLUngyZGRC0LXJpYWyt8fYRhBSrg==
age: 70115
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 89757b50a8055fe5630793960963e992
4686842e9b109dd056936e47c364dd10995c1293
995c2617619bb86561a6620440002d85f54e42a0c46ee19d9c002c273e29264e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 791
Cache-Control: max-age=147383
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:29:13 GMT
Etag: "638b6759-1d7"
Expires: Mon, 05 Dec 2022 15:25:36 GMT
Last-Modified: Sat, 03 Dec 2022 15:12:25 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
secure.quantserve.com/quant.js
91.228.74.159200 OK 10 kB URL HTTP/2 secure.quantserve.com/quant.js
IP 91.228.74.159:0
Hash b387b22660d317d486769aff865ee2c5
05e86e35bfee47d4370c5e9a71e620380c29a752
0332a170af20f9e88133a38cd6f46502e77a2c718490c26350b4fb03c53f2a8a
GET /quant.js HTTP/1.1
Host: secure.quantserve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:13 GMT
content-type: application/javascript
accept-ranges: bytes
cache-control: private, max-age=604800
content-encoding: gzip
etag: "nAbmxtqHqaYrwBiADJAeFg=="
expires: Sat, 10 Dec 2022 22:29:13 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
142.250.74.35200 OK 163 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
IP 142.250.74.35:0
File type ASCII text, with very long lines (730)
Size 163 kB (162976 bytes)
Hash 79d18cf4265108d7cecca1bf4ada6109
e51d0285a545381d4c39e9e0292a650ffeeecbb9
59ce7253f371df0833c3f72d4748ef812002b90a49413c56d0ca7c40bb5a0ab6
GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 19:09:57 GMT
expires: Tue, 28 Nov 2023 19:09:57 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
age: 443956
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58610/occ
18.156.0.31302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58610/occ
IP 18.156.0.31:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58610/occ HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sat, 03 Dec 2022 22:29:13 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/58610/occ?verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBLnNi2MCEO4vYovMN1tssZPWBuinXEQFEgEBAQEfjWOVYwAAAAAA_eMAAA&S=AQAAAlI1fMvVzsqmrlK4bUEFS9Y; Expires=Mon, 4 Dec 2023 04:29:13 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
rules.quantcount.com/rules-p-6Fv0cGNfc_bw8.js
54.230.111.4301 Moved Permanently 167 B URL HTTP/1.1 rules.quantcount.com/rules-p-6Fv0cGNfc_bw8.js
IP 54.230.111.4:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /rules-p-6Fv0cGNfc_bw8.js HTTP/1.1
Host: rules.quantcount.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 03 Dec 2022 22:29:13 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://rules.quantcount.com/rules-p-6Fv0cGNfc_bw8.js
X-Cache: Redirect from cloudfront
Via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: iaQr6vsg6bCBPqDBWxRz5reQ4gO6Cmo8seZcUVELzYdAmwfN3Q06fA==
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash dbb66a45515eb4bd61566b8a462222b7
2d18c51e1a9d35c874c96ad0552aa35d88bfc5f9
1929d698afaff5af3fd939389346226a6056b86e4f870b0769755b0cdefd60a6
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:13 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 03 Dec 2022 01:56:49 GMT
Expires: Sat, 10 Dec 2022 01:56:48 GMT
Etag: "2d18c51e1a9d35c874c96ad0552aa35d88bfc5f9"
Cache-Control: max-age=530254,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 773fbd68ab67b4ed-OSL
ad.lkqd.net/vpaid/formats.js
151.139.128.10200 OK 36 kB URL HTTP/2 ad.lkqd.net/vpaid/formats.js
IP 151.139.128.10:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash b3736cf69ac3288810f4c8bb85ce569c
70984d14343ea485a8232927d58db0671eb1778f
1d2893bf6270530e1df90bc8279d8319cd721ba8dc4ba94970b1a0adf03bac98
GET /vpaid/formats.js HTTP/1.1
Host: ad.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:13 GMT
content-encoding: gzip
content-length: 35765
content-type: application/javascript
last-modified: Fri, 11 Dec 2020 00:09:23 GMT
accept-ranges: bytes
etag: "286704660baa2c113268f28385080796"
cache-control: public, max-age=1209600
x-hw: 1670106553.cds260.sk1.hn,1670106553.cds229.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2
c.adsco.re/
104.17.166.186200 OK 28 kB IP 104.17.166.186:0
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (689)
Hash 10a01aa4b1b98eaf84bbf379ae1e8a37
8fa47a75106dda08d76725d882fc80a4787a89e0
e7a5d2a6be0bdeed7f340c5da1d39049f8c6aab19ec273a016b4347a43106cf3
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:14 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=2678400
Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Permissions-Policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
Link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
Expires: Tue, 03 Jan 2023 22:29:14 GMT
ETag: W/"n/ARilLrRVDeZNVpaPOsXg=="
Content-Encoding: gzip
CF-Cache-Status: HIT
Age: 1231804
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 773fbd6a7b490b61-OSL
alt-svc: h2=":443"; ma=60
banquetunarmedgrater.com/advertisers.js
192.243.59.20200 OK 0 B URL HTTP/1.1 banquetunarmedgrater.com/advertisers.js
IP 192.243.59.20:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /advertisers.js HTTP/1.1
Host: banquetunarmedgrater.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 03 Dec 2022 22:29:13 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b4fa847003f5d0ed700cb36613effa6e
Strict-Transport-Security: max-age=0; includeSubdomains
6.adsco.re/
104.17.167.186200 OK 0 B IP 104.17.167.186:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:14 GMT
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Cache-Control: private, max-age=10
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Max-Age: 2592000
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 773fbd6a8e221bfa-OSL
alt-svc: h2=":443"; ma=60
x.bidswitch.net/sync?ssp=vidoomy&user_id=887990129.95033181652166561.0491017
35.158.226.123302 Found 0 B URL HTTP/2 x.bidswitch.net/sync?ssp=vidoomy&user_id=887990129.95033181652166561.0491017
IP 35.158.226.123:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?ssp=vidoomy&user_id=887990129.95033181652166561.0491017 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sat, 03 Dec 2022 22:29:14 GMT
content-length: 0
location: https://x.bidswitch.net/ul_cb/sync?ssp=vidoomy&user_id=887990129.95033181652166561.0491017
cache-control: no-cache, no-store, must-revalidate
set-cookie: tuuid=4fea2ac1-a16e-43be-91c0-b7403bbe752a; path=/; expires=Sun, 03-Dec-2023 22:29:14 GMT; domain=.bidswitch.net; samesite=none; secure
c=1670106554; path=/; expires=Sun, 03-Dec-2023 22:29:14 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1670106554; path=/; expires=Sun, 03-Dec-2023 22:29:14 GMT; domain=.bidswitch.net; samesite=none; secure
c=1670106554; path=/; expires=Sun, 03-Dec-2023 22:29:14 GMT; domain=.bidswitch.net; samesite=none; secure
X-Firefox-Spdy: h2
4.adsco.re/
162.252.214.5200 OK 62 B IP 162.252.214.5:0
File type ASCII text, with no line terminators
Hash adde5febc7b5b6c2c759ec735cce83a0
77ec17be8a9970ff04663294d41c590d0d24fde4
ce2b9f2e5005195de7add565505005be6f2ef0d37521771e15106d1e1b9260ff
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:14 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
ups.analytics.yahoo.com/ups/58610/occ?verify=true
18.156.0.31204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58610/occ?verify=true
IP 18.156.0.31:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58610/occ?verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://m.imagenesderopaparaperros.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 03 Dec 2022 22:29:14 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBLrNi2MCELPg9V1dy37oNFMuBRIjQZcFEgEBAQEfjWOVYwAAAAAA_eMAAA&S=AQAAAsLCUnluVwTmC5ERIpIZhyM; Expires=Mon, 4 Dec 2023 04:29:14 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/3.0.0/jquery.min.js
142.250.74.138200 OK 30 kB URL HTTP/1.1 ajax.googleapis.com/ajax/libs/jquery/3.0.0/jquery.min.js
IP 142.250.74.138:0
File type ASCII text, with very long lines (32034)
Hash c54aac7ef64c39b4f384e0d5771d3b46
d3e059104378a3844862a5ed12a13f5d423e86b6
3e1b5002dd64d185f806edeefd333348f423584d876cfc966b5c13884c8fe3da
GET /ajax/libs/jquery/3.0.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
Timing-Allow-Origin: *
Content-Length: 30186
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 29 Nov 2022 15:02:06 GMT
Expires: Wed, 29 Nov 2023 15:02:06 GMT
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
Content-Type: text/javascript; charset=UTF-8
Age: 372428
ad.lkqd.net/cookie-sync/usync.html
151.139.128.10200 OK 1.9 kB URL HTTP/2 ad.lkqd.net/cookie-sync/usync.html
IP 151.139.128.10:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4478)
Hash 41b852ed55af42897839dd36a74c8836
ab34ebee16e719e22645fb8560fd66adf90f9dff
eb7f7a625357319b2e1a3f3099e9630dada48ec5c079e5d698699ebe15c8002f
GET /cookie-sync/usync.html HTTP/1.1
Host: ad.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:14 GMT
content-encoding: gzip
content-length: 1882
content-type: text/html
last-modified: Fri, 18 Feb 2022 17:38:44 GMT
accept-ranges: bytes
etag: "952dcfd8e3703b5a7e78418d51009535"
cache-control: public, max-age=1209600
x-hw: 1670106554.cds260.sk1.hn,1670106554.cds003.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2
x.bidswitch.net/ul_cb/sync?ssp=vidoomy&user_id=887990129.95033181652166561.0491017
35.158.226.123200 OK 43 B URL HTTP/2 x.bidswitch.net/ul_cb/sync?ssp=vidoomy&user_id=887990129.95033181652166561.0491017
IP 35.158.226.123:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/sync?ssp=vidoomy&user_id=887990129.95033181652166561.0491017 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://m.imagenesderopaparaperros.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:14 GMT
content-type: image/gif
content-length: 43
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.249200 OK 503 B IP 23.36.76.249:0
ASN #20940 Akamai International B.V.
Hash 6f38dd7ea1214826c7a65cfadf2b7138
f209cd9d6e043dbc6fbbba23205133fa0e9b991f
36be864cb960e7cf3519f654c0b8233b3bb50a0b307066cfe52c588a4f6b8689
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "36BE864CB960E7CF3519F654C0B8233B3BB50A0B307066CFE52C588A4F6B8689"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11641
Expires: Sun, 04 Dec 2022 01:43:15 GMT
Date: Sat, 03 Dec 2022 22:29:14 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.249200 OK 503 B IP 23.36.76.249:0
ASN #20940 Akamai International B.V.
Hash c9074f9cc118e6abb90c048bc1d9a2ab
78a2e44e0e8742c468bad36270fbee4536654958
7d1400f4100c8e4cb54cc8ec8288ff949304083a6493bf80258f4c59c900618d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D1400F4100C8E4CB54CC8EC8288FF949304083A6493BF80258F4C59C900618D"
Last-Modified: Thu, 01 Dec 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2877
Expires: Sat, 03 Dec 2022 23:17:11 GMT
Date: Sat, 03 Dec 2022 22:29:14 GMT
Connection: keep-alive
ad.lkqd.net/cookie-sync/usync.html
151.139.128.10200 OK 1.9 kB URL HTTP/2 ad.lkqd.net/cookie-sync/usync.html
IP 151.139.128.10:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4478)
Hash 41b852ed55af42897839dd36a74c8836
ab34ebee16e719e22645fb8560fd66adf90f9dff
eb7f7a625357319b2e1a3f3099e9630dada48ec5c079e5d698699ebe15c8002f
GET /cookie-sync/usync.html HTTP/1.1
Host: ad.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:14 GMT
content-encoding: gzip
content-length: 1882
content-type: text/html
last-modified: Fri, 18 Feb 2022 17:38:44 GMT
accept-ranges: bytes
etag: "952dcfd8e3703b5a7e78418d51009535"
cache-control: public, max-age=1209600
x-hw: 1670106554.cds260.sk1.hn,1670106554.cds003.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2
ads.stickyadstv.com/auto-user-sync
95.101.10.58200 OK 43 B URL HTTP/1.1 ads.stickyadstv.com/auto-user-sync
IP 95.101.10.58:0
ASN #20940 Akamai International B.V.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /auto-user-sync HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/gif
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
x-sticky-vk: 1670106554374002-353
Expires: Sat, 03 Dec 2022 22:29:14 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 03 Dec 2022 22:29:14 GMT
Content-Length: 43
Connection: keep-alive
Set-Cookie: UID=9b5befcffc88d6ea8487fa421a13eb5; Domain=ads.stickyadstv.com; Expires=Mon, 02-Jan-2023 22:29:14 GMT; Path=/
id5-sync.com/i/12/9.gif?gdpr=true&gdpr_consent=
162.19.138.119200 43 B URL HTTP/1.1 id5-sync.com/i/12/9.gif?gdpr=true&gdpr_consent=
IP 162.19.138.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /i/12/9.gif?gdpr=true&gdpr_consent= HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
p3p: CP="CAO PSA OUR"
set-cookie: cf=; Max-Age=300; Expires=Sat, 03-Dec-2022 22:34:14 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
cip=; Max-Age=300; Expires=Sat, 03-Dec-2022 22:34:14 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
cnac=; Max-Age=300; Expires=Sat, 03-Dec-2022 22:34:14 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
car=; Max-Age=300; Expires=Sat, 03-Dec-2022 22:34:14 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
gdpr=; Max-Age=300; Expires=Sat, 03-Dec-2022 22:34:14 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
callback=; Max-Age=300; Expires=Sat, 03-Dec-2022 22:34:14 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
content-type: image/gif;charset=UTF-8
transfer-encoding: chunked
date: Sat, 03 Dec 2022 22:29:13 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
r3.o.lencr.org/
23.36.76.249200 OK 503 B IP 23.36.76.249:0
ASN #20940 Akamai International B.V.
Hash 86e4637bd43b1b001fa6f7ef0f0fcd87
144b0a5252807129c41586ecc8d76db73e989a88
d8a051cd2e086c71637a02f93e6dd864d8e337d5b0caa47b3467b3ef4f0e9288
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D8A051CD2E086C71637A02F93E6DD864D8E337D5B0CAA47B3467B3EF4F0E9288"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5822
Expires: Sun, 04 Dec 2022 00:06:16 GMT
Date: Sat, 03 Dec 2022 22:29:14 GMT
Connection: keep-alive
audit-tcfv2.cmp.quantcast.com/?log=%7B%22accountId%22%3A%226Fv0cGNfc_bw8%22%2C%22domain%22%3A%22m.imagenesderopaparaperros.com%22%2C%22publisher%22%3A%22themoneytizer.com%22%2C%22cmpId%22%3A10%2C%22cmpVersion%22%3A%222.42%22%2C%22displayType%22%3A%22tcfui%3Amandatory%22%2C%22configurationHashCode%22%3A%22zqyqLXlGhIEyBziKWX6tNg%22%2C%22clientTimestamp%22%3A1670106552081%2C%22operationType%22%3A%22init%22%2C%22sessionId%22%3A%22GDPR-lfatbmm62ogo3yclgn4t%22%7D
35.156.66.115200 OK 2 B URL HTTP/2 audit-tcfv2.cmp.quantcast.com/?log=%7B%22accountId%22%3A%226Fv0cGNfc_bw8%22%2C%22domain%22%3A%22m.imagenesderopaparaperros.com%22%2C%22publisher%22%3A%22themoneytizer.com%22%2C%22cmpId%22%3A10%2C%22cmpVersion%22%3A%222.42%22%2C%22displayType%22%3A%22tcfui%3Amandatory%22%2C%22configurationHashCode%22%3A%22zqyqLXlGhIEyBziKWX6tNg%22%2C%22clientTimestamp%22%3A1670106552081%2C%22operationType%22%3A%22init%22%2C%22sessionId%22%3A%22GDPR-lfatbmm62ogo3yclgn4t%22%7D
IP 35.156.66.115:0
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /?log=%7B%22accountId%22%3A%226Fv0cGNfc_bw8%22%2C%22domain%22%3A%22m.imagenesderopaparaperros.com%22%2C%22publisher%22%3A%22themoneytizer.com%22%2C%22cmpId%22%3A10%2C%22cmpVersion%22%3A%222.42%22%2C%22displayType%22%3A%22tcfui%3Amandatory%22%2C%22configurationHashCode%22%3A%22zqyqLXlGhIEyBziKWX6tNg%22%2C%22clientTimestamp%22%3A1670106552081%2C%22operationType%22%3A%22init%22%2C%22sessionId%22%3A%22GDPR-lfatbmm62ogo3yclgn4t%22%7D HTTP/1.1
Host: audit-tcfv2.cmp.quantcast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:14 GMT
content-type: text/plain; charset=utf-8
content-length: 2
access-control-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.249200 OK 503 B IP 23.36.76.249:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12058
Expires: Sun, 04 Dec 2022 01:50:12 GMT
Date: Sat, 03 Dec 2022 22:29:14 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.249200 OK 503 B IP 23.36.76.249:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12058
Expires: Sun, 04 Dec 2022 01:50:12 GMT
Date: Sat, 03 Dec 2022 22:29:14 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png
34.120.237.76200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 14dcca2a9c4792d835ee709bcd947402
1d702df3a64258628f4124eafd580695f2d350af
da01dcd8fef7c50bdb6f7a8a6a4955694092f479df3dba72f7fa69d7280d07b2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16143
x-amzn-requestid: dc86fad4-4e53-42c9-9b0a-5e4d2cfcd087
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdGyLGqmoAMFnaA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638851a7-0ea324b31e8c6578098b8ab9;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:03 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KHd4ajJWl-8TDH5HGbkuJXI4NL6I83IwSUBKzfq85cxpyRH_LGl6OA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 07:43:43 GMT
age: 53131
etag: "1d702df3a64258628f4124eafd580695f2d350af"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.249200 OK 503 B IP 23.36.76.249:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12058
Expires: Sun, 04 Dec 2022 01:50:12 GMT
Date: Sat, 03 Dec 2022 22:29:14 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F19c9bb39-be15-49f9-aad9-2cc511601111.jpeg
34.120.237.76200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F19c9bb39-be15-49f9-aad9-2cc511601111.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a6e7b32ac999cf3c899a234c621fa91a
fc5d4f3163ebb9faf85968cbb1d194e8e68418be
f12db3aed126006fee00649aba0b3eaae900de200b85b9523866a90b5494f18e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F19c9bb39-be15-49f9-aad9-2cc511601111.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8989
x-amzn-requestid: abce0b01-f70c-42ad-b242-5a24735fe4c2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cltl4Gk2oAMFSWQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc2f2-1cccffff5199dffe70264a95;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:43:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PFl7VUrzRkMFNnTiIw_cbGCyrEFn43eUSlZfT0nUhUmjjyXT7JfjMA==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:50:01 GMT
age: 2353
etag: "fc5d4f3163ebb9faf85968cbb1d194e8e68418be"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61cc2744-b517-4404-bfa2-25fadadfa3f3.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61cc2744-b517-4404-bfa2-25fadadfa3f3.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2636f91bb8fa4d9bb7bef114c248a9ae
8637105f41058bc0d2b259d462b560881928adb6
3d93fd8fcf1af31d00ccbd453142dbea5f2b91d7f58373095943ed40a31ed1f7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61cc2744-b517-4404-bfa2-25fadadfa3f3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10431
x-amzn-requestid: f79ab5e7-8c1b-4827-a531-aaa19c1d80aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsCGEwxIAMF34g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc073-6358d2950955884c470c0a89;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:35 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PQ7xh995cd1UVi3z42EVZGjQjHLLvtAP5BBC-xLEEGr4mEiXS6fC-w==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:47:06 GMT
age: 2528
etag: "8637105f41058bc0d2b259d462b560881928adb6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg
34.120.237.76200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c01fe1cccdb3b672bbade6d98217ffe9
a9a529dc9894827f6243a1bf57f81caa4fe88fc2
c43da6212c79a08e22e78e04e99e8f5422e64b4b0a87f30b7907f1b4bc675c71
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4666
x-amzn-requestid: 850d341f-5ccb-453c-8adf-a8194f8fbdad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clr_-GiboAMFwww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc066-766293f2526e637235067aca;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: z5uqgjB-Bsl0U55a8aFi37cpJ65Vnbjm6bJ2GnMpaO7RXsMZsOCbPQ==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:44:01 GMT
age: 2713
etag: "a9a529dc9894827f6243a1bf57f81caa4fe88fc2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
v.lkqd.net/ad?pid=430&sid=1135195&formats=true&output=vastvpaid&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=47673723&m=
69.20.43.192200 OK 150 B URL HTTP/1.1 v.lkqd.net/ad?pid=430&sid=1135195&formats=true&output=vastvpaid&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=47673723&m=
IP 69.20.43.192:0
File type ASCII text, with no line terminators
Hash f2200dfc5e8b75dea19cc2ff13526ce8
5235427034ffed5be887acecc26f62210be11554
e459e49bb953fa15bac6d8bcf457713e3f78a5154c0e1f213be85e378af41b38
GET /ad?pid=430&sid=1135195&formats=true&output=vastvpaid&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=47673723&m= HTTP/1.1
Host: v.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 03 Dec 2022 22:29:14 GMT
Content-Type: application/xml; charset=UTF-8
Content-Length: 150
Connection: keep-alive
Content-Encoding: gzip
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Cache-Control: max-age=0, no-cache, no-store
Access-Control-Allow-Credentials: true
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5b41d2b-ab64-4a18-814e-d348d7921eca.png
34.120.237.76200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5b41d2b-ab64-4a18-814e-d348d7921eca.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6b0065d160e7dbd17cf58f2c837b45a7
0ebefb37db37dcbf1ad421ab0cac2cccdcd83a2f
833c0a39ed1d9dcfa4a22f201d06d085e5131121810e98d5e79dd6f84e8fe436
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5b41d2b-ab64-4a18-814e-d348d7921eca.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4782
x-amzn-requestid: 98b5d5ca-7590-4756-9b92-3fb327ecc97b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsANG8koAMF_Qw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc067-546b61a82a8b952f664346b9;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ncXSPf1et6vSgEBmWwY_PperGXmgJGEx0hlLr0lhN6XHi0RLRr6WCA==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:47:05 GMT
age: 2529
etag: "0ebefb37db37dcbf1ad421ab0cac2cccdcd83a2f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32949ec5-eb15-4096-b713-fd83ae7aa650.jpeg
34.120.237.76200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32949ec5-eb15-4096-b713-fd83ae7aa650.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b7717ff9fcf6cf3268d10312dc3fdaaf
c4f05fdb231c7870b2a918198fa0809d8e8f9c89
bf3b6304a45f172653f45e1e8b4afa7da90096ca36c82b981ca6ec01ccf122a8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32949ec5-eb15-4096-b713-fd83ae7aa650.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8286
x-amzn-requestid: 6880d30e-3624-402e-819d-610e35ae27d8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsAAG1HIAMF6Vw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc066-43f8e7d312f96110713a7092;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XcnZ2pTQoGkuHEPsazEI09yhI6WWbmZD6g7QYW7rDf5HsegvjdgkXg==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:44:00 GMT
age: 2714
etag: "c4f05fdb231c7870b2a918198fa0809d8e8f9c89"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=vastvpaid&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=85260314&m=
69.20.43.192200 OK 1.4 kB URL HTTP/1.1 v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=vastvpaid&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=85260314&m=
IP 69.20.43.192:0
File type ASCII text, with very long lines (1825), with no line terminators
Hash 03352e835541d8b547acfe5b0da22fcb
20d2315d1869f6760a97e9be0afd793f564a029f
1fe1a8d2370242fffec07e49e8bb4e4436e0ba5893c4ad0233d800035e31b3a1
GET /ad?pid=430&sid=1135194&formats=true&output=vastvpaid&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=85260314&m= HTTP/1.1
Host: v.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 03 Dec 2022 22:29:14 GMT
Content-Type: application/xml; charset=UTF-8
Content-Length: 1368
Connection: keep-alive
Content-Encoding: gzip
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Cache-Control: max-age=0, no-cache, no-store
Access-Control-Allow-Credentials: true
adsco.re/p
162.252.214.5200 OK 173 B IP 162.252.214.5:0
File type ASCII text, with no line terminators
Hash 51912c3f2f4ee0c0a11809610e6e2495
94ac40cf17f5a4e289ee5a3c666424d5925ceb4f
7427aaf4036af5e00998497f2a5e9a9de4735953a6f73ceba63380e6e9e5d45d
POST /p HTTP/1.1
Host: adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Length: 1936
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:14 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
AS-P-1: OK lon123
AS-P-2: OK
AS-P-3: OK
Access-Control-Max-Age: 2592000
Cache-Control: no-transform
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 46cd5375ee0c8139bb95d2ad2ac35599
18f88494db04e95149b3546c57e04eedcd74961d
3d275903a4a9b59bdd0a2b2e809db271ae2e028f42d480dd184187d02f024683
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4712
Cache-Control: max-age=122190
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:29:14 GMT
Etag: "638af5a0-1d7"
Expires: Mon, 05 Dec 2022 08:25:44 GMT
Last-Modified: Sat, 03 Dec 2022 07:07:12 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
6qbdk15xtgai.n4.adsco.re/
38.132.109.186200 OK 0 B URL HTTP/1.1 6qbdk15xtgai.n4.adsco.re/
IP 38.132.109.186:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: 6qbdk15xtgai.n4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:14 GMT
Content-Type: text/html
Content-Length: 0
Last-Modified: Mon, 30 Jul 2018 15:32:42 GMT
Connection: close
ETag: "5b5f2f9a-0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Accept-Ranges: bytes
ad.turn.com/r/cs?pid=65
46.228.164.11302 Found 0 B IP 46.228.164.11:0
ASN #56396 Amobee EMEA Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /r/cs?pid=65 HTTP/1.1
Host: ad.turn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="/w3c/p3p.xml", CP="NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV"
cache-control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
pragma: no-cache
set-cookie: uid=7101255921207131041; Domain=.turn.com; Expires=Thu, 01-Jun-2023 22:29:14 GMT; Path=/; Secure; SameSite=None
location: https://cs.lkqd.net/cs?partnerId=94&partnerUserId=7101255921207131041
content-length: 0
date: Sat, 03 Dec 2022 22:29:14 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.249200 OK 503 B IP 23.36.76.249:0
ASN #20940 Akamai International B.V.
