r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 81713f952b51a865ad9764cde68e3fdb
278c3a9c4bb2a0ffb7375f90d89a1ba6e90a766a
c2eb0d8a24ecb51af28f1c71db4b9a95c568dcf6c94b41ee8c78787a4ebebcef
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C2EB0D8A24ECB51AF28F1C71DB4B9A95C568DCF6C94B41EE8C78787A4EBEBCEF"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3446
Expires: Sun, 05 Feb 2023 14:01:41 GMT
Date: Sun, 05 Feb 2023 13:04:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c21ba65e44ac95470c314e068e49a9eb
17a13b13738993d889d4afa3d848dc63bf6eba64
9bd0795b30e84ce63b6e2a365ca91bbffc395dd955e112152066c31e63a4ab66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9BD0795B30E84CE63B6E2A365CA91BBFFC395DD955E112152066C31E63A4AB66"
Last-Modified: Sat, 04 Feb 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6903
Expires: Sun, 05 Feb 2023 14:59:18 GMT
Date: Sun, 05 Feb 2023 13:04:15 GMT
Connection: keep-alive
odili.net/
301 Moved Permanently 162 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET / HTTP/1.1
Host: odili.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sun, 05 Feb 2023 13:04:15 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://odili.net/
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7ATVRWSaTv2%2FO6DmtZj7Er8xfpT8bQDElJoKLVqoL1YVl7C456U4L6MVxPAibhFN9YwCTEzVKRE3ZPEkvNQUXzEC0ePW57P7acYZmUoiO1AINcDEHT%2Fz1NkVxNM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 794bd9cfe9fe1c0a-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Retry-After, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 05 Feb 2023 12:33:54 GMT
content-type: application/json
age: 1821
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fb7b6b46e708ad73eaaa3c21e74569ae
950663c025acad81556af5aa3022ecc9d55097fe
763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64"
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14593
Expires: Sun, 05 Feb 2023 17:07:28 GMT
Date: Sun, 05 Feb 2023 13:04:15 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: OEZ86DsJUn/GgE6wJqPrjnA7W7DXNX/+Li9xQ1sd2CTz+14Ox4E3KYN/T4Z6FIc4JUPsttvCYqU=
x-amz-request-id: F5RS491AJAG20RDH
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 05 Feb 2023 12:24:28 GMT
age: 2387
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 13:04:15 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 1db49108b43a1ef874e6907987b94466
29da0fe8a1578d36bf4d6b6500fef7624745502a
ad3a15e8ae70c6b670bcfa0149d73f8ae30ecfd3fccf5e3c38534112fb63b970
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 13:04:15 GMT
Server: ECS (amb/6B87)
Content-Length: 279
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Content-Type, ETag, Last-Modified, Alert, Retry-After, Content-Length, Cache-Control, Pragma, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 05 Feb 2023 12:49:07 GMT
age: 909
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dedf9c519ac38c4bece9c5bc895787d7
4911175c3f8a435978c5301c33c7a99a5e00a1d5
bddd7e3a4939f863642a7c5348c1c8b9bc569b35c10a27f4cf5ec71f7e6b9698
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDDD7E3A4939F863642A7C5348C1C8B9BC569B35C10A27F4CF5EC71F7E6B9698"
Last-Modified: Fri, 03 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3945
Expires: Sun, 05 Feb 2023 14:10:01 GMT
Date: Sun, 05 Feb 2023 13:04:16 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash 1db49108b43a1ef874e6907987b94466
29da0fe8a1578d36bf4d6b6500fef7624745502a
ad3a15e8ae70c6b670bcfa0149d73f8ae30ecfd3fccf5e3c38534112fb63b970
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 13:04:16 GMT
Last-Modified: Sun, 05 Feb 2023 13:04:15 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 279
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: c7SmkuR0Pp1rSAMDW7/3yQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Db8VmIl6lftEReFxCjU5RpDYl10=
ocsp.pki.goog/s/gts1p5/EBGEV6u0KVU
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/EBGEV6u0KVU
IP
Hash c96d821be8ed82785d8a76be7ac0f8b1
f117a6e43bc84b87331169ba6bf91a14f748370e
86409b13b49ab46fc68ac07a34fd6d8af460c9343aa2585283f8c541f0b7e488
POST /s/gts1p5/EBGEV6u0KVU HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 13:04:16 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 278 B IP
Hash eb32b562c42466ec2eae9d141bd9cda8
daaabcee430394a3eaca6557115c4d3a7fce9da1
e4f140b27ef132faa2715c4584544f37d86933d8c8d4da8ab83f900701956c28
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6147
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 13:04:16 GMT
Last-Modified: Sun, 05 Feb 2023 11:21:49 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/s/gts1p5/EBGEV6u0KVU
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/EBGEV6u0KVU
IP
Hash c96d821be8ed82785d8a76be7ac0f8b1
f117a6e43bc84b87331169ba6bf91a14f748370e
86409b13b49ab46fc68ac07a34fd6d8af460c9343aa2585283f8c541f0b7e488
POST /s/gts1p5/EBGEV6u0KVU HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 13:04:16 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1p5/EBGEV6u0KVU
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/EBGEV6u0KVU
IP
Hash c96d821be8ed82785d8a76be7ac0f8b1
f117a6e43bc84b87331169ba6bf91a14f748370e
86409b13b49ab46fc68ac07a34fd6d8af460c9343aa2585283f8c541f0b7e488
POST /s/gts1p5/EBGEV6u0KVU HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 13:04:16 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
secure.cdn.fastclick.net/js/adcodes/pubcode.min.js?sid=12386&placement_id=eda54f8a-c822-4f15-0fc4-32abf70c9e9c&version=1.4&exc=1
200 OK 3.8 kB URL HTTP/2 secure.cdn.fastclick.net/js/adcodes/pubcode.min.js?sid=12386&placement_id=eda54f8a-c822-4f15-0fc4-32abf70c9e9c&version=1.4&exc=1
IP
File type HTML document text\012- C source, ASCII text, with very long lines (9887), with no line terminators
Hash 74435fd9c4f45d530080e6f7a9247750
616e3513b4b2cb2d14604013a8622e15b660df71
aed4a1838663ac5131a5b7b0af71b091a60b3540d484713da9b08b304e819a8e
GET /js/adcodes/pubcode.min.js?sid=12386&placement_id=eda54f8a-c822-4f15-0fc4-32abf70c9e9c&version=1.4&exc=1 HTTP/1.1
Host: secure.cdn.fastclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Apache
last-modified: Wed, 10 Jun 2020 22:08:18 GMT
etag: "269f-5a7c214d0c865-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3788
content-type: application/javascript
unused62: 8096267
date: Sun, 05 Feb 2023 13:04:16 GMT
X-Firefox-Spdy: h2
secure.cdn.fastclick.net/js/adcodes/pubcode.min.js?sid=12386&placement_id=98BVRR7B&version=1.4&exc=1
200 OK 3.8 kB URL HTTP/2 secure.cdn.fastclick.net/js/adcodes/pubcode.min.js?sid=12386&placement_id=98BVRR7B&version=1.4&exc=1
IP
File type HTML document text\012- C source, ASCII text, with very long lines (9887), with no line terminators
Hash 74435fd9c4f45d530080e6f7a9247750
616e3513b4b2cb2d14604013a8622e15b660df71
aed4a1838663ac5131a5b7b0af71b091a60b3540d484713da9b08b304e819a8e
GET /js/adcodes/pubcode.min.js?sid=12386&placement_id=98BVRR7B&version=1.4&exc=1 HTTP/1.1
Host: secure.cdn.fastclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Apache
last-modified: Wed, 10 Jun 2020 22:08:18 GMT
etag: "269f-5a7c214d0c865-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3788
content-type: application/javascript
unused62: 8096267
date: Sun, 05 Feb 2023 13:04:16 GMT
X-Firefox-Spdy: h2
secure.cdn.fastclick.net/js/adcodes/pubcode.min.js?sid=12386&placement_id=e4329d05-a765-422e-dfb9-b7ef770a670b&version=1.4&exc=1
200 OK 3.8 kB URL HTTP/2 secure.cdn.fastclick.net/js/adcodes/pubcode.min.js?sid=12386&placement_id=e4329d05-a765-422e-dfb9-b7ef770a670b&version=1.4&exc=1
IP
File type HTML document text\012- C source, ASCII text, with very long lines (9887), with no line terminators
Hash 74435fd9c4f45d530080e6f7a9247750
616e3513b4b2cb2d14604013a8622e15b660df71
aed4a1838663ac5131a5b7b0af71b091a60b3540d484713da9b08b304e819a8e
GET /js/adcodes/pubcode.min.js?sid=12386&placement_id=e4329d05-a765-422e-dfb9-b7ef770a670b&version=1.4&exc=1 HTTP/1.1
Host: secure.cdn.fastclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Apache
last-modified: Wed, 10 Jun 2020 22:08:18 GMT
etag: "269f-5a7c214d0c865-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3788
content-type: application/javascript
unused62: 8096267
date: Sun, 05 Feb 2023 13:04:16 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/EBGEV6u0KVU
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/EBGEV6u0KVU
IP
Hash c96d821be8ed82785d8a76be7ac0f8b1
f117a6e43bc84b87331169ba6bf91a14f748370e
86409b13b49ab46fc68ac07a34fd6d8af460c9343aa2585283f8c541f0b7e488
POST /s/gts1p5/EBGEV6u0KVU HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 13:04:16 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1p5/EBGEV6u0KVU
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/EBGEV6u0KVU
IP
Hash c96d821be8ed82785d8a76be7ac0f8b1
f117a6e43bc84b87331169ba6bf91a14f748370e
86409b13b49ab46fc68ac07a34fd6d8af460c9343aa2585283f8c541f0b7e488
POST /s/gts1p5/EBGEV6u0KVU HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 13:04:16 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 98be7fe21d059e46146a43d20c4eea92
1ec58129fea75085588be7b8baec05b0874b5274
7bb2eb5ffcd88a3b6ba7b210bdbcd4469134c9708f06befb6c616beebf8dae46
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 13:04:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 98be7fe21d059e46146a43d20c4eea92
1ec58129fea75085588be7b8baec05b0874b5274
7bb2eb5ffcd88a3b6ba7b210bdbcd4469134c9708f06befb6c616beebf8dae46
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 13:04:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 98be7fe21d059e46146a43d20c4eea92
1ec58129fea75085588be7b8baec05b0874b5274
7bb2eb5ffcd88a3b6ba7b210bdbcd4469134c9708f06befb6c616beebf8dae46
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 13:04:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 98be7fe21d059e46146a43d20c4eea92
1ec58129fea75085588be7b8baec05b0874b5274
7bb2eb5ffcd88a3b6ba7b210bdbcd4469134c9708f06befb6c616beebf8dae46
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 13:04:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 98be7fe21d059e46146a43d20c4eea92
1ec58129fea75085588be7b8baec05b0874b5274
7bb2eb5ffcd88a3b6ba7b210bdbcd4469134c9708f06befb6c616beebf8dae46
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 13:04:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
nigeriaworld.com/news/source/2018/oct/images/house-fight.jpg
200 OK 30 kB URL HTTP/2 nigeriaworld.com/news/source/2018/oct/images/house-fight.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, height=239, xresolution=218, yresolution=226, resolutionunit=2, software=PaintShop Pro 16.00, width=411], baseline, precision 8, 411x239, components 3\012- data
Hash 010c406e4595e09720b62d58d2520fbb
aa83da2c9945a1ff7105b9c78362fc24d31f781b
490c72ba4a8f16dc5832ad29a07509c2cce971a6f3c116d27f2156e00bbe3de0
GET /news/source/2018/oct/images/house-fight.jpg HTTP/1.1
Host: nigeriaworld.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:17 GMT
content-type: image/jpeg
content-length: 29793
last-modified: Tue, 23 Oct 2018 17:29:09 GMT
cache-control: must-revalidate
expires: 0
etag: "5bcf5a65-7461"
strict-transport-security: max-age=15768000; includeSubDomains
x-powered-by: PleskLin
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PennedAaDs%2FJRpQ5mlS2Vg3IsogbLpAFoqPhvGuoZ5nJHSf2js2b7i62qlFytMl%2B6jcr0eMPxc6KPOqgClCCQGlsOMUnNGSS5U%2FPLTty%2B%2BoeP8BYeGEMXi3DRrRaPFlYxXPS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 794bd9d86e4db524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Oswald:300,400,500,700,900
200 OK 1.0 kB URL HTTP/2 fonts.googleapis.com/css?family=Oswald:300,400,500,700,900
IP
Hash ceb9f7322820afea5537f5b2461f35e6
c37a9c8e2cfcaf48261a73256fa3fba78ee72f04
b54018005af8ecae4b3b971211ec29f705f5681f1153e1f9ee12ee5cace8b332
GET /css?family=Oswald:300,400,500,700,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 05 Feb 2023 13:04:17 GMT
date: Sun, 05 Feb 2023 13:04:17 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
nigeriaworld.com/news/archive/archivemonth.js
200 OK 1.2 kB URL HTTP/2 nigeriaworld.com/news/archive/archivemonth.js
IP
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (8726), with no line terminators
Hash 24a65db54ad6165ff4c1bf08c5686b4d
41803c7d1c1fb0f416281e22f9aa09cbe4e8795b
b71efc915bf6ee20754be2ef26cab4df0b164e263d8ce61ede1f048520ecd2d9
GET /news/archive/archivemonth.js HTTP/1.1
Host: nigeriaworld.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:17 GMT
content-type: application/javascript
last-modified: Sat, 04 Feb 2023 20:20:20 GMT
cache-control: must-revalidate
expires: 0
etag: W/"63debe04-2216"
strict-transport-security: max-age=15768000; includeSubDomains
x-powered-by: PleskLin
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sh0uQp%2BM2j0QZSQ2rIRw6ND2O5pFfpDiiedWT6mNNm28FE0jtuBjh2IUoV%2B1B8SBI7AG1e8mr%2BWCNYFMwK6tw3PIHUME%2Ba%2FCjyXeZ5y1VcI5PWcSxaD%2F7z7kViAmF1942hDB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 794bd9d81dd3b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 67230f349c1e5660055d5104fc0aec66
4d876e1adc9861349cfc7c20ee7892b985b51527
af6313be93a11cabf2aab79f0ec5b72303f4fac453ac44c07a46bee019ca2aff
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 13:04:17 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Thu, 09 Feb 2023 09:48:39 GMT
ETag: "4d876e1adc9861349cfc7c20ee7892b985b51527"
Last-Modified: Sun, 05 Feb 2023 09:48:40 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1320
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794bd9dbeff70b3d-OSL
fonts.googleapis.com/css?family=Frank%20Ruhl%20Libre:300,400,500,700,900
200 OK 698 B URL HTTP/2 fonts.googleapis.com/css?family=Frank%20Ruhl%20Libre:300,400,500,700,900
IP
Hash fc48d5cb5357539eada5056423be5381
b68dc97e222c440003ff749379a480d67479657a
cbc7de47701858d71fb309f501aef14dd438ec9699d19670e7dfce1b9970c2d1
GET /css?family=Frank%20Ruhl%20Libre:300,400,500,700,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 05 Feb 2023 13:04:17 GMT
date: Sun, 05 Feb 2023 13:04:17 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5452c58c07ce8d3cade93b323b271c35
581b1e438daeb32a12feaf50f2aab17dcf3e3171
b99ea2af71e697f45db51732f7d3e8d3e50258c9c96e50a772b8c4638577140a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 13:04:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5452c58c07ce8d3cade93b323b271c35
581b1e438daeb32a12feaf50f2aab17dcf3e3171
b99ea2af71e697f45db51732f7d3e8d3e50258c9c96e50a772b8c4638577140a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 13:04:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
direct.ad.cpe.dotomi.com/w/get.media?sid=12386&d=j&t=n&vcm_acv=1.4&version=1.12&c=0.7532090260702766&vcm_ifr=0&vcm_xy=960..304&vcm_vv=true&vcm_vm=false&vcm_pr=https%3A//odili.net/&vcm_tr=&vcm_cr=&mo=0&placement_id=e4329d05-a765-422e-dfb9-b7ef770a670b
200 OK 228 B URL HTTP/2 direct.ad.cpe.dotomi.com/w/get.media?sid=12386&d=j&t=n&vcm_acv=1.4&version=1.12&c=0.7532090260702766&vcm_ifr=0&vcm_xy=960..304&vcm_vv=true&vcm_vm=false&vcm_pr=https%3A//odili.net/&vcm_tr=&vcm_cr=&mo=0&placement_id=e4329d05-a765-422e-dfb9-b7ef770a670b
IP
File type HTML document, ASCII text
Hash 11e1d5a8a1fe5c4f3e2c59e164cf0532
5204857d258053f810aa425256b38f230e3ed114
6afe4d57f148c96c3b70941422938d146318305c00d50bb1f7cd20c97c3743cb
GET /w/get.media?sid=12386&d=j&t=n&vcm_acv=1.4&version=1.12&c=0.7532090260702766&vcm_ifr=0&vcm_xy=960..304&vcm_vv=true&vcm_vm=false&vcm_pr=https%3A//odili.net/&vcm_tr=&vcm_cr=&mo=0&placement_id=e4329d05-a765-422e-dfb9-b7ef770a670b HTTP/1.1
Host: direct.ad.cpe.dotomi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 13:04:17 GMT
content-length: 228
cache-control: no-cache
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2
fonts.gstatic.com/s/patuaone/v16/ZXuke1cDvLCKLDcimxB44_lu.woff2
200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/patuaone/v16/ZXuke1cDvLCKLDcimxB44_lu.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 12876, version 1.0\012- data
Hash 876bac7b767e811b11e77b8c25ad3fe7
f6ab3eff1ff70e567efe03927142a3813e9a2794
74609e166867aa3888ef3085b0011dd5e5e61d347f578195c8d7e10ae315af02
GET /s/patuaone/v16/ZXuke1cDvLCKLDcimxB44_lu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://odili.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12876
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Feb 2023 02:26:38 GMT
expires: Fri, 02 Feb 2024 02:26:38 GMT
cache-control: public, max-age=31536000
age: 297459
last-modified: Mon, 09 May 2022 18:40:21 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2
200 OK 36 kB URL HTTP/2 fonts.gstatic.com/s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 35764, version 1.0\012- data
Hash 60f23230f1a8d5c3b7d25b73f5b5ce23
ed08ada85d017893b9bcb8224e99154c6708f5d2
22b6cdc450204c1cb32b31e679d812fea1c17ac506a7b78daeb12bd0ab25fde8
GET /s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://odili.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35764
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 Feb 2023 02:06:00 GMT
expires: Sat, 03 Feb 2024 02:06:00 GMT
cache-control: public, max-age=31536000
age: 212297
last-modified: Mon, 18 Jul 2022 19:06:36 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5452c58c07ce8d3cade93b323b271c35
581b1e438daeb32a12feaf50f2aab17dcf3e3171
b99ea2af71e697f45db51732f7d3e8d3e50258c9c96e50a772b8c4638577140a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 13:04:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
direct.ad.cpe.dotomi.com/w/get.media?sid=12386&d=j&t=n&vcm_acv=1.4&version=1.12&c=0.16365414714937765&vcm_ifr=0&vcm_xy=960..865&vcm_vv=true&vcm_vm=false&vcm_pr=https%3A//odili.net/&vcm_tr=&vcm_cr=&mo=0&placement_id=eda54f8a-c822-4f15-0fc4-32abf70c9e9c
200 OK 228 B URL HTTP/2 direct.ad.cpe.dotomi.com/w/get.media?sid=12386&d=j&t=n&vcm_acv=1.4&version=1.12&c=0.16365414714937765&vcm_ifr=0&vcm_xy=960..865&vcm_vv=true&vcm_vm=false&vcm_pr=https%3A//odili.net/&vcm_tr=&vcm_cr=&mo=0&placement_id=eda54f8a-c822-4f15-0fc4-32abf70c9e9c
IP
File type HTML document, ASCII text
Hash 3da851b36b048c4f97ae42c8a714c93d
9d71b842e6f1859e16174f081f4bae809b743ab4
a9f02eb1027235f4783fc91c787785492968526955bcb527d5658d3c1d705170
GET /w/get.media?sid=12386&d=j&t=n&vcm_acv=1.4&version=1.12&c=0.16365414714937765&vcm_ifr=0&vcm_xy=960..865&vcm_vv=true&vcm_vm=false&vcm_pr=https%3A//odili.net/&vcm_tr=&vcm_cr=&mo=0&placement_id=eda54f8a-c822-4f15-0fc4-32abf70c9e9c HTTP/1.1
Host: direct.ad.cpe.dotomi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 13:04:17 GMT
content-length: 228
cache-control: no-cache
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2
nigeriaworld.com/news/daily/2023/feb/4/headlines2.js
200 OK 6.9 kB URL HTTP/2 nigeriaworld.com/news/daily/2023/feb/4/headlines2.js
IP
File type Non-ISO extended-ASCII text, with very long lines (14390), with NEL line terminators
Hash 63b510a16ae65bdf8f92fc16c77154e3
de756cfd9134fcf1141c2bc18bca56856c34f43b
ef96e739206d8a19911cdd68e1f93f7699369c327b6d9b27dd783ab7b7d3f4e8
GET /news/daily/2023/feb/4/headlines2.js HTTP/1.1
Host: nigeriaworld.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:17 GMT
content-type: application/javascript
last-modified: Sat, 04 Feb 2023 22:58:34 GMT
cache-control: must-revalidate
expires: 0
etag: W/"63dee31a-4557"
strict-transport-security: max-age=15768000; includeSubDomains
x-powered-by: PleskLin
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=smhfWxSwbUtYXyUUFZ10SjXJMLOQ82oO488RRSuOzz9UZZyKZX6cqrRg1wo%2FWRg7W8u0K%2FZFfu4D%2BlW%2FnRDDMrkR7k8wNBumoUPG3ldWLSC%2B4T%2BPDitTh4jVjIu8g1M52QyJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 794bd9d85e43b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Playfair%20Display:400,400i,700
200 OK 7.6 kB URL HTTP/2 fonts.googleapis.com/css?family=Playfair%20Display:400,400i,700
IP
Hash 6aa627c7de76313186d80dcc196ac820
6f7696f51d69032d58e23aee3413aa104a0b0251
a8c55223eb00e7620138bc7eff56015ef798691364836f2c068c19d5a94c08da
GET /css?family=Playfair%20Display:400,400i,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 05 Feb 2023 13:04:17 GMT
date: Sun, 05 Feb 2023 13:04:17 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
nigeriaworld.com/js/ICYMI.js
200 OK 5.2 kB URL HTTP/2 nigeriaworld.com/js/ICYMI.js
IP
File type exported SGML document, Non-ISO extended-ASCII text, with very long lines (9752), with no line terminators
Hash 9b53da7b8c4cbc3cba737e313a79c50d
e3eaad654d934935254f3cd3d7d98716e7b5299d
06a24eaa4e23f6494f8390e4f69384f86091cb547b7b5f501b6c9dd671b4779c
GET /js/ICYMI.js HTTP/1.1
Host: nigeriaworld.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:17 GMT
content-type: application/javascript
last-modified: Sat, 04 Feb 2023 14:03:57 GMT
cache-control: must-revalidate
expires: 0
etag: W/"63de65cd-2618"
strict-transport-security: max-age=15768000; includeSubDomains
x-powered-by: PleskLin
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s%2BIoq%2BJqaDQLE2eNTXzvQ9g%2BLJoG5qBI9HsJj8QmKP8OpZcD2nArSK2bpTPHZ6CqY3p0cs9CCzxmp%2Brraya2KfOoRzUC3Y0j%2BWTCLTAmFXv6D6GxMJZrpM83Js8k%2FSFrZz1G"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 794bd9d85e40b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
nigeriaworld.com/news/daily/2023/feb/4/topstory.js
200 OK 5.3 kB URL HTTP/2 nigeriaworld.com/news/daily/2023/feb/4/topstory.js
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (490), with no line terminators
Hash d79c23301cdb3ff65cd539761857014a
bf0fc09357ec3dad786dc68b078fcd145dd9f993
f9dd81d0d41461628647eb47c369a5d99d9d8ebeda6c014e3cc6758e37688a9f
GET /news/daily/2023/feb/4/topstory.js HTTP/1.1
Host: nigeriaworld.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:17 GMT
content-type: application/javascript
x-accel-version: 0.01
last-modified: Sat, 04 Feb 2023 22:58:36 GMT
etag: W/"1ea-5f3e7bce9ff00"
cache-control: must-revalidate
expires: 0
strict-transport-security: max-age=15768000; includeSubDomains
x-powered-by: PleskLin
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4b1MII3jA5cct5WKHpdiwYTAKyfQj2XOyQnPpmT3Ec4a0erFXqGQpDuF6xkWQ4TBSa7gmfhRtNSa82mcwOGSKlHerejjyP8vwMU3Fn2lbN%2B2V76wL7FIkcNMVDzvsEkvsYWC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 794bd9d86e4ab524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
resources.infolinks.com/js/infolinks_main.js
200 OK 6.2 kB URL HTTP/2 resources.infolinks.com/js/infolinks_main.js
IP
Hash d919623ec4f881f2d3e782761ef2e0de
9b667aaf4503684c7c5fc2481afc03bd597209e0
5c607fcf08ae868fbbd990a8e9f26ca825a0dda1dfcd0038af9f73b90ba6e64b
GET /js/infolinks_main.js HTTP/1.1
Host: resources.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:16 GMT
content-type: application/javascript
last-modified: Wed, 01 Feb 2023 14:55:07 GMT
etag: W/"dcb-5f3a4a251e392"
cache-control: max-age=3600
expires: Sun, 05 Feb 2023 11:55:58 GMT
via: 1.1 google
cf-cache-status: HIT
age: 7698
vary: Accept-Encoding
server: cloudflare
cf-ray: 794bd9d83900b500-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
odili.net/
200 OK 8.1 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 4daf8b932ea3a90b8ac6fb00c5cf10a6
50429121223203690d3f1de3bba1eea2ec0ae88e
d787177c98bc64eee85d0c0bd795fdcffc086d73829555f8d8a958d14708f732
GET / HTTP/1.1
Host: odili.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:16 GMT
content-type: text/html
last-modified: Sat, 04 Feb 2023 20:20:36 GMT
strict-transport-security: max-age=15768000; includeSubDomains
x-powered-by: PleskLin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZPqff88%2B3bqYb8xUzp%2FnZw92XKJ%2F4bojdHeZIx0NbURnlzcmieUDu1ZKVhdY9SQWqgPiIWuDLjTUxTzAoeSDpWbbM3M3Xa1xnWhvCuhJJ2dm7BCIjBDU3Am%2FPwo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794bd9d3ed94b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Lalezar:400
200 OK 4.1 kB URL HTTP/2 fonts.googleapis.com/css?family=Lalezar:400
IP
Hash a5b2f32990d7bff7c8e62b7faaab1813
24a1302ab66a9fadbec3b2927f87fbf9d1484e9a
2d9028111d4d0ef3bd8043c160c10f0cf2f7273911b6fcf05e542292ff850719
GET /css?family=Lalezar:400 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 05 Feb 2023 13:04:17 GMT
date: Sun, 05 Feb 2023 13:04:17 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:100,300,400,500,700,900
