cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
104.17.25.14200 OK 28 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
IP 104.17.25.14:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65451)
Hash 220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a
GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://linkvertise.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 15 Dec 2023 22:42:36 GMT
content-type: application/javascript; charset=utf-8
content-length: 27748
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-15851"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1609017
expires: Wed, 04 Dec 2024 22:42:36 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Lydn%2BAmR6NW%2FtDUNRpbYiG5aY%2FI7UAkEWLyNU%2FNSYtu7I65jlYfZ%2Fsya3QXnEPQ53PlI9LRjU8aMr6nOo8TXbHZuwuNTreFS5rb3EaMkQqjvWNv7AQUDC1ewyod9AXpDsI9chWij"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 83623360ac9b7129-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/font-awesome/5.10.2/css/all.css
104.17.25.14200 OK 10 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/5.10.2/css/all.css
IP 104.17.25.14:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
Hash 4cd5b86baba794f3e4f6e54b501f0b6e
6f6a097e312259a142f4cef43e0c52d6224823f0
a62a847fb029ec2329b3c92b0d0b1239366017e314ff430fc8f5b67a78f9238d
GET /ajax/libs/font-awesome/5.10.2/css/all.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://linkvertise.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 15 Dec 2023 22:42:36 GMT
content-type: text/css; charset=utf-8
content-length: 10228
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e60-111e5"
last-modified: Mon, 04 May 2020 16:10:08 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1958562
expires: Wed, 04 Dec 2024 22:42:36 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EYhGwOKh5NsaJrGFvJNA%2F40Eu4fRCPchOmOWv4S9FarvFfx3Se40EdSVbtzpp9ZcIXpN3RBFVdQYWzkmAc%2BUwEpDWPc0%2FEop9OJFiLi%2BHa8Y29LyIqjRZTZ422pahD5ascUednjg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 83623360fd047129-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
p.typekit.net/p.css?s=1&k=lgs0rip&ht=tk&f=43349.43352.43354.43357&a=84442296&app=typekit&e=css
23.36.76.184200 OK 5 B URL GET HTTP/2 p.typekit.net/p.css?s=1&k=lgs0rip&ht=tk&f=43349.43352.43354.43357&a=84442296&app=typekit&e=css
IP 23.36.76.184:443
ASN #20940 Akamai International B.V.
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerDigiCert Inc
Subjectuse.typekit.net
Fingerprint42:82:CA:A5:EA:30:8F:60:60:37:2D:24:17:3D:52:62:54:D7:03:5B
ValidityThu, 21 Sep 2023 00:00:00 GMT - Mon, 21 Oct 2024 23:59:59 GMT
Hash 83d24d4b43cc7eef2b61e66c95f3d158
f0cafc285ee23bb6c28c5166f305493c4331c84d
1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb
GET /p.css?s=1&k=lgs0rip&ht=tk&f=43349.43352.43354.43357&a=84442296&app=typekit&e=css HTTP/1.1
Host: p.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://linkvertise.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/css
content-length: 5
last-modified: Tue, 07 Mar 2023 19:56:00 GMT
etag: "640796d0-5"
cache-control: public, max-age=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
date: Fri, 15 Dec 2023 22:42:36 GMT
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-TZ69NZG
142.250.74.136200 OK 66 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-TZ69NZG
IP 142.250.74.136:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
File type ASCII text, with very long lines (4071)
Hash 82e096e3d9c90703d498d96b1e3072a2
8f062eb3a08b1a89179dc580ce0a5daf01747b3a
dc677d0e80a414d9032d7c0e320526378edb849c726c74f9911ece3276be18b5
GET /gtm.js?id=GTM-TZ69NZG HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://linkvertise.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 15 Dec 2023 22:42:36 GMT
expires: Fri, 15 Dec 2023 22:42:36 GMT
cache-control: private, max-age=900
last-modified: Fri, 15 Dec 2023 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 65585
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
js.chargebee.com/assets/cbjs-2023.12.13-07.12/v2/animation.css
143.204.55.124200 OK 722 B URL GET HTTP/2 js.chargebee.com/assets/cbjs-2023.12.13-07.12/v2/animation.css
IP 143.204.55.124:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerAmazon
Subjectjs.chargebee.com
FingerprintB8:5C:38:C3:FB:23:73:61:30:7B:EA:4E:1C:7D:47:C4:64:B6:1A:2E
ValidityTue, 14 Mar 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Hash 520016f3fad41f77bb889758ac030aaf
48ca24438fbec42628371ec9320c6730a887f3e8
c8c900ec5cbe9ef18bea37051bc2bf2aa9846c2ce787d248f2451575e2a372fd
