| POST adfoc.us/serve/credit | 104.26.6.10 | 200 OK | 0 B |
IP 104.26.6.10:443
Requested byhttps://adfoc.us/serve/?id=475250111019932 CertificateIssuerGoogle Trust Services Subjectadfoc.us Fingerprint19:8A:E4:FA:8B:16:21:77:FA:DB:07:1F:12:44:DD:44:C6:4B:86:93 ValiditySat, 24 May 2025 01:23:30 GMT - Fri, 22 Aug 2025 02:23:26 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /serve/credit HTTP/1.1
Host: adfoc.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 24
Origin: https://adfoc.us
DNT: 1
Connection: keep-alive
Referer: https://adfoc.us/serve/?id=475250111019932
Cookie: phpsessionname=rarrtdpbvl69dbguc1bpofouq6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 30 Jun 2025 21:54:35 GMT
content-type: text/html; charset=UTF-8
content-encoding: br
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
strict-transport-security: max-age=0;
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4i%2FvIK7oOhyMIzp7YZ4c3SOVekItVBVwFOFvt2K9nb2fKgnINzGBTWTpKs6ggME9dZ%2FBY4Y2AJof7WNpGiLoXufh5dC7L0i%2FODJeOWmDk711G4ThShfEq%2BGQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9580e72a48ef5699-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=2652&min_rtt=450&rtt_var=3111&sent=51&recv=28&lost=0&retrans=0&sent_bytes=32414&recv_bytes=2059&delivery_rate=11476882&cwnd=256&unsent_bytes=0&cid=d1457b18c9062125&ts=1032&x=0"
X-Firefox-Spdy: h2
|
|
| GET fonts.gstatic.com/s/montserrat/v30/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 | 142.250.74.35 | 200 OK | 38 kB |
URL GET fonts.gstatic.com/s/montserrat/v30/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 IP 142.250.74.35:443
Requested byhttps://ads.ppctrck.com/cid9200W/?p=475250 CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7 ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 37828, version 1.0 Hashe0b05ccbd5b6004a449ac84b466c29ac bcc0e513caae5f6f4164b58eaaa46eaa49622322 1f1ae80aa76018cc05e840a37f41cf860211bbe368971f54957bf8ebb3c863d6
GET /s/montserrat/v30/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ads.ppctrck.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 37828
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jun 2025 10:18:34 GMT
expires: Fri, 26 Jun 2026 10:18:34 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 28 May 2025 18:51:10 GMT
content-type: font/woff2
age: 387362
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET adfoc.us/serve/sitelinks/?id=475250&url=http://optifine.net/adloadx?f=preview_OptiFine_1.21.6_HD_U_J6_pre2.jar&x=56d4 | 104.26.6.10 | 302 Found | 10 kB |
URL User Request GET adfoc.us/serve/sitelinks/?id=475250&url=http://optifine.net/adloadx?f=preview_OptiFine_1.21.6_HD_U_J6_pre2.jar&x=56d4 IP 104.26.6.10:443
CertificateIssuerGoogle Trust Services Subjectadfoc.us Fingerprint19:8A:E4:FA:8B:16:21:77:FA:DB:07:1F:12:44:DD:44:C6:4B:86:93 ValiditySat, 24 May 2025 01:23:30 GMT - Fri, 22 Aug 2025 02:23:26 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /serve/sitelinks/?id=475250&url=http://optifine.net/adloadx?f=preview_OptiFine_1.21.6_HD_U_J6_pre2.jar&x=56d4 HTTP/1.1
Host: adfoc.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 30 Jun 2025 21:54:34 GMT
content-type: text/html; charset=UTF-8
cf-ray: 9580e7247a1c5699-OSL
set-cookie: phpsessionname=rarrtdpbvl69dbguc1bpofouq6; expires=Wed, 30-Jul-2025 21:54:34 GMT; Max-Age=2592000; path=/; HttpOnly
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
location: /serve/?id=475250111019932
strict-transport-security: max-age=0;
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oFQA4IVfStfhyPa0AWyGLKORl%2Fq9P4KBFd50T48M6rROxcPRxwbWdB8yZAix0adIY%2FoOBHnMvkr7D0u3qW5LilST9MZF6ufw30ZZBh47WTKUSVdNsgJmui5N"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
