| pdxx-7fmavzpxk2xlm-4-2.lowsea.fun/emw/v1/dt?sid=888.488122.22.930_54cb05ae_101.ys_31.491151.31.jp..jp.&k=bfb&url=track.gositego.live&xrw=&lid=63be35001d7f38647e496185&fid=888 |  5.161.78.177 | 307 Temporary Redirect | 164 B |
URL HTTP/1.1pdxx-7fmavzpxk2xlm-4-2.lowsea.fun/emw/v1/dt?sid=888.488122.22.930_54cb05ae_101.ys_31.491151.31.jp..jp.&k=bfb&url=track.gositego.live&xrw=&lid=63be35001d7f38647e496185&fid=888 IP5.161.78.177:0 ASN#213230 Hetzner Online GmbH
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash813f9846b49c0ada805648edf1b2fdbd caa24890460f73e6a72bb49426351e67e83b053d 8f03491247cbfa8a2e60e0f7ec62d63b5070659f60383a1c81abeb2b20221be3
GET /emw/v1/dt?sid=888.488122.22.930_54cb05ae_101.ys_31.491151.31.jp..jp.&k=bfb&url=track.gositego.live&xrw=&lid=63be35001d7f38647e496185&fid=888 HTTP/1.1
Host: pdxx-7fmavzpxk2xlm-4-2.lowsea.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 307 Temporary Redirect
Date: Wed, 11 Jan 2023 04:03:31 GMT
Content-Type: text/html
Content-Length: 164
Connection: keep-alive
Keep-Alive: timeout=10
Set-Cookie: emwxcid_4_1=to75lqRdOE6uahDpxFUI5KmuZyEnpnLhmOMgVPDmeM3qkHR7Al; expires=Thu, Jan 11 2024 04:03:31 GMT; Max-Age=31536000; path=/; domain=lowsea.fun; SameSite=Lax
Location: https://cola.trffclb.com/a.php?p=c:xecd97ulmxry7e481&d=62ff4322ec41a549b07c0d74&pid=63be35001d7f38647e496185&source=888.488122.22.930_54cb05ae_101.ys_31.491151.31.jp..jp.
|
|
| r3.o.lencr.org/ |  95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashe6b7a72139d0ef7688330456e9be9a4c e130a94e7d531768300071764dd1e81fee5bbbcb d3818afd1493030105341b4cfb91037acbf27085c96068b3ef91c5071277c8e5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D3818AFD1493030105341B4CFB91037ACBF27085C96068B3EF91C5071277C8E5"
Last-Modified: Mon, 09 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15759
Expires: Wed, 11 Jan 2023 08:26:10 GMT
Date: Wed, 11 Jan 2023 04:03:31 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hasheecebe0566883e33558e8e67beaccb29 acdd8fd09e2066ed5ecfbc3f11c4a2d61218ecc7 65e21170242bf41eb529fa422385dbe5af65a61e374e6dd5669e7e5f927948af
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "65E21170242BF41EB529FA422385DBE5AF65A61E374E6DD5669E7E5F927948AF"
Last-Modified: Mon, 09 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17457
Expires: Wed, 11 Jan 2023 08:54:28 GMT
Date: Wed, 11 Jan 2023 04:03:31 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashd8ccb7b2b89aec333fabc04d37337892 c2a13a42c1bd0cf7ce68d9c13b3d6ba1044b5283 75fcc3ea090454e3489a131b70ab50798fec6a08664745027d7a1cf62c6aba28
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "75FCC3EA090454E3489A131B70AB50798FEC6A08664745027D7A1CF62C6ABA28"
Last-Modified: Mon, 09 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17021
Expires: Wed, 11 Jan 2023 08:47:12 GMT
Date: Wed, 11 Jan 2023 04:03:31 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ | 35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashff250d3ef3fa45322bf05039a0122a9f b3e7a2c383bce1bab807dbe1a03c375258b51f1d d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 11 Jan 2023 03:41:45 GMT
content-type: application/json
age: 1306
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hashb1fcd419a4245617397846e8d17233f6 2a037ce244587640b27ead9a0ec2af4f862d91b2 e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: W5SQmGrwM9DXyg45McR9kVFapv+ldKhdQmUlo4xtXADSvIxM4I395kJpF0NDfAznSsAzNNizS8g=
x-amz-request-id: 8V2YS83KA7QB6Z7C
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 11 Jan 2023 03:16:53 GMT
age: 2798
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash8c2cc4df0ce1f92face9cc4d3427441f a5175c8241d512a884cb33e652b08e0f430f476a a354e61e0c6ed0061d0bc4ddb2bfe5f2614db83c9769483c75a08060572d3185
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A354E61E0C6ED0061D0BC4DDB2BFE5F2614DB83C9769483C75A08060572D3185"
Last-Modified: Sun, 08 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2811
Expires: Wed, 11 Jan 2023 04:50:23 GMT
Date: Wed, 11 Jan 2023 04:03:32 GMT
Connection: keep-alive
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:32 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| cola.trffclb.com/a.php?p=c:xecd97ulmxry7e481&d=62ff4322ec41a549b07c0d74&pid=63be35001d7f38647e496185&source=888.488122.22.930_54cb05ae_101.ys_31.491151.31.jp..jp. |  51.83.143.92 | 302 Found | 0 B |
URL HTTP/1.1cola.trffclb.com/a.php?p=c:xecd97ulmxry7e481&d=62ff4322ec41a549b07c0d74&pid=63be35001d7f38647e496185&source=888.488122.22.930_54cb05ae_101.ys_31.491151.31.jp..jp. IP51.83.143.92:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /a.php?p=c:xecd97ulmxry7e481&d=62ff4322ec41a549b07c0d74&pid=63be35001d7f38647e496185&source=888.488122.22.930_54cb05ae_101.ys_31.491151.31.jp..jp. HTTP/1.1
Host: cola.trffclb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 11 Jan 2023 04:03:32 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Round: 11hx4alk7e
Raund: 2is
Location: https://samba.trffclb.com/l.php?p=c:9qopki6xwqp07eckv&d=603611c5b7eaf46891533240&s=int_888.488122.22.930_54cb05ae_101.ys_31.491151.31.jp..jp.
