| GET ads.ppctrck.com/cid9200W/?p=475250 | 172.67.165.150 | 200 OK | 5.1 kB |
URL GET ads.ppctrck.com/cid9200W/?p=475250 IP 172.67.165.150:443
Requested byhttps://adfoc.us/serve/?id=475250110494838 CertificateIssuerGoogle Trust Services Subjectppctrck.com Fingerprint8C:B2:43:03:7B:05:C3:2C:30:A0:E3:24:58:CA:74:C3:2D:A2:37:AB ValiditySat, 10 May 2025 19:43:29 GMT - Fri, 08 Aug 2025 20:42:09 GMT
File typeHTML document, Unicode text, UTF-8 text Hash18ecadacf2ebf4dd385c0202d8d710b4 bf89fbf589d418c355bd34b6b965eef5da841d56 f8f39854734f1ff832e5c7a0ad53667bc8fe4d779dcf68653cbc7f2106917927
GET /cid9200W/?p=475250 HTTP/1.1
Host: ads.ppctrck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adfoc.us/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Jun 2025 15:34:56 GMT
content-type: text/html; charset=UTF-8
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=cthGVxF6kkHAVb3BSPtHShEWq1BGxiDpj6%2FnxNngFize2rSkrC%2B7k1qTtbdfucM8jjN1NhpW5Req4fLEevTca4K%2BocGCX9sBaJR%2FnEU%3D"}]}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
cf-ray: 9555882a59ccb4f4-OSL
X-Firefox-Spdy: h2
|
|
| GET adfoc.us/favicon.ico | 104.26.6.10 | 200 OK | 15 kB |
IP 104.26.6.10:443
Requested byhttps://adfoc.us/serve/?id=475250110494838 CertificateIssuerGoogle Trust Services Subjectadfoc.us Fingerprint19:8A:E4:FA:8B:16:21:77:FA:DB:07:1F:12:44:DD:44:C6:4B:86:93 ValiditySat, 24 May 2025 01:23:30 GMT - Fri, 22 Aug 2025 02:23:26 GMT
File typeMS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel Hash20e91d9a595d1cb0e2981773e93842f5 ed723b54a0251f72ea3b4a6330e3ccec0c2ddb18 12ed6aa39e93e6d451ed9323512577cc8b8a6e13d5a9000596ecab46ce8a4651
GET /favicon.ico HTTP/1.1
Host: adfoc.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adfoc.us/serve/?id=475250110494838
Cookie: phpsessionname=d4s41giod4h1329nd117pj1se7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Jun 2025 15:34:56 GMT
content-type: image/x-icon
content-encoding: br
last-modified: Mon, 18 Jun 2018 22:54:46 GMT
etag: W/"5b283836-3aee"
strict-transport-security: max-age=0;
cache-control: max-age=3600
cf-cache-status: HIT
age: 4947
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eZCYXPDdoKVeEcOdukpysD0SUOQwCgwBHYY5aMJ4vcz3ckI5x5kY7tgm496oXdEVag1tvy0mQsEMbFjshL4HVkqBiaTtB9q4XfsCNbnpiUZFwGzCf%2F%2BB%2FPt2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9555882aa9030afa-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=6839&min_rtt=559&rtt_var=8212&sent=44&recv=24&lost=0&retrans=0&sent_bytes=27209&recv_bytes=2170&delivery_rate=4850921&cwnd=256&unsent_bytes=0&cid=5df7364c8459ee80&ts=1149&x=0"
X-Firefox-Spdy: h2
|
|
| GET ads.ppctrck.com/cid9200W/img/logo.png | 172.67.165.150 | 200 OK | 12 kB |
URL GET ads.ppctrck.com/cid9200W/img/logo.png IP 172.67.165.150:443
Requested byhttps://ads.ppctrck.com/cid9200W/?p=475250 CertificateIssuerGoogle Trust Services Subjectppctrck.com Fingerprint8C:B2:43:03:7B:05:C3:2C:30:A0:E3:24:58:CA:74:C3:2D:A2:37:AB ValiditySat, 10 May 2025 19:43:29 GMT - Fri, 08 Aug 2025 20:42:09 GMT
File typePNG image data, 279 x 96, 8-bit/color RGBA, non-interlaced Hash840d2649775216826b88a62c52e7c039 cb5542e6198ba2bee1bacaec2fa2ca9761f5b91e e8afa0f35d3995f4c4ec889b30374cab9c4bb4133f512ab8fbe165388a078efc
GET /cid9200W/img/logo.png HTTP/1.1
Host: ads.ppctrck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ads.ppctrck.com/cid9200W/?p=475250
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Jun 2025 15:34:57 GMT
content-type: image/png
content-length: 11671
last-modified: Wed, 24 Jul 2024 21:03:01 GMT
accept-ranges: bytes
server: cloudflare
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
etag:
age: 3723
cache-control: max-age=14400