server-timing: cfL4;desc="?proto=TCP&rtt=5926&min_rtt=562&rtt_var=10677&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3188&recv_bytes=1200&delivery_rate=6928229&cwnd=254&unsent_bytes=0&cid=d1457b18c9062125&ts=160&x=0"
X-Firefox-Spdy: h2
|
|
| GET adfoc.us/images/headers/optifine-logo.png | 104.26.6.10 | 200 OK | 6.3 kB |
URL GET adfoc.us/images/headers/optifine-logo.png IP 104.26.6.10:443
Requested byhttps://adfoc.us/serve/?id=475250111019932 CertificateIssuerGoogle Trust Services Subjectadfoc.us Fingerprint19:8A:E4:FA:8B:16:21:77:FA:DB:07:1F:12:44:DD:44:C6:4B:86:93 ValiditySat, 24 May 2025 01:23:30 GMT - Fri, 22 Aug 2025 02:23:26 GMT
File typePNG image data, 335 x 66, 8-bit/color RGBA, non-interlaced Hash2c9c45594c91e20b8069a2350d05624a faf91d832298a9ef0bc8dc4457db75dec3b44ff3 0b8a93e1c92033881b2b5f8ce7ffce59b793eb3b4c71930f98d2970e4ccb9d75
GET /images/headers/optifine-logo.png HTTP/1.1
Host: adfoc.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adfoc.us/serve/?id=475250111019932
Cookie: phpsessionname=rarrtdpbvl69dbguc1bpofouq6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 30 Jun 2025 21:54:34 GMT
content-type: image/png
content-length: 6274
cf-ray: 9580e727de285699-OSL
last-modified: Fri, 15 Nov 2019 16:00:58 GMT
etag: "5dcecbba-1882"
strict-transport-security: max-age=0;
cache-control: max-age=3600
cf-cache-status: HIT
age: 2774
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GXd1ZAh9afKbaCWnFfrhclZ2WwBLVm0FgBL1cqEEs7EAkdulxEkUuMzOBPItz9fTVjw3VUXfPdivlIynpOQEOz%2B1d7YkEtsrAbu%2FXLvRbS%2F3W71FSLa3C%2FEU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
server-timing: cfL4;desc="?proto=TCP&rtt=4317&min_rtt=477&rtt_var=6835&sent=20&recv=19&lost=0&retrans=0&sent_bytes=7304&recv_bytes=1754&delivery_rate=6928229&cwnd=256&unsent_bytes=0&cid=d1457b18c9062125&ts=580&x=0"
X-Firefox-Spdy: h2
|
|
| GET adfoc.us/images/headers/optifine-host.png | 104.26.6.10 | 200 OK | 5.5 kB |
URL GET adfoc.us/images/headers/optifine-host.png IP 104.26.6.10:443
Requested byhttps://adfoc.us/serve/?id=475250111019932 CertificateIssuerGoogle Trust Services Subjectadfoc.us Fingerprint19:8A:E4:FA:8B:16:21:77:FA:DB:07:1F:12:44:DD:44:C6:4B:86:93 ValiditySat, 24 May 2025 01:23:30 GMT - Fri, 22 Aug 2025 02:23:26 GMT
File typePNG image data, 253 x 38, 8-bit/color RGBA, non-interlaced Hash374bfd30ad9eda69e8aca34240e49266 cd859ef7ab3a2dfb38f25c61e602925b830fecb8 b9408b1820f6ff107135f480256dc3dfb4d0f56a789e7a1096f3efb98cfb5b52
GET /images/headers/optifine-host.png HTTP/1.1
Host: adfoc.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adfoc.us/serve/?id=475250111019932
Cookie: phpsessionname=rarrtdpbvl69dbguc1bpofouq6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 30 Jun 2025 21:54:34 GMT
content-type: image/png
content-length: 5529
cf-ray: 9580e727ee365699-OSL
last-modified: Tue, 28 Jul 2020 22:30:47 GMT
etag: "5f20a717-1599"
strict-transport-security: max-age=0;
cache-control: max-age=3600
cf-cache-status: HIT
age: 2774
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5R37HYkQt%2FjIPaTRZchseFAoBChm69u3ruKps3BH8czKM0vJAv%2FnUqBGv5mtnvHbdEf8Q8DKSjiCynZSZ4wfhBzvmYalopyR7jErds3DqA95zHUwsXFm6Cmx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
server-timing: cfL4;desc="?proto=TCP&rtt=3588&min_rtt=450&rtt_var=4066&sent=37&recv=22&lost=0&retrans=0&sent_bytes=20905&recv_bytes=1754&delivery_rate=6928229&cwnd=256&unsent_bytes=0&cid=d1457b18c9062125&ts=592&x=0"
X-Firefox-Spdy: h2
|
|
| GET adfoc.us/uploads/users/13dcb37c_skip.png | 104.26.6.10 | 200 OK | 4.1 kB |
URL GET adfoc.us/uploads/users/13dcb37c_skip.png IP 104.26.6.10:443