|
|
| samba.trffclb.com/l.php?p=c:9qopki6xwqp07eckv&d=603611c5b7eaf46891533240&s=int_888.488122.22.930_54cb05ae_101.ys_31.491151.31.jp..jp. | 51.83.143.92 | 302 Found | 0 B |
URL HTTP/1.1samba.trffclb.com/l.php?p=c:9qopki6xwqp07eckv&d=603611c5b7eaf46891533240&s=int_888.488122.22.930_54cb05ae_101.ys_31.491151.31.jp..jp. IP51.83.143.92:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /l.php?p=c:9qopki6xwqp07eckv&d=603611c5b7eaf46891533240&s=int_888.488122.22.930_54cb05ae_101.ys_31.491151.31.jp..jp. HTTP/1.1
Host: samba.trffclb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 11 Jan 2023 04:03:32 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Round: 119cdtswvl
Raund: 12uf2w0vxv-2v5
Location: https://popcash.net/world/go/134600/317194
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash6e99c6f65e1e6fbdbb0f663f83039eac e8dc4ce519a415867eae013fa0a6a8b408c5762f 9e014f87f008019d19654e8538b3b3c781bdb2c4142029f9a1abd60b2d4965f2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2528
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 11 Jan 2023 04:03:32 GMT
Last-Modified: Wed, 11 Jan 2023 03:21:25 GMT
Server: ECS (amb/6B9B)
X-Cache: HIT
Content-Length: 279
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Pragma, Content-Length, Alert, Expires, ETag, Last-Modified, Backoff, Content-Type, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 11 Jan 2023 03:17:24 GMT
age: 2768
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hasha831a999b5e598b4e9f4e31e8054ca7c 9971a4a806f48777ae6d9525085d16d0c6314c51 cdffa8dd48e75baa98670f82dfac2b3948667ca32dd93f469d2cd49d3a58581c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4141
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 11 Jan 2023 04:03:32 GMT
Last-Modified: Wed, 11 Jan 2023 02:54:31 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
|
|
| popcash.net/world/go/134600/317194 | 172.67.194.203 | 301 Moved Permanently | 162 B |
URL HTTP/2popcash.net/world/go/134600/317194 IP172.67.194.203:0
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash4f8e702cc244ec5d4de32740c0ecbd97 3adb1f02d5b6054de0046e367c1d687b6cdf7aff 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /world/go/134600/317194 HTTP/1.1
Host: popcash.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
date: Wed, 11 Jan 2023 04:03:32 GMT
content-type: text/html
content-length: 162
location: http://ps.popcash.net/go/134600/317194
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iGLapYgWtzqULS%2FW6N6bGXE8wFI90s%2FjYleuWe3VTeHWKGn0svQeI9WTcyGjv%2Fdcxprt6T5oX168hPcaKkitsNNLM25bGIM3Ih%2B8SO3F6WQv%2BvK6UV3aSQu82snx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 787ac35f7ddbb50b-OSL
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 52.39.62.124 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP52.39.62.124:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: LFhIKbgrE3DAuJPdm2iAjA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: +6858e5v0FmZDWjtqB9Pxz6+lQE=
|
|
| ps.popcash.net/go/134600/317194 | 3.228.63.1 | 200 OK | 271 B |
URL HTTP/1.1ps.popcash.net/go/134600/317194 IP3.228.63.1:0
File typeHTML document, ASCII text Hash4d675f9477625275a2c7a44d1df075c7 87e3cf553cfd50d1e92d393ea10c0dbf2e193447 6ca69c021d888a0a4f6903b2c6103c5a655440897892cbfc89e096eb57777eef
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /go/134600/317194 HTTP/1.1
Host: ps.popcash.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Encoding: gzip
Content-Type: text/html
Date: Wed, 11 Jan 2023 04:03:33 GMT
Server: nginx
Vary: Accept-Encoding
Content-Length: 271
Connection: keep-alive
|
|
| ps.popcash.net/ad/ad?p=134600&w=317194&t=66453caa4bffc325&r=&vw=1280&vh=0 | 3.228.63.1 | 303 See Other | 0 B |
URL HTTP/1.1ps.popcash.net/ad/ad?p=134600&w=317194&t=66453caa4bffc325&r=&vw=1280&vh=0 IP3.228.63.1:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ad/ad?p=134600&w=317194&t=66453caa4bffc325&r=&vw=1280&vh=0 HTTP/1.1
Host: ps.popcash.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ps.popcash.net/go/134600/317194
Upgrade-Insecure-Requests: 1
HTTP/1.1 303 See Other
Date: Wed, 11 Jan 2023 04:03:33 GMT
Location: http://leont-pfd.com/zcvisitor/ea5a7fb3-9164-11ed-9a81-1201cbb06615/7fcf9220-c93c-11e7-9820-0e06c6fba698?campaignid=206ac2c0-7581-11ea-b16e-12e5dcaa70ed#pc151445
Server: nginx
Content-Length: 0
Connection: keep-alive
|
|
| leont-pfd.com/zcvisitor/ea5a7fb3-9164-11ed-9a81-1201cbb06615/7fcf9220-c93c-11e7-9820-0e06c6fba698?campaignid=206ac2c0-7581-11ea-b16e-12e5dcaa70ed | 35.172.34.123 | 302 | 0 B |
URL HTTP/1.1leont-pfd.com/zcvisitor/ea5a7fb3-9164-11ed-9a81-1201cbb06615/7fcf9220-c93c-11e7-9820-0e06c6fba698?campaignid=206ac2c0-7581-11ea-b16e-12e5dcaa70ed IP35.172.34.123:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /zcvisitor/ea5a7fb3-9164-11ed-9a81-1201cbb06615/7fcf9220-c93c-11e7-9820-0e06c6fba698?campaignid=206ac2c0-7581-11ea-b16e-12e5dcaa70ed HTTP/1.1
Host: leont-pfd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ps.popcash.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302
Date: Wed, 11 Jan 2023 04:03:33 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Location: https://www.affectionwave.com/
Server: fzToVIju