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Qnq%2FNiBDi0DgNcKlmdSh9Ogy9oDpLV6m9rQVwfGMPEo4qPuyVw3KSpdEcvJTK3nKhvczOD0RoBQ68GIv8FtAG2xmtLPCyME3nid2LxY%3D"}]}
cf-ray: 9555882e8f30b4f4-OSL
X-Firefox-Spdy: h2
|
|
| GET fonts.gstatic.com/s/montserrat/v30/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 | 142.250.74.35 | 200 OK | 38 kB |
URL GET fonts.gstatic.com/s/montserrat/v30/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 IP 142.250.74.35:443
Requested byhttps://ads.ppctrck.com/cid9200W/?p=475250 CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7 ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 37828, version 1.0 Hashe0b05ccbd5b6004a449ac84b466c29ac bcc0e513caae5f6f4164b58eaaa46eaa49622322 1f1ae80aa76018cc05e840a37f41cf860211bbe368971f54957bf8ebb3c863d6
GET /s/montserrat/v30/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ads.ppctrck.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 37828
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 19 Jun 2025 10:52:23 GMT
expires: Fri, 19 Jun 2026 10:52:23 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 28 May 2025 18:51:10 GMT
content-type: font/woff2
age: 535354
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET adfoc.us/images/headers/optifine-host.png | 104.26.6.10 | 200 OK | 5.5 kB |
URL GET adfoc.us/images/headers/optifine-host.png IP 104.26.6.10:443
Requested byhttps://adfoc.us/serve/?id=475250110494838 CertificateIssuerGoogle Trust Services Subjectadfoc.us Fingerprint19:8A:E4:FA:8B:16:21:77:FA:DB:07:1F:12:44:DD:44:C6:4B:86:93 ValiditySat, 24 May 2025 01:23:30 GMT - Fri, 22 Aug 2025 02:23:26 GMT
File typePNG image data, 253 x 38, 8-bit/color RGBA, non-interlaced Hash374bfd30ad9eda69e8aca34240e49266 cd859ef7ab3a2dfb38f25c61e602925b830fecb8 b9408b1820f6ff107135f480256dc3dfb4d0f56a789e7a1096f3efb98cfb5b52
GET /images/headers/optifine-host.png HTTP/1.1
Host: adfoc.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adfoc.us/serve/?id=475250110494838
Cookie: phpsessionname=d4s41giod4h1329nd117pj1se7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Jun 2025 15:34:55 GMT
content-type: image/png
content-length: 5529
cf-ray: 955588270c8f0afa-OSL
last-modified: Tue, 28 Jul 2020 22:30:47 GMT
etag: "5f20a717-1599"
strict-transport-security: max-age=0;
cache-control: max-age=3600
cf-cache-status: HIT
age: 2607
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RbSTaLDc%2FU00f7Avy2nZtz95ELVJKDe24MLYQQWBAJCXfWPZg8zdXsRJK42wGFt6LkN9TVmKs5jKUlRkBp8ozYsNm3eQwF9%2BOsB2wJa8Zf3tSXbwniPahJNW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
server-timing: cfL4;desc="?proto=TCP&rtt=5356&min_rtt=559&rtt_var=6995&sent=19&recv=20&lost=0&retrans=0&sent_bytes=7386&recv_bytes=1865&delivery_rate=4850921&cwnd=256&unsent_bytes=0&cid=5df7364c8459ee80&ts=571&x=0"
X-Firefox-Spdy: h2
|
|
| GET adfoc.us/js/interstitial.js | 104.26.6.10 | 200 OK | 4.1 kB |
URL GET adfoc.us/js/interstitial.js IP 104.26.6.10:443
Requested byhttps://adfoc.us/serve/?id=475250110494838 CertificateIssuerGoogle Trust Services Subjectadfoc.us Fingerprint19:8A:E4:FA:8B:16:21:77:FA:DB:07:1F:12:44:DD:44:C6:4B:86:93 ValiditySat, 24 May 2025 01:23:30 GMT - Fri, 22 Aug 2025 02:23:26 GMT
File typeJavaScript source, ASCII text, with very long lines (861) Hash35dc976941bc10586fbd7189c5bea9bd cdaa19f3ab9ed1b53f6a1acf15f9aebfca3eb913 453e2b757d975f8e689e82a248c0dc0361e3c973de3d6536499f929ca514d1fa
GET /js/interstitial.js HTTP/1.1
Host: adfoc.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adfoc.us/serve/?id=475250110494838
Cookie: phpsessionname=d4s41giod4h1329nd117pj1se7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Jun 2025 15:34:55 GMT