Requested byhttps://adfoc.us/serve/?id=475250111019932 CertificateIssuerGoogle Trust Services Subjectadfoc.us Fingerprint19:8A:E4:FA:8B:16:21:77:FA:DB:07:1F:12:44:DD:44:C6:4B:86:93 ValiditySat, 24 May 2025 01:23:30 GMT - Fri, 22 Aug 2025 02:23:26 GMT
File typePNG image data, 134 x 38, 8-bit/color RGBA, non-interlaced Hash53a92793efb96c2e48ea59d1966ac16c 1e76f955d35cb8b615ce7f892de9f695f3e512e4 a2e335bb081ea97c531a31ee9a09cab042f1d0128d8203c11bc20cea490b354b
GET /uploads/users/13dcb37c_skip.png HTTP/1.1
Host: adfoc.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adfoc.us/serve/?id=475250111019932
Cookie: phpsessionname=rarrtdpbvl69dbguc1bpofouq6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 30 Jun 2025 21:54:34 GMT
content-type: image/png
content-length: 4103
cf-ray: 9580e727ee395699-OSL
last-modified: Tue, 28 Jul 2020 22:36:55 GMT
etag: "5f20a887-1007"
strict-transport-security: max-age=0;
cache-control: max-age=3600
cf-cache-status: HIT
age: 2773
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8EpY5isLvaoHN%2FQtzdb5P15jxMu1YtzzlQ5fzI%2FZwpyqmSLpxiGDuNl%2BJ1XaAKHR1uSrFT5TbOaQ4jjOs5897HFXgtTSAmUGViUxorE8unXPr%2FIMgSkVTxov"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
server-timing: cfL4;desc="?proto=TCP&rtt=3805&min_rtt=450&rtt_var=4843&sent=31&recv=21&lost=0&retrans=0&sent_bytes=16213&recv_bytes=1754&delivery_rate=6928229&cwnd=256&unsent_bytes=0&cid=d1457b18c9062125&ts=591&x=0"
X-Firefox-Spdy: h2
|
|
| GET ads.ppctrck.com/cid9200W/img/logo.png | 172.67.165.150 | 200 OK | 12 kB |
URL GET ads.ppctrck.com/cid9200W/img/logo.png IP 172.67.165.150:443
Requested byhttps://ads.ppctrck.com/cid9200W/?p=475250 CertificateIssuerGoogle Trust Services Subjectppctrck.com Fingerprint8C:B2:43:03:7B:05:C3:2C:30:A0:E3:24:58:CA:74:C3:2D:A2:37:AB ValiditySat, 10 May 2025 19:43:29 GMT - Fri, 08 Aug 2025 20:42:09 GMT
File typePNG image data, 279 x 96, 8-bit/color RGBA, non-interlaced Hash840d2649775216826b88a62c52e7c039 cb5542e6198ba2bee1bacaec2fa2ca9761f5b91e e8afa0f35d3995f4c4ec889b30374cab9c4bb4133f512ab8fbe165388a078efc
GET /cid9200W/img/logo.png HTTP/1.1
Host: ads.ppctrck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ads.ppctrck.com/cid9200W/?p=475250
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 30 Jun 2025 21:54:35 GMT
content-type: image/png
content-length: 11671
last-modified: Wed, 24 Jul 2024 21:03:01 GMT
accept-ranges: bytes
server: cloudflare
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
etag:
age: 2538
cache-control: max-age=14400
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=xdKB5Q1DgKAAcGeiWrXe2Zaw0l6k7faVQZHAEQ3PjlMRoGWscm3RAAkkU5MXoO2POgzACPis25V2mJrDNdn7teuzHjIabVsbwB0PjoY%3D"}]}
cf-ray: 9580e72eec9956b1-OSL
X-Firefox-Spdy: h2
|
|
| GET adfoc.us/js/interstitial.js | 104.26.6.10 | 200 OK | 4.1 kB |
URL GET adfoc.us/js/interstitial.js IP 104.26.6.10:443
Requested byhttps://adfoc.us/serve/?id=475250111019932 CertificateIssuerGoogle Trust Services Subjectadfoc.us Fingerprint19:8A:E4:FA:8B:16:21:77:FA:DB:07:1F:12:44:DD:44:C6:4B:86:93 ValiditySat, 24 May 2025 01:23:30 GMT - Fri, 22 Aug 2025 02:23:26 GMT
File typeJavaScript source, ASCII text, with very long lines (861) Hash35dc976941bc10586fbd7189c5bea9bd cdaa19f3ab9ed1b53f6a1acf15f9aebfca3eb913 453e2b757d975f8e689e82a248c0dc0361e3c973de3d6536499f929ca514d1fa
GET /js/interstitial.js HTTP/1.1
Host: adfoc.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adfoc.us/serve/?id=475250111019932
Cookie: phpsessionname=rarrtdpbvl69dbguc1bpofouq6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 30 Jun 2025 21:54:34 GMT
content-type: application/javascript
content-encoding: br
last-modified: Fri, 20 Mar 2020 18:50:40 GMT