GET /assets/cbjs-2023.12.13-07.12/v2/animation.css HTTP/1.1
Host: js.chargebee.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://linkvertise.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 722
last-modified: Wed, 13 Dec 2023 07:24:24 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: TlviMVa98Pn4Ek8NaGWtFiHvlYDXop67
accept-ranges: bytes
server: AmazonS3
strict-transport-security: max-age=300; includeSubdomains; preload
date: Fri, 15 Dec 2023 22:41:57 GMT
cache-control: max-age=300,public
etag: "520016f3fad41f77bb889758ac030aaf"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: UGKdJFI8jho63WH3BffWF1YUdNVd8-Wl488JxgGk1CuOp-qqXlqGIQ==
age: 47
X-Firefox-Spdy: h2
linkvertise.com/assets/external/thinksuggest.html
172.67.216.138308 Permanent Redirect 0 B URL GET HTTP/3 linkvertise.com/assets/external/thinksuggest.html
IP 172.67.216.138:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerLet's Encrypt
Subjectlinkvertise.com
Fingerprint71:B7:29:DC:D3:4F:3B:85:5C:C0:50:5E:D6:75:3C:9A:4C:B1:8E:55
ValidityWed, 18 Oct 2023 12:12:43 GMT - Tue, 16 Jan 2024 12:12:42 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /assets/external/thinksuggest.html HTTP/1.1
Host: linkvertise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 308 Permanent Redirect
date: Fri, 15 Dec 2023 22:42:37 GMT
content-length: 0
location: /assets/external/thinksuggest
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B902ZfqI8BKzp3xrzzWA6sscr2KCktHPXAN%2B515cAEYTjAVEwjPfy03lDX0sUKjGryghX7IhAFoIl8fZE26N%2FEqXoPKqhL69UdeTGKgaK%2Bh04z0YKrHlkR2miFgE5k0%2BFBo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
x-frame-options: sameorigin
server: cloudflare
cf-ray: 8362336598a7b51b-OSL
alt-svc: h3=":443"; ma=86400
linkvertise.com/styles.775bd5e17d482447.css
172.67.216.138200 OK 41 kB URL GET HTTP/3 linkvertise.com/styles.775bd5e17d482447.css
IP 172.67.216.138:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerLet's Encrypt
Subjectlinkvertise.com
Fingerprint71:B7:29:DC:D3:4F:3B:85:5C:C0:50:5E:D6:75:3C:9A:4C:B1:8E:55
ValidityWed, 18 Oct 2023 12:12:43 GMT - Tue, 16 Jan 2024 12:12:42 GMT
File type ASCII text, with very long lines (58011)
Hash 612c112d3f9d56eade1518cd06ba07b9
62be3a6c90504d6aa65596658bb439627d14c365
d0390c60eff7b2b3f789a221dd7827d3735160f26c9cb84c650eab868c2c103d
GET /styles.775bd5e17d482447.css HTTP/1.1
Host: linkvertise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 15 Dec 2023 22:42:36 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"91fbb456f32f754a85f6de179fa6807c"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yKngs98BRjoUgUYxnAcBiL2BfliUbFDdZ3XOfTdks6RIQTn%2B45S%2BIQiuz69sF5a3fO%2BcnRBWTU7jQWg67PvBQ7%2FNpfiN9NoME7JFqzt0Iy95ZW4vNjkhgj0e0Xs%2FkGzf3HM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
x-frame-options: sameorigin
server: cloudflare
cf-ray: 83623363af1ab51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
js.chargebee.com/assets/cbjs-2023.12.13-07.12/v2/189-8afdc083b6670892bf81.js
143.204.55.124200 OK 54 kB URL GET HTTP/2 js.chargebee.com/assets/cbjs-2023.12.13-07.12/v2/189-8afdc083b6670892bf81.js
IP 143.204.55.124:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerAmazon
Subjectjs.chargebee.com
FingerprintB8:5C:38:C3:FB:23:73:61:30:7B:EA:4E:1C:7D:47:C4:64:B6:1A:2E
ValidityTue, 14 Mar 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
File type gzip compressed data, from Unix
- data
Hash d5ee953901e03908d7aab01f307dc459
ebd8d6fd6d6727edcc0baeda732832becdc58bad
443dbc4ee5d5a1291d76569668a270419f508068046ff9f2d77577c3f6180047
GET /assets/cbjs-2023.12.13-07.12/v2/189-8afdc083b6670892bf81.js HTTP/1.1
Host: js.chargebee.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://linkvertise.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Wed, 13 Dec 2023 07:24:23 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 9wv4p_I83K.vT7bNE3LcB1by.ZxjXzc3
server: AmazonS3
strict-transport-security: max-age=300; includeSubdomains; preload
content-encoding: gzip
date: Fri, 15 Dec 2023 22:41:22 GMT
cache-control: max-age=300,public
etag: W/"f62f7ab9a260c125b895acab1d712f5e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7r_DYn5-89M8nXxo3HYH6Ni2lLN8DEZGQarMwWIycuGUDfq_K1kREQ==
age: 84
X-Firefox-Spdy: h2
publisher.linkvertise.com/graphql
104.21.93.235200 OK 0 B URL POST HTTP/2 publisher.linkvertise.com/graphql
IP 104.21.93.235:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerGoogle Trust Services LLC
Subjectlinkvertise.com
FingerprintA9:D7:5E:8F:14:9D:05:DD:C2:C6:6D:E4:5F:1E:22:C8:88:2B:7A:79
