GET didocell.com/didocell.com/kw/web/bluepluslite/img.jpg
23.92.23.43200 OK 44 kB URL GET HTTP/2 didocell.com/didocell.com/kw/web/bluepluslite/img.jpg
IP 23.92.23.43:443
ASN #63949 Akamai Connected Cloud
Requested by https://didocell.com/kw/bluepluslite/?affl=428
Certificate IssuerLet's Encrypt
Subject*.didocell.com
FingerprintE3:78:DB:C9:F6:B1:D7:97:A5:6D:14:99:50:A5:68:B9:78:81:F4:27
ValidityMon, 28 Oct 2024 06:09:38 GMT - Sun, 26 Jan 2025 06:09:37 GMT
File type JPEG image data, progressive, precision 8, 333x331, components 3
Hash 2ef674f201acae886e7e2feb6b404261
fa22c284dc1ff97a615ce1249d6af0152471bd44
79853eda50d0b888d9500b71739755e7dd985418af440e64df9e8755f644a86d
GET /didocell.com/kw/web/bluepluslite/img.jpg HTTP/1.1
Host: didocell.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://didocell.com/kw/bluepluslite/?affl=428
Cookie: ch=eyJpdiI6IlZpR3doZXh5cGdWNkFpMnVGZ0h0S0E9PSIsInZhbHVlIjoiTk45RlVOd2hHcTA5RllsQWVOQ1RvcmVZNTgrM0RMME15akluU0ljOWZNVDhSZko5Y3NmSlVMeVlwbjNZT3k5QiIsIm1hYyI6ImE1YTRlNTYxODM2NjE2YzQ4NGRiZTMzMWJjYzljYzI1Mjc3ZDQyZmNmNTE3N2U3YjRhYjA5MDU1ZWVjZTE1OTUiLCJ0YWciOiIifQ%3D%3D; md5cookie=eyJpdiI6IkVudFBLYlk4U2NoMmxqZENVRVo4Mnc9PSIsInZhbHVlIjoiVnY1bkZVbHJjWmxuYXRQbzNWQzdkZGZvUEZSMnJCdEx4SXpOTUUrT3ZJdXkrMDFmdHdpVmtvMnByZXFod1NPOEZ0YXlESENqRXRiOHh6OC8wdEpIeEg4Qk9KLzJXdGxDZzJSb0wrU1lndms9IiwibWFjIjoiNGIwZDM1ZDRmODFjZThlYTU1NDgyMjA0YWZjN2RkNWUwOTIyNGU4NDViMjU0OGYxYTIxM2RlODY1MTEyYWNkNyIsInRhZyI6IiJ9; vid=eyJpdiI6Ilh0QlhibiszY1p0d2JTc3lWSWZUclE9PSIsInZhbHVlIjoidGNTVFlTTjgzSnMwdENWUzZIUGRuQWliRE1lbVFUd2duYnV5UTlJbVpoSEk4UXhwenc3V3o5bVVlUHhoeUF4ZlRZeDEzaDBaczRYTWZ1MG50WGtZc3lOUmtzT2RieFNBMWhnSjE2TmVSTTQ9IiwibWFjIjoiNmEzODM1ZTU5ODNiM2VhYzM0MTNlZTQ3ZGJjNjY0MTNlYThiNmZiYzM5YTUwNjYwNzAzNmYxMzFkMDA2YmZkYiIsInRhZyI6IiJ9; mlp3_session=eyJpdiI6Iks4UGpKNlJCK2QyejFqd2lzRHJHMVE9PSIsInZhbHVlIjoiY0JMaTZCNkNoYndjcmlUckhQN2JEMUtveTVQVEJmVkRDdERWdFRFb2NxS3pzd3NQMklGam1rNjhCcmJMdWRzRVZ3WkxqdmV5YVhvdm4yeVRYVFE4djRDRldPSWNYL1UwTk5TK0M2Z2dDYW5LT3NzK0s2TmNaWFkzVGt6djRadnIiLCJtYWMiOiIyZDQyMWMxMGJmYWM5ZTNiZDU1MmY1NTQ3MzQ5MzdhMmEyYzJkMTEwYzg1YTRlMjM4MjM0Zjk5MzRjYmRiZDU4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Jan 2025 08:30:30 GMT
content-type: image/jpeg
content-length: 44467
last-modified: Tue, 09 Jul 2024 05:09:52 GMT
etag: "668cc620-adb3"
expires: Wed, 08 Jan 2025 08:30:30 GMT
cache-control: max-age=172800, public
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
GET didocell.com/kw/bluepluslite/?affl=428
23.92.23.43200 OK 116 kB URL User Request GET HTTP/2 didocell.com/kw/bluepluslite/?affl=428
IP 23.92.23.43:443
ASN #63949 Akamai Connected Cloud