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashb4b9e9b8aafcb0fae8859a561a94ce4d 8f8e479af0c5e7857e1318f7cfe261ab6ea1bea1 8b29f3186a10fbbb4b598e0457ac2820975a4580c551c90738a373f70fa70a9a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B29F3186A10FBBB4B598E0457AC2820975A4580C551C90738A373F70FA70A9A"
Last-Modified: Tue, 10 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10693
Expires: Wed, 11 Jan 2023 07:01:46 GMT
Date: Wed, 11 Jan 2023 04:03:33 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash385fbe651dc747111b979f40f9583702 a69fa58ffc6e2b15222f17ad6345b2bec9d75106 c82b794c471d79568f5eee05529ceddbefc383ac0d035578da7bc3866062e5cc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C82B794C471D79568F5EEE05529CEDDBEFC383AC0D035578DA7BC3866062E5CC"
Last-Modified: Tue, 10 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3263
Expires: Wed, 11 Jan 2023 04:57:57 GMT
Date: Wed, 11 Jan 2023 04:03:34 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash385fbe651dc747111b979f40f9583702 a69fa58ffc6e2b15222f17ad6345b2bec9d75106 c82b794c471d79568f5eee05529ceddbefc383ac0d035578da7bc3866062e5cc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C82B794C471D79568F5EEE05529CEDDBEFC383AC0D035578DA7BC3866062E5CC"
Last-Modified: Tue, 10 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3263
Expires: Wed, 11 Jan 2023 04:57:57 GMT
Date: Wed, 11 Jan 2023 04:03:34 GMT
Connection: keep-alive
|
|
| www.affectionwave.com/ | 178.62.22.16 | 302 Found | 503 B |
IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
Hash385fbe651dc747111b979f40f9583702 a69fa58ffc6e2b15222f17ad6345b2bec9d75106 c82b794c471d79568f5eee05529ceddbefc383ac0d035578da7bc3866062e5cc
GET / HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ps.popcash.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 11 Jan 2023 04:03:34 GMT
content-type: text/html; charset=UTF-8
content-security-policy: frame-ancestors 'self'
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
set-cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; path=/; secure; HttpOnly
userReferrerUrl=ps.popcash.net; expires=Fri, 13-Jan-2023 04:03:34 GMT; Max-Age=172800; path=/; secure; HttpOnly
cache-control: max-age=0, private, must-revalidate, no-cache, private
location: /join
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdae53ed8-392a-4b15-b1e3-96999c5f49db.jpeg | 34.120.237.76 | 200 OK | 8.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdae53ed8-392a-4b15-b1e3-96999c5f49db.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashf8313b7aa2c2aec3d6744400fd2382b1 d67bf6707d6a8cc5a30bd74b7e54a8f0530919d4 c410b057ec9c2800fd6ecf4ede4224e8d18952d26847a8e18fa6d528c86c5068
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdae53ed8-392a-4b15-b1e3-96999c5f49db.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8824
x-amzn-requestid: e1c1dc5d-c378-46d5-b824-9592ec3ef357
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eXAQBHvMIAMFaoQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b913ff-1fb67eee5791cc466031ac7e;Sampled=0
x-amzn-remapped-date: Sat, 07 Jan 2023 06:41:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: twhBYS4Q4xOMgfqQ3k0upuegr1s7Xrkv4q7pxuL-fr-7NHpzSR29CQ==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Tue, 10 Jan 2023 08:06:14 GMT
age: 71840
etag: "d67bf6707d6a8cc5a30bd74b7e54a8f0530919d4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4bb42924-de42-4772-9668-d2cdea9ffc34.jpeg | 34.120.237.76 | 200 OK | 9.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4bb42924-de42-4772-9668-d2cdea9ffc34.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash88a5b6a852d2139e5a0d44aa0d199ed9 910accaca2e49f987a3aee63aa3ad8de8298a052 c35524983062df09cb7a323db476deebfd8c34c053d49d6651e17e9ca5ef561a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4bb42924-de42-4772-9668-d2cdea9ffc34.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9177
x-amzn-requestid: 147b1cb1-4b0c-4b26-adca-fd3a881e5fb0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: egZ_-H-vIAMFaoA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bcd6cc-048126f849e408c32ae7d289;Sampled=0
x-amzn-remapped-date: Tue, 10 Jan 2023 03:09:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Ifm0jbYd-s5tKF4v8pfkb1dGk-Z2ONoCZ8MQoZ690FzPkTs3I02Lpw==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Wed, 11 Jan 2023 03:37:45 GMT
age: 1549
etag: "910accaca2e49f987a3aee63aa3ad8de8298a052"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4da885e-af97-45cf-8aa1-1867db7d3381.jpeg | 34.120.237.76 | 200 OK | 3.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4da885e-af97-45cf-8aa1-1867db7d3381.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash36f19790a56d051ec79ac837bf8ee625 3a50370e7b5321826a85717d1164a76e510018ad e84237643e2d757be51f40e71c891e3c424709fa3a47b34e2e181275cb725844
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4da885e-af97-45cf-8aa1-1867db7d3381.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3462
x-amzn-requestid: 7a2e8620-e3e1-4429-bdc7-fa95b88cb7eb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eY6FUHckIAMFjUw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b9d6ee-6907fd97018a896951e608d8;Sampled=0
x-amzn-remapped-date: Sat, 07 Jan 2023 20:32:46 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: t9UD-opAIx1fepU5-3vLjmNMc6PEneTr6ggk52-WvEsP1gfJ_dIc9g==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 10 Jan 2023 20:50:03 GMT