ValidityWed, 06 Dec 2023 07:07:21 GMT - Tue, 05 Mar 2024 07:07:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /graphql HTTP/1.1
Host: publisher.linkvertise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://linkvertise.com/
Origin: https://linkvertise.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 15 Dec 2023 22:42:37 GMT
cache-control: no-cache, private
access-control-allow-origin: https://linkvertise.com
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-allow-headers: content-type
access-control-max-age: 0
set-cookie: laravel_session=MLehHt84x8FA2oS4jBrHLHasElqLtRnBqILe6rLf; expires=Sat, 14 Dec 2024 22:42:37 GMT; Max-Age=31536000; path=/; domain=.linkvertise.com; httponly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vf5hZn1NrAgj858I6rWXciGqKmdMBjJRKx3G7tomvr3XoRyKRg6hNSRcmF1QUkzjCQe326SSNDl1XX0kIG%2FlQF6WtKrk8NICaGk5BQoXKUXeFRZDNN6MS4gdm%2BbaX0v%2FleXExzMkaQ7vNJRF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-frame-options: sameorigin
server: cloudflare
cf-ray: 836233660c3bb529-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
publisher.linkvertise.com/api/v1/account
104.21.93.235200 OK 0 B URL GET HTTP/2 publisher.linkvertise.com/api/v1/account
IP 104.21.93.235:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerGoogle Trust Services LLC
Subjectlinkvertise.com
FingerprintA9:D7:5E:8F:14:9D:05:DD:C2:C6:6D:E4:5F:1E:22:C8:88:2B:7A:79
ValidityWed, 06 Dec 2023 07:07:21 GMT - Tue, 05 Mar 2024 07:07:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v1/account HTTP/1.1
Host: publisher.linkvertise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://linkvertise.com/
Origin: https://linkvertise.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 15 Dec 2023 22:42:37 GMT
cache-control: no-cache, private
access-control-allow-origin: https://linkvertise.com
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: content-type
access-control-max-age: 0
set-cookie: laravel_session=SefZa7Tsb02BXzomdbR3hC8iwgvxi3F3dBOFcuM0; expires=Sat, 14 Dec 2024 22:42:37 GMT; Max-Age=31536000; path=/; domain=.linkvertise.com; httponly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=St9ooakzfxo3Ooe4efKe9tz15Y%2B1gmEnyfzqwQ9owjK6s810%2FyxVOKjho5ntakS9mt1Un%2FV3qiSQ0S%2BUn%2FVx%2FWJCDq1iTsWJCE3ZKhmOKM1GmLPMfUzRyWPIT9QThYNCPexRaNlT%2FE%2FmuiyU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-frame-options: sameorigin
server: cloudflare
cf-ray: 83623365fc39b529-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
euob.bizseasky.com/sxp/i/df82c4ef6536e4dee60601280bc80588.js?id=14473
52.85.242.64200 OK 37 kB URL GET HTTP/2 euob.bizseasky.com/sxp/i/df82c4ef6536e4dee60601280bc80588.js?id=14473
IP 52.85.242.64:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerAmazon
Subject*.bizseasky.com
Fingerprint5C:67:36:C5:96:9F:17:D2:24:94:64:D1:B0:06:01:4A:BA:C3:A2:5D
ValidityTue, 18 Jul 2023 00:00:00 GMT - Fri, 16 Aug 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash dd7acc866a54f123c07110d685e55cf3
d6e4a02008f65a4b9269e8a1d80f86c08c8b7cac
611dec985b377bbdbc56970661863b3783176e962475fd1c1b933c9f9f645ae8
GET /sxp/i/df82c4ef6536e4dee60601280bc80588.js?id=14473 HTTP/1.1
Host: euob.bizseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://linkvertise.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 37262
content-encoding: gzip
server: Caddy
date: Fri, 15 Dec 2023 19:26:31 GMT
cache-control: max-age=43200
expires: Sat, 16 Dec 2023 07:26:31 GMT
etag: "18e53-1uSgIAj2WkuSaeih2A+GwIyLfKw"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 fb13343f41a549822047f18ba839fd5a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: T-cq-wA4b-sbcguW-i2TVFJ8O4JTsmhxQ9RuycVblDeC_-zIxJB5_Q==
age: 11766
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2
216.58.207.227200 OK 11 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2
IP 216.58.207.227:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 11028, version 1.0
- data
Hash 1f6d3cf6d38f25d83d95f5a800b8cac3
279f300ca2cbbdf9f5036ef2f438607fbf377daa
796de064b8d80eba7ccacb8ba67d77fdbcdf4b385c844645d452c24537b3108f
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://linkvertise.com
DNT: 1
Connection: keep-alive
Referer: https://linkvertise.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 15 Dec 2023 06:59:07 GMT
expires: Sat, 14 Dec 2024 06:59:07 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:50 GMT
content-type: font/woff2
age: 56610
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2