Certificate IssuerLet's Encrypt
Subject*.didocell.com
FingerprintE3:78:DB:C9:F6:B1:D7:97:A5:6D:14:99:50:A5:68:B9:78:81:F4:27
ValidityMon, 28 Oct 2024 06:09:38 GMT - Sun, 26 Jan 2025 06:09:37 GMT
File type HTML document, ASCII text, with very long lines (64646)
Size 116 kB (115664 bytes)
Hash 275032f5a900aa44bfd659d32fdce8a7
6559278f1903f58611832f775d2e280cc3721a7e
989c594f79a29375874b107f7c7a346c1ec503a7684cf96bd46eee1b15cc663a
GET /kw/bluepluslite/?affl=428 HTTP/1.1
Host: didocell.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
date: Mon, 06 Jan 2025 08:30:30 GMT
set-cookie: ch=eyJpdiI6IlZpR3doZXh5cGdWNkFpMnVGZ0h0S0E9PSIsInZhbHVlIjoiTk45RlVOd2hHcTA5RllsQWVOQ1RvcmVZNTgrM0RMME15akluU0ljOWZNVDhSZko5Y3NmSlVMeVlwbjNZT3k5QiIsIm1hYyI6ImE1YTRlNTYxODM2NjE2YzQ4NGRiZTMzMWJjYzljYzI1Mjc3ZDQyZmNmNTE3N2U3YjRhYjA5MDU1ZWVjZTE1OTUiLCJ0YWciOiIifQ%3D%3D; expires=Tue, 10 Feb 2026 08:30:30 GMT; Max-Age=34560000; path=/; secure; httponly; samesite=lax
md5cookie=eyJpdiI6IkVudFBLYlk4U2NoMmxqZENVRVo4Mnc9PSIsInZhbHVlIjoiVnY1bkZVbHJjWmxuYXRQbzNWQzdkZGZvUEZSMnJCdEx4SXpOTUUrT3ZJdXkrMDFmdHdpVmtvMnByZXFod1NPOEZ0YXlESENqRXRiOHh6OC8wdEpIeEg4Qk9KLzJXdGxDZzJSb0wrU1lndms9IiwibWFjIjoiNGIwZDM1ZDRmODFjZThlYTU1NDgyMjA0YWZjN2RkNWUwOTIyNGU4NDViMjU0OGYxYTIxM2RlODY1MTEyYWNkNyIsInRhZyI6IiJ9; expires=Wed, 08 Jan 2025 08:30:30 GMT; Max-Age=172800; path=/; secure; httponly; samesite=lax
vid=eyJpdiI6Ilh0QlhibiszY1p0d2JTc3lWSWZUclE9PSIsInZhbHVlIjoidGNTVFlTTjgzSnMwdENWUzZIUGRuQWliRE1lbVFUd2duYnV5UTlJbVpoSEk4UXhwenc3V3o5bVVlUHhoeUF4ZlRZeDEzaDBaczRYTWZ1MG50WGtZc3lOUmtzT2RieFNBMWhnSjE2TmVSTTQ9IiwibWFjIjoiNmEzODM1ZTU5ODNiM2VhYzM0MTNlZTQ3ZGJjNjY0MTNlYThiNmZiYzM5YTUwNjYwNzAzNmYxMzFkMDA2YmZkYiIsInRhZyI6IiJ9; expires=Sat, 14 Aug 2624 08:30:30 GMT; Max-Age=18921600000; path=/; secure; httponly; samesite=lax
mlp3_session=eyJpdiI6Iks4UGpKNlJCK2QyejFqd2lzRHJHMVE9PSIsInZhbHVlIjoiY0JMaTZCNkNoYndjcmlUckhQN2JEMUtveTVQVEJmVkRDdERWdFRFb2NxS3pzd3NQMklGam1rNjhCcmJMdWRzRVZ3WkxqdmV5YVhvdm4yeVRYVFE4djRDRldPSWNYL1UwTk5TK0M2Z2dDYW5LT3NzK0s2TmNaWFkzVGt6djRadnIiLCJtYWMiOiIyZDQyMWMxMGJmYWM5ZTNiZDU1MmY1NTQ3MzQ5MzdhMmEyYzJkMTEwYzg1YTRlMjM4MjM0Zjk5MzRjYmRiZDU4IiwidGFnIjoiIn0%3D; expires=Mon, 06 Jan 2025 10:30:30 GMT; Max-Age=7200; path=/; httponly; samesite=lax
accept-ch: Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List
critical-ch: Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform
vary: Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform
x-handled-by: mlp3l-webserver-static
content-encoding: gzip
X-Firefox-Spdy: h2
POST sg.d.shield.monitoringservice.co/
139.162.21.64200 OK 0 B URL POST HTTP/1.1 sg.d.shield.monitoringservice.co/
