| cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js | 104.17.25.14 | 200 OK | 6.2 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js IP 104.17.25.14:443
CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (19015) Hash70d3fda195602fe8b75e0097eed74dde c3b977aa4b8dfb69d651e07015031d385ded964b a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66
GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://downstudocu.com
DNT: 1
Connection: keep-alive
Referer: https://downstudocu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 22 Mar 2024 13:50:42 GMT
content-type: application/javascript; charset=utf-8
content-length: 6157
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-4af4"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 560326
expires: Wed, 12 Mar 2025 13:50:42 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TQwAonhtDiDyqdlSKRbJ8pCTtFXlbBRQNPEGE%2BWCVx84h0VBOtP14siBhN0X4igDfcD4jkyKoScnDWC4LSS0bAJgAs89VAXHsaUOPx2ZHmNKnQwCJBNIWTJCQW0vosbiT3uqxRUQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8686a6fb6971b503-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-3.2.1.slim.min.js | 151.101.194.137 | 200 OK | 24 kB |
URL GET HTTP/2code.jquery.com/jquery-3.2.1.slim.min.js IP 151.101.194.137:443
CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32012) Hash5f48fc77cac90c4778fa24ec9c57f37d 9e89d1515bc4c371b86f4cb1002fd8e377c1829f 9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398
GET /jquery-3.2.1.slim.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://downstudocu.com
DNT: 1
Connection: keep-alive
Referer: https://downstudocu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-10fdd"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 22 Mar 2024 13:50:42 GMT
age: 16211640
x-served-by: cache-lga21963-LGA, cache-hel1410020-HEL
x-cache: HIT, HIT
x-cache-hits: 13, 217169
x-timer: S1711115443.515778,VS0,VE0
vary: Accept-Encoding
content-length: 23856
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-62GVTHNBRD | 142.250.74.168 | 200 OK | 92 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-62GVTHNBRD IP 142.250.74.168:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint54:26:59:9C:A1:60:FD:C0:F5:F5:D5:8A:5C:D1:32:92:E7:8D:CE:7C ValidityMon, 19 Feb 2024 08:03:54 GMT - Mon, 13 May 2024 08:03:53 GMT
File typeJavaScript source, ASCII text, with very long lines (3034) Hashb8b2aeae917feb1decd7646f4f8d28b5 9e0908e051a0bac59fe2a83bbdee6cb998648ba3 fdec0c659fce428eb5df66e9699405365e74910542fa3a79597b0a5a61c30b83
GET /gtag/js?id=G-62GVTHNBRD HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://downstudocu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 22 Mar 2024 13:50:42 GMT
expires: Fri, 22 Mar 2024 13:50:42 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 91520
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| acscdn.com/script/ippg.js | 172.64.164.27 | 200 OK | 48 kB |
URL GET HTTP/2acscdn.com/script/ippg.js IP 172.64.164.27:443
CertificateIssuerGoogle Trust Services LLC Subjectacscdn.com FingerprintC2:6C:14:F0:34:12:76:91:EB:3A:02:AC:4F:41:CA:11:17:6F:F0:01 ValidityWed, 28 Feb 2024 11:34:54 GMT - Tue, 28 May 2024 11:34:53 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (57579), with LF, NEL line terminators Hash2b18acb76c6c4c7e023328045fe7ef25 6a3191277aecb28b8a205c32630046a0f9b1965d daa97005b84188fc0d2baaddf8f9e28dbfef5ee78403827e2345c277f3bb7ca2
GET /script/ippg.js HTTP/1.1
Host: acscdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://downstudocu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 22 Mar 2024 13:50:42 GMT
content-type: text/javascript
x-guploader-uploadid: ABPtcPpA-7KUKC8y7iwLtBfFhgcWNmtdW3F7Kfj4qzdHY-hWPQfILUpi_FcNpQ4jekoz6tcreWk
x-goog-generation: 1710855824251444
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 144825
x-goog-hash: crc32c=3kDbvg==, md5=Kxist2xsTH4CMygEX+fvJQ==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Fri, 22 Mar 2024 13:16:15 GMT
cache-control: public, max-age=3600
last-modified: Tue, 19 Mar 2024 13:43:44 GMT
etag: W/"2b18acb76c6c4c7e023328045fe7ef25"
age: 2917
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6l6clETRu4TPMAD2FvkSOcMm%2FZaSYOAHYhfVHpvGT2IJ%2BuiA2h5Aki1maEPimPWzMFA0sLSud1CLHVNi5ZRLqAYUr5%2FCYu18nbcSkzuGhjwgyIl5Ft7XkJA7%2F80c"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8686a6fbdb3771ae-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 24 kB |
URL GET HTTP/2maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js IP 104.18.10.207:443
CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com FingerprintA8:07:0D:35:4B:FC:72:EA:A2:C8:B5:E7:74:66:B7:F4:72:EE:7E:E3 ValiditySun, 28 Jan 2024 00:16:50 GMT - Sat, 27 Apr 2024 00:16:49 GMT
File typeJavaScript source, ASCII text, with very long lines (48664) Hash14d449eb8876fa55e1ef3c2cc52b0c17 a9545831803b1359cfeed47e3b4d6bae68e40e99 e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b
GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://downstudocu.com
DNT: 1
Connection: keep-alive
Referer: https://downstudocu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 22 Mar 2024 13:50:42 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"14d449eb8876fa55e1ef3c2cc52b0c17"
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 12/21/2023 20:03:03
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 865
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: e325ccf9fcd1086994d7dbea9da28ff0
cdn-cache: HIT
cf-cache-status: HIT
age: 361638
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8686a6fb8a0156bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 216.58.207.227 | 200 OK | 15 kB |
URL GET HTTP/2fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 216.58.207.227:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint4B:01:90:58:08:51:40:F4:08:F1:16:D3:92:26:EE:6C:CD:EA:5A:C3 ValidityMon, 19 Feb 2024 08:18:37 GMT - Mon, 13 May 2024 08:18:36 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://downstudocu.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Mar 2024 02:34:42 GMT
expires: Fri, 21 Mar 2025 02:34:42 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 126960
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2 | 216.58.207.227 | 200 OK | 15 kB |
URL GET HTTP/2fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2 IP 216.58.207.227:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint4B:01:90:58:08:51:40:F4:08:F1:16:D3:92:26:EE:6C:CD:EA:5A:C3 ValidityMon, 19 Feb 2024 08:18:37 GMT - Mon, 13 May 2024 08:18:36 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 14712, version 1.0 Hash3afeae0d768769f5e5f30ac9805c5b70 3ada17c2b462db3e7a1fd85c3f4670dfe7704f4d 0d0a6262c545e8bbc895116e5afb22579c468d7abb77e378f377d6fed57c1dce
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://downstudocu.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14712
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Mar 2024 02:40:37 GMT
expires: Fri, 21 Mar 2025 02:40:37 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:57 GMT
content-type: font/woff2
age: 126606