etag: W/"5e751080-100e"
strict-transport-security: max-age=0;
cache-control: max-age=3600
cf-cache-status: HIT
age: 2947
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jTjJ2HbLxyEt2HhXn6Ic05Ms6A0Zn60rr1xMOnAZN7L91rEwHq%2BQ86fYmmt99Eh8j48cAvb6sAhWwhBLjwYLyUSzCJwF%2BAPCIvK%2BOgfF4UkqqiUD4vVeIeQq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9580e727ee3d5699-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=4265&min_rtt=477&rtt_var=5231&sent=28&recv=20&lost=0&retrans=0&sent_bytes=14259&recv_bytes=1754&delivery_rate=6928229&cwnd=256&unsent_bytes=0&cid=d1457b18c9062125&ts=589&x=0"
X-Firefox-Spdy: h2
|
|
| GET www.googletagmanager.com/gtag/js?id=G-J8F7TKSJKP | 142.250.74.136 | 200 OK | 362 kB |
URL GET www.googletagmanager.com/gtag/js?id=G-J8F7TKSJKP IP 142.250.74.136:443
Requested byhttps://adfoc.us/serve/?id=475250111019932 CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA ValidityMon, 02 Jun 2025 08:35:30 GMT - Mon, 25 Aug 2025 08:35:29 GMT
File typeJavaScript source, ASCII text, with very long lines (7993) Size362 kB (362212 bytes) Hashe8856257d6ac7c12832f320726db6029 e98a7ba21a6b7a9b2ad1217a29d37ee6703c2ef8 27d72b8ef500115a2b33538f85ca0d9e900cd4d24bb61de5db505104f77b073c
GET /gtag/js?id=G-J8F7TKSJKP HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adfoc.us/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 30 Jun 2025 21:54:35 GMT
expires: Mon, 30 Jun 2025 21:54:35 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0
report-to: {"group":"ascgcycc:1077:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0"}],}
server: Google Tag Manager
content-length: 124079
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/webfonts/fa-solid-900.woff2 | 104.17.24.14 | 200 OK | 125 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/webfonts/fa-solid-900.woff2 IP 104.17.24.14:443
Requested byhttps://ads.ppctrck.com/cid9200W/?p=475250 CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77 ValidityThu, 22 May 2025 14:38:44 GMT - Wed, 20 Aug 2025 15:38:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 125064, version 768.67 Size125 kB (125064 bytes) Hash57b380d27f14f16e737bcca7e849cf79 2e4280929d4d76fc0e31601c98f167f14630c209 94e1bbc1c2a41ebc73fa5253fd563256c0035b4d69181e48f9aef9e474a11251
GET /ajax/libs/font-awesome/6.0.0-beta3/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ads.ppctrck.com
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 30 Jun 2025 21:54:36 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 125064
cf-ray: 9580e72ffc49b512-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "619c057b-1e888"
last-modified: Mon, 22 Nov 2021 21:02:51 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 378869
expires: Sat, 20 Jun 2026 21:54:36 GMT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R91VVK7SSkdSXWOQCACTSLh3m2jJ0qJanqqhpCIo1PExTpmYnIXEV9z21dq%2FtjbgwMaAhfwOLcIFrMxoBD81SwRz0PjzpBMFzMvQ3Kd2U5bTrvx9Upfanu66gPCQg9vk6x53Vt%2Fz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| GET adfoc.us/serve/?id=475250111019932 | 104.26.6.10 | 200 OK | 10 kB |
URL User Request GET adfoc.us/serve/?id=475250111019932 IP 104.26.6.10:443
CertificateIssuerGoogle Trust Services Subjectadfoc.us Fingerprint19:8A:E4:FA:8B:16:21:77:FA:DB:07:1F:12:44:DD:44:C6:4B:86:93 ValiditySat, 24 May 2025 01:23:30 GMT - Fri, 22 Aug 2025 02:23:26 GMT
File typeHTML document, ASCII text, with CRLF, LF line terminators Hash57010be352e093843366ad6152ecd1d3 52d3f0bd46d82b23e546cb0aa07f72bb3b4e2f36 add1402fd55808befcbdb9a95dc5d2ba12c039e6199049f35e9c15e963e1992d
GET /serve/?id=475250111019932 HTTP/1.1
Host: adfoc.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: phpsessionname=rarrtdpbvl69dbguc1bpofouq6
