| GET fingerprinting36542.s3.us-east-1.amazonaws.com/fingerprint.js | 52.216.28.96 | 200 OK | 38 kB |
URL GET fingerprinting36542.s3.us-east-1.amazonaws.com/fingerprint.js IP 52.216.28.96:443
Requested byhttps://lootdest.com/s?COpA CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint94:6E:24:DA:38:A4:1B:D7:08:C5:38:4D:E4:0F:23:5C:25:6C:07:22 ValidityTue, 20 May 2025 00:00:00 GMT - Fri, 15 May 2026 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (38136), with no line terminators Hash9ac06ba71cc5803c7515b3e8c3a2854d 03ba918aad85dda720c6f46267eb4fba9103aac3 6cf24eed847d975853348f50d95b192ac37a4c49e96d8888af6dd2e15631a1fd
GET /fingerprint.js HTTP/1.1
Host: fingerprinting36542.s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lootdest.com
DNT: 1
Connection: keep-alive
Referer: https://lootdest.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: pK5BTDPfGjV0GCC/rMJOtNUQdq0RVYrudLxLa0zCTs/M/U250aYl1W3e38QnDbnz8Rv5Y3U+kO4=
x-amz-request-id: W74VBFCAF4T01E59
Date: Mon, 09 Jun 2025 23:34:14 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, POST, DELETE
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
Last-Modified: Mon, 09 Dec 2024 12:08:59 GMT
ETag: "9ac06ba71cc5803c7515b3e8c3a2854d"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/javascript
Content-Length: 38143
Server: AmazonS3
|
|
| OPTIONS nerventualken.com/tc | 172.67.197.84 | 200 OK | 0 B |
IP 172.67.197.84:443
Requested byhttps://lootdest.com/s?COpA CertificateIssuerGoogle Trust Services Subjectnerventualken.com FingerprintBB:5A:D8:D6:24:80:4E:D6:AD:D5:BC:83:1F:7D:C1:C9:BA:26:27:9D ValiditySun, 25 May 2025 04:53:39 GMT - Sat, 23 Aug 2025 05:52:00 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /tc HTTP/1.1
Host: nerventualken.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://lootdest.com/
Origin: https://lootdest.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 09 Jun 2025 23:34:13 GMT
content-type: application/json
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
access-control-allow-origin: https://lootdest.com
access-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-methods: POST, GET, OPTIONS, HEAD
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=0MAqL1S%2FBFu6Xr%2BJYfdL8oSkruanyJHz%2FZr359lTltC08k%2B2BEl%2B2YO05IzksxCRfcbZcLEKFPrzfmTbd6M2FVzyEDY6h4uBJQjgaAo7xw%3D%3D"}]}
content-encoding: br
set-cookie: ci=1694904790454255; SameSite=None; Secure; Max-Age=86400
cf-ray: 94d4703bee605687-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET pagead2.googlesyndication.com/pagead/js/adsbygoogle.js | 142.250.178.98 | 200 OK | 163 kB |
URL GET pagead2.googlesyndication.com/pagead/js/adsbygoogle.js IP 142.250.178.98:443
Requested byhttps://lootdest.com/s?COpA CertificateIssuerGoogle Trust Services Subject*.g.doubleclick.net FingerprintCB:D6:DD:24:49:A1:05:33:C4:D6:0A:04:6A:88:75:11:64:1B:56:6D ValidityMon, 12 May 2025 08:42:57 GMT - Mon, 04 Aug 2025 08:42:56 GMT
File typeJavaScript source, ASCII text, with very long lines (4327) Size163 kB (163214 bytes) Hash664bcc1f56f842af06345cbe28f30001 a23721993e9ac7d52e1a4cf3df878ffe54e30739 7d145437969d4eaf4c7426115d6d6e07881d9713159663db6224cdba63c1d169
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lootdest.com/
Origin: https://lootdest.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
link: <https://googleads.g.doubleclick.net>; rel="preconnect"; crossorigin
vary: Accept-Encoding
date: Mon, 09 Jun 2025 23:34:13 GMT
expires: Mon, 09 Jun 2025 23:34:13 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: text/javascript; charset=UTF-8
etag: 15168752366289282786
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 53688