216.58.207.227200 OK 11 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2
IP 216.58.207.227:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 11072, version 1.0
- data
Hash e7df3d0942815909add8f9d0c40d00d9
cf5032eea3399a58870e8a05e629b006a8c7c3c7
bce2f309470952b7affa62ff4d91b454334c68cefa541429b502904d20696875
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://linkvertise.com
DNT: 1
Connection: keep-alive
Referer: https://linkvertise.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11072
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 15 Dec 2023 04:17:34 GMT
expires: Sat, 14 Dec 2024 04:17:34 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:53 GMT
content-type: font/woff2
age: 66303
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
js.chargebee.com/v2/chargebee.js
143.204.55.124200 OK 89 kB URL GET HTTP/2 js.chargebee.com/v2/chargebee.js
IP 143.204.55.124:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerAmazon
Subjectjs.chargebee.com
FingerprintB8:5C:38:C3:FB:23:73:61:30:7B:EA:4E:1C:7D:47:C4:64:B6:1A:2E
ValidityTue, 14 Mar 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
File type gzip compressed data, from Unix
- data
Hash 39fcba060d428cb01a9b2158e5c14eda
496a13d3a2d22cd161ba456f90eb96af60ec9313
967bc105c4327e2ae8183fb1945bb807bbc6cf16650b4477c0923284f5b66278
GET /v2/chargebee.js HTTP/1.1
Host: js.chargebee.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://linkvertise.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Wed, 13 Dec 2023 07:24:23 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 6UGkxJq0S9KDG.xSE8pblnAUiFQj0lcN
server: AmazonS3
strict-transport-security: max-age=300; includeSubdomains; preload
content-encoding: gzip
date: Fri, 15 Dec 2023 22:39:26 GMT
cache-control: max-age=300,public
etag: W/"7cd7e383e896fa56c9d36dce9f543081"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Q2VWx04rpvZwlP0sSwawxkALhEdeq8vseyyj_Njtgo9jwDjyzkLxDw==
age: 196
X-Firefox-Spdy: h2
publisher.linkvertise.com/graphql
104.21.93.235200 OK 824 B URL POST HTTP/2 publisher.linkvertise.com/graphql
IP 104.21.93.235:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerGoogle Trust Services LLC
Subjectlinkvertise.com
FingerprintA9:D7:5E:8F:14:9D:05:DD:C2:C6:6D:E4:5F:1E:22:C8:88:2B:7A:79
ValidityWed, 06 Dec 2023 07:07:21 GMT - Tue, 05 Mar 2024 07:07:20 GMT
File type JSON data
- , ASCII text, with very long lines (2624), with no line terminators
Hash 6b73b2a1dd6b844de7a2064ba278f899
3899c7b637dbbba053e33d19f5c7a0c09a4118d9
b85b79be74fcc6ae9f2fa80cc7d25999d9481663b75afa7ade5320119efcd269
POST /graphql HTTP/1.1
Host: publisher.linkvertise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://linkvertise.com/
Content-Type: application/json
Content-Length: 266
Origin: https://linkvertise.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 15 Dec 2023 22:42:37 GMT
content-type: application/json
cache-control: no-cache, private
access-control-allow-origin: https://linkvertise.com
vary: Origin
access-control-allow-credentials: true
set-cookie: laravel_session=SOaGKV1s2NpIDLHvjvtt2CnETwXMvkEj3kB8yQ0s; expires=Sat, 14 Dec 2024 22:42:37 GMT; Max-Age=31536000; path=/; domain=.linkvertise.com; httponly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dWgEC1E3O3JBYtWNzAqo%2F78H%2FeKiLzxWeFtYFjur1xve3I8UOIhux2bBOnx7q2RkOPzsdnfz1CM9Z83Q0TDrmhW67asPy3UnNzcZhyHG3GvrYDXOqaMLwQynpkw7j4EGcBwVklpOsP7UqF%2FH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-frame-options: sameorigin
server: cloudflare
cf-ray: 836233664c66b529-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
js.chargebee.com/assets/cbjs-2023.12.13-07.12/v2/master.html
143.204.55.124 234 B URL js.chargebee.com/assets/cbjs-2023.12.13-07.12/v2/master.html
IP 143.204.55.124:0
Certificate IssuerAmazon
Subjectjs.chargebee.com
FingerprintB8:5C:38:C3:FB:23:73:61:30:7B:EA:4E:1C:7D:47:C4:64:B6:1A:2E
ValidityTue, 14 Mar 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document, ASCII text
Hash a104dfc5294d410ce78310207459e56b
01b4fa043f4b38ce0e80bd60ee11ab4a337993f7
0e399e34bfca5143a85e6165ff0f0fa7057b5d9506a04f46d4e78e570458f49a
GET /assets/cbjs-2023.12.13-07.12/v2/master.html HTTP/1.1
Host: js.chargebee.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://linkvertise.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 234
last-modified: Wed, 13 Dec 2023 07:24:24 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: IckCvW6luCfg0nVHJ48fQKwcZtojlVb9
accept-ranges: bytes
server: AmazonS3
strict-transport-security: max-age=300; includeSubdomains; preload
date: Fri, 15 Dec 2023 22:41:34 GMT