IP 139.162.21.64:443
ASN #63949 Akamai Connected Cloud
Requested by https://didocell.com/kw/bluepluslite/?affl=428
Certificate IssuerLet's Encrypt
Subjectsg.d.shield.monitoringservice.co
FingerprintC9:56:58:57:C7:84:4D:B5:1A:FD:3D:5E:3B:FA:3C:7A:F4:4B:F5:15
ValiditySun, 01 Dec 2024 14:59:12 GMT - Sat, 01 Mar 2025 14:59:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: sg.d.shield.monitoringservice.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 720
Origin: https://didocell.com
DNT: 1
Connection: keep-alive
Referer: https://didocell.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
access-control-allow-origin: *
server: MCP-Shield
date: Mon, 06 Jan 2025 08:30:31 GMT
content-length: 0
x-server: Data-4
sg.ws.shield.monitoringservice.co/
139.162.21.64101 Switching Protocols 0 B URL sg.ws.shield.monitoringservice.co/
IP 139.162.21.64:0
ASN #63949 Akamai Connected Cloud
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: sg.ws.shield.monitoringservice.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://didocell.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: nYfUnZF7Q5kenTF9jdE1Wg==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
upgrade: websocket
connection: Upgrade
sec-websocket-accept: GTlTR7sjvZa9J80G1D0+Ahl1S9k=
origin: https://didocell.com
x-server: WS-4
GET antifraud.cgparcel.net/AntiFraud/Pixel?RequestID=20250106083028_2eba0768313d46afa6eca2b7a47b2e9a&ChannelID=99939114&Pixel=0
91.192.195.101200 OK 0 B URL GET HTTP/2 antifraud.cgparcel.net/AntiFraud/Pixel?RequestID=20250106083028_2eba0768313d46afa6eca2b7a47b2e9a&ChannelID=99939114&Pixel=0
IP 91.192.195.101:443
ASN #15510 Compuweb Communications Services Limited
Requested by https://didocell.com/kw/bluepluslite/?affl=428
Certificate IssuerGoDaddy.com, Inc.
Subjectapisdp.mobi-mind.net
Fingerprint4D:F8:1F:E2:2E:D7:FC:88:E8:DD:E6:B2:1C:C6:DB:08:E9:D1:A7:0C
ValiditySun, 24 Nov 2024 09:27:29 GMT - Sun, 23 Nov 2025 09:21:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /AntiFraud/Pixel?RequestID=20250106083028_2eba0768313d46afa6eca2b7a47b2e9a&ChannelID=99939114&Pixel=0 HTTP/1.1
Host: antifraud.cgparcel.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://didocell.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-type: text/html; charset=utf-8
expires: -1
server: Microsoft-IIS/10.0
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
my_ip: 101
date: Mon, 06 Jan 2025 08:30:32 GMT
content-length: 0
X-Firefox-Spdy: h2
GET cdn.fonious.com/js/app.min.js?v=2.3
80.240.113.62200 OK 40 kB URL GET HTTP/2 cdn.fonious.com/js/app.min.js?v=2.3
IP 80.240.113.62:443
ASN #199524 G-Core Labs S.A.