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET fonts.googleapis.com/css2?family=Play:wght@400;700&display=swap | 142.250.74.10 | 200 OK | 4.2 kB |
URL GET fonts.googleapis.com/css2?family=Play:wght@400;700&display=swap IP 142.250.74.10:443
Requested byhttps://lootdest.com/s?COpA CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint1C:09:46:89:AD:F3:B6:3E:B4:89:F7:49:AC:15:E7:4E:A6:D2:AA:73 ValidityMon, 12 May 2025 08:44:01 GMT - Mon, 04 Aug 2025 08:44:00 GMT
Hash514d99a714b4c23c7ec96adfe23c1d60 9331e81302450cfdc5630f65f7b7147e62e4c0f8 75a40a0c833b14ae64f9f9b74629da9d8b9cd98b4fde1dce379773a84838016b
GET /css2?family=Play:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lootdest.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 09 Jun 2025 23:34:12 GMT
date: Mon, 09 Jun 2025 23:34:12 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET lootdest.com/1.js | 104.21.89.193 | 200 OK | 79 kB |
IP 104.21.89.193:443
Requested byhttps://lootdest.com/s?COpA CertificateIssuerGoogle Trust Services Subjectlootdest.com Fingerprint29:E5:7B:AA:66:E3:51:8D:AE:6C:00:96:AB:B8:A3:B2:7D:92:32:E0 ValidityWed, 30 Apr 2025 16:46:46 GMT - Tue, 29 Jul 2025 17:45:00 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashd06637468470743268dc79049109a0c1 ddf05813144e71a14dab9d52be736b51be4ebd40 98049444b675963b84cd62ce2c453887f1362513ad86e117bde51200607305d8
GET /1.js HTTP/1.1
Host: lootdest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lootdest.com/s?COpA
Cookie: uid=YLKAWEByJA5NB8QA8Rl9h6IVYiTujtks
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 09 Jun 2025 23:34:12 GMT
content-type: application/javascript
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
last-modified: Mon, 09 Jun 2025 20:00:00 GMT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=qzJN0uOKGLU66Ob%2BojDzzfbigIODpQIpkt%2FQFT%2B3CDX%2BfCIdQyNjsK9WpNGihnHwWDr5kGxXkt0XNpk6wDuaFoqFH%2B7cGsdEjWo%3D"}]}
cache-control: max-age=14400
cf-cache-status: EXPIRED
etag: W/"68473d40-13549"
content-encoding: br
cf-ray: 94d470363df1b4f3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET d2vptth0euqbxm.cloudfront.net/?tid=1001651¶ms_only=1 | 54.230.245.64 | 200 OK | 601 B |
URL GET d2vptth0euqbxm.cloudfront.net/?tid=1001651¶ms_only=1 IP 54.230.245.64:443
Requested byhttps://lootdest.com/s?COpA CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72 ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File typeASCII text, with very long lines (601), with no line terminators Hash9f181d6749691c4eefa63587cc9fe940 cae8bed54437d9e45bdabfe356ee0536352b63af 90c90cbd89361bae6236649912af7fb0eb4e2a21dcd7b911b663790b72e727b8
GET /?tid=1001651¶ms_only=1 HTTP/1.1
Host: d2vptth0euqbxm.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lootdest.com/
Origin: https://lootdest.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 353
date: Mon, 09 Jun 2025 23:34:12 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://lootdest.com
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jS5g2GwDI8IC4Oees52wEsi6sqO0kzPMXUOd13LmlpFUHF1dxY690g==
X-Firefox-Spdy: h2
|
|
| GET lootdest.com/favicon.ico | 104.21.89.193 | 404 Not Found | 159 B |
IP 104.21.89.193:443
Requested byhttps://lootdest.com/s?COpA CertificateIssuerGoogle Trust Services Subjectlootdest.com Fingerprint29:E5:7B:AA:66:E3:51:8D:AE:6C:00:96:AB:B8:A3:B2:7D:92:32:E0 ValidityWed, 30 Apr 2025 16:46:46 GMT - Tue, 29 Jul 2025 17:45:00 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash707a6bf80b2aae914a3475cb829e534b 2e70d81cf7a8b2c2bf66521e720969d1e92f3819 20703cc00e86bed52bb9af00fac1cbd8c3dc16c2866b7251288325f1501c8755
GET /favicon.ico HTTP/1.1
Host: lootdest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lootdest.com/s?COpA
