live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5124322336234514030&referrer=&forward=
302 Found 0 B URL GET live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5124322336234514030&referrer=&forward=
IP
Requested by https://20858397p.rfihub.com/ca.html
Certificate IssuerAmazon
Subject*.rezync.com
FingerprintB3:D7:35:D5:EE:6E:C8:FB:EB:9C:D3:3D:63:C5:43:A5:99:BB:D5:B8
ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 20 Oct 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5124322336234514030&referrer=&forward= HTTP/1.1
Host: live.rezync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20858397p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 763
location: https://p.rfihub.com/cm?pub=39342&in=0&userid=007d1274-b3fe-4e07-a6c7-93a3119724bd%3A1744088482.2744257&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3D007d1274-b3fe-4e07-a6c7-93a3119724bd%253A1744088482.2744257%26_%3D1744088482.2757425&cb=1744088482.2757912
date: Tue, 08 Apr 2025 05:01:22 GMT
server: lighttpd/1.4.69
set-cookie: zync-uuid=007d1274-b3fe-4e07-a6c7-93a3119724bd:1744088482.2744257; Domain=rezync.com; Expires=Sat, 04 Oct 2025 22:01:22 GMT; Path=/; SameSite=None; Secure
sd-session-id=.eJwNylEOgyAMANC79FsWaItFLmNQuoRsskX0Z8a7j8-XvAvmr-5bqloPiMd-6gDru3Q1iBe08tv0BRG8QyZEohGJvWNLFu4BmrZWPnUuuR9rJTsUNgs91bBaMWlcxUyUyLlJkJccnTDbEDjgo1dGL3D_AZbuJR0.Z_Stog.q4-j3z6Wmeuw3FwNywyB1I-OS1E; Expires=Sun, 05 Oct 2025 05:01:22 GMT; HttpOnly; Path=/; SameSite=None; Secure
vary: Cookie
x-cache: Miss from cloudfront
via: 1.1 e524b8092e2dda964664df0dfa35341a.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL50-C2
x-amz-cf-id: ZSa6pCEHxu79V4oR931qtCrndaLuGWkS42Krqh5prkNARAoYb55szQ==
X-Firefox-Spdy: h2
p.rfihub.com/cm?pub=24472&in=1
302 Found 0 B URL GET p.rfihub.com/cm?pub=24472&in=1
IP
Requested by https://20858397p.rfihub.com/ca.html
Certificate IssuerSectigo Limited
Subject*.rfihub.com
Fingerprint85:AE:50:4A:4F:88:68:CE:9E:C7:E1:CA:79:DC:E0:2E:DE:9C:A7:B9
ValidityWed, 02 Apr 2025 00:00:00 GMT - Mon, 27 Apr 2026 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?pub=24472&in=1 HTTP/1.1
Host: p.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20858397p.rfihub.com/
Cookie: ruds=H4sIAAAAAAAA_-MSNjU0MjE2MjI2NjMyNjE1NDEwNhDiM9RNNCsoLYxy8YwISDYCAB4CJgglAAAA; eud=H4sIAAAAAAAA_5vFyGtobmJiYGFhYmFobmqyCY2_C41_Co3_Co3_C42_iAmVvwqNvwldngWVfwuNv4kVzX3cqPxHwqj8WZKofAA87gOa8AAAAA; rud=H4sIAAAAAAAA_-MSNjU0MjE2MjI2NjMyNjE1NDEwNhDiM9RNNCsoLYxy8YwISDYCAB4CJgglAAAA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Tue, 08 Apr 2025 05:01:22 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: ruds=H4sIAAAAAAAA_-MSNjU0MjE2MjI2NjMyNjE1NDEwNhDiM9RNNCsoLYxy8YwISDYCAB4CJgglAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
eud=H4sIAAAAAAAA_5vFyGtobmJiYGFhYmFobmqyCY2_C41_Co3_Co3_C42_iAmVvwqNvwldngWVfwuJb2RiaLaJFc193Kj8R8Ko_FmSqHwAQ32EX_AAAAA; Path=/; Domain=.rfihub.com; Expires=Sun, 3 May 2026 05:01:22 GMT; Secure; SameSite=None