age: 26011
etag: "3a50370e7b5321826a85717d1164a76e510018ad"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46d84cd2-721b-40d7-b8e1-1fe161bdedfb.jpeg | 34.120.237.76 | 200 OK | 7.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46d84cd2-721b-40d7-b8e1-1fe161bdedfb.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash6e211ec68c630d34f800b499ebed9f34 891dd8fe9abfd1c356a9ff1deb419d93f70327a2 2912aad74cada0118787bc0b90c418ab52275ba593a0c55194056f7f4b902360
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46d84cd2-721b-40d7-b8e1-1fe161bdedfb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7879
x-amzn-requestid: e49e38c2-5530-4b41-97b4-621fafc9f60c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ei8PaGcloAMFXpA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bdda62-430781673e3b84dd0cd04a5c;Sampled=0
x-amzn-remapped-date: Tue, 10 Jan 2023 21:36:34 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: fb7YVn_AVvax_7PRkPCXlV_r-9o8gf8oPbgy0wzukFjUVWqUvcRFeA==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Tue, 10 Jan 2023 21:44:14 GMT
age: 22760
etag: "891dd8fe9abfd1c356a9ff1deb419d93f70327a2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5465525-52bf-4e0d-8cb9-586996680af0.jpeg | 34.120.237.76 | 200 OK | 4.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5465525-52bf-4e0d-8cb9-586996680af0.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash88ecbdd13d6c1843b252f8199c80de05 a0e7e2983bf12644a0b10b44a1b1b6da59f1f7b5 e5d16fe0d61f7a65297b74d05f9eeb8a5110d4bd554ceaa072ad1ea9cef0c2d2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5465525-52bf-4e0d-8cb9-586996680af0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4610
x-amzn-requestid: 64423985-70ee-4beb-bba5-9f5ce91d04c4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ei75tHZuIAMFizg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bdd9d7-73867d087fea768a234731cd;Sampled=0
x-amzn-remapped-date: Tue, 10 Jan 2023 21:34:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: SpNQ6meFBHf4b2N59XHBeNs26rCCEDBUl4kNne-DNKLUFjhQ9meRrg==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 10 Jan 2023 21:42:06 GMT
age: 22888
etag: "a0e7e2983bf12644a0b10b44a1b1b6da59f1f7b5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46046bcb-aa12-467e-bdcb-ef3110cfe54c.jpeg | 34.120.237.76 | 200 OK | 5.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46046bcb-aa12-467e-bdcb-ef3110cfe54c.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash81ce31b226216f13dccb427a1f7d7d08 895596dd464a8dfdb56c1a2de449717f32bebb00 c03534962c1c48a141a20ad1d8917add556d88ca1523ca26309d0d173e1d1da9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46046bcb-aa12-467e-bdcb-ef3110cfe54c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5896
x-amzn-requestid: d6ea9fc0-97e0-45b4-ba7c-22e640d90223
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ecZ-bE0OIAMFoQg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bb3d28-5be1cefc353bc097418c2ea8;Sampled=0
x-amzn-remapped-date: Sun, 08 Jan 2023 22:01:12 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7NN8XoBzs9RprlXQHk1LIlpyvDDss_pb5yYuFXnh0IyUdClve2Ln_Q==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 10 Jan 2023 08:20:44 GMT
age: 70970
etag: "895596dd464a8dfdb56c1a2de449717f32bebb00"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash4475516cd46e5a73f3002f1fc9b68cc5 114957dbe1042296e6ea7542445dbee8d9084d82 08d1e5edf085d4051c346087631febfdb48ab158a5e337a8902bc07efb588394
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 11 Jan 2023 04:03:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.googletagmanager.com/gtag/js?id=UA-154588724-16 | 142.250.74.168 | 200 OK | 45 kB |
URL HTTP/2www.googletagmanager.com/gtag/js?id=UA-154588724-16 IP142.250.74.168:0
File typeASCII text, with very long lines (1759) Hash78b64a1777ef05f102106c352bf8649d 3825b7e900ae10d677e4717b08705b8fcdfdaf53 6b4ab8d0f1166e24387fa6d8cf72993d1245b8345ec69d1b65da7e9c45f6d143
GET /gtag/js?id=UA-154588724-16 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.affectionwave.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 11 Jan 2023 04:03:35 GMT
expires: Wed, 11 Jan 2023 04:03:35 GMT
cache-control: private, max-age=900
last-modified: Wed, 11 Jan 2023 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44804
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/static/assets/5b0b6082.js | 178.62.22.16 | 200 OK | 947 B |
URL HTTP/2www.affectionwave.com/static/assets/5b0b6082.js IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
File typeASCII text, with very long lines (758) Hash217ab83d210545e7d1017884c091a515 28df17bdf32cd033c8577aa60a9e44a6d3eb5ebe ce8586abe7b6487475289d430525307d427daf803ec9d2fce6a77d0647a858a9
GET /static/assets/5b0b6082.js HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: application/javascript
last-modified: Mon, 08 Aug 2022 13:05:53 GMT
etag: W/"62f10a31-666"
access-control-allow-origin: *
expires: Fri, 10 Feb 2023 04:03:35 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/static/assets/5497bff0.js | 178.62.22.16 | 200 OK | 22 kB |
URL HTTP/2www.affectionwave.com/static/assets/5497bff0.js IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
File typeASCII text, with very long lines (2092) Hashb2b8a7e6a2d6c4e5612df9af6af9b79e 852e937eafbb59892659698be413c34e2a7979e8 8c5f1af166bab14d6b44b68612e4d6e807d5ac1a23b52372738113c28cabec7c