Requested by https://didocell.com/kw/bluepluslite/?affl=428
Certificate IssuerLet's Encrypt
Subjectcdn.fonious.com
FingerprintDE:F1:CA:09:0C:D6:8B:DF:A6:41:21:A3:2A:7C:73:D5:45:2D:AE:6C
ValiditySun, 10 Nov 2024 23:05:17 GMT - Sat, 08 Feb 2025 23:05:16 GMT
File type gzip compressed data, max speed, from Unix
Hash 09f644c409dcdebed3f24eebe5ef1330
be04fe53f47509d5ba7c45be58d29cb73166ff65
60c7dccaa7c40312cc794969741da5c01417a093ab352b07fa68a6f6decf35b1
GET /js/app.min.js?v=2.3 HTTP/1.1
Host: cdn.fonious.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://didocell.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 06 Jan 2025 08:30:31 GMT
content-type: application/javascript; charset=utf-8
traceparent: 00-add8ad2e2c2f68df70d32996d26892f7-cebecf20a954d864-01
last-modified: Tue, 12 Nov 2024 02:20:21 GMT
etag: W/"6732bb65-1aa6"
expires: Thu, 14 Nov 2024 02:42:49 GMT
cache-control: max-age=172800, public
x-id: sto5-hw-edge-gc12
age: 63855
access-control-allow-origin: *
cache: HIT
x-cached-since: 2025-01-05T14:46:16+00:00
content-encoding: gzip
x-id-fe: sto5-hw-edge-gc12
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
142.250.74.35200 OK 38 kB URL GET HTTP/2 fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP 142.250.74.35:443
Requested by https://didocell.com/kw/bluepluslite/?affl=428
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint40:A7:D7:D3:7D:FA:BE:34:C0:7E:6F:F7:9F:55:52:22:92:07:C7:EF
ValidityMon, 02 Dec 2024 08:36:58 GMT - Mon, 24 Feb 2025 08:36:57 GMT
File type Web Open Font Format (Version 2), TrueType, length 37828, version 1.0
Hash 50b140b1e97d859d6d0603414f4298ee
500e4872ee1ba9cf89f1ba626d64987b0f9ab5c9
fdc9964050bfa24c27a3c76c6791b3674292a5f352cbc83d7a4dc49595bc3fb1
GET /s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://didocell.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 37828
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 Jan 2025 22:43:22 GMT
expires: Sat, 03 Jan 2026 22:43:22 GMT
cache-control: public, max-age=31536000
age: 208030
last-modified: Wed, 06 Nov 2024 17:30:37 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET didocell.com/didocell.com/favicon.ico
23.92.23.43200 OK 776 B URL GET HTTP/2 didocell.com/didocell.com/favicon.ico
IP 23.92.23.43:443
ASN #63949 Akamai Connected Cloud
Requested by https://didocell.com/kw/bluepluslite/?affl=428
Certificate IssuerLet's Encrypt
Subject*.didocell.com
FingerprintE3:78:DB:C9:F6:B1:D7:97:A5:6D:14:99:50:A5:68:B9:78:81:F4:27
ValidityMon, 28 Oct 2024 06:09:38 GMT - Sun, 26 Jan 2025 06:09:37 GMT
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Hash 7821d9d003c67f1bd4dbc131538d5d63
2423ff621670e77fcf0714e444da1ec48dee54c9