Hash a8e5a955a5a57cacc3bc8dc58098feab
c43ea1e5bd7be18976cd8cf9f51cd28ea04dbc4f
8d63288b45b0f7ec611ade13588957a444bb615cf2cd7485a3af365faf8cb640
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8D63288B45B0F7EC611ADE13588957A444BB615CF2CD7485A3AF365FAF8CB640"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2373
Expires: Sat, 03 Dec 2022 23:08:47 GMT
Date: Sat, 03 Dec 2022 22:29:14 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 40646b0bc3fba9dca23ec6189cdbe7c5
6499d1da8fab5fce9888ecd4cd73f784767dfc75
a7ddf50eb1b94e36a448505a5e8318be07960245db5f8cf73a1f7e85c8baaadf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3373
Cache-Control: max-age=86293
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:29:14 GMT
Etag: "638a6ea2-1d7"
Expires: Sun, 04 Dec 2022 22:27:27 GMT
Last-Modified: Fri, 02 Dec 2022 21:31:14 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 40646b0bc3fba9dca23ec6189cdbe7c5
6499d1da8fab5fce9888ecd4cd73f784767dfc75
a7ddf50eb1b94e36a448505a5e8318be07960245db5f8cf73a1f7e85c8baaadf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3373
Cache-Control: max-age=86293
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:29:14 GMT
Etag: "638a6ea2-1d7"
Expires: Sun, 04 Dec 2022 22:27:27 GMT
Last-Modified: Fri, 02 Dec 2022 21:31:14 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
c.adsco.re/
104.17.166.186200 OK 28 kB IP 104.17.166.186:0
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (689)
Hash fdd18d43b49ae004006e107dfa642fd8
8291ab95e255aab7e464066ae75bfc6df9f15ac1
ee5b2b0911e840fc06c58fd0cf60b1adef7bb0d1a091874eaf6ef5d84c761afa
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:13 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Tue, 03 Jan 2023 22:29:13 GMT
etag: W/"n/ARilLrRVDeZNVpaPOsXg=="
cf-cache-status: HIT
age: 1231803
vary: Accept-Encoding
server: cloudflare
cf-ray: 773fbd698c260b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
csync.loopme.me/?redirect=https%3A%2F%2Fcs.lkqd.net%2Fcs%3FpartnerId%3D54%26partnerUserId%3D%7Bdevice_id%7D
35.214.223.115307 Temporary Redirect 0 B URL HTTP/2 csync.loopme.me/?redirect=https%3A%2F%2Fcs.lkqd.net%2Fcs%3FpartnerId%3D54%26partnerUserId%3D%7Bdevice_id%7D
IP 35.214.223.115:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?redirect=https%3A%2F%2Fcs.lkqd.net%2Fcs%3FpartnerId%3D54%26partnerUserId%3D%7Bdevice_id%7D HTTP/1.1
Host: csync.loopme.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
set-cookie: viewer_token=7f99d736-134d-4196-a893-17c9cbd30559; path=/; domain=csync.loopme.me; secure; HttpOnly; Expires=Fri, 03-Mar-2023 22:29:14 GMT; SameSite=None
location: https://cs.lkqd.net/cs?partnerId=54&partnerUserId=7f99d736-134d-4196-a893-17c9cbd30559
content-length: 0
date: Sat, 03 Dec 2022 22:29:14 GMT
server: _
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
143.204.42.165200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.165:0
Hash 0b9bc629551f3bf4bea219d73c777232
3551ab653881f5992eb39e7d507b18a62044d7f5
905116fd88ff99648d8de3b7cbbf8623bc6740ef11bff962d5dd6f8f0c2df979
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=108069
Date: Sat, 03 Dec 2022 22:29:14 GMT
Etag: "638accb5-1d7"
Expires: Mon, 05 Dec 2022 04:30:23 GMT
Last-Modified: Sat, 03 Dec 2022 04:12:37 GMT
Server: ECS (nyb/1D35)
X-Cache: Miss from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 9yQPMywGeSi4aQjYNMovqd7GxB8wAjFMKtIJsHEzvfx93bINrGmwSA==
Age: 1066
ocsp.digicert.com/
93.184.220.29200 OK 313 B IP 93.184.220.29:0
Hash c89059387888a3bf5e93f770c3148572
2f670b0651e63958c6952340bb3b519265b165f3
a246e2e71e92637f04309654e6e7beaaa59b65ae088150b23f0cf413e1017696
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 826
Cache-Control: max-age=151756
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:29:14 GMT
Etag: "638b784c-139"
Expires: Mon, 05 Dec 2022 16:38:30 GMT
Last-Modified: Sat, 03 Dec 2022 16:24:44 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 313
r3.o.lencr.org/
23.36.76.249200 OK 503 B IP 23.36.76.249:0
ASN #20940 Akamai International B.V.
Hash d2ac700f4345b8a632a29fa9fd8dceee
4a5924b0a38471ee69b22e6f801641d56062311b
ca893ca35eb16dceef8e0754927fb6579daa6b41d30ddf264b8b80b81832f9fe
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CA893CA35EB16DCEEF8E0754927FB6579DAA6B41D30DDF264B8B80B81832F9FE"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19641
Expires: Sun, 04 Dec 2022 03:56:35 GMT
Date: Sat, 03 Dec 2022 22:29:14 GMT
Connection: keep-alive
cs.lkqd.net/cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if
146.20.128.136200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if
IP 146.20.128.136:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:14 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
csm.fr.eu.criteo.net/iev?entry=c~Idfs.Rtus.147.Events.StartInit~1&entry=c~Idfs.Rtus.147.Events.SyncframeDropped~1
178.250.0.162200 OK 43 B URL HTTP/2 csm.fr.eu.criteo.net/iev?entry=c~Idfs.Rtus.147.Events.StartInit~1&entry=c~Idfs.Rtus.147.Events.SyncframeDropped~1
IP 178.250.0.162:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /iev?entry=c~Idfs.Rtus.147.Events.StartInit~1&entry=c~Idfs.Rtus.147.Events.SyncframeDropped~1 HTTP/1.1
Host: csm.fr.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:14 GMT
pragma: no-cache
server: Finatra
expires: 0
content-type: image/gif
cache-control: no-cache, no-store, must-revalidate
content-length: 43
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
cs.lkqd.net/cs?partnerId=103&redirect=https%3A%2F%2Fevent.clientgear.com%2Fcookie%2Flkqd%3Fpartner%3Dlkqd%26cookieid%3D%24%24rawlkqduserid%24%24&r=if
146.20.128.136200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=103&redirect=https%3A%2F%2Fevent.clientgear.com%2Fcookie%2Flkqd%3Fpartner%3Dlkqd%26cookieid%3D%24%24rawlkqduserid%24%24&r=if
IP 146.20.128.136:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=103&redirect=https%3A%2F%2Fevent.clientgear.com%2Fcookie%2Flkqd%3Fpartner%3Dlkqd%26cookieid%3D%24%24rawlkqduserid%24%24&r=if HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:14 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.249200 OK 503 B IP 23.36.76.249:0
ASN #20940 Akamai International B.V.
Hash 9abc24f39564dc848d6bcdefbcdafc7b
b8c7e8e03ebea34dc55cb1edc5821875ef3b8ced
746046171e16c754f1385bee917d0d771988a6cc69bfef15b30af8d773cad83f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "746046171E16C754F1385BEE917D0D771988A6CC69BFEF15B30AF8D773CAD83F"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3598
Expires: Sat, 03 Dec 2022 23:29:12 GMT
Date: Sat, 03 Dec 2022 22:29:14 GMT
Connection: keep-alive
handbagcordial.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSQYgcRRutzp%2F8iJ4UURSUIQRRcGe7e6Znpg0SjUkkGpOQRHK1uqp6t9zqrqaqe3p2TouBEPAy3jz2vNlkURcxIB5Eicx6kUEhoyCLZMFjTooLOcvMDix%2B0P19Ve8d3ntf3RwWe8RFQXcvv6f7Uim6HNTd2svXZcp1aWsXr9U8t%2B6erF2Xaat5stab%2FUz3Nc8N6u4rtbcFW9PLvuu5rud6tXPSiFj3lucoZLYdevXQrTf9uhc00TP%2FPdvCgaUOeHePPAXJp8dWf7oLycZIk6%2FOCLuW6%2BzVs0mhaK4Nunzr%2FXQt1WWK5HCMjYM43Vqwoe2UkE%2BPQKdbCwfQ3c2ZA0RySpzfPUTp1kImou7tA6WRgkgR8SdQdscQagxJx2D6BiS%2FTwDGcfES0uTORW1Kun6A0hk6JUcf7UOWU3L0wdNIky9PK9mrXdWqyKVOLXpxBdkbQ66MkRU7yPsOZLkDln8EyX8hy48uIE02L1mlIfnuCd7gQbvVYkteu02Xmg2vvdQJg8ZS7HcY46FoBS1%2FHpGUY8h4DCUGoNZBMfukgyJ2UGQOEr5bo0EYu247juJGo9NkjDUajAWdFg94o9mJXRRs5mGAPBuAqQGY2UBmNrAmBzDFD7CrFSx3YHOCLq9QCoLSEpSUoJQEZU5QdqvbXFnfVne4skXkLbq%2F6I1qpPOVIb2t8xWRkmG2R56cB%2Ffwna%2BxJnZrLG75noj8JqVB1KSe3%2BmEzY4XtsKO13ajDqysIO2Ruc3%2BbIvP%2FINMTgn5awMR3YFVO2DyOGjxAmg5avsu6Oqo2XHRT7f7yq5qk4t6KnJwXSHLjyFfd4Zqjzw31xH%2BZiDY5I3jr%2B9%2Fc3Y4ATMVMlPhQ%2FkjwYq6NbqiS7J5RZeW3L2U5TKRfTpb7tWc5uLo5%2B%2BK9VIbfv6MHXz2JpsBs3H7mrD5BZpyma5Y8sVpybkw57Rhgnx%2F3l4X0eXCrp4uTFpkFy6%2Fde58khlhrdTpGFTe%2F%2BAemJySx5Ob82f74h83Ic0YpqiQFBOyKEi9A5ZtwGaTU3%2F%2B%2F8SD5ecrWE1g1CEnyhyURTUyfnR4qeSU%2BPvPQonJqe%2B2H%2FNeergOGlWw4jCGSEzu%2FX3AH9pbWDEOaH4DaVKhayp0VQWqBrDF%2F0Z5Zianfm3MC5FyRpEyzmakjPrkIF4rd2siiN1YuL6I4jCK29TlYdwMIxp6oh0F1ENup%2Bzjn7%2F9FwAA%2F%2F8BAAD%2F%2F5HxbIaSBAAA
192.243.61.227200 OK 7 B URL HTTP/1.1 handbagcordial.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSQYgcRRutzp%2F8iJ4UURSUIQRRcGe7e6Znpg0SjUkkGpOQRHK1uqp6t9zqrqaqe3p2TouBEPAy3jz2vNlkURcxIB5Eicx6kUEhoyCLZMFjTooLOcvMDix%2B0P19Ve8d3ntf3RwWe8RFQXcvv6f7Uim6HNTd2svXZcp1aWsXr9U8t%2B6erF2Xaat5stab%2FUz3Nc8N6u4rtbcFW9PLvuu5rud6tXPSiFj3lucoZLYdevXQrTf9uhc00TP%2FPdvCgaUOeHePPAXJp8dWf7oLycZIk6%2FOCLuW6%2BzVs0mhaK4Nunzr%2FXQt1WWK5HCMjYM43Vqwoe2UkE%2BPQKdbCwfQ3c2ZA0RySpzfPUTp1kImou7tA6WRgkgR8SdQdscQagxJx2D6BiS%2FTwDGcfES0uTORW1Kun6A0hk6JUcf7UOWU3L0wdNIky9PK9mrXdWqyKVOLXpxBdkbQ66MkRU7yPsOZLkDln8EyX8hy48uIE02L1mlIfnuCd7gQbvVYkteu02Xmg2vvdQJg8ZS7HcY46FoBS1%2FHpGUY8h4DCUGoNZBMfukgyJ2UGQOEr5bo0EYu247juJGo9NkjDUajAWdFg94o9mJXRRs5mGAPBuAqQGY2UBmNrAmBzDFD7CrFSx3YHOCLq9QCoLSEpSUoJQEZU5QdqvbXFnfVne4skXkLbq%2F6I1qpPOVIb2t8xWRkmG2R56cB%2Ffwna%2BxJnZrLG75noj8JqVB1KSe3%2BmEzY4XtsKO13ajDqysIO2Ruc3%2BbIvP%2FINMTgn5awMR3YFVO2DyOGjxAmg5avsu6Oqo2XHRT7f7yq5qk4t6KnJwXSHLjyFfd4Zqjzw31xH%2BZiDY5I3jr%2B9%2Fc3Y4ATMVMlPhQ%2FkjwYq6NbqiS7J5RZeW3L2U5TKRfTpb7tWc5uLo5%2B%2BK9VIbfv6MHXz2JpsBs3H7mrD5BZpyma5Y8sVpybkw57Rhgnx%2F3l4X0eXCrp4uTFpkFy6%2Fde58khlhrdTpGFTe%2F%2BAemJySx5Ob82f74h83Ic0YpqiQFBOyKEi9A5ZtwGaTU3%2F%2B%2F8SD5ecrWE1g1CEnyhyURTUyfnR4qeSU%2BPvPQonJqe%2B2H%2FNeergOGlWw4jCGSEzu%2FX3AH9pbWDEOaH4DaVKhayp0VQWqBrDF%2F0Z5Zianfm3MC5FyRpEyzmakjPrkIF4rd2siiN1YuL6I4jCK29TlYdwMIxp6oh0F1ENup%2Bzjn7%2F9FwAA%2F%2F8BAAD%2F%2F5HxbIaSBAAA
IP 192.243.61.227:0
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSQYgcRRutzp%2F8iJ4UURSUIQRRcGe7e6Znpg0SjUkkGpOQRHK1uqp6t9zqrqaqe3p2TouBEPAy3jz2vNlkURcxIB5Eicx6kUEhoyCLZMFjTooLOcvMDix%2B0P19Ve8d3ntf3RwWe8RFQXcvv6f7Uim6HNTd2svXZcp1aWsXr9U8t%2B6erF2Xaat5stab%2FUz3Nc8N6u4rtbcFW9PLvuu5rud6tXPSiFj3lucoZLYdevXQrTf9uhc00TP%2FPdvCgaUOeHePPAXJp8dWf7oLycZIk6%2FOCLuW6%2BzVs0mhaK4Nunzr%2FXQt1WWK5HCMjYM43Vqwoe2UkE%2BPQKdbCwfQ3c2ZA0RySpzfPUTp1kImou7tA6WRgkgR8SdQdscQagxJx2D6BiS%2FTwDGcfES0uTORW1Kun6A0hk6JUcf7UOWU3L0wdNIky9PK9mrXdWqyKVOLXpxBdkbQ66MkRU7yPsOZLkDln8EyX8hy48uIE02L1mlIfnuCd7gQbvVYkteu02Xmg2vvdQJg8ZS7HcY46FoBS1%2FHpGUY8h4DCUGoNZBMfukgyJ2UGQOEr5bo0EYu247juJGo9NkjDUajAWdFg94o9mJXRRs5mGAPBuAqQGY2UBmNrAmBzDFD7CrFSx3YHOCLq9QCoLSEpSUoJQEZU5QdqvbXFnfVne4skXkLbq%2F6I1qpPOVIb2t8xWRkmG2R56cB%2Ffwna%2BxJnZrLG75noj8JqVB1KSe3%2BmEzY4XtsKO13ajDqysIO2Ruc3%2BbIvP%2FINMTgn5awMR3YFVO2DyOGjxAmg5avsu6Oqo2XHRT7f7yq5qk4t6KnJwXSHLjyFfd4Zqjzw31xH%2BZiDY5I3jr%2B9%2Fc3Y4ATMVMlPhQ%2FkjwYq6NbqiS7J5RZeW3L2U5TKRfTpb7tWc5uLo5%2B%2BK9VIbfv6MHXz2JpsBs3H7mrD5BZpyma5Y8sVpybkw57Rhgnx%2F3l4X0eXCrp4uTFpkFy6%2Fde58khlhrdTpGFTe%2F%2BAemJySx5Ob82f74h83Ic0YpqiQFBOyKEi9A5ZtwGaTU3%2F%2B%2F8SD5ecrWE1g1CEnyhyURTUyfnR4qeSU%2BPvPQonJqe%2B2H%2FNeergOGlWw4jCGSEzu%2FX3AH9pbWDEOaH4DaVKhayp0VQWqBrDF%2F0Z5Zianfm3MC5FyRpEyzmakjPrkIF4rd2siiN1YuL6I4jCK29TlYdwMIxp6oh0F1ENup%2Bzjn7%2F9FwAA%2F%2F8BAAD%2F%2F5HxbIaSBAAA HTTP/1.1
Host: handbagcordial.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Cookie: u_pl=15289012; uid_id2=d3d5766c-177a-4317-8953-f28ccd9e6562:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; sleccf621eb24aa5b4a128894819698170b8=[3789938]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sat, 03 Dec 2022 22:29:14 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f3147176cc40c9dbfc117f1e2c7c6747
Strict-Transport-Security: max-age=0; includeSubdomains
ad.lkqd.net/vpaid/vpaid.js?fusion=1.0
151.139.128.10200 OK 62 kB URL HTTP/2 ad.lkqd.net/vpaid/vpaid.js?fusion=1.0
IP 151.139.128.10:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 2a0adab82b941577dbd1041f8448fd08
bf2cf01d95e02fb5ec9075835cbee4e3e35a0246
757ad1d5b7a305d8eaa810c6585b5b7431b212af4ff8fdef9fbd40a8254666a6
GET /vpaid/vpaid.js?fusion=1.0 HTTP/1.1
Host: ad.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:14 GMT
content-encoding: gzip
content-length: 62021
content-type: application/javascript
last-modified: Thu, 13 Oct 2022 21:01:07 GMT
accept-ranges: bytes
etag: "88ca76abee51b1544e17b021f04aaaed"
cache-control: public, max-age=1209600
x-hw: 1670106554.cds260.sk1.hn,1670106554.cds254.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2
sync.srv.stackadapt.com/sync?nid=161
35.174.181.179302 Found 104 B URL HTTP/1.1 sync.srv.stackadapt.com/sync?nid=161
IP 35.174.181.179:0
File type HTML document, ASCII text
Hash 34a27d7dbf1de8d3947c9153ff60069a
d45255c56f6af2a46d53116e840c9e14f5060406
87c3ebf2c7f6126bece7a49cb132fe003399162b26693c8ad3560ea38b6898e7
GET /sync?nid=161 HTTP/1.1
Host: sync.srv.stackadapt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Date: Sat, 03 Dec 2022 22:29:14 GMT
Location: https://cs.lkqd.net/cs?partnerId=93&partnerUserId=pWr5vKSOQDh-N_1nx5gtcltaKpo
Set-Cookie: sa-user-id=s%3A0-a56af9bc-a48e-4038-7e37-fd67c7982d72.MIUp9SgQeD386Q5IrsaS79DpfpgKtKummuMrEssZnDI; Max-Age=31536000; Secure; SameSite=None
sa-user-id-v2=s%3ApWr5vKSOQDh-N_1nx5gtcltaKpo.glcAeGe%2FDZiMFZ2z20njl4DPyWc31Py9iEBQX2UnFyA; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None
Content-Length: 104
Connection: keep-alive
cs.lkqd.net/cs?partnerId=54&partnerUserId=7f99d736-134d-4196-a893-17c9cbd30559
146.20.128.136200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=54&partnerUserId=7f99d736-134d-4196-a893-17c9cbd30559
IP 146.20.128.136:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=54&partnerUserId=7f99d736-134d-4196-a893-17c9cbd30559 HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad.lkqd.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:14 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
cs.lkqd.net/cs?partnerId=94&partnerUserId=7101255921207131041
146.20.128.136200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=94&partnerUserId=7101255921207131041
IP 146.20.128.136:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=94&partnerUserId=7101255921207131041 HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad.lkqd.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:15 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn4ads.com/VY.htm?_=BAYAY4vNugFji826gAGBAsAAIDVK7K8SN9_sZvMglDzo3ucf3iibQs5AJW2ehC2kC--hwQBHMEUCIA6w1d10qMDNlXCZrdvR8kKjbtMx4kpeGt1Ub2nzd_YkAiEA_n0Q6ZuxbYBDuFWlbPiIuZxD3Os2aqfCloX74JKUB4s&v=4&RsxTUcye=4293767&minBid=&TZPSLlQa=0,0&YBTFmNeU=&WySdJeCN=&s=1280,1024,1,1280,1024,0
216.59.63.128200 OK 44 B URL HTTP/1.1 cdn4ads.com/VY.htm?_=BAYAY4vNugFji826gAGBAsAAIDVK7K8SN9_sZvMglDzo3ucf3iibQs5AJW2ehC2kC--hwQBHMEUCIA6w1d10qMDNlXCZrdvR8kKjbtMx4kpeGt1Ub2nzd_YkAiEA_n0Q6ZuxbYBDuFWlbPiIuZxD3Os2aqfCloX74JKUB4s&v=4&RsxTUcye=4293767&minBid=&TZPSLlQa=0,0&YBTFmNeU=&WySdJeCN=&s=1280,1024,1,1280,1024,0
IP 216.59.63.128:0
File type ASCII text, with no line terminators
Hash d5f0a25e4d3522d56d48ce7bc3e518fb
86794caff58f7fee6e684c2ba7195f970a8d6f4c
9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5
GET /VY.htm?_=BAYAY4vNugFji826gAGBAsAAIDVK7K8SN9_sZvMglDzo3ucf3iibQs5AJW2ehC2kC--hwQBHMEUCIA6w1d10qMDNlXCZrdvR8kKjbtMx4kpeGt1Ub2nzd_YkAiEA_n0Q6ZuxbYBDuFWlbPiIuZxD3Os2aqfCloX74JKUB4s&v=4&RsxTUcye=4293767&minBid=&TZPSLlQa=0,0&YBTFmNeU=&WySdJeCN=&s=1280,1024,1,1280,1024,0 HTTP/1.1
Host: cdn4ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
access-control-allow-origin: *
asf: 9
popads-ec: ASB
content-type: text/javascript;charset=UTF-8
content-length: 44
date: Sat, 03 Dec 2022 22:29:15 GMT
e1.o.lencr.org/
23.36.76.249200 OK 345 B IP 23.36.76.249:0
ASN #20940 Akamai International B.V.
Hash 7007a042a79310c8938c279ae7eec8e5
8b72d7da27205ce31ff5497ba5428808a498dd7e
8188a5b1208fea4f2bdb97e404aefeb04a89ad62bc16ba2512e3a660b68b67af
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "8188A5B1208FEA4F2BDB97E404AEFEB04A89AD62BC16BA2512E3A660B68B67AF"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10703
Expires: Sun, 04 Dec 2022 01:27:38 GMT
Date: Sat, 03 Dec 2022 22:29:15 GMT
Connection: keep-alive
e1.o.lencr.org/
23.36.76.249200 OK 345 B IP 23.36.76.249:0
ASN #20940 Akamai International B.V.
Hash 7007a042a79310c8938c279ae7eec8e5
8b72d7da27205ce31ff5497ba5428808a498dd7e
8188a5b1208fea4f2bdb97e404aefeb04a89ad62bc16ba2512e3a660b68b67af
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "8188A5B1208FEA4F2BDB97E404AEFEB04A89AD62BC16BA2512E3A660B68B67AF"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10703
Expires: Sun, 04 Dec 2022 01:27:38 GMT
Date: Sat, 03 Dec 2022 22:29:15 GMT
Connection: keep-alive
t.lkqd.net/t
146.20.132.81200 OK 0 B IP 146.20.132.81:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://m.imagenesderopaparaperros.com/
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:15 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: http://m.imagenesderopaparaperros.com
access-control-max-age: 300
cache-control: max-age=300
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
X-Firefox-Spdy: h2
t.lkqd.net/t
146.20.132.81200 OK 0 B IP 146.20.132.81:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://m.imagenesderopaparaperros.com/
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:15 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: http://m.imagenesderopaparaperros.com
access-control-max-age: 300
cache-control: max-age=300
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
X-Firefox-Spdy: h2
cs.lkqd.net/cs?partnerId=93&partnerUserId=pWr5vKSOQDh-N_1nx5gtcltaKpo
146.20.128.136200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=93&partnerUserId=pWr5vKSOQDh-N_1nx5gtcltaKpo
IP 146.20.128.136:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=93&partnerUserId=pWr5vKSOQDh-N_1nx5gtcltaKpo HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad.lkqd.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:15 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
e1.o.lencr.org/
23.36.76.249200 OK 345 B IP 23.36.76.249:0
ASN #20940 Akamai International B.V.
Hash 7007a042a79310c8938c279ae7eec8e5
8b72d7da27205ce31ff5497ba5428808a498dd7e
8188a5b1208fea4f2bdb97e404aefeb04a89ad62bc16ba2512e3a660b68b67af
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "8188A5B1208FEA4F2BDB97E404AEFEB04A89AD62BC16BA2512E3A660B68B67AF"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10703
Expires: Sun, 04 Dec 2022 01:27:38 GMT
Date: Sat, 03 Dec 2022 22:29:15 GMT
Connection: keep-alive
cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/2/img/girls.png
172.64.108.13200 OK 322 kB URL HTTP/2 cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/2/img/girls.png
IP 172.64.108.13:0
File type PNG image data, 729 x 331, 8-bit/color RGBA, non-interlaced\012- data