content-type: application/javascript
content-encoding: br
last-modified: Fri, 20 Mar 2020 18:50:40 GMT
etag: W/"5e751080-100e"
strict-transport-security: max-age=0;
cache-control: max-age=3600
cf-cache-status: HIT
age: 6643
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Nl1gc6HEme2WTJSKY7PP1Bqu%2F99dhMf0XNrabOIXlaaSR1%2B88DYIjj4g75nX6wumOdo2wixCMPPguF2hVITdMnqm9TQ4jbiMScJ4IasDnHr%2FibITsU6Oy5y0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 955588271c9f0afa-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=5356&min_rtt=559&rtt_var=6995&sent=39&recv=20&lost=0&retrans=0&sent_bytes=25162&recv_bytes=1865&delivery_rate=4850921&cwnd=256&unsent_bytes=0&cid=5df7364c8459ee80&ts=581&x=0"
X-Firefox-Spdy: h2
|
|
| GET cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/webfonts/fa-solid-900.woff2 | 104.17.25.14 | 200 OK | 125 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/webfonts/fa-solid-900.woff2 IP 104.17.25.14:443
Requested byhttps://ads.ppctrck.com/cid9200W/?p=475250 CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77 ValidityThu, 22 May 2025 14:38:44 GMT - Wed, 20 Aug 2025 15:38:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 125064, version 768.67 Size125 kB (125064 bytes) Hash57b380d27f14f16e737bcca7e849cf79 2e4280929d4d76fc0e31601c98f167f14630c209 94e1bbc1c2a41ebc73fa5253fd563256c0035b4d69181e48f9aef9e474a11251
GET /ajax/libs/font-awesome/6.0.0-beta3/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ads.ppctrck.com
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Jun 2025 15:34:57 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 125064
cf-ray: 9555882fade05695-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "619c057b-1e888"
last-modified: Mon, 22 Nov 2021 21:02:51 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 512590
expires: Mon, 15 Jun 2026 15:34:57 GMT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VrxKUq%2Bx47UUjhEnf1wtEdJlfhQjeNInvvetCH9Yuy0OHPnLWkLX7CHzF6UFp%2FmaVnVoM%2BVSguDSEk2dfKDkMe%2BcdZoinv1E1zfJp4r0W2v%2F2XDbqQ4ScSPUshOblOEctA9JQzBK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| GET www.googletagmanager.com/gtag/js?id=G-J8F7TKSJKP | 142.250.74.168 | 200 OK | 365 kB |
URL GET www.googletagmanager.com/gtag/js?id=G-J8F7TKSJKP IP 142.250.74.168:443
Requested byhttps://adfoc.us/serve/?id=475250110494838 CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA ValidityMon, 02 Jun 2025 08:35:30 GMT - Mon, 25 Aug 2025 08:35:29 GMT
File typeJavaScript source, ASCII text, with very long lines (7993) Size365 kB (364815 bytes) Hash06e77837755f65c33e706c61d6d29654 89b82932845b8f93ccae5ae684bed3c76d3811c9 c05296b6c88c4b2315ea0d84cebcd8c07f4e7a8622ca9038aec4072ca3db69f8
GET /gtag/js?id=G-J8F7TKSJKP HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adfoc.us/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 25 Jun 2025 15:34:56 GMT
expires: Wed, 25 Jun 2025 15:34:56 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0
report-to: {"group":"ascgcycc:1077:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0"}],}
server: Google Tag Manager
content-length: 124576
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| POST adfoc.us/serve/credit | 104.26.6.10 | 200 OK | 0 B |
IP 104.26.6.10:443
Requested byhttps://adfoc.us/serve/?id=475250110494838 CertificateIssuerGoogle Trust Services Subjectadfoc.us Fingerprint19:8A:E4:FA:8B:16:21:77:FA:DB:07:1F:12:44:DD:44:C6:4B:86:93 ValiditySat, 24 May 2025 01:23:30 GMT - Fri, 22 Aug 2025 02:23:26 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /serve/credit HTTP/1.1
Host: adfoc.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 24
Origin: https://adfoc.us
DNT: 1
Connection: keep-alive