519fedaa1fb0ed9587d76d6757e6cee9d514e76249591747efa2766101646b50
GET /didocell.com/favicon.ico HTTP/1.1
Host: didocell.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://didocell.com/kw/bluepluslite/?affl=428
Cookie: ch=eyJpdiI6IlZpR3doZXh5cGdWNkFpMnVGZ0h0S0E9PSIsInZhbHVlIjoiTk45RlVOd2hHcTA5RllsQWVOQ1RvcmVZNTgrM0RMME15akluU0ljOWZNVDhSZko5Y3NmSlVMeVlwbjNZT3k5QiIsIm1hYyI6ImE1YTRlNTYxODM2NjE2YzQ4NGRiZTMzMWJjYzljYzI1Mjc3ZDQyZmNmNTE3N2U3YjRhYjA5MDU1ZWVjZTE1OTUiLCJ0YWciOiIifQ%3D%3D; md5cookie=eyJpdiI6IkVudFBLYlk4U2NoMmxqZENVRVo4Mnc9PSIsInZhbHVlIjoiVnY1bkZVbHJjWmxuYXRQbzNWQzdkZGZvUEZSMnJCdEx4SXpOTUUrT3ZJdXkrMDFmdHdpVmtvMnByZXFod1NPOEZ0YXlESENqRXRiOHh6OC8wdEpIeEg4Qk9KLzJXdGxDZzJSb0wrU1lndms9IiwibWFjIjoiNGIwZDM1ZDRmODFjZThlYTU1NDgyMjA0YWZjN2RkNWUwOTIyNGU4NDViMjU0OGYxYTIxM2RlODY1MTEyYWNkNyIsInRhZyI6IiJ9; vid=eyJpdiI6Ilh0QlhibiszY1p0d2JTc3lWSWZUclE9PSIsInZhbHVlIjoidGNTVFlTTjgzSnMwdENWUzZIUGRuQWliRE1lbVFUd2duYnV5UTlJbVpoSEk4UXhwenc3V3o5bVVlUHhoeUF4ZlRZeDEzaDBaczRYTWZ1MG50WGtZc3lOUmtzT2RieFNBMWhnSjE2TmVSTTQ9IiwibWFjIjoiNmEzODM1ZTU5ODNiM2VhYzM0MTNlZTQ3ZGJjNjY0MTNlYThiNmZiYzM5YTUwNjYwNzAzNmYxMzFkMDA2YmZkYiIsInRhZyI6IiJ9; mlp3_session=eyJpdiI6Iks4UGpKNlJCK2QyejFqd2lzRHJHMVE9PSIsInZhbHVlIjoiY0JMaTZCNkNoYndjcmlUckhQN2JEMUtveTVQVEJmVkRDdERWdFRFb2NxS3pzd3NQMklGam1rNjhCcmJMdWRzRVZ3WkxqdmV5YVhvdm4yeVRYVFE4djRDRldPSWNYL1UwTk5TK0M2Z2dDYW5LT3NzK0s2TmNaWFkzVGt6djRadnIiLCJtYWMiOiIyZDQyMWMxMGJmYWM5ZTNiZDU1MmY1NTQ3MzQ5MzdhMmEyYzJkMTEwYzg1YTRlMjM4MjM0Zjk5MzRjYmRiZDU4IiwidGFnIjoiIn0%3D; _s_ZisSess=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Jan 2025 08:30:32 GMT
content-type: image/x-icon
content-length: 776
last-modified: Tue, 09 Jul 2024 05:09:52 GMT
etag: "668cc620-308"
expires: Wed, 08 Jan 2025 08:30:32 GMT
cache-control: max-age=172800, public
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
GET sg.r.shield.monitoringservice.co/p.png?ak=sskffa9d5fe9f29061a85c536a3d9eaa3ef&isSession=ZmFsc2U&w=MTI4MA&h=MTAyNA&vpw=MTI4MA&vph=MTAyNA&vvw=MTI4MA&vvh=MA&vvb=MA&vvr=MTI4MA&_wOh=MTAyNA&_wOw=MTI4MA&_wIh=MTAyNA&_wIw=MTI4MA&_dPr=MQ&an=TmV0c2NhcGU&p=bGludXggeDg2XzY0&_ifc=ZmFsc2U&_ifw=MQ&sah=MTAyNA&saw=MTI4MA&sc=MjQ&spd=MjQ&sh=MTAyNA&sw=MTI4MA&_sat=MA&_sal=MA&sot=bGFuZHNjYXBlLXByaW1hcnk&sa=MA&_sX=MA&_sY=MA&_lB=ZmFsc2U&_mB=dHJ1ZQ&_pB=dHJ1ZQ&_sB=dHJ1ZQ&_sTb=dHJ1ZQ&_tb=dHJ1ZQ&oL=Mg&nL=ZW4tVVM&nLs=ZW4tVVMsZW4&hC=NDg&_lR=ZmFsc2U&_lsR=ZmFsc2U&_nP=R2Vja28&_nV=&_nPs=MjAxMDAxMDE&_a=ZmFsc2U&_fC=OQ&_ckV=dHJ1ZQ&_ckS=dHJ1ZQ&dr=bnVsbA&wo=bnVsbA&_oV=dHJ1ZQ&_iB=ZmFsc2U&_t=blQ&_mcpc=NDQ3ZmZkYWFiODgxMjA0N2YwN2U5ZjlkYTVkMmMzZmQ&_ts=eyJfbXRwIjowLCJfdGUiOmZhbHNlfQ&_p=ZmFsc2U&_i=ZmFsc2U&_b=ZmFsc2U&_ofst=MA&_iw=dHJ1ZQ&hidb=dHJ1ZQ&hls=dHJ1ZQ&hss=dHJ1ZQ&_cN=dHJ1ZQ&hswfl=ZmFsc2U&_iii=ZmFsc2U&_osc=TGludXggeDg2XzY0&_cE=dHJ1ZQ&