200 OK 3.6 kB URL HTTP/2 fonts.googleapis.com/css?family=Roboto:100,300,400,500,700,900
IP
Hash 9fe9a3d1d237693797b0770f4a5ace7a
451c719e7b6da658ee1d208ef0b834a055753094
3ef5bc7350d6e40a7c739685765264218c2f6e3afc06b31fd648fd7557056521
GET /css?family=Roboto:100,300,400,500,700,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 05 Feb 2023 13:04:17 GMT
date: Sun, 05 Feb 2023 13:04:17 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21058
Expires: Sun, 05 Feb 2023 18:55:15 GMT
Date: Sun, 05 Feb 2023 13:04:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21058
Expires: Sun, 05 Feb 2023 18:55:15 GMT
Date: Sun, 05 Feb 2023 13:04:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21058
Expires: Sun, 05 Feb 2023 18:55:15 GMT
Date: Sun, 05 Feb 2023 13:04:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21058
Expires: Sun, 05 Feb 2023 18:55:15 GMT
Date: Sun, 05 Feb 2023 13:04:17 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88b593b5-5093-4504-8ab7-492c62b14ca7.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88b593b5-5093-4504-8ab7-492c62b14ca7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c1f3df5bbad5048923e29c0767d703d3
48c408d37a7bd7f96653174359178eed46ddf298
c8bae041c3d64334964b2aa771a07bc2709ced4c497e1795f864d9416fed728f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88b593b5-5093-4504-8ab7-492c62b14ca7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5801
x-amzn-requestid: 441284a8-923a-4b22-b39f-95dec713c292
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fjj9jHu_IAMFZ-w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d7b389-788174a773fcd695540cc95e;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 12:09:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: DgvqiQwdytO2caPNzg2OhGcv8ly9N_YeQTzpuf6iwAVt8AQZEXRLqw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 21:43:52 GMT
age: 55225
etag: "48c408d37a7bd7f96653174359178eed46ddf298"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37422a56-a7de-4ab8-ac8a-650de9dae97c.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37422a56-a7de-4ab8-ac8a-650de9dae97c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5b6c30ad03669b66bf2f63b3edd69882
e630bd132b52b965a5ade646ea8a165d1abf6d7b
f8233d879ec17fd91909655ff8881f2ebfad84272fde3ed5e5be37580378a989
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37422a56-a7de-4ab8-ac8a-650de9dae97c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5014
x-amzn-requestid: a434aae4-fe4b-4fc7-9b7e-eeb552484e8a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi3bIE0aoAMF6YQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76c47-5556d14757190c842bbc6b06;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 07:05:43 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: k6YqagXr3Wr-u1uDKojEnIGW0CxU5yvWPtlzNpzoIvmg9F-rJb9uFQ==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 14:53:45 GMT
age: 79832
etag: "e630bd132b52b965a5ade646ea8a165d1abf6d7b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8a9d301-2b38-4046-91c2-941ed351597a.jpeg
200 OK 3.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8a9d301-2b38-4046-91c2-941ed351597a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d7a466d89c75ff3459b7328591db52cf
c3f29f9c2fbdc1fa2aef7a9e79ca796b28394afb
e73243be3d01d12a224c4e9826c4f52610cf7722eee69f62755278d7550705f1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8a9d301-2b38-4046-91c2-941ed351597a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3474
x-amzn-requestid: 5846c080-9f25-4590-863c-8af2126cdbe1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f1WXEEbnoAMFRdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ded0f9-1bd490125feadc14366e7ca0;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 21:41:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: d8aQmkW-aqLFpb79RynlJG2vY1GTDbjLNY0Qukgg_WIjdI6cmbVKFw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 22:10:58 GMT
etag: "c3f29f9c2fbdc1fa2aef7a9e79ca796b28394afb"
content-type: image/jpeg
age: 53599
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fed9dd21c-6496-4f6e-b306-570e4802aba4.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fed9dd21c-6496-4f6e-b306-570e4802aba4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 251f1a5d671fb797fb98e9a71754c341
335425603d9eec146a3c03422dbca91134272e53
74932f07561287e33302aabcf9c639e9df7ae0fbc4bf71f5467310aabafea208
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fed9dd21c-6496-4f6e-b306-570e4802aba4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6202
x-amzn-requestid: 01b85fcd-69a0-49da-8640-32a3ef19378a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi3bUFEJoAMFapg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76c48-14817e717361e09170714e9d;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 07:05:44 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 1_1mEN4j5cciWEiimz4PRjx3PNGnrSRib9oEJAdYLrrtyjqnz_zvcQ==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 13:05:46 GMT
age: 86311
etag: "335425603d9eec146a3c03422dbca91134272e53"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F085f1306-f595-4e1a-8162-7d3d1f959ac3.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F085f1306-f595-4e1a-8162-7d3d1f959ac3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7dbe304b5138a360ff07a9842bcf6a7f
00572f7667e322c9ef34bc35b7998c1c172dd34c
d63c58d6c96e23c61b92272de8c2aab01f4cf85f3420cc434c05447d355b1c77
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F085f1306-f595-4e1a-8162-7d3d1f959ac3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9108
x-amzn-requestid: a3bffa19-86ce-4a59-b826-551deddb3e9f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fostZG2xIAMF0wQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d9c188-18acd7311c6190c9486e86ac;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 01:34:00 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mWqq5MbsWYvQmSzPw3kTdjzTkz22mNHbOoqyiHfbxv0BhNhgFfnZGw==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 21:43:52 GMT
age: 55225
etag: "00572f7667e322c9ef34bc35b7998c1c172dd34c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6718344-fcb4-4366-9239-8921034a7114.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6718344-fcb4-4366-9239-8921034a7114.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8e0be7db14d930d6227443314bcd1747
4e42e2ad289dfe5bd9a55d34fd768f7532bdf71d
baedfbdb08a67f9ff4c698f7e65b08d7e4c5078d0a4233e6bff529b44812735a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6718344-fcb4-4366-9239-8921034a7114.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12967
x-amzn-requestid: 38c58626-f4ad-4e2b-ad71-a628519d2ea2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fmEdHFwCoAMFhxQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d8b453-7da6d0c1093468d320caaa1e;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 06:25:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: t8dZTwod1-pZr8ACfp-6gfEu0TA3kGpfJrQeF8VgLg2tlrt03sa6Bg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 03:40:08 GMT
age: 33849
etag: "4e42e2ad289dfe5bd9a55d34fd768f7532bdf71d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash e07348238df37b084059062f683c1972
5e4dc5c98a9c3a0af4f6159966be745f1f9bc8cc
5c9c84c42359fbfbaa960edfd59b30bdc7e9aac93778ccd0866f637544156e0e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 13:04:18 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 04 Feb 2023 10:05:28 GMT
Expires: Sat, 11 Feb 2023 10:05:27 GMT
Etag: "5e4dc5c98a9c3a0af4f6159966be745f1f9bc8cc"
Cache-Control: max-age=507068,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 794bd9dfa816b518-OSL
secure.trust-provider.com/trustlogo/javascript/trustlogo.js
200 OK 14 kB URL HTTP/2 secure.trust-provider.com/trustlogo/javascript/trustlogo.js
IP
ASN #48447 Sectigo Limited
File type HTML document text\012- exported SGML document, ASCII text, with very long lines (14088)
Hash e46d5528af29f4224a927291166d2ddc
b8bb9695e47f7370db2dea4884e0efcbd86a4dca
1ba30b444f0489b7da1ca80092c7879835ba96404751aabbdb2647de4261fa05
GET /trustlogo/javascript/trustlogo.js HTTP/1.1
Host: secure.trust-provider.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:18 GMT
content-type: application/javascript
content-length: 14089
last-modified: Thu, 26 Jan 2023 09:49:04 GMT
etag: "63d24c90-3709"
accept-ranges: bytes
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
ocsp.usertrust.com/
200 OK 2.2 kB IP
Hash b70fb3c4ccaaf4c2a1565a04a2bf4ead
4db061deea15a9d87d8c69f5003cfcccf0322cc1
dba73121b0014f2a0a46fd0016ab34ab620c210ca3142276117bff0495eba3b0
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 13:04:18 GMT
Content-Type: application/ocsp-response
Content-Length: 2236
Connection: keep-alive
Last-Modified: Sat, 04 Feb 2023 22:12:16 GMT
Expires: Sat, 11 Feb 2023 22:12:15 GMT
Etag: "4db061deea15a9d87d8c69f5003cfcccf0322cc1"
Cache-Control: max-age=602700,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 193
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794bd9e34bfdb515-OSL
www.positivessl.com/images/seals/positivessl_trust_seal_lg_222x54.png
200 OK 4.6 kB URL HTTP/2 www.positivessl.com/images/seals/positivessl_trust_seal_lg_222x54.png
IP
File type PNG image data, 222 x 54, 8-bit/color RGBA, non-interlaced\012- data
Hash bdc39c2c3ec62aa52dc8ebdbe13d6adf
2aa2f903b5a451b5b63f20b4bd1a87e325da0688
b8065d1c0da64ee54fd8d7c75008a03ff67c1c2ad2dfd7642e8706ba7a8aec18
GET /images/seals/positivessl_trust_seal_lg_222x54.png HTTP/1.1
Host: www.positivessl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:18 GMT
etag: "1674526498"
content-length: 4603
content-type: image/png
last-modified: Tue, 24 Jan 2023 02:14:58 GMT
accept-ranges: bytes
cache-control: max-age=2592000, public
server: fbs
x-hw: 1675602258.cds020.sk1.hn,1675602258.cds236.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2
secure.trust-provider.com/trustlogo/images/popup/warranty_level.gif
200 OK 713 B URL HTTP/2 secure.trust-provider.com/trustlogo/images/popup/warranty_level.gif
IP
ASN #48447 Sectigo Limited
File type GIF image data, version 89a, 77 x 24\012- data
Hash 642b0ef0750283724b9210755e693b78
bc9c18f7d529d166a6019e085a8d6b7fc649c5c7
e45902c0c28d8a669a37a61914c1eb760b093f7cc2d41693d52f82327329218d
GET /trustlogo/images/popup/warranty_level.gif HTTP/1.1
Host: secure.trust-provider.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:18 GMT
content-type: image/gif
content-length: 713
last-modified: Thu, 26 Jan 2023 09:49:05 GMT
etag: "63d24c91-2c9"
accept-ranges: bytes
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
secure.trust-provider.com/trustlogo/images/popup/seal_bg.gif
200 OK 4.9 kB URL HTTP/2 secure.trust-provider.com/trustlogo/images/popup/seal_bg.gif
IP
ASN #48447 Sectigo Limited
File type GIF image data, version 89a, 204 x 80\012- data
Hash 3792ee5fc810dbbbc0497d925d9800d9
80b1d6d9fd6db6bd42223d8097fb67f372ab08ef
6a8d73fd166e03d8e1c024ac60d01d9110c4ac56b45f5bb402739e4095d4a95b
GET /trustlogo/images/popup/seal_bg.gif HTTP/1.1
Host: secure.trust-provider.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:18 GMT
content-type: image/gif
content-length: 4851
last-modified: Thu, 26 Jan 2023 09:48:10 GMT
etag: "63d24c5a-12f3"
accept-ranges: bytes
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
ads.dotomi.com/banners/fia/468x60_default.jpg
200 OK 36 kB URL HTTP/1.1 ads.dotomi.com/banners/fia/468x60_default.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=61, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=469], baseline, precision 8, 468x60, components 3\012- data
Hash e7d70500fbf613b96eb1910408a4518a
69fb91eb3828c1eab537e37fe3e53584977f680d
924c6dd8b53eede4f73c40a0554073df9b31ba2bdd67a1f342a790662a747b48
GET /banners/fia/468x60_default.jpg HTTP/1.1
Host: ads.dotomi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 Feb 2023 13:04:18 GMT
Content-Type: image/jpeg
Content-Length: 36473
Connection: keep-alive
Last-Modified: Thu, 25 Jan 2018 03:03:42 GMT, Thu, 25 Jan 2018 03:03:42 GMT, Thu, 25 Jan 2018 03:03:42 GMT, Thu, 25 Jan 2018 03:03:42 GMT
ETag: "5a69490e-8e79", "5a69490e-8e79", "5a69490e-8e79", "5a69490e-8e79"
Accept-Ranges: bytes, bytes, bytes, bytes
Access-Control-Allow-Origin: *
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP NID OUR STP"
ads.dotomi.com/banners/fia/120x600_default.jpg
200 OK 44 kB URL HTTP/1.1 ads.dotomi.com/banners/fia/120x600_default.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1251, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=251], baseline, precision 8, 120x600, components 3\012- data
Hash acc2898b05fa025ecf30a607b472a1df
de42dafd7b07fe0de899a352aa3bb3dca33dd49f
d83e498fbdf3044334d3b3ec6649a1570118060222b39748bd825c7c52aed99e
GET /banners/fia/120x600_default.jpg HTTP/1.1
Host: ads.dotomi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 Feb 2023 13:04:18 GMT
Content-Type: image/jpeg
Content-Length: 43769
Connection: keep-alive
Last-Modified: Thu, 25 Jan 2018 02:58:20 GMT
ETag: "5a6947cc-aaf9"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP NID OUR STP"
ads.dotomi.com/banners/fia/300x250_default.jpg
200 OK 63 kB URL HTTP/1.1 ads.dotomi.com/banners/fia/300x250_default.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=251, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=301], baseline, precision 8, 300x250, components 3\012- data
Hash f1f03fc54a47a07fd7a6fda59e3b4548
c799bc20eb3e1d598e0e33eafaa79e66dfe4a617
55e0d9358cb60205eff06d2ce1215f07b5945abd16d4fda876519421c850ca46
GET /banners/fia/300x250_default.jpg HTTP/1.1
Host: ads.dotomi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 Feb 2023 13:04:18 GMT
Content-Type: image/jpeg
Content-Length: 62786
Connection: keep-alive
Last-Modified: Thu, 25 Jan 2018 03:01:12 GMT, Thu, 25 Jan 2018 03:01:12 GMT, Thu, 25 Jan 2018 03:01:12 GMT, Thu, 25 Jan 2018 03:01:12 GMT, Thu, 25 Jan 2018 03:01:12 GMT
ETag: "5a694878-f542", "5a694878-f542", "5a694878-f542", "5a694878-f542", "5a694878-f542"
Accept-Ranges: bytes, bytes, bytes, bytes, bytes
Access-Control-Allow-Origin: *
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP NID OUR STP"
router.infolinks.com/usync/lcmanage?pid=2854208&wsid=1&pdom=odili.net&purl=https%3A%2F%2Fodili.net%2F
200 OK 0 B URL HTTP/2 router.infolinks.com/usync/lcmanage?pid=2854208&wsid=1&pdom=odili.net&purl=https%3A%2F%2Fodili.net%2F
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/lcmanage?pid=2854208&wsid=1&pdom=odili.net&purl=https%3A%2F%2Fodili.net%2F HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:18 GMT
content-length: 0
cache-control: no-store
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 794bd9e40d20b500-OSL
X-Firefox-Spdy: h2
ib.adnxs.com/getuid?https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fapn-usync%3Fuser_id%3D%24UID
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/getuid?https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fapn-usync%3Fuser_id%3D%24UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fapn-usync%3Fuser_id%3D%24UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sun, 05 Feb 2023 13:04:18 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fapn-usync%253Fuser_id%253D%2524UID
AN-X-Request-Uuid: 965069eb-5791-4348-9af9-5ee40f117831
Set-Cookie: uuid2=8782705948480731567; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 06-May-2023 13:04:18 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 959.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fapn-usync%253Fuser_id%253D%2524UID
302 Found 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fapn-usync%253Fuser_id%253D%2524UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fapn-usync%253Fuser_id%253D%2524UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Sun, 05 Feb 2023 13:04:18 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://router.infolinks.com/dyn/apn-usync?user_id=0
AN-X-Request-Uuid: 771c607c-17cd-4b23-a17e-f1d5d4debe37
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 959.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ocsp.digicert.com/
200 OK 280 B IP
Hash d1c034e9f102b96849eb36a54549ed60
6fa23236723cc7ed75f0407b8b43cd1002902cd7
f65f111f3f2391128d62d5c16a9eedc763fcf79c58702bfaf41166298539c6c7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4295
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 13:04:18 GMT
Last-Modified: Sun, 05 Feb 2023 11:52:43 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 280
ib.adnxs.com/getuid?https://s.cpx.to/ca.png?ref=https%253A%252F%252Fodili.net%252F&pid=12306&adnxs_uid=$UID
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/getuid?https://s.cpx.to/ca.png?ref=https%253A%252F%252Fodili.net%252F&pid=12306&adnxs_uid=$UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https://s.cpx.to/ca.png?ref=https%253A%252F%252Fodili.net%252F&pid=12306&adnxs_uid=$UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sun, 05 Feb 2023 13:04:18 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fs.cpx.to%2Fca.png%3Fref%3Dhttps%25253A%25252F%25252Fodili.net%25252F%26pid%3D12306%26adnxs_uid%3D%24UID
AN-X-Request-Uuid: da7d7456-85e2-44f3-a362-2d40161d4dcd
Set-Cookie: uuid2=3394950239729905367; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 06-May-2023 13:04:18 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 959.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
status.geotrust.com/
200 OK 471 B IP
Hash 33b4dcac47176829c3f733cf485b00d8
2f0ca8dfa8106b51602e1c9cd6a5b1e31254c924
d258d8a0ec6ed7cf9fb2ee6de730c0380adde3a3c656e10f046a56f140307f2c
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6543
Cache-Control: max-age=99571
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 13:04:18 GMT
Etag: "63de71b6-1d7"
Expires: Mon, 06 Feb 2023 16:43:49 GMT
Last-Modified: Sat, 04 Feb 2023 14:54:46 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 314 B IP
Hash ad2f6d0fb4666867c9e0a3530f0f66a6
c166f3bd45870c2866b9d825d41de1d4cf5afa1b
ebe47085a1e80be160adad02d7992b7482897321808d69350044e2d32dbc5bce
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2849
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 13:04:18 GMT
Last-Modified: Sun, 05 Feb 2023 12:16:49 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 314
ssum-sec.casalemedia.com/usermatch?s=191306&cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D
302 Found 0 B URL HTTP/2 ssum-sec.casalemedia.com/usermatch?s=191306&cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatch?s=191306&cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 05 Feb 2023 13:04:18 GMT
content-length: 0
location: /usermatch?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D&s=191306&C=1
cf-ray: 794bd9e668dfb4eb-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
pragma: no-cache
set-cookie: CMID=Y9.pUmhOM4njJmPm1ATzlgAA; Path=/; Domain=casalemedia.com; Expires=Mon, 05 Feb 2024 13:04:18 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=666; Path=/; Domain=casalemedia.com; Expires=Sat, 06 May 2023 13:04:18 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=666; Path=/; Domain=casalemedia.com; Expires=Sat, 06 May 2023 13:04:18 GMT; Max-Age=7776000; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BnypOyxnKURmcdwJR5oaKSxn0%2FdZl4KWMpB5n0qte%2BSfhSSAScEFtSdYWhDOII1aSZ3WLkhdpWwStbS%2F09mK0M5LjwJPvlsx%2FNQ4z%2BNIlygvCcS9ZAvuDnZPmI1Oqq8IHd37CBzluluiKA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cs.media.net/cksync?cs=41&ovsid=setstatuscode&type=inf&redirect=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fmnet-usync%3Fuid%3D%3Cvsid%3E
302 Moved Temporarily 154 B URL HTTP/1.1 cs.media.net/cksync?cs=41&ovsid=setstatuscode&type=inf&redirect=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fmnet-usync%3Fuid%3D%3Cvsid%3E
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 52558d05355ee6e9d14ff3cf8a5a3ef0
52cfd7dd3859dc0578849a7b1c91bb8f91ad84c2
bac5546ea0f819f461c9023592ec2398a45a6c3aab78e55fed8b7c908dce6060
GET /cksync?cs=41&ovsid=setstatuscode&type=inf&redirect=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fmnet-usync%3Fuid%3D%3Cvsid%3E HTTP/1.1
Host: cs.media.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: Apache
Content-Length: 154
Content-Type: text/html
Location: https://router.infolinks.com/dyn/mnet-usync?uid=0000EEA
Set-Cookie: data-inf=setstatuscode~~41;Expires=Sat, 06 May 2023 13:04:18 GMT;path=/;domain=.media.net;
P3P: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA", CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA
X-MNET-HL2: E
Expires: Sun, 05 Feb 2023 13:04:19 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 05 Feb 2023 13:04:19 GMT
Connection: keep-alive
router.infolinks.com/dyn/iq-usync
200 OK 0 B URL HTTP/2 router.infolinks.com/dyn/iq-usync
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dyn/iq-usync HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/usync/manage?pid=2854208&wsid=1&pdom=odili.net&purl=https%3A%2F%2Fodili.net%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:19 GMT
content-length: 0
cache-control: no-store
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 794bd9e55ef7b500-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 3df6a2ef0673760172cd3d0dffb9689c
4d01cfe8a9493e1977a140ea946322e74cf11b75
99dffa81b41fdb7c4f4806f460d4f8a8f9eafabcac64b4b9a27f9feb28112762
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 900
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 13:04:19 GMT
Last-Modified: Sun, 05 Feb 2023 12:49:19 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
ocsp.sectigo.com/
200 OK 472 B IP
Hash 9a19c62c0792d92e744b83a0081515a4
e3f8c4d7411027230e8ae353e5bc0896f5fede7b
3f01a15fb576dd2ce4e27c43de82336c8e3b8ab39adb643dc607704ce56b9f16
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 13:04:19 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 04 Feb 2023 13:55:56 GMT
Expires: Sat, 11 Feb 2023 13:55:55 GMT
Etag: "e3f8c4d7411027230e8ae353e5bc0896f5fede7b"
Cache-Control: max-age=520895,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 794bd9e6b975b518-OSL
onetag-sys.com/usync/?pubId=598ce3ddaee8c90
204 No Content 0 B URL HTTP/2 onetag-sys.com/usync/?pubId=598ce3ddaee8c90
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/?pubId=598ce3ddaee8c90 HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
cache-control: no-store
strict-transport-security: max-age=15552000
X-Firefox-Spdy: h2
u.openx.net/w/1.0/cm?id=9b5994f2-035d-46de-8c12-bc0e9a4e66c2&r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fox-usync%3Fuid%3D
200 OK 56 B URL HTTP/2 u.openx.net/w/1.0/cm?id=9b5994f2-035d-46de-8c12-bc0e9a4e66c2&r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fox-usync%3Fuid%3D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 15669dda86db3cbff7835fa202dc0b16
ce788cab9c1aa7e458a3971a59702c410b37e64d
5cc3f958039a8885c4e9526e22d454da47d579b9a02861e7a60b41fa0ba910df
GET /w/1.0/cm?id=9b5994f2-035d-46de-8c12-bc0e9a4e66c2&r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fox-usync%3Fuid%3D HTTP/1.1
Host: u.openx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept, Accept-Encoding
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Sun, 05 Feb 2023 13:04:19 GMT
content-type: text/html
content-length: 56
content-encoding: gzip
cache-control: private, max-age=0, no-cache
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 3df6a2ef0673760172cd3d0dffb9689c
4d01cfe8a9493e1977a140ea946322e74cf11b75
99dffa81b41fdb7c4f4806f460d4f8a8f9eafabcac64b4b9a27f9feb28112762
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 900
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 13:04:19 GMT
Last-Modified: Sun, 05 Feb 2023 12:49:19 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
router.infolinks.com/dyn/apn-usync?user_id=0
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/apn-usync?user_id=0
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/apn-usync?user_id=0 HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:19 GMT
content-type: image/gif
content-length: 35
cache-control: no-store
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 794bd9e658a1b500-OSL
X-Firefox-Spdy: h2
ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fs.cpx.to%2Fca.png%3Fref%3Dhttps%25253A%25252F%25252Fodili.net%25252F%26pid%3D12306%26adnxs_uid%3D%24UID
302 Found 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fs.cpx.to%2Fca.png%3Fref%3Dhttps%25253A%25252F%25252Fodili.net%25252F%26pid%3D12306%26adnxs_uid%3D%24UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fs.cpx.to%2Fca.png%3Fref%3Dhttps%25253A%25252F%25252Fodili.net%25252F%26pid%3D12306%26adnxs_uid%3D%24UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Sun, 05 Feb 2023 13:04:19 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://s.cpx.to/ca.png?ref=https%3A%2F%2Fodili.net%2F&pid=12306&adnxs_uid=0
AN-X-Request-Uuid: abffc2a2-50ab-4526-89ae-feb47c22e784
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 959.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ocsp.digicert.com/
200 OK 471 B IP
Hash 13445df27c5946c36783669a3417a5fa
650b82bef702b6f9cb428b1bfcb78ed6ffde305a
46f9aaa584df5a324426eb0e3effc01b7d0a93c285d4d7060ec39dba2b5b06ff
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6342
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 13:04:19 GMT
Last-Modified: Sun, 05 Feb 2023 11:18:37 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 5f9a07c50e171a7a1c983c3e546fa747
701c6cb3c3acf183ada0ca7144fd5a6accdc3a7a
cf5194a18d2a1926880316305c783ac5d9a6b8086d9ed13d0c50f1303d2fa756
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 05 Feb 2023 13:04:19 GMT
Last-Modified: Sun, 05 Feb 2023 12:58:28 GMT
Server: ECS (nyb/1DCD)
X-Cache: Miss from cloudfront
Via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: QnSbWtTw9Hr0r8nMOo5NIDdNL_apotRagAHIwKvhtK68bhMprKVb_Q==
Age: 351
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 559e28226cae3d9dcc05a4b3b2397e9d
9554456b30a6948aceb7102906e93342907b065f
13c46ddee7d04c6128ab27034d24127c18bb40c5a053da4f641209eb9f693445
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=91051
Date: Sun, 05 Feb 2023 13:04:19 GMT
Etag: "63de5723-1d7"
Expires: Mon, 06 Feb 2023 14:21:50 GMT
Last-Modified: Sat, 04 Feb 2023 13:01:23 GMT
Server: ECS (nyb/1D22)
X-Cache: Miss from cloudfront
Via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: -az9g5H1jigeU8YAH3uNSVJ0zgLn1dQ1-tgnQi_JjuJcA4sc5zgU7w==
Age: 4827
image8.pubmatic.com/AdServer/ImgSync?p=60809&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D60809%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fusersync%253Fpmuservalue%253D%2523PMUID
302 Found 272 B URL HTTP/2 image8.pubmatic.com/AdServer/ImgSync?p=60809&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D60809%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fusersync%253Fpmuservalue%253D%2523PMUID
IP
File type HTML document, ASCII text
Hash ebb92a4e4bfa9f49081d6d5490b87169
e986871fb2a1067935b9f45ff4ba155383056b29
fd3de728a94f948ba814f33b0020466ae949a4c493784a6b7a5f23687385747d
GET /AdServer/ImgSync?p=60809&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D60809%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fusersync%253Fpmuservalue%253D%2523PMUID HTTP/1.1
Host: image8.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=utf-8
location: /AdServer/ImgSync?p=60809&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D60809%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fusersync%253Fpmuservalue%253D%2523PMUID&rdf=1
set-cookie: KTPCACOOKIE=YES; domain=pubmatic.com; path=/; max-age=86400; secure;
date: Sun, 05 Feb 2023 13:04:19 GMT
content-length: 272
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 392150821fa2297ac03c44478a2dce26
d95771a08af29868b2cf80c0cb7e27b4de9a38e5
30fbbe75e0ec1a15edac9f7b0271ee25bb924822be648cf04c5148eec820af77
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5756
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 13:04:19 GMT
Last-Modified: Sun, 05 Feb 2023 11:28:24 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
image8.pubmatic.com/AdServer/ImgSync?p=156872&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156872%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fpbm-usync%253Fuid%253D%2523PMUID
302 Found 267 B URL HTTP/2 image8.pubmatic.com/AdServer/ImgSync?p=156872&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156872%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fpbm-usync%253Fuid%253D%2523PMUID
IP
File type HTML document, ASCII text
Hash 4c3b0ed5d0694dfc6293df9d26db3427
d24a807f496ede8c6860cdfaef65db160c5bd622
bd7d1d9ab7cd90754ced171b8a2a5f8585295a99cbdaeeb377019e772442efe4
GET /AdServer/ImgSync?p=156872&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156872%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fpbm-usync%253Fuid%253D%2523PMUID HTTP/1.1
Host: image8.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=utf-8
location: /AdServer/ImgSync?p=156872&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156872%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fpbm-usync%253Fuid%253D%2523PMUID&rdf=1
set-cookie: KTPCACOOKIE=YES; domain=pubmatic.com; path=/; max-age=86400; secure;
date: Sun, 05 Feb 2023 13:04:17 GMT
content-length: 267
X-Firefox-Spdy: h2
cms.quantserve.com/pixel/p-u1vdacBMXAcfT.gif?idmatch=0
302 Found 0 B URL HTTP/2 cms.quantserve.com/pixel/p-u1vdacBMXAcfT.gif?idmatch=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/p-u1vdacBMXAcfT.gif?idmatch=0 HTTP/1.1
Host: cms.quantserve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 05 Feb 2023 13:04:19 GMT
content-length: 0
cache-control: private, no-cache, no-store, proxy-revalidate
expires: Fri, 04 Aug 1978 12:00:00 GMT
location: https://router.infolinks.com/dyn/qc-usync?&uid=pE-oufNF-ey_Tfnnqh3hvfEf_um_TPi9pUQasEkD
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV"
pragma: no-cache
set-cookie: d=EE0BDQGcKM2aswA; expires=Sat, 06-May-2023 13:04:19 GMT; path=/; domain=.quantserve.com
mc=63dfa953-1588a-bcc26-04b78; expires=Thu, 07-Mar-2024 13:04:19 GMT; path=/; domain=.quantserve.com
X-Firefox-Spdy: h2
eb2.3lift.com/getuid?redir=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Ftplift%3Fuid%3D%24UID
200 OK 37 B URL HTTP/2 eb2.3lift.com/getuid?redir=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Ftplift%3Fuid%3D%24UID
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /getuid?redir=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Ftplift%3Fuid%3D%24UID HTTP/1.1
Host: eb2.3lift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:19 GMT
content-type: image/gif
content-length: 37
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
imasdk.googleapis.com/js/sdkloader/ima3.js
200 OK 126 kB URL HTTP/2 imasdk.googleapis.com/js/sdkloader/ima3.js
IP
File type ASCII text, with very long lines (2846)
Size 126 kB (125826 bytes)
Hash 98b1fe69946e421b8ece280ad4995eed
e6e0b95673083dd5319db64472e9505964998bc0
3ce90bb62a4f3d7a503d1a819ce1b7016837a27c17065adb97c94680a7cd870a
GET /js/sdkloader/ima3.js HTTP/1.1
Host: imasdk.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-doubleclick-instream-static"
report-to: {"group":"ads-doubleclick-instream-static","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static"}]}
content-length: 125826
date: Sun, 05 Feb 2023 13:04:19 GMT
expires: Sun, 05 Feb 2023 13:04:19 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ad.360yield.com/server_match?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fimd-usync%3Fuser_id%3D%7BPUB_USER_ID%7D%26partner_id%3D1531
302 Found 0 B URL HTTP/2 ad.360yield.com/server_match?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fimd-usync%3Fuser_id%3D%7BPUB_USER_ID%7D%26partner_id%3D1531
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /server_match?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fimd-usync%3Fuser_id%3D%7BPUB_USER_ID%7D%26partner_id%3D1531 HTTP/1.1
Host: ad.360yield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 05 Feb 2023 13:04:19 GMT
content-type: text/plain
content-length: 0
location: https://ad.360yield.com/ul_cb/server_match?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fimd-usync%3Fuser_id%3D%7BPUB_USER_ID%7D%26partner_id%3D1531
set-cookie: tuuid=63938305-229d-4059-b5ad-fd230cdc2601; Expires=Sat, 06 May 2023 13:04:19 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure
tuuid_lu=1675602259; Expires=Sat, 06 May 2023 13:04:19 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
X-Firefox-Spdy: h2
pixel.advertising.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true
301 Moved Permanently 360 B URL HTTP/2 pixel.advertising.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash ef184c6b065a63adf6c94f609c0a0c72
12e8af72d7af8f029d4300991e1eda7ec9f2545b
b01d8ed4f119579d92815a648e454327ae4af8a4592e98462fb72f414ddba9af
GET /ups/58237/sync?&gdpr=&gdpr_consent=&redir=true HTTP/1.1
Host: pixel.advertising.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Sun, 05 Feb 2023 13:04:19 GMT
server: ATS/9.1.10.25
cache-control: no-store
location: https://ups.analytics.yahoo.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true
content-type: text/html
content-language: en
set-cookie: A3=d=AQABBFOp32MCEHqT3F47X4AgdKPlrRDCyWAFEgEBAQH64GPpYwAAAAAA_eMAAA&S=AQAAAgSeBekkuVsDmw6TZ5CNlKA; Expires=Mon, 5 Feb 2024 19:04:19 GMT; Max-Age=31557600; Domain=.advertising.com; Path=/; SameSite=None; Secure; HttpOnly
content-length: 360
X-Firefox-Spdy: h2
rt3056.infolinks.com/action/dcl.htm?rid=34b454d9-a8d1-4eb0-b6f2-3071b21fd9e4&jsv=1845.006-3.025&capara=%7B%22failedAlgos%22%3A%22palgo%22%7D
200 OK 0 B URL HTTP/2 rt3056.infolinks.com/action/dcl.htm?rid=34b454d9-a8d1-4eb0-b6f2-3071b21fd9e4&jsv=1845.006-3.025&capara=%7B%22failedAlgos%22%3A%22palgo%22%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/dcl.htm?rid=34b454d9-a8d1-4eb0-b6f2-3071b21fd9e4&jsv=1845.006-3.025&capara=%7B%22failedAlgos%22%3A%22palgo%22%7D HTTP/1.1
Host: rt3056.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:19 GMT
content-type: text/html;charset=UTF-8
content-length: 0
x-application-context: application:prod
cache-control: no-cache,no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 794bd9e6f9a5b500-OSL
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/odili-odili/loader.js
200 OK 47 kB URL HTTP/2 cdn.taboola.com/libtrc/odili-odili/loader.js
IP
File type ASCII text, with very long lines (65508)
Hash b41c3420f591838609283e0d5b43de59
75878549664c2353e1510b39e06b7dc51f0f4be3
c01f60fc3e94d1cd1f0fb69955c120516dfcb1c51b34a73f537493f2e67dd23b
GET /libtrc/odili-odili/loader.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: mEvA0KoVhExPfjN/jhp5FjyQOIBhmrZWtkSA3f/wqQo4dXleS9eyakaa8GDJ83IUJq2OHm7zTDs=
x-amz-request-id: 6R2FDCJ4THFNEBM8
x-amz-replication-status: FAILED
last-modified: Sun, 05 Feb 2023 11:35:33 GMT
etag: "e6d0b4c35f5bebb6d4d8f3c2b6ff2d12"
x-amz-version-id: a6RoAAbzrHd1FWWnGk9OmH7.Z7BPfWIX
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sun, 05 Feb 2023 13:04:19 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1682-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675602259.519304,VS0,VE635
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 84
content-length: 47297
X-Firefox-Spdy: h2
image8.pubmatic.com/AdServer/ImgSync?p=60809&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D60809%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fusersync%253Fpmuservalue%253D%2523PMUID&rdf=1
200 OK 0 B URL HTTP/2 image8.pubmatic.com/AdServer/ImgSync?p=60809&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D60809%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fusersync%253Fpmuservalue%253D%2523PMUID&rdf=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /AdServer/ImgSync?p=60809&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D60809%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fusersync%253Fpmuservalue%253D%2523PMUID&rdf=1 HTTP/1.1
Host: image8.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:18 GMT
content-length: 0
X-Firefox-Spdy: h2
ssum-sec.casalemedia.com/usermatch?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D&s=191306&C=1
200 OK 105 B URL HTTP/2 ssum-sec.casalemedia.com/usermatch?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D&s=191306&C=1
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash bdff65813951cf5f0b5339b1d9cb63b8
dc78c3fa584e236119dd6a435d41e949a72622c0
f7e2db147274683501a2fc8304a3b41335203be110fb8b66e97b33331ce7ed27
GET /usermatch?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D&s=191306&C=1 HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:19 GMT
content-type: text/html
cf-ray: 794bd9e6c966b4eb-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cHnxvV65eXXbwT1NUmGdk93W1bIuk%2F0IZOT1mvZwOSgTTLwmG%2FtB5XsffGyTSa6h65tltMqZ4zRAKcW12dhI9pKGameD53i7ZXbup5p2fJrfx%2BDbESDhWSPpo1LISjy%2FzLAu%2F6f3qQoAUA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 0bb3a776c8cb025e4dec9056ccbd236b
c47932e3b7dacc753885c9deb080f7a066ee3cbe
4a159720533ce330d1bdb9d6de77ff41188467cccc7a26d7efcfa599f7d56996
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4262
Cache-Control: max-age=138364
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 13:04:19 GMT
Etag: "63df1229-1d7"
Expires: Tue, 07 Feb 2023 03:30:23 GMT
Last-Modified: Sun, 05 Feb 2023 02:19:21 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 3669a4c9b38105ea2ba23e96a2e20234
bf2ccf2d6eeec28331abc07924c9025614f3980e
bfc46b38e20a5d68f46f3387b9b2b74d0c305c38da78284af5a56d5820533da3
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 05 Feb 2023 13:04:18 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 04 Feb 2023 21:42:58 GMT
Expires: Sun, 05 Feb 2023 21:42:58 GMT
ETag: "bf2ccf2d6eeec28331abc07924c9025614f3980e"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ups.analytics.yahoo.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true
302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58237/sync?&gdpr=&gdpr_consent=&redir=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Sun, 05 Feb 2023 13:04:19 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true&verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBFOp32MCEAcrwOhe9MLjmh1GxwhsdiMFEgEBAQH64GPpYwAAAAAA_eMAAA&S=AQAAAo6MfZK3EfBYqc1JvRVgELU; Expires=Mon, 5 Feb 2024 19:04:19 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
resources.infolinks.com/js/1845.006-3.025/intag_incontent.js
200 OK 40 kB URL HTTP/2 resources.infolinks.com/js/1845.006-3.025/intag_incontent.js
IP
Hash 0720b5900290c06927ecc659819204a2
e22269167709410c4f517343058c499054411916
323391103d089414e0ddcddb815e97d9d6c71444de59f6d03c0428fa49a16bb1
GET /js/1845.006-3.025/intag_incontent.js HTTP/1.1
Host: resources.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:19 GMT
content-type: application/javascript
last-modified: Wed, 25 Jan 2023 14:23:04 GMT
etag: W/"31bf3-5f3175edcf0be"
cache-control: max-age=2592000
expires: Tue, 07 Mar 2023 10:05:34 GMT
via: 1.1 google
cf-cache-status: HIT
age: 10724
vary: Accept-Encoding
server: cloudflare
cf-ray: 794bd9e6a924b500-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash 33b4dcac47176829c3f733cf485b00d8
2f0ca8dfa8106b51602e1c9cd6a5b1e31254c924
d258d8a0ec6ed7cf9fb2ee6de730c0380adde3a3c656e10f046a56f140307f2c
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4082
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 13:04:19 GMT
Last-Modified: Sun, 05 Feb 2023 11:56:17 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
rt3056.infolinks.com/action/dcl.htm?rid=34b454d9-a8d1-4eb0-b6f2-3071b21fd9e4&jsv=1845.006-3.025&capara=%7B%22mode%22%3A%22default%22%2C%22markers%22%3A0%7D
200 OK 0 B URL HTTP/2 rt3056.infolinks.com/action/dcl.htm?rid=34b454d9-a8d1-4eb0-b6f2-3071b21fd9e4&jsv=1845.006-3.025&capara=%7B%22mode%22%3A%22default%22%2C%22markers%22%3A0%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/dcl.htm?rid=34b454d9-a8d1-4eb0-b6f2-3071b21fd9e4&jsv=1845.006-3.025&capara=%7B%22mode%22%3A%22default%22%2C%22markers%22%3A0%7D HTTP/1.1
Host: rt3056.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:19 GMT
content-type: text/html;charset=UTF-8
content-length: 0
x-application-context: application:prod
cache-control: no-cache,no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 794bd9e77a5eb500-OSL
X-Firefox-Spdy: h2
rt3056.infolinks.com/action/dcl.htm?rid=34b454d9-a8d1-4eb0-b6f2-3071b21fd9e4&jsv=1845.006-3.025&capara=%7B%22failedAlgos%22%3A%22aapalgo%22%7D
200 OK 0 B URL HTTP/2 rt3056.infolinks.com/action/dcl.htm?rid=34b454d9-a8d1-4eb0-b6f2-3071b21fd9e4&jsv=1845.006-3.025&capara=%7B%22failedAlgos%22%3A%22aapalgo%22%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/dcl.htm?rid=34b454d9-a8d1-4eb0-b6f2-3071b21fd9e4&jsv=1845.006-3.025&capara=%7B%22failedAlgos%22%3A%22aapalgo%22%7D HTTP/1.1
Host: rt3056.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:19 GMT
content-type: text/html;charset=UTF-8
content-length: 0
x-application-context: application:prod
cache-control: no-cache,no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 794bd9e78a6cb500-OSL
X-Firefox-Spdy: h2
rt3056.infolinks.com/action/getads.htm?hks=%5B%5D&rid=34b454d9-a8d1-4eb0-b6f2-3071b21fd9e4&jsv=1845.006-3.025&sr=1280X1002&rts=1675602299436&cfv=-1&cb=getAdsResponse&os=Windows&ov=10&br=Firefox&bv=105.0&dv=p&ce=t&purl=https%3A%2F%2Fodili.net%2F&tzo=-0000&c=c&strg=true&rsd=ytQQHGI35_IL3TiRY0s7FECY64BtI_EfOQVgR7UHMc4cVsemaTOThPKqV2hbxmNZ3DxrxnzMex0zrtQ-9BwskiqPXOKOq2hNe6peW9zW75Y31aBvGNCE7M92EnoC9SuT1n8kRl2zZyqedy8CLlxkXjLF4nGBlnL5&rsk=73&rcs=pd_uA_qNfU-V49e9-pYxyw&cuid=6596b153-9b26-4ed5-92a6-23a3c660dae7&hbnr=false
200 OK 0 B URL HTTP/2 rt3056.infolinks.com/action/getads.htm?hks=%5B%5D&rid=34b454d9-a8d1-4eb0-b6f2-3071b21fd9e4&jsv=1845.006-3.025&sr=1280X1002&rts=1675602299436&cfv=-1&cb=getAdsResponse&os=Windows&ov=10&br=Firefox&bv=105.0&dv=p&ce=t&purl=https%3A%2F%2Fodili.net%2F&tzo=-0000&c=c&strg=true&rsd=ytQQHGI35_IL3TiRY0s7FECY64BtI_EfOQVgR7UHMc4cVsemaTOThPKqV2hbxmNZ3DxrxnzMex0zrtQ-9BwskiqPXOKOq2hNe6peW9zW75Y31aBvGNCE7M92EnoC9SuT1n8kRl2zZyqedy8CLlxkXjLF4nGBlnL5&rsk=73&rcs=pd_uA_qNfU-V49e9-pYxyw&cuid=6596b153-9b26-4ed5-92a6-23a3c660dae7&hbnr=false
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/getads.htm?hks=%5B%5D&rid=34b454d9-a8d1-4eb0-b6f2-3071b21fd9e4&jsv=1845.006-3.025&sr=1280X1002&rts=1675602299436&cfv=-1&cb=getAdsResponse&os=Windows&ov=10&br=Firefox&bv=105.0&dv=p&ce=t&purl=https%3A%2F%2Fodili.net%2F&tzo=-0000&c=c&strg=true&rsd=ytQQHGI35_IL3TiRY0s7FECY64BtI_EfOQVgR7UHMc4cVsemaTOThPKqV2hbxmNZ3DxrxnzMex0zrtQ-9BwskiqPXOKOq2hNe6peW9zW75Y31aBvGNCE7M92EnoC9SuT1n8kRl2zZyqedy8CLlxkXjLF4nGBlnL5&rsk=73&rcs=pd_uA_qNfU-V49e9-pYxyw&cuid=6596b153-9b26-4ed5-92a6-23a3c660dae7&hbnr=false HTTP/1.1
Host: rt3056.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:19 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
x-application-context: application:prod
cache-control: no-cache,no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 794bd9e78a6fb500-OSL
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58422/occ
302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58422/occ
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58422/occ HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 05 Feb 2023 13:04:19 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/58422/occ?verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBFOp32MCEM_OfGKorvFR75Z3dKXJQrEFEgEBAQH64GPpYwAAAAAA_eMAAA&S=AQAAApmVwPGWrFr1L3aPdXHrf5I; Expires=Mon, 5 Feb 2024 19:04:19 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true&verify=true
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true&verify=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58237/sync?&gdpr=&gdpr_consent=&redir=true&verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 05 Feb 2023 13:04:19 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBFOp32MCELAHlAB9rYPhajfAoErbyPcFEgEBAQH64GPpYwAAAAAA_eMAAA&S=AQAAAgaCXLfWMiSG7c9-3108Ucw; Expires=Mon, 5 Feb 2024 19:04:19 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ap.lijit.com/pixel?redir=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fsovrn-usync%3Fuid%3D%24UID
204 No Content 0 B URL HTTP/1.1 ap.lijit.com/pixel?redir=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fsovrn-usync%3Fuid%3D%24UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel?redir=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fsovrn-usync%3Fuid%3D%24UID HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Sun, 05 Feb 2023 13:04:19 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, DELETE, PUT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type
X-Sovrn-Pod: ad_ap2ams1
ocsp.sectigo.com/
200 OK 471 B IP
Hash 31a51dfff45e63ba8909bda3a3f2ca53
429a7ea67f57ea2c49699e650a09e09c1f983950
dc62d165a95afb87c345affd01d2e6a18d9f85647892b90d94500cb333f76a1c
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 13:04:19 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 05 Feb 2023 11:33:42 GMT
Expires: Sun, 12 Feb 2023 11:33:41 GMT
Etag: "429a7ea67f57ea2c49699e650a09e09c1f983950"
Cache-Control: max-age=598761,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 794bd9e75a2fb518-OSL
b1sync.zemanta.com/usersync/infolinks/?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fzmn-usync%3Fuid%3D__ZUID__
302 Found 70 B URL HTTP/1.1 b1sync.zemanta.com/usersync/infolinks/?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fzmn-usync%3Fuid%3D__ZUID__
IP
File type HTML document, ASCII text
Hash 16ccc9da763aca428789e4f469fc7ff1
4a873c523b8d9bdbc30b8c48189817413a19ee7a
5be7e833013b4b10333a904010b01217263df39c501a29b146d072110ceea4a1
GET /usersync/infolinks/?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fzmn-usync%3Fuid%3D__ZUID__ HTTP/1.1
Host: b1sync.zemanta.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Content-Length: 70
Cache-Control: no-cache, no-store, must-revalidate
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Location: https://router.infolinks.com/dyn/zmn-usync?uid=
Pragma: no-cache
Date: Sun, 05 Feb 2023 13:04:19 GMT
router.infolinks.com/dyn/r1-usync?uid=OPTOUT
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/r1-usync?uid=OPTOUT
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/r1-usync?uid=OPTOUT HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:19 GMT
content-type: image/gif
content-length: 35
cache-control: no-store, no-cache, private
set-cookie: R1USERCOOKIE=OPTOUT; Domain=infolinks.com; Expires=Sat, 06-May-2023 13:04:19 GMT; Path=/; SameSite=None; Secure
pragma: no-cache
expires: Sat, 05 Feb 2022 13:04:19 GMT
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 794bd9e7eb20b500-OSL
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/impl.20230205-12-RELEASE.js
200 OK 197 kB URL HTTP/2 cdn.taboola.com/libtrc/impl.20230205-12-RELEASE.js
IP
File type ASCII text, with very long lines (65508)
Size 197 kB (196892 bytes)
Hash e6532114add3d32d6861de016d706d57
9807b129f4e9d3714ac7a2b0c542f44dd21cd410
ef9cbfbf9ab3f37a31cf5679aa819741590492e71ab0ee5269f9a5e335f22e99
GET /libtrc/impl.20230205-12-RELEASE.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: LrKfY/3B/qvjl293A1OfgwPKdR1hlI5x9BjqagX8HByTSe8btfjlNbLjJ9MQU4YYYgIJpc3U/R0=
x-amz-request-id: 4A014A7Q53RS0TAB
x-amz-replication-status: COMPLETED
last-modified: Sun, 05 Feb 2023 12:15:15 GMT
etag: "49e56b50b95c2f758636cee6ffc5339c"
x-amz-version-id: _BCF97z0IbEhSbVUgbq55G16DXIX.2FS
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sun, 05 Feb 2023 13:04:19 GMT
via: 1.1 varnish
age: 2530
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 1494
x-timer: S1675602259.297428,VS0,VE0
cache-control: private,max-age=31536000
vary: Accept-Encoding
abp: 15
content-length: 196892
X-Firefox-Spdy: h2
router.infolinks.com/dyn/mnet-usync?uid=0000EEA
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/mnet-usync?uid=0000EEA
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/mnet-usync?uid=0000EEA HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:19 GMT
content-type: image/gif
content-length: 35
cache-control: no-store, no-cache, private
set-cookie: MNETUSERCOOKIE=0000EEA; Domain=infolinks.com; Expires=Sat, 06-May-2023 13:04:19 GMT; Path=/; SameSite=None; Secure
pragma: no-cache
expires: Sat, 05 Feb 2022 13:04:19 GMT
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 794bd9e79aa7b500-OSL