Referer: https://adfoc.us/serve/?id=475250110494838
Cookie: phpsessionname=d4s41giod4h1329nd117pj1se7
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Jun 2025 15:34:56 GMT
content-type: text/html; charset=UTF-8
content-encoding: br
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
strict-transport-security: max-age=0;
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qAVbhjkFP2tevILo89wicNR0CS%2FtpKVSwtAhHcFu8NhBXifc5UnMJQiGgEiRJ7%2FdB4SEP3qm5Q27zy45tZDLbPJc%2FthKIsugl3ebx1QQ0hY%2BMjCVS4KleFNV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9555882aa9070afa-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=5386&min_rtt=405&rtt_var=7146&sent=50&recv=26&lost=0&retrans=0&sent_bytes=32500&recv_bytes=2170&delivery_rate=9707262&cwnd=256&unsent_bytes=0&cid=5df7364c8459ee80&ts=1220&x=0"
X-Firefox-Spdy: h2
|
|
| GET fonts.googleapis.com/css2?family=Montserrat:wght@400;700&display=swap | 142.250.74.10 | 200 OK | 3.9 kB |
URL GET fonts.googleapis.com/css2?family=Montserrat:wght@400;700&display=swap IP 142.250.74.10:443
Requested byhttps://ads.ppctrck.com/cid9200W/?p=475250 CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint58:09:05:96:27:31:E2:3D:AB:89:AD:1C:2E:C3:03:82:B0:27:3D:86 ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
Hashc352b42615baa790ac8e1215d9f7f047 a28a7625859f50136a37df48716c0c17e03bc78a ef107980d4d6ab2b47ff7362b2961ca03780dc093a8d3b54952e728568db3fd1
GET /css2?family=Montserrat:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ads.ppctrck.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 25 Jun 2025 15:34:57 GMT
date: Wed, 25 Jun 2025 15:34:57 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| GET fonts.gstatic.com/s/montserrat/v30/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 | 142.250.74.35 | 200 OK | 38 kB |
URL GET fonts.gstatic.com/s/montserrat/v30/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 IP 142.250.74.35:443
Requested byhttps://ads.ppctrck.com/cid9200W/?p=475250 CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7 ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 37828, version 1.0 Hashe0b05ccbd5b6004a449ac84b466c29ac bcc0e513caae5f6f4164b58eaaa46eaa49622322 1f1ae80aa76018cc05e840a37f41cf860211bbe368971f54957bf8ebb3c863d6
GET /s/montserrat/v30/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ads.ppctrck.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 37828
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 19 Jun 2025 10:52:23 GMT
expires: Fri, 19 Jun 2026 10:52:23 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 28 May 2025 18:51:10 GMT
content-type: font/woff2
age: 535354
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET ajax.googleapis.com/ajax/libs/jquery/1.8.2/jquery.min.js | 142.250.74.10 | 200 OK | 93 kB |
URL GET ajax.googleapis.com/ajax/libs/jquery/1.8.2/jquery.min.js IP 142.250.74.10:443
Requested byhttps://adfoc.us/serve/?id=475250110494838 CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint58:09:05:96:27:31:E2:3D:AB:89:AD:1C:2E:C3:03:82:B0:27:3D:86 ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65480) Hash0b6ecf17e30037994d3ffee51b525914 d09d3a99ed25d0f1fbe6856de9e14ffd33557256 f554d2f09272c6f71447ebfe4532d3b1dd1959bce669f9a5ccc99e64ef511729
GET /ajax/libs/jquery/1.8.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adfoc.us/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33621
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 19 Jun 2025 11:07:55 GMT
expires: Fri, 19 Jun 2026 11:07:55 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 534421
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET adfoc.us/images/headers/optifine-logo.png | 104.26.6.10 | 200 OK | 6.3 kB |