rud=H4sIAAAAAAAA_-MSNjU0MjE2MjI2NjMyNjE1NDEwNhDiM9RNNCsoLYxy8YwISDYCAB4CJgglAAAA; Path=/; Domain=.rfihub.com; Expires=Sun, 3 May 2026 05:01:22 GMT; Secure; SameSite=None
Location: https://ps.eyeota.net/match?uid=5124322336234514030&bid=omt9pi0
Content-Length: 0
Server: Jetty(9.4.51.v20230217)
p.rfihub.com/cm?pub=39342&in=0&userid=007d1274-b3fe-4e07-a6c7-93a3119724bd%3A1744088482.2744257&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3D007d1274-b3fe-4e07-a6c7-93a3119724bd%253A1744088482.2744257%26_%3D1744088482.2757425&cb=1744088482.2757912
302 Found 0 B URL GET p.rfihub.com/cm?pub=39342&in=0&userid=007d1274-b3fe-4e07-a6c7-93a3119724bd%3A1744088482.2744257&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3D007d1274-b3fe-4e07-a6c7-93a3119724bd%253A1744088482.2744257%26_%3D1744088482.2757425&cb=1744088482.2757912
IP
Requested by https://20858397p.rfihub.com/ca.html
Certificate IssuerSectigo Limited
Subject*.rfihub.com
Fingerprint85:AE:50:4A:4F:88:68:CE:9E:C7:E1:CA:79:DC:E0:2E:DE:9C:A7:B9
ValidityWed, 02 Apr 2025 00:00:00 GMT - Mon, 27 Apr 2026 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?pub=39342&in=0&userid=007d1274-b3fe-4e07-a6c7-93a3119724bd%3A1744088482.2744257&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3D007d1274-b3fe-4e07-a6c7-93a3119724bd%253A1744088482.2744257%26_%3D1744088482.2757425&cb=1744088482.2757912 HTTP/1.1
Host: p.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20858397p.rfihub.com/
DNT: 1
Connection: keep-alive
Cookie: ruds=H4sIAAAAAAAA_-MSNjU0MjE2MjI2NjMyNjE1NDEwNhDiM9RNNCsoLYxy8YwISDYCAB4CJgglAAAA; eud=H4sIAAAAAAAA_5vFyGtobmJiYGFhYmFobmqyCY2_C41_Co3_Co3_C42_iAmVvwqNvwldngWVfwuNv4kVzX3cqPxHwqj8WZKofAA87gOa8AAAAA; rud=H4sIAAAAAAAA_-MSNjU0MjE2MjI2NjMyNjE1NDEwNhDiM9RNNCsoLYxy8YwISDYCAB4CJgglAAAA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Tue, 08 Apr 2025 05:01:22 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: rud=H4sIAAAAAAAA_-MSNjU0MjE2MjI2NjMyNjE1NDEwNhDiM9RNNCsoLYxy8YwISDYCAB4CJgglAAAA; Path=/; Domain=.rfihub.com; Expires=Sun, 3 May 2026 05:01:22 GMT; Secure; SameSite=None
euds=H4sIAAAAAAAA_w3KuRGAMAwEwIR2xOg5-2S68UchVG423u-iKpc5ISPeLdhK6XVSWvQwa3SM9RgBzUT6_Vd44QGkQUnXOgAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
eud=H4sIAAAAAAAA_5vFyGtobmJiYGFhYmFobmqyCY2_C41_Co3_Co3_C42_iAmVvwqNvwldngWVfwuNv4kVzX3cqPxJwuYGBuYphkbmJrpJxmmpuiapBua6iWbJ5rqWxonGhoaW5kYmSSlWcE1GekClJkam5rOEESYZmViaL0LjPxJGtWmWJCofAOh3qZJKAQAA; Path=/; Domain=.rfihub.com; Expires=Sun, 3 May 2026 05:01:22 GMT; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0MjE2MjI2NjMyNjE1NDEwNhDiM9RNNCsoLYxy8YwISDYCAB4CJgglAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