GET /static/assets/5497bff0.js HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: application/javascript
last-modified: Mon, 08 Aug 2022 13:05:47 GMT
etag: W/"62f10a2b-cb1"
access-control-allow-origin: *
expires: Fri, 10 Feb 2023 04:03:35 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/resources/get/4/8d7168c75f888f4e8f6d2cfebaa7029f | 178.62.22.16 | 200 OK | 60 kB |
URL HTTP/2www.affectionwave.com/resources/get/4/8d7168c75f888f4e8f6d2cfebaa7029f IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x400, components 3\012- data Hash671bb7e0b814e1e7e0dec78bfc95a75d 5d80d8bcb19cce491294db284b3117b328f57526 64c2ee32c7dab39977aff24d150a85558d84c6c3a7bc52d8cc3d70fb7506148c
GET /resources/get/4/8d7168c75f888f4e8f6d2cfebaa7029f HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: image/jpeg
content-security-policy: frame-ancestors 'self'
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
cache-control: max-age=86400, private
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/static/assets/234d5225.js | 178.62.22.16 | 200 OK | 74 kB |
URL HTTP/2www.affectionwave.com/static/assets/234d5225.js IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
File typeASCII text, with very long lines (65447) Hashc4d02cf3a8a99d772b7d98d03c0c2b29 b12c363270ec09a765b8767a87fa13930218e849 f833ba8e3c979a49360df070cfe3e0c5b804063e6b82d3e233bf1a37efa5169c
GET /static/assets/234d5225.js HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: application/javascript
last-modified: Tue, 10 Jan 2023 13:13:26 GMT
etag: W/"63bd6476-24bd9"
access-control-allow-origin: *
expires: Fri, 10 Feb 2023 04:03:35 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/static/assets/949c3926.js | 178.62.22.16 | 200 OK | 735 B |
URL HTTP/2www.affectionwave.com/static/assets/949c3926.js IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
File typeASCII text, with very long lines (558) Hashea485c45b138c903fc2635f471fb31e5 927e1ed474275fd982757b5ab8008bf5bf02a9a7 938bbe0033ff3a29c61ebc045927e97c3110b845311957a5dfd1915c1e798f6b
GET /static/assets/949c3926.js HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: application/javascript
last-modified: Mon, 08 Aug 2022 13:05:53 GMT
etag: W/"62f10a31-248"
access-control-allow-origin: *
expires: Fri, 10 Feb 2023 04:03:35 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/analytics.js | 142.250.74.14 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.14:0
File typeASCII text, with very long lines (1325) Hash47e6f374ca946fddd5b59871b325736c baa9282efc8785e84d247c3bff518eaa45f101c4 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.affectionwave.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Wed, 11 Jan 2023 02:21:55 GMT
expires: Wed, 11 Jan 2023 04:21:55 GMT
cache-control: public, max-age=7200
age: 6100
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash39e74fee23bd195e2926cf5241f2fca5 a3361a128141f84053b85994e1a3b2f3e9c9d979 aaa2168872731f90ab7c5d5e98dc17660973582d1b157f4e4a3be4939e99b7e7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 11 Jan 2023 04:03:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.affectionwave.com/static/assets/fa6902f0.js | 178.62.22.16 | 200 OK | 46 kB |
URL HTTP/2www.affectionwave.com/static/assets/fa6902f0.js IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
File typeASCII text, with very long lines (769) Hashb80da3ed92334fb69638c409d5525114 1169600c51db6b12e8a0c8e651e06f5812060328 1a7afcf4cb736d68a807f0318891dcfb989024157eff3707b6778d8ac6b31aeb
GET /static/assets/fa6902f0.js HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: application/javascript
last-modified: Mon, 08 Aug 2022 13:05:47 GMT
etag: W/"62f10a2b-402"
access-control-allow-origin: *
expires: Fri, 10 Feb 2023 04:03:35 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/static/js/jquery.autocomplete.js?v=5637 | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/static/js/jquery.autocomplete.js?v=5637 IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /static/js/jquery.autocomplete.js?v=5637 HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: application/javascript
last-modified: Thu, 15 Sep 2022 08:55:25 GMT
etag: W/"6322e87d-43b2"
access-control-allow-origin: *
expires: Fri, 10 Feb 2023 04:03:35 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/resources/get/4/39100eb00726207674808593babbf9e2 | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/resources/get/4/39100eb00726207674808593babbf9e2 IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /resources/get/4/39100eb00726207674808593babbf9e2 HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: image/jpeg
content-security-policy: frame-ancestors 'self'
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
cache-control: max-age=86400, private
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/resources/get/4/c1321eb5f027095b5c50f520a56fed23 | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/resources/get/4/c1321eb5f027095b5c50f520a56fed23 IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /resources/get/4/c1321eb5f027095b5c50f520a56fed23 HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: image/jpeg
content-security-policy: frame-ancestors 'self'
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