Cookie: uid=YLKAWEByJA5NB8QA8Rl9h6IVYiTujtks
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Mon, 09 Jun 2025 23:34:12 GMT
content-type: text/html
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gp4HZ5XbFV7oQATkNJWRTzL7MsNPmjBcDPZ95RkxruBzuV%2Bc0tKU2KRpZcGULUW0sdOA9ABzcwZjbNLjWAXzEGi8d1YgMmLm3mddDOBCMJcNxeXNLBFL4us8%2FSaK21M%3D"}],"group":"cf-nel","max_age":604800}
cache-control: max-age=14400
cf-cache-status: EXPIRED
content-encoding: br
cf-ray: 94d470397efe712b-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3299&min_rtt=661&rtt_var=2028&sent=213&recv=276&lost=0&retrans=0&sent_bytes=14733&recv_bytes=15179&delivery_rate=452169&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=12000&unsent_bytes=0&cid=058a65442d798471&ts=1032&inflight_dur=34&x=80"
|
|
| GET lootdest.com/unlocker.png | 104.21.89.193 | 200 OK | 31 kB |
URL GET lootdest.com/unlocker.png IP 104.21.89.193:443
Requested byhttps://lootdest.com/s?COpA CertificateIssuerGoogle Trust Services Subjectlootdest.com Fingerprint29:E5:7B:AA:66:E3:51:8D:AE:6C:00:96:AB:B8:A3:B2:7D:92:32:E0 ValidityWed, 30 Apr 2025 16:46:46 GMT - Tue, 29 Jul 2025 17:45:00 GMT
File typePNG image data, 246 x 246, 8-bit/color RGBA, non-interlaced Hashaa3e9ab7989d9c695c98fc750957670d 4022d553f4952fa7c7b57f00942b202354b66acb 5e0813c96779ef092cefc6e77fa90de7a86e307f04bd6d64f9d37a5d9a8fb4e0
GET /unlocker.png HTTP/1.1
Host: lootdest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lootdest.com/s?COpA
Cookie: uid=YLKAWEByJA5NB8QA8Rl9h6IVYiTujtks
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 09 Jun 2025 23:34:14 GMT
content-type: image/png
content-length: 31030
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jOB46MeoW6m5Q54HWewsPc4o5SUgJu3%2FH0oNs0nTErIRnAxRY4fqMVcCoXnnkpUEJjeU4uAM3dHOod32f%2BgBr8D0MI8%2B0el6u%2F7gGiMsKP1LxCrUOQNOY753ZOyjFMk%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Mon, 09 Jun 2025 21:00:01 GMT
etag: "68474b51-7936"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 94d47042bf21712b-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3032&min_rtt=661&rtt_var=2056&sent=215&recv=278&lost=0&retrans=0&sent_bytes=15542&recv_bytes=15804&delivery_rate=452169&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=12000&unsent_bytes=0&cid=058a65442d798471&ts=2490&inflight_dur=55&x=80"
|
|
| GET unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js | 104.18.0.22 | 302 Found | 384 kB |
URL GET unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js IP 104.18.0.22:443
Requested byhttps://lootdest.com/s?COpA CertificateIssuerGoogle Trust Services Subjectunpkg.com Fingerprint6A:50:E9:D4:F9:DB:BA:3A:76:D2:D3:E2:A2:6D:16:12:07:9D:D4:DA ValidityTue, 29 Apr 2025 07:12:06 GMT - Mon, 28 Jul 2025 08:12:03 GMT
Size384 kB (383981 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /@lottiefiles/lottie-player@latest/dist/lottie-player.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lootdest.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 09 Jun 2025 23:34:14 GMT
content-type: text/plain;charset=UTF-8
content-length: 71
location: /@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=300
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 94d47042eeb956bd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET wss://0.onsultingco.com/c?uid=192966158684688527&cat=2&key=877336493324667265&session_id=694093600803426350&is_loot=1&tid=1001651 | 104.21.41.244 | 101 Switching Protocols | 0 B |
URL GET wss://0.onsultingco.com/c?uid=192966158684688527&cat=2&key=877336493324667265&session_id=694093600803426350&is_loot=1&tid=1001651 IP 104.21.41.244:443