URL GET adfoc.us/images/headers/optifine-logo.png IP 104.26.6.10:443
Requested byhttps://adfoc.us/serve/?id=475250110494838 CertificateIssuerGoogle Trust Services Subjectadfoc.us Fingerprint19:8A:E4:FA:8B:16:21:77:FA:DB:07:1F:12:44:DD:44:C6:4B:86:93 ValiditySat, 24 May 2025 01:23:30 GMT - Fri, 22 Aug 2025 02:23:26 GMT
File typePNG image data, 335 x 66, 8-bit/color RGBA, non-interlaced Hash2c9c45594c91e20b8069a2350d05624a faf91d832298a9ef0bc8dc4457db75dec3b44ff3 0b8a93e1c92033881b2b5f8ce7ffce59b793eb3b4c71930f98d2970e4ccb9d75
GET /images/headers/optifine-logo.png HTTP/1.1
Host: adfoc.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adfoc.us/serve/?id=475250110494838
Cookie: phpsessionname=d4s41giod4h1329nd117pj1se7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Jun 2025 15:34:55 GMT
content-type: image/png
content-length: 6274
cf-ray: 955588270c8b0afa-OSL
last-modified: Fri, 15 Nov 2019 16:00:58 GMT
etag: "5dcecbba-1882"
strict-transport-security: max-age=0;
cache-control: max-age=3600
cf-cache-status: HIT
age: 2607
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wZKnYtqNmGvBPGd7fAynT4Hylex%2BRSRGgYqNcKiyVnnHH0NqkbPCwlKMZOhU2qtU9QNSousVd7ar00UJ9BfWNcBhzlOEKsb3bwpYIiGZTKYdg1YtjKhfZUln"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
server-timing: cfL4;desc="?proto=TCP&rtt=5356&min_rtt=559&rtt_var=6995&sent=26&recv=20&lost=0&retrans=0&sent_bytes=13563&recv_bytes=1865&delivery_rate=4850921&cwnd=256&unsent_bytes=0&cid=5df7364c8459ee80&ts=578&x=0"
X-Firefox-Spdy: h2
|
|
| GET adfoc.us/serve/sitelinks/?id=475250&url=http://optifine.net/adloadx?f=OptiFine_1.21.1_HD_U_J1.jar&x=871d | 104.26.6.10 | 302 Found | 10 kB |
URL User Request GET adfoc.us/serve/sitelinks/?id=475250&url=http://optifine.net/adloadx?f=OptiFine_1.21.1_HD_U_J1.jar&x=871d IP 104.26.6.10:443
CertificateIssuerGoogle Trust Services Subjectadfoc.us Fingerprint19:8A:E4:FA:8B:16:21:77:FA:DB:07:1F:12:44:DD:44:C6:4B:86:93 ValiditySat, 24 May 2025 01:23:30 GMT - Fri, 22 Aug 2025 02:23:26 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /serve/sitelinks/?id=475250&url=http://optifine.net/adloadx?f=OptiFine_1.21.1_HD_U_J1.jar&x=871d HTTP/1.1
Host: adfoc.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 25 Jun 2025 15:34:55 GMT
content-type: text/html; charset=UTF-8
cf-ray: 95558823e9170afa-OSL
set-cookie: phpsessionname=d4s41giod4h1329nd117pj1se7; expires=Fri, 25-Jul-2025 15:34:55 GMT; Max-Age=2592000; path=/; HttpOnly
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
location: /serve/?id=475250110494838
strict-transport-security: max-age=0;
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hhWahyhDBQV3KV%2BlmFjRybMjxciYQBFixFP5B4sTRx8TwxkVwjGTxh%2FXXfdTdnUYnZURUziRf3AcwsNwLx46aJ2kkvchQKCXz3x27gqQgh%2BKwUjAdD%2BtKSak"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
server-timing: cfL4;desc="?proto=TCP&rtt=7028&min_rtt=1282&rtt_var=11166&sent=7&recv=12&lost=0&retrans=0&sent_bytes=3262&recv_bytes=1311&delivery_rate=3359628&cwnd=254&unsent_bytes=0&cid=5df7364c8459ee80&ts=183&x=0"
X-Firefox-Spdy: h2
|
|
| GET adfoc.us/serve/?id=475250110494838 | 104.26.6.10 | 200 OK | 10 kB |
URL User Request GET adfoc.us/serve/?id=475250110494838 IP 104.26.6.10:443
CertificateIssuerGoogle Trust Services Subjectadfoc.us Fingerprint19:8A:E4:FA:8B:16:21:77:FA:DB:07:1F:12:44:DD:44:C6:4B:86:93 ValiditySat, 24 May 2025 01:23:30 GMT - Fri, 22 Aug 2025 02:23:26 GMT
File typeHTML document, ASCII text, with CRLF, LF line terminators Hash6de51e34fef5a7f297c143c218c754fb 95e15c7b15b2e54e91816e3915025982801747e2 c6bf44f9648d8cc9e7dbd46dd269c4b12d349f017a220b8e0bd2ea58ca32cc84
GET /serve/?id=475250110494838 HTTP/1.1