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 351768673989e1328d2dd26306f87210
49a980b46542cdd77c0ccf284494a7b873331759
170ab615550fc9006fdf721e2514fd0eecff58f64c88239c4ef5369921d85389
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 13:04:19 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 04 Feb 2023 14:15:48 GMT
Expires: Sat, 11 Feb 2023 14:15:47 GMT
Etag: "49a980b46542cdd77c0ccf284494a7b873331759"
Cache-Control: max-age=522087,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 794bd9e77c88b4fd-OSL
rt3056.infolinks.com/action/dcl.htm?rid=34b454d9-a8d1-4eb0-b6f2-3071b21fd9e4&jsv=1845.006-3.025&capara=%7B%22mode%22%3A%22default%22%2C%22markers%22%3A1%7D
200 OK 0 B URL HTTP/2 rt3056.infolinks.com/action/dcl.htm?rid=34b454d9-a8d1-4eb0-b6f2-3071b21fd9e4&jsv=1845.006-3.025&capara=%7B%22mode%22%3A%22default%22%2C%22markers%22%3A1%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/dcl.htm?rid=34b454d9-a8d1-4eb0-b6f2-3071b21fd9e4&jsv=1845.006-3.025&capara=%7B%22mode%22%3A%22default%22%2C%22markers%22%3A1%7D HTTP/1.1
Host: rt3056.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:19 GMT
content-type: text/html;charset=UTF-8
content-length: 0
x-application-context: application:prod
cache-control: no-cache,no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 794bd9e76a43b500-OSL
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 193f7510f05f1d5da2928ca0f1de9734
cf6cf8ad67912e33f7427a3c6767edc447aa9197
2909cf90334e71469785cb7ecf22eec943e510fe4a816a0786b40e7e229706fd
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 13:04:19 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 04 Feb 2023 13:57:51 GMT
Expires: Sat, 11 Feb 2023 13:57:50 GMT
Etag: "cf6cf8ad67912e33f7427a3c6767edc447aa9197"
Cache-Control: max-age=521010,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 794bd9e89b9db518-OSL
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 533bcfd78bb58a30a23ec1951fb11ba0
d549d04bf736ec0b65c933df6e715dcf27f6f20b
cfb930af4e04f74aede93726a25472bc90cae89aa680b9cee7da457ed6789779
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=171442
Date: Sun, 05 Feb 2023 13:04:19 GMT
Etag: "63df9a7f-1d7"
Expires: Tue, 07 Feb 2023 12:41:41 GMT
Last-Modified: Sun, 05 Feb 2023 12:01:03 GMT
Server: ECS (nyb/1D04)
X-Cache: Miss from cloudfront
Via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: zf752ovXCFdeMkI-0hGgKDxrc3wRBIsuuwVbx2WEOF7IykaN6wWfNg==
Age: 2438
p.rfihub.com/cm?pub=43153&in=1
302 Found 0 B URL HTTP/1.1 p.rfihub.com/cm?pub=43153&in=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?pub=43153&in=1 HTTP/1.1
Host: p.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Sun, 05 Feb 2023 13:04:19 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: rud=H4sIAAAAAAAA_-MSNjU0MDcxNrYwMgMSlsZGxiYWQnyGulmBUZ7mBpmWnuEFhgBJeC0xJQAAAA; Path=/; Domain=.rfihub.com; Expires=Fri, 1 Mar 2024 13:04:19 GMT; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0MDcxNrYwMgMSlsZGxiYWQnyGulmBUZ7mBpmWnuEFhgBJeC0xJQAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
eud=H4sIAAAAAAAA_1slzmtoZm5qZmBkZGppbGoIADPWqwoQAAAA; Path=/; Domain=.rfihub.com; Expires=Fri, 1 Mar 2024 13:04:19 GMT; Secure; SameSite=None
Location: https://router.infolinks.com/dyn/zeta-usync?uid=5107433826338932348
Content-Length: 0
Server: Jetty(9.3.29.v20201019)
sync.go.sonobi.com/us?loc=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fsonobi-usync%3Fuid%3D%5BUID%5D
302 Found 0 B URL HTTP/1.1 sync.go.sonobi.com/us?loc=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fsonobi-usync%3Fuid%3D%5BUID%5D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /us?loc=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fsonobi-usync%3Fuid%3D%5BUID%5D HTTP/1.1
Host: sync.go.sonobi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Sun, 05 Feb 2023 13:04:19 GMT
Content-Type: text/plain; charset=utf8
Content-Length: 0
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, no-store, private
P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Pragma: no-cache
Tcn: Choice
Vary: negotiate,Accept-Encoding
X-Go-Server: go-iad-2-5-130
X-Xss-Protection: 0
Location: https://router.infolinks.com/dyn/sonobi-usync?uid=c2153eee-6927-4518-82f3-6bde65fdfc34
Server: sonobi-go
Set-Cookie: __uis=c2153eee-6927-4518-82f3-6bde65fdfc34; expires=Tue, 07 Mar 2023 13:04:19 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None
HAPLB8S=s85130|Y9+pV; path=/; domain=.go.sonobi.com; SameSite=None; secure
router.infolinks.com/gsd?evt=afterGSD&pid=2854208&wsid=1&pdom=odili.net&purl=https%3A%2F%2Fodili.net%2F&jsv=1845.006-3.025&_cb=16756022989000
200 OK 303 B URL HTTP/2 router.infolinks.com/gsd?evt=afterGSD&pid=2854208&wsid=1&pdom=odili.net&purl=https%3A%2F%2Fodili.net%2F&jsv=1845.006-3.025&_cb=16756022989000
IP
Hash 4d527a6ba30c2bda7665813ebae5c3e6
4143855f9a5e1c36c6da66021c931d4e10fd6cf5
6b5a14171e388445ecdc6a834e592ac305bd0b2292e706e9d6fb39c36293b6e3
GET /gsd?evt=afterGSD&pid=2854208&wsid=1&pdom=odili.net&purl=https%3A%2F%2Fodili.net%2F&jsv=1845.006-3.025&_cb=16756022989000 HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:18 GMT
content-type: text/javascript;charset=UTF-8
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: max-age=0
p3p: CP="NON DSP NID OUR COR"
set-cookie: cuid=6596b153-9b26-4ed5-92a6-23a3c660dae7; Domain=infolinks.com; Expires=Tue, 04-Feb-2025 13:04:18 GMT; Path=/; SameSite=None; Secure
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 794bd9e41d2db500-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
sb.scorecardresearch.com/b?c1=7&c2=34354936&c3=1&cs_it=b3&cv=3.8.0.210223&ns__t=1675602299698&ns_c=windows-1252&c7=https%3A%2F%2Fodili.net%2F&c8=ODILI.NET%20--%20Daily%20News%20Update&c9=
204 No Content 0 B URL HTTP/2 sb.scorecardresearch.com/b?c1=7&c2=34354936&c3=1&cs_it=b3&cv=3.8.0.210223&ns__t=1675602299698&ns_c=windows-1252&c7=https%3A%2F%2Fodili.net%2F&c8=ODILI.NET%20--%20Daily%20News%20Update&c9=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b?c1=7&c2=34354936&c3=1&cs_it=b3&cv=3.8.0.210223&ns__t=1675602299698&ns_c=windows-1252&c7=https%3A%2F%2Fodili.net%2F&c8=ODILI.NET%20--%20Daily%20News%20Update&c9= HTTP/1.1
Host: sb.scorecardresearch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 05 Feb 2023 13:04:19 GMT
set-cookie: UID=105167735f8356dc5dd9b8a1675602259; domain=.scorecardresearch.com; path=/; max-age=62208000
x-cache: Miss from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ty7NZxfkv5iTo5DTln8A9jP3f280zmcNCnB9SbmXaI61kd_ZA-onjw==
X-Firefox-Spdy: h2
de.tynt.com/deb/?m=xch&rt=html&sid=0010b00002CpYhEAAV
200 OK 75 B URL HTTP/2 de.tynt.com/deb/?m=xch&rt=html&sid=0010b00002CpYhEAAV
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 1ca09ed98f39d2adb7fab3878d13c0cb
da2a6f2431a34dfcc99b6f4500833f783f149d19
e170d20dbbd5a22f50118e25fa2eefb1e85d2ad780e5477ed3a9643186090442
GET /deb/?m=xch&rt=html&sid=0010b00002CpYhEAAV HTTP/1.1
Host: de.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=86400
expires: Mon, 06 Feb 2023 13:04:19 GMT
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
referrer-policy: unsafe-url
content-type: text/html
content-length: 75
date: Sun, 05 Feb 2023 13:04:19 GMT
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
resources.infolinks.com/static/skins/loader-bg.png
200 OK 902 B URL HTTP/2 resources.infolinks.com/static/skins/loader-bg.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1b84dbcd389398158f5932c35a24936f
6348c5732765e6fb6a8b743fb422f862573c8a67
c5ddb995fe37710a4be439e4e3f45016cd7b7ecfa3423a29e4f4f4dcce63efff
GET /static/skins/loader-bg.png HTTP/1.1
Host: resources.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:19 GMT
content-type: image/webp
content-length: 902
cache-control: max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=1488
content-disposition: inline; filename="loader-bg.webp"
vary: Accept
etag: "5d0-541420359b4a6"
expires: Tue, 07 Mar 2023 11:46:47 GMT
last-modified: Mon, 14 Nov 2016 12:31:03 GMT
via: 1.1 google
cf-cache-status: HIT
age: 4652
accept-ranges: bytes
server: cloudflare
cf-ray: 794bd9e93d83b500-OSL
X-Firefox-Spdy: h2
router.infolinks.com/dyn/ix-usync?uid=0
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/ix-usync?uid=0
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/ix-usync?uid=0 HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ssum-sec.casalemedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:19 GMT
content-type: image/gif
content-length: 35
cache-control: no-store
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 794bd9e7aad8b500-OSL
X-Firefox-Spdy: h2
resources.infolinks.com/static/skins/loader.gif
200 OK 962 B URL HTTP/2 resources.infolinks.com/static/skins/loader.gif
IP
File type GIF image data, version 89a, 30 x 30\012- data
Hash d817e8fd864b84f7d546807d800588ea
6a66609f160ee1640b0d0eddd5fdd96a95a1c4ef
e3b8ee13d35110d7006bc5c5147ee0a0c6c3e1f26b2f246b8d5e57edf4f6b97b
GET /static/skins/loader.gif HTTP/1.1
Host: resources.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:19 GMT
content-type: image/gif
content-length: 962
cache-control: max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origSize=1631, status=webp_bigger
etag: "65f-54142035d0066"
expires: Tue, 07 Mar 2023 10:43:11 GMT
last-modified: Mon, 14 Nov 2016 12:31:03 GMT
via: 1.1 google
cf-cache-status: HIT
age: 8468
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 794bd9e93d86b500-OSL
X-Firefox-Spdy: h2
ssc-cms.33across.com/ps/?ri=0010b00002CpYhEAAV&ru=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2F33a-usync%3Fuid%3D33XUSERID33X
204 No Content 0 B URL HTTP/2 ssc-cms.33across.com/ps/?ri=0010b00002CpYhEAAV&ru=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2F33a-usync%3Fuid%3D33XUSERID33X
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ps/?ri=0010b00002CpYhEAAV&ru=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2F33a-usync%3Fuid%3D33XUSERID33X HTTP/1.1
Host: ssc-cms.33across.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
x-33x-status: 2000208
server: 33XP013
date: Sun, 05 Feb 2023 13:04:19 GMT
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58422/occ?verify=true
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58422/occ?verify=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58422/occ?verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 05 Feb 2023 13:04:19 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBFOp32MCEPqIXLAQlthYQNWoXEQshbQFEgEBAQH64GPpYwAAAAAA_eMAAA&S=AQAAAjFa7VQd18oXFLH-DgDW1F4; Expires=Mon, 5 Feb 2024 19:04:19 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 9b065dd10769b4123608f9a5e4605f6a
99ed1febf2e2e6e51fe64dc9ff0e84bb494a2369
78b576dd0b15b786715efdd4a5d204643f51e27e72593679775be417a3ccfa53
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 13:04:19 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 02 Feb 2023 19:14:54 GMT
Expires: Thu, 09 Feb 2023 19:14:53 GMT
Etag: "99ed1febf2e2e6e51fe64dc9ff0e84bb494a2369"
Cache-Control: max-age=367233,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 794bd9e89babb51b-OSL
s.cpx.to/ca.png?ref=https%3A%2F%2Fodili.net%2F&pid=12306&adnxs_uid=0
200 OK 95 B URL HTTP/1.1 s.cpx.to/ca.png?ref=https%3A%2F%2Fodili.net%2F&pid=12306&adnxs_uid=0
IP
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9606fa62df0ffe87253f3baf418f0e42
fe8520ab0bf1622350513d685ece5faf70b4e8c1
bf27786b4381176350787d768bf5f7c5310ba640aa48ee98a3d2c310ddd971ab
GET /ca.png?ref=https%3A%2F%2Fodili.net%2F&pid=12306&adnxs_uid=0 HTTP/1.1
Host: s.cpx.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 13:04:19 GMT
Content-Type: image/png
Content-Length: 95
Connection: keep-alive
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: default-src 'self'
x-permitted-cross-domain-policies: none
cache-control: no-store, must-revalidate, private, max-age=0, no-store, must-revalidate, private, max-age=0
pragma: no-cache, no-cache
set-cookie: cpSess=c4a91ece51c9bf4; Expires=Mon, 05 Feb 2024 13:04:19 GMT; Domain=.cpx.to; Path=/; Secure; HttpOnly; SameSite=None
p3p: CP="NOI DEV ADM"
expires: Sun, 05 Feb 2023 13:04:19 UTC
router.infolinks.com/dyn/zeta-usync?uid=5107433826338932348
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/zeta-usync?uid=5107433826338932348
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/zeta-usync?uid=5107433826338932348 HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:19 GMT
content-type: image/gif
content-length: 35
cache-control: no-store, no-cache, private
set-cookie: ZTUSERCOOKIE=5107433826338932348; Domain=infolinks.com; Expires=Sat, 06-May-2023 13:04:19 GMT; Path=/; SameSite=None; Secure
pragma: no-cache
expires: Sat, 05 Feb 2022 13:04:19 GMT
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 794bd9e99e43b500-OSL
X-Firefox-Spdy: h2
router.infolinks.com/dyn/sonobi-usync?uid=c2153eee-6927-4518-82f3-6bde65fdfc34
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/sonobi-usync?uid=c2153eee-6927-4518-82f3-6bde65fdfc34
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/sonobi-usync?uid=c2153eee-6927-4518-82f3-6bde65fdfc34 HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:19 GMT
content-type: image/gif
content-length: 35
cache-control: no-store, no-cache, private
set-cookie: SONOBIUSERCOOKIE=c2153eee-6927-4518-82f3-6bde65fdfc34; Domain=infolinks.com; Expires=Sat, 06-May-2023 13:04:19 GMT; Path=/; SameSite=None; Secure
pragma: no-cache
expires: Sat, 05 Feb 2022 13:04:19 GMT
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 794bd9e99e48b500-OSL
X-Firefox-Spdy: h2
router.infolinks.com/dyn/zmn-usync?uid=
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/zmn-usync?uid=
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/zmn-usync?uid= HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:19 GMT
content-type: image/gif
content-length: 35
cache-control: no-store
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 794bd9e99e3ab500-OSL
X-Firefox-Spdy: h2
ssp.disqus.com/redirectuser?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fdisus%3Fuid%3D%24UID&partner=infolinks
302 Found 0 B URL HTTP/2 ssp.disqus.com/redirectuser?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fdisus%3Fuid%3D%24UID&partner=infolinks
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirectuser?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fdisus%3Fuid%3D%24UID&partner=infolinks HTTP/1.1
Host: ssp.disqus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 05 Feb 2023 13:04:19 GMT
content-length: 0
location: https://sync.go.sonobi.com/us?gdpr=&gdpr_consent=&us_privacy=&loc=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D18%26buyeruid%3D%5BUID%5D%26r%3DCid1YS1iZDkzYzVhNi1hNDhhLTMwNjItYTllYi00OWRiMWIyZDIwNGEQ____________ASpSaHR0cHM6Ly9yb3V0ZXIuaW5mb2xpbmtzLmNvbS9keW4vZGlzdXM_dWlkPXVhLWJkOTNjNWE2LWE0OGEtMzA2Mi1hOWViLTQ5ZGIxYjJkMjA0YTICEho4AQ==
cache-control: no-store
pragma: no-cache
expires: 0
set-cookie: zeta-ssp-user-id=ua-bd93c5a6-a48a-3062-a9eb-49db1b2d204a; Max-Age=31536000; Expires=Mon, 05 Feb 2024 13:04:19 GMT; Path=/; Domain=disqus.com; Secure; SameSite=None
X-Firefox-Spdy: h2
sync.go.sonobi.com/us?gdpr=&gdpr_consent=&us_privacy=&loc=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D18%26buyeruid%3D%5BUID%5D%26r%3DCid1YS1iZDkzYzVhNi1hNDhhLTMwNjItYTllYi00OWRiMWIyZDIwNGEQ____________ASpSaHR0cHM6Ly9yb3V0ZXIuaW5mb2xpbmtzLmNvbS9keW4vZGlzdXM_dWlkPXVhLWJkOTNjNWE2LWE0OGEtMzA2Mi1hOWViLTQ5ZGIxYjJkMjA0YTICEho4AQ==
302 Found 0 B URL HTTP/1.1 sync.go.sonobi.com/us?gdpr=&gdpr_consent=&us_privacy=&loc=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D18%26buyeruid%3D%5BUID%5D%26r%3DCid1YS1iZDkzYzVhNi1hNDhhLTMwNjItYTllYi00OWRiMWIyZDIwNGEQ____________ASpSaHR0cHM6Ly9yb3V0ZXIuaW5mb2xpbmtzLmNvbS9keW4vZGlzdXM_dWlkPXVhLWJkOTNjNWE2LWE0OGEtMzA2Mi1hOWViLTQ5ZGIxYjJkMjA0YTICEho4AQ==
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /us?gdpr=&gdpr_consent=&us_privacy=&loc=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D18%26buyeruid%3D%5BUID%5D%26r%3DCid1YS1iZDkzYzVhNi1hNDhhLTMwNjItYTllYi00OWRiMWIyZDIwNGEQ____________ASpSaHR0cHM6Ly9yb3V0ZXIuaW5mb2xpbmtzLmNvbS9keW4vZGlzdXM_dWlkPXVhLWJkOTNjNWE2LWE0OGEtMzA2Mi1hOWViLTQ5ZGIxYjJkMjA0YTICEho4AQ== HTTP/1.1
Host: sync.go.sonobi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Sun, 05 Feb 2023 13:04:19 GMT
Content-Type: text/plain; charset=utf8
Content-Length: 0
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, no-store, private
P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Pragma: no-cache
Tcn: Choice
Vary: negotiate,Accept-Encoding
X-Go-Server: go-iad-2-5-45
X-Xss-Protection: 0
Location: https://ssp.disqus.com/match?bidder=18&buyeruid=67031c50-88b7-488c-9d31-39e9ab55fba1&r=Cid1YS1iZDkzYzVhNi1hNDhhLTMwNjItYTllYi00OWRiMWIyZDIwNGEQ____________ASpSaHR0cHM6Ly9yb3V0ZXIuaW5mb2xpbmtzLmNvbS9keW4vZGlzdXM_dWlkPXVhLWJkOTNjNWE2LWE0OGEtMzA2Mi1hOWViLTQ5ZGIxYjJkMjA0YTICEho4AQ==
Server: sonobi-go
Set-Cookie: __uis=67031c50-88b7-488c-9d31-39e9ab55fba1; expires=Tue, 07 Mar 2023 13:04:18 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None
HAPLB8S=s8545|Y9+pV; path=/; domain=.go.sonobi.com; SameSite=None; secure
ocsp.digicert.com/
200 OK 313 B IP
Hash 482952c319f6b341719e70726729734d
d562869196fe45ede7cf9d7b83643c020eae68b2
052ed0f05af6fa66b55a1e883536b6fc2743d32d56aa4b7c58f0b8202b67ee9b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3773
Cache-Control: max-age=86022
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 13:04:19 GMT
Etag: "63de479c-139"
Expires: Mon, 06 Feb 2023 12:58:01 GMT
Last-Modified: Sat, 04 Feb 2023 11:55:08 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 313
trc-events.taboola.com/odili-odili/log/2/debug?tim=13%3A04%3A59.853&type=usage&msg=rtus&llvl=2&id=6037&cv=20230205-12-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/odili-odili/log/2/debug?tim=13%3A04%3A59.853&type=usage&msg=rtus&llvl=2&id=6037&cv=20230205-12-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /odili-odili/log/2/debug?tim=13%3A04%3A59.853&type=usage&msg=rtus&llvl=2&id=6037&cv=20230205-12-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sun, 05 Feb 2023 13:04:19 GMT
x-fastly-to-nlb-rtt: 22659
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ssp.disqus.com/match?bidder=18&buyeruid=67031c50-88b7-488c-9d31-39e9ab55fba1&r=Cid1YS1iZDkzYzVhNi1hNDhhLTMwNjItYTllYi00OWRiMWIyZDIwNGEQ____________ASpSaHR0cHM6Ly9yb3V0ZXIuaW5mb2xpbmtzLmNvbS9keW4vZGlzdXM_dWlkPXVhLWJkOTNjNWE2LWE0OGEtMzA2Mi1hOWViLTQ5ZGIxYjJkMjA0YTICEho4AQ==
302 Found 0 B URL HTTP/2 ssp.disqus.com/match?bidder=18&buyeruid=67031c50-88b7-488c-9d31-39e9ab55fba1&r=Cid1YS1iZDkzYzVhNi1hNDhhLTMwNjItYTllYi00OWRiMWIyZDIwNGEQ____________ASpSaHR0cHM6Ly9yb3V0ZXIuaW5mb2xpbmtzLmNvbS9keW4vZGlzdXM_dWlkPXVhLWJkOTNjNWE2LWE0OGEtMzA2Mi1hOWViLTQ5ZGIxYjJkMjA0YTICEho4AQ==
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?bidder=18&buyeruid=67031c50-88b7-488c-9d31-39e9ab55fba1&r=Cid1YS1iZDkzYzVhNi1hNDhhLTMwNjItYTllYi00OWRiMWIyZDIwNGEQ____________ASpSaHR0cHM6Ly9yb3V0ZXIuaW5mb2xpbmtzLmNvbS9keW4vZGlzdXM_dWlkPXVhLWJkOTNjNWE2LWE0OGEtMzA2Mi1hOWViLTQ5ZGIxYjJkMjA0YTICEho4AQ== HTTP/1.1
Host: ssp.disqus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Sun, 05 Feb 2023 13:04:20 GMT
content-length: 0
location: https://cs.iqzone.com/a6da5bf591376177b08e1eb90117169d.gif?puid=ua-bd93c5a6-a48a-3062-a9eb-49db1b2d204a&gdpr=&gdpr_consent=&us_privacy=&redir=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D18%26buyeruid%3D%5BUID%5D%26r%3DCid1YS1iZDkzYzVhNi1hNDhhLTMwNjItYTllYi00OWRiMWIyZDIwNGEQ____________ASpSaHR0cHM6Ly9yb3V0ZXIuaW5mb2xpbmtzLmNvbS9keW4vZGlzdXM_dWlkPXVhLWJkOTNjNWE2LWE0OGEtMzA2Mi1hOWViLTQ5ZGIxYjJkMjA0YTICEho4Ag==
cache-control: no-store
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 8644628951c139f78d8f9be2bd73e66a
5b5a7c666754ab1f6d99ee47fe0ff0371b783f95
2e582d06886584b3a51995ad6f5c2874e7fc3d50109904cf437097636df335b9
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 05 Feb 2023 13:04:20 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 04 Feb 2023 21:56:31 GMT
Expires: Sun, 05 Feb 2023 21:56:31 GMT
ETag: "5b5a7c666754ab1f6d99ee47fe0ff0371b783f95"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
cs.iqzone.com/a6da5bf591376177b08e1eb90117169d.gif?puid=ua-bd93c5a6-a48a-3062-a9eb-49db1b2d204a&gdpr=&gdpr_consent=&us_privacy=&redir=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D18%26buyeruid%3D%5BUID%5D%26r%3DCid1YS1iZDkzYzVhNi1hNDhhLTMwNjItYTllYi00OWRiMWIyZDIwNGEQ____________ASpSaHR0cHM6Ly9yb3V0ZXIuaW5mb2xpbmtzLmNvbS9keW4vZGlzdXM_dWlkPXVhLWJkOTNjNWE2LWE0OGEtMzA2Mi1hOWViLTQ5ZGIxYjJkMjA0YTICEho4Ag==
302 Found 0 B URL HTTP/1.1 cs.iqzone.com/a6da5bf591376177b08e1eb90117169d.gif?puid=ua-bd93c5a6-a48a-3062-a9eb-49db1b2d204a&gdpr=&gdpr_consent=&us_privacy=&redir=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D18%26buyeruid%3D%5BUID%5D%26r%3DCid1YS1iZDkzYzVhNi1hNDhhLTMwNjItYTllYi00OWRiMWIyZDIwNGEQ____________ASpSaHR0cHM6Ly9yb3V0ZXIuaW5mb2xpbmtzLmNvbS9keW4vZGlzdXM_dWlkPXVhLWJkOTNjNWE2LWE0OGEtMzA2Mi1hOWViLTQ5ZGIxYjJkMjA0YTICEho4Ag==
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /a6da5bf591376177b08e1eb90117169d.gif?puid=ua-bd93c5a6-a48a-3062-a9eb-49db1b2d204a&gdpr=&gdpr_consent=&us_privacy=&redir=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D18%26buyeruid%3D%5BUID%5D%26r%3DCid1YS1iZDkzYzVhNi1hNDhhLTMwNjItYTllYi00OWRiMWIyZDIwNGEQ____________ASpSaHR0cHM6Ly9yb3V0ZXIuaW5mb2xpbmtzLmNvbS9keW4vZGlzdXM_dWlkPXVhLWJkOTNjNWE2LWE0OGEtMzA2Mi1hOWViLTQ5ZGIxYjJkMjA0YTICEho4Ag== HTTP/1.1
Host: cs.iqzone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Sun, 05 Feb 2023 13:04:20 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: iq_u_key=b347531f-4856-4256-a3ec-69805d60da18; path=/; domain=.iqzone.com; expires=Sun, 19 Feb 2023 13:04:20 GMT;SameSite=None;Secure
iq_r_key=169; path=/; domain=.iqzone.com; expires=Sun, 19 Feb 2023 13:04:20 GMT;SameSite=None;Secure
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Location: https://ssp.disqus.com/match?bidder=18&buyeruid=b347531f-4856-4256-a3ec-69805d60da18&r=Cid1YS1iZDkzYzVhNi1hNDhhLTMwNjItYTllYi00OWRiMWIyZDIwNGEQ____________ASpSaHR0cHM6Ly9yb3V0ZXIuaW5mb2xpbmtzLmNvbS9keW4vZGlzdXM_dWlkPXVhLWJkOTNjNWE2LWE0OGEtMzA2Mi1hOWViLTQ5ZGIxYjJkMjA0YTICEho4Ag==
trc.taboola.com/odili-odili/trc/3/json?tim=13%3A04%3A59.858<i=deflated&data=%7B%22id%22%3A714%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22text%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22uifp%22%3Anull%2C%22lbt%22%3A1675596917008%2C%22vi%22%3A1675602299857%2C%22cv%22%3A%2220230205-12-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fodili.net%2F%22%2C%22bv%22%3A%220%22%2C%22ul%22%3A%5B%22en-US%22%2C%22en%22%5D%2C%22btv%22%3A%220%22%2C%22bu%22%3A%22https%3A%2F%2Fodili.net%2F%22%2C%22vpi%22%3A%22%2F%22%2C%22bad%22%3A-1%2C%22sw%22%3A1280%2C%22sh%22%3A1002%2C%22bw%22%3A1280%2C%22sde%22%3A%221.000%22%2C%22bh%22%3A939%2C%22dw%22%3A1268%2C%22dh%22%3A8561%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A12%2C%22uim%22%3A%22thumbs-2r%3Aabp%3D0%22%2C%22uip%22%3A%22Below%20Article%20Thumbnails%22%2C%22orig_uip%22%3A%22Below%20Article%20Thumbnails%22%2C%22cd%22%3A8549.6162109375%2C%22mw%22%3A1253%7D%5D%2C%22cacheKey%22%3A%22text%3D%2F%2CBelow%20Article%20Thumbnails%3Dthumbs-2r%3Aabp%3D0%22%2C%22cb%22%3A%22TRC.callbacks.recommendations_1%22%2C%22lt%22%3A%22deflated%22%7D&llvl=2
200 OK 21 kB URL HTTP/2 trc.taboola.com/odili-odili/trc/3/json?tim=13%3A04%3A59.858<i=deflated&data=%7B%22id%22%3A714%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22text%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22uifp%22%3Anull%2C%22lbt%22%3A1675596917008%2C%22vi%22%3A1675602299857%2C%22cv%22%3A%2220230205-12-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fodili.net%2F%22%2C%22bv%22%3A%220%22%2C%22ul%22%3A%5B%22en-US%22%2C%22en%22%5D%2C%22btv%22%3A%220%22%2C%22bu%22%3A%22https%3A%2F%2Fodili.net%2F%22%2C%22vpi%22%3A%22%2F%22%2C%22bad%22%3A-1%2C%22sw%22%3A1280%2C%22sh%22%3A1002%2C%22bw%22%3A1280%2C%22sde%22%3A%221.000%22%2C%22bh%22%3A939%2C%22dw%22%3A1268%2C%22dh%22%3A8561%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A12%2C%22uim%22%3A%22thumbs-2r%3Aabp%3D0%22%2C%22uip%22%3A%22Below%20Article%20Thumbnails%22%2C%22orig_uip%22%3A%22Below%20Article%20Thumbnails%22%2C%22cd%22%3A8549.6162109375%2C%22mw%22%3A1253%7D%5D%2C%22cacheKey%22%3A%22text%3D%2F%2CBelow%20Article%20Thumbnails%3Dthumbs-2r%3Aabp%3D0%22%2C%22cb%22%3A%22TRC.callbacks.recommendations_1%22%2C%22lt%22%3A%22deflated%22%7D&llvl=2