Size 322 kB (322399 bytes)
Hash 47b7ae41a98644de6d46d58a0e51a793
b0f736609af3c0b3214ee52cc9f0798dcc972df6
b2ad5bf8fc066203168fbceb53b7df6012e8897be344b240e94105af1b4ba0f2
GET /sb/notifications/games/nutaku/multi/2/img/girls.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:15 GMT
content-type: image/png
content-length: 322399
last-modified: Wed, 07 Sep 2022 14:37:32 GMT
etag: "6318acac-4eb5f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1586162
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=74d%2BpYYEnAGg3aShXkYeGMEz6tMel7mYqbK0FY6xox17rwTX4y%2B6pb6Rhbu3RabqlG17%2FVmp0R53f8kYMrQzKMZ9Jkc4G9BAbj%2Bd6adfFlpXnAl9bfEYzA%2BjVa0kEkYOrQmqBqjdTbdc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773fbd71bb3c743b-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
csync.loopme.me/?redirect=https%3A%2F%2Fcs.lkqd.net%2Fcs%3FpartnerId%3D54%26partnerUserId%3D%7Bdevice_id%7D
35.214.223.115307 Temporary Redirect 0 B URL HTTP/2 csync.loopme.me/?redirect=https%3A%2F%2Fcs.lkqd.net%2Fcs%3FpartnerId%3D54%26partnerUserId%3D%7Bdevice_id%7D
IP 35.214.223.115:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?redirect=https%3A%2F%2Fcs.lkqd.net%2Fcs%3FpartnerId%3D54%26partnerUserId%3D%7Bdevice_id%7D HTTP/1.1
Host: csync.loopme.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Cookie: viewer_token=7f99d736-134d-4196-a893-17c9cbd30559
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 307 Temporary Redirect
set-cookie: viewer_token=7f99d736-134d-4196-a893-17c9cbd30559
location: https://cs.lkqd.net/cs?partnerId=54&partnerUserId=7f99d736-134d-4196-a893-17c9cbd30559
content-length: 0
date: Sat, 03 Dec 2022 22:29:15 GMT
server: _
X-Firefox-Spdy: h2
ad.turn.com/r/cs?pid=65
46.228.164.11302 Found 0 B IP 46.228.164.11:0
ASN #56396 Amobee EMEA Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /r/cs?pid=65 HTTP/1.1
Host: ad.turn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
p3p: policyref="/w3c/p3p.xml", CP="NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV"
cache-control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
pragma: no-cache
set-cookie: uid=4529419059001867169; Domain=.turn.com; Expires=Thu, 01-Jun-2023 22:29:15 GMT; Path=/; Secure; SameSite=None
location: https://cs.lkqd.net/cs?partnerId=94&partnerUserId=4529419059001867169
content-length: 0
date: Sat, 03 Dec 2022 22:29:15 GMT
X-Firefox-Spdy: h2
t.lkqd.net/t
146.20.132.81200 OK 0 B IP 146.20.132.81:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 799
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:15 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: http://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/2/js/jquery.min.js
172.64.108.13200 OK 32 kB URL HTTP/2 cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/2/js/jquery.min.js
IP 172.64.108.13:0
File type ASCII text, with very long lines (65451)
Hash c1fcfdd480feeb47a41cfc787b7346e4
e5fd5e809695ffc4c9ba9ac6fbc5a8bd79483e11
fb47644686a2ccbd35fd6316eabfff765993e80a872c3a16da6268c0cc36a879
GET /sb/notifications/games/nutaku/multi/2/js/jquery.min.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:15 GMT
content-type: application/javascript
last-modified: Thu, 18 Aug 2022 08:55:27 GMT
etag: W/"62fdfe7f-15d94"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1586162
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vkax7bkRHWv407Wvbavy7Mz6J7a9BXpqCloc8m8EviJ9ODB5gqNCgicLkYwi6EN3BkUBU0syhdPhyjoLIdd6KqeNJwYmHla%2F8og%2Bbs1IePz18f61EO%2FySTkl4SYWGQobJa79eS6RRGBW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773fbd71bb46743b-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=85260314&m=&rtv=1&thost=m.imagenesderopaparaperros.com
69.20.43.192200 OK 0 B URL HTTP/1.1 v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=85260314&m=&rtv=1&thost=m.imagenesderopaparaperros.com
IP 69.20.43.192:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=85260314&m=&rtv=1&thost=m.imagenesderopaparaperros.com HTTP/1.1
Host: v.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://m.imagenesderopaparaperros.com/
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 03 Dec 2022 22:29:15 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Access-Control-Max-Age: 300
Cache-Control: max-age=300
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Expose-Headers: Content-Type, Content-Disposition
Access-Control-Allow-Credentials: true
unseenreport.com/pxf.gif?uuid=bd2bf0f3-095b-457f-97ea-b62bde565ecb&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1053&b_frame=0&pk=cf621eb24aa5b4a128894819698170b8&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=22
192.243.59.20200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=bd2bf0f3-095b-457f-97ea-b62bde565ecb&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1053&b_frame=0&pk=cf621eb24aa5b4a128894819698170b8&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=22
IP 192.243.59.20:0
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=bd2bf0f3-095b-457f-97ea-b62bde565ecb&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1053&b_frame=0&pk=cf621eb24aa5b4a128894819698170b8&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=22 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 03 Dec 2022 22:29:15 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e53a3d621c6786b8abbae26725342478
Strict-Transport-Security: max-age=0; includeSubdomains
cmp.quantcast.com/GVL-v2/purposes-ES.json
143.204.55.17200 OK 4.7 kB URL HTTP/2 cmp.quantcast.com/GVL-v2/purposes-ES.json
IP 143.204.55.17:0
File type JSON data\012- , ASCII text, with very long lines (33137), with no line terminators
Hash 3b9402179c34a260152164f39c45fd71
26efb5dc6dc3f80c66496fb685adde45f099461c
14f776721121ffba0680618507e38b10081b699a8466241a1de18ff623940e1d
GET /GVL-v2/purposes-ES.json HTTP/1.1
Host: cmp.quantcast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
access-control-max-age: 3000
cache-control: max-age=172800
date: Sat, 03 Dec 2022 03:00:46 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-credentials: true
last-modified: Sat, 03 Dec 2022 03:00:34 GMT
etag: W/"7940ba23b1bf743580332fa954785147"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Q9eGNkR5ZydN0B2xKnwGO839tYPZ_DJ9IiYO4PVyqr7j10of5NiCpA==
age: 70109
X-Firefox-Spdy: h2
4.adsco.re/
162.252.214.5200 OK 62 B IP 162.252.214.5:0
File type ASCII text, with no line terminators
Hash adde5febc7b5b6c2c759ec735cce83a0
77ec17be8a9970ff04663294d41c590d0d24fde4
ce2b9f2e5005195de7add565505005be6f2ef0d37521771e15106d1e1b9260ff
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Moz: prefetch
Connection: keep-alive
Referer: http://c.adsco.re/
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 22:29:15 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
cs.lkqd.net/cs?partnerId=103&redirect=https%3A%2F%2Fevent.clientgear.com%2Fcookie%2Flkqd%3Fpartner%3Dlkqd%26cookieid%3D%24%24rawlkqduserid%24%24&r=if
146.20.128.136200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=103&redirect=https%3A%2F%2Fevent.clientgear.com%2Fcookie%2Flkqd%3Fpartner%3Dlkqd%26cookieid%3D%24%24rawlkqduserid%24%24&r=if
IP 146.20.128.136:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=103&redirect=https%3A%2F%2Fevent.clientgear.com%2Fcookie%2Flkqd%3Fpartner%3Dlkqd%26cookieid%3D%24%24rawlkqduserid%24%24&r=if HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:15 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
cs.lkqd.net/cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if
146.20.128.136200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if
IP 146.20.128.136:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:15 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
cs.lkqd.net/cs?partnerId=54&partnerUserId=7f99d736-134d-4196-a893-17c9cbd30559
146.20.128.136200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=54&partnerUserId=7f99d736-134d-4196-a893-17c9cbd30559
IP 146.20.128.136:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=54&partnerUserId=7f99d736-134d-4196-a893-17c9cbd30559 HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad.lkqd.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:15 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
unicons.iconscout.com/release/v2.1.9/script/monochrome/bundle.js
104.18.28.243200 OK 3.4 kB URL HTTP/2 unicons.iconscout.com/release/v2.1.9/script/monochrome/bundle.js
IP 104.18.28.243:0
File type ASCII text, with very long lines (9104)
Hash 3a0dfeecab456f9fd6257f8fe9b32c90
50743e8d9220df2124b251d47b7ca5b6093fc4b7
819ef98c3c5f97735d3da3fbcc09fbcb6391e6c97e357b831ef04c75fadffbbe
GET /release/v2.1.9/script/monochrome/bundle.js HTTP/1.1
Host: unicons.iconscout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:12 GMT
content-type: application/javascript
x-amz-id-2: GvCKrN3nQW/FEY2jWfHeYZvKkWCt3JBdCuMVwvzgDsMJlQPRsp7xleY2w8Me+pQdtPQBGP2L4Og=
x-amz-request-id: J4Q012JMVSHPPMBE
last-modified: Fri, 22 May 2020 12:00:38 GMT
etag: W/"be52f9b7d5de40f1e7cf1faab2f6d95d"
cf-cache-status: HIT
age: 2112802
expires: Sun, 03 Dec 2023 22:29:12 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 773fbd61895cb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/2/img/close.svg
172.64.108.13200 OK 493 B URL HTTP/2 cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/2/img/close.svg
IP 172.64.108.13:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text
Hash dc4ade1e026471b42fada7f9bd20aec4
82df5abcb04c74823fa57c03d1bc65ed03c58815
ee268cacb2b7bfc9ffd67e488a91faafca6e46b708ec488ae9178dd23bedca07
GET /sb/notifications/games/nutaku/multi/2/img/close.svg HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:15 GMT
content-type: image/svg+xml
last-modified: Thu, 18 Aug 2022 08:55:17 GMT
etag: W/"62fdfe75-415"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1586162
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Jz1yiBao1M9De1ikDazuZ4SU4G9sQmUteAntP2YS4b6U9idATKyD9oiIDhZQ2AKie5SgzMbtPBVimznEXy8Qw4%2BIdKjaT17iH7PL%2F1zWjfAhKbDDbGUayK5nuJK%2BRZaP5dIQmZwm1VMq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773fbd71ab32743b-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
t.lkqd.net/t
146.20.132.81200 OK 0 B IP 146.20.132.81:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://m.imagenesderopaparaperros.com/
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:15 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: http://m.imagenesderopaparaperros.com
access-control-max-age: 300
cache-control: max-age=300
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
X-Firefox-Spdy: h2
v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=85260314&m=&rtv=1&thost=m.imagenesderopaparaperros.com
69.20.43.192200 OK 3.9 kB URL HTTP/1.1 v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=85260314&m=&rtv=1&thost=m.imagenesderopaparaperros.com
IP 69.20.43.192:0
File type JSON data\012- , ASCII text, with very long lines (52052), with no line terminators
Hash f88daf2bb7b61c1babdc8f56ad68d07f
bb660e82515ec39bbd6934d809847dff4840d37f
4c5f5d83e3125f4c214e9f81f22f2299c46822fe9d9bffb679d0be81a443cb72
POST /ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=85260314&m=&rtv=1&thost=m.imagenesderopaparaperros.com HTTP/1.1
Host: v.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json
Content-Length: 38
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 03 Dec 2022 22:29:15 GMT
Content-Type: application/json
Content-Length: 3949
Connection: keep-alive
Content-Encoding: gzip
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Cache-Control: max-age=0, no-cache, no-store
Access-Control-Allow-Credentials: true
t.lkqd.net/t
146.20.132.81200 OK 0 B IP 146.20.132.81:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 763
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:15 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: http://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C7156153363619945321800902968%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
95.101.10.58200 OK 831 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C7156153363619945321800902968%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
IP 95.101.10.58:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (411)
Hash f1a07e41a0f36ffb41f26191cc902120
2a0cb87ba6d8b8af53ba0c060889f05b3f60693f
28dcbe934e7c0e0affac42274a98f79317323295f67b99fdaa21451f6ec2ae18
GET /vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C7156153363619945321800902968%2C%2C&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1670106555388081-349
Expires: Sat, 03 Dec 2022 22:29:15 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 03 Dec 2022 22:29:15 GMT
Content-Length: 831
Connection: keep-alive
Set-Cookie: UID=d7506960b8a04c45b8cfaf66f19a2ba; Domain=ads.stickyadstv.com; Expires=Mon, 02-Jan-2023 22:29:15 GMT; Path=/
ads.stickyadstv.com/vast/vpaid-adapter/7585793?schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C7401588387156153363619945321,,&_fw_gdpr=1&_fw_gdpr_consent=
95.101.10.58200 OK 815 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C7401588387156153363619945321,,&_fw_gdpr=1&_fw_gdpr_consent=
IP 95.101.10.58:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (395)
Hash a0e807a9374dce7cc23b1790c2ff9d29
fc5ee827d35f2dda7ae054e15ca45b1f121c1d42
f6eb0fef1d398d11a7bf0bb7d1ce962386a28d053b95985aa97d78d7f08b3041
GET /vast/vpaid-adapter/7585793?schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C7401588387156153363619945321,,&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1670106555404083-384
Expires: Sat, 03 Dec 2022 22:29:15 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 03 Dec 2022 22:29:15 GMT
Content-Length: 815
Connection: keep-alive
Set-Cookie: UID=85197c563f8196e22c3ec0d83b19; Domain=ads.stickyadstv.com; Expires=Mon, 02-Jan-2023 22:29:15 GMT; Path=/
ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C7156153363619945321480405281%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
95.101.10.58200 OK 831 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C7156153363619945321480405281%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
IP 95.101.10.58:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (411)
Hash 7e267348c5c363b99d861b9e2ef2b260
522d76f8f865c1e647018e1038535ed5c798bea8
ec98709c4a668648e3a3a2fd5a5a8d2d475ffc77206c2828f789ca5cb11c8b59
GET /vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C7156153363619945321480405281%2C%2C&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1670106555451034-363
Expires: Sat, 03 Dec 2022 22:29:15 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 03 Dec 2022 22:29:15 GMT
Content-Length: 831
Connection: keep-alive
Set-Cookie: UID=7099a8aab0278e268a69527182dacd0; Domain=ads.stickyadstv.com; Expires=Mon, 02-Jan-2023 22:29:15 GMT; Path=/
status.geotrust.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash a6274672c555604d72b1292b4648c3e0
d8c4fa29092153ecf3408e05e051c56ab8fd63c2
007d72b18139f05a87fd896bdfbce956ad5ea3571724eb7d1fcfa5d88a62bc05
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1079
Cache-Control: max-age=146612
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:29:15 GMT
Etag: "638b6338-1d7"
Expires: Mon, 05 Dec 2022 15:12:47 GMT
Last-Modified: Sat, 03 Dec 2022 14:54:48 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/2/css/styles.css
172.64.108.13200 OK 2.5 kB URL HTTP/2 cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/2/css/styles.css
IP 172.64.108.13:0
Hash 937aaecbba4a5a7ecc7b974d3e8f6aad
12699c4d2738680c2cb68c57fdd0a58e39da9641
cea6cf1da85c622db4cfdbb17ea78ef7c140f93c6ee7b32af99f7ccf10f4e59e
GET /sb/notifications/games/nutaku/multi/2/css/styles.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:15 GMT
content-type: text/css
last-modified: Wed, 21 Sep 2022 08:03:32 GMT
etag: W/"632ac554-2c89"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k%2Bl2mgrYTUg4FwA14MDSRyhgQiM%2F4SJYO2wfIhpUzM0K2xJ18Nry0Pp9I1wI0%2BYM3havR%2Bms1DXjEc5KHZLJnGQv2Fr0YAtlbvSQX4agv1svLgT0lob1KZST%2FniH1jER5fE7E%2BrleHn5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773fbd71ab12743b-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 47e7b72a0f9daec5e663ed567493f19b
ab63c6622a4f1775edf818cbdd7400846b94da10
bfea855fe56610db1cef69facc921d32851c2492fc68ffa989d0bbadedcb0a32
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 881
Cache-Control: max-age=164035
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:29:15 GMT
Etag: "638ba80d-1d7"
Expires: Mon, 05 Dec 2022 20:03:10 GMT
Last-Modified: Sat, 03 Dec 2022 19:48:29 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 47e7b72a0f9daec5e663ed567493f19b
ab63c6622a4f1775edf818cbdd7400846b94da10
bfea855fe56610db1cef69facc921d32851c2492fc68ffa989d0bbadedcb0a32
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 866
Cache-Control: max-age=164020
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:29:15 GMT
Etag: "638ba80d-1d7"
Expires: Mon, 05 Dec 2022 20:02:55 GMT
Last-Modified: Sat, 03 Dec 2022 19:48:29 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
status.geotrust.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash a6274672c555604d72b1292b4648c3e0
d8c4fa29092153ecf3408e05e051c56ab8fd63c2
007d72b18139f05a87fd896bdfbce956ad5ea3571724eb7d1fcfa5d88a62bc05
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6546
Cache-Control: max-age=152079
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:29:15 GMT
Etag: "638b6338-1d7"
Expires: Mon, 05 Dec 2022 16:43:54 GMT
Last-Modified: Sat, 03 Dec 2022 14:54:48 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
a.vidoomy.com/api/rtbserver/rtb?id=1874088169&w=400&h=225&skip=1&req_type=1&ip=&ua=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&l=EN&dt=2&c=NO&pid=&sid=&sname=&d=imagenesderopaparaperros.com&sp=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&coppa=&gdpr=1&gdprcs=&vpaid=1&idlot=
3.124.176.82204 No Content 0 B URL HTTP/2 a.vidoomy.com/api/rtbserver/rtb?id=1874088169&w=400&h=225&skip=1&req_type=1&ip=&ua=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&l=EN&dt=2&c=NO&pid=&sid=&sname=&d=imagenesderopaparaperros.com&sp=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&coppa=&gdpr=1&gdprcs=&vpaid=1&idlot=
IP 3.124.176.82:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/rtbserver/rtb?id=1874088169&w=400&h=225&skip=1&req_type=1&ip=&ua=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&l=EN&dt=2&c=NO&pid=&sid=&sname=&d=imagenesderopaparaperros.com&sp=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&coppa=&gdpr=1&gdprcs=&vpaid=1&idlot= HTTP/1.1