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 30 Jun 2025 21:54:34 GMT
content-type: text/html; charset=UTF-8
content-encoding: br
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
strict-transport-security: max-age=0;
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BPU76yR3AWHTF31A5HP4bfq5RkfApobyl%2BYTLflV9eoygwdsZod8WT7mBfPIj3xGcanA79xTaTevA8nxpfLQgbdcSitsbZugQR7m9mx%2Bt54ZQn1VFYKSxRN5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9580e7256b305699-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=4656&min_rtt=477&rtt_var=8209&sent=11&recv=14&lost=0&retrans=0&sent_bytes=3957&recv_bytes=1317&delivery_rate=6928229&cwnd=256&unsent_bytes=0&cid=d1457b18c9062125&ts=246&x=0"
X-Firefox-Spdy: h2
|
|
| GET ajax.googleapis.com/ajax/libs/jquery/1.8.2/jquery.min.js | 142.250.74.42 | 200 OK | 93 kB |
URL GET ajax.googleapis.com/ajax/libs/jquery/1.8.2/jquery.min.js IP 142.250.74.42:443
Requested byhttps://adfoc.us/serve/?id=475250111019932 CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint58:09:05:96:27:31:E2:3D:AB:89:AD:1C:2E:C3:03:82:B0:27:3D:86 ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65480) Hash0b6ecf17e30037994d3ffee51b525914 d09d3a99ed25d0f1fbe6856de9e14ffd33557256 f554d2f09272c6f71447ebfe4532d3b1dd1959bce669f9a5ccc99e64ef511729
GET /ajax/libs/jquery/1.8.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adfoc.us/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33621
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jun 2025 10:28:30 GMT
expires: Fri, 26 Jun 2026 10:28:30 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 386764
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET ads.ppctrck.com/cid9200W/?p=475250 | 172.67.165.150 | 200 OK | 5.1 kB |
URL GET ads.ppctrck.com/cid9200W/?p=475250 IP 172.67.165.150:443
Requested byhttps://adfoc.us/serve/?id=475250111019932 CertificateIssuerGoogle Trust Services Subjectppctrck.com Fingerprint8C:B2:43:03:7B:05:C3:2C:30:A0:E3:24:58:CA:74:C3:2D:A2:37:AB ValiditySat, 10 May 2025 19:43:29 GMT - Fri, 08 Aug 2025 20:42:09 GMT
File typeHTML document, Unicode text, UTF-8 text Hash18ecadacf2ebf4dd385c0202d8d710b4 bf89fbf589d418c355bd34b6b965eef5da841d56 f8f39854734f1ff832e5c7a0ad53667bc8fe4d779dcf68653cbc7f2106917927
GET /cid9200W/?p=475250 HTTP/1.1
Host: ads.ppctrck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adfoc.us/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 30 Jun 2025 21:54:35 GMT
content-type: text/html; charset=UTF-8
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=AIisiFrTZHS3UbDwnXfwPfQwL6T4J2CYSkpDRN8rklOh3PRbZWZ4henXH%2FAl%2Bby2DrII0U0OkPoMKT5wT%2F8aNGaLeo%2BK0D6kqp%2BuA1I%3D"}]}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
cf-ray: 9580e72a981756b1-OSL
X-Firefox-Spdy: h2
|
|
| GET adfoc.us/favicon.ico | 104.26.6.10 | 200 OK | 15 kB |
IP 104.26.6.10:443
Requested byhttps://adfoc.us/serve/?id=475250111019932 CertificateIssuerGoogle Trust Services Subjectadfoc.us Fingerprint19:8A:E4:FA:8B:16:21:77:FA:DB:07:1F:12:44:DD:44:C6:4B:86:93 ValiditySat, 24 May 2025 01:23:30 GMT - Fri, 22 Aug 2025 02:23:26 GMT
File typeMS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel Hash20e91d9a595d1cb0e2981773e93842f5 ed723b54a0251f72ea3b4a6330e3ccec0c2ddb18 12ed6aa39e93e6d451ed9323512577cc8b8a6e13d5a9000596ecab46ce8a4651
GET /favicon.ico HTTP/1.1
Host: adfoc.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adfoc.us/serve/?id=475250111019932
Cookie: phpsessionname=rarrtdpbvl69dbguc1bpofouq6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 30 Jun 2025 21:54:35 GMT
content-type: image/x-icon
content-encoding: br