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| youradexchange.com/script/i.php?t=1&c=23426584&stamat=m%257C%252C%252CQ2f7Y3KitGU3B5-GH0dEdHP3xP.d81%252Cvh-vOqZyFzLkfibVQ--mDvUYaD8mnu4-60XdW86T_eWvk8pD0Qhm_fRn7h_wKQjXpiO7OUnYfVkDO69_2J4K5eqCBv2Xpzk71Pu0SsMpTy5wOnQCbSsY6kmMz9BIHBBgCLxIuBwMj9osIPnIhiKBkPmVTM1NIvkXBPN9dAN0Q3i6lzEy-PERy5Js5EfHKBHcZHGKrQ4urbHlBExOBa88g7k3MchKbdQdKu4t-ZF98XbvzSa9SvpV0J0FHkxeYzvPr-EiBTb25jjrIOlEjw0M11OVxJTDsz7znwkFxP7gfT3X-Mo1Ha555IGmaH8SAK53DvmqYWA2rFAP2TbceajLb8jhtNe0FVQnP9EZkrD59FiFRpSZ77OT3vOIDjRejGQInVkbO9WrFU5DVe8CHpsSj3ucpnxu3RO46p36kvR7Vemm9EHq9dYUhzK3fV32d84_SOLrZI_wEDEdl5lhyYNg-bj1pSnyGSZZ6dM4Blv83YxefTzvFw50beIzTceYprTlCyhX6uvF8GMa_jdSL0CQrZwpRaVR1t2qZKgNJT3mwyvxZEeEJg6UKfOnVEftn63QbxHWhQqgViuN-033wKpTew%252C%252C | 172.64.170.19 | 204 No Content | 0 B |
URL GET HTTP/2youradexchange.com/script/i.php?t=1&c=23426584&stamat=m%257C%252C%252CQ2f7Y3KitGU3B5-GH0dEdHP3xP.d81%252Cvh-vOqZyFzLkfibVQ--mDvUYaD8mnu4-60XdW86T_eWvk8pD0Qhm_fRn7h_wKQjXpiO7OUnYfVkDO69_2J4K5eqCBv2Xpzk71Pu0SsMpTy5wOnQCbSsY6kmMz9BIHBBgCLxIuBwMj9osIPnIhiKBkPmVTM1NIvkXBPN9dAN0Q3i6lzEy-PERy5Js5EfHKBHcZHGKrQ4urbHlBExOBa88g7k3MchKbdQdKu4t-ZF98XbvzSa9SvpV0J0FHkxeYzvPr-EiBTb25jjrIOlEjw0M11OVxJTDsz7znwkFxP7gfT3X-Mo1Ha555IGmaH8SAK53DvmqYWA2rFAP2TbceajLb8jhtNe0FVQnP9EZkrD59FiFRpSZ77OT3vOIDjRejGQInVkbO9WrFU5DVe8CHpsSj3ucpnxu3RO46p36kvR7Vemm9EHq9dYUhzK3fV32d84_SOLrZI_wEDEdl5lhyYNg-bj1pSnyGSZZ6dM4Blv83YxefTzvFw50beIzTceYprTlCyhX6uvF8GMa_jdSL0CQrZwpRaVR1t2qZKgNJT3mwyvxZEeEJg6UKfOnVEftn63QbxHWhQqgViuN-033wKpTew%252C%252C IP 172.64.170.19:443
CertificateIssuerGoogle Trust Services LLC Subjectyouradexchange.com Fingerprint78:C4:85:0B:1A:9E:A4:A6:23:89:BE:D9:F3:EF:49:D5:88:28:D0:EC ValidityWed, 14 Feb 2024 23:47:53 GMT - Tue, 14 May 2024 23:47:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /script/i.php?t=1&c=23426584&stamat=m%257C%252C%252CQ2f7Y3KitGU3B5-GH0dEdHP3xP.d81%252Cvh-vOqZyFzLkfibVQ--mDvUYaD8mnu4-60XdW86T_eWvk8pD0Qhm_fRn7h_wKQjXpiO7OUnYfVkDO69_2J4K5eqCBv2Xpzk71Pu0SsMpTy5wOnQCbSsY6kmMz9BIHBBgCLxIuBwMj9osIPnIhiKBkPmVTM1NIvkXBPN9dAN0Q3i6lzEy-PERy5Js5EfHKBHcZHGKrQ4urbHlBExOBa88g7k3MchKbdQdKu4t-ZF98XbvzSa9SvpV0J0FHkxeYzvPr-EiBTb25jjrIOlEjw0M11OVxJTDsz7znwkFxP7gfT3X-Mo1Ha555IGmaH8SAK53DvmqYWA2rFAP2TbceajLb8jhtNe0FVQnP9EZkrD59FiFRpSZ77OT3vOIDjRejGQInVkbO9WrFU5DVe8CHpsSj3ucpnxu3RO46p36kvR7Vemm9EHq9dYUhzK3fV32d84_SOLrZI_wEDEdl5lhyYNg-bj1pSnyGSZZ6dM4Blv83YxefTzvFw50beIzTceYprTlCyhX6uvF8GMa_jdSL0CQrZwpRaVR1t2qZKgNJT3mwyvxZEeEJg6UKfOnVEftn63QbxHWhQqgViuN-033wKpTew%252C%252C HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://downstudocu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Fri, 22 Mar 2024 13:50:43 GMT
access-control-allow-origin: *
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=61pV%2BOXaLrCaDXF7m3nkyZKZvV0BJvGRdugJ78JbecKi%2FYeEho4tVe4yKrIXMRDz%2FXXDM13%2Fa7vX68EimzTOBOMO3DD%2FV723sPzdVS9awITQCRDk2VF%2BQX2WXPB9TcI1pFKcusY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8686a700befc71a5-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| youradexchange.com/script/i.php?t=1&c=23427472&stamat=m%257C%252C%252CAhenY3Y_oGU3B0-GH0dEdHP3xP.4c4%252CJamOS0EpO-cJpsOVgKxKP1hVtqHLIpB4JI5v0ZBNcWerOiUB3Bf4Xa3MO92m4Gz5J_c1v_l4DokGVPRx2TAuAPfMZwICsJdUp_58gVpgIGLSzCnH_mF9DxLMkxPgGXlL-3TmwPzBknY5nolOjC_991zZ0QyaM0vRoqjlxsOijIPmd5IoiWKrlauTl73Fl8pEPoAEnfd6xX1RFtWT5pK9CvcjbiyRMfQh6GGHeBnR3VA1ig0WF7uBiH8Vfz3AwJKpHtbMhr8BDvLX7x4DZ42etNFYZgyBK6QCVN344cYvYj4o3XD45TdZZxNRSLk6U_ODIHZXMs3khw79hEOIVr8tv2V2UylcyF2OZUkwU11fWr2Xs3lhJCemtjdlu9_rHJwMrAPpVsRNL25X3ivgZ_Auus59RnO7YxmMR2HQj1pdW8isl2SrR174S55Sf5bLRKlNpGhTl_DQ06B2bqeJ8GEDAQk5NZWqs2s6BqrT57TbIkf_THLM2nr8Tio5PIofLMehJorjFCeB6StFoRGZ1f9QXECWWgjAbQDom1e86nSrpbRSPnawjHSlQmCNH33SeKpbScHUYRHWMrdFiQWkFce5Z21cjSbRv8pU5a7KjumehBY%252C&cbpage=https%3A%2F%2Fdownstudocu.com%2F&cbref= | 172.64.170.19 | 204 No Content | 0 B |
URL GET HTTP/3youradexchange.com/script/i.php?t=1&c=23427472&stamat=m%257C%252C%252CAhenY3Y_oGU3B0-GH0dEdHP3xP.4c4%252CJamOS0EpO-cJpsOVgKxKP1hVtqHLIpB4JI5v0ZBNcWerOiUB3Bf4Xa3MO92m4Gz5J_c1v_l4DokGVPRx2TAuAPfMZwICsJdUp_58gVpgIGLSzCnH_mF9DxLMkxPgGXlL-3TmwPzBknY5nolOjC_991zZ0QyaM0vRoqjlxsOijIPmd5IoiWKrlauTl73Fl8pEPoAEnfd6xX1RFtWT5pK9CvcjbiyRMfQh6GGHeBnR3VA1ig0WF7uBiH8Vfz3AwJKpHtbMhr8BDvLX7x4DZ42etNFYZgyBK6QCVN344cYvYj4o3XD45TdZZxNRSLk6U_ODIHZXMs3khw79hEOIVr8tv2V2UylcyF2OZUkwU11fWr2Xs3lhJCemtjdlu9_rHJwMrAPpVsRNL25X3ivgZ_Auus59RnO7YxmMR2HQj1pdW8isl2SrR174S55Sf5bLRKlNpGhTl_DQ06B2bqeJ8GEDAQk5NZWqs2s6BqrT57TbIkf_THLM2nr8Tio5PIofLMehJorjFCeB6StFoRGZ1f9QXECWWgjAbQDom1e86nSrpbRSPnawjHSlQmCNH33SeKpbScHUYRHWMrdFiQWkFce5Z21cjSbRv8pU5a7KjumehBY%252C&cbpage=https%3A%2F%2Fdownstudocu.com%2F&cbref= IP 172.64.170.19:443
CertificateIssuerGoogle Trust Services LLC Subjectyouradexchange.com Fingerprint78:C4:85:0B:1A:9E:A4:A6:23:89:BE:D9:F3:EF:49:D5:88:28:D0:EC ValidityWed, 14 Feb 2024 23:47:53 GMT - Tue, 14 May 2024 23:47:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /script/i.php?t=1&c=23427472&stamat=m%257C%252C%252CAhenY3Y_oGU3B0-GH0dEdHP3xP.4c4%252CJamOS0EpO-cJpsOVgKxKP1hVtqHLIpB4JI5v0ZBNcWerOiUB3Bf4Xa3MO92m4Gz5J_c1v_l4DokGVPRx2TAuAPfMZwICsJdUp_58gVpgIGLSzCnH_mF9DxLMkxPgGXlL-3TmwPzBknY5nolOjC_991zZ0QyaM0vRoqjlxsOijIPmd5IoiWKrlauTl73Fl8pEPoAEnfd6xX1RFtWT5pK9CvcjbiyRMfQh6GGHeBnR3VA1ig0WF7uBiH8Vfz3AwJKpHtbMhr8BDvLX7x4DZ42etNFYZgyBK6QCVN344cYvYj4o3XD45TdZZxNRSLk6U_ODIHZXMs3khw79hEOIVr8tv2V2UylcyF2OZUkwU11fWr2Xs3lhJCemtjdlu9_rHJwMrAPpVsRNL25X3ivgZ_Auus59RnO7YxmMR2HQj1pdW8isl2SrR174S55Sf5bLRKlNpGhTl_DQ06B2bqeJ8GEDAQk5NZWqs2s6BqrT57TbIkf_THLM2nr8Tio5PIofLMehJorjFCeB6StFoRGZ1f9QXECWWgjAbQDom1e86nSrpbRSPnawjHSlQmCNH33SeKpbScHUYRHWMrdFiQWkFce5Z21cjSbRv8pU5a7KjumehBY%252C&cbpage=https%3A%2F%2Fdownstudocu.com%2F&cbref= HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://downstudocu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Fri, 22 Mar 2024 13:50:43 GMT
access-control-allow-origin: *
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=axsLV6R9U7unztdkKqlA0KUPrdyH2pQGzS3tI609YnerenM8IIgpu5DHYDCKXRW1uPb79mA1Dfn%2B7iks%2BNq4TtPZGwndzG04yHwXMoGDZgxciQ3QegR4XwPGvPQqrAsWIubDbZQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8686a701288663c9-LHR
alt-svc: h3=":443"; ma=86400
|
|
| crrepo.com/extban/280039620/creatives/23427472/b6e72b63f8bd70cc6198ab97180a4511_9418.jpg | 104.21.233.199 | 200 OK | 65 kB |
URL GET HTTP/2crrepo.com/extban/280039620/creatives/23427472/b6e72b63f8bd70cc6198ab97180a4511_9418.jpg IP 104.21.233.199:443
CertificateIssuerGoogle Trust Services LLC Subjectcrrepo.com FingerprintBE:AF:C3:D0:A7:AD:97:AA:05:7E:AC:AD:E7:ED:68:E7:D9:4C:59:77 ValidityTue, 05 Mar 2024 11:07:24 GMT - Mon, 03 Jun 2024 11:07:23 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3 Hashde22642cdaca41f457511c3dcd7edd0b 4b28c3d68096bfd2c30a0e3e2be41e01b08addc1 921afd2f6c4e1d3fc29a64ec718a8febaef1590ec56c0b4bbbf57d1dd8be9206
GET /extban/280039620/creatives/23427472/b6e72b63f8bd70cc6198ab97180a4511_9418.jpg HTTP/1.1
Host: crrepo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://downstudocu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 22 Mar 2024 13:50:43 GMT
content-type: image/jpeg
last-modified: Sun, 06 Mar 2022 12:26:13 GMT
etag: W/"6224a865-2629"
via: 1.1 google
cache-control: max-age=14400
cf-cache-status: HIT
age: 4476
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xSAEy%2FXmhRwBq%2F8svUjZQkQqY2COzZR4%2FASDW9vogG7own%2BRupvXVSBuGDOJur%2BKQbmEbKIV0YApn7hRci2ffmpcC%2BnKlyWqINo5k0EYvQx62kQO%2FQAFq4mK8p3V"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8686a7012888dce7-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pubtrky.com/ut/hb.php?cb=0.3595340698807593&v=1 | 104.21.8.108 | 204 No Content | 0 B |