cache-control: max-age=300,public
etag: "a104dfc5294d410ce78310207459e56b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 3Mw6wav-VRXJupNJ91fdlHR78H1aI1SL1YagjkW8QTDNsDuIsMcLWw==
age: 82
X-Firefox-Spdy: h2
obseu.bizseasky.com/ct?id=14473&url=https%3A%2F%2Flinkvertise.com%2F222235%2Ffreevpn%3Fo%3DsharingzKhttps%3A%252F%252Fwww.mediafire.com%252Ffile%252Fk0ljmyccufpcssq%252FDankMemer_Auto_Farm.rar%252Ffile&sf=0&tpi=&ch=cheq4ppc&uvid=&tsf=0&tsfmi=&tsfu=&cb=1702680158374&hl=4&op=0&ag=1317291471&rand=235201870261698625090812986278721250881272800752192610001029050122501122260798325165&fs=1280x1024&fst=1280x1024&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D&dep=0&pre=0&sdd=%7B%7D&cri=sTjwe1eMGi&pto=1811&ver=57&gac=-&mei=&ap=&fe=1&duid=1.1702680158.pWEImPSVEUkgaXst&suid=1.1702680158.JjstfJygo6qWVetA&tuid=1.1702680158.6P8qV5Ffz0reWAdo&fbc=->m=W10%3D&it=96%2C1356%2C119&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0&ab=
54.75.69.192200 OK 1.2 kB URL GET HTTP/2 obseu.bizseasky.com/ct?id=14473&url=https%3A%2F%2Flinkvertise.com%2F222235%2Ffreevpn%3Fo%3DsharingzKhttps%3A%252F%252Fwww.mediafire.com%252Ffile%252Fk0ljmyccufpcssq%252FDankMemer_Auto_Farm.rar%252Ffile&sf=0&tpi=&ch=cheq4ppc&uvid=&tsf=0&tsfmi=&tsfu=&cb=1702680158374&hl=4&op=0&ag=1317291471&rand=235201870261698625090812986278721250881272800752192610001029050122501122260798325165&fs=1280x1024&fst=1280x1024&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=W1siZWYiLDYyMTZdLFsxMiwie1wiZVwiOjAsXCJ3Z2xcIjoxfSJdLFsiY2IiLCIwLDAsMCwwLDAsMCwwLDEsMCwzLDEwLDEsNCwxLDAsNSwxLDAsMCwwLDAsMCwwLDAsMCwxLDAsMCwxLDAsMCwwLDAsMCwwLDEsMCwwLDAsMCwxLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwxLDAsMCwzLDAsMSwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDEsMCwwLDAsMCwxLDAsMCwwLDAsMCwyLDAiXSxbLTEsIkxpbnV4IHg4Nl82NCJdLFstMiwiMTAsSXNOOW5HbldiQVlBSXhOZlFhT3FHRTBDRkFRc2NHMDBJbmhPYllCQUtZVU96UU82RVgwMjBJbUdMY3U2MnVyZFAvYzJkMnBObVZaQXdmMy8vOHo3OUdySGExV3UzT21YUFB2ZSJdLFstMywiW1wiaW50ZXJuYWwtcGRmLXZpZXdlclwiLFwiaW50ZXJuYWwtcGRmLXZpZXdlclwiLFwiaW50ZXJuYWwtcGRmLXZpZXdlclwiLFwiaW50ZXJuYWwtcGRmLXZpZXdlclwiLFwiaW50ZXJuYWwtcGRmLXZpZXdlclwiXSJdLFstNCwiLSJdLFstNSwiLSJdLFstNiwie1wid1wiOltcIjBcIixcIiRcIixcImpRdWVyeVwiLFwiYm9vdHN0cmFwXCIsXCJqUXVlcnkzNDEwNjY0MTQzMzQ2NDUyMzg0MjFcIixcImRhdGFMYXllclwiLFwiZjcwNVwiLFwiY2JKc29uUFwiLFwiX19jb3JlLWpzX3NoYXJlZF9fXCIsXCJjYl93aW5kb3dfbG9nZ2VyXCIsXCJfX1NFTlRSWV9fXCIsXCJDaGFyZ2ViZWVcIixcImlzQWRCbG9ja0FjdGl2ZVwiLFwid2VicGFja0NodW5rbHZfd2ViXCIsXCIkbG9jYWxpemVcIixcIlpvbmVcIixcIl9fem9uZV9zeW1ib2xfX1Byb21pc2VcIixcIl9fem9uZV9zeW1ib2xfX2ZldGNoXCIsXCJfX3pvbmVfc3ltYm9sX19xdWV1ZU1pY3JvdGFza1wiLFwiX196b25lX3N5bWJvbF9fc2V0VGltZW91dFwiLFwiX196b25lX3N5bWJvbF9fY2xlYXJUaW1lb3V0XCIsXCJfX3pvbmVfc3ltYm9sX19zZXRJbnRlcnZhbFwiLFwiX196b25lX3N5bWJvbF9fY2xlYXJJbnRlcnZhbFwiLFwiX196b25lX3N5bWJvbF9fcmVxdWVzdEFuaW1hdGlvbkZyYW1lXCIsXCJfX3pvbmVfc3ltYm9sX19jYW5jZWxBbmltYXRpb25GcmFtZVwiLFwiX196b25lX3N5bWJvbF9fYWxlcnRcIixcIl9fem9uZV9zeW1ib2xfX3Byb21wdFwiLFwiX196b25lX3N5bWJvbF9fY29uZmlybVwiLFwiX196b25lX3N5bWJvbF9fTXV0YXRpb25PYnNlcnZlclwiLFwiX196b25lX3N5bWJvbF9fSW50ZXJzZWN0aW9uT2JzZXJ2ZXJcIixcIl9fem9uZV9zeW1ib2xfX0ZpbGVSZWFkZXJcIixcIl9fem9uZV9zeW1ib2xfX29ub25kZXZpY2Vtb3Rpb25wYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uZGV2aWNlb3JpZW50YXRpb25wYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uZGV2aWNlb3JpZW50YXRpb25hYnNvbHV0ZXBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25hYm9ydHBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25ibHVycGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmZvY3VzcGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmF1eGNsaWNrcGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmJlZm9yZWlucHV0cGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmNhbnBsYXlwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uY2FucGxheXRocm91Z2hwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uY2hhbmdlcGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmNsaWNrcGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmNsb3NlcGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmNvbnRleHRtZW51cGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmNvcHlwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uY3VlY2hhbmdlcGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmN1dHBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25kYmxjbGlja3BhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25kcmFncGF0Y2hlZFwiXSxcIm5cIjpbXSxcImRcIjpbXX0iXSxbLTcsIi0iXSxbLTgsIi0iXSxbLTksIi0iXSxbLTEwLCItIl0sWy0xMSwie1widFwiOlwiXCIsXCJtXCI