IP
File type Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Hash dd9c8ac4a47c55f9470aae3a51975870
68edc39532dcc702a16032ab6a1a7934b7349226
f26f4623b45da5147404018253360537cf7389e35a3f9fe7769f3d73f4168dd5
GET /odili-odili/trc/3/json?tim=13%3A04%3A59.858<i=deflated&data=%7B%22id%22%3A714%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22text%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22uifp%22%3Anull%2C%22lbt%22%3A1675596917008%2C%22vi%22%3A1675602299857%2C%22cv%22%3A%2220230205-12-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fodili.net%2F%22%2C%22bv%22%3A%220%22%2C%22ul%22%3A%5B%22en-US%22%2C%22en%22%5D%2C%22btv%22%3A%220%22%2C%22bu%22%3A%22https%3A%2F%2Fodili.net%2F%22%2C%22vpi%22%3A%22%2F%22%2C%22bad%22%3A-1%2C%22sw%22%3A1280%2C%22sh%22%3A1002%2C%22bw%22%3A1280%2C%22sde%22%3A%221.000%22%2C%22bh%22%3A939%2C%22dw%22%3A1268%2C%22dh%22%3A8561%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A12%2C%22uim%22%3A%22thumbs-2r%3Aabp%3D0%22%2C%22uip%22%3A%22Below%20Article%20Thumbnails%22%2C%22orig_uip%22%3A%22Below%20Article%20Thumbnails%22%2C%22cd%22%3A8549.6162109375%2C%22mw%22%3A1253%7D%5D%2C%22cacheKey%22%3A%22text%3D%2F%2CBelow%20Article%20Thumbnails%3Dthumbs-2r%3Aabp%3D0%22%2C%22cb%22%3A%22TRC.callbacks.recommendations_1%22%2C%22lt%22%3A%22deflated%22%7D&llvl=2 HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://odili.net
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://odili.net
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Sun, 05 Feb 2023 13:04:20 GMT
via: 1.1 varnish
x-served-by: cache-bma1682-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675602260.553453,VS0,VE701
vary: Accept-Encoding
x-vcl-time-ms: 701
X-Firefox-Spdy: h2
router.infolinks.com/dyn/disus?uid=ua-bd93c5a6-a48a-3062-a9eb-49db1b2d204a
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/disus?uid=ua-bd93c5a6-a48a-3062-a9eb-49db1b2d204a
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/disus?uid=ua-bd93c5a6-a48a-3062-a9eb-49db1b2d204a HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:21 GMT
content-type: image/gif
content-length: 35
cache-control: no-store, no-cache, private
set-cookie: DISUSERCOOKIE=ua-bd93c5a6-a48a-3062-a9eb-49db1b2d204a; Domain=infolinks.com; Expires=Sat, 06-May-2023 13:04:20 GMT; Path=/; SameSite=None; Secure
pragma: no-cache
expires: Sat, 05 Feb 2022 13:04:20 GMT
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 794bd9f26f34b500-OSL
X-Firefox-Spdy: h2
router.infolinks.com/usync/manage?pid=2854208&wsid=1&pdom=odili.net&purl=https%3A%2F%2Fodili.net%2F
200 OK 4.5 kB URL HTTP/2 router.infolinks.com/usync/manage?pid=2854208&wsid=1&pdom=odili.net&purl=https%3A%2F%2Fodili.net%2F
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (7796)
Hash ef5183eff080208cae1a4fe65613cda8
8b959fb7b1f73b86d41f722fbb65142e05f6a95f
2adca6ab049411d01f2be24fa84827c6524501aa2310fb82a65bafe0735d7ca3
GET /usync/manage?pid=2854208&wsid=1&pdom=odili.net&purl=https%3A%2F%2Fodili.net%2F HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:18 GMT
content-type: text/html;charset=UTF-8
cache-control: no-store
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 794bd9e40d21b500-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/feed-card-placeholder.20230205-12-RELEASE.es6.js
200 OK 1.3 kB URL HTTP/2 cdn.taboola.com/libtrc/feed-card-placeholder.20230205-12-RELEASE.es6.js
IP
File type ASCII text, with very long lines (4627)
Hash fc77f03f3ff3eb2f74ff9dccdce078e0
8db8230d8355e7da84bf3efe399cf99529ebf03b
0216a4b1a32073f8ab3c0f750b21eb2514282d6a7d4f7681db789684e95842a9
GET /libtrc/feed-card-placeholder.20230205-12-RELEASE.es6.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: LGuFRM+pBVdxhFp1CNL2+vR2MLvGzv91R/Zvhpu2A6qzD8G/36gLLzM6YTMU+6NlKoJFSmUaL6Q=
x-amz-request-id: AB0QQ9Q9F6P47F83
x-amz-replication-status: PENDING
last-modified: Sun, 05 Feb 2023 12:15:39 GMT
etag: "70c3f0fa4ac41b6e064a71a34b4e526e"
x-amz-version-id: KHDdNdxy6sPDpUejRiws42fLaVVuMoWE
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sun, 05 Feb 2023 13:04:21 GMT
via: 1.1 varnish
age: 2921
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 769
x-timer: S1675602261.129470,VS0,VE0
cache-control: private,max-age=2629743
vary: Accept-Encoding
abp: 15
content-length: 1263
X-Firefox-Spdy: h2
vidstat.taboola.com/lite-unit/3.9.8/UnitFeedManagerDesktop.min.js
200 OK 30 kB URL HTTP/2 vidstat.taboola.com/lite-unit/3.9.8/UnitFeedManagerDesktop.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 9745b6adb8e9b5989ec0a6549ab91a54
76b57e32693c32daecf75a189604d45dd9b0bee1
d2091155a789c3a96c5cbb0bb5ec76a4a4caf0270bc6e245f7fdcd097643f0fa
GET /lite-unit/3.9.8/UnitFeedManagerDesktop.min.js HTTP/1.1
Host: vidstat.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 22 Nov 2022 07:02:09 GMT
etag: "7fcf5cdb23e918c79141cd7bbdf0b9cc"
server: AmazonS3
via: 1.1 301faf3f65621d2ccd9fad88788c128a.cloudfront.net (CloudFront), 1.1 varnish
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: 4V4gXyIcI4L9vzR78J9Vk5QfuoxBnr_pFntuuBlgEBfiPKebvmGtGw==
cache-control: public, max-age=2592000
content-encoding: gzip
accept-ranges: bytes
date: Sun, 05 Feb 2023 13:04:21 GMT
age: 1479460
x-served-by: cache-bma1682-BMA
x-cache: Hit from cloudfront, HIT
x-cache-hits: 38982
x-timer: S1675602261.130649,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
content-length: 30422
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/userx.20230205-12-RELEASE.es6.js
200 OK 5.4 kB URL HTTP/2 cdn.taboola.com/libtrc/userx.20230205-12-RELEASE.es6.js
IP
File type ASCII text, with very long lines (17842)
Hash de701d0f4f8123a8f38dc64d4d712996
42d6e1110b1ed2fb2674b58043ea1aea4f4dd988
008f05835a874d2dc9a30701d89f9ba36917a88d2ccc28d90b92f1951980e0ec
GET /libtrc/userx.20230205-12-RELEASE.es6.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: yGlqF571KOd/IqwR3Ld00TeWLzaVp0EgPdU9n7te6iWvBNKWwv15bsoQMrkSk02rhbIrF220R5A=
x-amz-request-id: 625PFFVFSD3HQPGC
x-amz-replication-status: PENDING
last-modified: Sun, 05 Feb 2023 12:16:08 GMT
etag: "d6a0fe11e5061f296c402a2db06d65fc"
x-amz-version-id: lw6VrkNen8cuOF.t.BrenJwHr3AtHRsz
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sun, 05 Feb 2023 13:04:21 GMT
via: 1.1 varnish
age: 2892
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 203
x-timer: S1675602261.141214,VS0,VE0
cache-control: private,max-age=2629743
vary: Accept-Encoding
abp: 15
content-length: 5398
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/explore-more.20230205-12-RELEASE.es6.js
200 OK 6.6 kB URL HTTP/2 cdn.taboola.com/libtrc/explore-more.20230205-12-RELEASE.es6.js
IP
File type ASCII text, with very long lines (22869)
Hash 6abdba766a7ae85a456f4c9d3fffad4e
be69f01dffe00bba636576daaee6d661128ee5f8
5fe57a9bcd53a3b655aab98ae4af06524882dc86dac3daff68ed42f25a14950f
GET /libtrc/explore-more.20230205-12-RELEASE.es6.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: SgM3vWR/plCqYETj1zPWAwmfc6d3f/sX3qoLbq6yPm1kPzK4lmFc4WRc5tYcvVYJlcmQY0hXWdU=
x-amz-request-id: 5WN9MJPVFCFG8V5F
x-amz-replication-status: PENDING
last-modified: Sun, 05 Feb 2023 12:15:38 GMT
etag: "1034db86a4a6035281afe8f2fc37e81d"
x-amz-version-id: GZSQ8Ur9CmfUJZxxxmXk2_I8ujXPC64Y
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sun, 05 Feb 2023 13:04:21 GMT
via: 1.1 varnish
age: 2923
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 483
x-timer: S1675602261.171152,VS0,VE0
cache-control: private,max-age=2629743
vary: Accept-Encoding
abp: 15
content-length: 6620
X-Firefox-Spdy: h2
cdn.taboola.com/static/f8/f89e1763-220d-4e09-ba69-9e040548fb7a.svg
200 OK 1.8 kB URL HTTP/2 cdn.taboola.com/static/f8/f89e1763-220d-4e09-ba69-9e040548fb7a.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (4146), with no line terminators
Hash 034656ebd1be218c629e97e2ebc2fbd9
ffdaa8a31d597c32b08c8bc716fa17a9dda01c9a
aa98d5c3b1486984e3824c8801c59f6117583cab7d19d46909c722a647c61ceb
GET /static/f8/f89e1763-220d-4e09-ba69-9e040548fb7a.svg HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: ZK7BRCLfGm5HvxCpfrq0mK2KFrxSzsi2I5Hssxhi/Z8qLdtJOnKssjcM5wDrK9EPFTl6Rjo11uk=
x-amz-request-id: ACNEYM547EED6AC2
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Feb 2018 11:15:52 GMT
etag: "b8b410e4b18d45aa2f3d9bc09cd335fb"
x-amz-version-id: cMrDKn.emLmm9kiiOOF64ulDT4DRy6LK
content-type: image/svg+xml
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sun, 05 Feb 2023 13:04:21 GMT
via: 1.1 varnish
age: 120
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 29
x-timer: S1675602261.206664,VS0,VE0
cache-control: private,max-age=31536000
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: *
vary: Accept-Encoding
abp: 15
content-length: 1758
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_278%2Cw_500%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboolasyndication.com/libtrc/static/thumbnails/3a983d20f4623e5be337003f135cc0fd.jpg
200 OK 8.9 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_278%2Cw_500%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboolasyndication.com/libtrc/static/thumbnails/3a983d20f4623e5be337003f135cc0fd.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash c9ed998c2695585ff6292201efd95a2f
4d1d9462a30701acb6d2207dd65004f88fa38bf7
3c3d3780b70456b1b40e70e36432fb7523ce9359999b4ca664870d35c3ca1600
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_278%2Cw_500%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboolasyndication.com/libtrc/static/thumbnails/3a983d20f4623e5be337003f135cc0fd.jpg HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 296890405218403701284834010454129388344,321542333818713782252267784064847624608,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 296890405218403701284834010454129388344,321542333818713782252267784064847624608,29ecf9b93bbf306179626feeda1fab70
etag: "62b1a9d57d2b028b8d8fefde4ed6a74d"
last-modified: Wed, 14 Dec 2022 23:55:33 GMT
req-referer: https://www.dailythanthi.com/
status: 200 OK
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-request-id: b5f2f6fc48c34fb074410aaa786d00df
x-envoy-upstream-service-time: 3740
x-backend-name: CH_DIR:3FP7YNX3LMizprTZsG7BSW--F_CH_nlb803
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Sun, 05 Feb 2023 13:04:21 GMT
age: 3124174
x-served-by: cache-iad-kcgs7200135-IAD, cache-iad-kjyo7100158-IAD, cache-lga21972-LGA, cache-iad-kiad7000149-IAD, cache-bma1682-BMA
x-cache: MISS, MISS, MISS, HIT, HIT
x-cache-hits: 0, 0, 0, 89, 1
x-timer: S1675602261.219016,VS0,VE1
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_278%2Cw_500%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboolasyndication.com/libtrc/static/thumbnails/3a983d20f4623e5be337003f135cc0fd.jpg
x-vcl-time-ms: 1
content-length: 8946
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_278%2Cw_500%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/59e9cfa230358be96b3a47f5143c3752.jpg
200 OK 25 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_278%2Cw_500%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/59e9cfa230358be96b3a47f5143c3752.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash d54335013a5f626d0b4cdcefec490f89
94c31c807cb1d01ef7ab67d63b37a1443286d080
6d58a36fca17e77c04e11ff7bd30061e5b0bad27b01b42bd9b919609749bf515
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_278%2Cw_500%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/59e9cfa230358be96b3a47f5143c3752.jpg HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 548776169841062978503489792463842106305,392173735509245572091693767611601833779,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 548776169841062978503489792463842106305,392173735509245572091693767611601833779,29ecf9b93bbf306179626feeda1fab70
etag: "1c5c4bbc9e4d88067949d618881435e8"
expiration: expiry-date="Sun, 01 Jan 2023 00:00:00 GMT", rule-id="delete fetch for taboola after 30 days"
last-modified: Thu, 01 Dec 2022 10:48:21 GMT
req-referer: https://www.thehindu.com/
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-envoy-upstream-service-time: 146
x-backend-name: LA_DIR:3FP7YNX3LMizprTZsG7BSW--F_LA_nlb204
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Sun, 05 Feb 2023 13:04:21 GMT
age: 3152070
x-served-by: cache-iad-kiad7000088-IAD, cache-iad-kiad7000170-IAD, cache-bur-kbur8200148-BUR, cache-iad-kjyo7100118-IAD, cache-bma1682-BMA
x-cache: MISS, HIT, HIT, HIT, HIT
x-cache-hits: 0, 2, 1, 29, 1
x-timer: S1675602261.220715,VS0,VE2
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_278%2Cw_500%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/59e9cfa230358be96b3a47f5143c3752.jpg
x-vcl-time-ms: 2
content-length: 24948
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_278%2Cw_500%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/51553976c2e3ba15df06cf1362262732.jpeg
200 OK 17 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_278%2Cw_500%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/51553976c2e3ba15df06cf1362262732.jpeg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 200a566a474402594120200fd185cf07
151fbdc6fcf3f03f4cf6393006fd394cf32c77c1
3d359bcc01a2fcf3ed2eb703f26dd0b1c684f64797685ee1bca867fda0c2e500
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_278%2Cw_500%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/51553976c2e3ba15df06cf1362262732.jpeg HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 302696492883762420357340409939265588327,392173735509245572091693767611601833779,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 302696492883762420357340409939265588327,392173735509245572091693767611601833779,29ecf9b93bbf306179626feeda1fab70
etag: "229fbff801c25868638dcc34fda73f2f"
last-modified: Wed, 16 Nov 2022 10:32:17 GMT
req-referer: https://theworldreads.com/en/vaporub/?utm_source=taboola&utm_term=mobitech-tn-launcher_1304163&utm_content=3557199537&utm_medium=referral&utm_campaign=VapoRubSB-WW-DTM-SF-TWR-TB-TWR
status: 200 OK
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-request-id: 5c035446e6094bb70cb86cd20c41bffd
x-envoy-upstream-service-time: 151
x-backend-name: LA_DIR:3FP7YNX3LMizprTZsG7BSW--F_LA_nlb201
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Sun, 05 Feb 2023 13:04:21 GMT
age: 5753104
x-served-by: cache-iad-kcgs7200176-IAD, cache-iad-kcgs7200166-IAD, cache-sna10750-LGB, cache-iad-kcgs7200055-IAD, cache-bma1682-BMA
x-cache: HIT, HIT, HIT, HIT, HIT
x-cache-hits: 1, 1, 1, 3, 1
x-timer: S1675602261.221481,VS0,VE1
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_278%2Cw_500%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/51553976c2e3ba15df06cf1362262732.jpeg
x-vcl-time-ms: 1
content-length: 17414
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_412%2Cw_740%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/GETTY_IMAGES/SKP/482384671__YkExhJPK.jpg
200 OK 14 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_412%2Cw_740%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/GETTY_IMAGES/SKP/482384671__YkExhJPK.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash a36fceb28fecac961d0ffe871a32de53
378595422c941bc3bffaa70135aff038e2d00cf0
7350c90dba3dccf56318668343044ffe3c984795a3c2e76ce7bd3db45c2411ea
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_412%2Cw_740%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/GETTY_IMAGES/SKP/482384671__YkExhJPK.jpg HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 576810400870961994487498173300196197188,377215341905243169283200138401510287004,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 576810400870961994487498173300196197188,377215341905243169283200138401510287004,29ecf9b93bbf306179626feeda1fab70
etag: "50e38112d0495b982e0b1e8a2e0979cc"
last-modified: Mon, 12 Dec 2022 22:46:00 GMT
req-referer: https://pipcm.com/
status: 200 OK
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-request-id: d2315a2dbaaa7500bb1aa9e0f7c99438
x-envoy-upstream-service-time: 181
x-backend-name: LA_DIR:3FP7YNX3LMizprTZsG7BSW--F_LA_nlb202
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Sun, 05 Feb 2023 13:04:21 GMT
age: 3182322
x-served-by: cache-iad-kcgs7200041-IAD, cache-iad-kjyo7100022-IAD, cache-sna10738-LGB, cache-iad-kjyo7100118-IAD, cache-bma1682-BMA
x-cache: MISS, HIT, MISS, HIT, HIT
x-cache-hits: 0, 3, 0, 123, 1
x-timer: S1675602261.261977,VS0,VE2
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_412%2Cw_740%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/GETTY_IMAGES/SKP/482384671__YkExhJPK.jpg
x-vcl-time-ms: 2
content-length: 13844
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_412%2Cw_740%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//medaboutme.ru/upload/medialibrary/28d/shutterstock_457158232.jpg
200 OK 27 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_412%2Cw_740%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//medaboutme.ru/upload/medialibrary/28d/shutterstock_457158232.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 442d2a5895763f9d51e35e1fb4a90a92
999ac9b057e7a7ffd300c3cf1fa214333f9ccd53
cd110369f7b35f163663e8f1ca9bdd6948199496cd141162d259953f0b64049c
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_412%2Cw_740%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//medaboutme.ru/upload/medialibrary/28d/shutterstock_457158232.jpg HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 336612666204530997426358893515281041261,377215341905243169283200138401510287004,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 336612666204530997426358893515281041261,377215341905243169283200138401510287004,29ecf9b93bbf306179626feeda1fab70
etag: "bfefee41e2a0bdd7e635fb87e9c9304e"
last-modified: Tue, 13 Dec 2022 17:10:03 GMT
req-referer: https://www.youreshape.com/
status: 200 OK
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-request-id: 1881d5193ff177373cf40e0ac6d196b7
x-envoy-upstream-service-time: 1640
x-backend-name: CH_DIR:3FP7YNX3LMizprTZsG7BSW--F_CH_nlb804
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Sun, 05 Feb 2023 13:04:21 GMT
age: 2848702
x-served-by: cache-iad-kiad7000152-IAD, cache-iad-kjyo7100142-IAD, cache-lga21937-LGA, cache-iad-kjyo7100040-IAD, cache-bma1682-BMA
x-cache: MISS, MISS, MISS, HIT, HIT
x-cache-hits: 0, 0, 0, 507, 1
x-timer: S1675602261.266608,VS0,VE2
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_412%2Cw_740%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//medaboutme.ru/upload/medialibrary/28d/shutterstock_457158232.jpg
x-vcl-time-ms: 2
content-length: 26656
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/h_278,w_500,c_fill,g_xy_center,x_706,y_246/https%3A//avatars.mds.yandex.net/get-zen_doc/3958762/pub_5fad2f4d3cce092eaa985fa1_5fadd8fa4278375e7ec582f0/scale_1200
400 Bad Request 90 B URL HTTP/2 images.taboola.com/taboola/image/fetch/h_278,w_500,c_fill,g_xy_center,x_706,y_246/https%3A//avatars.mds.yandex.net/get-zen_doc/3958762/pub_5fad2f4d3cce092eaa985fa1_5fadd8fa4278375e7ec582f0/scale_1200
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5407fa084a4bc415a03daa47a4da08a9
94291c7c340406a4ba79c8043eaaaafd256fd9cf
66535975c887a75aab431cce6b49c0cd486971bc705de97e2f1499c70031e24a
GET /taboola/image/fetch/h_278,w_500,c_fill,g_xy_center,x_706,y_246/https%3A//avatars.mds.yandex.net/get-zen_doc/3958762/pub_5fad2f4d3cce092eaa985fa1_5fadd8fa4278375e7ec582f0/scale_1200 HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 400 Bad Request
server: nginx
content-type: application/json
req-referer: https://www.sanjosenews.net/
x-cld-error: error fetching remote http image headers: (status=400) 410 Gone
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-envoy-upstream-service-time: 647
x-backend-name: LA_DIR:3FP7YNX3LMizprTZsG7BSW--F_LA_nlb201
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=1800
accept-ranges: bytes
date: Sun, 05 Feb 2023 13:04:21 GMT
age: 1322
x-served-by: cache-iad-kcgs7200112-IAD, cache-bma1682-BMA
x-cache: MISS, HIT
x-cache-hits: 0, 1
x-timer: S1675602261.267569,VS0,VE1
vary: ImageFormat
x-debug: /taboola/image/fetch/h_278,w_500,c_fill,g_xy_center,x_706,y_246/https%3A//avatars.mds.yandex.net/get-zen_doc/3958762/pub_5fad2f4d3cce092eaa985fa1_5fadd8fa4278375e7ec582f0/scale_1200
x-vcl-time-ms: 1
content-length: 90
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/h_278,w_500,c_fill,g_xy_center,x_1168,y_810/https%3A//cdn.wallpapersafari.com/11/62/35uYbs.jpg
200 OK 11 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/h_278,w_500,c_fill,g_xy_center,x_1168,y_810/https%3A//cdn.wallpapersafari.com/11/62/35uYbs.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 76b70a38376147780df837a65fab02cf
55b661f5860d643284529d7b389fbfb40fc1f8d9
f46068ec0d8d4f530d4697e164b3b61bfc1c1c14bfe11ca2ee7ca34d5268df70
GET /taboola/image/fetch/h_278,w_500,c_fill,g_xy_center,x_1168,y_810/https%3A//cdn.wallpapersafari.com/11/62/35uYbs.jpg HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 491309923597591300321936698730484996167,538635004026509654499400992521065688355,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 491309923597591300321936698730484996167,538635004026509654499400992521065688355,29ecf9b93bbf306179626feeda1fab70
etag: "061bbb975954b6547795780908968858"
last-modified: Thu, 01 Dec 2022 17:17:12 GMT
req-referer: https://www.manoramaonline.com/
status: 200 OK
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-request-id: e891c26615edd66fbba265041bff21a1
x-envoy-upstream-service-time: 514
x-backend-name: LA_DIR:3FP7YNX3LMizprTZsG7BSW--F_LA_nlb201
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Sun, 05 Feb 2023 13:04:21 GMT
age: 3210928
x-served-by: cache-iad-kiad7000066-IAD, cache-iad-kcgs7200029-IAD, cache-bur-kbur8200034-BUR, cache-iad-kjyo7100097-IAD, cache-bma1682-BMA
x-cache: MISS, MISS, MISS, HIT, HIT
x-cache-hits: 0, 0, 0, 113, 1
x-timer: S1675602261.266149,VS0,VE12
vary: ImageFormat
x-debug: /taboola/image/fetch/h_278,w_500,c_fill,g_xy_center,x_1168,y_810/https%3A//cdn.wallpapersafari.com/11/62/35uYbs.jpg
x-vcl-time-ms: 12
content-length: 11350
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/next-up-widget.20230205-12-RELEASE.es6.js
200 OK 4.6 kB URL HTTP/2 cdn.taboola.com/libtrc/next-up-widget.20230205-12-RELEASE.es6.js
IP
File type ASCII text, with very long lines (16595)
Hash 0dff24c7ee8fb9a8208365daf391c2ee
8bd5f77600fb7f14c41bb9bed14b1011fc23bd17
c2fda00a74e2a7b38b5ca8763c7503062b58232c78a524dbbd3a17b555e1dd61
GET /libtrc/next-up-widget.20230205-12-RELEASE.es6.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: NQohrQrlLph2b1La2nNQIGOTN95Vk1YBf31WYmX6IiIW/wUnYdap0atlhodYh6m5L/P4Mmdq+Ww=
x-amz-request-id: 3K1B43VS8SFQTJX2
x-amz-replication-status: PENDING
last-modified: Sun, 05 Feb 2023 12:15:47 GMT
etag: "175a8f158d927924e0331a538398c639"
x-amz-version-id: PvceI38S04.d5j4cuUWbzD31gCtz6A0f
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sun, 05 Feb 2023 13:04:21 GMT
via: 1.1 varnish
age: 2914
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 183
x-timer: S1675602261.281956,VS0,VE0
cache-control: private,max-age=2629743
vary: Accept-Encoding
abp: 15
content-length: 4624
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?origin=rtus&topUrl=odili.net
200 OK 42 kB URL HTTP/2 gum.criteo.com/syncframe?origin=rtus&topUrl=odili.net
IP
Hash 84a49907c152b3fbe4e58fbf3b198a06
fbd274f26a068febc7c5cdbefcf0a43a1f99e042
fac88b2672d31c9976c098c5d0f2327b4a6fe7d116e0755f8e7570726b3c2061
GET /syncframe?origin=rtus&topUrl=odili.net HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:20 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=da763d7c-b07a-4b47-8f4c-29fc1da5e158; expires=Fri, 01 Mar 2024 13:04:20 GMT; domain=.criteo.com; path=/; secure; samesite=none
optout=0; expires=Thu, 01 Jan 1970 00:00:00 GMT; domain=.criteo.com; path=/
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 890309
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