_aV=ZmFsc2U&_apV=NS4wIChYMTEp&_nC=MA&_nW=ZmFsc2U&_nPc=NQ&_nMc=Mg&_wA=dHJ1ZQ&_isM=ZmFsc2U&_wDiW=dHJ1ZQ&_wDw=ZmFsc2U&_xDr=ZmFsc2U&_dA=ZmFsc2U&_cP=ZmFsc2U&_wO=ZmFsc2U&_eL=Mzc&_tO=dHJ1ZQ&_tI=dHJ1ZQ&_eFp=dHJ1ZQ&_isNd=ZmFsc2U&_isIi=MA&_gC=ZmFsc2U&_cIden=dW5kZWZpbmVk&_isCr=dW5kZWZpbmVk&_isO=dHJ1ZQ&_gB=&_hLl=ZmFsc2U&_gDnT=MQ&_lOs=ZmFsc2U<s=MTczNjE1MjIzMDYzNg&isGCLID=ZmFsc2U&isFBCLID=ZmFsc2U&cts=MTczNjE1MjIzMjI3Mg&_v=VmlzaWJsZQ&_version=OC4w
139.162.21.64200 OK 0 B URL GET HTTP/1.1 sg.r.shield.monitoringservice.co/p.png?ak=sskffa9d5fe9f29061a85c536a3d9eaa3ef&isSession=ZmFsc2U&w=MTI4MA&h=MTAyNA&vpw=MTI4MA&vph=MTAyNA&vvw=MTI4MA&vvh=MA&vvb=MA&vvr=MTI4MA&_wOh=MTAyNA&_wOw=MTI4MA&_wIh=MTAyNA&_wIw=MTI4MA&_dPr=MQ&an=TmV0c2NhcGU&p=bGludXggeDg2XzY0&_ifc=ZmFsc2U&_ifw=MQ&sah=MTAyNA&saw=MTI4MA&sc=MjQ&spd=MjQ&sh=MTAyNA&sw=MTI4MA&_sat=MA&_sal=MA&sot=bGFuZHNjYXBlLXByaW1hcnk&sa=MA&_sX=MA&_sY=MA&_lB=ZmFsc2U&_mB=dHJ1ZQ&_pB=dHJ1ZQ&_sB=dHJ1ZQ&_sTb=dHJ1ZQ&_tb=dHJ1ZQ&oL=Mg&nL=ZW4tVVM&nLs=ZW4tVVMsZW4&hC=NDg&_lR=ZmFsc2U&_lsR=ZmFsc2U&_nP=R2Vja28&_nV=&_nPs=MjAxMDAxMDE&_a=ZmFsc2U&_fC=OQ&_ckV=dHJ1ZQ&_ckS=dHJ1ZQ&dr=bnVsbA&wo=bnVsbA&_oV=dHJ1ZQ&_iB=ZmFsc2U&_t=blQ&_mcpc=NDQ3ZmZkYWFiODgxMjA0N2YwN2U5ZjlkYTVkMmMzZmQ&_ts=eyJfbXRwIjowLCJfdGUiOmZhbHNlfQ&_p=ZmFsc2U&_i=ZmFsc2U&_b=ZmFsc2U&_ofst=MA&_iw=dHJ1ZQ&hidb=dHJ1ZQ&hls=dHJ1ZQ&hss=dHJ1ZQ&_cN=dHJ1ZQ&hswfl=ZmFsc2U&_iii=ZmFsc2U&_osc=TGludXggeDg2XzY0&_cE=dHJ1ZQ&_aV=ZmFsc2U&_apV=NS4wIChYMTEp&_nC=MA&_nW=ZmFsc2U&_nPc=NQ&_nMc=Mg&_wA=dHJ1ZQ&_isM=ZmFsc2U&_wDiW=dHJ1ZQ&_wDw=ZmFsc2U&_xDr=ZmFsc2U&_dA=ZmFsc2U&_cP=ZmFsc2U&_wO=ZmFsc2U&_eL=Mzc&_tO=dHJ1ZQ&_tI=dHJ1ZQ&_eFp=dHJ1ZQ&_isNd=ZmFsc2U&_isIi=MA&_gC=ZmFsc2U&_cIden=dW5kZWZpbmVk&_isCr=dW5kZWZpbmVk&_isO=dHJ1ZQ&_gB=&_hLl=ZmFsc2U&_gDnT=MQ&_lOs=ZmFsc2U<s=MTczNjE1MjIzMDYzNg&isGCLID=ZmFsc2U&isFBCLID=ZmFsc2U&cts=MTczNjE1MjIzMjI3Mg&_v=VmlzaWJsZQ&_version=OC4w
IP 139.162.21.64:443
ASN #63949 Akamai Connected Cloud
Requested by https://didocell.com/kw/bluepluslite/?affl=428
Certificate IssuerLet's Encrypt
Subjectsg.r.shield.monitoringservice.co
Fingerprint0E:C5:17:7D:9D:0F:6B:F9:99:A8:FA:78:8E:41:39:55:98:9C:F7:AE
ValiditySun, 01 Dec 2024 14:59:27 GMT - Sat, 01 Mar 2025 14:59:26 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p.png?ak=sskffa9d5fe9f29061a85c536a3d9eaa3ef&isSession=ZmFsc2U&w=MTI4MA&h=MTAyNA&vpw=MTI4MA&vph=MTAyNA&vvw=MTI4MA&vvh=MA&vvb=MA&vvr=MTI4MA&_wOh=MTAyNA&_wOw=MTI4MA&_wIh=MTAyNA&_wIw=MTI4MA&_dPr=MQ&an=TmV0c2NhcGU&p=bGludXggeDg2XzY0&_ifc=ZmFsc2U&_ifw=MQ&sah=MTAyNA&saw=MTI4MA&sc=MjQ&spd=MjQ&sh=MTAyNA&sw=MTI4MA&_sat=MA&_sal=MA&sot=bGFuZHNjYXBlLXByaW1hcnk&sa=MA&_sX=MA&_sY=MA&_lB=ZmFsc2U&_mB=dHJ1ZQ&_pB=dHJ1ZQ&_sB=dHJ1ZQ&_sTb=dHJ1ZQ&_tb=dHJ1ZQ&oL=Mg&nL=ZW4tVVM&nLs=ZW4tVVMsZW4&hC=NDg&_lR=ZmFsc2U&_lsR=ZmFsc2U