6W119Il0sWy0xMiwiXCIxXCIiXSxbLTEzLCItIl0sWy0xNCwiLSJdLFstMTUsIi0iXSxbLTE2LCIwIl0sWy0xNywiNDgiXSxbLTE4LCJbMSwwLDAsMF0iXSxbLTE5LCJbMCwwLDAsMCwwLDAsMSwyNCwyNCxcIi1cIiwxMjgwLDEwMjQsMTI4MCwxMDI0LDEyODAsMTAyNCwxMjgwLDEwMjQsMCwwLDAsMCxcIi1cIixcIi1cIiwxMjgwLDEwMjRdIl0sWy0yMCwiLSJdLFstMjEsIi0iXSxbLTIyLCJbXCJuXCIsXCJuXCJdIl0sWy0yMywiKyJdLFstMjQsIltdIl0sWy0yNSwiLSJdLFstMjYsIi0iXSxbLTI3LCItIl0sWy0yOCwiZW4tVVMsZW4iXSxbLTI5LCItIl0sWy0zMCwiW1widlwiLDBdIl0sWy0zMSwiZmFsc2UiXSxbLTMyLCIwIl0sWy0zMywiLSJdLFstMzQsIi0iXSxbLTM1LCJbMTcwMjY4MDE1ODI3MSwwXSJdLFstMzYsIltcIjUvNFwiLFwiNS80XCJdIl0sWy0zNywiLSJdLFstMzgsImksLTEsLTEsNDMsMCw4LDAsMCwyNiw0NiwtMSwwLCwxNDkzLDE3MDksMTcwNyJdLFstMzksIltcIjIwMTAwMTAxXCIsMixcIkdlY2tvXCIsXCJOZXRzY2FwZVwiLFwiTW96aWxsYVwiLFwiMjAxODEwMDEwMDAwMDBcIixudWxsLGZhbHNlLG51bGwsZmFsc2UsbnVsbCw1LHRydWUsZmFsc2UsbnVsbCwwLGZhbHNlLGZhbHNlXSJdLFstNDAsIjM3Il0sWy00MSwiLSJdLFstNDIsIjg4MzM5OTAxNiJdLFstNDMsIjAwMDAwMDAxMDAwMDAwMDAwMDExMTAwMTAwMDAwMTAwMDAwMDAwIl0sWy00NCwiMCw1LDAsNSJdLFstNDUsIjc1MiwwLDAsNzE5LDAsMCw3NjEsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCJdLFstNDYsIjAiXSxbLTQ3LCJVVEMsZW4tVVMsbGF0bixncmVnb3J5Il0sWy00OCwiMCwwIl0sWy00OSwiLSJdLFstNTAsImh0dHBzOi8vbGlua3ZlcnRpc2UuY29tLzIyMjIzNS9mcmVldnBuP289c2hhcmluZ3pLaHR0cHM6Ly93d3cubWVkaWFmaXJlLmNvbS9maWxlL2swbGpteWNjdWZwY3NzcS9EYW5rTWVtZXJfQXV0b19GYXJtLnJhci9maWxlIl0sWy01MSwiLSJdLFstNTIsIjMzLDIzOTEwMTAwOTQiXSxbLTUzLCIwMDEiXSxbLTU0LCJ7XCJoXCI6W1wiNDEwNDMxNjIzXCIsXCIyNjM5MjIyNDY4XCIsXCJfM1wiLFwiMjg3Mjg5OTMyMFwiXSxcImRcIjpbXSxcImJcIjpbXCJfMVwiLFwiMTA2NDgyMjY4N1wiLFwiNDEwNDMxNjIzXCIsXCIyNjM5MjIyNDY4XCJdLFwic1wiOjF9Il0sWy01NSwiMiJdLFstNTYsImxhbmRzY2FwZS1wcmltYXJ5Il0sWy01NywiVFJkY1FVbFdTMDFLZVZGTlRVbEtBeFlXWEV4V1d4ZGJVRU5LWEZoS1VrQVhXbFpVRmtwQlNSWlFGbDFmQVF0YURWeGZEd3dLRDF3TlhWeGNEd2tQQ1FnTEFRbGJXZ0VKREFFQkYxTktCbEJkQkFnTkRRNEtBd2dERHdFQURnd1ZkWGxSVFUxSlNnTVdGbHhNVmxzWFcxQkRTbHhZU2xKQUYxcFdWQlpLUVVrV1VCWmRYd0VMV2cxY1h3OE1DZzljRFYxY1hBOEpEd2tJQ3dFSlcxb0JDUXdCQVJkVFNnWlFYUVFJRFEwT0NnTUlBd29KREF3SUZYTjVVVTFOU1VvREZoWmNURlpiRjF0UVEwcGNXRXBTUUJkYVZsUVdTa0ZKRmxBV1hWOEJDMW9OWEY4UERBb1BYQTFkWEZ3UENROEpDQXNCQ1Z0YUFRa01BUUVYVTBvR1VBPT0iXSxbLTU4LCItIl0sWy01OSwiLSJdLFstNjAsIi0iXSxbLTYxLCItIl0sWy02MiwiNTgiXSxbLTYzLCItIl0sWy02NCwiLSJdLFstNjUsIi0iXSxbLTY2LCItIl0sWy02NywiLSJdLFsiZGRiIiwiMCwxMCwwLDEsMiwzLDAsMCwwLDAsMCwwLDAsMCwyLDEsMCwwLDAsMSwwLDAsMCwwLDAsMCwwLDAsMCwxLDAsMiwwLDAsMCwyLDAsMCwwLDAsMCwxLDEsMywyOSwwLDE5LDEsMSwwLDAsMzksMSwxLDAsMCwwLDEsMCwwLDAsMCwwLDAsMCwwLDAiXSxbImJuY2giLDE2NV0sWyJhYm5jaCIsMTY2XV0%3D&dep=0&pre=0&sdd=%7B%7D&cri=sTjwe1eMGi&pto=1811&ver=57&gac=-&mei=&ap=&fe=1&duid=1.1702680158.pWEImPSVEUkgaXst&suid=1.1702680158.JjstfJygo6qWVetA&tuid=1.1702680158.6P8qV5Ffz0reWAdo&fbc=->m=W10%3D&it=96%2C1356%2C119&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0&ab=
IP 54.75.69.192:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerZeroSSL
Subject*.bizseasky.com
Fingerprint0D:4D:50:97:62:CE:13:A8:AE:95:8C:4F:6B:27:CD:BB:CB:E1:04:5F
ValiditySun, 12 Nov 2023 00:00:00 GMT - Sat, 10 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (3509), with no line terminators
Hash a11dee159127ff087af0da08f95bd01f
f2233827d367009cb60036bec08168320d632146
10c135923eb541736ea3f13e095f4d0f67f6be94300cc8ec7c4a115a2ecf9c85
GET /ct?id=14473&url=https%3A%2F%2Flinkvertise.com%2F222235%2Ffreevpn%3Fo%3DsharingzKhttps%3A%252F%252Fwww.mediafire.com%252Ffile%252Fk0ljmyccufpcssq%252FDankMemer_Auto_Farm.rar%252Ffile&sf=0&tpi=&ch=cheq4ppc&uvid=&tsf=0&tsfmi=&tsfu=&cb=1702680158374&hl=4&op=0&ag=1317291471&rand=235201870261698625090812986278721250881272800752192610001029050122501122260798325165&fs=1280x1024&fst=1280x1024&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D&dep=0&pre=0&sdd=%7B%7D&cri=sTjwe1eMGi&pto=1811&ver=57&gac=-&mei=&ap=&fe=1&duid=1.1702680158.pWEImPSVEUkgaXst&suid=1.1702680158.JjstfJygo6qWVetA&tuid=1.1702680158.6P8qV5Ffz0reWAdo&fbc=->m=W10%3D&it=96%2C1356%2C119&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0&ab= HTTP/1.1
Host: obseu.bizseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://linkvertise.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/javascript
date: Fri, 15 Dec 2023 22:42:37 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
set-cookie: cg_uuid=75eec78b5a5a081cba4ef7d31932de4d; Max-Age=29030400; Path=/; Expires=Fri, 15 Nov 2024 22:42:37 GMT; HttpOnly; Secure; SameSite=None
content-length: 1196
X-Firefox-Spdy: h2
linkvertise.com/assets/img/logo-white-long.png
172.67.216.138200 OK 30 kB URL GET HTTP/3 linkvertise.com/assets/img/logo-white-long.png