rt3056.infolinks.com/action/getads.htm?hks=%5B%7B%22lid%22%3A%22IL_IN_CONTENT0%22%2C%22bdc%22%3A2%2C%22prod_t%22%3A%22c%22%2C%22miw%22%3A7%2C%22maw%22%3A937%2C%22mih%22%3A9%2C%22mah%22%3A1878%2C%22sdata%22%3A%22abducted%22%2C%22scs%22%3A%22KpkYhJYAia%22%7D%5D&rid=34b454d9-a8d1-4eb0-b6f2-3071b21fd9e4&jsv=1845.006-3.025&sr=1280X1002&rts=1675602299428&cfv=-1&cb=getAdsResponse&os=Windows&ov=10&br=Firefox&bv=105.0&dv=p&ce=t&purl=https%3A%2F%2Fodili.net%2F&tzo=-0000&c=c&strg=true&rsd=ytQQHGI35_IL3TiRY0s7FECY64BtI_EfOQVgR7UHMc4cVsemaTOThPKqV2hbxmNZ3DxrxnzMex0zrtQ-9BwskiqPXOKOq2hNe6peW9zW75Y31aBvGNCE7M92EnoC9SuT1n8kRl2zZyqedy8CLlxkXjLF4nGBlnL5&rsk=73&rcs=pd_uA_qNfU-V49e9-pYxyw&cuid=6596b153-9b26-4ed5-92a6-23a3c660dae7&hbnr=false
200 OK 1.6 kB URL HTTP/2 rt3056.infolinks.com/action/getads.htm?hks=%5B%7B%22lid%22%3A%22IL_IN_CONTENT0%22%2C%22bdc%22%3A2%2C%22prod_t%22%3A%22c%22%2C%22miw%22%3A7%2C%22maw%22%3A937%2C%22mih%22%3A9%2C%22mah%22%3A1878%2C%22sdata%22%3A%22abducted%22%2C%22scs%22%3A%22KpkYhJYAia%22%7D%5D&rid=34b454d9-a8d1-4eb0-b6f2-3071b21fd9e4&jsv=1845.006-3.025&sr=1280X1002&rts=1675602299428&cfv=-1&cb=getAdsResponse&os=Windows&ov=10&br=Firefox&bv=105.0&dv=p&ce=t&purl=https%3A%2F%2Fodili.net%2F&tzo=-0000&c=c&strg=true&rsd=ytQQHGI35_IL3TiRY0s7FECY64BtI_EfOQVgR7UHMc4cVsemaTOThPKqV2hbxmNZ3DxrxnzMex0zrtQ-9BwskiqPXOKOq2hNe6peW9zW75Y31aBvGNCE7M92EnoC9SuT1n8kRl2zZyqedy8CLlxkXjLF4nGBlnL5&rsk=73&rcs=pd_uA_qNfU-V49e9-pYxyw&cuid=6596b153-9b26-4ed5-92a6-23a3c660dae7&hbnr=false
IP
Hash 100c799a0b605fbb3d59716564325684
967b7d1061e97fdaa170b48df71cf97cb784e09d
62141d0779c2fde50e40834a709e72f0904ac3ecc0a8f87d72554e6316b4edeb
GET /action/getads.htm?hks=%5B%7B%22lid%22%3A%22IL_IN_CONTENT0%22%2C%22bdc%22%3A2%2C%22prod_t%22%3A%22c%22%2C%22miw%22%3A7%2C%22maw%22%3A937%2C%22mih%22%3A9%2C%22mah%22%3A1878%2C%22sdata%22%3A%22abducted%22%2C%22scs%22%3A%22KpkYhJYAia%22%7D%5D&rid=34b454d9-a8d1-4eb0-b6f2-3071b21fd9e4&jsv=1845.006-3.025&sr=1280X1002&rts=1675602299428&cfv=-1&cb=getAdsResponse&os=Windows&ov=10&br=Firefox&bv=105.0&dv=p&ce=t&purl=https%3A%2F%2Fodili.net%2F&tzo=-0000&c=c&strg=true&rsd=ytQQHGI35_IL3TiRY0s7FECY64BtI_EfOQVgR7UHMc4cVsemaTOThPKqV2hbxmNZ3DxrxnzMex0zrtQ-9BwskiqPXOKOq2hNe6peW9zW75Y31aBvGNCE7M92EnoC9SuT1n8kRl2zZyqedy8CLlxkXjLF4nGBlnL5&rsk=73&rcs=pd_uA_qNfU-V49e9-pYxyw&cuid=6596b153-9b26-4ed5-92a6-23a3c660dae7&hbnr=false HTTP/1.1
Host: rt3056.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:19 GMT
content-type: text/html;charset=UTF-8
x-application-context: application:prod
cache-control: no-cache,no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: CP="NON DSP NID OUR COR"
content-language: en-US
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 794bd9e76a4db500-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/spa-detector.20230205-12-RELEASE.es6.js
200 OK 809 B URL HTTP/2 cdn.taboola.com/libtrc/spa-detector.20230205-12-RELEASE.es6.js
IP
File type ASCII text, with very long lines (1850)
Hash ca7d9aa40a3af1bb23dc042c33ec68d0
33eefb8eee246928c580490b123695da76047e86
318d3ad08eddae9fe90c1a7614537448d13fa138a77a598fe6e0d8ef7ef9606d
GET /libtrc/spa-detector.20230205-12-RELEASE.es6.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: zynDNw6l6hgF5nXmtygYjQvRsQRLaXEtqfAnOptFCpIrJrr+j/fS+WauDvHDPmymOLYYTQ33K9g=
x-amz-request-id: X3SM9AA1VF133760
x-amz-replication-status: PENDING
last-modified: Sun, 05 Feb 2023 12:15:55 GMT
etag: "052975cfab665f6d2a99366d1e80e653"
x-amz-version-id: EoQAWSePcY8lLIllN445SmAcW_3_LelH
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sun, 05 Feb 2023 13:04:21 GMT
via: 1.1 varnish
age: 2906
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 498
x-timer: S1675602261.446674,VS0,VE0
cache-control: private,max-age=2629743
vary: Accept-Encoding
abp: 15
content-length: 809
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_278%2Cw_500%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//247wallst.com/wp-content/uploads/2018/04/imageforentry92.jpg
200 OK 28 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_278%2Cw_500%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//247wallst.com/wp-content/uploads/2018/04/imageforentry92.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash e82d976870fe669bbc51b690413a20c2
8a6884733686aef92f46d6eb205dfb68c8d74472
8b850ec41d7c6d1581057a13d00d35ed944a8c647c0dd109a6a62e137705162d
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_278%2Cw_500%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//247wallst.com/wp-content/uploads/2018/04/imageforentry92.jpg HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 456395258431727573026571524591348926395,321542333818713782252267784064847624608,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 456395258431727573026571524591348926395,321542333818713782252267784064847624608,29ecf9b93bbf306179626feeda1fab70
etag: "46cd1b1fbe041923708243470e71aa63"
expiration: expiry-date="Sun, 29 Jan 2023 00:00:00 GMT", rule-id="delete fetch for taboola after 30 days"
last-modified: Thu, 29 Dec 2022 23:22:15 GMT
req-referer: https://slate.com/human-interest/2023/01/neighborhood-child-death-dear-prudence-advice.html
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-envoy-upstream-service-time: 219
x-backend-name: CH_DIR:3FP7YNX3LMizprTZsG7BSW--F_CH_nlb801
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Sun, 05 Feb 2023 13:04:21 GMT
age: 2675838
x-served-by: cache-iad-kcgs7200177-IAD, cache-iad-kiad7000123-IAD, cache-lga21982-LGA, cache-iad-kcgs7200021-IAD, cache-bma1682-BMA
x-cache: MISS, MISS, MISS, HIT, HIT
x-cache-hits: 0, 0, 0, 70, 1
x-timer: S1675602261.446800,VS0,VE1
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_278%2Cw_500%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//247wallst.com/wp-content/uploads/2018/04/imageforentry92.jpg
x-vcl-time-ms: 1
content-length: 28040
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_412%2Cw_740%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/5416df4b1ac6db08c0730275e6fa842f.jpg
200 OK 22 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_412%2Cw_740%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/5416df4b1ac6db08c0730275e6fa842f.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash f0f33a065a228527ae948ce7b5297510
c773799282a3e76ecc442b0e702515b685da706f
d26f5c0edaf1d51b4965e6f9716745f90a6e6b7a99f49cd62f2c814403a01b3c
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_412%2Cw_740%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/5416df4b1ac6db08c0730275e6fa842f.jpg HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 599839358363978462938340513857301412387,377215341905243169283200138401510287004,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 599839358363978462938340513857301412387,377215341905243169283200138401510287004,29ecf9b93bbf306179626feeda1fab70
etag: "2afda2f21003399454b8d8e957b2d0a0"
expiration: expiry-date="Sat, 18 Feb 2023 00:00:00 GMT", rule-id="delete fetch for taboola after 30 days"
last-modified: Wed, 18 Jan 2023 14:36:17 GMT
req-referer: https://mytuner-radio.com/
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-envoy-upstream-service-time: 334
x-backend-name: LA_DIR:3FP7YNX3LMizprTZsG7BSW--F_LA_nlb201
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Sun, 05 Feb 2023 13:04:21 GMT
age: 782375
x-served-by: cache-iad-kjyo7100060-IAD, cache-iad-kcgs7200065-IAD, cache-bur-kbur8200167-BUR, cache-iad-kjyo7100075-IAD, cache-bma1682-BMA
x-cache: MISS, MISS, MISS, HIT, HIT
x-cache-hits: 0, 0, 0, 19, 1
x-timer: S1675602261.447204,VS0,VE1
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_412%2Cw_740%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/5416df4b1ac6db08c0730275e6fa842f.jpg
x-vcl-time-ms: 1
content-length: 21940
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_412%2Cw_740%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/f52330a36f5a4447440c89054d267573.png
200 OK 48 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_412%2Cw_740%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/f52330a36f5a4447440c89054d267573.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9afc535312a53a5fe056707ba93f5594
521002b3ac4aa52fa4dd96d35ed0cefd0314fd28
bd8f6ceadfe71d9a92403d82a24ae99d1a53613e6f21d64f5ae139f7629bd9e4
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_412%2Cw_740%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/f52330a36f5a4447440c89054d267573.png HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 354827864056894973595156862233684425969,377215341905243169283200138401510287004,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 354827864056894973595156862233684425969,377215341905243169283200138401510287004,29ecf9b93bbf306179626feeda1fab70
etag: "14c64e0596deccdf045f4894346fcefd"
last-modified: Thu, 17 Nov 2022 07:22:44 GMT
req-referer: https://www.eonline.com/news/1356690/olivia-wildes-revenge-dress-moment-at-the-2022-peoples-choice-awards-is-a-must-see-look
status: 200 OK
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-request-id: c81f9bd2787f66b1ad90a63a4e4feb60
x-envoy-upstream-service-time: 251
x-backend-name: CH_DIR:3FP7YNX3LMizprTZsG7BSW--F_CH_nlb804
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Sun, 05 Feb 2023 13:04:21 GMT
age: 5726764
x-served-by: cache-iad-kiad7000131-IAD, cache-iad-kcgs7200021-IAD, cache-lga21930-LGA, cache-iad-kcgs7200060-IAD, cache-bma1682-BMA
x-cache: HIT, MISS, MISS, HIT, HIT
x-cache-hits: 1, 0, 0, 223, 1
x-timer: S1675602261.447424,VS0,VE5
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_412%2Cw_740%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/f52330a36f5a4447440c89054d267573.png
x-vcl-time-ms: 5
content-length: 48350
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 2521dc6dc015025c26c7a1b08b3060a1
f5c7abc50c9229a4b198a5c0d5f6dfa8ac528b9f
6671bc387c8011ec55a9d023502189b997adeb18fc2f199747dec7d688f85bd3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1987
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 13:04:21 GMT
Last-Modified: Sun, 05 Feb 2023 12:31:14 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 313
avatars.mds.yandex.net/get-zen_doc/3958762/pub_5fad2f4d3cce092eaa985fa1_5fadd8fa4278375e7ec582f0/scale_1200
410 Gone 136 B URL HTTP/2 avatars.mds.yandex.net/get-zen_doc/3958762/pub_5fad2f4d3cce092eaa985fa1_5fadd8fa4278375e7ec582f0/scale_1200
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 5d42b88a578a6ae302efc015f7cde4fb
fae06b4a7823df2b51fd193052327b754170d0b8
3f2463c10cd391e448cc9e320a6671f050405f13207c746f9ad77385b6d32ee6
GET /get-zen_doc/3958762/pub_5fad2f4d3cce092eaa985fa1_5fadd8fa4278375e7ec582f0/scale_1200 HTTP/1.1
Host: avatars.mds.yandex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 410 Gone
server: nginx
date: Sun, 05 Feb 2023 13:04:21 GMT
content-type: text/html
content-length: 136
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:20 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=A-IhH180M0RITmhlJTJCZkMwOUJGQlhaMUN2czlieVRTcEZYZEp0OFBFRjFQODVkTSUyQjNQSUlSZWtZMGY5TGRybnZXQjVXJTJC; expires=Fri, 01 Mar 2024 13:04:21 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 190269
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 77c548ed6dbee7a04321102c3d93db5c
3f4a20119d052c6c8e5f4224a2948ffd559f96b3
5d553cadff959602e40d007c876a01e0dd4540640c64bbb2679300d43326c603
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2191
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 13:04:21 GMT
Last-Modified: Sun, 05 Feb 2023 12:27:50 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 313
gem.gbc.criteo.com/newidsd
200 OK 38 B URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c10568d66a080a31838c0a7ab5b6e1ae
fddf7a55eb534b7029e041cd26bfd8876d5b0e79
6ec1fc5243a5a6eb5b8abbb8f1603ae4843fc42758561974393cb1a727b6b205
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:21 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 110049
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58534/occ
302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58534/occ
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58534/occ HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imprammp.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Sun, 05 Feb 2023 13:04:21 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/58534/occ?verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBFWp32MCEHKXtUVDaTM9vcNmQNxFhvYFEgEBAQH64GPpYwAAAAAA_eMAAA&S=AQAAAmvWj534THha1v1svJd4Q6I; Expires=Mon, 5 Feb 2024 19:04:21 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58534/occ?verify=true
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58534/occ?verify=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58534/occ?verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://imprammp.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 05 Feb 2023 13:04:21 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBFWp32MCEMEB5vCerQDF8Iaw7tkU0toFEgEBAQH64GPpYwAAAAAA_eMAAA&S=AQAAAvVyvav7Vhgq9g4_IUynHtQ; Expires=Mon, 5 Feb 2024 19:04:21 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
200 OK 0 B URL HTTP/2 gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-crto-bundle
Referer: https://odili.net/
Origin: https://odili.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:21 GMT
server: Kestrel
content-length: 0
cache-control: private, max-age=3600
expires: 60
access-control-allow-credentials: true
access-control-allow-headers: X-CRTO-SID, X-CRTO-IDCPY, X-CRTO-OPTOUT, X-CRTO-BUNDLE
access-control-allow-origin: https://odili.net
server-processing-duration-in-ticks: 479095
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 48720885071a77913555ce77e6732a99
e424848519dc0ffeee0b2fdfd6bf7bb86207c16e
20554771bb203167c0343f316c2a15d389a80a80a64b725525e18b38db566d8d
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 13:04:21 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Thu, 09 Feb 2023 09:33:39 GMT
ETag: "e424848519dc0ffeee0b2fdfd6bf7bb86207c16e"
Last-Modified: Sun, 05 Feb 2023 09:33:40 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2609
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794bd9f7ed000b3d-OSL
vidstat.taboola.com/vpaid/units/32_5_2/assets/css/cmOsUnit.css
200 OK 7.7 kB URL HTTP/2 vidstat.taboola.com/vpaid/units/32_5_2/assets/css/cmOsUnit.css
IP
Hash 910667a2fde737fb00f85f576307d7c1
b61996c64e31fd718e9d6476c5a9199423271af6
dc4be0883c751d0414e7b69a47e2216eabadf28d6fa3a20178ef7c9a6b2f1365
GET /vpaid/units/32_5_2/assets/css/cmOsUnit.css HTTP/1.1
Host: vidstat.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: CDEYKb9/OnHY53KGp51W7wZcc4iuNTAxxFiq7jttRe9nVyxHRiY+zBIRHbiH4kn2geJMEnfGdyw=
x-amz-request-id: TZ96536TVB61V2BX
last-modified: Sat, 04 Feb 2023 10:08:02 GMT
etag: "910667a2fde737fb00f85f576307d7c1"
x-amz-meta-ctime: 1675505281
x-amz-meta-mode: 33188
x-amz-meta-gid: 0
x-amz-meta-uid: 0
x-amz-meta-mtime: 1675505280
content-type: text/css
cache-control: public, max-age=2592000
accept-ranges: bytes
date: Sun, 05 Feb 2023 13:04:21 GMT
via: 1.1 varnish
age: 96867
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 5864
x-timer: S1675602262.804375,VS0,VE0
vary: Accept-Encoding
server: AmazonS3-br
content-encoding: br
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
content-length: 7742
X-Firefox-Spdy: h2
match.adsrvr.org/track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1
200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1 HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imprammp.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:21 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
vidstat.taboola.com/vpaid/units/32_5_2/infra/cmTagFEED_MANAGER.js
200 OK 141 kB URL HTTP/2 vidstat.taboola.com/vpaid/units/32_5_2/infra/cmTagFEED_MANAGER.js
IP
File type Unicode text, UTF-8 text, with very long lines (65489), with no line terminators
Size 141 kB (141174 bytes)
Hash 9da9997df992c7204156714415844cd7
0a555d97729245457bc140478266ed69739a7d02
9a99dbd2b77f5c9e85ade6338320aadb341ff7ce4ce70a94a0444a901ffc89a4
GET /vpaid/units/32_5_2/infra/cmTagFEED_MANAGER.js HTTP/1.1
Host: vidstat.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://odili.net
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: HG+OSsb1PF9SpnkVIuXnIQ8rrscwUzSXdrQkCErAFnkO+u1R5Tu/Zl8iitISfz+2qRtTN+UGnN0=
x-amz-request-id: ECGZK1JXGTGA78KH
last-modified: Sat, 04 Feb 2023 10:07:45 GMT
etag: "9da9997df992c7204156714415844cd7"
x-amz-meta-ctime: 1675505264
x-amz-meta-mode: 33188
x-amz-meta-gid: 0
x-amz-meta-uid: 0
x-amz-meta-mtime: 1675505263
content-type: application/javascript
cache-control: public, max-age=2592000
accept-ranges: bytes
date: Sun, 05 Feb 2023 13:04:21 GMT
via: 1.1 varnish
age: 96864
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 2155
x-timer: S1675602262.836178,VS0,VE0
vary: Accept-Encoding
server: AmazonS3-br
content-encoding: br
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
content-length: 141174
X-Firefox-Spdy: h2
il-trc-events.taboola.com/odili-odili/log/2/debug?tim=13%3A05%3A01.507&type=error&msg=Exit%20TRCRBox.loadScriptCallback(retry%3D0)%3A%20no%20items%20in%20response%20-%20organic-thumbs-feed-01-b-em-delta&llvl=2&id=277&cv=20230205-12-RELEASE<=deflated&pct=1
204 No Content 0 B URL HTTP/2 il-trc-events.taboola.com/odili-odili/log/2/debug?tim=13%3A05%3A01.507&type=error&msg=Exit%20TRCRBox.loadScriptCallback(retry%3D0)%3A%20no%20items%20in%20response%20-%20organic-thumbs-feed-01-b-em-delta&llvl=2&id=277&cv=20230205-12-RELEASE<=deflated&pct=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /odili-odili/log/2/debug?tim=13%3A05%3A01.507&type=error&msg=Exit%20TRCRBox.loadScriptCallback(retry%3D0)%3A%20no%20items%20in%20response%20-%20organic-thumbs-feed-01-b-em-delta&llvl=2&id=277&cv=20230205-12-RELEASE<=deflated&pct=1 HTTP/1.1
Host: il-trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 05 Feb 2023 13:04:21 GMT
x-fastly-to-nlb-rtt: 80057
access-control-allow-credentials: true
X-Firefox-Spdy: h2
il-trc-events.taboola.com/odili-odili/log/2/debug?tim=13%3A05%3A01.511&type=error&msg=Exit%20TRCRBox.loadScriptCallback(retry%3D0)%3A%20no%20items%20in%20response%20-%20organic-thumbs-feed-01-y-em-delta&llvl=2&id=2575&cv=20230205-12-RELEASE<=deflated&pct=1
204 No Content 0 B URL HTTP/2 il-trc-events.taboola.com/odili-odili/log/2/debug?tim=13%3A05%3A01.511&type=error&msg=Exit%20TRCRBox.loadScriptCallback(retry%3D0)%3A%20no%20items%20in%20response%20-%20organic-thumbs-feed-01-y-em-delta&llvl=2&id=2575&cv=20230205-12-RELEASE<=deflated&pct=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /odili-odili/log/2/debug?tim=13%3A05%3A01.511&type=error&msg=Exit%20TRCRBox.loadScriptCallback(retry%3D0)%3A%20no%20items%20in%20response%20-%20organic-thumbs-feed-01-y-em-delta&llvl=2&id=2575&cv=20230205-12-RELEASE<=deflated&pct=1 HTTP/1.1
Host: il-trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 05 Feb 2023 13:04:21 GMT
x-fastly-to-nlb-rtt: 80057
access-control-allow-credentials: true
X-Firefox-Spdy: h2
il-trc-events.taboola.com/odili-odili/log/2/debug?tim=13%3A05%3A01.512&type=error&msg=Exit%20TRCRBox.loadScriptCallback(retry%3D0)%3A%20no%20items%20in%20response%20-%20thumbs-feed-01-y-em-delta&llvl=2&id=5920&cv=20230205-12-RELEASE<=deflated&pct=1
204 No Content 0 B URL HTTP/2 il-trc-events.taboola.com/odili-odili/log/2/debug?tim=13%3A05%3A01.512&type=error&msg=Exit%20TRCRBox.loadScriptCallback(retry%3D0)%3A%20no%20items%20in%20response%20-%20thumbs-feed-01-y-em-delta&llvl=2&id=5920&cv=20230205-12-RELEASE<=deflated&pct=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /odili-odili/log/2/debug?tim=13%3A05%3A01.512&type=error&msg=Exit%20TRCRBox.loadScriptCallback(retry%3D0)%3A%20no%20items%20in%20response%20-%20thumbs-feed-01-y-em-delta&llvl=2&id=5920&cv=20230205-12-RELEASE<=deflated&pct=1 HTTP/1.1
Host: il-trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 05 Feb 2023 13:04:21 GMT
x-fastly-to-nlb-rtt: 80057
access-control-allow-credentials: true
X-Firefox-Spdy: h2
il-trc-events.taboola.com/odili-odili/log/3/supply-feature?route=AM:IL:V<i=deflated&ri=7540844f80435bb57184b249f44997e0&sd=v2_16ad14baf27facbdf3de372959505d54_0e1b8425-4e16-4937-9a33-c9774c9424e2-tuctad92ed3_1675602259_1675602259_CNawjgYQ_tQ9GNGXuI3iMCABKAEwogE434cMQJ6XEEj5qNkDUP___________wFYAGAAaKeW6aDs7Oe75gFwAA&ui=0e1b8425-4e16-4937-9a33-c9774c9424e2-tuctad92ed3&pi=/&wi=4918648878080227958&pt=text&vi=1675602299857&d=%7B%22event_type%22%3A%22next_up%22%2C%22event_state%22%3A%22RENDERED%22%2C%22event_value%22%3Anull%2C%22event_msg%22%3Anull%7D&tim=13%3A05%3A01.444&id=5544&llvl=2&cv=20230205-12-RELEASE&
204 No Content 0 B URL HTTP/2 il-trc-events.taboola.com/odili-odili/log/3/supply-feature?route=AM:IL:V<i=deflated&ri=7540844f80435bb57184b249f44997e0&sd=v2_16ad14baf27facbdf3de372959505d54_0e1b8425-4e16-4937-9a33-c9774c9424e2-tuctad92ed3_1675602259_1675602259_CNawjgYQ_tQ9GNGXuI3iMCABKAEwogE434cMQJ6XEEj5qNkDUP___________wFYAGAAaKeW6aDs7Oe75gFwAA&ui=0e1b8425-4e16-4937-9a33-c9774c9424e2-tuctad92ed3&pi=/&wi=4918648878080227958&pt=text&vi=1675602299857&d=%7B%22event_type%22%3A%22next_up%22%2C%22event_state%22%3A%22RENDERED%22%2C%22event_value%22%3Anull%2C%22event_msg%22%3Anull%7D&tim=13%3A05%3A01.444&id=5544&llvl=2&cv=20230205-12-RELEASE&
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /odili-odili/log/3/supply-feature?route=AM:IL:V<i=deflated&ri=7540844f80435bb57184b249f44997e0&sd=v2_16ad14baf27facbdf3de372959505d54_0e1b8425-4e16-4937-9a33-c9774c9424e2-tuctad92ed3_1675602259_1675602259_CNawjgYQ_tQ9GNGXuI3iMCABKAEwogE434cMQJ6XEEj5qNkDUP___________wFYAGAAaKeW6aDs7Oe75gFwAA&ui=0e1b8425-4e16-4937-9a33-c9774c9424e2-tuctad92ed3&pi=/&wi=4918648878080227958&pt=text&vi=1675602299857&d=%7B%22event_type%22%3A%22next_up%22%2C%22event_state%22%3A%22RENDERED%22%2C%22event_value%22%3Anull%2C%22event_msg%22%3Anull%7D&tim=13%3A05%3A01.444&id=5544&llvl=2&cv=20230205-12-RELEASE& HTTP/1.1
Host: il-trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sun, 05 Feb 2023 13:04:21 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
il-trc-events.taboola.com/odili-odili/log/3/supply-feature?route=AM:IL:V<i=deflated&ri=7540844f80435bb57184b249f44997e0&sd=v2_16ad14baf27facbdf3de372959505d54_0e1b8425-4e16-4937-9a33-c9774c9424e2-tuctad92ed3_1675602259_1675602259_CNawjgYQ_tQ9GNGXuI3iMCABKAEwogE434cMQJ6XEEj5qNkDUP___________wFYAGAAaKeW6aDs7Oe75gFwAA&ui=0e1b8425-4e16-4937-9a33-c9774c9424e2-tuctad92ed3&pi=/&wi=4918648878080227958&pt=text&vi=1675602299857&d=%7B%22event_type%22%3A%22EXPLORE_MORE%22%2C%22event_state%22%3A%22AVAILABLE%22%2C%22event_value%22%3A%22%22%2C%22event_msg%22%3A%22%22%2C%22event_key%22%3A%22%22%7D&tim=13%3A05%3A01.637&id=3589&llvl=2&cv=20230205-12-RELEASE&
204 No Content 0 B URL HTTP/2 il-trc-events.taboola.com/odili-odili/log/3/supply-feature?route=AM:IL:V<i=deflated&ri=7540844f80435bb57184b249f44997e0&sd=v2_16ad14baf27facbdf3de372959505d54_0e1b8425-4e16-4937-9a33-c9774c9424e2-tuctad92ed3_1675602259_1675602259_CNawjgYQ_tQ9GNGXuI3iMCABKAEwogE434cMQJ6XEEj5qNkDUP___________wFYAGAAaKeW6aDs7Oe75gFwAA&ui=0e1b8425-4e16-4937-9a33-c9774c9424e2-tuctad92ed3&pi=/&wi=4918648878080227958&pt=text&vi=1675602299857&d=%7B%22event_type%22%3A%22EXPLORE_MORE%22%2C%22event_state%22%3A%22AVAILABLE%22%2C%22event_value%22%3A%22%22%2C%22event_msg%22%3A%22%22%2C%22event_key%22%3A%22%22%7D&tim=13%3A05%3A01.637&id=3589&llvl=2&cv=20230205-12-RELEASE&
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /odili-odili/log/3/supply-feature?route=AM:IL:V<i=deflated&ri=7540844f80435bb57184b249f44997e0&sd=v2_16ad14baf27facbdf3de372959505d54_0e1b8425-4e16-4937-9a33-c9774c9424e2-tuctad92ed3_1675602259_1675602259_CNawjgYQ_tQ9GNGXuI3iMCABKAEwogE434cMQJ6XEEj5qNkDUP___________wFYAGAAaKeW6aDs7Oe75gFwAA&ui=0e1b8425-4e16-4937-9a33-c9774c9424e2-tuctad92ed3&pi=/&wi=4918648878080227958&pt=text&vi=1675602299857&d=%7B%22event_type%22%3A%22EXPLORE_MORE%22%2C%22event_state%22%3A%22AVAILABLE%22%2C%22event_value%22%3A%22%22%2C%22event_msg%22%3A%22%22%2C%22event_key%22%3A%22%22%7D&tim=13%3A05%3A01.637&id=3589&llvl=2&cv=20230205-12-RELEASE& HTTP/1.1
Host: il-trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 05 Feb 2023 13:04:21 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