URL POST HTTP/2pubtrky.com/ut/hb.php?cb=0.3595340698807593&v=1 IP 104.21.8.108:443
CertificateIssuerGoogle Trust Services LLC Subjectpubtrky.com Fingerprint1F:C3:3C:5C:C7:6F:56:DF:E4:18:22:98:6F:C2:B3:96:B2:B4:A6:30 ValidityMon, 18 Mar 2024 09:15:33 GMT - Sun, 16 Jun 2024 09:15:32 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /ut/hb.php?cb=0.3595340698807593&v=1 HTTP/1.1
Host: pubtrky.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=utf-8
Content-Length: 1401
Origin: https://downstudocu.com
DNT: 1
Connection: keep-alive
Referer: https://downstudocu.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Fri, 22 Mar 2024 13:50:43 GMT
access-control-allow-origin: *
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wrghpqk8CY0QGft%2BkJTGM8bbZ%2FU4v13CrTmLHwdg%2Bbdzr5%2BSrKUmlJbGJKRYAVbP4VwQKPuk7GfxnM7O4o4oVbkvVNMCmHBdY3DD%2B9vvK58Zux%2FqUOBZPgEVpUvc%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8686a702a9d1569f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| acscdn.com/script/suv4.js | 172.64.164.27 | 200 OK | 92 kB |
URL GET HTTP/3acscdn.com/script/suv4.js IP 172.64.164.27:443
CertificateIssuerGoogle Trust Services LLC Subjectacscdn.com FingerprintC2:6C:14:F0:34:12:76:91:EB:3A:02:AC:4F:41:CA:11:17:6F:F0:01 ValidityWed, 28 Feb 2024 11:34:54 GMT - Tue, 28 May 2024 11:34:53 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (57883), with LF, NEL line terminators Hash1a2a8630df1ee20e10f8da8c9ed397e7 f85323ca15f1e97d06a65c9a845382eb91c195b7 3f00bbda7d738d2c5cb3ddcbaf2ddf0c8d2dcf71a5faa0e357eca786a9b42c3b
GET /script/suv4.js HTTP/1.1
Host: acscdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://downstudocu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 22 Mar 2024 13:50:43 GMT
content-type: text/javascript
x-guploader-uploadid: ABPtcPpc5-5RV7MBw4gojao3VvXEqWUomTo4AQ97APx4hBN_-E9Esb8UIdbLEOr-1o19LcXlMWY
x-goog-generation: 1710856065105918
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 171993
x-goog-hash: crc32c=aNnZ5w==, md5=GiqGMN8e4g4Q+NqMntOX5w==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Fri, 22 Mar 2024 13:41:25 GMT
cache-control: public, max-age=3600
age: 1654
last-modified: Tue, 19 Mar 2024 13:47:45 GMT
etag: W/"1a2a8630df1ee20e10f8da8c9ed397e7"
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fa90WpaCIpg%2B1k1349XBwyBDkRJ2RNMc%2F%2BrEsZGtoux%2Fj%2BDMzo9SBmyamqfP9FUNy9V6FgxGHU8B%2Bpdn6zu4G05mR12Y4ryzOYUCUWlBDO2lUavMwsLu2WXWQquy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8686a70128e1652f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| onclickalgo.com/script/i.php?t=1&c=23427468&stamat=m%257C%252C%252Cg2f79iI-tGU3Bp_GH0dEdHP3xP.89c%252ChlHCze609gZh8dZm62Kk_e031ro5qwi3Xbk1FgkakD2CVAWUQEEi-ff5EWn4f0Ecglt5ZNqcIUdwMTS1HIPtslm4GkUiw-AS4_hJerqA5Q8xc8Eudq4gCp9C12FGmbWa2pKbr8vdjQWs4zkuVjlpSCXIlrD1bhCOLASVnf6mLw_Ple04BYftcSfvVgc66RZMwk2d-XRyM43ISwSZPmIrZ_59e9qxA8WCRpx5EJnikZNbmNiU17IuoHmbJtCwfxc73AYq0m4KTHNoDAPlzy-slY9MVH_i6L8vIqK_G4Il8SYGXEi1M7O8U5tx8SCPbIFoMxUMrDGz2EbLRn1VSRxJJIw9lIuAZ2_vN2p2O3En4mF4XWOMBB9YfG3MZz3FLVedjxjF1LINDmF_1vBJUHPTKM0fXhN8sLWwQCHAYfnajul0W9y_Auocdo0jtfWcD4oM6wQFT77e7hXBWJtVJSs49HkWqrAK2dqZHaJKqs2lX0n6SsjTmKkbqQpvXPpIvXtpWPPvd2RdK_FdrHFMnVqSGQ8dmY1gLPTO2UhenIo2SLq65ARJ-mQ3gEifmWeAyowDRrmm3eMgByPjLEwYAuRoiH7CQbxhhGT_C0zQ2vckknbl5DSDMy3iMc25e9i5tf98jQou4L-l-5InO_Hh1MqJc1n6Ife0j4xLUnbUbfqr5Nr871LL6WBglziJuN04oOfP-I2Gr0EoJ8kbpbIhPJ885oxsq36fYylraQABbYyB41SXasaYLws1doc3WPW2wBjVPq3EHSoic8nODUUeCDVmSg%252C%252C&track=0,1,2,3 | 172.67.220.206 | 204 No Content | 0 B |
URL GET HTTP/3onclickalgo.com/script/i.php?t=1&c=23427468&stamat=m%257C%252C%252Cg2f79iI-tGU3Bp_GH0dEdHP3xP.89c%252ChlHCze609gZh8dZm62Kk_e031ro5qwi3Xbk1FgkakD2CVAWUQEEi-ff5EWn4f0Ecglt5ZNqcIUdwMTS1HIPtslm4GkUiw-AS4_hJerqA5Q8xc8Eudq4gCp9C12FGmbWa2pKbr8vdjQWs4zkuVjlpSCXIlrD1bhCOLASVnf6mLw_Ple04BYftcSfvVgc66RZMwk2d-XRyM43ISwSZPmIrZ_59e9qxA8WCRpx5EJnikZNbmNiU17IuoHmbJtCwfxc73AYq0m4KTHNoDAPlzy-slY9MVH_i6L8vIqK_G4Il8SYGXEi1M7O8U5tx8SCPbIFoMxUMrDGz2EbLRn1VSRxJJIw9lIuAZ2_vN2p2O3En4mF4XWOMBB9YfG3MZz3FLVedjxjF1LINDmF_1vBJUHPTKM0fXhN8sLWwQCHAYfnajul0W9y_Auocdo0jtfWcD4oM6wQFT77e7hXBWJtVJSs49HkWqrAK2dqZHaJKqs2lX0n6SsjTmKkbqQpvXPpIvXtpWPPvd2RdK_FdrHFMnVqSGQ8dmY1gLPTO2UhenIo2SLq65ARJ-mQ3gEifmWeAyowDRrmm3eMgByPjLEwYAuRoiH7CQbxhhGT_C0zQ2vckknbl5DSDMy3iMc25e9i5tf98jQou4L-l-5InO_Hh1MqJc1n6Ife0j4xLUnbUbfqr5Nr871LL6WBglziJuN04oOfP-I2Gr0EoJ8kbpbIhPJ885oxsq36fYylraQABbYyB41SXasaYLws1doc3WPW2wBjVPq3EHSoic8nODUUeCDVmSg%252C%252C&track=0,1,2,3 IP 172.67.220.206:443
CertificateIssuerLet's Encrypt Subjectonclickalgo.com FingerprintDA:7A:C4:E0:DE:F6:EB:E2:63:D8:DC:E9:97:69:EF:7E:57:DD:D2:5D ValidityWed, 31 Jan 2024 23:19:36 GMT - Tue, 30 Apr 2024 23:19:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /script/i.php?t=1&c=23427468&stamat=m%257C%252C%252Cg2f79iI-tGU3Bp_GH0dEdHP3xP.89c%252ChlHCze609gZh8dZm62Kk_e031ro5qwi3Xbk1FgkakD2CVAWUQEEi-ff5EWn4f0Ecglt5ZNqcIUdwMTS1HIPtslm4GkUiw-AS4_hJerqA5Q8xc8Eudq4gCp9C12FGmbWa2pKbr8vdjQWs4zkuVjlpSCXIlrD1bhCOLASVnf6mLw_Ple04BYftcSfvVgc66RZMwk2d-XRyM43ISwSZPmIrZ_59e9qxA8WCRpx5EJnikZNbmNiU17IuoHmbJtCwfxc73AYq0m4KTHNoDAPlzy-slY9MVH_i6L8vIqK_G4Il8SYGXEi1M7O8U5tx8SCPbIFoMxUMrDGz2EbLRn1VSRxJJIw9lIuAZ2_vN2p2O3En4mF4XWOMBB9YfG3MZz3FLVedjxjF1LINDmF_1vBJUHPTKM0fXhN8sLWwQCHAYfnajul0W9y_Auocdo0jtfWcD4oM6wQFT77e7hXBWJtVJSs49HkWqrAK2dqZHaJKqs2lX0n6SsjTmKkbqQpvXPpIvXtpWPPvd2RdK_FdrHFMnVqSGQ8dmY1gLPTO2UhenIo2SLq65ARJ-mQ3gEifmWeAyowDRrmm3eMgByPjLEwYAuRoiH7CQbxhhGT_C0zQ2vckknbl5DSDMy3iMc25e9i5tf98jQou4L-l-5InO_Hh1MqJc1n6Ife0j4xLUnbUbfqr5Nr871LL6WBglziJuN04oOfP-I2Gr0EoJ8kbpbIhPJ885oxsq36fYylraQABbYyB41SXasaYLws1doc3WPW2wBjVPq3EHSoic8nODUUeCDVmSg%252C%252C&track=0,1,2,3 HTTP/1.1
Host: onclickalgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Fri, 22 Mar 2024 13:50:44 GMT
access-control-allow-origin: *
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HNQ%2FPPP0fAHZa58IurxTpGf3c4GyZJ3J4kDopgX4z4W7iUSE37h%2BRurOAwrz3HFtWAdzJ6yEyPttQzQL3NlSjPxg%2BXadnaaNKSCeVxYpSyaOD2sEG5AodtTvK4zo%2FLEChrw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8686a7071fac7129-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdnativ.com/extban/247895220/creatives/23426602/f635ee5b57730d49c680d3e693f8da44_6506.jpg | 172.67.129.231 | 200 OK | 67 kB |
URL GET HTTP/2cdnativ.com/extban/247895220/creatives/23426602/f635ee5b57730d49c680d3e693f8da44_6506.jpg IP 172.67.129.231:443
CertificateIssuerLet's Encrypt Subjectcdnativ.com Fingerprint27:E2:82:29:DD:76:A5:CE:F8:F0:0C:16:5C:59:B0:DB:39:36:94:65 ValiditySun, 25 Feb 2024 13:05:07 GMT - Sat, 25 May 2024 13:05:06 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x500, components 3 Hash57f958f8a8e67d9b158910231029de8e ad5d6ace995e468571f66ea18cd660bfc90c9fcf 0dfb55a4be4f08f0747ada3486381157fdf44542caa5809f624beb84247d1469
GET /extban/247895220/creatives/23426602/f635ee5b57730d49c680d3e693f8da44_6506.jpg HTTP/1.1
Host: cdnativ.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 22 Mar 2024 13:50:44 GMT
content-type: image/jpeg
last-modified: Thu, 03 Mar 2022 17:09:04 GMT
etag: W/"6220f630-ee12"
via: 1.1 google