last-modified: Mon, 18 Jun 2018 22:54:46 GMT
etag: W/"5b283836-3aee"
strict-transport-security: max-age=0;
cache-control: max-age=3600
cf-cache-status: HIT
age: 2774
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZbGqTmRTPbLhybpTmtY4HIJCq48hHaaQasTk8qC9qsBweM8FsIVluF7NuB7tgUtJFqZNTNSzuTlTmdHg6fFmaLuXZ3whDvYxP9zBHJKfSmuZurUz0sgd9xMG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9580e72a48ed5699-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=2923&min_rtt=450&rtt_var=3426&sent=45&recv=27&lost=0&retrans=0&sent_bytes=27132&recv_bytes=2059&delivery_rate=10146146&cwnd=256&unsent_bytes=0&cid=d1457b18c9062125&ts=971&x=0"
X-Firefox-Spdy: h2
|
|
| GET fonts.googleapis.com/css2?family=Montserrat:wght@400;700&display=swap | 142.250.74.10 | 200 OK | 3.9 kB |
URL GET fonts.googleapis.com/css2?family=Montserrat:wght@400;700&display=swap IP 142.250.74.10:443
Requested byhttps://ads.ppctrck.com/cid9200W/?p=475250 CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint58:09:05:96:27:31:E2:3D:AB:89:AD:1C:2E:C3:03:82:B0:27:3D:86 ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
Hashc352b42615baa790ac8e1215d9f7f047 a28a7625859f50136a37df48716c0c17e03bc78a ef107980d4d6ab2b47ff7362b2961ca03780dc093a8d3b54952e728568db3fd1
GET /css2?family=Montserrat:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ads.ppctrck.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 30 Jun 2025 21:54:36 GMT
date: Mon, 30 Jun 2025 21:54:36 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css | 104.17.24.14 | 200 OK | 84 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css IP 104.17.24.14:443
Requested byhttps://ads.ppctrck.com/cid9200W/?p=475250 CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77 ValidityThu, 22 May 2025 14:38:44 GMT - Wed, 20 Aug 2025 15:38:38 GMT
File typeASCII text, with very long lines (65311) Hash3d5ef2bf867c4054a2f336cdbad9e1dc 07228d1fa3245ee156a27a353f45758a3207849f a361e7885c36bacb3fd9cb068da207c3b9329962cac022d06e28923939f575e8
GET /ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ads.ppctrck.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 30 Jun 2025 21:54:36 GMT
content-type: text/css; charset=utf-8
content-length: 14850
cf-ray: 9580e72f19cbb4f1-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "619c057b-3a02"
last-modified: Mon, 22 Nov 2021 21:02:51 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1020952
expires: Sat, 20 Jun 2026 21:54:36 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cixZyWEWEyUiAV70zH1WfZmQ%2FARJmbvC61s%2BXiShPzri0sO4TRvudKZRUzaZZl2OwxvJWCYP4odr645JpTnsxaSlKeAGuy8Uk2nrRuGe45RfAu4%2FlUGO2TVDl7gfPsNotNkJI7Sk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET fonts.gstatic.com/s/montserrat/v30/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 | 142.250.74.35 | 200 OK | 38 kB |
URL GET fonts.gstatic.com/s/montserrat/v30/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 IP 142.250.74.35:443
Requested byhttps://ads.ppctrck.com/cid9200W/?p=475250 CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7 ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 37828, version 1.0 Hashe0b05ccbd5b6004a449ac84b466c29ac bcc0e513caae5f6f4164b58eaaa46eaa49622322 1f1ae80aa76018cc05e840a37f41cf860211bbe368971f54957bf8ebb3c863d6
GET /s/montserrat/v30/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ads.ppctrck.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 37828
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jun 2025 10:18:34 GMT
expires: Fri, 26 Jun 2026 10:18:34 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 28 May 2025 18:51:10 GMT
content-type: font/woff2
age: 387362
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|