Host: a.vidoomy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 03 Dec 2022 22:29:15 GMT
access-control-allow-origin: http://m.imagenesderopaparaperros.com
access-control-expose-headers: X-VD-C
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,PATCH,OPTIONS
X-Firefox-Spdy: h2
csm.fr.eu.criteo.net/iev?entry=c~Idfs.Rtus.147.Events.InitiateFetch~1
178.250.0.162200 OK 43 B URL HTTP/2 csm.fr.eu.criteo.net/iev?entry=c~Idfs.Rtus.147.Events.InitiateFetch~1
IP 178.250.0.162:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /iev?entry=c~Idfs.Rtus.147.Events.InitiateFetch~1 HTTP/1.1
Host: csm.fr.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:15 GMT
pragma: no-cache
server: Finatra
expires: 0
content-type: image/gif
cache-control: no-cache, no-store, must-revalidate
content-length: 43
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
t.lkqd.net/t
146.20.132.81200 OK 0 B IP 146.20.132.81:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 8342
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:15 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: http://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
t.lkqd.net/t
146.20.132.81200 OK 0 B IP 146.20.132.81:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 1510
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:15 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: http://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
143.204.42.165200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.165:0
Hash bdd88912547d360ef6c7dce5cd5b8370
87051ebf51c4d6a567ef768eac1925056e07e912
a3d3d53ad77b3b61d6be190646af32f6c96cedb2dfab4a91356e15e11f8a6eaf
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=165646
Date: Sat, 03 Dec 2022 22:29:15 GMT
Etag: "638bb0aa-1d7"
Expires: Mon, 05 Dec 2022 20:30:01 GMT
Last-Modified: Sat, 03 Dec 2022 20:25:14 GMT
Server: ECS (bsa/EB20)
X-Cache: Miss from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: R7b-3dyWzmNUKv4xyySiQqj-dtY8hiGJ0Gp5Wb9elO_wnaJyowzdNA==
Age: 287
adtrack.adleadevent.com/notifyme.php?st=a96081b6-db78-48c4-9f82-b93e316fb1f7
52.18.48.214200 OK 20 B URL HTTP/1.1 adtrack.adleadevent.com/notifyme.php?st=a96081b6-db78-48c4-9f82-b93e316fb1f7
IP 52.18.48.214:0
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /notifyme.php?st=a96081b6-db78-48c4-9f82-b93e316fb1f7 HTTP/1.1
Host: adtrack.adleadevent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Content-Encoding: gzip
Content-Type: application/x-javascript
Date: Sat, 03 Dec 2022 22:29:15 GMT
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Last-Modified: Sat, 03 Dec 2022 22:29:15 GMT
Pragma: no-cache
Server: Apache
Vary: Accept-Encoding
Content-Length: 20
Connection: keep-alive
handbagcordial.com/impr.gif?sid=H4sIAAAAAAAC%2F1RST4gcxRutzi%2F5IXpSRFFQhhBEwZ3tfzPTY5BoTCLRmIQkkqvVVdW75VZ3NVXd07t7WgyEgJfx5rHnzSaLuogB8SBKZNaLDAoZBVkkCx5zUlzIWWZ2YPGD7u%2Breu%2Fw3vvq5qDcIy5Kunv5Pb0ulaKLrabbePm6zLiubOPitYbnNt2Tjesya4cnG6vTn%2Bm95rmtpvtK423BVvSi73qu67le45w0ItGrizMUMt%2Fues2u2wz9ptcKsWr%2Be7alA0sd8N4eeQqST44t%2F3QXko2QpV%2BdEXal0PmrZ9NS0UIb9PjW%2B9lKpqsM6eGYGAdJtjVnQ9sJIZ8egc625g6ge5tTB4jlhDi%2Fe4izrblMxL3bB0pjBZEh5k%2Bg6o0g1AiSjsD0DUh%2BnwCM4%2BIlZOmdi9pUdO0ApVN0Qo4%2B2oesJuTog6eRpV%2BeVnK1cVWrspA6s1hNasjVEeTSCHm5g2Ldgax2wIqPIPkvZPHRBWTp5iWrNCTfPcED3uq022zB63ToQhh4nYWo2woWEj9ijHdFu9X2ZxFJOYJMRlCiD2odlNNPOigTB2XuIOW7DdrqJq7bSeIkCKKQMRYEjLWiNm%2FxIIwSFyWbeuijyPtgqg9mNpCbDazIPkz5A%2BxyDcsd2IKgx2tUgqCyBBUlqCRBVRBUvfo2V9a39R2ubBl78%2B7Pe1APdbE0oLd1sSQyMsj3yJOz4B6%2B8zVWxG6DJW3fE7EfUtqKQ%2Br5UdQNI6%2Fb7kZex40jWFlD2iMzm%2BvTLT7zD3I5IeSvDcR0B1btgMnjoOULoNWw47ugy8MwcrGeba8ru6xNIZqZKMB1jbw4hmLNGag98txMR%2Fc3A8HGbxx%2Fff%2Bbs4MxmKmRmxofyh8JltSt4RVdkc0rurLk7qW8kKlcp9PlXi1oIY5%2B%2Fq5Yq7Th58%2FY%2FmdvsikwHbevCVtcoBmX2ZIlX5yWnAtzThsmyPfn7XURXy7t8unSZGV%2B4fJb586nuRHWSp2NQOX9D%2B6ByQl5PL05e7Yv%2FnET0oxgyhppOSbzgtQ7YPkGbD4%2B9ef%2FTzxYfL6G1QRGHXLi3EFV1kPjx4eXSk6Iv%2F8slBif%2Bm77Me%2Blh2ugcQ0rDmOIxfje3wf8gb2FJeOAFjeQpTV6pkZP1aCqD1v%2Bb1jkZnzq12BWiJUzjJVxNmNl1CcH8Vq522h5oYjiqMM4jwXjXscPosB1fc7DTld4XRR2wj7%2B%2Bdt%2FAQAA%2F%2F8BAAD%2F%2F4X54mCSBAAA
192.243.61.227200 OK 7 B URL HTTP/1.1 handbagcordial.com/impr.gif?sid=H4sIAAAAAAAC%2F1RST4gcxRutzi%2F5IXpSRFFQhhBEwZ3tfzPTY5BoTCLRmIQkkqvVVdW75VZ3NVXd07t7WgyEgJfx5rHnzSaLuogB8SBKZNaLDAoZBVkkCx5zUlzIWWZ2YPGD7u%2Breu%2Fw3vvq5qDcIy5Kunv5Pb0ulaKLrabbePm6zLiubOPitYbnNt2Tjesya4cnG6vTn%2Bm95rmtpvtK423BVvSi73qu67le45w0ItGrizMUMt%2Fues2u2wz9ptcKsWr%2Be7alA0sd8N4eeQqST44t%2F3QXko2QpV%2BdEXal0PmrZ9NS0UIb9PjW%2B9lKpqsM6eGYGAdJtjVnQ9sJIZ8egc625g6ge5tTB4jlhDi%2Fe4izrblMxL3bB0pjBZEh5k%2Bg6o0g1AiSjsD0DUh%2BnwCM4%2BIlZOmdi9pUdO0ApVN0Qo4%2B2oesJuTog6eRpV%2BeVnK1cVWrspA6s1hNasjVEeTSCHm5g2Ldgax2wIqPIPkvZPHRBWTp5iWrNCTfPcED3uq022zB63ToQhh4nYWo2woWEj9ijHdFu9X2ZxFJOYJMRlCiD2odlNNPOigTB2XuIOW7DdrqJq7bSeIkCKKQMRYEjLWiNm%2FxIIwSFyWbeuijyPtgqg9mNpCbDazIPkz5A%2BxyDcsd2IKgx2tUgqCyBBUlqCRBVRBUvfo2V9a39R2ubBl78%2B7Pe1APdbE0oLd1sSQyMsj3yJOz4B6%2B8zVWxG6DJW3fE7EfUtqKQ%2Br5UdQNI6%2Fb7kZex40jWFlD2iMzm%2BvTLT7zD3I5IeSvDcR0B1btgMnjoOULoNWw47ugy8MwcrGeba8ru6xNIZqZKMB1jbw4hmLNGag98txMR%2Fc3A8HGbxx%2Fff%2Bbs4MxmKmRmxofyh8JltSt4RVdkc0rurLk7qW8kKlcp9PlXi1oIY5%2B%2Fq5Yq7Th58%2FY%2FmdvsikwHbevCVtcoBmX2ZIlX5yWnAtzThsmyPfn7XURXy7t8unSZGV%2B4fJb586nuRHWSp2NQOX9D%2B6ByQl5PL05e7Yv%2FnET0oxgyhppOSbzgtQ7YPkGbD4%2B9ef%2FTzxYfL6G1QRGHXLi3EFV1kPjx4eXSk6Iv%2F8slBif%2Bm77Me%2Blh2ugcQ0rDmOIxfje3wf8gb2FJeOAFjeQpTV6pkZP1aCqD1v%2Bb1jkZnzq12BWiJUzjJVxNmNl1CcH8Vq522h5oYjiqMM4jwXjXscPosB1fc7DTld4XRR2wj7%2B%2Bdt%2FAQAA%2F%2F8BAAD%2F%2F4X54mCSBAAA
IP 192.243.61.227:0
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RST4gcxRutzi%2F5IXpSRFFQhhBEwZ3tfzPTY5BoTCLRmIQkkqvVVdW75VZ3NVXd07t7WgyEgJfx5rHnzSaLuogB8SBKZNaLDAoZBVkkCx5zUlzIWWZ2YPGD7u%2Breu%2Fw3vvq5qDcIy5Kunv5Pb0ulaKLrabbePm6zLiubOPitYbnNt2Tjesya4cnG6vTn%2Bm95rmtpvtK423BVvSi73qu67le45w0ItGrizMUMt%2Fues2u2wz9ptcKsWr%2Be7alA0sd8N4eeQqST44t%2F3QXko2QpV%2BdEXal0PmrZ9NS0UIb9PjW%2B9lKpqsM6eGYGAdJtjVnQ9sJIZ8egc625g6ge5tTB4jlhDi%2Fe4izrblMxL3bB0pjBZEh5k%2Bg6o0g1AiSjsD0DUh%2BnwCM4%2BIlZOmdi9pUdO0ApVN0Qo4%2B2oesJuTog6eRpV%2BeVnK1cVWrspA6s1hNasjVEeTSCHm5g2Ldgax2wIqPIPkvZPHRBWTp5iWrNCTfPcED3uq022zB63ToQhh4nYWo2woWEj9ijHdFu9X2ZxFJOYJMRlCiD2odlNNPOigTB2XuIOW7DdrqJq7bSeIkCKKQMRYEjLWiNm%2FxIIwSFyWbeuijyPtgqg9mNpCbDazIPkz5A%2BxyDcsd2IKgx2tUgqCyBBUlqCRBVRBUvfo2V9a39R2ubBl78%2B7Pe1APdbE0oLd1sSQyMsj3yJOz4B6%2B8zVWxG6DJW3fE7EfUtqKQ%2Br5UdQNI6%2Fb7kZex40jWFlD2iMzm%2BvTLT7zD3I5IeSvDcR0B1btgMnjoOULoNWw47ugy8MwcrGeba8ru6xNIZqZKMB1jbw4hmLNGag98txMR%2Fc3A8HGbxx%2Fff%2Bbs4MxmKmRmxofyh8JltSt4RVdkc0rurLk7qW8kKlcp9PlXi1oIY5%2B%2Fq5Yq7Th58%2FY%2FmdvsikwHbevCVtcoBmX2ZIlX5yWnAtzThsmyPfn7XURXy7t8unSZGV%2B4fJb586nuRHWSp2NQOX9D%2B6ByQl5PL05e7Yv%2FnET0oxgyhppOSbzgtQ7YPkGbD4%2B9ef%2FTzxYfL6G1QRGHXLi3EFV1kPjx4eXSk6Iv%2F8slBif%2Bm77Me%2Blh2ugcQ0rDmOIxfje3wf8gb2FJeOAFjeQpTV6pkZP1aCqD1v%2Bb1jkZnzq12BWiJUzjJVxNmNl1CcH8Vq522h5oYjiqMM4jwXjXscPosB1fc7DTld4XRR2wj7%2B%2Bdt%2FAQAA%2F%2F8BAAD%2F%2F4X54mCSBAAA HTTP/1.1
Host: handbagcordial.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Cookie: u_pl=15289012; uid_id2=d3d5766c-177a-4317-8953-f28ccd9e6562:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; sleccf621eb24aa5b4a128894819698170b8=[3789938]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sat, 03 Dec 2022 22:29:16 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4b98b7e4e098a94b4ab8b97a6f39d1e7
Strict-Transport-Security: max-age=0; includeSubdomains
v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=vastvpaid&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=20761144&m=
69.20.43.192200 OK 1.4 kB URL HTTP/1.1 v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=vastvpaid&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=20761144&m=
IP 69.20.43.192:0
File type ASCII text, with very long lines (1825), with no line terminators
Hash ab8eb6217482d04d2fafa4f011f4d543
da97b90687e4ec1b490a69048229b8eeaea50de6
dd9dfe73aeda2e84b5fd92e238f948cf98aa1b6b3060d1f0c5355cc63ca7236a
GET /ad?pid=430&sid=1135194&formats=true&output=vastvpaid&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=20761144&m= HTTP/1.1
Host: v.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 03 Dec 2022 22:29:16 GMT
Content-Type: application/xml; charset=UTF-8
Content-Length: 1366
Connection: keep-alive
Content-Encoding: gzip
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Cache-Control: max-age=0, no-cache, no-store
Access-Control-Allow-Credentials: true
handbagcordial.com/pixel/sbs?c=1
192.243.61.227200 OK 0 B URL HTTP/1.1 handbagcordial.com/pixel/sbs?c=1
IP 192.243.61.227:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: handbagcordial.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Cookie: u_pl=15289012; uid_id2=d3d5766c-177a-4317-8953-f28ccd9e6562:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; sleccf621eb24aa5b4a128894819698170b8=[3789938]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sat, 03 Dec 2022 22:29:16 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=20761144&m=&rtv=1&thost=m.imagenesderopaparaperros.com
69.20.43.192200 OK 0 B URL HTTP/1.1 v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=20761144&m=&rtv=1&thost=m.imagenesderopaparaperros.com
IP 69.20.43.192:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=20761144&m=&rtv=1&thost=m.imagenesderopaparaperros.com HTTP/1.1
Host: v.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://m.imagenesderopaparaperros.com/
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 03 Dec 2022 22:29:16 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Access-Control-Max-Age: 300
Cache-Control: max-age=300
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Expose-Headers: Content-Type, Content-Disposition
Access-Control-Allow-Credentials: true
csync.loopme.me/?redirect=https%3A%2F%2Fcs.lkqd.net%2Fcs%3FpartnerId%3D54%26partnerUserId%3D%7Bdevice_id%7D
35.214.223.115307 Temporary Redirect 0 B URL HTTP/2 csync.loopme.me/?redirect=https%3A%2F%2Fcs.lkqd.net%2Fcs%3FpartnerId%3D54%26partnerUserId%3D%7Bdevice_id%7D
IP 35.214.223.115:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?redirect=https%3A%2F%2Fcs.lkqd.net%2Fcs%3FpartnerId%3D54%26partnerUserId%3D%7Bdevice_id%7D HTTP/1.1
Host: csync.loopme.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Cookie: viewer_token=7f99d736-134d-4196-a893-17c9cbd30559
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
set-cookie: viewer_token=7f99d736-134d-4196-a893-17c9cbd30559
location: https://cs.lkqd.net/cs?partnerId=54&partnerUserId=7f99d736-134d-4196-a893-17c9cbd30559
content-length: 0
date: Sat, 03 Dec 2022 22:29:16 GMT
server: _
X-Firefox-Spdy: h2
ad.turn.com/r/cs?pid=65
46.228.164.11302 Found 0 B IP 46.228.164.11:0
ASN #56396 Amobee EMEA Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /r/cs?pid=65 HTTP/1.1
Host: ad.turn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
p3p: policyref="/w3c/p3p.xml", CP="NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV"
cache-control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
pragma: no-cache
set-cookie: uid=7172753863826520993; Domain=.turn.com; Expires=Thu, 01-Jun-2023 22:29:16 GMT; Path=/; Secure; SameSite=None
location: https://cs.lkqd.net/cs?partnerId=94&partnerUserId=7172753863826520993
content-length: 0
date: Sat, 03 Dec 2022 22:29:16 GMT
X-Firefox-Spdy: h2
cs.lkqd.net/cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if
146.20.128.136200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if
IP 146.20.128.136:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:16 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
cs.lkqd.net/cs?partnerId=103&redirect=https%3A%2F%2Fevent.clientgear.com%2Fcookie%2Flkqd%3Fpartner%3Dlkqd%26cookieid%3D%24%24rawlkqduserid%24%24&r=if
146.20.128.136200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=103&redirect=https%3A%2F%2Fevent.clientgear.com%2Fcookie%2Flkqd%3Fpartner%3Dlkqd%26cookieid%3D%24%24rawlkqduserid%24%24&r=if
IP 146.20.128.136:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=103&redirect=https%3A%2F%2Fevent.clientgear.com%2Fcookie%2Flkqd%3Fpartner%3Dlkqd%26cookieid%3D%24%24rawlkqduserid%24%24&r=if HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:16 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
cs.lkqd.net/cs?partnerId=54&partnerUserId=7f99d736-134d-4196-a893-17c9cbd30559
146.20.128.136200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=54&partnerUserId=7f99d736-134d-4196-a893-17c9cbd30559
IP 146.20.128.136:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=54&partnerUserId=7f99d736-134d-4196-a893-17c9cbd30559 HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad.lkqd.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:16 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
sync.srv.stackadapt.com/sync?nid=161
35.174.181.179302 Found 104 B URL HTTP/1.1 sync.srv.stackadapt.com/sync?nid=161
IP 35.174.181.179:0
File type HTML document, ASCII text
Hash 10ba3d49a34312cda3c7cf9d88a1f18c
f3a9bff14a1cff9f7da9d5f503a22ec2eddc6e1b
bb1f48481f644381e2707bf7cba5beede53ed0d9e262f7833cc7ec969d6af061
GET /sync?nid=161 HTTP/1.1
Host: sync.srv.stackadapt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Date: Sat, 03 Dec 2022 22:29:16 GMT
Location: https://cs.lkqd.net/cs?partnerId=93&partnerUserId=u0NqxIdWSFtjBY0b0JZofFtaKpo
Set-Cookie: sa-user-id=s%3A0-bb436ac4-8756-485b-6305-8d1bd096687c.%2BeruPSRU%2B37KrytKl2cXz9gF7c1CcLD8U4t8SpNj5Pg; Max-Age=31536000; Secure; SameSite=None
sa-user-id-v2=s%3Au0NqxIdWSFtjBY0b0JZofFtaKpo.sb9czjyZfN4QG8alA0uxo7Mjq52%2FNF5GFVxCBTtxxIc; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None
Content-Length: 104
Connection: keep-alive
cs.lkqd.net/cs?partnerId=94&partnerUserId=7172753863826520993
146.20.128.136200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=94&partnerUserId=7172753863826520993
IP 146.20.128.136:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=94&partnerUserId=7172753863826520993 HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad.lkqd.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:16 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
t.lkqd.net/t
146.20.132.81200 OK 0 B IP 146.20.132.81:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 763
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:16 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: http://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
cs.lkqd.net/cs?partnerId=93&partnerUserId=u0NqxIdWSFtjBY0b0JZofFtaKpo
146.20.128.136200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=93&partnerUserId=u0NqxIdWSFtjBY0b0JZofFtaKpo
IP 146.20.128.136:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=93&partnerUserId=u0NqxIdWSFtjBY0b0JZofFtaKpo HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad.lkqd.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:16 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=20761144&m=&rtv=1&thost=m.imagenesderopaparaperros.com
69.20.43.192200 OK 4.0 kB URL HTTP/1.1 v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=20761144&m=&rtv=1&thost=m.imagenesderopaparaperros.com
IP 69.20.43.192:0
File type JSON data\012- , ASCII text, with very long lines (52055), with no line terminators
Hash c9eb95617676e976362e23076778ee7e
818f11ab01ad4b7b63dc8d76845bf9530c1c1643
418c1c85a421426aedeb97bf7d9f82f7e236c7aa5ca87fba684b28181b5a1d23
POST /ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=20761144&m=&rtv=1&thost=m.imagenesderopaparaperros.com HTTP/1.1
Host: v.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json
Content-Length: 38
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 03 Dec 2022 22:29:16 GMT
Content-Type: application/json
Content-Length: 3953
Connection: keep-alive
Content-Encoding: gzip
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Cache-Control: max-age=0, no-cache, no-store
Access-Control-Allow-Credentials: true
a.vidoomy.com/api/rtbserver/rtb?id=1690808367&w=400&h=225&skip=1&req_type=1&ip=&ua=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&l=EN&dt=2&c=NO&pid=&sid=&sname=&d=imagenesderopaparaperros.com&sp=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&coppa=&gdpr=1&gdprcs=&vpaid=1&idlot=
3.124.176.82204 No Content 0 B URL HTTP/2 a.vidoomy.com/api/rtbserver/rtb?id=1690808367&w=400&h=225&skip=1&req_type=1&ip=&ua=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&l=EN&dt=2&c=NO&pid=&sid=&sname=&d=imagenesderopaparaperros.com&sp=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&coppa=&gdpr=1&gdprcs=&vpaid=1&idlot=
IP 3.124.176.82:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/rtbserver/rtb?id=1690808367&w=400&h=225&skip=1&req_type=1&ip=&ua=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&l=EN&dt=2&c=NO&pid=&sid=&sname=&d=imagenesderopaparaperros.com&sp=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&coppa=&gdpr=1&gdprcs=&vpaid=1&idlot= HTTP/1.1
Host: a.vidoomy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 03 Dec 2022 22:29:16 GMT
access-control-allow-origin: http://m.imagenesderopaparaperros.com
access-control-expose-headers: X-VD-C
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,PATCH,OPTIONS
X-Firefox-Spdy: h2
ads.stickyadstv.com/vast/vpaid-adapter/7585793?schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C2754853316141136073738841853,,&_fw_gdpr=1&_fw_gdpr_consent=
95.101.10.58200 OK 815 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C2754853316141136073738841853,,&_fw_gdpr=1&_fw_gdpr_consent=
IP 95.101.10.58:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (395)
Hash 8f7afff858dc9d799955ed29673a4349
072810a6df72f1853f2ac94830d66ca3ac7a3178
f8724158b89a85aef6ba4eb766c59170196f201e9bd2d3ebd7ffee300814f1db
GET /vast/vpaid-adapter/7585793?schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C2754853316141136073738841853,,&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1670106556817026-333
Expires: Sat, 03 Dec 2022 22:29:16 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 03 Dec 2022 22:29:16 GMT
Content-Length: 815
Connection: keep-alive
Set-Cookie: UID=5d85675183cebc41a69d3b7d2ae28d; Domain=ads.stickyadstv.com; Expires=Mon, 02-Jan-2023 22:29:16 GMT; Path=/
ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C6141136073738841853220209498%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