Requested byhttps://lootdest.com/s?COpA CertificateIssuerGoogle Trust Services Subjectonsultingco.com Fingerprint23:85:09:32:8F:1C:85:8D:3F:B0:1F:10:07:6C:F9:CF:A9:36:1C:31 ValidityMon, 02 Jun 2025 09:11:55 GMT - Sun, 31 Aug 2025 10:09:40 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c?uid=192966158684688527&cat=2&key=877336493324667265&session_id=694093600803426350&is_loot=1&tid=1001651 HTTP/1.1
Host: 0.onsultingco.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://lootdest.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 5z+LIiVQdd3RubiZtX2A6g==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Mon, 09 Jun 2025 23:34:26 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Dp7tBnhJxLWYNehP37b2qJXDLpg=
cf-cache-status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LcO0p3ZagiIOAWbKOfBI167EvPoYe0A5lQLJTDGQduVnsyPpgwB1C5Q9TP94gyJI%2B4ZvMScGSAwOk1PSU1LYn9JctpNxMa4dIoEtaAevtCo1E1a1zJGrjPR4v69ycBGJCvdUGw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 94d470907ec45689-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=591&min_rtt=577&rtt_var=130&sent=5&recv=8&lost=0&retrans=0&sent_bytes=3121&recv_bytes=1261&delivery_rate=7387755&cwnd=252&unsent_bytes=0&cid=596079bcfe6d2fd6&ts=270&x=0"
|
|
| GET curyrentattrib.info/ptr?i=2ad8db2ee12908f | 108.157.229.66 | 200 OK | 0 B |
URL GET curyrentattrib.info/ptr?i=2ad8db2ee12908f IP 108.157.229.66:443
Requested byhttps://lootdest.com/s?COpA CertificateIssuerAmazon Subjectcuryrentattrib.info Fingerprint59:27:69:60:40:E5:09:5F:8D:43:42:6A:3E:C2:BE:5F:CA:CE:05:70 ValiditySat, 29 Mar 2025 00:00:00 GMT - Mon, 27 Apr 2026 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ptr?i=2ad8db2ee12908f HTTP/1.1
Host: curyrentattrib.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lootdest.com/
Origin: https://lootdest.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain
content-length: 0
date: Mon, 09 Jun 2025 23:34:26 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=X1CzRCQ8Vukkco4qF44JNN4wQwbhTC7cpVKqnmg/S9+hj8xB+GO/XsLd9LMgDwkLUv6xVIbLw5gk2Q+NV3yxwcpYjz4q14cuGQudW/Q8fHXdk6hXl3wJeA4ToRul; Expires=Mon, 16 Jun 2025 23:34:26 GMT; Path=/
AWSALBCORS=X1CzRCQ8Vukkco4qF44JNN4wQwbhTC7cpVKqnmg/S9+hj8xB+GO/XsLd9LMgDwkLUv6xVIbLw5gk2Q+NV3yxwcpYjz4q14cuGQudW/Q8fHXdk6hXl3wJeA4ToRul; Expires=Mon, 16 Jun 2025 23:34:26 GMT; Path=/; SameSite=None
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://lootdest.com
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
x-cache: Miss from cloudfront
via: 1.1 b301fa8d72072cc0289eb055d8389e68.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: wnj1bv3p5FCOhhnfWoqEK2PGIrWhYSdYbv8atCJLwxEYmsYkV5yNOQ==
X-Firefox-Spdy: h2
|
|
| | 104.21.89.193 | 200 OK | 22 kB |
IP 104.21.89.193:443
CertificateIssuerGoogle Trust Services Subjectlootdest.com Fingerprint29:E5:7B:AA:66:E3:51:8D:AE:6C:00:96:AB:B8:A3:B2:7D:92:32:E0 ValidityWed, 30 Apr 2025 16:46:46 GMT - Tue, 29 Jul 2025 17:45:00 GMT
File typeHTML document, ASCII text, with very long lines (3884) Hash5c978e0b7948a94b6749ef45f440352e 872577348694956b9cc234fcb7b9970a467354ea b5aea42bd2f0cce007f3e5140d5f6da371e86bf4befd2f175e5ce48965583680
GET /s?COpA HTTP/1.1
Host: lootdest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 09 Jun 2025 23:34:11 GMT
content-type: text/html
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
access-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-methods: POST, GET, OPTIONS, HEAD
access-control-allow-credentials: true
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=1jW5iNYmr6ibkZpnUxEAMqu5qbEN1%2FV1sHlzurJNylwA0%2F1aoSyHY9%2BHuc7WZC2b%2BEXi6OLYLob%2BBf5m%2Fck%2B8vMywW7%2BY23trNs%3D"}]}
cf-cache-status: DYNAMIC
content-encoding: br
set-cookie: uid=YLKAWEByJA5NB8QA8Rl9h6IVYiTujtks; Secure; Path=/; Expires=Tue, 09 Jun 2026 23:34:11 GMT