Location: https://live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5124322336234514030&referrer={encSite}&forward=https%3A%2F%2Fidsync.rlcdn.com%2F501709.gif%3Fpartner_uid%3D007d1274-b3fe-4e07-a6c7-93a3119724bd%253A1744088482.2744257%26_%3D1744088482.2757425
Content-Length: 0
Server: Jetty(9.4.51.v20230217)
live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5124322336234514030&referrer={encSite}&forward=https%3A%2F%2Fidsync.rlcdn.com%2F501709.gif%3Fpartner_uid%3D007d1274-b3fe-4e07-a6c7-93a3119724bd%253A1744088482.2744257%26_%3D1744088482.2757425
302 Found 0 B URL GET live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5124322336234514030&referrer={encSite}&forward=https%3A%2F%2Fidsync.rlcdn.com%2F501709.gif%3Fpartner_uid%3D007d1274-b3fe-4e07-a6c7-93a3119724bd%253A1744088482.2744257%26_%3D1744088482.2757425
IP
Requested by https://20858397p.rfihub.com/ca.html
Certificate IssuerAmazon
Subject*.rezync.com
FingerprintB3:D7:35:D5:EE:6E:C8:FB:EB:9C:D3:3D:63:C5:43:A5:99:BB:D5:B8
ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 20 Oct 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5124322336234514030&referrer={encSite}&forward=https%3A%2F%2Fidsync.rlcdn.com%2F501709.gif%3Fpartner_uid%3D007d1274-b3fe-4e07-a6c7-93a3119724bd%253A1744088482.2744257%26_%3D1744088482.2757425 HTTP/1.1
Host: live.rezync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20858397p.rfihub.com/
DNT: 1
Connection: keep-alive
Cookie: zync-uuid=007d1274-b3fe-4e07-a6c7-93a3119724bd:1744088482.2744257; sd-session-id=.eJwNylEOgyAMANC79FsWaItFLmNQuoRsskX0Z8a7j8-XvAvmr-5bqloPiMd-6gDru3Q1iBe08tv0BRG8QyZEohGJvWNLFu4BmrZWPnUuuR9rJTsUNgs91bBaMWlcxUyUyLlJkJccnTDbEDjgo1dGL3D_AZbuJR0.Z_Stog.q4-j3z6Wmeuw3FwNywyB1I-OS1E
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 447
location: https://idsync.rlcdn.com/501709.gif?partner_uid=007d1274-b3fe-4e07-a6c7-93a3119724bd%3A1744088482.2744257&_=1744088482.2757425
date: Tue, 08 Apr 2025 05:01:22 GMT
server: lighttpd/1.4.69
set-cookie: zync-uuid=007d1274-b3fe-4e07-a6c7-93a3119724bd:1744088482.2744257; Domain=rezync.com; Expires=Sat, 04 Oct 2025 22:01:22 GMT; Path=/; SameSite=None; Secure
sd-session-id=.eJwNylEOgyAMANC79FsWaItFLmNQuoRsskX0Z8a7j8-XvAvmr-5bqloPiMd-6gDru3Q1iBe08tv0BRG8QyZEohGJvWNLFu4BmrZWPnUuuR9rJTsUNgs91bBaMWlcxUyUyLlJkJccnTDbEDjgo1dGL3D_AZbuJR0.Z_Stog.q4-j3z6Wmeuw3FwNywyB1I-OS1E; Expires=Sun, 05 Oct 2025 05:01:22 GMT; HttpOnly; Path=/; SameSite=None; Secure
vary: Cookie
x-cache: Miss from cloudfront
via: 1.1 e524b8092e2dda964664df0dfa35341a.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL50-C2
x-amz-cf-id: 0UEQqjYElmPxz6Hjd2_XCVJaDxsXEuhePXM521s-geyPTRYVsKVbhg==
X-Firefox-Spdy: h2
bpi.rtactivate.com/tag/?id=11017&user_id=5124322336234514030
200 OK 43 B URL GET bpi.rtactivate.com/tag/?id=11017&user_id=5124322336234514030
IP
Requested by https://20858397p.rfihub.com/ca.html
Certificate IssuerAmazon
Subjectrtactivate.com
Fingerprint7E:FA:68:AA:2D:1B:9A:5F:44:87:29:DB:94:17:C9:8E:99:3C:0F:20