IP 172.67.216.138:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerLet's Encrypt
Subjectlinkvertise.com
Fingerprint71:B7:29:DC:D3:4F:3B:85:5C:C0:50:5E:D6:75:3C:9A:4C:B1:8E:55
ValidityWed, 18 Oct 2023 12:12:43 GMT - Tue, 16 Jan 2024 12:12:42 GMT
File type PNG image data, 1169 x 174, 8-bit/color RGBA, non-interlaced
- data
Hash c48dad5f984e1d7ecedb89e6e73e94a7
843e55eddb99a9800d779cb9a860eb0a1b5e3821
304476467e3fc9e244f8d986a405beee84da3e81646c64c8476d70e64e8c7ad7
GET /assets/img/logo-white-long.png HTTP/1.1
Host: linkvertise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://linkvertise.com/222235/freevpn?o=sharingzKhttps:%2F%2Fwww.mediafire.com%2Ffile%2Fk0ljmyccufpcssq%2FDankMemer_Auto_Farm.rar%2Ffile
DNT: 1
Connection: keep-alive
Cookie: _cq_duid=1.1702680158.pWEImPSVEUkgaXst; _cq_suid=1.1702680158.JjstfJygo6qWVetA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 15 Dec 2023 22:42:37 GMT
content-type: image/png
content-length: 30173
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "70375496b2d5eb6ebf24219d4eb56608"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aOmJIFvoQwAOk3oJ5vJdPZwzxIAQ0%2B4NsA1eItyazbhtAreknMw23XhlnZ76vvocYYG1HeiO9xEfb01S29YdnC9TPNqtz1Pw4n%2Fy7%2BXCnLjbQRHWvltLVoyNVnxzvTDhH9M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
x-frame-options: sameorigin
server: cloudflare
cf-ray: 8362336ada78b51b-OSL
alt-svc: h3=":443"; ma=86400
linkvertise.com/favicon.ico
172.67.216.138200 OK 13 kB URL GET HTTP/3 linkvertise.com/favicon.ico
IP 172.67.216.138:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerLet's Encrypt
Subjectlinkvertise.com
Fingerprint71:B7:29:DC:D3:4F:3B:85:5C:C0:50:5E:D6:75:3C:9A:4C:B1:8E:55
ValidityWed, 18 Oct 2023 12:12:43 GMT - Tue, 16 Jan 2024 12:12:42 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
- data
Hash f4efbd07afdcea3035529958c1eca83f
01955db113300c0a1219c7ce0cd37a34717ac7ca
6c5186f7e301e4dae0afb67610bff86074208cee7adf28463d30834d20f0bbed
GET /favicon.ico HTTP/1.1
Host: linkvertise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 15 Dec 2023 22:42:37 GMT
content-type: image/vnd.microsoft.icon
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"28befd514525cf03d58901538c24b11d"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U65ZNoDt%2BCLLs8RkjxKHl5lfyOORyyNnH8fGZD1RumTKjEuzlpUA7ukEZESDF0Oe8sDthcN9mQTOyj7RnmuOssblhYEjZcV5lgg0Eq3wcqav6isPDI%2F8kX%2BFtstquXPG6Ag%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
x-frame-options: sameorigin
server: cloudflare
cf-ray: 83623367acacb51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css
104.18.10.207200 OK 44 kB URL GET HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css
IP 104.18.10.207:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint34:BC:91:5F:B9:EC:32:2C:D9:73:C7:88:C3:6C:FB:77:E7:70:8D:04
ValidityThu, 30 Nov 2023 00:15:17 GMT - Wed, 28 Feb 2024 00:15:16 GMT
File type ASCII text, with very long lines (65324)
Hash 04aca1f4cd3ec3c05a75a879f3be75a3
675fcf28f9fbf37139d3b2c0b676f96f601a4203
7928b5ab63c6e89ee0ee26f5ef201a58c72baf91abb688580a1aa26eb57b3c11
GET /bootstrap/4.1.3/css/bootstrap.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://linkvertise.com
DNT: 1
Connection: keep-alive
Referer: https://linkvertise.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 15 Dec 2023 22:42:36 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"04aca1f4cd3ec3c05a75a879f3be75a3"
last-modified: Mon, 25 Jan 2021 22:04:06 GMT
cdn-cachedat: 10/31/2023 18:48:38
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 756
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 26adcc3f738e1fbc2a43fc114e1f66d7
cdn-cache: HIT
cf-cache-status: HIT
age: 1800676
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 836233614ba8568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/materialicons/v140/flUhRq6tzZclQEJ-Vdg-IuiaDsNcIhQ8tQ.woff2
216.58.207.227200 OK 129 kB URL GET HTTP/2 fonts.gstatic.com/s/materialicons/v140/flUhRq6tzZclQEJ-Vdg-IuiaDsNcIhQ8tQ.woff2
IP 216.58.207.227:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 128616, version 1.0
- data
Size 129 kB (128616 bytes)
Hash a4160421d2605545f69a4cd6cd642902
aaae93b146d97737fabe87a6bc741113e6899ad3
4a4dbc62fa335e411b94a532be091c58c0c0c4fa731339f11722577d3cf6443b
GET /s/materialicons/v140/flUhRq6tzZclQEJ-Vdg-IuiaDsNcIhQ8tQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://linkvertise.com
DNT: 1
Connection: keep-alive
Referer: https://linkvertise.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 128616
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 15 Dec 2023 06:56:33 GMT