cf-ray: 94d470303a5bb4f3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET lootdest.com/qr.png | 104.21.89.193 | 200 OK | 7.2 kB |
IP 104.21.89.193:443
Requested byhttps://lootdest.com/s?COpA CertificateIssuerGoogle Trust Services Subjectlootdest.com Fingerprint29:E5:7B:AA:66:E3:51:8D:AE:6C:00:96:AB:B8:A3:B2:7D:92:32:E0 ValidityWed, 30 Apr 2025 16:46:46 GMT - Tue, 29 Jul 2025 17:45:00 GMT
File typePNG image data, 1160 x 1160, 8-bit/color RGB, non-interlaced Hasha93ba4860dc42551669d1c44999d6219 f42f4d71fa233d571ec60e8998b15772eedf9b6c bdd20de2c3c9af1e3df3ac71b2a52de1704c06e3bf2885db0a48423380f559cb
GET /qr.png HTTP/1.1
Host: lootdest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lootdest.com/s?COpA
Cookie: uid=YLKAWEByJA5NB8QA8Rl9h6IVYiTujtks
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 09 Jun 2025 23:34:14 GMT
content-type: image/png
content-length: 7224
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ByqzFQ7bXYzQJk63Jzvry5eYPmLHVogAp%2ByyjaDx3R7M05eGmw5Ms%2B1a9sDTtjs5IZAQE3ATBVpy13pXC1ibO8w66afIN5QTbbVnH76fipN3qYKVZhVqaV3u0TsAX48%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Mon, 09 Jun 2025 20:00:00 GMT
etag: "68473d40-1c38"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 94d47042bf22712b-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2806&min_rtt=661&rtt_var=1993&sent=243&recv=279&lost=0&retrans=0&sent_bytes=48018&recv_bytes=15848&delivery_rate=7380659&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=24000&unsent_bytes=0&cid=058a65442d798471&ts=2494&inflight_dur=56&x=80"
|
|
| GET unpkg.com/@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js | 104.18.0.22 | 200 OK | 384 kB |
URL GET unpkg.com/@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js IP 104.18.0.22:443
Requested byhttps://lootdest.com/s?COpA CertificateIssuerGoogle Trust Services Subjectunpkg.com Fingerprint6A:50:E9:D4:F9:DB:BA:3A:76:D2:D3:E2:A2:6D:16:12:07:9D:D4:DA ValidityTue, 29 Apr 2025 07:12:06 GMT - Mon, 28 Jul 2025 08:12:03 GMT
File typeJavaScript source, ASCII text, with very long lines (27447) Size384 kB (383981 bytes) Hashbc1ccb003c8dbdb1f75efa1fd38362bf 8ae598f92b85ef618e90e0129d57fb94c8f6c3b8 b396c6847f916f93b353dddc9245b056ad900d115cfb589e7909ba996eaf70af
GET /@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lootdest.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 09 Jun 2025 23:34:14 GMT
content-type: text/javascript; charset=utf-8
cf-ray: 94d470432ee356bd-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 510898
cache-control: public, max-age=31536000
expires: Tue, 09 Jun 2026 23:34:14 GMT
last-modified: Tue, 29 Apr 2025 17:16:14 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
via: 1.1 fly.io, 1.1 fly.io
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-expose-headers: *
content-digest: sha256=:s5bGhH+Rb5OzU93ckkWwVq2QDRFc+1ieeQm6mW6vcK8=:
cross-origin-resource-policy: cross-origin
fly-request-id: 01JT18S4QMXBPS96PSFS1JWCXY-ord
x-content-type-options: nosniff
server: cloudflare
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET fonts.gstatic.com/s/play/v20/6ae84K2oVqwItm4TCpAy2g.woff2 | 142.250.74.35 | 200 OK | 18 kB |
URL GET fonts.gstatic.com/s/play/v20/6ae84K2oVqwItm4TCpAy2g.woff2 IP 142.250.74.35:443
Requested byhttps://lootdest.com/s?COpA CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint41:FF:72:9C:74:6F:D4:D1:3B:A8:03:EB:55:D2:D2:09:7E:7A:44:DC ValidityMon, 12 May 2025 08:44:01 GMT - Mon, 04 Aug 2025 08:44:00 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 18156, version 1.0 Hashaad808c85ec3c88ca213ac1cb5f02d03 c95ec71ed1a088fced4797a512cd2cba9790a27f d539e6e7c0240f1565b1156395d914d93200b2c3ba312809813bb6ca6f96578b