95.101.10.58200 OK 831 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C6141136073738841853220209498%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
IP 95.101.10.58:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (411)
Hash 6eb98889994fae5d5704a4540b3efbac
4b0226cbc6fb80b2af68986347026071791412d8
aac8059a76e0401f87fac00459216a3321e9107d658a8dacb739dcccff156959
GET /vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C6141136073738841853220209498%2C%2C&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1670106556772070-429
Expires: Sat, 03 Dec 2022 22:29:16 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 03 Dec 2022 22:29:16 GMT
Content-Length: 831
Connection: keep-alive
Set-Cookie: UID=8783c685d7ae640ee90f36b3fe73930; Domain=ads.stickyadstv.com; Expires=Mon, 02-Jan-2023 22:29:16 GMT; Path=/
ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C61411360737388418531956351385%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
95.101.10.58200 OK 832 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C61411360737388418531956351385%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
IP 95.101.10.58:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (412)
Hash ddf3346c71254a61dbc2f2e7b1c6c86f
5c87c872700c61fa16e86d192caa342daa31308b
ddff0a12e0ed6b0fbf6aec47e649ced4dcdfe7c542105c24ad8176c21dfda725
GET /vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C61411360737388418531956351385%2C%2C&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1670106556827007-396
Expires: Sat, 03 Dec 2022 22:29:16 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 03 Dec 2022 22:29:16 GMT
Content-Length: 832
Connection: keep-alive
Set-Cookie: UID=c43bae64894d7dd24ecb90951b9a5164; Domain=ads.stickyadstv.com; Expires=Mon, 02-Jan-2023 22:29:16 GMT; Path=/
t.lkqd.net/t
146.20.132.81200 OK 0 B IP 146.20.132.81:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 8339
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:16 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: http://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=20761144&m=&rtv=1&thost=m.imagenesderopaparaperros.com
69.20.43.192200 OK 4.0 kB URL HTTP/1.1 v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=20761144&m=&rtv=1&thost=m.imagenesderopaparaperros.com
IP 69.20.43.192:0
File type JSON data\012- , ASCII text, with very long lines (52058), with no line terminators
Hash a1d19dbac75d282405080f9a89c6678f
5de795564d87f7340772c0a15e1569b068e7fe76
1931e2c3dd498048be40d66a5a9ee6240e0c0de3a7499ccf6a5a46e9b1360c5f
POST /ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=20761144&m=&rtv=1&thost=m.imagenesderopaparaperros.com HTTP/1.1
Host: v.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json
Content-Length: 38
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 03 Dec 2022 22:29:17 GMT
Content-Type: application/json
Content-Length: 3954
Connection: keep-alive
Content-Encoding: gzip
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Cache-Control: max-age=0, no-cache, no-store
Access-Control-Allow-Credentials: true
ad.turn.com/r/cs?pid=65
46.228.164.11302 Found 0 B IP 46.228.164.11:0
ASN #56396 Amobee EMEA Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /r/cs?pid=65 HTTP/1.1
Host: ad.turn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
p3p: policyref="/w3c/p3p.xml", CP="NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV"
cache-control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
pragma: no-cache
set-cookie: uid=7316587576925666209; Domain=.turn.com; Expires=Thu, 01-Jun-2023 22:29:17 GMT; Path=/; Secure; SameSite=None
location: https://cs.lkqd.net/cs?partnerId=94&partnerUserId=7316587576925666209
content-length: 0
date: Sat, 03 Dec 2022 22:29:16 GMT
X-Firefox-Spdy: h2
a.vidoomy.com/api/rtbserver/rtb?id=1800709336&w=400&h=225&skip=1&req_type=1&ip=&ua=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&l=EN&dt=2&c=NO&pid=&sid=&sname=&d=imagenesderopaparaperros.com&sp=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&coppa=&gdpr=1&gdprcs=&vpaid=1&idlot=
3.124.176.82204 No Content 0 B URL HTTP/2 a.vidoomy.com/api/rtbserver/rtb?id=1800709336&w=400&h=225&skip=1&req_type=1&ip=&ua=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&l=EN&dt=2&c=NO&pid=&sid=&sname=&d=imagenesderopaparaperros.com&sp=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&coppa=&gdpr=1&gdprcs=&vpaid=1&idlot=
IP 3.124.176.82:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/rtbserver/rtb?id=1800709336&w=400&h=225&skip=1&req_type=1&ip=&ua=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&l=EN&dt=2&c=NO&pid=&sid=&sname=&d=imagenesderopaparaperros.com&sp=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&coppa=&gdpr=1&gdprcs=&vpaid=1&idlot= HTTP/1.1
Host: a.vidoomy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 03 Dec 2022 22:29:17 GMT
access-control-allow-origin: http://m.imagenesderopaparaperros.com
access-control-expose-headers: X-VD-C
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,PATCH,OPTIONS
X-Firefox-Spdy: h2
ads.stickyadstv.com/vast/vpaid-adapter/7585793?schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C16831154706141136073738841853,,&_fw_gdpr=1&_fw_gdpr_consent=
95.101.10.58200 OK 816 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C16831154706141136073738841853,,&_fw_gdpr=1&_fw_gdpr_consent=
IP 95.101.10.58:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (396)
Hash 7c69db9e81c9c43b1b0c77b353ab68d3
61319ddfb78075cc243f5f5ed503cf0f183ccaf8
f430591d96a4d9ff4478031406ceacbecaf23c6fea74dcf19e64cbe7066af832
GET /vast/vpaid-adapter/7585793?schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C16831154706141136073738841853,,&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1670106557262016-411
Expires: Sat, 03 Dec 2022 22:29:17 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 03 Dec 2022 22:29:17 GMT
Content-Length: 816
Connection: keep-alive
Set-Cookie: UID=6f3a911df1c938978dd523062e9cbbc; Domain=ads.stickyadstv.com; Expires=Mon, 02-Jan-2023 22:29:17 GMT; Path=/
ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C61411360737388418531363223611%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
95.101.10.58200 OK 832 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C61411360737388418531363223611%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
IP 95.101.10.58:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (412)
Hash 5d4640d590c7b95051ea8a29be5330a5
b961302d0e59e49018116c7baba91fc20f40a7fb
71bcf82e612024f3684af7c3381f43bdf9e6d5becb53a99f28000fcfd9afecfc
GET /vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C61411360737388418531363223611%2C%2C&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1670106557231057-431
Expires: Sat, 03 Dec 2022 22:29:17 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 03 Dec 2022 22:29:17 GMT
Content-Length: 832
Connection: keep-alive
Set-Cookie: UID=6b2b6be7793752c10e54c7aaa082d0; Domain=ads.stickyadstv.com; Expires=Mon, 02-Jan-2023 22:29:17 GMT; Path=/
ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C6141136073738841853271612320%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
95.101.10.58200 OK 831 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C6141136073738841853271612320%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
IP 95.101.10.58:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (411)
Hash 4b71c32bac0293b41cec36b64ca480a9
4d51c41ef57c747d41a92ab5c5b6e0a6ec8ae739
5c27bffc4e67bdc3d5b332eea0c25cf931ff9aa864f61957bd3460f529fbffd2
GET /vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C6141136073738841853271612320%2C%2C&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1670106557282010-425
Expires: Sat, 03 Dec 2022 22:29:17 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 03 Dec 2022 22:29:17 GMT
Content-Length: 831
Connection: keep-alive
Set-Cookie: UID=6b2b6be7793752c10e54c7aaa082d0; Domain=ads.stickyadstv.com; Expires=Mon, 02-Jan-2023 22:29:17 GMT; Path=/
cs.lkqd.net/cs?partnerId=103&redirect=https%3A%2F%2Fevent.clientgear.com%2Fcookie%2Flkqd%3Fpartner%3Dlkqd%26cookieid%3D%24%24rawlkqduserid%24%24&r=if
146.20.128.136200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=103&redirect=https%3A%2F%2Fevent.clientgear.com%2Fcookie%2Flkqd%3Fpartner%3Dlkqd%26cookieid%3D%24%24rawlkqduserid%24%24&r=if
IP 146.20.128.136:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=103&redirect=https%3A%2F%2Fevent.clientgear.com%2Fcookie%2Flkqd%3Fpartner%3Dlkqd%26cookieid%3D%24%24rawlkqduserid%24%24&r=if HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:17 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
cs.lkqd.net/cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if
146.20.128.136200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if
IP 146.20.128.136:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:17 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
sync.srv.stackadapt.com/sync?nid=161
35.174.181.179302 Found 104 B URL HTTP/1.1 sync.srv.stackadapt.com/sync?nid=161
IP 35.174.181.179:0
File type HTML document, ASCII text
Hash 5fcad393cedc3814491bd099cbab22c2
71c20920db58bb0ab72633a455f8a729276929f6
6c1ab7f0c3b57994b49bb8bb6116c2b3b28b8840b5ac4b890b84a78efea5f0b0
GET /sync?nid=161 HTTP/1.1
Host: sync.srv.stackadapt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Date: Sat, 03 Dec 2022 22:29:17 GMT
Location: https://cs.lkqd.net/cs?partnerId=93&partnerUserId=XKjgOZncRTRohbfP93UhRVtaKpo
Set-Cookie: sa-user-id=s%3A0-5ca8e039-99dc-4534-6885-b7cff7752145.pVAGFTWQpQwl76QV8c8eoEoe8HfE0NeOATepPi6N6Hg; Max-Age=31536000; Secure; SameSite=None
sa-user-id-v2=s%3AXKjgOZncRTRohbfP93UhRVtaKpo.hw%2B3kMN1Yp0yFA0qOz1Qc6xj2Iz1izN5jzkaF8J9buo; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None
Content-Length: 104
Connection: keep-alive
cs.lkqd.net/cs?partnerId=94&partnerUserId=7316587576925666209
146.20.128.136200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=94&partnerUserId=7316587576925666209
IP 146.20.128.136:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=94&partnerUserId=7316587576925666209 HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad.lkqd.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:17 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
t.lkqd.net/t
146.20.132.81200 OK 0 B IP 146.20.132.81:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://m.imagenesderopaparaperros.com/
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:17 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: http://m.imagenesderopaparaperros.com
access-control-max-age: 300
cache-control: max-age=300
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
X-Firefox-Spdy: h2
t.lkqd.net/t
146.20.132.81200 OK 0 B IP 146.20.132.81:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://m.imagenesderopaparaperros.com/
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:17 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: http://m.imagenesderopaparaperros.com
access-control-max-age: 300
cache-control: max-age=300
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
X-Firefox-Spdy: h2
adx.adform.net/adx/?mid=970530&url=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&t=2
37.157.3.20200 OK 148 B URL HTTP/2 adx.adform.net/adx/?mid=970530&url=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&t=2
IP 37.157.3.20:0
File type XML 1.0 document text\012- XML document, ASCII text, with no line terminators
Hash 6334c282decaf5b8da9a82a5681a4a30
e8e22df07346252bf14c300adc015d4988432f1f
ff8ed59285b90267d8bb38eea83124534e9a677987391ccf8d4dee29510e540d
GET /adx/?mid=970530&url=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&t=2 HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:16 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET,OPTIONS
access-control-allow-origin: http://m.imagenesderopaparaperros.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
csync.loopme.me/?redirect=https%3A%2F%2Fcs.lkqd.net%2Fcs%3FpartnerId%3D54%26partnerUserId%3D%7Bdevice_id%7D
35.214.223.115307 Temporary Redirect 0 B URL HTTP/2 csync.loopme.me/?redirect=https%3A%2F%2Fcs.lkqd.net%2Fcs%3FpartnerId%3D54%26partnerUserId%3D%7Bdevice_id%7D
IP 35.214.223.115:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?redirect=https%3A%2F%2Fcs.lkqd.net%2Fcs%3FpartnerId%3D54%26partnerUserId%3D%7Bdevice_id%7D HTTP/1.1
Host: csync.loopme.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Cookie: viewer_token=7f99d736-134d-4196-a893-17c9cbd30559
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
set-cookie: viewer_token=7f99d736-134d-4196-a893-17c9cbd30559
location: https://cs.lkqd.net/cs?partnerId=54&partnerUserId=7f99d736-134d-4196-a893-17c9cbd30559
content-length: 0
date: Sat, 03 Dec 2022 22:29:17 GMT
server: _
X-Firefox-Spdy: h2
cs.lkqd.net/cs?partnerId=93&partnerUserId=XKjgOZncRTRohbfP93UhRVtaKpo
146.20.128.136200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=93&partnerUserId=XKjgOZncRTRohbfP93UhRVtaKpo
IP 146.20.128.136:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=93&partnerUserId=XKjgOZncRTRohbfP93UhRVtaKpo HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad.lkqd.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:17 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
t.lkqd.net/t
146.20.132.81200 OK 0 B IP 146.20.132.81:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 763
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:17 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: http://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
cs.lkqd.net/cs?partnerId=54&partnerUserId=7f99d736-134d-4196-a893-17c9cbd30559
146.20.128.136200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=54&partnerUserId=7f99d736-134d-4196-a893-17c9cbd30559
IP 146.20.128.136:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=54&partnerUserId=7f99d736-134d-4196-a893-17c9cbd30559 HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad.lkqd.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:17 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
t.lkqd.net/t
146.20.132.81200 OK 0 B IP 146.20.132.81:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 8344
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:17 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: http://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
t.lkqd.net/t
146.20.132.81200 OK 0 B IP 146.20.132.81:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 1511
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:17 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: http://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=vastvpaid&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=76570447&m=
69.20.43.192200 OK 1.4 kB URL HTTP/1.1 v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=vastvpaid&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=76570447&m=
IP 69.20.43.192:0
File type ASCII text, with very long lines (1825), with no line terminators
Hash 49266a7bf76c9667fe27f825a6f44657
511936f26a3783421b7f8f74249de850bc23dcd1
fce595ff977703109725ba0f2432828aee9fe6cd86c03152df7e1e190929577f
GET /ad?pid=430&sid=1135194&formats=true&output=vastvpaid&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=76570447&m= HTTP/1.1
Host: v.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 03 Dec 2022 22:29:18 GMT
Content-Type: application/xml; charset=UTF-8
Content-Length: 1365
Connection: keep-alive
Content-Encoding: gzip
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Cache-Control: max-age=0, no-cache, no-store
Access-Control-Allow-Credentials: true
v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=76570447&m=&rtv=1&thost=m.imagenesderopaparaperros.com
69.20.43.192200 OK 0 B URL HTTP/1.1 v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=76570447&m=&rtv=1&thost=m.imagenesderopaparaperros.com
IP 69.20.43.192:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=76570447&m=&rtv=1&thost=m.imagenesderopaparaperros.com HTTP/1.1
Host: v.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://m.imagenesderopaparaperros.com/
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 03 Dec 2022 22:29:18 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Access-Control-Max-Age: 300
Cache-Control: max-age=300
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Expose-Headers: Content-Type, Content-Disposition
Access-Control-Allow-Credentials: true
ad.turn.com/r/cs?pid=65
46.228.164.11302 Found 0 B IP 46.228.164.11:0
ASN #56396 Amobee EMEA Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /r/cs?pid=65 HTTP/1.1
Host: ad.turn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
p3p: policyref="/w3c/p3p.xml", CP="NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV"
cache-control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
pragma: no-cache
set-cookie: uid=7242559658050763681; Domain=.turn.com; Expires=Thu, 01-Jun-2023 22:29:18 GMT; Path=/; Secure; SameSite=None
location: https://cs.lkqd.net/cs?partnerId=94&partnerUserId=7242559658050763681
content-length: 0
date: Sat, 03 Dec 2022 22:29:17 GMT
X-Firefox-Spdy: h2
cs.lkqd.net/cs?partnerId=103&redirect=https%3A%2F%2Fevent.clientgear.com%2Fcookie%2Flkqd%3Fpartner%3Dlkqd%26cookieid%3D%24%24rawlkqduserid%24%24&r=if
146.20.128.136200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=103&redirect=https%3A%2F%2Fevent.clientgear.com%2Fcookie%2Flkqd%3Fpartner%3Dlkqd%26cookieid%3D%24%24rawlkqduserid%24%24&r=if
IP 146.20.128.136:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=103&redirect=https%3A%2F%2Fevent.clientgear.com%2Fcookie%2Flkqd%3Fpartner%3Dlkqd%26cookieid%3D%24%24rawlkqduserid%24%24&r=if HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:18 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
cs.lkqd.net/cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if
146.20.128.136200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if
IP 146.20.128.136:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:18 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
sync.srv.stackadapt.com/sync?nid=161
35.174.181.179302 Found 104 B URL HTTP/1.1 sync.srv.stackadapt.com/sync?nid=161
IP 35.174.181.179:0
File type HTML document, ASCII text
Hash ac141d24ee8aff5977c9ce7b82e38005
959fc9f796cc53538c5397d5f6f80233ff497d47