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XgLxGuUY6aK2ViVrvCgfdb86PLI2z03IPoketk%2Fw015L0jLnYB1K4MAcNsjFfaJD3j0070sLIpKjtsq%2BKVy1qzdlVDMbw0qkUx%2FUD%2Fi5cCBB%2FvL1%2Fx3h10XNhwgwAg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8686a706fe341c12-OSL
alt-svc: h3=":443"; ma=86400
|
|
| acscdn.com/script/ut.js?cb=1711115443489 | 172.64.164.27 | 200 OK | 110 kB |
URL GET HTTP/3acscdn.com/script/ut.js?cb=1711115443489 IP 172.64.164.27:443
CertificateIssuerGoogle Trust Services LLC Subjectacscdn.com FingerprintC2:6C:14:F0:34:12:76:91:EB:3A:02:AC:4F:41:CA:11:17:6F:F0:01 ValidityWed, 28 Feb 2024 11:34:54 GMT - Tue, 28 May 2024 11:34:53 GMT
Size110 kB (110498 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /script/ut.js?cb=1711115443489 HTTP/1.1
Host: acscdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://downstudocu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 22 Mar 2024 13:50:43 GMT
content-type: text/javascript
x-guploader-uploadid: ABPtcPopaMIK5Py_XWoWnKR1L2Zper9QoplGgcf4d6HlQh4oSB-ED0WwlnBw8fCfj_Ig1v2QXW_0SX-RLQ
x-goog-generation: 1709821201050042
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 110498
x-goog-hash: crc32c=iNCt1A==, md5=A/kZP4/w6TteAP+E44pqzA==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Fri, 22 Mar 2024 13:46:12 GMT
cache-control: public, max-age=3600
age: 1922
last-modified: Thu, 07 Mar 2024 14:20:01 GMT
etag: W/"03f9193f8ff0e93b5e00ff84e38a6acc"
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y57avhGQe3rxwRLhYzWIyDNkc1m%2BYgR%2BVRlEUoRMOyvasnOP3AAA5hvR%2FppOL%2F4P1lTjg6d4YqNiUEO0bPS2cCn3g267PAexQ00%2FCGhKUk%2Bf2ULtPu4WlIKVx1Dj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8686a701d9ce652f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| onclickalgo.com/script/native.php?nwpsv=1&r=6264838&cbrandom=0.23437239991714587&cbWidth=1280&cbHeight=1024&cbtitle=DOWNSTUDOCU.COM%20-%20Free%20Studocu%20downloader&cbref=&cbdescription=DownStudocu.com%20is%20a%20Studocu%20downloader%20online%20service%20allow%20user%20to%20get%20the%20documents%20from%20studocu%20instantly.&cbkeywords=&cbiframe=0&&callback=jsonp118335 | 0.0.0.0 | | 0 B |
URL GET onclickalgo.com/script/native.php?nwpsv=1&r=6264838&cbrandom=0.23437239991714587&cbWidth=1280&cbHeight=1024&cbtitle=DOWNSTUDOCU.COM%20-%20Free%20Studocu%20downloader&cbref=&cbdescription=DownStudocu.com%20is%20a%20Studocu%20downloader%20online%20service%20allow%20user%20to%20get%20the%20documents%20from%20studocu%20instantly.&cbkeywords=&cbiframe=0&&callback=jsonp118335 IP 0.0.0.0:0
CertificateIssuerLet's Encrypt Subjectonclickalgo.com FingerprintDA:7A:C4:E0:DE:F6:EB:E2:63:D8:DC:E9:97:69:EF:7E:57:DD:D2:5D ValidityWed, 31 Jan 2024 23:19:36 GMT - Tue, 30 Apr 2024 23:19:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /script/native.php?nwpsv=1&r=6264838&cbrandom=0.23437239991714587&cbWidth=1280&cbHeight=1024&cbtitle=DOWNSTUDOCU.COM%20-%20Free%20Studocu%20downloader&cbref=&cbdescription=DownStudocu.com%20is%20a%20Studocu%20downloader%20online%20service%20allow%20user%20to%20get%20the%20documents%20from%20studocu%20instantly.&cbkeywords=&cbiframe=0&&callback=jsonp118335 HTTP/1.1
Host: onclickalgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://downstudocu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 22 Mar 2024 13:50:43 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
link: <//onclickalgo.com>; rel=dns-prefetch,<//onclickalgo.com>; rel=preconnect,<//cdnativ.com>; rel=dns-prefetch,<//cdnativ.com>; rel=preconnect
access-control-allow-headers: Content-Type
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gJEIqyfV1ZW1iYMVf41SEeuOiAQvNs7beSUkFbXaZyj5HynDNGt0zJKjn1RyaCUjpxMhZBd%2F7oBECBR7CtOZDnDwFU0mtGaamuCG8s51dSeHeZJ29UlKEmIV2FaTHxTN6I4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8686a702fa2d7130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnativ.com/extban/385663020/creatives/23778376/ba173f2422913f84bede9265a5f31582_8469.png | 172.67.129.231 | 200 OK | 376 kB |
URL GET HTTP/2cdnativ.com/extban/385663020/creatives/23778376/ba173f2422913f84bede9265a5f31582_8469.png IP 172.67.129.231:443
CertificateIssuerLet's Encrypt Subjectcdnativ.com Fingerprint27:E2:82:29:DD:76:A5:CE:F8:F0:0C:16:5C:59:B0:DB:39:36:94:65 ValiditySun, 25 Feb 2024 13:05:07 GMT - Sat, 25 May 2024 13:05:06 GMT
File typePNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced Size376 kB (376130 bytes) Hashba173f2422913f84bede9265a5f31582 716ccc89cf459a3b963e9753fbdfaa08d2726fd0 5aeeb344d7c36769d0ffbca4c6cfbf3893c20cc04c9000c0f4701ddf7b9b6476
GET /extban/385663020/creatives/23778376/ba173f2422913f84bede9265a5f31582_8469.png HTTP/1.1
Host: cdnativ.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://downstudocu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 22 Mar 2024 13:50:44 GMT
content-type: image/png
last-modified: Wed, 14 Feb 2024 09:42:39 GMT
etag: W/"65cc8b0f-5bd42"
via: 1.1 google
cache-control: max-age=14400
cf-cache-status: HIT
age: 1496
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HuwFcnvIVGU1PCYLm9q2V1D1%2FJtRY0FhkeHRw52baBmOnEMU8pEVsO2vPjrVGUv9LXdLGtlgoKnRzjWRZgM3raGnHnYo2NQDEec4g9zya99YzqmiUphFwFwVenCt%2Bw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8686a7052f0b56be-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnativ.com/extban/359456820/creatives/23703262/92c64f74b40bf892385cc74e64c5c44d_5883.png | 172.67.129.231 | 200 OK | 88 kB |
URL GET HTTP/2cdnativ.com/extban/359456820/creatives/23703262/92c64f74b40bf892385cc74e64c5c44d_5883.png IP 172.67.129.231:443
CertificateIssuerLet's Encrypt Subjectcdnativ.com Fingerprint27:E2:82:29:DD:76:A5:CE:F8:F0:0C:16:5C:59:B0:DB:39:36:94:65 ValiditySun, 25 Feb 2024 13:05:07 GMT - Sat, 25 May 2024 13:05:06 GMT
File typePNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced Hash92c64f74b40bf892385cc74e64c5c44d 3ae8f850e4b3c608859508fd4df3a605fa71bebd 562d6a25115dfdb95c284fde6bc863ae80bf6aa3e4b65230b6b5de7b33faff99
GET /extban/359456820/creatives/23703262/92c64f74b40bf892385cc74e64c5c44d_5883.png HTTP/1.1
Host: cdnativ.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://downstudocu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 22 Mar 2024 13:50:44 GMT
content-type: image/png
last-modified: Wed, 13 Sep 2023 05:05:11 GMT
etag: W/"65014307-158a2"
via: 1.1 google
cache-control: max-age=14400
cf-cache-status: HIT
age: 306
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z9hgyS6OciBI754Yd8OYl7Af6W85RvaLjKRf8sc7%2Bj9AReRLvMTFb%2FN0HavLbKzq5tClDR3EwbdX92DK4Zbq7jOt%2FdyMheeytFut8jUiEZoL1%2FE%2BKHqNa6leF98IFw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8686a7052f0e56be-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| geniusdexchange.com/a/display.php?r=6264846 | 172.67.174.214 | 302 Found | 113 kB |
URL GET HTTP/2geniusdexchange.com/a/display.php?r=6264846 IP 172.67.174.214:443
CertificateIssuerLet's Encrypt Subjectgeniusdexchange.com FingerprintB2:0C:BE:10:2B:DF:55:07:99:E0:4E:D8:72:74:1B:6D:9C:C0:9E:2D ValidityWed, 31 Jan 2024 10:48:28 GMT - Tue, 30 Apr 2024 10:48:27 GMT
Size113 kB (113017 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /a/display.php?r=6264846 HTTP/1.1
Host: geniusdexchange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://downstudocu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 22 Mar 2024 13:50:42 GMT
content-type: text/html; charset=utf-8