GET /s/play/v20/6ae84K2oVqwItm4TCpAy2g.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lootdest.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18156
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 09 Jun 2025 21:27:54 GMT
expires: Tue, 09 Jun 2026 21:27:54 GMT
cache-control: public, max-age=31536000
age: 7578
last-modified: Mon, 02 Jun 2025 16:44:43 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| POST app.unlockr.app/pixel?event=unlockrPromote&session_id=694093600803426350 | 104.21.81.47 | 200 OK | 0 B |
URL POST app.unlockr.app/pixel?event=unlockrPromote&session_id=694093600803426350 IP 104.21.81.47:443
Requested byhttps://lootdest.com/s?COpA CertificateIssuerGoogle Trust Services Subjectunlockr.app Fingerprint28:69:CA:6A:4F:51:1A:45:8E:58:3C:D0:2A:53:9A:B3:1B:EF:E3:27 ValidityMon, 28 Apr 2025 12:24:28 GMT - Sun, 27 Jul 2025 13:23:17 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pixel?event=unlockrPromote&session_id=694093600803426350 HTTP/1.1
Host: app.unlockr.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lootdest.com
DNT: 1
Connection: keep-alive
Referer: https://lootdest.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
date: Mon, 09 Jun 2025 23:34:14 GMT
content-type: text/html; charset=UTF-8
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
access-control-allow-origin: https://lootdest.com
access-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-methods: POST, GET, OPTIONS, HEAD
access-control-allow-credentials: true
cache-control: no-store
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=kRCuFpnyXEZZhIuLpZgaVF0VeO3THCsOY1tLkaafYxNaXB9KsAlL4Zu%2F9BegnRb1WhlqFPg5qWt85a8e1HWTH6YB1JUashNQMzMGKAM%3D"}]}
content-encoding: br
cf-ray: 94d470430b727129-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET d1wzdj81h1hubn.cloudfront.net/46821adac67c4ec2.png | 3.164.226.216 | 200 OK | 764 kB |
URL GET d1wzdj81h1hubn.cloudfront.net/46821adac67c4ec2.png IP 3.164.226.216:443
Requested byhttps://lootdest.com/s?COpA CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72 ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File typePNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced Size764 kB (764045 bytes) Hash80badfde4030ccdb071e46943ffb3f81 ee7733f60193e6378abf9d7a8fe25c221bc4d9e0 5b020cdcccec81ebde71a7185d9699f449bb2d685a1106398cd232263fd6a9a2
GET /46821adac67c4ec2.png HTTP/1.1
Host: d1wzdj81h1hubn.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lootdest.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 764045
date: Mon, 09 Jun 2025 13:52:05 GMT
last-modified: Tue, 19 Sep 2023 14:47:02 GMT
etag: "80badfde4030ccdb071e46943ffb3f81"
x-amz-server-side-encryption: AES256
x-amz-meta-timestamp: 2023-09-19T11:58:55.101532
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 61fafbbf54e5560686b2d414df132838.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P1
x-amz-cf-id: 922yKrvXEEmk4gm52p71woAYJ4PsHIS9gKI48nUJ86WZXR-ZXr3sgQ==
age: 34930
X-Firefox-Spdy: h2
|
|
| GET cdn.jsdelivr.net/npm/babel-regenerator-runtime@6.5.0/runtime.js | 151.101.65.229 | 200 OK | 22 kB |
URL GET cdn.jsdelivr.net/npm/babel-regenerator-runtime@6.5.0/runtime.js IP 151.101.65.229:443
Requested byhttps://lootdest.com/s?COpA CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4 ValidityMon, 02 Jun 2025 15:43:52 GMT - Sat, 04 Jul 2026 15:43:51 GMT
File typeJavaScript source, ASCII text Hash4f6d0ac2c43a81b1890d6442a2a72494 5cec1237fc2cd482064efb78c55096560ffd4419 b9258540f48bff83be38e2952dfa01f6bb5c6ccbc13baccf3e26995299f59d07
GET /npm/babel-regenerator-runtime@6.5.0/runtime.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lootdest.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 6.5.0