il-trc-events.taboola.com/odili-odili/log/2/debug?tim=13%3A05%3A01.666&type=error&msg=Exit%20TRCRBox.loadScriptCallback(retry%3D0)%3A%20no%20items%20in%20response%20-%20next-up-a&llvl=2&id=6030&cv=20230205-12-RELEASE<=deflated&pct=1
204 No Content 0 B URL HTTP/2 il-trc-events.taboola.com/odili-odili/log/2/debug?tim=13%3A05%3A01.666&type=error&msg=Exit%20TRCRBox.loadScriptCallback(retry%3D0)%3A%20no%20items%20in%20response%20-%20next-up-a&llvl=2&id=6030&cv=20230205-12-RELEASE<=deflated&pct=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /odili-odili/log/2/debug?tim=13%3A05%3A01.666&type=error&msg=Exit%20TRCRBox.loadScriptCallback(retry%3D0)%3A%20no%20items%20in%20response%20-%20next-up-a&llvl=2&id=6030&cv=20230205-12-RELEASE<=deflated&pct=1 HTTP/1.1
Host: il-trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 05 Feb 2023 13:04:21 GMT
x-fastly-to-nlb-rtt: 80057
access-control-allow-credentials: true
X-Firefox-Spdy: h2
il-trc-events.taboola.com/odili-odili/log/3/supply-feature?route=AM:IL:V<i=deflated&ri=7540844f80435bb57184b249f44997e0&sd=v2_16ad14baf27facbdf3de372959505d54_0e1b8425-4e16-4937-9a33-c9774c9424e2-tuctad92ed3_1675602259_1675602259_CNawjgYQ_tQ9GNGXuI3iMCABKAEwogE434cMQJ6XEEj5qNkDUP___________wFYAGAAaKeW6aDs7Oe75gFwAA&ui=0e1b8425-4e16-4937-9a33-c9774c9424e2-tuctad92ed3&pi=/&wi=4918648878080227958&pt=text&vi=1675602299857&d=%7B%22event_type%22%3A%22EXPLORE_MORE%22%2C%22event_state%22%3A%22CLICKABLE%22%2C%22event_value%22%3A%22tblOriginalState%3A%20true%22%2C%22event_msg%22%3A%22back%20button%20enabled%2C%20history%20changed.%22%2C%22event_key%22%3A%22%22%7D&tim=13%3A05%3A01.640&id=7316&llvl=2&cv=20230205-12-RELEASE&
204 No Content 0 B URL HTTP/2 il-trc-events.taboola.com/odili-odili/log/3/supply-feature?route=AM:IL:V<i=deflated&ri=7540844f80435bb57184b249f44997e0&sd=v2_16ad14baf27facbdf3de372959505d54_0e1b8425-4e16-4937-9a33-c9774c9424e2-tuctad92ed3_1675602259_1675602259_CNawjgYQ_tQ9GNGXuI3iMCABKAEwogE434cMQJ6XEEj5qNkDUP___________wFYAGAAaKeW6aDs7Oe75gFwAA&ui=0e1b8425-4e16-4937-9a33-c9774c9424e2-tuctad92ed3&pi=/&wi=4918648878080227958&pt=text&vi=1675602299857&d=%7B%22event_type%22%3A%22EXPLORE_MORE%22%2C%22event_state%22%3A%22CLICKABLE%22%2C%22event_value%22%3A%22tblOriginalState%3A%20true%22%2C%22event_msg%22%3A%22back%20button%20enabled%2C%20history%20changed.%22%2C%22event_key%22%3A%22%22%7D&tim=13%3A05%3A01.640&id=7316&llvl=2&cv=20230205-12-RELEASE&
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /odili-odili/log/3/supply-feature?route=AM:IL:V<i=deflated&ri=7540844f80435bb57184b249f44997e0&sd=v2_16ad14baf27facbdf3de372959505d54_0e1b8425-4e16-4937-9a33-c9774c9424e2-tuctad92ed3_1675602259_1675602259_CNawjgYQ_tQ9GNGXuI3iMCABKAEwogE434cMQJ6XEEj5qNkDUP___________wFYAGAAaKeW6aDs7Oe75gFwAA&ui=0e1b8425-4e16-4937-9a33-c9774c9424e2-tuctad92ed3&pi=/&wi=4918648878080227958&pt=text&vi=1675602299857&d=%7B%22event_type%22%3A%22EXPLORE_MORE%22%2C%22event_state%22%3A%22CLICKABLE%22%2C%22event_value%22%3A%22tblOriginalState%3A%20true%22%2C%22event_msg%22%3A%22back%20button%20enabled%2C%20history%20changed.%22%2C%22event_key%22%3A%22%22%7D&tim=13%3A05%3A01.640&id=7316&llvl=2&cv=20230205-12-RELEASE& HTTP/1.1
Host: il-trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 05 Feb 2023 13:04:21 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
il-trc-events.taboola.com/odili-odili/log/3/abtests?route=AM:IL:V<i=deflated&ri=7540844f80435bb57184b249f44997e0&sd=v2_16ad14baf27facbdf3de372959505d54_0e1b8425-4e16-4937-9a33-c9774c9424e2-tuctad92ed3_1675602259_1675602259_CNawjgYQ_tQ9GNGXuI3iMCABKAEwogE434cMQJ6XEEj5qNkDUP___________wFYAGAAaKeW6aDs7Oe75gFwAA&ui=0e1b8425-4e16-4937-9a33-c9774c9424e2-tuctad92ed3&pi=/&wi=4918648878080227958&pt=text&vi=1675602299857&d=%7B%22abTestsEventType%22%3A%22simple%22%2C%22name%22%3A%22explore-more%22%2C%22type%22%3A%22explore-more-available%22%2C%22eventTime%22%3A1675602301641%7D&tim=13%3A05%3A01.641&id=7928&llvl=2&cv=20230205-12-RELEASE&
204 No Content 0 B URL HTTP/2 il-trc-events.taboola.com/odili-odili/log/3/abtests?route=AM:IL:V<i=deflated&ri=7540844f80435bb57184b249f44997e0&sd=v2_16ad14baf27facbdf3de372959505d54_0e1b8425-4e16-4937-9a33-c9774c9424e2-tuctad92ed3_1675602259_1675602259_CNawjgYQ_tQ9GNGXuI3iMCABKAEwogE434cMQJ6XEEj5qNkDUP___________wFYAGAAaKeW6aDs7Oe75gFwAA&ui=0e1b8425-4e16-4937-9a33-c9774c9424e2-tuctad92ed3&pi=/&wi=4918648878080227958&pt=text&vi=1675602299857&d=%7B%22abTestsEventType%22%3A%22simple%22%2C%22name%22%3A%22explore-more%22%2C%22type%22%3A%22explore-more-available%22%2C%22eventTime%22%3A1675602301641%7D&tim=13%3A05%3A01.641&id=7928&llvl=2&cv=20230205-12-RELEASE&
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /odili-odili/log/3/abtests?route=AM:IL:V<i=deflated&ri=7540844f80435bb57184b249f44997e0&sd=v2_16ad14baf27facbdf3de372959505d54_0e1b8425-4e16-4937-9a33-c9774c9424e2-tuctad92ed3_1675602259_1675602259_CNawjgYQ_tQ9GNGXuI3iMCABKAEwogE434cMQJ6XEEj5qNkDUP___________wFYAGAAaKeW6aDs7Oe75gFwAA&ui=0e1b8425-4e16-4937-9a33-c9774c9424e2-tuctad92ed3&pi=/&wi=4918648878080227958&pt=text&vi=1675602299857&d=%7B%22abTestsEventType%22%3A%22simple%22%2C%22name%22%3A%22explore-more%22%2C%22type%22%3A%22explore-more-available%22%2C%22eventTime%22%3A1675602301641%7D&tim=13%3A05%3A01.641&id=7928&llvl=2&cv=20230205-12-RELEASE& HTTP/1.1
Host: il-trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 05 Feb 2023 13:04:21 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
csm.fr.eu.criteo.net/iev?entry=c~Idfs.Rtus.72.Events.StartInit~1&entry=c~Idfs.Rtus.72.Events.SyncframeDropped~1&entry=c~Idfs.Rtus.72.Origin.FromSyncframeBundle~1&entry=c~Idfs.Rtus.72.Headers.Bundle~1&entry=c~Idfs.Rtus.72.Events.InitiateFetch~1
200 OK 43 B URL HTTP/2 csm.fr.eu.criteo.net/iev?entry=c~Idfs.Rtus.72.Events.StartInit~1&entry=c~Idfs.Rtus.72.Events.SyncframeDropped~1&entry=c~Idfs.Rtus.72.Origin.FromSyncframeBundle~1&entry=c~Idfs.Rtus.72.Headers.Bundle~1&entry=c~Idfs.Rtus.72.Events.InitiateFetch~1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /iev?entry=c~Idfs.Rtus.72.Events.StartInit~1&entry=c~Idfs.Rtus.72.Events.SyncframeDropped~1&entry=c~Idfs.Rtus.72.Origin.FromSyncframeBundle~1&entry=c~Idfs.Rtus.72.Headers.Bundle~1&entry=c~Idfs.Rtus.72.Events.InitiateFetch~1 HTTP/1.1
Host: csm.fr.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:21 GMT
pragma: no-cache
server: Finatra
expires: 0
content-type: image/gif
cache-control: no-cache, no-store, must-revalidate
content-length: 43
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
il-trc-events.taboola.com/odili-odili/log/2/debug?tim=13%3A05%3A01.514&type=error&msg=Exit%20TRCRBox.loadScriptCallback(retry%3D0)%3A%20no%20items%20in%20response%20-%20organic-thumbs-feed-y-em-delta&llvl=2&id=6160&cv=20230205-12-RELEASE<=deflated&pct=1
204 No Content 0 B URL HTTP/2 il-trc-events.taboola.com/odili-odili/log/2/debug?tim=13%3A05%3A01.514&type=error&msg=Exit%20TRCRBox.loadScriptCallback(retry%3D0)%3A%20no%20items%20in%20response%20-%20organic-thumbs-feed-y-em-delta&llvl=2&id=6160&cv=20230205-12-RELEASE<=deflated&pct=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /odili-odili/log/2/debug?tim=13%3A05%3A01.514&type=error&msg=Exit%20TRCRBox.loadScriptCallback(retry%3D0)%3A%20no%20items%20in%20response%20-%20organic-thumbs-feed-y-em-delta&llvl=2&id=6160&cv=20230205-12-RELEASE<=deflated&pct=1 HTTP/1.1
Host: il-trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sun, 05 Feb 2023 13:04:22 GMT
x-fastly-to-nlb-rtt: 80057
access-control-allow-credentials: true
X-Firefox-Spdy: h2
il-trc-events.taboola.com/odili-odili/log/2/debug?tim=13%3A05%3A01.508&type=error&msg=Exit%20TRCRBox.loadScriptCallback(retry%3D0)%3A%20no%20items%20in%20response%20-%20thumbs-feed-01-y-delta&llvl=2&id=8671&cv=20230205-12-RELEASE<=deflated&pct=1
204 No Content 0 B URL HTTP/2 il-trc-events.taboola.com/odili-odili/log/2/debug?tim=13%3A05%3A01.508&type=error&msg=Exit%20TRCRBox.loadScriptCallback(retry%3D0)%3A%20no%20items%20in%20response%20-%20thumbs-feed-01-y-delta&llvl=2&id=8671&cv=20230205-12-RELEASE<=deflated&pct=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /odili-odili/log/2/debug?tim=13%3A05%3A01.508&type=error&msg=Exit%20TRCRBox.loadScriptCallback(retry%3D0)%3A%20no%20items%20in%20response%20-%20thumbs-feed-01-y-delta&llvl=2&id=8671&cv=20230205-12-RELEASE<=deflated&pct=1 HTTP/1.1
Host: il-trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sun, 05 Feb 2023 13:04:22 GMT
x-fastly-to-nlb-rtt: 80057
access-control-allow-credentials: true
X-Firefox-Spdy: h2
resources.infolinks.com/js/1845.006-3.025/ice.js
200 OK 57 kB URL HTTP/2 resources.infolinks.com/js/1845.006-3.025/ice.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash c6ee2f5ee5d8108c139d7995eb7235be
fe8501fa91bf7692c9b40163c95089fc699c56e1
c79263ce4c0b60c655507bc9530cdcbeb56b09a745b060ce1902179795ee6e7c
GET /js/1845.006-3.025/ice.js HTTP/1.1
Host: resources.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:18 GMT
content-type: application/javascript
last-modified: Wed, 25 Jan 2023 14:23:04 GMT
etag: W/"2d3a3-5f3175edcfc76"
cache-control: max-age=2592000
expires: Tue, 07 Mar 2023 11:07:06 GMT
via: 1.1 google
cf-cache-status: HIT
age: 7032
vary: Accept-Encoding
server: cloudflare
cf-ray: 794bd9e38c44b500-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
il-trc-events.taboola.com/odili-odili/log/2/debug?tim=13%3A05%3A01.505&type=error&msg=Exit%20TRCRBox.loadScriptCallback(retry%3D0)%3A%20no%20items%20in%20response%20-%20organic-thumbs-feed-01-x-delta&llvl=2&id=9011&cv=20230205-12-RELEASE<=deflated&pct=1
204 No Content 405 B URL HTTP/2 il-trc-events.taboola.com/odili-odili/log/2/debug?tim=13%3A05%3A01.505&type=error&msg=Exit%20TRCRBox.loadScriptCallback(retry%3D0)%3A%20no%20items%20in%20response%20-%20organic-thumbs-feed-01-x-delta&llvl=2&id=9011&cv=20230205-12-RELEASE<=deflated&pct=1
IP
ASN #200478 Taboola.com ltd
Hash 2ef99e4da052dc57ae5559c72defa692
f4c28e4b56ca2ef911913143275becea131e7254
3df3574fb97a537bb8778891568f5bee9c6ee74d94d855a54bce340a8321661c
GET /odili-odili/log/2/debug?tim=13%3A05%3A01.505&type=error&msg=Exit%20TRCRBox.loadScriptCallback(retry%3D0)%3A%20no%20items%20in%20response%20-%20organic-thumbs-feed-01-x-delta&llvl=2&id=9011&cv=20230205-12-RELEASE<=deflated&pct=1 HTTP/1.1
Host: il-trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sun, 05 Feb 2023 13:04:22 GMT
x-fastly-to-nlb-rtt: 80057
access-control-allow-credentials: true
X-Firefox-Spdy: h2
il-trc-events.taboola.com/odili-odili/log/3/supply-feature?route=AM:IL:V<i=deflated&ri=7540844f80435bb57184b249f44997e0&sd=v2_16ad14baf27facbdf3de372959505d54_0e1b8425-4e16-4937-9a33-c9774c9424e2-tuctad92ed3_1675602259_1675602259_CNawjgYQ_tQ9GNGXuI3iMCABKAEwogE434cMQJ6XEEj5qNkDUP___________wFYAGAAaKeW6aDs7Oe75gFwAA&ui=0e1b8425-4e16-4937-9a33-c9774c9424e2-tuctad92ed3&pi=/&wi=4918648878080227958&pt=text&vi=1675602299857&d=%7B%22event_type%22%3A%22EXPLORE_MORE%22%2C%22event_state%22%3A%22ADOPTED%22%2C%22event_value%22%3A%22%22%2C%22event_msg%22%3A%22%22%2C%22event_key%22%3A%22%22%7D&tim=13%3A05%3A01.496&id=8533&llvl=2&cv=20230205-12-RELEASE&
204 No Content 0 B URL HTTP/2 il-trc-events.taboola.com/odili-odili/log/3/supply-feature?route=AM:IL:V<i=deflated&ri=7540844f80435bb57184b249f44997e0&sd=v2_16ad14baf27facbdf3de372959505d54_0e1b8425-4e16-4937-9a33-c9774c9424e2-tuctad92ed3_1675602259_1675602259_CNawjgYQ_tQ9GNGXuI3iMCABKAEwogE434cMQJ6XEEj5qNkDUP___________wFYAGAAaKeW6aDs7Oe75gFwAA&ui=0e1b8425-4e16-4937-9a33-c9774c9424e2-tuctad92ed3&pi=/&wi=4918648878080227958&pt=text&vi=1675602299857&d=%7B%22event_type%22%3A%22EXPLORE_MORE%22%2C%22event_state%22%3A%22ADOPTED%22%2C%22event_value%22%3A%22%22%2C%22event_msg%22%3A%22%22%2C%22event_key%22%3A%22%22%7D&tim=13%3A05%3A01.496&id=8533&llvl=2&cv=20230205-12-RELEASE&
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /odili-odili/log/3/supply-feature?route=AM:IL:V<i=deflated&ri=7540844f80435bb57184b249f44997e0&sd=v2_16ad14baf27facbdf3de372959505d54_0e1b8425-4e16-4937-9a33-c9774c9424e2-tuctad92ed3_1675602259_1675602259_CNawjgYQ_tQ9GNGXuI3iMCABKAEwogE434cMQJ6XEEj5qNkDUP___________wFYAGAAaKeW6aDs7Oe75gFwAA&ui=0e1b8425-4e16-4937-9a33-c9774c9424e2-tuctad92ed3&pi=/&wi=4918648878080227958&pt=text&vi=1675602299857&d=%7B%22event_type%22%3A%22EXPLORE_MORE%22%2C%22event_state%22%3A%22ADOPTED%22%2C%22event_value%22%3A%22%22%2C%22event_msg%22%3A%22%22%2C%22event_key%22%3A%22%22%7D&tim=13%3A05%3A01.496&id=8533&llvl=2&cv=20230205-12-RELEASE& HTTP/1.1
Host: il-trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sun, 05 Feb 2023 13:04:22 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8b01e823dcdb0bc93def67791b99c1ff
c2b1ff308d5b27a776259ed5696ee0854e586c77
7be7f84db702ba6b520c773d6422eaf7e1ee519485a030057713a74618e3be2d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 05 Feb 2023 13:04:22 GMT
Last-Modified: Sun, 05 Feb 2023 11:41:50 GMT
Server: ECS (nyb/1D22)
X-Cache: Miss from cloudfront
Via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: miqKJosUepSwtTXX7dFprn_vI3hGSyJsPwwWKnGWg5KLLnFG9cnVzw==
Age: 4952
vidstat.taboola.com/content_v3.js
200 OK 4.8 kB URL HTTP/2 vidstat.taboola.com/content_v3.js
IP
Hash a51838454dbf5be51e1c78b36215928e
4091520eecdca1a8d3a9dfa3e87423caf091d875
af78fe5ad4bc570ab5f318cc41dd6d0a5d3d34b9103226722384852160bae6a6
GET /content_v3.js HTTP/1.1
Host: vidstat.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 20 Jul 2022 13:23:50 GMT
etag: "f7533e747bb02a8eb527ada4f2749620"
server: AmazonS3
via: 1.1 953ec33235d719831a6e6956b5e5bb7a.cloudfront.net (CloudFront), 1.1 varnish
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: FFVJK_qv7a28BGKrUuijA7BmJqD1LcFInTlLav4SVzzPGnCkuo4hyA==
cache-control: public, max-age=2592000
content-encoding: gzip
accept-ranges: bytes
date: Sun, 05 Feb 2023 13:04:22 GMT
age: 2939971
x-served-by: cache-bma1682-BMA
x-cache: Miss from cloudfront, HIT
x-cache-hits: 154344
x-timer: S1675602262.226842,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
content-length: 4839
X-Firefox-Spdy: h2
vidstat.taboola.com/vpaid/vPlayer/player/v124731.691/OvaMediaPlayer.js
200 OK 85 kB URL HTTP/2 vidstat.taboola.com/vpaid/vPlayer/player/v124731.691/OvaMediaPlayer.js
IP
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Hash e009eb0708ed727d822182aaac3d2393
82a30ec96d4719b3ac24711d116552c042d3364a
8430cada75a2e69ddeb484bff672eb7634e5f4cbf49232811ce49e4c5be82218
GET /vpaid/vPlayer/player/v124731.691/OvaMediaPlayer.js HTTP/1.1
Host: vidstat.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: jlBUh1h9avOAqBBqVORrfQRfWu91h69IkyDGYK4to7juYZrf8DTXaC7QwexNBythYAyQrwoV8jQ=
x-amz-request-id: J770XMG5GXB251C1
last-modified: Thu, 26 Jan 2023 09:55:15 GMT
etag: "e009eb0708ed727d822182aaac3d2393"
x-amz-meta-ctime: 1674726914
x-amz-meta-mode: 33188
x-amz-meta-gid: 0
x-amz-meta-uid: 0
x-amz-meta-mtime: 1674726901
content-type: application/javascript
cache-control: public, max-age=2592000
accept-ranges: bytes
date: Sun, 05 Feb 2023 13:04:22 GMT
via: 1.1 varnish
age: 875292
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 4318
x-timer: S1675602262.272087,VS0,VE0
vary: Accept-Encoding
server: AmazonS3-br
content-encoding: br
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
content-length: 85244
X-Firefox-Spdy: h2
am-vid-events.taboola.com/st?cijs=convusmp&ttype=16&cisd=convusmp&cipid=66361655&crid=-1&dast=V7a6gCFgNK1WeZMBKZTgRK1WeZMBKZTgUAAAAGBvQHJDhzrZybjWctcu5mbtFuY3ErbBPLWjWbmUwTm805cy6HQIIz18q52XjWIudu5hbtNha3wjaxrFWzmck0sdmcM-dyCh_GcpkMaoGEZfb7DgrK6ekxuwyiouttsTucZs8bJNB0Onyue73e5DQ77XKX6S8HAAAAgIf___9_CAAAAIAIAAAAAAkAAAAAioCKfwuBCwAAAACM____fw2ATw6C95z9_gAAAAAAAQAAACABIIjMKwHAcJk7-f________-PGaDPvJH5____vzHoAXjwAXgQAgAAuBjy8KrDlBKBnCcqyCtiBAAAALClpaJ5NKkTKouq____fiuAKwCAAMOQVjfyLN1BibcwAAAAgLEFelj8frPDrvG7Xfb_________b_Z_9o8m9IYrlRbEMnqt9gsIALD2CwgAwKZuAABvAXBBR9CKwWB1CrHYDFaD4WY5mB0AAADA3f___78eSMwWJsdo4rBZdjOHx2KyeUYuz26yXC1Xg9XINdpespxr-_5IpF9fiLDMft9BQTk9PWaXQVR0vS12h9PsOYgPGoblZBDMj6Ily91ytxpNFqPRcrnZDTejwf4GYrAa4EQMlsvJZDHZrUar0Wa4G80GCxSIwQQpWrJaLperzWa12o0Ws8FmOdxskKJVq9loMxiuZpPZbrcaDobL0QgpWrLcLXer0WQxGi2Xm91wMxoMEQZWjolxNFmtRSvHbC1abnZr5cKzWWucu91o4xxNRivLWvT6mB4m52Rl8mxRMCBjL5KnRToR-Ta72WY18-xWE4dlNfKNHDaTybQb7EbD3XBjmoglmpNFOpFd9o3ZwuQYTRw2y27m8FhMNs_I5dlNlqvlarAauUb7wsoxMY4mq7Vo5ZitRcvNbq1ceDZrjXO3G22co8loZVmLXh_Tw-ScrEyefWO2W80Gk8lquW_MdqvZYDJZLfcdOsN39Tkb_dKjuaPziK0nZ-nmMChcBov397lIm9HGzajShi0W1bW4c02sQr_f7_f7_X6_3-_dmA0eg8Hwsny1hYnz27N8q52N92BQxBLBRTrRm5xmp1tvcpqdFrFEabpIJ3qJWCI4XaQT0ct4uqj_yJCLuXIwF03mitVolQAAAAAAAAAAljBn3gQAAADgNJDlcjNcrfMgVsPRbrVaLsCDmp8uMAgAAAAAAMAukVAjBgy2nl1x48cLb3KanW69yWl2WhngQa2PefNnglir1bIGAAAQwAYAAAjg1s1bADYT_____x8HAAAgI0cPAABAvw9EdarQAzd6DQ!&cmcv=&pix=31579697&cb=1675602302602&uv=3252&tms=1675602302602&su=3&abt=dfrc_vB!pl124731-691_vA!t45!ufm_vG&ft=0&unm=FEED_MANAGER&su=3&
200 OK 0 B URL HTTP/2 am-vid-events.taboola.com/st?cijs=convusmp&ttype=16&cisd=convusmp&cipid=66361655&crid=-1&dast=V7a6gCFgNK1WeZMBKZTgRK1WeZMBKZTgUAAAAGBvQHJDhzrZybjWctcu5mbtFuY3ErbBPLWjWbmUwTm805cy6HQIIz18q52XjWIudu5hbtNha3wjaxrFWzmck0sdmcM-dyCh_GcpkMaoGEZfb7DgrK6ekxuwyiouttsTucZs8bJNB0Onyue73e5DQ77XKX6S8HAAAAgIf___9_CAAAAIAIAAAAAAkAAAAAioCKfwuBCwAAAACM____fw2ATw6C95z9_gAAAAAAAQAAACABIIjMKwHAcJk7-f________-PGaDPvJH5____vzHoAXjwAXgQAgAAuBjy8KrDlBKBnCcqyCtiBAAAALClpaJ5NKkTKouq____fiuAKwCAAMOQVjfyLN1BibcwAAAAgLEFelj8frPDrvG7Xfb_________b_Z_9o8m9IYrlRbEMnqt9gsIALD2CwgAwKZuAABvAXBBR9CKwWB1CrHYDFaD4WY5mB0AAADA3f___78eSMwWJsdo4rBZdjOHx2KyeUYuz26yXC1Xg9XINdpespxr-_5IpF9fiLDMft9BQTk9PWaXQVR0vS12h9PsOYgPGoblZBDMj6Ily91ytxpNFqPRcrnZDTejwf4GYrAa4EQMlsvJZDHZrUar0Wa4G80GCxSIwQQpWrJaLperzWa12o0Ws8FmOdxskKJVq9loMxiuZpPZbrcaDobL0QgpWrLcLXer0WQxGi2Xm91wMxoMEQZWjolxNFmtRSvHbC1abnZr5cKzWWucu91o4xxNRivLWvT6mB4m52Rl8mxRMCBjL5KnRToR-Ta72WY18-xWE4dlNfKNHDaTybQb7EbD3XBjmoglmpNFOpFd9o3ZwuQYTRw2y27m8FhMNs_I5dlNlqvlarAauUb7wsoxMY4mq7Vo5ZitRcvNbq1ceDZrjXO3G22co8loZVmLXh_Tw-ScrEyefWO2W80Gk8lquW_MdqvZYDJZLfcdOsN39Tkb_dKjuaPziK0nZ-nmMChcBov397lIm9HGzajShi0W1bW4c02sQr_f7_f7_X6_3-_dmA0eg8Hwsny1hYnz27N8q52N92BQxBLBRTrRm5xmp1tvcpqdFrFEabpIJ3qJWCI4XaQT0ct4uqj_yJCLuXIwF03mitVolQAAAAAAAAAAljBn3gQAAADgNJDlcjNcrfMgVsPRbrVaLsCDmp8uMAgAAAAAAMAukVAjBgy2nl1x48cLb3KanW69yWl2WhngQa2PefNnglir1bIGAAAQwAYAAAjg1s1bADYT_____x8HAAAgI0cPAABAvw9EdarQAzd6DQ!&cmcv=&pix=31579697&cb=1675602302602&uv=3252&tms=1675602302602&su=3&abt=dfrc_vB!pl124731-691_vA!t45!ufm_vG&ft=0&unm=FEED_MANAGER&su=3&
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /st?cijs=convusmp&ttype=16&cisd=convusmp&cipid=66361655&crid=-1&dast=V7a6gCFgNK1WeZMBKZTgRK1WeZMBKZTgUAAAAGBvQHJDhzrZybjWctcu5mbtFuY3ErbBPLWjWbmUwTm805cy6HQIIz18q52XjWIudu5hbtNha3wjaxrFWzmck0sdmcM-dyCh_GcpkMaoGEZfb7DgrK6ekxuwyiouttsTucZs8bJNB0Onyue73e5DQ77XKX6S8HAAAAgIf___9_CAAAAIAIAAAAAAkAAAAAioCKfwuBCwAAAACM____fw2ATw6C95z9_gAAAAAAAQAAACABIIjMKwHAcJk7-f________-PGaDPvJH5____vzHoAXjwAXgQAgAAuBjy8KrDlBKBnCcqyCtiBAAAALClpaJ5NKkTKouq____fiuAKwCAAMOQVjfyLN1BibcwAAAAgLEFelj8frPDrvG7Xfb_________b_Z_9o8m9IYrlRbEMnqt9gsIALD2CwgAwKZuAABvAXBBR9CKwWB1CrHYDFaD4WY5mB0AAADA3f___78eSMwWJsdo4rBZdjOHx2KyeUYuz26yXC1Xg9XINdpespxr-_5IpF9fiLDMft9BQTk9PWaXQVR0vS12h9PsOYgPGoblZBDMj6Ily91ytxpNFqPRcrnZDTejwf4GYrAa4EQMlsvJZDHZrUar0Wa4G80GCxSIwQQpWrJaLperzWa12o0Ws8FmOdxskKJVq9loMxiuZpPZbrcaDobL0QgpWrLcLXer0WQxGi2Xm91wMxoMEQZWjolxNFmtRSvHbC1abnZr5cKzWWucu91o4xxNRivLWvT6mB4m52Rl8mxRMCBjL5KnRToR-Ta72WY18-xWE4dlNfKNHDaTybQb7EbD3XBjmoglmpNFOpFd9o3ZwuQYTRw2y27m8FhMNs_I5dlNlqvlarAauUb7wsoxMY4mq7Vo5ZitRcvNbq1ceDZrjXO3G22co8loZVmLXh_Tw-ScrEyefWO2W80Gk8lquW_MdqvZYDJZLfcdOsN39Tkb_dKjuaPziK0nZ-nmMChcBov397lIm9HGzajShi0W1bW4c02sQr_f7_f7_X6_3-_dmA0eg8Hwsny1hYnz27N8q52N92BQxBLBRTrRm5xmp1tvcpqdFrFEabpIJ3qJWCI4XaQT0ct4uqj_yJCLuXIwF03mitVolQAAAAAAAAAAljBn3gQAAADgNJDlcjNcrfMgVsPRbrVaLsCDmp8uMAgAAAAAAMAukVAjBgy2nl1x48cLb3KanW69yWl2WhngQa2PefNnglir1bIGAAAQwAYAAAjg1s1bADYT_____x8HAAAgI0cPAABAvw9EdarQAzd6DQ!&cmcv=&pix=31579697&cb=1675602302602&uv=3252&tms=1675602302602&su=3&abt=dfrc_vB!pl124731-691_vA!t45!ufm_vG&ft=0&unm=FEED_MANAGER&su=3& HTTP/1.1
Host: am-vid-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 13:04:22 GMT
content-length: 0
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/static/thumbnails/f539211219b796ffbb49949997c764f0.png
200 OK 254 B URL HTTP/2 cdn.taboola.com/libtrc/static/thumbnails/f539211219b796ffbb49949997c764f0.png
IP
File type PNG image data, 12 x 12, 8-bit gray+alpha, non-interlaced\012- data
Hash dfa7b52c86e56bd67fa4002f6ed19854
7df722645482433c2b5c8d8ab4272a9874592f27
f68019eb4b4e5933301d4ee75969e0cb94ed8333bf514630fa749eb9c3e483c9
GET /libtrc/static/thumbnails/f539211219b796ffbb49949997c764f0.png HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: c3AK0F63Rmz1U+ZkwDZRH6hJiJRTGpZB8kTBPWz0vwbg9siBxtMOH8aEqr1NtVeNHtLhLAVUR9E=
x-amz-request-id: 4JKSR0YA3KVH073N
x-amz-replication-status: COMPLETED
last-modified: Wed, 24 Jun 2015 07:14:11 GMT
etag: "dfa7b52c86e56bd67fa4002f6ed19854"
x-amz-meta-s3cmd-attrs: uid:0/gname:root/uname:root/gid:0/mode:33188/mtime:1377415166/atime:1435052450/md5:dfa7b52c86e56bd67fa4002f6ed19854/ctime:1422381567
x-amz-version-id: hL.cyLD7Q4TL5ceY.7JQwF9m5IYI8mkC
content-type: image/png
server: AmazonS3
accept-ranges: bytes
date: Sun, 05 Feb 2023 13:04:22 GMT
via: 1.1 varnish
age: 19774
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 1429
x-timer: S1675602262.290753,VS0,VE0
cache-control: private,max-age=31536000
abp: 15
content-length: 254
X-Firefox-Spdy: h2
vidstatb.taboola.com/vid/blackScreen5.mp4
206 Partial Content 91 kB URL HTTP/2 vidstatb.taboola.com/vid/blackScreen5.mp4
IP
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash b2b087fe4ae638c533731c347fcd4df8
62851c888c21bb51cc04f13b6fc0451279fe0425
0407dafc112212a135d1aa4dd9b40ba0208c6bb6b1959f5535af093254189d66
GET /vid/blackScreen5.mp4 HTTP/1.1
Host: vidstatb.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
content-type: video/mp4
last-modified: Sun, 02 Jul 2017 20:40:57 GMT
etag: "b2b087fe4ae638c533731c347fcd4df8"
x-amz-meta-mode: 33188
x-amz-meta-gid: 0
x-amz-meta-uid: 0
x-amz-meta-mtime: 1497790207
server: AmazonS3
via: 1.1 9803a30a87f1ec1047cb2b8ad5ecc43e.cloudfront.net (CloudFront), 1.1 varnish
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: gopM2XYfUoVUFmJXQ0440-QEF6IoAyvdLK0EUOquu3M35zK6ZGLwLg==
cache-control: public, max-age=2592000
accept-ranges: bytes
date: Sun, 05 Feb 2023 13:04:22 GMT
age: 562159
x-served-by: cache-bma1682-BMA
x-cache: Hit from cloudfront, HIT
x-cache-hits: 147244
x-timer: S1675602262.320319,VS0,VE0
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
content-range: bytes 0-90783/90784
content-length: 90784
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58534/occ
302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58534/occ
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58534/occ HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Sun, 05 Feb 2023 13:04:22 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/58534/occ?verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBFap32MCEMaxcZf31nc_g_Te9qkEqVYFEgEBAQH64GPpYwAAAAAA_eMAAA&S=AQAAAkNRMPdh-dLwCm4Mu4pBTzU; Expires=Mon, 5 Feb 2024 19:04:22 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
match.adsrvr.org/track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1
200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1 HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:22 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
trc.taboola.com/odili-odili/log/3/bulk?route=AM%3AIL%3AV<i=deflated&bulkSize=12
204 No Content 0 B URL HTTP/2 trc.taboola.com/odili-odili/log/3/bulk?route=AM%3AIL%3AV<i=deflated&bulkSize=12
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /odili-odili/log/3/bulk?route=AM%3AIL%3AV<i=deflated&bulkSize=12 HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 17431
Origin: https://odili.net
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
content-type: image/gif
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://odili.net
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
accept-ranges: bytes
date: Sun, 05 Feb 2023 13:04:22 GMT
via: 1.1 varnish
x-served-by: cache-bma1682-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675602262.291105,VS0,VE114