cache-control: max-age=86400, private
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/static/assets/2409f906.js | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/static/assets/2409f906.js IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /static/assets/2409f906.js HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: application/javascript
last-modified: Mon, 08 Aug 2022 13:05:53 GMT
etag: W/"62f10a31-2325"
access-control-allow-origin: *
expires: Fri, 10 Feb 2023 04:03:35 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/static/assets/c247a8e1.js | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/static/assets/c247a8e1.js IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /static/assets/c247a8e1.js HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: application/javascript
last-modified: Mon, 08 Aug 2022 13:05:47 GMT
etag: W/"62f10a2b-947"
access-control-allow-origin: *
expires: Fri, 10 Feb 2023 04:03:35 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/root.css | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/root.css IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /root.css HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: text/css;charset=UTF-8
content-security-policy: frame-ancestors 'self'
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
cache-control: max-age=86400, private
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/static/_wl_traditional/_wl_skin_compliance_/js/3.bundle.js | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/static/_wl_traditional/_wl_skin_compliance_/js/3.bundle.js IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /static/_wl_traditional/_wl_skin_compliance_/js/3.bundle.js HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: application/javascript
last-modified: Fri, 09 Dec 2022 16:54:44 GMT
etag: W/"63936854-be5f"
access-control-allow-origin: *
expires: Fri, 10 Feb 2023 04:03:35 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/static/assets/63f0b6bf.css | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/static/assets/63f0b6bf.css IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /static/assets/63f0b6bf.css HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: text/css
last-modified: Mon, 08 Aug 2022 13:05:53 GMT
etag: W/"62f10a31-ae0"
access-control-allow-origin: *
expires: Fri, 10 Feb 2023 04:03:35 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/static/_dating/_default/s/payment-logos.css | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/static/_dating/_default/s/payment-logos.css IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /static/_dating/_default/s/payment-logos.css HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: text/css
last-modified: Thu, 14 Jul 2022 10:16:05 GMT
etag: W/"62cfece5-c79"
access-control-allow-origin: *
expires: Fri, 10 Feb 2023 04:03:35 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/site/captcha | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/site/captcha IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /site/captcha HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: text/html; charset=UTF-8
content-security-policy: frame-ancestors 'self'
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/static/assets/fbf73bde.css | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/static/assets/fbf73bde.css IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /static/assets/fbf73bde.css HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: text/css
last-modified: Mon, 08 Aug 2022 13:05:53 GMT
etag: W/"62f10a31-1ba5"
access-control-allow-origin: *
expires: Fri, 10 Feb 2023 04:03:35 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/static/assets/e13eeaf7.js | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/static/assets/e13eeaf7.js IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /static/assets/e13eeaf7.js HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: application/javascript
last-modified: Thu, 17 Nov 2022 09:23:46 GMT
etag: W/"6375fda2-1fc6"
access-control-allow-origin: *
expires: Fri, 10 Feb 2023 04:03:35 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/resources/get/4/4b1cf29a1d9833888ce9a3fa87ebff68 | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/resources/get/4/4b1cf29a1d9833888ce9a3fa87ebff68 IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /resources/get/4/4b1cf29a1d9833888ce9a3fa87ebff68 HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: image/jpeg
content-security-policy: frame-ancestors 'self'
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
cache-control: max-age=86400, private
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/static/assets/37e7367d.js | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/static/assets/37e7367d.js IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /static/assets/37e7367d.js HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: application/javascript
last-modified: Mon, 08 Aug 2022 13:05:53 GMT
etag: W/"62f10a31-37b"
access-control-allow-origin: *
expires: Fri, 10 Feb 2023 04:03:35 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/js/messages/no/messages_jquery_jab.js | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/js/messages/no/messages_jquery_jab.js IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /js/messages/no/messages_jquery_jab.js HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: text/javascript;charset=UTF-8