96df2b74b94d4b4642ad8f40c6d5d58331573b4860714be1d4f331caea795d6a
GET /sync?nid=161 HTTP/1.1
Host: sync.srv.stackadapt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Date: Sat, 03 Dec 2022 22:29:18 GMT
Location: https://cs.lkqd.net/cs?partnerId=93&partnerUserId=Ko-u8M5eRXpTqaDZmBQm3VtaKpo
Set-Cookie: sa-user-id=s%3A0-2a8faef0-ce5e-457a-53a9-a0d9981426dd.8CfNw%2BRi28JtcWwDvzgUUM2I%2B%2FsovTBe5Gn%2FJpkTUUI; Max-Age=31536000; Secure; SameSite=None
sa-user-id-v2=s%3AKo-u8M5eRXpTqaDZmBQm3VtaKpo.AQFUQuRu3zDlxqt9CZkMde1XOYInBEQaVPDc2MCjjsw; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None
Content-Length: 104
Connection: keep-alive
v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=76570447&m=&rtv=1&thost=m.imagenesderopaparaperros.com
69.20.43.192200 OK 4.0 kB URL HTTP/1.1 v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=76570447&m=&rtv=1&thost=m.imagenesderopaparaperros.com
IP 69.20.43.192:0
File type JSON data\012- , ASCII text, with very long lines (52057), with no line terminators
Hash 58868d12e855d121d034a16edfca9377
61661e4ae79c19ac74e6ed5ccc120b20a75bc250
9c22811b2517f74e775d4f914633587f8382a0bb4d7046083939bfb9dcdfa0a2
POST /ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=76570447&m=&rtv=1&thost=m.imagenesderopaparaperros.com HTTP/1.1
Host: v.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json
Content-Length: 38
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 03 Dec 2022 22:29:18 GMT
Content-Type: application/json
Content-Length: 3954
Connection: keep-alive
Content-Encoding: gzip
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Cache-Control: max-age=0, no-cache, no-store
Access-Control-Allow-Credentials: true
cs.lkqd.net/cs?partnerId=94&partnerUserId=7242559658050763681
146.20.128.136200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=94&partnerUserId=7242559658050763681
IP 146.20.128.136:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=94&partnerUserId=7242559658050763681 HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad.lkqd.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:18 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
a.vidoomy.com/api/rtbserver/rtb?id=1338409751&w=400&h=225&skip=1&req_type=1&ip=&ua=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&l=EN&dt=2&c=NO&pid=&sid=&sname=&d=imagenesderopaparaperros.com&sp=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&coppa=&gdpr=1&gdprcs=&vpaid=1&idlot=
3.124.176.82204 No Content 0 B URL HTTP/2 a.vidoomy.com/api/rtbserver/rtb?id=1338409751&w=400&h=225&skip=1&req_type=1&ip=&ua=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&l=EN&dt=2&c=NO&pid=&sid=&sname=&d=imagenesderopaparaperros.com&sp=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&coppa=&gdpr=1&gdprcs=&vpaid=1&idlot=
IP 3.124.176.82:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/rtbserver/rtb?id=1338409751&w=400&h=225&skip=1&req_type=1&ip=&ua=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&l=EN&dt=2&c=NO&pid=&sid=&sname=&d=imagenesderopaparaperros.com&sp=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&coppa=&gdpr=1&gdprcs=&vpaid=1&idlot= HTTP/1.1
Host: a.vidoomy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 03 Dec 2022 22:29:18 GMT
access-control-allow-origin: http://m.imagenesderopaparaperros.com
access-control-expose-headers: X-VD-C
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,PATCH,OPTIONS
X-Firefox-Spdy: h2
adx.adform.net/adx/?mid=1036882&t=2&url=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE
37.157.3.20200 OK 148 B URL HTTP/2 adx.adform.net/adx/?mid=1036882&t=2&url=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE
IP 37.157.3.20:0
File type XML 1.0 document text\012- XML document, ASCII text, with no line terminators
Hash 6334c282decaf5b8da9a82a5681a4a30
e8e22df07346252bf14c300adc015d4988432f1f
ff8ed59285b90267d8bb38eea83124534e9a677987391ccf8d4dee29510e540d
GET /adx/?mid=1036882&t=2&url=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:15 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET,OPTIONS
access-control-allow-origin: http://m.imagenesderopaparaperros.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C1345684024384418157595867159%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
95.101.10.58200 OK 831 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C1345684024384418157595867159%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
IP 95.101.10.58:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (411)
Hash 9199600e83debf5a106c84f4134d35f5
9487299c5367b39e55f078f333d373c801b18dd3
91c64ad6f042f9fd3d51615e0699f1c67b01c1eb82f3c93d448c11d2c5621975
GET /vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C1345684024384418157595867159%2C%2C&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1670106558416064-424
Expires: Sat, 03 Dec 2022 22:29:18 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 03 Dec 2022 22:29:18 GMT
Content-Length: 831
Connection: keep-alive
Set-Cookie: UID=b826185234d4fcd2c89f97497538e772; Domain=ads.stickyadstv.com; Expires=Mon, 02-Jan-2023 22:29:18 GMT; Path=/
ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C13456840243844181571812208454%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
95.101.10.58200 OK 832 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C13456840243844181571812208454%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
IP 95.101.10.58:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (412)
Hash cb8328530d0c2c9538f28924dd466515
c781d81ee4e034c7b1c64ac4c1c4896710dc06b5
2c118ed59c8cc79fee38503cb4530c4047e3bdc160c129a7f3619546a68d836f
GET /vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C13456840243844181571812208454%2C%2C&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1670106558402080-390
Expires: Sat, 03 Dec 2022 22:29:18 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 03 Dec 2022 22:29:18 GMT
Content-Length: 832
Connection: keep-alive
Set-Cookie: UID=cf82b5427c84b3a1a8a9aec14d50f3d9; Domain=ads.stickyadstv.com; Expires=Mon, 02-Jan-2023 22:29:18 GMT; Path=/
ads.stickyadstv.com/vast/vpaid-adapter/7585793?schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C8521645561345684024384418157,,&_fw_gdpr=1&_fw_gdpr_consent=
95.101.10.58200 OK 815 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C8521645561345684024384418157,,&_fw_gdpr=1&_fw_gdpr_consent=
IP 95.101.10.58:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (395)
Hash e7483dff2df434061fbd6e0a8cdfaa20
63f8c93c5320303876f411c809dd304c0ed6f3d9
ca2d725c0dae04d3f882f94419ea76c38dd8c7cbba2f6ac2d0ba4a9662708da8
GET /vast/vpaid-adapter/7585793?schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C8521645561345684024384418157,,&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1670106558401070-393
Expires: Sat, 03 Dec 2022 22:29:18 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 03 Dec 2022 22:29:18 GMT
Content-Length: 815
Connection: keep-alive
Set-Cookie: UID=cf82b5427c84b3a1a8a9aec14d50f3d9; Domain=ads.stickyadstv.com; Expires=Mon, 02-Jan-2023 22:29:18 GMT; Path=/
cs.lkqd.net/cs?partnerId=93&partnerUserId=Ko-u8M5eRXpTqaDZmBQm3VtaKpo
146.20.128.136200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=93&partnerUserId=Ko-u8M5eRXpTqaDZmBQm3VtaKpo
IP 146.20.128.136:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=93&partnerUserId=Ko-u8M5eRXpTqaDZmBQm3VtaKpo HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad.lkqd.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:18 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
csync.loopme.me/?redirect=https%3A%2F%2Fcs.lkqd.net%2Fcs%3FpartnerId%3D54%26partnerUserId%3D%7Bdevice_id%7D
35.214.223.115307 Temporary Redirect 0 B URL HTTP/2 csync.loopme.me/?redirect=https%3A%2F%2Fcs.lkqd.net%2Fcs%3FpartnerId%3D54%26partnerUserId%3D%7Bdevice_id%7D
IP 35.214.223.115:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?redirect=https%3A%2F%2Fcs.lkqd.net%2Fcs%3FpartnerId%3D54%26partnerUserId%3D%7Bdevice_id%7D HTTP/1.1
Host: csync.loopme.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Cookie: viewer_token=7f99d736-134d-4196-a893-17c9cbd30559
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
set-cookie: viewer_token=7f99d736-134d-4196-a893-17c9cbd30559
location: https://cs.lkqd.net/cs?partnerId=54&partnerUserId=7f99d736-134d-4196-a893-17c9cbd30559
content-length: 0
date: Sat, 03 Dec 2022 22:29:18 GMT
server: _
X-Firefox-Spdy: h2
adx.adform.net/adx/?mid=970530&url=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&t=2
37.157.3.20200 OK 74 B URL HTTP/2 adx.adform.net/adx/?mid=970530&url=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&t=2
IP 37.157.3.20:0
File type XML 1.0 document text\012- XML document, ASCII text, with no line terminators
Hash cfd02b7cdd037c108c2865b3d236f8f4
c163be76e303f43da1706a7f7184b611e3aa28f0
d99c7ef5910cc186314a625e78ca4423ebdd9cfdc2b4622c52b7f0cae7c73170
GET /adx/?mid=970530&url=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&t=2 HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:18 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET,OPTIONS
access-control-allow-origin: http://m.imagenesderopaparaperros.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
cs.lkqd.net/cs?partnerId=54&partnerUserId=7f99d736-134d-4196-a893-17c9cbd30559
146.20.128.136200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=54&partnerUserId=7f99d736-134d-4196-a893-17c9cbd30559
IP 146.20.128.136:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=54&partnerUserId=7f99d736-134d-4196-a893-17c9cbd30559 HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad.lkqd.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:18 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
t.lkqd.net/t
146.20.132.81200 OK 0 B IP 146.20.132.81:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 1509
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:18 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: http://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=vastvpaid&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=94420162&m=
69.20.43.192200 OK 1.4 kB URL HTTP/1.1 v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=vastvpaid&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=94420162&m=
IP 69.20.43.192:0
File type ASCII text, with very long lines (1825), with no line terminators
Hash 6977566849edd91fa69783985b5630f7
6e5bef1dd8e3bcf5d410ef1a382ebe8d896645df
99fb03ab514fb0f0476f40e49cb8c4cbe55c50b4dedbc921e0dc241fb291bd4c
GET /ad?pid=430&sid=1135194&formats=true&output=vastvpaid&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=94420162&m= HTTP/1.1
Host: v.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 03 Dec 2022 22:29:19 GMT
Content-Type: application/xml; charset=UTF-8
Content-Length: 1366
Connection: keep-alive
Content-Encoding: gzip
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Cache-Control: max-age=0, no-cache, no-store
Access-Control-Allow-Credentials: true
v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=94420162&m=&rtv=1&thost=m.imagenesderopaparaperros.com
69.20.43.192200 OK 0 B URL HTTP/1.1 v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=94420162&m=&rtv=1&thost=m.imagenesderopaparaperros.com
IP 69.20.43.192:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=94420162&m=&rtv=1&thost=m.imagenesderopaparaperros.com HTTP/1.1
Host: v.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://m.imagenesderopaparaperros.com/
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 03 Dec 2022 22:29:19 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Access-Control-Max-Age: 300
Cache-Control: max-age=300
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Expose-Headers: Content-Type, Content-Disposition
Access-Control-Allow-Credentials: true
csync.loopme.me/?redirect=https%3A%2F%2Fcs.lkqd.net%2Fcs%3FpartnerId%3D54%26partnerUserId%3D%7Bdevice_id%7D
35.214.223.115307 Temporary Redirect 0 B URL HTTP/2 csync.loopme.me/?redirect=https%3A%2F%2Fcs.lkqd.net%2Fcs%3FpartnerId%3D54%26partnerUserId%3D%7Bdevice_id%7D
IP 35.214.223.115:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?redirect=https%3A%2F%2Fcs.lkqd.net%2Fcs%3FpartnerId%3D54%26partnerUserId%3D%7Bdevice_id%7D HTTP/1.1
Host: csync.loopme.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Cookie: viewer_token=7f99d736-134d-4196-a893-17c9cbd30559
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
set-cookie: viewer_token=7f99d736-134d-4196-a893-17c9cbd30559
location: https://cs.lkqd.net/cs?partnerId=54&partnerUserId=7f99d736-134d-4196-a893-17c9cbd30559
content-length: 0
date: Sat, 03 Dec 2022 22:29:19 GMT
server: _
X-Firefox-Spdy: h2
ad.turn.com/r/cs?pid=65
46.228.164.11302 Found 0 B IP 46.228.164.11:0
ASN #56396 Amobee EMEA Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /r/cs?pid=65 HTTP/1.1
Host: ad.turn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
p3p: policyref="/w3c/p3p.xml", CP="NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV"
cache-control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
pragma: no-cache
set-cookie: uid=6980224979756432289; Domain=.turn.com; Expires=Thu, 01-Jun-2023 22:29:19 GMT; Path=/; Secure; SameSite=None
location: https://cs.lkqd.net/cs?partnerId=94&partnerUserId=6980224979756432289
content-length: 0
date: Sat, 03 Dec 2022 22:29:18 GMT
X-Firefox-Spdy: h2
v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=94420162&m=&rtv=1&thost=m.imagenesderopaparaperros.com
69.20.43.192200 OK 4.2 kB URL HTTP/1.1 v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=94420162&m=&rtv=1&thost=m.imagenesderopaparaperros.com
IP 69.20.43.192:0
File type JSON data\012- , ASCII text, with very long lines (52626), with no line terminators
Hash d0da1329b93e9815c76dcfbcfb22f459
cb070255cca93cf9e2dc3dc4386d9ecfa8d3b842
0c53d8ebf6c315c4abcf38ff8bcb586312d31200b1bdef07e2e055bb7e21f925
POST /ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=94420162&m=&rtv=1&thost=m.imagenesderopaparaperros.com HTTP/1.1
Host: v.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json
Content-Length: 38
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 03 Dec 2022 22:29:19 GMT
Content-Type: application/json
Content-Length: 4159
Connection: keep-alive
Content-Encoding: gzip
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Cache-Control: max-age=0, no-cache, no-store
Access-Control-Allow-Credentials: true
cs.lkqd.net/cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if
146.20.128.136200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if
IP 146.20.128.136:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:19 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
sync.srv.stackadapt.com/sync?nid=161
35.174.181.179302 Found 104 B URL HTTP/1.1 sync.srv.stackadapt.com/sync?nid=161
IP 35.174.181.179:0
File type HTML document, ASCII text
Hash ca1ef5020406ec130445244b1e8dbf1a
62ba69659e1bf28c00090c218c67def88fd79aba
af4295e91ba8e83ec6e822af4e8c8bb429d2591b33f9f3675d7abcdcdd983d2b
GET /sync?nid=161 HTTP/1.1
Host: sync.srv.stackadapt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Date: Sat, 03 Dec 2022 22:29:19 GMT
Location: https://cs.lkqd.net/cs?partnerId=93&partnerUserId=AcEDTdq3SdZC8Q82WGEIP1taKpo
Set-Cookie: sa-user-id=s%3A0-01c1034d-dab7-49d6-42f1-0f365861083f.u52ywbE%2B3V2E%2BJYRTUzBK%2FzQ6R%2Fh%2BYOY3y2PW3abKTE; Max-Age=31536000; Secure; SameSite=None
sa-user-id-v2=s%3AAcEDTdq3SdZC8Q82WGEIP1taKpo.YFOCjvLTXOeyoqf04Dbdrxx%2Fxu0EsFM1b6pXCE5iLQM; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None
Content-Length: 104
Connection: keep-alive
adx.adform.net/adx/?mid=1036882&t=2&url=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE
37.157.3.20200 OK 117 B URL HTTP/2 adx.adform.net/adx/?mid=1036882&t=2&url=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE
IP 37.157.3.20:0
Hash 0d4bb35b8e38e68971160993948f1311
d1e6c26b5be50c45b9a3d5ef7d22400a53e76cba
bfd39d9eedeb4bda38d1b608f908ca66d8afe06898b5b3de22db98d6d88d678d
GET /adx/?mid=1036882&t=2&url=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:18 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET,OPTIONS
access-control-allow-origin: http://m.imagenesderopaparaperros.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
cs.lkqd.net/cs?partnerId=54&partnerUserId=7f99d736-134d-4196-a893-17c9cbd30559
146.20.128.136200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=54&partnerUserId=7f99d736-134d-4196-a893-17c9cbd30559
IP 146.20.128.136:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=54&partnerUserId=7f99d736-134d-4196-a893-17c9cbd30559 HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad.lkqd.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:19 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
a.vidoomy.com/api/rtbserver/rtb?id=1223277887&w=400&h=225&skip=1&req_type=1&ip=&ua=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&l=EN&dt=2&c=NO&pid=&sid=&sname=&d=imagenesderopaparaperros.com&sp=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&coppa=&gdpr=1&gdprcs=&vpaid=1&idlot=
3.124.176.82204 No Content 0 B URL HTTP/2 a.vidoomy.com/api/rtbserver/rtb?id=1223277887&w=400&h=225&skip=1&req_type=1&ip=&ua=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&l=EN&dt=2&c=NO&pid=&sid=&sname=&d=imagenesderopaparaperros.com&sp=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&coppa=&gdpr=1&gdprcs=&vpaid=1&idlot=
IP 3.124.176.82:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/rtbserver/rtb?id=1223277887&w=400&h=225&skip=1&req_type=1&ip=&ua=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&l=EN&dt=2&c=NO&pid=&sid=&sname=&d=imagenesderopaparaperros.com&sp=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&coppa=&gdpr=1&gdprcs=&vpaid=1&idlot= HTTP/1.1
Host: a.vidoomy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 03 Dec 2022 22:29:19 GMT
access-control-allow-origin: http://m.imagenesderopaparaperros.com
access-control-expose-headers: X-VD-C
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,PATCH,OPTIONS
X-Firefox-Spdy: h2
ads.stickyadstv.com/vast/vpaid-adapter/7585793?schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C4124141707081865367491740678,,&_fw_gdpr=1&_fw_gdpr_consent=
95.101.10.58200 OK 815 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C4124141707081865367491740678,,&_fw_gdpr=1&_fw_gdpr_consent=