x-vcl-time-ms: 114
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58534/occ?verify=true
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58534/occ?verify=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58534/occ?verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 05 Feb 2023 13:04:22 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBFap32MCEHRivi4ksrdZFXmAQNeKXG0FEgEBAQH64GPpYwAAAAAA_eMAAA&S=AQAAAhQExFo1G-qbcDw4aX8eh9A; Expires=Mon, 5 Feb 2024 19:04:22 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
video-ads.rubiconproject.com/video/16698/144084/1858120/203/vast.xml?rf=https%3A%2F%2Fodili.net&gdpr=1&p_aso.video.maxduration=60&us_privacy=1---
200 OK 930 B URL HTTP/1.1 video-ads.rubiconproject.com/video/16698/144084/1858120/203/vast.xml?rf=https%3A%2F%2Fodili.net&gdpr=1&p_aso.video.maxduration=60&us_privacy=1---
IP
File type ASCII text, with very long lines (947)
Hash ac5c0f4ceb1e54d65c2364500997cece
1a5e5438fc44b831788b7f27a369dec2474ef23e
98d6190f7ac9bde564db1a92347c8cdf7dbeb1ecdcf3286d49cc088ba58c900e
GET /video/16698/144084/1858120/203/vast.xml?rf=https%3A%2F%2Fodili.net&gdpr=1&p_aso.video.maxduration=60&us_privacy=1--- HTTP/1.1
Host: video-ads.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Origin: https://odili.net
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type
X-Powered-By: PHP/5.4.16
Pragma: no-cache
Content-Encoding: gzip
Content-Length: 930
Content-Type: text/xml
Cache-Control: public, must-revalidate, max-age=0, s-maxage=600
Expires: Sun, 05 Feb 2023 13:04:22 GMT
Date: Sun, 05 Feb 2023 13:04:22 GMT
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: https://odili.net
video-ads.rubiconproject.com/video/bridge-31050.js
200 OK 20 kB URL HTTP/1.1 video-ads.rubiconproject.com/video/bridge-31050.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 2a315d77025584b1d21d525946437351
7651ad2c304a1021c5520a32b0e6bd90dd725872
11f4cbc8d914ede9477e8e83a95c1a880d7ad867d72351deb778463c49f2ce85
GET /video/bridge-31050.js HTTP/1.1
Host: video-ads.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache/2.4.6 (CentOS) PHP/5.4.16
Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type
Last-Modified: Thu, 10 Nov 2022 16:05:35 GMT
ETag: "10253-5ed1ff17fb1c0-gzip"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 20231
Content-Type: application/javascript
Date: Sun, 05 Feb 2023 13:04:22 GMT
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin:
am-match.taboola.com/sync?dast=V7a6gCFgNK1WeZMBKZTgRK1WeZMBKZTgUAAAAGBvQHJDhzrZybjWctcu5mbtFuY3ErbBPLWjWbmUwTm805cy6HQIIz18q52XjWIudu5hbtNha3wjaxrFWzmck0sdmcM-dyCh_GcpkMaoGEZfb7DgrK6ekxuwyiouttsTucZs8bJNB0Onyue73e5DQ77XKX6S8HAAAAgIf___9_CAAAAIAIAAAAAAkAAAAAioCKfwuBCwAAAACM____fw2ATw6C95z9_gAAAAAAAQAAACABIIjMKwHAcJk7-f________-PGaDPvJH5____vzHoAXjwAXgQAgAAuBjy8KrDlBKBnCcqyCtiBAAAALClpaJ5NKkTKouq____fiuAKwCAAMOQVjfyLN1BibcwAAAAgLEFelj8frPDrvG7Xfb_________b_Z_9o8m9IYrlRbEMnqt9gsIALD2CwgAwKZuAABvAXBBR9CKwWB1CrHYDFaD4WY5mB0AAADA3f___78eSMwWJsdo4rBZdjOHx2KyeUYuz26yXC1Xg9XINdpespxr-_5IpF9fiLDMft9BQTk9PWaXQVR0vS12h9PsOYgPGoblZBDMj6Ily91ytxpNFqPRcrnZDTejwf4GYrAa4EQMlsvJZDHZrUar0Wa4G80GCxSIwQQpWrJaLperzWa12o0Ws8FmOdxskKJVq9loMxiuZpPZbrcaDobL0QgpWrLcLXer0WQxGi2Xm91wMxoMEQZWjolxNFmtRSvHbC1abnZr5cKzWWucu91o4xxNRivLWvT6mB4m52Rl8mxRMCBjL5KnRToR-Ta72WY18-xWE4dlNfKNHDaTybQb7EbD3XBjmoglmpNFOpFd9o3ZwuQYTRw2y27m8FhMNs_I5dlNlqvlarAauUb7wsoxMY4mq7Vo5ZitRcvNbq1ceDZrjXO3G22co8loZVmLXh_Tw-ScrEyefWO2W80Gk8lquW_MdqvZYDJZLfcdOsN39Tkb_dKjuaPziK0nZ-nmMChcBov397lIm9HGzajShi0W1bW4c02sQr_f7_f7_X6_3-_dmA0eg8Hwsny1hYnz27N8q52N92BQxBLBRTrRm5xmp1tvcpqdFrFEabpIJ3qJWCI4XaQT0ct4uqj_yJCLuXIwF03mitVolQAAAAAAAAAAljBn3gQAAADgNJDlcjNcrfMgVsPRbrVaLsCDmp8uMAgAAAAAAMAukVAjBgy2nl1x48cLb3KanW69yWl2WhngQa2PefNnglir1bIGAAAQwAYAAAjg1s1bADYT_____x8HAAAgI0cPAABAvw9EdarQAzd6DQ!&excid=22&docw=0&cijs=1&nlb=false
200 OK 607 B URL HTTP/2 am-match.taboola.com/sync?dast=V7a6gCFgNK1WeZMBKZTgRK1WeZMBKZTgUAAAAGBvQHJDhzrZybjWctcu5mbtFuY3ErbBPLWjWbmUwTm805cy6HQIIz18q52XjWIudu5hbtNha3wjaxrFWzmck0sdmcM-dyCh_GcpkMaoGEZfb7DgrK6ekxuwyiouttsTucZs8bJNB0Onyue73e5DQ77XKX6S8HAAAAgIf___9_CAAAAIAIAAAAAAkAAAAAioCKfwuBCwAAAACM____fw2ATw6C95z9_gAAAAAAAQAAACABIIjMKwHAcJk7-f________-PGaDPvJH5____vzHoAXjwAXgQAgAAuBjy8KrDlBKBnCcqyCtiBAAAALClpaJ5NKkTKouq____fiuAKwCAAMOQVjfyLN1BibcwAAAAgLEFelj8frPDrvG7Xfb_________b_Z_9o8m9IYrlRbEMnqt9gsIALD2CwgAwKZuAABvAXBBR9CKwWB1CrHYDFaD4WY5mB0AAADA3f___78eSMwWJsdo4rBZdjOHx2KyeUYuz26yXC1Xg9XINdpespxr-_5IpF9fiLDMft9BQTk9PWaXQVR0vS12h9PsOYgPGoblZBDMj6Ily91ytxpNFqPRcrnZDTejwf4GYrAa4EQMlsvJZDHZrUar0Wa4G80GCxSIwQQpWrJaLperzWa12o0Ws8FmOdxskKJVq9loMxiuZpPZbrcaDobL0QgpWrLcLXer0WQxGi2Xm91wMxoMEQZWjolxNFmtRSvHbC1abnZr5cKzWWucu91o4xxNRivLWvT6mB4m52Rl8mxRMCBjL5KnRToR-Ta72WY18-xWE4dlNfKNHDaTybQb7EbD3XBjmoglmpNFOpFd9o3ZwuQYTRw2y27m8FhMNs_I5dlNlqvlarAauUb7wsoxMY4mq7Vo5ZitRcvNbq1ceDZrjXO3G22co8loZVmLXh_Tw-ScrEyefWO2W80Gk8lquW_MdqvZYDJZLfcdOsN39Tkb_dKjuaPziK0nZ-nmMChcBov397lIm9HGzajShi0W1bW4c02sQr_f7_f7_X6_3-_dmA0eg8Hwsny1hYnz27N8q52N92BQxBLBRTrRm5xmp1tvcpqdFrFEabpIJ3qJWCI4XaQT0ct4uqj_yJCLuXIwF03mitVolQAAAAAAAAAAljBn3gQAAADgNJDlcjNcrfMgVsPRbrVaLsCDmp8uMAgAAAAAAMAukVAjBgy2nl1x48cLb3KanW69yWl2WhngQa2PefNnglir1bIGAAAQwAYAAAjg1s1bADYT_____x8HAAAgI0cPAABAvw9EdarQAzd6DQ!&excid=22&docw=0&cijs=1&nlb=false
IP
ASN #200478 Taboola.com ltd
Hash beec3c5427499d3b06c4a1b5db8343ba
bcab2756996658a4c9ab3e6f40ff701837ca10e2
bce18988b592738f6b89e1930c1c39f3e820177cefcfb28a9b7cb830e11f90c1
GET /sync?dast=V7a6gCFgNK1WeZMBKZTgRK1WeZMBKZTgUAAAAGBvQHJDhzrZybjWctcu5mbtFuY3ErbBPLWjWbmUwTm805cy6HQIIz18q52XjWIudu5hbtNha3wjaxrFWzmck0sdmcM-dyCh_GcpkMaoGEZfb7DgrK6ekxuwyiouttsTucZs8bJNB0Onyue73e5DQ77XKX6S8HAAAAgIf___9_CAAAAIAIAAAAAAkAAAAAioCKfwuBCwAAAACM____fw2ATw6C95z9_gAAAAAAAQAAACABIIjMKwHAcJk7-f________-PGaDPvJH5____vzHoAXjwAXgQAgAAuBjy8KrDlBKBnCcqyCtiBAAAALClpaJ5NKkTKouq____fiuAKwCAAMOQVjfyLN1BibcwAAAAgLEFelj8frPDrvG7Xfb_________b_Z_9o8m9IYrlRbEMnqt9gsIALD2CwgAwKZuAABvAXBBR9CKwWB1CrHYDFaD4WY5mB0AAADA3f___78eSMwWJsdo4rBZdjOHx2KyeUYuz26yXC1Xg9XINdpespxr-_5IpF9fiLDMft9BQTk9PWaXQVR0vS12h9PsOYgPGoblZBDMj6Ily91ytxpNFqPRcrnZDTejwf4GYrAa4EQMlsvJZDHZrUar0Wa4G80GCxSIwQQpWrJaLperzWa12o0Ws8FmOdxskKJVq9loMxiuZpPZbrcaDobL0QgpWrLcLXer0WQxGi2Xm91wMxoMEQZWjolxNFmtRSvHbC1abnZr5cKzWWucu91o4xxNRivLWvT6mB4m52Rl8mxRMCBjL5KnRToR-Ta72WY18-xWE4dlNfKNHDaTybQb7EbD3XBjmoglmpNFOpFd9o3ZwuQYTRw2y27m8FhMNs_I5dlNlqvlarAauUb7wsoxMY4mq7Vo5ZitRcvNbq1ceDZrjXO3G22co8loZVmLXh_Tw-ScrEyefWO2W80Gk8lquW_MdqvZYDJZLfcdOsN39Tkb_dKjuaPziK0nZ-nmMChcBov397lIm9HGzajShi0W1bW4c02sQr_f7_f7_X6_3-_dmA0eg8Hwsny1hYnz27N8q52N92BQxBLBRTrRm5xmp1tvcpqdFrFEabpIJ3qJWCI4XaQT0ct4uqj_yJCLuXIwF03mitVolQAAAAAAAAAAljBn3gQAAADgNJDlcjNcrfMgVsPRbrVaLsCDmp8uMAgAAAAAAMAukVAjBgy2nl1x48cLb3KanW69yWl2WhngQa2PefNnglir1bIGAAAQwAYAAAjg1s1bADYT_____x8HAAAgI0cPAABAvw9EdarQAzd6DQ!&excid=22&docw=0&cijs=1&nlb=false HTTP/1.1
Host: am-match.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 13:04:21 GMT
content-type: text/html;charset=ISO-8859-1
machineid: 3407
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash bbd90245f244e76d9f45706b1fb5ae58
1e15a0d03d74175f976310f2db334050485ed546
03fda0816cd373e36f33630fc50b4fb5e5852fb1f2c65175b98437386c436dd4
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 13:04:22 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 04 Feb 2023 01:56:49 GMT
Expires: Sat, 11 Feb 2023 01:56:48 GMT
Etag: "1e15a0d03d74175f976310f2db334050485ed546"
Cache-Control: max-age=477745,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 794bd9f8a91db518-OSL
cdn.taboola.com/scripts/cds-pips.js
200 OK 1.3 kB URL HTTP/2 cdn.taboola.com/scripts/cds-pips.js
IP
File type ASCII text, with very long lines (3545), with no line terminators
Hash 780c5c514014519ce276709f515905a0
04fe86d00b9c9077effe05171d066d243ecab221
015db06150b62ad2ad533883652174ebb6f07e24a7147fdac01a0ccd266e3f30
GET /scripts/cds-pips.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 2KBeU0d7OyPXtZDYUoIqlTBmhGhsve90tjYoemCxISjKQrNgcxT28sPXVt5KfJt+6r7dFoJgA8g=
x-amz-request-id: NFWGDQGY1WQ95XHE
x-amz-replication-status: COMPLETED
last-modified: Wed, 12 Oct 2022 13:57:57 GMT
etag: "383fa66d2a0a09f4a6e64a9593ad43bb"
x-amz-version-id: z5FoayaLm_Bvew3pbkytkoHczFCvkPwT
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sun, 05 Feb 2023 13:04:23 GMT
via: 1.1 varnish
age: 3244
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 3048
x-timer: S1675602263.107995,VS0,VE0
vary: Accept-Encoding
abp: 15
cache-control: private, max-age=3600
content-length: 1340
X-Firefox-Spdy: h2
pips.taboola.com/
200 OK 4 B IP
File type ASCII text, with no line terminators
Hash 6c3e226b4d4795d518ab341b0824ec29
eef19c54306daa69eda49c0272623bdb5e2b341f
fb329000228cc5a24c264c57139de8bf854fc86fc18bf1c04ab61a2b5cb4b921
GET / HTTP/1.1
Host: pips.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://odili.net
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Varnish
retry-after: 0
access-control-allow-methods: GET
access-control-allow-origin: https://odili.net
accept-ranges: bytes
date: Sun, 05 Feb 2023 13:04:23 GMT
via: 1.1 varnish
x-served-by: cache-bma1674-BMA
x-cache: HIT
x-cache-hits: 0
cache-control: no-store
content-length: 4
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash ef93957e7647de6875c55fc7dcfaa912
db22475c14c297db2f90b0b4d3dd6f5210e573b1
6bf15bb83446ac97e63455961ba37f9f93c60fad1abd422403969847c8b6f6c2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2393
Cache-Control: max-age=132145
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 13:04:23 GMT
Etag: "63df012f-1d7"
Expires: Tue, 07 Feb 2023 01:46:48 GMT
Last-Modified: Sun, 05 Feb 2023 01:06:55 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
optimized-by.rubiconproject.com/a/api/vast.xml?us_privacy=1---&account_id=16698&site_id=144084&zone_id=1858120&size_id=203&rf=https://footballitarin.com&p_aso.video.maxduration=60&p_window.depth=0&p_window.url=&p_window.w=1280&p_window.h=939&width=700&height=393&p_aso.video.api=2&p_aso.video.mimes=application/javascript,video/mp4&tk_vpaid=1&cb=4456092815828256.5&rp_secure=1
200 OK 28 B URL HTTP/2 optimized-by.rubiconproject.com/a/api/vast.xml?us_privacy=1---&account_id=16698&site_id=144084&zone_id=1858120&size_id=203&rf=https://footballitarin.com&p_aso.video.maxduration=60&p_window.depth=0&p_window.url=&p_window.w=1280&p_window.h=939&width=700&height=393&p_aso.video.api=2&p_aso.video.mimes=application/javascript,video/mp4&tk_vpaid=1&cb=4456092815828256.5&rp_secure=1
IP
Hash 3f48dd894e32b50dab267e0ae1dc072d
cdc8edb0a675e6a44fc294db45a7487f017a0d25
71a904ba726ae38a8aa08425bae824e9850452b5c41a182bdc526a139ba3a9bc
GET /a/api/vast.xml?us_privacy=1---&account_id=16698&site_id=144084&zone_id=1858120&size_id=203&rf=https://footballitarin.com&p_aso.video.maxduration=60&p_window.depth=0&p_window.url=&p_window.w=1280&p_window.h=939&width=700&height=393&p_aso.video.api=2&p_aso.video.mimes=application/javascript,video/mp4&tk_vpaid=1&cb=4456092815828256.5&rp_secure=1 HTTP/1.1
Host: optimized-by.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://odili.net
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:23 GMT
content-type: application/xml
content-length: 28
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://odili.net
access-control-allow-credentials: true
server: nginx/1.21.4
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
pragma: no-cache
set-cookie: khaos=LDREBP51-1O-C585; Domain=.rubiconproject.com; Path=/; Expires=Mon, 05-Feb-2024 13:04:23 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qp6hVPSOa9VXe9DtVM30fCg8NZgtRMoH/wqhs3Gcz1aIcE9PxofnFJACDeWTCD3AyHgcRgjl6EitafGnvA7ZeXh3OlDu/ORdD8=; Domain=.rubiconproject.com; Path=/; Expires=Mon, 05-Feb-2024 13:04:23 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
X-Firefox-Spdy: h2
sb.scorecardresearch.com/beacon.js
200 OK 0 B URL HTTP/2 sb.scorecardresearch.com/beacon.js
IP
GET /beacon.js HTTP/1.1
Host: sb.scorecardresearch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 28 Jun 2022 13:19:23 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Sun, 05 Feb 2023 03:12:44 GMT
cache-control: max-age=86400
etag: W/"eaf85c1c6758e84acfe134efd70e9373"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: JmZ6nPPlVwsDS5Y90qETpoNuPvk8iyn9cScpv9wURIOSwjOczv3qQQ==
age: 35496
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
200 OK 0 B URL HTTP/2 gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
IP
GET /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:19 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
server-processing-duration-in-ticks: 825190
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Patua%20One:400
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Patua%20One:400
IP
GET /css?family=Patua%20One:400 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 05 Feb 2023 13:04:17 GMT
date: Sun, 05 Feb 2023 13:04:17 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
200 OK 0 B URL HTTP/2 gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
IP
GET /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://odili.net/
x-crto-bundle: pYYOfl9OcFVmdGxTY0p0N2w1RTFUMEpiRXVjTWJQS1RMTTBKNGpuT2VkZCUyQjl0Y3clMkZBdVFucXZhMHpMd2J6ejdiVXVrdE9qZ0d3RSUyQlFSZ3NwYXF5QW9rSldOZ2RKaCUyRmZ5WUgzU1RmbDQ2Z3BPaHRudjRhVCUyQjRGayUyQjJ5Q1NiR0xrc2JsMk9qWmtpN3U0U2JFbDhtTkdoM0pqZEElM0QlM0Q
Origin: https://odili.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:21 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
access-control-allow-credentials: true
access-control-allow-origin: https://odili.net
server-processing-duration-in-ticks: 1919288
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
taboola-supply-partners.tremorhub.com/sync?UISTB=%3CtaboolaUserId%3E&gdpr=1&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Ftelaria-rtb-network%2F1%2Frtb-h%2F%3Fgdpr%3D1%26us_privacy%3D1---%26taboola_hm%3D%5BTVUSER_ID%5D%26orig%3Dvideo
200 OK 0 B URL HTTP/2 taboola-supply-partners.tremorhub.com/sync?UISTB=%3CtaboolaUserId%3E&gdpr=1&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Ftelaria-rtb-network%2F1%2Frtb-h%2F%3Fgdpr%3D1%26us_privacy%3D1---%26taboola_hm%3D%5BTVUSER_ID%5D%26orig%3Dvideo
IP
GET /sync?UISTB=%3CtaboolaUserId%3E&gdpr=1&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Ftelaria-rtb-network%2F1%2Frtb-h%2F%3Fgdpr%3D1%26us_privacy%3D1---%26taboola_hm%3D%5BTVUSER_ID%5D%26orig%3Dvideo HTTP/1.1
Host: taboola-supply-partners.tremorhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imprammp.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:22 GMT
content-type: image/gif
server: Apache-Coyote/1.1
p3p: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/'
X-Firefox-Spdy: h2
rt3056.infolinks.com/action/doq.htm?pcode=windows-1252&r=16756022990661
200 OK 0 B URL HTTP/2 rt3056.infolinks.com/action/doq.htm?pcode=windows-1252&r=16756022990661
IP
POST /action/doq.htm?pcode=windows-1252&r=16756022990661 HTTP/1.1
Host: rt3056.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 2820
Origin: https://odili.net
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:18 GMT
content-type: text/html;charset=UTF-8
x-application-context: application:prod
access-control-allow-origin: https://odili.net
vary: Origin
access-control-allow-credentials: true
cache-control: no-cache,no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
set-cookie: cuid=6596b153-9b26-4ed5-92a6-23a3c660dae7; Domain=infolinks.com; Expires=Tue, 04-Feb-2025 13:04:18 GMT; Path=/; SameSite=None
p3p: CP="NON DSP NID OUR COR"
content-language: en-US
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 794bd9e53d9f0b02-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
resources.infolinks.com/js/1845.006-3.025/in_search.js
200 OK 0 B URL HTTP/2 resources.infolinks.com/js/1845.006-3.025/in_search.js
IP
GET /js/1845.006-3.025/in_search.js HTTP/1.1
Host: resources.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:18 GMT
content-type: application/javascript
last-modified: Wed, 25 Jan 2023 14:23:04 GMT
etag: W/"37760-5f3175edcf88e"
cache-control: max-age=2592000
expires: Tue, 07 Mar 2023 11:20:28 GMT
via: 1.1 google
cf-cache-status: HIT
age: 6230
vary: Accept-Encoding
server: cloudflare
cf-ray: 794bd9e658a3b500-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Hind:300,400,500,700
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Hind:300,400,500,700
IP
GET /css?family=Hind:300,400,500,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 05 Feb 2023 13:04:17 GMT
date: Sun, 05 Feb 2023 13:04:17 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 0 B IP
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=A-IhH180M0RITmhlJTJCZkMwOUJGQlhaMUN2czlieVRTcEZYZEp0OFBFRjFQODVkTSUyQjNQSUlSZWtZMGY5TGRybnZXQjVXJTJC
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:21 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=Srq2Hl80M0RITmhlJTJCZkMwOUJGQlhaMUN2czlieVRTcEZYZEp0OFBFRjFQODVkTTglMkZSWjI5eTFYZTlNcE5XYlclMkZoVWl5; expires=Fri, 01 Mar 2024 13:04:21 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 345141
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
sync.1rx.io/usersync2/rmpssp?sub=infolinks
302 Found 0 B URL HTTP/2 sync.1rx.io/usersync2/rmpssp?sub=infolinks
IP
GET /usersync2/rmpssp?sub=infolinks HTTP/1.1
Host: sync.1rx.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 05 Feb 2023 13:04:19 GMT
content-type: text/html
cache-control: no-store, no-cache, must-revalidate
expires: 0
pragma: no-cache
set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-eaa977f2-aecb-4e92-8ce1-c354b9075ebc-003%22%2C%22zdxidn%22%3A%222069.56%22%7D; path=/; expires=Mon, 05 Feb 2024 13:04:19 GMT; domain=.1rx.io; samesite=none; secure; httponly
p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why"
location: https://sync.1rx.io/usersync2/rmpssp?sub=infolinks&zcc=1&cb=1675602259062
etag: RXeaa977f2aecb4e928ce1c354b9075ebc003
X-Firefox-Spdy: h2
ag.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 ag.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: ag.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:21 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 91851
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=rtus&domain=odili.net&sn=FirefoxSyncframe&so=0&topUrl=odili.net&info=Srq2Hl80M0RITmhlJTJCZkMwOUJGQlhaMUN2czlieVRTcEZYZEp0OFBFRjFQODVkTTglMkZSWjI5eTFYZTlNcE5XYlclMkZoVWl5&idsd=-1462897256,204563418&cw=1&rtusCallerId=72&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=rtus&domain=odili.net&sn=FirefoxSyncframe&so=0&topUrl=odili.net&info=Srq2Hl80M0RITmhlJTJCZkMwOUJGQlhaMUN2czlieVRTcEZYZEp0OFBFRjFQODVkTTglMkZSWjI5eTFYZTlNcE5XYlclMkZoVWl5&idsd=-1462897256,204563418&cw=1&rtusCallerId=72&lsw=1
IP
GET /sid/json?origin=rtus&domain=odili.net&sn=FirefoxSyncframe&so=0&topUrl=odili.net&info=Srq2Hl80M0RITmhlJTJCZkMwOUJGQlhaMUN2czlieVRTcEZYZEp0OFBFRjFQODVkTTglMkZSWjI5eTFYZTlNcE5XYlclMkZoVWl5&idsd=-1462897256,204563418&cw=1&rtusCallerId=72&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?origin=rtus&topUrl=odili.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:21 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 1720010
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
taboola-supply-partners.tremorhub.com/sync?UISTB=%3CtaboolaUserId%3E&gdpr=1&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Ftelaria-rtb-network%2F1%2Frtb-h%2F%3Fgdpr%3D1%26us_privacy%3D1---%26taboola_hm%3D%5BTVUSER_ID%5D%26orig%3Dvideo
200 OK 0 B URL HTTP/2 taboola-supply-partners.tremorhub.com/sync?UISTB=%3CtaboolaUserId%3E&gdpr=1&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Ftelaria-rtb-network%2F1%2Frtb-h%2F%3Fgdpr%3D1%26us_privacy%3D1---%26taboola_hm%3D%5BTVUSER_ID%5D%26orig%3Dvideo
IP
GET /sync?UISTB=%3CtaboolaUserId%3E&gdpr=1&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Ftelaria-rtb-network%2F1%2Frtb-h%2F%3Fgdpr%3D1%26us_privacy%3D1---%26taboola_hm%3D%5BTVUSER_ID%5D%26orig%3Dvideo HTTP/1.1
Host: taboola-supply-partners.tremorhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:22 GMT
content-type: image/gif
server: Apache-Coyote/1.1
p3p: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/'
X-Firefox-Spdy: h2
resources.infolinks.com/js/1845.006-3.025/bubble.js
200 OK 0 B URL HTTP/2 resources.infolinks.com/js/1845.006-3.025/bubble.js
IP
GET /js/1845.006-3.025/bubble.js HTTP/1.1
Host: resources.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:18 GMT
content-type: application/javascript
last-modified: Wed, 25 Jan 2023 14:23:04 GMT
etag: W/"26f1b-5f3175edcf88e"
cache-control: max-age=2592000
expires: Tue, 07 Mar 2023 11:53:43 GMT
via: 1.1 google
cf-cache-status: HIT
age: 4235
vary: Accept-Encoding
server: cloudflare
cf-ray: 794bd9e658a6b500-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
sync.1rx.io/usersync2/infolinks
302 Found 0 B URL HTTP/2 sync.1rx.io/usersync2/infolinks
IP
GET /usersync2/infolinks HTTP/1.1
Host: sync.1rx.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 05 Feb 2023 13:04:19 GMT
content-type: text/html
cache-control: no-store, no-cache, must-revalidate
expires: 0
pragma: no-cache
set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-365ecf2e-402a-4b01-b91a-867d078b140f-003%22%2C%22zdxidn%22%3A%222109%22%7D; path=/; expires=Mon, 05 Feb 2024 13:04:19 GMT; domain=.1rx.io; samesite=none; secure; httponly
p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why"
location: https://sync.1rx.io/usersync2/infolinks?zcc=1&cb=1675602259061
etag: RX365ecf2e402a4b01b91a867d078b140f003
X-Firefox-Spdy: h2
rt3056.infolinks.com/action/getads.htm?hks=%5B%7B%22lid%22%3A%22d_IL_INSEARCH%22%2C%22bdc%22%3A1%2C%22prod_t%22%3A%22d%22%2C%22garc%22%3A0%2C%22sdata%22%3A%22net%22%2C%22scs%22%3A%22ib3t4l8xQZ%22%7D%5D&rid=34b454d9-a8d1-4eb0-b6f2-3071b21fd9e4&jsv=1845.006-3.025&sr=1280X1002&rts=1675602299329&cfv=-1&cb=getAdsResponse&os=Windows&ov=10&br=Firefox&bv=105.0&dv=p&ce=t&purl=https%3A%2F%2Fodili.net%2F&tzo=-0000&c=c&strg=true&rsd=ytQQHGI35_IL3TiRY0s7FECY64BtI_EfOQVgR7UHMc4cVsemaTOThPKqV2hbxmNZ3DxrxnzMex0zrtQ-9BwskiqPXOKOq2hNe6peW9zW75Y31aBvGNCE7M92EnoC9SuT1n8kRl2zZyqedy8CLlxkXjLF4nGBlnL5&rsk=73&rcs=pd_uA_qNfU-V49e9-pYxyw&cuid=6596b153-9b26-4ed5-92a6-23a3c660dae7&hbnr=false
200 OK 0 B URL HTTP/2 rt3056.infolinks.com/action/getads.htm?hks=%5B%7B%22lid%22%3A%22d_IL_INSEARCH%22%2C%22bdc%22%3A1%2C%22prod_t%22%3A%22d%22%2C%22garc%22%3A0%2C%22sdata%22%3A%22net%22%2C%22scs%22%3A%22ib3t4l8xQZ%22%7D%5D&rid=34b454d9-a8d1-4eb0-b6f2-3071b21fd9e4&jsv=1845.006-3.025&sr=1280X1002&rts=1675602299329&cfv=-1&cb=getAdsResponse&os=Windows&ov=10&br=Firefox&bv=105.0&dv=p&ce=t&purl=https%3A%2F%2Fodili.net%2F&tzo=-0000&c=c&strg=true&rsd=ytQQHGI35_IL3TiRY0s7FECY64BtI_EfOQVgR7UHMc4cVsemaTOThPKqV2hbxmNZ3DxrxnzMex0zrtQ-9BwskiqPXOKOq2hNe6peW9zW75Y31aBvGNCE7M92EnoC9SuT1n8kRl2zZyqedy8CLlxkXjLF4nGBlnL5&rsk=73&rcs=pd_uA_qNfU-V49e9-pYxyw&cuid=6596b153-9b26-4ed5-92a6-23a3c660dae7&hbnr=false
IP
GET /action/getads.htm?hks=%5B%7B%22lid%22%3A%22d_IL_INSEARCH%22%2C%22bdc%22%3A1%2C%22prod_t%22%3A%22d%22%2C%22garc%22%3A0%2C%22sdata%22%3A%22net%22%2C%22scs%22%3A%22ib3t4l8xQZ%22%7D%5D&rid=34b454d9-a8d1-4eb0-b6f2-3071b21fd9e4&jsv=1845.006-3.025&sr=1280X1002&rts=1675602299329&cfv=-1&cb=getAdsResponse&os=Windows&ov=10&br=Firefox&bv=105.0&dv=p&ce=t&purl=https%3A%2F%2Fodili.net%2F&tzo=-0000&c=c&strg=true&rsd=ytQQHGI35_IL3TiRY0s7FECY64BtI_EfOQVgR7UHMc4cVsemaTOThPKqV2hbxmNZ3DxrxnzMex0zrtQ-9BwskiqPXOKOq2hNe6peW9zW75Y31aBvGNCE7M92EnoC9SuT1n8kRl2zZyqedy8CLlxkXjLF4nGBlnL5&rsk=73&rcs=pd_uA_qNfU-V49e9-pYxyw&cuid=6596b153-9b26-4ed5-92a6-23a3c660dae7&hbnr=false HTTP/1.1
Host: rt3056.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://odili.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 13:04:19 GMT
content-type: text/html;charset=UTF-8
x-application-context: application:prod
cache-control: no-cache,no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: CP="NON DSP NID OUR COR"
content-language: en-US
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 794bd9e6d97bb500-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
104.21.3.92
100.26.62.173
63.215.202.137
87.250.247.182
23.46.116.133
91.199.212.148
18.156.0.31
178.250.0.157
95.101.11.115
185.106.33.48
34.253.133.67