location: https://velocecdn.com/script/banner.js
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9%2Btp3dey1gr5ICBkGHks5CFgwZtQBqaixA2KdqYQuNYZw%2BrhQj04JufFnnEpSqF7keKxx4mbgFy6zbFYSYrMuwT6kPkt8MUrKqA46MPOv1I08Cvpfo99LX3aaKT%2BATvaTmljNS48"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8686a6fd689e56c1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| superonclick.com/script/native_render.js | 104.21.41.60 | 200 OK | 4.3 kB |
URL GET HTTP/2superonclick.com/script/native_render.js IP 104.21.41.60:443
CertificateIssuerGoogle Trust Services LLC Subjectsuperonclick.com FingerprintCD:77:E4:5C:1D:40:47:A9:30:C8:EF:83:64:1E:AB:FF:17:B0:63:28 ValidityWed, 31 Jan 2024 21:56:59 GMT - Tue, 30 Apr 2024 21:56:58 GMT
File typeJavaScript source, ASCII text, with very long lines (4302), with no line terminators Hashe6a0e9d7c59dd6177052c848b8e5ee22 a5899a8b6ca1c9f1b4f307b305d417ef473038db f63b4728b0cbf0880a12c2426864acc70702afd82a48c85b8b68120d88059ad4
GET /script/native_render.js HTTP/1.1
Host: superonclick.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://downstudocu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 22 Mar 2024 13:50:43 GMT
content-type: application/javascript
x-guploader-uploadid: ABPtcPrNgM9uhNU1jqX1s8QOtXwt4qKwVkD85k7ZbYaTBVYB7B-oIsPOuphafQ9-jCFlKqWPZ0zWuQ8BuxnY4W36KHHVZQ
x-goog-generation: 1550052950916101
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 4285
x-goog-hash: crc32c=rXethw==, md5=i4AdaMb2P574qaeqSEucdQ==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Fri, 22 Mar 2024 14:03:10 GMT
cache-control: public, max-age=14400
age: 106
last-modified: Wed, 13 Feb 2019 10:15:50 GMT
etag: W/"8b801d68c6f63f9ef8a9a7aa484b9c75"
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D3l%2FuTBanIIeZKr%2BFIO7berMAFWaGqPfBeGzfGzdQ1dWYXY8lEK2j9mQviPTTGpx0b12tBP4k560hbqNQWTDybJCfpOt5hUB6x%2FIa9jyA65XOTR%2FwPNUMhoHK2e5kcL3hcGT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8686a6ffcc06712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| crrepo.com/extban/280030620/creatives/23426584/5b381512b5809bad86167841f03e6033_7974.jpg | 104.21.233.199 | 200 OK | 84 kB |
URL GET HTTP/2crrepo.com/extban/280030620/creatives/23426584/5b381512b5809bad86167841f03e6033_7974.jpg IP 104.21.233.199:443
CertificateIssuerGoogle Trust Services LLC Subjectcrrepo.com FingerprintBE:AF:C3:D0:A7:AD:97:AA:05:7E:AC:AD:E7:ED:68:E7:D9:4C:59:77 ValidityTue, 05 Mar 2024 11:07:24 GMT - Mon, 03 Jun 2024 11:07:23 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 728x90, components 3 Hash5b381512b5809bad86167841f03e6033 0d3d1a5a43650e334f52d7b336e0a37cfb193147 b31fac7448fcdc8240d35a73038aee8bc95fd2f1a2b0f54127af85a9c2c8eeaa
GET /extban/280030620/creatives/23426584/5b381512b5809bad86167841f03e6033_7974.jpg HTTP/1.1
Host: crrepo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://downstudocu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 22 Mar 2024 13:50:43 GMT
content-type: image/jpeg
last-modified: Thu, 03 Mar 2022 16:47:20 GMT
etag: W/"6220f118-14a2d"
via: 1.1 google
cache-control: max-age=14400
cf-cache-status: HIT
age: 6375
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aZWCzF7yugBI4%2BYvsHS%2BaCqNK8pKfOXy4%2BQG3VCNwgPuloxqwJt6LtxOxKUZEyyUmcq1D42I1NTl7Jn0qOF%2BTTpPOiXVO8G9ZZNJxIh0kTt%2FAJXeC1eiIlp24wOH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8686a7010863dce7-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| acscdn.com/script/suv5.js | 172.64.164.27 | 200 OK | 126 kB |
URL GET HTTP/3acscdn.com/script/suv5.js IP 172.64.164.27:443
CertificateIssuerGoogle Trust Services LLC Subjectacscdn.com FingerprintC2:6C:14:F0:34:12:76:91:EB:3A:02:AC:4F:41:CA:11:17:6F:F0:01 ValidityWed, 28 Feb 2024 11:34:54 GMT - Tue, 28 May 2024 11:34:53 GMT
Size126 kB (125699 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /script/suv5.js HTTP/1.1
Host: acscdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://downstudocu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 22 Mar 2024 13:50:43 GMT
content-type: text/javascript
x-guploader-uploadid: ABPtcPoV_QTekmi35yx25swL9FHi60OPGR7O6HLuaBfl-iGZg6FACd7W_N5N3E-X7qimwP3YQGfxZVZ1yw
x-goog-generation: 1710856078595635
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 125699
x-goog-hash: crc32c=hFcaoA==, md5=1xMlmy6D429xyHTN7BpYoQ==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Fri, 22 Mar 2024 13:36:39 GMT
cache-control: public, max-age=3600
age: 1358
last-modified: Tue, 19 Mar 2024 13:47:58 GMT
etag: W/"d713259b2e83e36f71c874cdec1a58a1"
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uYcIOGiT6vxA2dIt3rFyJiXp%2BLEDmkGukpczlfjgEWW2fA4%2B7yD69jVFbO90wt89rOuai4IblHcAXuycIO3%2BQ%2FLxRxHJ22R78pF%2Fys07VB77Aj3hU92IljyAnhpq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8686a701d9cf652f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdnativ.com/extban/280033020/creatives/23427468/a6c50d87607b3c8d881ec5f07e82296e_5239.jpg | 172.67.129.231 | 200 OK | 62 kB |
URL GET HTTP/2cdnativ.com/extban/280033020/creatives/23427468/a6c50d87607b3c8d881ec5f07e82296e_5239.jpg IP 172.67.129.231:443
CertificateIssuerLet's Encrypt Subjectcdnativ.com Fingerprint27:E2:82:29:DD:76:A5:CE:F8:F0:0C:16:5C:59:B0:DB:39:36:94:65 ValiditySun, 25 Feb 2024 13:05:07 GMT - Sat, 25 May 2024 13:05:06 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x500, components 3 Hasha6c50d87607b3c8d881ec5f07e82296e 5b5b6ff9c3707f1937bd04ad1d2bf106770a4292 cdd39a076c9b5fe061e5a51a06af8a5146da67fc930cc9c061cffd2aff2e6fa2
GET /extban/280033020/creatives/23427468/a6c50d87607b3c8d881ec5f07e82296e_5239.jpg HTTP/1.1
Host: cdnativ.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://downstudocu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 22 Mar 2024 13:50:44 GMT
content-type: image/jpeg
last-modified: Sun, 06 Mar 2022 12:19:36 GMT
etag: W/"6224a6d8-f3d5"
via: 1.1 google
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HrUe8rxHxVrHHTR6tjlH%2FhXzTV89QF4KxdPhe4KUSQ%2FCJlZFAPpco3uRDqrz%2BzgVdAq5qpHLBonlJgZ3Xq%2FapkUEraMleTcKbW1dq0QHStUaf92gHfaM2nH%2FoOcYNg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8686a7051ef256be-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| downstudocu.com/assets/css/bootstrap.min.css | 172.67.190.55 | 200 OK | 167 kB |
URL GET HTTP/3downstudocu.com/assets/css/bootstrap.min.css IP 172.67.190.55:443
CertificateIssuerGoogle Trust Services LLC Subjectdownstudocu.com Fingerprint2D:92:7D:DA:6E:9D:14:9E:E1:B7:23:02:B2:04:57:FC:47:07:40:4D ValidityThu, 08 Feb 2024 13:55:45 GMT - Wed, 08 May 2024 13:55:44 GMT
File typeASCII text, with very long lines (65184) Size167 kB (166995 bytes) Hash22f429a09e4df21a76606bb9abf6043d 6fd61e8119720e1117668b37f4e61e51be3ee12b 4ad19d5d7668eb40975d9ff8f9335571c3a03dc39278b0aadd97f39979db40cf
GET /assets/css/bootstrap.min.css HTTP/1.1
Host: downstudocu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://downstudocu.com/
Cookie: downstudocusess=s05hfs7t6n0hkkjcmiji1kbv04
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 22 Mar 2024 13:50:42 GMT
content-type: text/css
last-modified: Sat, 31 Oct 2020 00:27:46 GMT
vary: Accept-Encoding
etag: W/"5f9caf82-28c53"
expires: Tue, 09 Apr 2024 09:03:43 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
cf-cache-status: HIT
age: 1054401