IP 95.101.10.58:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (395)
Hash 92aa9eef5ece92290c5739a9db44c2a2
ca69d7294193432867efdbf442561b3e36fca9cc
fd7f15354926276b139c92ffff52977121985915875a7c386db0592aae19c417
GET /vast/vpaid-adapter/7585793?schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C4124141707081865367491740678,,&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1670106559454012-399
Expires: Sat, 03 Dec 2022 22:29:19 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 03 Dec 2022 22:29:19 GMT
Content-Length: 815
Connection: keep-alive
Set-Cookie: UID=6bbea853978de4c87c1da0593a245; Domain=ads.stickyadstv.com; Expires=Mon, 02-Jan-2023 22:29:19 GMT; Path=/
ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C70818653674917406781273097690%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
95.101.10.58200 OK 832 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C70818653674917406781273097690%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
IP 95.101.10.58:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (412)
Hash a1f3f2e40912f595f5480779b122cc9c
d37fb70fdc86ae0ae1057567269223f20d264ed8
e5a1c83ca773f6ea9c8faf12f37972e68fb2fc617768f3461afd6fb721366e5a
GET /vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C70818653674917406781273097690%2C%2C&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1670106559412087-404
Expires: Sat, 03 Dec 2022 22:29:19 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 03 Dec 2022 22:29:19 GMT
Content-Length: 832
Connection: keep-alive
Set-Cookie: UID=54e8ce3749595dd9ddbc6e5eb5b384b3; Domain=ads.stickyadstv.com; Expires=Mon, 02-Jan-2023 22:29:19 GMT; Path=/
ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C70818653674917406781713407764%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
95.101.10.58200 OK 832 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C70818653674917406781713407764%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
IP 95.101.10.58:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (412)
Hash fc2959a29798ad02d286154ee3ef0eef
9474103c0d4990dd8fad786aa5f96b178676ed01
b32fb986894d55829b5876aad239dd5539be1d4c216507c943f70de671353f71
GET /vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C70818653674917406781713407764%2C%2C&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1670106559466006-403
Expires: Sat, 03 Dec 2022 22:29:19 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 03 Dec 2022 22:29:19 GMT
Content-Length: 832
Connection: keep-alive
Set-Cookie: UID=369b56a0d7fafae131193a52ac44d132; Domain=ads.stickyadstv.com; Expires=Mon, 02-Jan-2023 22:29:19 GMT; Path=/
cs.lkqd.net/cs?partnerId=94&partnerUserId=6980224979756432289
146.20.128.136200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=94&partnerUserId=6980224979756432289
IP 146.20.128.136:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=94&partnerUserId=6980224979756432289 HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad.lkqd.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:19 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
t.lkqd.net/t
146.20.132.81200 OK 0 B IP 146.20.132.81:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 763
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:19 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: http://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
cs.lkqd.net/cs?partnerId=93&partnerUserId=AcEDTdq3SdZC8Q82WGEIP1taKpo
146.20.128.136200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=93&partnerUserId=AcEDTdq3SdZC8Q82WGEIP1taKpo
IP 146.20.128.136:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=93&partnerUserId=AcEDTdq3SdZC8Q82WGEIP1taKpo HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad.lkqd.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:19 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
t.lkqd.net/t
146.20.132.81200 OK 0 B IP 146.20.132.81:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 8340
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:19 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: http://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
t.lkqd.net/t
146.20.132.81200 OK 0 B IP 146.20.132.81:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 1510
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:19 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: http://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=vastvpaid&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=51483772&m=
69.20.43.192200 OK 1.4 kB URL HTTP/1.1 v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=vastvpaid&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=51483772&m=
IP 69.20.43.192:0
File type ASCII text, with very long lines (1825), with no line terminators
Hash 40500def1c3389d238a195b3fa8bca0b
225e8f2251dabff87fdab0ec2a2866ff4c70e472
ec8f5ce756370f0fdda4ed6d48fd9cd28deeeca61d8c74aafa8304e8b768a4f9
GET /ad?pid=430&sid=1135194&formats=true&output=vastvpaid&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=51483772&m= HTTP/1.1
Host: v.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 03 Dec 2022 22:29:20 GMT
Content-Type: application/xml; charset=UTF-8
Content-Length: 1366
Connection: keep-alive
Content-Encoding: gzip
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Cache-Control: max-age=0, no-cache, no-store
Access-Control-Allow-Credentials: true
v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=51483772&m=&rtv=1&thost=m.imagenesderopaparaperros.com
69.20.43.192200 OK 0 B URL HTTP/1.1 v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=51483772&m=&rtv=1&thost=m.imagenesderopaparaperros.com
IP 69.20.43.192:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=51483772&m=&rtv=1&thost=m.imagenesderopaparaperros.com HTTP/1.1
Host: v.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://m.imagenesderopaparaperros.com/
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 03 Dec 2022 22:29:20 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Access-Control-Max-Age: 300
Cache-Control: max-age=300
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Expose-Headers: Content-Type, Content-Disposition
Access-Control-Allow-Credentials: true
csync.loopme.me/?redirect=https%3A%2F%2Fcs.lkqd.net%2Fcs%3FpartnerId%3D54%26partnerUserId%3D%7Bdevice_id%7D
35.214.223.115307 Temporary Redirect 0 B URL HTTP/2 csync.loopme.me/?redirect=https%3A%2F%2Fcs.lkqd.net%2Fcs%3FpartnerId%3D54%26partnerUserId%3D%7Bdevice_id%7D
IP 35.214.223.115:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?redirect=https%3A%2F%2Fcs.lkqd.net%2Fcs%3FpartnerId%3D54%26partnerUserId%3D%7Bdevice_id%7D HTTP/1.1
Host: csync.loopme.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Cookie: viewer_token=7f99d736-134d-4196-a893-17c9cbd30559
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
set-cookie: viewer_token=7f99d736-134d-4196-a893-17c9cbd30559
location: https://cs.lkqd.net/cs?partnerId=54&partnerUserId=7f99d736-134d-4196-a893-17c9cbd30559
content-length: 0
date: Sat, 03 Dec 2022 22:29:20 GMT
server: _
X-Firefox-Spdy: h2
ad.turn.com/r/cs?pid=65
46.228.164.11302 Found 0 B IP 46.228.164.11:0
ASN #56396 Amobee EMEA Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /r/cs?pid=65 HTTP/1.1
Host: ad.turn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
p3p: policyref="/w3c/p3p.xml", CP="NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV"
cache-control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
pragma: no-cache
set-cookie: uid=3497252518427147169; Domain=.turn.com; Expires=Thu, 01-Jun-2023 22:29:20 GMT; Path=/; Secure; SameSite=None
location: https://cs.lkqd.net/cs?partnerId=94&partnerUserId=3497252518427147169
content-length: 0
date: Sat, 03 Dec 2022 22:29:19 GMT
X-Firefox-Spdy: h2
cs.lkqd.net/cs?partnerId=54&partnerUserId=7f99d736-134d-4196-a893-17c9cbd30559
146.20.128.136200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=54&partnerUserId=7f99d736-134d-4196-a893-17c9cbd30559
IP 146.20.128.136:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=54&partnerUserId=7f99d736-134d-4196-a893-17c9cbd30559 HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad.lkqd.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:20 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
cs.lkqd.net/cs?partnerId=103&redirect=https%3A%2F%2Fevent.clientgear.com%2Fcookie%2Flkqd%3Fpartner%3Dlkqd%26cookieid%3D%24%24rawlkqduserid%24%24&r=if
146.20.128.136200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=103&redirect=https%3A%2F%2Fevent.clientgear.com%2Fcookie%2Flkqd%3Fpartner%3Dlkqd%26cookieid%3D%24%24rawlkqduserid%24%24&r=if
IP 146.20.128.136:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=103&redirect=https%3A%2F%2Fevent.clientgear.com%2Fcookie%2Flkqd%3Fpartner%3Dlkqd%26cookieid%3D%24%24rawlkqduserid%24%24&r=if HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:20 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
cs.lkqd.net/cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if
146.20.128.136200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if
IP 146.20.128.136:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=102&redirect=https%3A%2F%2Fcs.krushmedia.com%2Fcd607442bfdf172cfcec45014a5f4ece.gif%3Fpuid%3D%24%24rawlkqduserid%24%24%26redir%3Dhttps%253A%252F%252Fcs.lkqd.net%252Fcs%253FpartnerId%253D102%2526partnerUserId%253D%255BUID%255D&r=if HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:20 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
sync.srv.stackadapt.com/sync?nid=161
35.174.181.179302 Found 104 B URL HTTP/1.1 sync.srv.stackadapt.com/sync?nid=161
IP 35.174.181.179:0
File type HTML document, ASCII text
Hash 6eb175b34bcfc032b7a1a18d1a415c60
20638e99dd660f13cd85a97d6acf92269d975bdb
70474a28ea975b5ff38780860d5ef365af30420a600df8984e1e4b5b2ee9324c
GET /sync?nid=161 HTTP/1.1
Host: sync.srv.stackadapt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.lkqd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Date: Sat, 03 Dec 2022 22:29:20 GMT
Location: https://cs.lkqd.net/cs?partnerId=93&partnerUserId=sK-feMErSCVlZfG6TqVWvFtaKpo
Set-Cookie: sa-user-id=s%3A0-b0af9f78-c12b-4825-6565-f1ba4ea556bc.hw7xdcZjDQ04BAUlrJDqA%2FXMUMKSj3F3q3ZbzkGLEfQ; Max-Age=31536000; Secure; SameSite=None
sa-user-id-v2=s%3AsK-feMErSCVlZfG6TqVWvFtaKpo.sZiHJsXnnPkebUWHM6LOH8BNIT9BJuFzvSXdNPErQSA; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None
Content-Length: 104
Connection: keep-alive
v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=51483772&m=&rtv=1&thost=m.imagenesderopaparaperros.com
69.20.43.192200 OK 4.4 kB URL HTTP/1.1 v.lkqd.net/ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=51483772&m=&rtv=1&thost=m.imagenesderopaparaperros.com
IP 69.20.43.192:0
File type JSON data\012- , ASCII text, with very long lines (59369), with no line terminators
Hash 2bf67e0566c41541f78d51c5f34d7ca7
1c078475d36e632785a7842ef15c50e4a4e4c709
aa1d2d1a17111c835398cd1091fa90bb203c698382809d869f483a9dbbd02242
POST /ad?pid=430&sid=1135194&formats=true&output=json2&support=html5&execution=outstream&placement=slider&playinit=auto&volume=0&width=400&height=225&gdpr=1&gdprcs=&pageurl=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&dnt=0&c1=&c2=&c3=1.0%2C1!vidoomy.com%2C59795%2C1%2C&c4=true&rnd=51483772&m=&rtv=1&thost=m.imagenesderopaparaperros.com HTTP/1.1
Host: v.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json
Content-Length: 38
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 03 Dec 2022 22:29:20 GMT
Content-Type: application/json
Content-Length: 4370
Connection: keep-alive
Content-Encoding: gzip
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Cache-Control: max-age=0, no-cache, no-store
Access-Control-Allow-Credentials: true
adx.adform.net/adx/?mid=1036882&t=2&url=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE
37.157.3.20200 OK 117 B URL HTTP/2 adx.adform.net/adx/?mid=1036882&t=2&url=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE
IP 37.157.3.20:0
Hash 0d4bb35b8e38e68971160993948f1311
d1e6c26b5be50c45b9a3d5ef7d22400a53e76cba
bfd39d9eedeb4bda38d1b608f908ca66d8afe06898b5b3de22db98d6d88d678d
GET /adx/?mid=1036882&t=2&url=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:19 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET,OPTIONS
access-control-allow-origin: http://m.imagenesderopaparaperros.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
a.vidoomy.com/api/rtbserver/rtb?id=2041517524&w=400&h=225&skip=1&req_type=1&ip=&ua=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&l=EN&dt=2&c=NO&pid=&sid=&sname=&d=imagenesderopaparaperros.com&sp=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&coppa=&gdpr=1&gdprcs=&vpaid=1&idlot=
3.124.176.82204 No Content 0 B URL HTTP/2 a.vidoomy.com/api/rtbserver/rtb?id=2041517524&w=400&h=225&skip=1&req_type=1&ip=&ua=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&l=EN&dt=2&c=NO&pid=&sid=&sname=&d=imagenesderopaparaperros.com&sp=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&coppa=&gdpr=1&gdprcs=&vpaid=1&idlot=
IP 3.124.176.82:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/rtbserver/rtb?id=2041517524&w=400&h=225&skip=1&req_type=1&ip=&ua=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&l=EN&dt=2&c=NO&pid=&sid=&sname=&d=imagenesderopaparaperros.com&sp=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&coppa=&gdpr=1&gdprcs=&vpaid=1&idlot= HTTP/1.1
Host: a.vidoomy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 03 Dec 2022 22:29:20 GMT
access-control-allow-origin: http://m.imagenesderopaparaperros.com
access-control-expose-headers: X-VD-C
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,PATCH,OPTIONS
X-Firefox-Spdy: h2
t.lkqd.net/t
146.20.132.81200 OK 0 B IP 146.20.132.81:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 762
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:20 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: http://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ads.stickyadstv.com/vast/vpaid-adapter/7585793?schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C4273799197168593373053501272,,&_fw_gdpr=1&_fw_gdpr_consent=
95.101.10.58200 OK 815 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C4273799197168593373053501272,,&_fw_gdpr=1&_fw_gdpr_consent=
IP 95.101.10.58:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (395)
Hash 8ef3848567b2b67e959276eec655925a
60c2cb2daa64e22f3e37fedc022eecd99872d644
207c3ebe0a7e2a74f24c7591d5a0327f4edc238e020395858dae3868dde9b0ab
GET /vast/vpaid-adapter/7585793?schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C4273799197168593373053501272,,&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1670106560448043-403
Expires: Sat, 03 Dec 2022 22:29:20 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 03 Dec 2022 22:29:20 GMT
Content-Length: 815
Connection: keep-alive
Set-Cookie: UID=766546dcfa8cc71d545de4a29c57c6c; Domain=ads.stickyadstv.com; Expires=Mon, 02-Jan-2023 22:29:20 GMT; Path=/
cs.lkqd.net/cs?partnerId=93&partnerUserId=sK-feMErSCVlZfG6TqVWvFtaKpo
146.20.128.136200 OK 43 B URL HTTP/2 cs.lkqd.net/cs?partnerId=93&partnerUserId=sK-feMErSCVlZfG6TqVWvFtaKpo
IP 146.20.128.136:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /cs?partnerId=93&partnerUserId=sK-feMErSCVlZfG6TqVWvFtaKpo HTTP/1.1
Host: cs.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad.lkqd.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:20 GMT
content-type: image/gif
content-length: 43
access-control-max-age: 0
cache-control: max-age=0
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-expose-headers: Content-Type, Content-Disposition
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C7168593373053501272747429364%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
95.101.10.58200 OK 831 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C7168593373053501272747429364%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
IP 95.101.10.58:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (411)
Hash 7042751f028435c272c927e405a8aa3c
da1eba984fe67fd74e4307a1a652a26b5fcef57e
77260c28aa45d7859e65d502266418d9486a3f4abc3f34b0c396fc0777aca8e7
GET /vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C7168593373053501272747429364%2C%2C&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1670106560487010-380
Expires: Sat, 03 Dec 2022 22:29:20 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 03 Dec 2022 22:29:20 GMT
Content-Length: 831
Connection: keep-alive
Set-Cookie: UID=37d8327e444490c2fb5e52ab42c02; Domain=ads.stickyadstv.com; Expires=Mon, 02-Jan-2023 22:29:20 GMT; Path=/
ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C7168593373053501272729180032%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
95.101.10.58200 OK 831 B URL HTTP/1.1 ads.stickyadstv.com/vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C7168593373053501272729180032%2C%2C&_fw_gdpr=1&_fw_gdpr_consent=
IP 95.101.10.58:0
ASN #20940 Akamai International B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (411)
Hash a67d1cd28bb21931ccbe5b038b90de9c
20363ea755e0310a1350d10dc1c71cfc917bd51a
0862b8953dc31e4aa5f0cfca993a039f2b0fac978c5be2fcbb03eae0d295286c
GET /vast/vpaid-adapter/7585793?supportsJavascript=true&supportsFlash=true&_fw_us_privacy=&schain=1.0%2C1%21vidoomy.com%2C59795%2C1%2C7168593373053501272729180032%2C%2C&_fw_gdpr=1&_fw_gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/xml;charset=ISO-8859-1
Access-Control-Allow-Origin: http://m.imagenesderopaparaperros.com
Access-Control-Allow-Credentials: true
x-sticky-vk: 1670106560475031-411
Expires: Sat, 03 Dec 2022 22:29:20 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 03 Dec 2022 22:29:20 GMT
Content-Length: 831
Connection: keep-alive
Set-Cookie: UID=7a27e5a3bf5929e0bd86b7ee801cc5; Domain=ads.stickyadstv.com; Expires=Mon, 02-Jan-2023 22:29:20 GMT; Path=/
adx.adform.net/adx/?mid=970530&url=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&t=2
37.157.3.20200 OK 74 B URL HTTP/2 adx.adform.net/adx/?mid=970530&url=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&t=2
IP 37.157.3.20:0
File type XML 1.0 document text\012- XML document, ASCII text, with no line terminators
Hash cfd02b7cdd037c108c2865b3d236f8f4
c163be76e303f43da1706a7f7184b611e3aa28f0
d99c7ef5910cc186314a625e78ca4423ebdd9cfdc2b4622c52b7f0cae7c73170