content-security-policy: frame-ancestors 'self'
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
cache-control: max-age=2592000, private
last-modified: Thu, 01 Jan 1970 01:33:57 GMT
expires: Fri, 10 Feb 2023 04:03:35 GMT
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/static/assets/4049ba9b.css | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/static/assets/4049ba9b.css IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /static/assets/4049ba9b.css HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: text/css
last-modified: Tue, 06 Dec 2022 08:52:50 GMT
etag: W/"638f02e2-cb28"
access-control-allow-origin: *
expires: Fri, 10 Feb 2023 04:03:35 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/static/assets/be5b1fa8.css | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/static/assets/be5b1fa8.css IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /static/assets/be5b1fa8.css HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: text/css
last-modified: Wed, 19 Oct 2022 14:02:14 GMT
etag: W/"63500366-10df"
access-control-allow-origin: *
expires: Fri, 10 Feb 2023 04:03:35 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/static/assets/770ad0e4.js | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/static/assets/770ad0e4.js IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /static/assets/770ad0e4.js HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: application/javascript
last-modified: Mon, 08 Aug 2022 13:05:53 GMT
etag: W/"62f10a31-8b6"
access-control-allow-origin: *
expires: Fri, 10 Feb 2023 04:03:35 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/resources/logo | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/resources/logo IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /resources/logo HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: image/png
content-security-policy: frame-ancestors 'self'
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
cache-control: max-age=86400, private
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/static/assets/e529ff93.js | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/static/assets/e529ff93.js IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /static/assets/e529ff93.js HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: application/javascript
last-modified: Fri, 09 Dec 2022 16:54:47 GMT
etag: W/"63936857-20f30"
access-control-allow-origin: *
expires: Fri, 10 Feb 2023 04:03:35 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/static/assets/1f197a76.css | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/static/assets/1f197a76.css IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /static/assets/1f197a76.css HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: text/css
last-modified: Tue, 06 Dec 2022 08:52:51 GMT
etag: W/"638f02e3-5d1"
access-control-allow-origin: *
expires: Fri, 10 Feb 2023 04:03:35 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/static/assets/203b1fe7.css | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/static/assets/203b1fe7.css IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /static/assets/203b1fe7.css HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: text/css
last-modified: Tue, 06 Dec 2022 08:52:50 GMT
etag: W/"638f02e2-141b"
access-control-allow-origin: *
expires: Fri, 10 Feb 2023 04:03:35 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/static/_wl_traditional/_wl_skin_compliance_/js/6.bundle.js | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/static/_wl_traditional/_wl_skin_compliance_/js/6.bundle.js IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /static/_wl_traditional/_wl_skin_compliance_/js/6.bundle.js HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: application/javascript
last-modified: Fri, 09 Dec 2022 16:54:44 GMT
etag: W/"63936854-1ee3"
access-control-allow-origin: *
expires: Fri, 10 Feb 2023 04:03:35 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/resources/get/4/1a1def99fcc6d5942a5dd7639de1533d | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/resources/get/4/1a1def99fcc6d5942a5dd7639de1533d IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /resources/get/4/1a1def99fcc6d5942a5dd7639de1533d HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: image/jpeg
content-security-policy: frame-ancestors 'self'
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
cache-control: max-age=86400, private
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/resources/get/4/cc9166cd2f801d8aeac627092b2c813f | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/resources/get/4/cc9166cd2f801d8aeac627092b2c813f IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /resources/get/4/cc9166cd2f801d8aeac627092b2c813f HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: image/jpeg
content-security-policy: frame-ancestors 'self'
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
cache-control: max-age=86400, private
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/static/assets/f56f0d59.css | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/static/assets/f56f0d59.css IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /static/assets/f56f0d59.css HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: text/css