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UB8DO9c4DzzRVQfTWn5VcPwcOnJFOgp9203oRIICy5MYVPcKQgjKOKXYTrmt5pB4pLJh%2F3yCnyXcbwhK9%2FIldnNmiRstHHF7DAlB3gE7gmSuSbEDyYB6FUYXzyTDy3su%2FEg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8686a6fb4c695685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css2?family=Source+Sans+Pro:ital,wght@0,300;0,400;0,700;1,400&display=swap | 142.250.74.106 | 200 OK | 10 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Source+Sans+Pro:ital,wght@0,300;0,400;0,700;1,400&display=swap IP 142.250.74.106:443
CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint9E:E7:D6:4D:90:F3:03:3F:5B:5D:E8:16:08:EC:F1:23:5C:22:AF:2F ValidityMon, 19 Feb 2024 08:18:43 GMT - Mon, 13 May 2024 08:18:42 GMT
Hash00ce15625805269c6ff45f76894336f8 2ba58eb576f233c14a6a7db232a476a5c29bf44f 9aa010d5ff27ab33088fd01ca46f63788ba20561454f8a192d8be2fa8b8105ca
GET /css2?family=Source+Sans+Pro:ital,wght@0,300;0,400;0,700;1,400&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://downstudocu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 22 Mar 2024 13:50:42 GMT
date: Fri, 22 Mar 2024 13:50:42 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| downstudocu.com/android-icon-192x192.png | 172.67.190.55 | 200 OK | 15 kB |
URL GET HTTP/3downstudocu.com/android-icon-192x192.png IP 172.67.190.55:443
CertificateIssuerGoogle Trust Services LLC Subjectdownstudocu.com Fingerprint2D:92:7D:DA:6E:9D:14:9E:E1:B7:23:02:B2:04:57:FC:47:07:40:4D ValidityThu, 08 Feb 2024 13:55:45 GMT - Wed, 08 May 2024 13:55:44 GMT
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced Hashf2294e51784deb608902690ca767cf88 b1dbae75d4d25dd111d5f4ecbb9b879c04ca2efd b6edfb737d3d8ec5fea9f72eba2a7485718aaedc4528b66f6e000e9e16615e88
GET /android-icon-192x192.png HTTP/1.1
Host: downstudocu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://downstudocu.com/
Cookie: downstudocusess=s05hfs7t6n0hkkjcmiji1kbv04; _ga_62GVTHNBRD=GS1.1.1711115443.1.0.1711115443.0.0.0; _ga=GA1.1.1249018759.1711115443
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 22 Mar 2024 13:50:43 GMT
content-type: image/png
content-length: 14608
last-modified: Sun, 03 Jan 2021 11:16:10 GMT
etag: "5ff1a77a-3910"
expires: Tue, 09 Apr 2024 09:04:15 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
cf-cache-status: HIT
age: 1054370
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KZ7bTtFc5QNb9Wn6x1FrN0c0MZJjuqkydRXv9Sn0O3201b%2FKUvABMEfWFlLm4iZX%2FKtqJQaLvmIJbx%2BjqcvTxyQeOpB3HuwEdBaRL4AvjLH%2F7RR7xcnhkxHKvMY5mFkQ9hk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8686a7022e925685-OSL
alt-svc: h3=":443"; ma=86400
|
|
| downstudocu.com/favicon-16x16.png | 172.67.190.55 | 200 OK | 1.5 kB |
URL GET HTTP/3downstudocu.com/favicon-16x16.png IP 172.67.190.55:443
CertificateIssuerGoogle Trust Services LLC Subjectdownstudocu.com Fingerprint2D:92:7D:DA:6E:9D:14:9E:E1:B7:23:02:B2:04:57:FC:47:07:40:4D ValidityThu, 08 Feb 2024 13:55:45 GMT - Wed, 08 May 2024 13:55:44 GMT
File typePNG image data, 16 x 16, 8-bit colormap, non-interlaced Hash9e04892c5f2c0ae369413a9777302e96 9d0c66ab452e04973fb1730979434515ac4f48e9 b1e29c0b9fb80cc752e70d5519e372685d9a0ce607ba8bcebe13b2aa6f734a8d
GET /favicon-16x16.png HTTP/1.1
Host: downstudocu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://downstudocu.com/
Cookie: downstudocusess=s05hfs7t6n0hkkjcmiji1kbv04; _ga_62GVTHNBRD=GS1.1.1711115443.1.0.1711115443.0.0.0; _ga=GA1.1.1249018759.1711115443
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 22 Mar 2024 13:50:44 GMT
content-type: image/png
content-length: 1510
last-modified: Sun, 03 Jan 2021 11:16:10 GMT
etag: "5ff1a77a-5e6"
expires: Sun, 21 Apr 2024 13:57:09 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4SkrzZYwN8SylEgKWXivw%2BVrEvN9wuP2ce0tjORsrgGIcy5ltGmypNvOwhe9feyXPBRL4FF3AqPagE3d%2BAFphWM8GQCtPjNypurh4jE5yNZnfE0caqvjyXjSxSvOgfvITUU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8686a7022e955685-OSL
alt-svc: h3=":443"; ma=86400
|
|
| superonclick.com/script/style.js | 104.21.41.60 | 200 OK | 41 kB |
URL GET HTTP/3superonclick.com/script/style.js IP 104.21.41.60:443
CertificateIssuerGoogle Trust Services LLC Subjectsuperonclick.com FingerprintCD:77:E4:5C:1D:40:47:A9:30:C8:EF:83:64:1E:AB:FF:17:B0:63:28 ValidityWed, 31 Jan 2024 21:56:59 GMT - Tue, 30 Apr 2024 21:56:58 GMT
File typeJavaScript source, ASCII text, with very long lines (41251) Hashf6f9c433637f7abffaf0eb918b83874c b2fe86ef85e729459425dcbfa683682188fca3ef 07e8d6ea069f651d48ad47731cce6d24417176b3a353554f40fe2d5f8b81afb1
GET /script/style.js HTTP/1.1
Host: superonclick.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://downstudocu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 22 Mar 2024 13:50:43 GMT
content-type: text/javascript
x-guploader-uploadid: ABPtcPrqWB3jkKwZl3pEznMOFVp20V3dD0q0dtKIbBKytb9pEwt7qi2zqKEyI27suBJzI4QXDIlas0zAnrEw3CrT3mGJnw
x-goog-generation: 1570691734888336
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 41280
x-goog-hash: crc32c=r+9kWg==, md5=9vnEM2N/er/68OuRi4OHTA==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Fri, 22 Mar 2024 13:48:17 GMT
cache-control: public, max-age=14400
age: 1495
last-modified: Thu, 10 Oct 2019 07:15:34 GMT
etag: W/"f6f9c433637f7abffaf0eb918b83874c"
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7VsMKK2zk5B7cVqEaOBSdjQGB%2Ftmu4qIT%2BYTuDaWQSX2WhvYYMMo7Dw8SUNUbGCDQLsquatcqi5mmeM%2BtKzROspAIFjc0n4k6P63yDekMEOpuxDjxJbGKpKt7kx0rL10d4IJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8686a704aa36b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdnativ.com/extban/280033020/creatives/23427468/a6c50d87607b3c8d881ec5f07e82296e_5239.jpg | 172.67.129.231 | 200 OK | 62 kB |
URL GET HTTP/3cdnativ.com/extban/280033020/creatives/23427468/a6c50d87607b3c8d881ec5f07e82296e_5239.jpg IP 172.67.129.231:443
CertificateIssuerLet's Encrypt Subjectcdnativ.com Fingerprint27:E2:82:29:DD:76:A5:CE:F8:F0:0C:16:5C:59:B0:DB:39:36:94:65 ValiditySun, 25 Feb 2024 13:05:07 GMT - Sat, 25 May 2024 13:05:06 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x500, components 3 Hasha6c50d87607b3c8d881ec5f07e82296e 5b5b6ff9c3707f1937bd04ad1d2bf106770a4292 cdd39a076c9b5fe061e5a51a06af8a5146da67fc930cc9c061cffd2aff2e6fa2
GET /extban/280033020/creatives/23427468/a6c50d87607b3c8d881ec5f07e82296e_5239.jpg HTTP/1.1
Host: cdnativ.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 22 Mar 2024 13:50:44 GMT
content-type: image/jpeg
last-modified: Sun, 06 Mar 2022 12:19:36 GMT
etag: W/"6224a6d8-f3d5"
via: 1.1 google
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UxvOa%2BnTaxfqFqnLywJbh3MBP732TDGuuRFTxZnAtjAPZIveDgXRr0MJVSzaSpgpg8BxxqiHjauCMX2tDhaUcdIuuBJABG6weDGazYi%2BmZyKL25HGXLr67z00K1qeA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8686a706fe321c12-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ctrtrk.com/ut/ctr.php | 172.64.96.8 | 200 OK | 166 B |
IP 172.64.96.8:443
CertificateIssuerGoogle Trust Services LLC Subjectctrtrk.com Fingerprint58:E6:48:48:DD:46:49:F1:8C:B7:7C:F4:88:92:84:58:15:D5:01:AD ValiditySat, 16 Mar 2024 06:41:09 GMT - Fri, 14 Jun 2024 06:41:08 GMT
File typeHTML document, ASCII text, with no line terminators Hash41b2b0aafa7e895b7a90385e7ce94680 5157bf3b92fbb8f07f9c6469aff04a022bf031c2 dba8aff1743581280a155f0b0d53cf5bc4db6ddd3b5c4168b900ede0a485756e
GET /ut/ctr.php HTTP/1.1