Host: adfoc.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: phpsessionname=d4s41giod4h1329nd117pj1se7
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Jun 2025 15:34:55 GMT
content-type: text/html; charset=UTF-8
content-encoding: br
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
strict-transport-security: max-age=0;
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KjzcNw%2FpvBtpX1%2FmgYHsMrbtKxRd2uqFJDiMc0JVQo4VFhrGwf9Bc77dfdaBrz9RYgLnNtbuKIwAAHR61XKR%2Bf2m92jTOm%2F4rCSrL7wMjuUeSKLz4RzFwyEQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 95558824da730afa-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=5515&min_rtt=559&rtt_var=8904&sent=10&recv=15&lost=0&retrans=0&sent_bytes=4038&recv_bytes=1427&delivery_rate=4850921&cwnd=256&unsent_bytes=0&cid=5df7364c8459ee80&ts=270&x=0"
X-Firefox-Spdy: h2
|
|
| GET adfoc.us/uploads/users/13dcb37c_skip.png | 104.26.6.10 | 200 OK | 4.1 kB |
URL GET adfoc.us/uploads/users/13dcb37c_skip.png IP 104.26.6.10:443
Requested byhttps://adfoc.us/serve/?id=475250110494838 CertificateIssuerGoogle Trust Services Subjectadfoc.us Fingerprint19:8A:E4:FA:8B:16:21:77:FA:DB:07:1F:12:44:DD:44:C6:4B:86:93 ValiditySat, 24 May 2025 01:23:30 GMT - Fri, 22 Aug 2025 02:23:26 GMT
File typePNG image data, 134 x 38, 8-bit/color RGBA, non-interlaced Hash53a92793efb96c2e48ea59d1966ac16c 1e76f955d35cb8b615ce7f892de9f695f3e512e4 a2e335bb081ea97c531a31ee9a09cab042f1d0128d8203c11bc20cea490b354b
GET /uploads/users/13dcb37c_skip.png HTTP/1.1
Host: adfoc.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adfoc.us/serve/?id=475250110494838
Cookie: phpsessionname=d4s41giod4h1329nd117pj1se7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Jun 2025 15:34:55 GMT
content-type: image/png
content-length: 4103
cf-ray: 955588271c9b0afa-OSL
last-modified: Tue, 28 Jul 2020 22:36:55 GMT
etag: "5f20a887-1007"
strict-transport-security: max-age=0;
cache-control: max-age=3600
cf-cache-status: HIT
age: 2607
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RCdlwOt256I1%2FDpd9vnzczhw5yDeueiUc1ciPWgWzKf8gZ44ZYQwowRQ%2BPm%2Fc%2FpBN1HRPj6cCeFl3elTAYs8eIhnodU8j9F0VZ6qt2QR6YTS%2BZuQRlB2B%2BDT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
server-timing: cfL4;desc="?proto=TCP&rtt=5356&min_rtt=559&rtt_var=6995&sent=33&recv=20&lost=0&retrans=0&sent_bytes=20472&recv_bytes=1865&delivery_rate=4850921&cwnd=256&unsent_bytes=0&cid=5df7364c8459ee80&ts=579&x=0"
X-Firefox-Spdy: h2
|
|
| GET cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css | 104.17.25.14 | 200 OK | 84 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css IP 104.17.25.14:443
Requested byhttps://ads.ppctrck.com/cid9200W/?p=475250 CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77 ValidityThu, 22 May 2025 14:38:44 GMT - Wed, 20 Aug 2025 15:38:38 GMT
File typeASCII text, with very long lines (65311) Hash3d5ef2bf867c4054a2f336cdbad9e1dc 07228d1fa3245ee156a27a353f45758a3207849f a361e7885c36bacb3fd9cb068da207c3b9329962cac022d06e28923939f575e8
GET /ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ads.ppctrck.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Jun 2025 15:34:57 GMT
content-type: text/css; charset=utf-8
content-length: 14850
cf-ray: 9555882ecfb056aa-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "619c057b-3a02"
last-modified: Mon, 22 Nov 2021 21:02:51 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 566173
expires: Mon, 15 Jun 2026 15:34:57 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BuGX%2BB8SRuYc8eoIL49EQJ1XwpLRSUtDPN%2BKL3ap2Kyf2OSv%2BVVE4%2B0iPWNIHP7Uxw2GIq%2B8muctdGxpUG7UdqXroMwLU354L01KbFrOTPFM3P7q%2BWFJt4aU5LiuA1cODG%2BPWvsw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|