last-modified: Mon, 08 Aug 2022 13:05:53 GMT
etag: W/"62f10a31-f80"
access-control-allow-origin: *
expires: Fri, 10 Feb 2023 04:03:35 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/static/assets/211b41b8.css | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/static/assets/211b41b8.css IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /static/assets/211b41b8.css HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: text/css
last-modified: Mon, 08 Aug 2022 13:05:53 GMT
etag: W/"62f10a31-892"
access-control-allow-origin: *
expires: Fri, 10 Feb 2023 04:03:35 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/static/assets/95d6c938.js | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/static/assets/95d6c938.js IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /static/assets/95d6c938.js HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: application/javascript
last-modified: Mon, 08 Aug 2022 13:05:53 GMT
etag: W/"62f10a31-312"
access-control-allow-origin: *
expires: Fri, 10 Feb 2023 04:03:35 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/static/assets/f67027d8.js | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/static/assets/f67027d8.js IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /static/assets/f67027d8.js HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: application/javascript
last-modified: Mon, 08 Aug 2022 13:05:53 GMT
etag: W/"62f10a31-c7"
access-control-allow-origin: *
expires: Fri, 10 Feb 2023 04:03:35 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/join | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/join IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /join HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ps.popcash.net/
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:34 GMT
content-type: text/html; charset=UTF-8
content-security-policy: frame-ancestors 'self'
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
cache-control: max-age=0, private, must-revalidate, no-cache, private
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/static/assets/1d9702dc.css | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/static/assets/1d9702dc.css IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /static/assets/1d9702dc.css HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: text/css
last-modified: Wed, 19 Oct 2022 14:02:14 GMT
etag: W/"63500366-581"
access-control-allow-origin: *
expires: Fri, 10 Feb 2023 04:03:35 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/static/assets/dd6a3ac9.css | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/static/assets/dd6a3ac9.css IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /static/assets/dd6a3ac9.css HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: text/css
last-modified: Thu, 06 Oct 2022 08:42:53 GMT
etag: W/"633e950d-bfe0"
access-control-allow-origin: *
expires: Fri, 10 Feb 2023 04:03:35 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/static/assets/1e194476.js | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/static/assets/1e194476.js IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /static/assets/1e194476.js HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: application/javascript
last-modified: Tue, 10 Jan 2023 13:13:26 GMT
etag: W/"63bd6476-baf"
access-control-allow-origin: *
expires: Fri, 10 Feb 2023 04:03:35 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/js/messages/no/messages_notifications.js | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/js/messages/no/messages_notifications.js IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /js/messages/no/messages_notifications.js HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: text/javascript;charset=UTF-8
content-security-policy: frame-ancestors 'self'
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
cache-control: max-age=2592000, private
last-modified: Thu, 01 Jan 1970 01:33:57 GMT
expires: Fri, 10 Feb 2023 04:03:35 GMT
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/static/assets/9ca75e15.css | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/static/assets/9ca75e15.css IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /static/assets/9ca75e15.css HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: text/css
last-modified: Mon, 08 Aug 2022 13:05:53 GMT
etag: W/"62f10a31-549"
access-control-allow-origin: *
expires: Fri, 10 Feb 2023 04:03:35 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.affectionwave.com/static/assets/24e5e0b3.js | 178.62.22.16 | 200 OK | 0 B |
URL HTTP/2www.affectionwave.com/static/assets/24e5e0b3.js IP178.62.22.16:0 ASN#14061 DIGITALOCEAN-ASN
GET /static/assets/24e5e0b3.js HTTP/1.1
Host: www.affectionwave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.affectionwave.com/join
Connection: keep-alive
Cookie: PHPSESSID=buomtdjuclq520iubiduk2g298g47b1tsfqci4c5; userReferrerUrl=ps.popcash.net
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 04:03:35 GMT
content-type: application/javascript
last-modified: Wed, 19 Oct 2022 14:02:14 GMT
etag: W/"63500366-a76d"
access-control-allow-origin: *
expires: Fri, 10 Feb 2023 04:03:35 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
|
|
0.0.0.0