Host: ctrtrk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://downstudocu.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 22 Mar 2024 13:50:43 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
set-cookie: uniqid=90617efd-739b-4665-94fe-b699d7ea7397; path=/; SameSite=None; Secure; Max-Age=1742651443; HttpOnly
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JrDA27FZ74kgwWVytvJb7OuS6iyCnXvm6p5dDp34X2NVSap0ixku2Aqbbq15FWSO%2F61BJAyKX64Mw2Hvz4A0Zbfx7eqsePI3uTkwsDtlPSGyE8SDaUJk%2BrHjHSFf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8686a702c9bb76cf-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnativ.com/extban/385663020/creatives/23778376/ba173f2422913f84bede9265a5f31582_8469.png | 172.67.129.231 | 200 OK | 376 kB |
URL GET HTTP/3cdnativ.com/extban/385663020/creatives/23778376/ba173f2422913f84bede9265a5f31582_8469.png IP 172.67.129.231:443
CertificateIssuerLet's Encrypt Subjectcdnativ.com Fingerprint27:E2:82:29:DD:76:A5:CE:F8:F0:0C:16:5C:59:B0:DB:39:36:94:65 ValiditySun, 25 Feb 2024 13:05:07 GMT - Sat, 25 May 2024 13:05:06 GMT
File typePNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced Size376 kB (376130 bytes) Hashba173f2422913f84bede9265a5f31582 716ccc89cf459a3b963e9753fbdfaa08d2726fd0 5aeeb344d7c36769d0ffbca4c6cfbf3893c20cc04c9000c0f4701ddf7b9b6476
GET /extban/385663020/creatives/23778376/ba173f2422913f84bede9265a5f31582_8469.png HTTP/1.1
Host: cdnativ.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 22 Mar 2024 13:50:44 GMT
content-type: image/png
last-modified: Wed, 14 Feb 2024 09:42:39 GMT
etag: W/"65cc8b0f-5bd42"
via: 1.1 google
cache-control: max-age=14400
cf-cache-status: HIT
age: 1496
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pkQxeDhIDEuRNb3u0CJiqbfIngdMQbGbsHVJd%2Bkj%2BSwws4yJSPJkXkvfSdszfi7xUlyocheyXQbOxu3hAQ4OjFtGJRT%2FRQsXpLE7wHFIQvFDXmlGs8lD1qZZqrYMAw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8686a706fe331c12-OSL
alt-svc: h3=":443"; ma=86400
|
|
| stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css | 104.18.10.207 | 200 OK | 31 kB |
URL GET HTTP/2stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css IP 104.18.10.207:443
CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com FingerprintA8:07:0D:35:4B:FC:72:EA:A2:C8:B5:E7:74:66:B7:F4:72:EE:7E:E3 ValiditySun, 28 Jan 2024 00:16:50 GMT - Sat, 27 Apr 2024 00:16:49 GMT
File typeASCII text, with very long lines (30837) Hash269550530cc127b6aa5a35925a7de6ce 512c7d79033e3028a9be61b540cf1a6870c896f8 799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://downstudocu.com
DNT: 1
Connection: keep-alive
Referer: https://downstudocu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 22 Mar 2024 13:50:42 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"269550530cc127b6aa5a35925a7de6ce"
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 10/31/2023 18:48:06
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 722
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 6c2d5106939af7f6150a2971c699d11c
cdn-cache: HIT
cf-cache-status: HIT
age: 1606603
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8686a6fb9a2056bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| velocecdn.com/script/banner.js | 104.17.173.62 | 200 OK | 113 kB |
URL GET HTTP/2velocecdn.com/script/banner.js IP 104.17.173.62:443
CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint3E:DA:0A:11:FE:2D:7E:B7:92:BD:E9:EA:2F:48:5C:AD:06:FB:0C:5C ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Size113 kB (113017 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /script/banner.js HTTP/1.1
Host: velocecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://downstudocu.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 22 Mar 2024 13:50:42 GMT
content-type: text/javascript
x-guploader-uploadid: ABPtcPrQBm1lSE92t5r6POMtrs2VgX1gD_sZhbBo6NYUjcFDwStAfLT8icX-nPha2YgceXn7gwKqG2ZmQw
x-goog-generation: 1710855621815070
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 113017
x-goog-hash: crc32c=DYCxTA==, md5=Vqx90tgVj37AwEArYAyTQw==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Fri, 22 Mar 2024 17:50:42 GMT
cache-control: public, max-age=14400
last-modified: Tue, 19 Mar 2024 13:40:21 GMT
etag: W/"56ac7dd2d8158f7ec0c0402b600c9343"
cf-cache-status: HIT
age: 2051
vary: Accept-Encoding
server: cloudflare
cf-ray: 8686a6fe8b375694-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| youradexchange.com/script/banner.php?r=6264846&cbpage=https%3A%2F%2Fdownstudocu.com%2F&cbref=&cbdescription=DownStudocu.com%20is%20a%20Studocu%20downloader%20online%20service%20allow%20user%20to%20get%20the%20documents%20from%20studocu%20instantly.&cbkeywords=&cbtitle=DOWNSTUDOCU.COM%20-%20Free%20Studocu%20downloader&srs=7d0fcfb9ea70ad452498df0a5002b223&atv=45.3 | 172.64.170.19 | 200 OK | 1.7 kB |
URL GET HTTP/2youradexchange.com/script/banner.php?r=6264846&cbpage=https%3A%2F%2Fdownstudocu.com%2F&cbref=&cbdescription=DownStudocu.com%20is%20a%20Studocu%20downloader%20online%20service%20allow%20user%20to%20get%20the%20documents%20from%20studocu%20instantly.&cbkeywords=&cbtitle=DOWNSTUDOCU.COM%20-%20Free%20Studocu%20downloader&srs=7d0fcfb9ea70ad452498df0a5002b223&atv=45.3 IP 172.64.170.19:443
CertificateIssuerGoogle Trust Services LLC Subjectyouradexchange.com Fingerprint78:C4:85:0B:1A:9E:A4:A6:23:89:BE:D9:F3:EF:49:D5:88:28:D0:EC ValidityWed, 14 Feb 2024 23:47:53 GMT - Tue, 14 May 2024 23:47:52 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (1791), with no line terminators Hash1bd9b5d931fb3b035751db7189d517cf fe069b147a033588683d6298877d8e52d4649be6 e1e61b02ad79c7fb4f4947cc92196439cf0d2f83c0d700b4db033e7db1312d82
GET /script/banner.php?r=6264846&cbpage=https%3A%2F%2Fdownstudocu.com%2F&cbref=&cbdescription=DownStudocu.com%20is%20a%20Studocu%20downloader%20online%20service%20allow%20user%20to%20get%20the%20documents%20from%20studocu%20instantly.&cbkeywords=&cbtitle=DOWNSTUDOCU.COM%20-%20Free%20Studocu%20downloader&srs=7d0fcfb9ea70ad452498df0a5002b223&atv=45.3 HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://downstudocu.com/
Origin: https://downstudocu.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 22 Mar 2024 13:50:43 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5KKzyul%2B1jNXZuXhUEDtbtQOy6MjFcqGQZtFAxTWMrV%2FEXazMZ1sW8gQtYxFMWu2zMzglKpf2HKgGfFQcNGFe5Z9KSudrPodHOANXiZcLHy3uSZywe9tmzvdQjofhZF%2BE6vQkKc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8686a6ff8dca71a5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| superonclick.com/script/native_server.js | 104.21.41.60 | 200 OK | 9.3 kB |
URL GET HTTP/2superonclick.com/script/native_server.js IP 104.21.41.60:443
CertificateIssuerGoogle Trust Services LLC Subjectsuperonclick.com FingerprintCD:77:E4:5C:1D:40:47:A9:30:C8:EF:83:64:1E:AB:FF:17:B0:63:28 ValidityWed, 31 Jan 2024 21:56:59 GMT - Tue, 30 Apr 2024 21:56:58 GMT
File typeJavaScript source, ASCII text, with very long lines (9264), with no line terminators Hashe69b620c3ea1b7f6e47bad9fb383e473 0ae9768887cdeebb0907bc0367bb6a4c00f1f43d 372bd7dc17d67e23763e2b731839eafb106486f1c1d03707694c4190a1a86a50
GET /script/native_server.js HTTP/1.1
Host: superonclick.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://downstudocu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 22 Mar 2024 13:50:43 GMT