&_nP=R2Vja28&_nV=&_nPs=MjAxMDAxMDE&_a=ZmFsc2U&_fC=OQ&_ckV=dHJ1ZQ&_ckS=dHJ1ZQ&dr=bnVsbA&wo=bnVsbA&_oV=dHJ1ZQ&_iB=ZmFsc2U&_t=blQ&_mcpc=NDQ3ZmZkYWFiODgxMjA0N2YwN2U5ZjlkYTVkMmMzZmQ&_ts=eyJfbXRwIjowLCJfdGUiOmZhbHNlfQ&_p=ZmFsc2U&_i=ZmFsc2U&_b=ZmFsc2U&_ofst=MA&_iw=dHJ1ZQ&hidb=dHJ1ZQ&hls=dHJ1ZQ&hss=dHJ1ZQ&_cN=dHJ1ZQ&hswfl=ZmFsc2U&_iii=ZmFsc2U&_osc=TGludXggeDg2XzY0&_cE=dHJ1ZQ&_aV=ZmFsc2U&_apV=NS4wIChYMTEp&_nC=MA&_nW=ZmFsc2U&_nPc=NQ&_nMc=Mg&_wA=dHJ1ZQ&_isM=ZmFsc2U&_wDiW=dHJ1ZQ&_wDw=ZmFsc2U&_xDr=ZmFsc2U&_dA=ZmFsc2U&_cP=ZmFsc2U&_wO=ZmFsc2U&_eL=Mzc&_tO=dHJ1ZQ&_tI=dHJ1ZQ&_eFp=dHJ1ZQ&_isNd=ZmFsc2U&_isIi=MA&_gC=ZmFsc2U&_cIden=dW5kZWZpbmVk&_isCr=dW5kZWZpbmVk&_isO=dHJ1ZQ&_gB=&_hLl=ZmFsc2U&_gDnT=MQ&_lOs=ZmFsc2U<s=MTczNjE1MjIzMDYzNg&isGCLID=ZmFsc2U&isFBCLID=ZmFsc2U&cts=MTczNjE1MjIzMjI3Mg&_v=VmlzaWJsZQ&_version=OC4w HTTP/1.1
Host: sg.r.shield.monitoringservice.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://didocell.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type, Content-Encoding, Access-Control-Allow-Headers, Authorization, X-Requested-With, content-encoding
access-control-allow-credentials: true
server: MCP-Shield
content-disposition: attachment; filename=_sp
content-length: 0
content-type: image/png
set-cookie: sSk=sskffa9d5fe9f29061a85c536a3d9eaa3ef; Domain=monitoringservice.co; Path=/
date: Mon, 06 Jan 2025 08:30:33 GMT
x-server: Report-4
POST sg.r.shield.monitoringservice.co/vtx/sskffa9d5fe9f29061a85c536a3d9eaa3ef
139.162.21.64200 OK 0 B URL POST HTTP/1.1 sg.r.shield.monitoringservice.co/vtx/sskffa9d5fe9f29061a85c536a3d9eaa3ef
IP 139.162.21.64:443
ASN #63949 Akamai Connected Cloud
Requested by https://didocell.com/kw/bluepluslite/?affl=428
Certificate IssuerLet's Encrypt
Subjectsg.r.shield.monitoringservice.co
Fingerprint0E:C5:17:7D:9D:0F:6B:F9:99:A8:FA:78:8E:41:39:55:98:9C:F7:AE
ValiditySun, 01 Dec 2024 14:59:27 GMT - Sat, 01 Mar 2025 14:59:26 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /vtx/sskffa9d5fe9f29061a85c536a3d9eaa3ef HTTP/1.1
Host: sg.r.shield.monitoringservice.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 222276
Origin: https://didocell.com
DNT: 1
Connection: keep-alive
Referer: https://didocell.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type, Content-Encoding, Access-Control-Allow-Headers, Authorization, X-Requested-With, content-encoding
access-control-allow-credentials: true
server: MCP-Shield
date: Mon, 06 Jan 2025 08:30:35 GMT
content-length: 0
x-server: Report-3
GET ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js
142.250.74.106200 OK 96 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js
IP 142.250.74.106:443
Requested by https://didocell.com/kw/bluepluslite/?affl=428