GET /adx/?mid=970530&url=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&t=2 HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:20 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET,OPTIONS
access-control-allow-origin: http://m.imagenesderopaparaperros.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
t.lkqd.net/t
146.20.132.81200 OK 0 B IP 146.20.132.81:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /t HTTP/1.1
Host: t.lkqd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 1506
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:20 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
access-control-allow-origin: http://m.imagenesderopaparaperros.com
cache-control: max-age=0, no-cache, no-store
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ads.themoneytizer.com/s/requestform.js?siteId=52788&formatId=6
185.76.9.14200 OK 0 B URL HTTP/2 ads.themoneytizer.com/s/requestform.js?siteId=52788&formatId=6
IP 185.76.9.14:0
ASN #60068 Datacamp Limited
GET /s/requestform.js?siteId=52788&formatId=6 HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:12 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=604800
x-accel-expires: @1670590253
server: CDN77-Turbo
x-77-nzt: AblMCQ3Mf6b/C9kBAA
x-77-nzt-ray: c0a4cc2817d91737b8cd8b63ec56ea26
x-cache: HIT
x-age: 121099
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/2/css/animate.css
172.64.108.13200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/2/css/animate.css
IP 172.64.108.13:0
GET /sb/notifications/games/nutaku/multi/2/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:15 GMT
content-type: text/css
last-modified: Thu, 15 Sep 2022 10:38:28 GMT
etag: W/"632300a4-13591"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8FD6KXtOwVwzQbLVm%2FbuvvVXRRtAUyCopy3IEZW0Mv4cHlQtfoku3Nm94jZDwO6Mqp1L0o0xGFV6mhoKpx3z%2Bkx8f9eVOyUkaVQgTI9k%2BxDHjkGBp6ywp%2Foax2EzPEUbZQa%2BrhgQWgF%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773fbd71ab2f743b-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cmp.quantcast.com/choice/6Fv0cGNfc_bw8/www.themoneytizer.com/choice.js
143.204.55.17200 OK 0 B URL HTTP/2 cmp.quantcast.com/choice/6Fv0cGNfc_bw8/www.themoneytizer.com/choice.js
IP 143.204.55.17:0
GET /choice/6Fv0cGNfc_bw8/www.themoneytizer.com/choice.js HTTP/1.1
Host: cmp.quantcast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 28 Jun 2022 13:53:56 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
content-encoding: br
date: Sat, 03 Dec 2022 22:29:04 GMT
cache-control: max-age=3600
etag: W/"c53bd785b1ee57b613221019d7d72626"
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zEiA3xF1aVp8h-NgQVoscFDFxvFgkiABXoEVsBn3VQo_sTABmr1jaA==
age: 12
X-Firefox-Spdy: h2
adx.adform.net/adx/?mid=1036882&t=2&url=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE
37.157.3.20200 OK 0 B URL HTTP/2 adx.adform.net/adx/?mid=1036882&t=2&url=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE
IP 37.157.3.20:0
GET /adx/?mid=1036882&t=2&url=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:16 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET,OPTIONS
access-control-allow-origin: http://m.imagenesderopaparaperros.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
adx.adform.net/adx/?mid=1036882&t=2&url=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE
37.157.3.20200 OK 0 B URL HTTP/2 adx.adform.net/adx/?mid=1036882&t=2&url=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE
IP 37.157.3.20:0
GET /adx/?mid=1036882&t=2&url=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:20 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET,OPTIONS
access-control-allow-origin: http://m.imagenesderopaparaperros.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
adx.adform.net/adx/?mid=970530&t=2&url=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE
37.157.3.20200 OK 0 B URL HTTP/2 adx.adform.net/adx/?mid=970530&t=2&url=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE
IP 37.157.3.20:0
GET /adx/?mid=970530&t=2&url=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:20 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET,OPTIONS
access-control-allow-origin: http://m.imagenesderopaparaperros.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
wt.rqtrk.eu/6f4bcf39-b286-4d76-b513-ffb5541d5167-trk.js
162.19.141.161200 OK 0 B URL HTTP/2 wt.rqtrk.eu/6f4bcf39-b286-4d76-b513-ffb5541d5167-trk.js
IP 162.19.141.161:0
GET /6f4bcf39-b286-4d76-b513-ffb5541d5167-trk.js HTTP/1.1
Host: wt.rqtrk.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: istio-envoy
date: Sat, 03 Dec 2022 22:29:13 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding,Accept-Encoding
last-modified: Mon, 28 Nov 2022 11:30:42 GMT
etag: W/"82fef41533854eb9348a85e5baf8c3af"
x-cache: Hit from cloudfront
via: 1.1 6fa33d47af6f4da7007689083cfe9b9c.cloudfront.net (CloudFront)
x-amz-cf-pop: FRA2-C2
x-amz-cf-id: ck_B1u6pxQZPKPcvS60MxCZmpkdkZ5UexeDDkgPNyMkAFskpbHACqA==
age: 44490
expires: Sun, 04 Dec 2022 22:29:13 GMT
cache-control: max-age=86400,public
content-encoding: gzip
x-envoy-upstream-service-time: 0
X-Firefox-Spdy: h2
m.imagenesderopaparaperros.com/js/ads.js
104.21.94.136200 OK 0 B URL HTTP/2 m.imagenesderopaparaperros.com/js/ads.js
IP 104.21.94.136:0
GET /js/ads.js HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:12 GMT
content-type: application/javascript
x-frame-options: SAMEORIGIN
last-modified: Sat, 20 Jun 2020 00:07:31 GMT
cache-control: max-age=2592000
expires: Mon, 05 Dec 2022 20:44:18 GMT
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 2425494
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n4R8%2F6cJBGlpcSLO7qF%2BliljZeofbUfvgX2KN5XzzwwsZyCzxY1G1pcsgqxt6TuozPweKSG7%2BP5eSPKejTkwnMSjFSazsH7v7ufUU8gA6bBv77RXDQphTKrRhm1qzOqFRfplcBSnZoZhgb38CMQhCsw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 773fbd61ea77b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ads.themoneytizer.com/s/requestform.js?siteId=52788&formatId=19
185.76.9.14200 OK 0 B URL HTTP/2 ads.themoneytizer.com/s/requestform.js?siteId=52788&formatId=19
IP 185.76.9.14:0
ASN #60068 Datacamp Limited
GET /s/requestform.js?siteId=52788&formatId=19 HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:12 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=604800
x-accel-expires: @1670632108
server: CDN77-Turbo
x-77-nzt: AblMCQ0oGvLvjDUBAA
x-77-nzt-ray: c0a4cc2817d91737b8cd8b637ff4cf27
x-cache: HIT
x-age: 79244
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
ads.themoneytizer.com/s/gen.js?type=1
185.76.9.14200 OK 0 B URL HTTP/2 ads.themoneytizer.com/s/gen.js?type=1
IP 185.76.9.14:0
ASN #60068 Datacamp Limited
GET /s/gen.js?type=1 HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:12 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=604800
x-accel-expires: @1670562286
server: CDN77-Turbo
x-77-nzt: AblMCQ2eTFv/SkYCAA
x-77-nzt-ray: c0a4cc2817d91737b8cd8b63003b6528
x-cache: HIT
x-age: 149066
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
ads.themoneytizer.com/s/requestform.js?siteId=52788&formatId=1
185.76.9.14200 OK 0 B URL HTTP/2 ads.themoneytizer.com/s/requestform.js?siteId=52788&formatId=1
IP 185.76.9.14:0
ASN #60068 Datacamp Limited
GET /s/requestform.js?siteId=52788&formatId=1 HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:12 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=604800
x-accel-expires: @1670590253
server: CDN77-Turbo
x-77-nzt: AblMCQ3fvT//C9kBAA
x-77-nzt-ray: c0a4cc2817d91737b8cd8b6352328128
x-cache: HIT
x-age: 121099
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=147&r=2&j=criteoCallback
178.250.0.157200 OK 0 B URL HTTP/2 gum.criteo.com/sync?c=147&r=2&j=criteoCallback
IP 178.250.0.157:0
GET /sync?c=147&r=2&j=criteoCallback HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:13 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
server-processing-duration-in-ticks: 813580
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
zshorte.net/js/app.js?ver=6.4.0
104.21.89.60200 OK 0 B URL HTTP/2 zshorte.net/js/app.js?ver=6.4.0
IP 104.21.89.60:0
GET /js/app.js?ver=6.4.0 HTTP/1.1
Host: zshorte.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:12 GMT
content-type: application/javascript
cache-control: max-age=2592000
cf-bgj: minify
cf-polished: origSize=30407
expires: Thu, 22 Dec 2022 22:54:39 GMT
last-modified: Sat, 20 Jun 2020 00:07:31 GMT
vary: Accept-Encoding,User-Agent
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 948873
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=13xOtxTDORMi%2Ffy4bKwf%2BQ%2BQYC0XxbRB3I7XReUlKDlzvgJG4wHlVYrFJ1rQS1A1RaQ%2F9%2BjfuBf%2BpQH4jYwjrDipV0W81pmUQ4%2FTu%2FQel1CWp4wY%2BbvH1ujQoaVgfA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 773fbd61ca24b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
m.imagenesderopaparaperros.com/vendor/bootstrap/js/bootstrap.min.js?ver=6.4.0
104.21.94.136200 OK 0 B URL HTTP/2 m.imagenesderopaparaperros.com/vendor/bootstrap/js/bootstrap.min.js?ver=6.4.0
IP 104.21.94.136:0
GET /vendor/bootstrap/js/bootstrap.min.js?ver=6.4.0 HTTP/1.1
Host: m.imagenesderopaparaperros.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:12 GMT
content-type: application/javascript
x-frame-options: SAMEORIGIN
last-modified: Sat, 20 Jun 2020 00:09:27 GMT
cache-control: max-age=2592000
expires: Mon, 05 Dec 2022 20:44:19 GMT
vary: Accept-Encoding,User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 2425493
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=29vj9JcnVEss7%2FsKCojnI0X%2BmMiSVDwJwa%2BZy8VYjpMlp%2BZ%2B9DNRqly48qqc1ZMZJ4i9ugbNSUxNmY4NE1nKnx1krmfVLLGMrEzHSUXTEmWF3TnD6uiIV31fmxsSiI24SJnp0guFLzMpWwBBHieAMV8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 773fbd620aa1b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ads.themoneytizer.com/s/gen.js?type=2
185.76.9.14200 OK 0 B URL HTTP/2 ads.themoneytizer.com/s/gen.js?type=2
IP 185.76.9.14:0
ASN #60068 Datacamp Limited
GET /s/gen.js?type=2 HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:12 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=604800
x-accel-expires: @1670562285
server: CDN77-Turbo
x-77-nzt: AblMCQ0GKIr/S0YCAA
x-77-nzt-ray: c0a4cc2817d91737b8cd8b6364d91929
x-cache: HIT
x-age: 149067
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
cmp.quantcast.com/tcfv2/42/cmp2.js?referer=www.themoneytizer.com
143.204.55.17200 OK 0 B URL HTTP/2 cmp.quantcast.com/tcfv2/42/cmp2.js?referer=www.themoneytizer.com
IP 143.204.55.17:0
GET /tcfv2/42/cmp2.js?referer=www.themoneytizer.com HTTP/1.1
Host: cmp.quantcast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
access-control-max-age: 86400
last-modified: Tue, 05 Jul 2022 18:40:23 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-qc-ineu: True
server: AmazonS3
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: br
date: Sat, 03 Dec 2022 19:11:43 GMT
cache-control: max-age=172800
etag: W/"9494b70738cd74c9137e65c29c0b1f3e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RSbzW1tB2qCj3ZdWQh0Y_mFTNT6RCUfBJzbsCGY_UfNz2h0thCG9Rw==
age: 11850
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Nunito:300,400,600,700&display=swap
142.250.74.74200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Nunito:300,400,600,700&display=swap
IP 142.250.74.74:0
GET /css?family=Nunito:300,400,600,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 03 Dec 2022 22:29:12 GMT
date: Sat, 03 Dec 2022 22:29:12 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ads.themoneytizer.com/moneybid7_22/build/dist/prebid.js
185.76.9.14200 OK 0 B URL HTTP/2 ads.themoneytizer.com/moneybid7_22/build/dist/prebid.js
IP 185.76.9.14:0
ASN #60068 Datacamp Limited
GET /moneybid7_22/build/dist/prebid.js HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:13 GMT
content-type: application/javascript
last-modified: Tue, 22 Nov 2022 17:12:05 GMT
expires: Sat, 03 Dec 2022 05:04:45 GMT
cache-control: max-age=86400, public, no-transform
pragma: public
x-accel-expires: @1670130286
server: CDN77-Turbo
x-77-nzt: AblMCQ0t967/y/QAAA
x-77-nzt-ray: c0a4cc2817d91737b9cd8b632c4f9a02
x-cache: HIT
x-age: 62667
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/2/js/main.js
172.64.108.13200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/2/js/main.js
IP 172.64.108.13:0
GET /sb/notifications/games/nutaku/multi/2/js/main.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:15 GMT
content-type: application/javascript
last-modified: Wed, 21 Sep 2022 07:29:33 GMT
etag: W/"632abd5d-20ea"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XE8VQvvk2iogMySbC9McfYBxxqE0tLXcCRCJnMFFBmNZb5NKhfQzJrE%2FrwVSW2XiDsGC5I1HWrFjLTx5Kze4CX8i6CpapWgIulWmxSgk3fLgBXgZN3iChpzHGfpVrdsGklnv2TENKjQX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 773fbd727c64743b-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cmp.quantcast.com/tcfv2/42/cmp2ui-es.js
143.204.55.17200 OK 0 B URL HTTP/2 cmp.quantcast.com/tcfv2/42/cmp2ui-es.js
IP 143.204.55.17:0
GET /tcfv2/42/cmp2ui-es.js HTTP/1.1
Host: cmp.quantcast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
access-control-max-age: 604800
last-modified: Tue, 05 Jul 2022 18:40:32 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: gzip
date: Fri, 02 Dec 2022 21:47:04 GMT
cache-control: max-age=172800
etag: W/"61891c12c976950785806a7f08986298"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RTJOQe-u5ip2TtE5nv6qptXhi0oNCWw3JSowTUhVgyJGecPAY7JM2w==
age: 88931
X-Firefox-Spdy: h2
cmp.quantcast.com/GVL-v2/vendor-list-trimmed-v1.json
143.204.55.17200 OK 0 B URL HTTP/2 cmp.quantcast.com/GVL-v2/vendor-list-trimmed-v1.json
IP 143.204.55.17:0
GET /GVL-v2/vendor-list-trimmed-v1.json HTTP/1.1
Host: cmp.quantcast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
access-control-max-age: 3000
cache-control: max-age=172800
date: Sat, 03 Dec 2022 03:00:45 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-credentials: true
last-modified: Sat, 03 Dec 2022 03:00:33 GMT
etag: W/"8beb7c9f2be4a512dd564389fb4698cc"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: eo3zK1bOHukT2IUVy_wE65AC-BLVnogKdk9TXv9B1JmCTwgvKseX7w==
age: 70110
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=147&r=2&j=criteoCallback
178.250.0.157200 OK 0 B URL HTTP/2 gum.criteo.com/sync?c=147&r=2&j=criteoCallback
IP 178.250.0.157:0
GET /sync?c=147&r=2&j=criteoCallback HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://m.imagenesderopaparaperros.com/
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:13 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
access-control-allow-credentials: true
access-control-allow-origin: http://m.imagenesderopaparaperros.com
server-processing-duration-in-ticks: 793437
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
rules.quantcount.com/rules-p-6Fv0cGNfc_bw8.js
54.230.111.4200 OK 0 B URL HTTP/2 rules.quantcount.com/rules-p-6Fv0cGNfc_bw8.js
IP 54.230.111.4:0
GET /rules-p-6Fv0cGNfc_bw8.js HTTP/1.1
Host: rules.quantcount.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://m.imagenesderopaparaperros.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 13 Oct 2022 22:35:53 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: gzip
date: Sat, 03 Dec 2022 22:10:28 GMT
cache-control: max-age=3600
etag: W/"1f431dc94c1f033d6666f0fe637e2d7b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _L1ZQUA6XukQUKZlbw5cI3RIHdCAvuh1M6px2ttDfc86ks_-7cTk3g==
age: 1127
X-Firefox-Spdy: h2
adx.adform.net/adx/?mid=970530&url=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&t=2
37.157.3.20200 OK 0 B URL HTTP/2 adx.adform.net/adx/?mid=970530&url=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&t=2
IP 37.157.3.20:0
GET /adx/?mid=970530&url=http%3A%2F%2Fm.imagenesderopaparaperros.com%2Fqfv5mJE&t=2 HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://m.imagenesderopaparaperros.com
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:29:19 GMT
content-type: text/xml
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET,OPTIONS
access-control-allow-origin: http://m.imagenesderopaparaperros.com
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
ads.themoneytizer.com/s/gen.js?type=6
185.76.9.14200 OK 0 B URL HTTP/2 ads.themoneytizer.com/s/gen.js?type=6
IP 185.76.9.14:0
ASN #60068 Datacamp Limited
GET /s/gen.js?type=6 HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:12 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=604800
x-accel-expires: @1670562287
server: CDN77-Turbo
x-77-nzt: AblMCQ2eatL/SUYCAA
x-77-nzt-ray: c0a4cc2817d91737b8cd8b633a307328
x-cache: HIT
x-age: 149065
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
ads.themoneytizer.com/s/requestform.js?siteId=52788&formatId=2
185.76.9.14200 OK 0 B URL HTTP/2 ads.themoneytizer.com/s/requestform.js?siteId=52788&formatId=2
IP 185.76.9.14:0
ASN #60068 Datacamp Limited
GET /s/requestform.js?siteId=52788&formatId=2 HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:12 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=604800
x-accel-expires: @1670590253
server: CDN77-Turbo
x-77-nzt: AblMCQ0BVnr/C9kBAA
x-77-nzt-ray: c0a4cc2817d91737b8cd8b63dc332729
x-cache: HIT
x-age: 121099
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
ads.themoneytizer.com/lib_fs_close.js
185.76.9.14200 OK 0 B URL HTTP/2 ads.themoneytizer.com/lib_fs_close.js
IP 185.76.9.14:0
ASN #60068 Datacamp Limited
GET /lib_fs_close.js HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:13 GMT
content-type: application/javascript
last-modified: Tue, 14 Jun 2022 12:21:22 GMT
expires: Sat, 03 Dec 2022 05:04:45 GMT
cache-control: max-age=86400, public, no-transform
pragma: public
x-accel-expires: @1670130286
server: CDN77-Turbo
x-77-nzt: AblMCQ0UOt//y/QAAA
x-77-nzt-ray: c0a4cc2817d91737b9cd8b63450ee504
x-cache: HIT
x-age: 62667
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
spl.zeotap.com/mapper.js?env=mWeb&eventType=pageview&zdid=1258
104.22.24.87200 OK 0 B URL HTTP/2 spl.zeotap.com/mapper.js?env=mWeb&eventType=pageview&zdid=1258
IP 104.22.24.87:0
GET /mapper.js?env=mWeb&eventType=pageview&zdid=1258 HTTP/1.1
Host: spl.zeotap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.imagenesderopaparaperros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 22:29:13 GMT
content-type: application/javascript
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-origin: http://m.imagenesderopaparaperros.com
vary: Origin, Accept-Encoding
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 773fbd64b9a7b506-OSL
content-encoding: br
X-Firefox-Spdy: h2