x-jsd-version-type: version
etag: W/"53cd-XOwSN/ws1IIGTvt4xVCWVg/9RBk"
content-encoding: br
accept-ranges: bytes
date: Mon, 09 Jun 2025 23:34:12 GMT
age: 1808211
x-served-by: cache-fra-eddf8230078-FRA, cache-hel1410029-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 6589
X-Firefox-Spdy: h2
|
|
| GET fonts.gstatic.com/s/play/v20/6aez4K2oVqwIvtU2Hw.woff2 | 142.250.74.35 | 200 OK | 18 kB |
URL GET fonts.gstatic.com/s/play/v20/6aez4K2oVqwIvtU2Hw.woff2 IP 142.250.74.35:443
Requested byhttps://lootdest.com/s?COpA CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint41:FF:72:9C:74:6F:D4:D1:3B:A8:03:EB:55:D2:D2:09:7E:7A:44:DC ValidityMon, 12 May 2025 08:44:01 GMT - Mon, 04 Aug 2025 08:44:00 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 18128, version 1.0 Hash3ed6c0946ff584a90850e13ab42305eb e99ed206e2c7241fa3823c5dfe81b0aab45c4ed7 a8824b32c20407f3e05b353ffe9b606670ff4fe88574afcbee6b02e31eab7fc6
GET /s/play/v20/6aez4K2oVqwIvtU2Hw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lootdest.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18128
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 09 Jun 2025 21:27:44 GMT
expires: Tue, 09 Jun 2026 21:27:44 GMT
cache-control: public, max-age=31536000
age: 7588
last-modified: Mon, 02 Jun 2025 16:45:05 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| POST nerventualken.com/tc | 172.67.197.84 | 200 OK | 727 B |
IP 172.67.197.84:443
Requested byhttps://lootdest.com/s?COpA CertificateIssuerGoogle Trust Services Subjectnerventualken.com FingerprintBB:5A:D8:D6:24:80:4E:D6:AD:D5:BC:83:1F:7D:C1:C9:BA:26:27:9D ValiditySun, 25 May 2025 04:53:39 GMT - Sat, 23 Aug 2025 05:52:00 GMT
Hash7709a23ba03d020b30a576d1f4155105 00c5c6ba2a5722dc25795676fb775b551a547e55 1437190d411b80f989afc5dee159f90f7b9649b270dfc56f2b4790974fa446fb
POST /tc HTTP/1.1
Host: nerventualken.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lootdest.com/
Content-Type: application/json
Content-Length: 234
Origin: https://lootdest.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 09 Jun 2025 23:34:13 GMT
content-type: application/json
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
access-control-allow-origin: https://lootdest.com
access-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-methods: POST, GET, OPTIONS, HEAD
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=1Ynhn9l91gDu0hq86k6fpCGVHk1qaunWA%2BSVM3PC%2B9s39ldVqLt%2FeAakgnEIVTRxB5szLlSUl0IADxk6zNW4kRAShdlqAN6BSXxJccMmPg%3D%3D"}]}
content-encoding: br
set-cookie: ci=170707179212742; SameSite=None; Secure; Max-Age=86400
cf-ray: 94d4703d7c477131-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET d1wzdj81h1hubn.cloudfront.net/icons/bell.png | 3.164.226.216 | 200 OK | 3.2 kB |
URL GET d1wzdj81h1hubn.cloudfront.net/icons/bell.png IP 3.164.226.216:443
Requested byhttps://lootdest.com/s?COpA CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72 ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hashe05b6d8961d5c6cb3f7492e21e366e22 84de9916be937e4aab079ef138c69675e5a140f4 cf1bb98b39b4b8716d1bac7cebd1fbff688ece7ea95988b7b385b7cf456784b1
GET /icons/bell.png HTTP/1.1
Host: d1wzdj81h1hubn.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lootdest.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 3177
date: Mon, 09 Jun 2025 12:51:10 GMT
last-modified: Tue, 07 Feb 2023 09:32:37 GMT
etag: "e05b6d8961d5c6cb3f7492e21e366e22"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 61fafbbf54e5560686b2d414df132838.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P1
x-amz-cf-id: SfFCuJ-kkJEMXrjZDWxwzoh7AGsMXJcOZB58V-yvctcibxRF3PrK6A==
age: 38585
X-Firefox-Spdy: h2
|
|