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint30:E5:7E:29:A5:A1:81:DB:C8:A8:49:80:67:40:12:AB:30:C0:34:8D
ValidityMon, 02 Dec 2024 08:36:58 GMT - Mon, 24 Feb 2025 08:36:57 GMT
File type JavaScript source, ASCII text, with very long lines (32038)
Hash f03e5a3bf534f4a738bc350631fd05bd
37b1db88b57438f1072a8ebc7559c909c9d3a682
aec3d419d50f05781a96f223e18289aeb52598b5db39be82a7b71dc67d6a7947
GET /ajax/libs/jquery/1.11.3/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://didocell.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33507
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Dec 2024 21:38:24 GMT
expires: Tue, 30 Dec 2025 21:38:24 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 557526
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET sg.ws.shield.monitoringservice.co/
139.162.21.64101 Switching Protocols 0 B URL GET HTTP/1.1 sg.ws.shield.monitoringservice.co/
IP 139.162.21.64:443
ASN #63949 Akamai Connected Cloud
Requested by https://didocell.com/kw/bluepluslite/?affl=428
Certificate IssuerLet's Encrypt
Subjectsg.ws.shield.monitoringservice.co
FingerprintB7:EC:4A:22:82:2A:BF:6D:80:55:4F:90:45:FA:61:CE:F4:FA:9D:FC
ValiditySun, 01 Dec 2024 14:59:45 GMT - Sat, 01 Mar 2025 14:59:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: sg.ws.shield.monitoringservice.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://didocell.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: nYfUnZF7Q5kenTF9jdE1Wg==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
upgrade: websocket
connection: Upgrade
sec-websocket-accept: GTlTR7sjvZa9J80G1D0+Ahl1S9k=
origin: https://didocell.com
x-server: WS-4
GET fonts.googleapis.com/css2?family=Bungee&family=Montserrat:wght@400;600&display=swap
142.251.9.95200 OK 5.0 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Bungee&family=Montserrat:wght@400;600&display=swap
IP 142.251.9.95:443
Requested by https://didocell.com/kw/bluepluslite/?affl=428
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint30:E5:7E:29:A5:A1:81:DB:C8:A8:49:80:67:40:12:AB:30:C0:34:8D
ValidityMon, 02 Dec 2024 08:36:58 GMT - Mon, 24 Feb 2025 08:36:57 GMT
File type ASCII text, with very long lines (5112), with no line terminators
Hash 16a9241e4d99ebcf532de0b41d339767
de9dbf5d577deffd950d1dbcc8c40b1b550861dd
816f54b0f1e2824f6e87fab0c996984fde5c4ad34c5539ec7d2201b186bc45fd
GET /css2?family=Bungee&family=Montserrat:wght@400;600&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://didocell.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 06 Jan 2025 08:30:31 GMT
date: Mon, 06 Jan 2025 08:30:31 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/bcfae741e379a885f2ab2cf83ebe6d32/mr
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2