ValiditySat, 11 Jan 2025 00:00:00 GMT - Sun, 08 Feb 2026 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /tag/?id=11017&user_id=5124322336234514030 HTTP/1.1
Host: bpi.rtactivate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20858397p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: awselb/2.0
date: Tue, 08 Apr 2025 05:01:22 GMT
content-type: image/gif
content-length: 43
X-Firefox-Spdy: h2
20858397p.rfihub.com/ca.html
200 OK 4.8 kB URL User Request GET 20858397p.rfihub.com/ca.html
IP
Certificate IssuerSectigo Limited
Subject*.rfihub.com
Fingerprint85:AE:50:4A:4F:88:68:CE:9E:C7:E1:CA:79:DC:E0:2E:DE:9C:A7:B9
ValidityWed, 02 Apr 2025 00:00:00 GMT - Mon, 27 Apr 2026 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (1767)
Hash 701dfe26304f7c2c61385f835f9a0dfe
62245c324c6408610411758caa2dab5cc58c82cc
34349ab86ab75201d4f51194ddb4d1a89fdea6294b28bfa46554ab7f2fd8b9a5
GET /ca.html HTTP/1.1
Host: 20858397p.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 08 Apr 2025 05:01:21 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: ruds=H4sIAAAAAAAA_-MSNjU0MjE2MjI2NjMyNjE1NDEwNhDiM9RNNCsoLYxy8YwISDYCAB4CJgglAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
eud=H4sIAAAAAAAA_5vFyGtobmJiYGFhYmFobmqyCY2_C41_Co3_Co3_C42_iAmVvwqNvwldngWVfwuNv4kVzX3cqPxHwqj8WZKofAA87gOa8AAAAA; Path=/; Domain=.rfihub.com; Expires=Sun, 3 May 2026 05:01:21 GMT; Secure; SameSite=None
rud=H4sIAAAAAAAA_-MSNjU0MjE2MjI2NjMyNjE1NDEwNhDiM9RNNCsoLYxy8YwISDYCAB4CJgglAAAA; Path=/; Domain=.rfihub.com; Expires=Sun, 3 May 2026 05:01:21 GMT; Secure; SameSite=None
Cache-Control: no-cache
Content-Type: text/html;charset=utf-8
Content-Length: 4758
Server: Jetty(9.4.51.v20230217)
20858397p.rfihub.com/favicon.ico
404 Not Found 153 B URL GET 20858397p.rfihub.com/favicon.ico
IP
Requested by https://20858397p.rfihub.com/ca.html
Certificate IssuerSectigo Limited
Subject*.rfihub.com
Fingerprint85:AE:50:4A:4F:88:68:CE:9E:C7:E1:CA:79:DC:E0:2E:DE:9C:A7:B9
ValidityWed, 02 Apr 2025 00:00:00 GMT - Mon, 27 Apr 2026 23:59:59 GMT
File type HTML document, ASCII text
Hash ba691683d76fcc80fa6fdfc99d3a6913
0dfc07099f4d5933700ff889c087dd7041ce87eb
efbdf57e49d74fae952481c9742eabc1a141365a003f3640c2be5a68f1532ce7
GET /favicon.ico HTTP/1.1
Host: 20858397p.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20858397p.rfihub.com/ca.html
Cookie: ruds=H4sIAAAAAAAA_-MSNjU0MjE2MjI2NjMyNjE1NDEwNhDiM9RNNCsoLYxy8YwISDYCAB4CJgglAAAA; eud=H4sIAAAAAAAA_5vFyGtobmJiYGFhYmFobmqyCY2_C41_Co3_Co3_C42_iAmVvwqNvwldngWVfwuNv4kVzX3cqPxHwqj8WZKofAA87gOa8AAAAA; rud=H4sIAAAAAAAA_-MSNjU0MjE2MjI2NjMyNjE1NDEwNhDiM9RNNCsoLYxy8YwISDYCAB4CJgglAAAA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Cache-Control: must-revalidate,no-cache,no-store
Content-Type: text/html;charset=iso-8859-1
Content-Length: 153
Server: Jetty(9.4.51.v20230217)
193.0.160.130