content-type: application/javascript
x-guploader-uploadid: ABPtcPq_1YGU_CpR6TCXk4G8I9zLDrcFxTVFOmBZXv_eNgVj4IYnQM_xTz6VsCweU-s9VWPgADwPgDMe-UQOuS6BmgXiqYNuE8jB
x-goog-generation: 1550052952705094
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 9260
x-goog-hash: crc32c=RAjq/g==, md5=Udh+nr2DH8yragFgeaYHkw==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Fri, 22 Mar 2024 14:03:10 GMT
cache-control: public, max-age=14400
age: 166
last-modified: Wed, 13 Feb 2019 10:15:52 GMT
etag: W/"51d87e9ebd831fccab6a016079a60793"
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OVnepp8%2B%2FrYthuz1hQG%2B9Lr24VccUl9YmqXfCnxkyOq6q3xAGGoF9b0JlIQvDMdN8uw2%2BqdF40xuZHAafLs1ZYndJ9DUFE8BCR9vZq2V8ZO%2FPc6ZaBMN3EPuqFOpHTGq5hC9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8686a6ffcc0c712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| youradexchange.com/script/suurl5.php?r=7533790&cbur=0.05558580666693391&cbiframe=0&cbWidth=1280&cbHeight=1024&cbtitle=DOWNSTUDOCU.COM%20-%20Free%20Studocu%20downloader&cbpage=https%3A%2F%2Fdownstudocu.com%2F&cbref=&cbdescription=DownStudocu.com%20is%20a%20Studocu%20downloader%20online%20service%20allow%20user%20to%20get%20the%20documents%20from%20studocu%20instantly.&cbkeywords=&cbcdn=acscdn.com&ts=1711115443598&srs=7d0fcfb9ea70ad452498df0a5002b223&atv=45.3-sw-suv5&pblcz=6266046 | 172.64.170.19 | 200 OK | 923 B |
URL GET HTTP/3youradexchange.com/script/suurl5.php?r=7533790&cbur=0.05558580666693391&cbiframe=0&cbWidth=1280&cbHeight=1024&cbtitle=DOWNSTUDOCU.COM%20-%20Free%20Studocu%20downloader&cbpage=https%3A%2F%2Fdownstudocu.com%2F&cbref=&cbdescription=DownStudocu.com%20is%20a%20Studocu%20downloader%20online%20service%20allow%20user%20to%20get%20the%20documents%20from%20studocu%20instantly.&cbkeywords=&cbcdn=acscdn.com&ts=1711115443598&srs=7d0fcfb9ea70ad452498df0a5002b223&atv=45.3-sw-suv5&pblcz=6266046 IP 172.64.170.19:443
CertificateIssuerGoogle Trust Services LLC Subjectyouradexchange.com Fingerprint78:C4:85:0B:1A:9E:A4:A6:23:89:BE:D9:F3:EF:49:D5:88:28:D0:EC ValidityWed, 14 Feb 2024 23:47:53 GMT - Tue, 14 May 2024 23:47:52 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (949), with no line terminators Hash85a2553397375dcceb67d9d84b9830e3 7b84c54d3e8b54be0622e966908515072e29b70c b6c9cc9b75379da1a743183103daa4b389f2ac26ce4ce8794941e5c51b910a55
GET /script/suurl5.php?r=7533790&cbur=0.05558580666693391&cbiframe=0&cbWidth=1280&cbHeight=1024&cbtitle=DOWNSTUDOCU.COM%20-%20Free%20Studocu%20downloader&cbpage=https%3A%2F%2Fdownstudocu.com%2F&cbref=&cbdescription=DownStudocu.com%20is%20a%20Studocu%20downloader%20online%20service%20allow%20user%20to%20get%20the%20documents%20from%20studocu%20instantly.&cbkeywords=&cbcdn=acscdn.com&ts=1711115443598&srs=7d0fcfb9ea70ad452498df0a5002b223&atv=45.3-sw-suv5&pblcz=6266046 HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://downstudocu.com/
Origin: https://downstudocu.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 22 Mar 2024 13:50:43 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, POST, OPTIONS
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jdWVrfhJ6TJZbTfDGtL9RPas3Y1hL2syB7Cao6LAbBA96T3B6LynxvVInDfN3kpek5xTTB8MkM23TI9SS1YLDp7N0LehP3sQW5hHK3Ga8aRI0L71vENcPFEwLiK1W264LTzBllA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8686a7028a0963c9-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| | 172.67.190.55 | 200 OK | 12 kB |
URL User Request GET HTTP/2IP 172.67.190.55:443
CertificateIssuerGoogle Trust Services LLC Subjectdownstudocu.com Fingerprint2D:92:7D:DA:6E:9D:14:9E:E1:B7:23:02:B2:04:57:FC:47:07:40:4D ValidityThu, 08 Feb 2024 13:55:45 GMT - Wed, 08 May 2024 13:55:44 GMT
File typeHTML document, ASCII text, with very long lines (4601) Hash2e5350e97f71f0d3d35f0cbda1e645fd 791102279aca5da912c8d9d5847dcb3b81d25977 6000e6f2e4046ebd75e94e17b91e7248e4972fd02e84ec47c54c64e63619b2f6
GET / HTTP/1.1
Host: downstudocu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 22 Mar 2024 13:50:42 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: downstudocusess=s05hfs7t6n0hkkjcmiji1kbv04; path=/; domain=.downstudocu.com
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dnhmBBHOWiETp1YVKlnVrTLOzWM8oeUtFgf552IeXxMRhok0mtEUN6IeSLZyQqWfTy4JkZitBBJnwI8UGLWEkzI2t%2FoRqppDDMj1gUZvjroe53QjEyzy90TCrDfEeAWSeIw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8686a6f76a5b568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| youradexchange.com/script/push.php?r=6266046&ipp=1&mads=2&position=top&atv=45.3&cbpage=https%3A%2F%2Fdownstudocu.com%2F&cbref=&srs=7d0fcfb9ea70ad452498df0a5002b223 | 172.64.170.19 | 200 OK | 1.8 kB |
URL GET HTTP/2youradexchange.com/script/push.php?r=6266046&ipp=1&mads=2&position=top&atv=45.3&cbpage=https%3A%2F%2Fdownstudocu.com%2F&cbref=&srs=7d0fcfb9ea70ad452498df0a5002b223 IP 172.64.170.19:443
CertificateIssuerGoogle Trust Services LLC Subjectyouradexchange.com Fingerprint78:C4:85:0B:1A:9E:A4:A6:23:89:BE:D9:F3:EF:49:D5:88:28:D0:EC ValidityWed, 14 Feb 2024 23:47:53 GMT - Tue, 14 May 2024 23:47:52 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (1880), with no line terminators Hash414d7c7df6cb6c2f429adf16a5266f27 070f7e9852458791c8c58434276b68567d80f93c 1889b0e7474dbe35fa2c6e9d43a515070050eb2b3e826cada107a3a360f9af7c
GET /script/push.php?r=6266046&ipp=1&mads=2&position=top&atv=45.3&cbpage=https%3A%2F%2Fdownstudocu.com%2F&cbref=&srs=7d0fcfb9ea70ad452498df0a5002b223 HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://downstudocu.com/
Origin: https://downstudocu.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 22 Mar 2024 13:50:43 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, POST, OPTIONS
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E8rTk9g28Xw7KvBpNzU6wVRBfL6LJ3Pg6DuW5Ca41i5qhwKr1pnNQgOvYlmbDOxx9%2FBc2hpbDUvWU1VEgAqq9P9ub0KfZvKLA8DxuoUwjlBFJdhGMze1fTFCXyiAz%2Bo5hisGino%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8686a7002e8d71a5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnativ.com/extban/359456820/creatives/23703262/92c64f74b40bf892385cc74e64c5c44d_5883.png | 172.67.129.231 | 200 OK | 88 kB |
URL GET HTTP/3cdnativ.com/extban/359456820/creatives/23703262/92c64f74b40bf892385cc74e64c5c44d_5883.png IP 172.67.129.231:443
CertificateIssuerLet's Encrypt Subjectcdnativ.com Fingerprint27:E2:82:29:DD:76:A5:CE:F8:F0:0C:16:5C:59:B0:DB:39:36:94:65 ValiditySun, 25 Feb 2024 13:05:07 GMT - Sat, 25 May 2024 13:05:06 GMT
File typePNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced Hash92c64f74b40bf892385cc74e64c5c44d 3ae8f850e4b3c608859508fd4df3a605fa71bebd 562d6a25115dfdb95c284fde6bc863ae80bf6aa3e4b65230b6b5de7b33faff99
GET /extban/359456820/creatives/23703262/92c64f74b40bf892385cc74e64c5c44d_5883.png HTTP/1.1
Host: cdnativ.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 22 Mar 2024 13:50:44 GMT
content-type: image/png
last-modified: Wed, 13 Sep 2023 05:05:11 GMT
etag: W/"65014307-158a2"
via: 1.1 google
cache-control: max-age=14400
cf-cache-status: HIT
age: 306
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j9QvjQT%2BTF6TBXv6wwNqFUvha0j85%2FKl2yU1KcKt77Np3LY8eXXZbcObgMQ0gDuvc41By8x3bTbzuujmWtxtkQMdB9Nl3EIePmOUv32eu9HcHtiAxCrnV6C%2FPfGrnQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8686a706fe351c12-OSL
alt-svc: h3=":443"; ma=86400
|
|