expires: Sat, 14 Dec 2024 06:56:33 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 07 Mar 2023 19:52:07 GMT
content-type: font/woff2
age: 56764
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
obseu.bizseasky.com/tracker/tc_imp.gif?e=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&cri=sTjwe1eMGi&ts=389&cb=1702680158763
54.75.69.192200 OK 43 B URL GET HTTP/2 obseu.bizseasky.com/tracker/tc_imp.gif?e=37dfbd8ee84e00126aecc13dea468f9a9225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d5f15896a2417071a10acf9f29f674e87d6dc542b3749fb2972558733de3195553450759406035e3c075d92eb6f1b77be26bb25cb43e29a3aee5b6fb2092f6410df57fe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400027db0b68acdebcf179ef64fd718940a8116e71b9d637793a7a589513d0df4ca65b7de792b127537a30ca946c75ca92560c291124560ea18c7a312e07f5af1c2b8dfda02dc4b45e274c79fda4f3939e71eccfc248b5038e523c60cbe986a7b376cccee879cf774a91bac333074aae3f34eec55620b79bae6adc59a259b0861ac04cced029866d60d0d979d73a9d91b0a2cdb6bd4e608d77f2ffba6a5b21bea57692c205f402585c820903d48688d8c6b0843dc76d80bab18376e93b2b108d2a259c9b8a4f26c7ec61aa10f6800ac653897e4e427bcb39b81de1e4b969b5ba1cc40ce8c3ccd877c9096069f6501313300978c0ec3be70b94dc8027b49369bdc87d89d3a7be7ccfe8a7734b3ec6a95e0483e7471a15f7acba62b828d8bf0abaa26ce73eb23b8741c80684f02ecd0874bcfbd3627f7f331136190246ecb8db3d965be81b5c493ba6a653cdcf497fa2e18ae4f81596ffeeee9beab3e31d1d4fa71ed3e81d17d7516f09ca7141632eaa69a51d1ddef6c061827cd42488b731cbb80d85660921211e61159cc4f8c63f7d5186054692d5c5a6b1ca53059eaca07c96cf7173c4cf133c69fa93c54b20b7278657f206f16bde4b8fda19eabb2ce39c88d09e4f62eee5337dc211d3f4edcb75fa19514d52c5000014a3bf4dcca94d9e8b91da55d38680330c314fbe3cae0db42fe8c22dc0480a761e3c3c18870fcaf02149ab2b85fea127d3dd4c927574af137a249fe9d40244e811fdcf76df71674a4afe6e4bf3fb887ad7457cdad301abb4b0e392009e04472814ee657103d8c17003e96da3a79e73ed86bb570222b0602114169b4212f493ed19128c70318ec6954bc8c8a88f0460a83ae542360ad05c7c3c8681164b8acaf189a1e151f330f82b8979dd9d5b8794b8596bb0d51b9bc0e9a0cea587917717c1&cri=sTjwe1eMGi&ts=389&cb=1702680158763
IP 54.75.69.192:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerZeroSSL
Subject*.bizseasky.com
Fingerprint0D:4D:50:97:62:CE:13:A8:AE:95:8C:4F:6B:27:CD:BB:CB:E1:04:5F
ValiditySun, 12 Nov 2023 00:00:00 GMT - Sat, 10 Feb 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1
- data
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /tracker/tc_imp.gif?e=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&cri=sTjwe1eMGi&ts=389&cb=1702680158763 HTTP/1.1
Host: obseu.bizseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://linkvertise.com/
Cookie: cg_uuid=75eec78b5a5a081cba4ef7d31932de4d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Fri, 15 Dec 2023 22:42:38 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2
www.thinksuggest.org/simple/suggest-min-unpacked.js
176.9.175.232200 OK 52 kB URL GET HTTP/1.1 www.thinksuggest.org/simple/suggest-min-unpacked.js
IP 176.9.175.232:443
ASN #24940 Hetzner Online GmbH
Requested by https://linkvertise.com/assets/external/thinksuggest
Certificate IssuerLet's Encrypt
Subjectthinksuggest.org
Fingerprint34:ED:3D:96:D2:F6:34:63:D2:A4:EC:DD:75:76:40:CD:D6:7E:F7:EB
ValidityThu, 26 Oct 2023 23:03:23 GMT - Wed, 24 Jan 2024 23:03:22 GMT
File type Unicode text, UTF-8 text, with very long lines (51479), with no line terminators
Hash cd2f3074326840d55a3c3ea1e99e83fe
3a2e1d1a93506526ae3ed2b44d584af7771ff8d0
9ec9f50ac6a5dfdf7ace0a047ab4e86a7f8ff297030f93f9b8b4e27c57fdaa51
GET /simple/suggest-min-unpacked.js HTTP/1.1
Host: www.thinksuggest.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://linkvertise.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 15 Dec 2023 22:42:37 GMT
Content-Type: application/javascript
Content-Length: 51487
Last-Modified: Fri, 05 Jun 2020 12:39:04 GMT
Connection: keep-alive
ETag: "5eda3ce8-c91f"
Accept-Ranges: bytes
www.thinksuggest.org/simple/suggest-min-unpacked.js
176.9.175.232200 OK 52 kB URL GET HTTP/1.1 www.thinksuggest.org/simple/suggest-min-unpacked.js
IP 176.9.175.232:443
ASN #24940 Hetzner Online GmbH
Requested by https://linkvertise.com/assets/external/thinksuggest
Certificate IssuerLet's Encrypt
Subjectthinksuggest.org
Fingerprint34:ED:3D:96:D2:F6:34:63:D2:A4:EC:DD:75:76:40:CD:D6:7E:F7:EB
ValidityThu, 26 Oct 2023 23:03:23 GMT - Wed, 24 Jan 2024 23:03:22 GMT
File type Unicode text, UTF-8 text, with very long lines (51479), with no line terminators
Hash cd2f3074326840d55a3c3ea1e99e83fe
3a2e1d1a93506526ae3ed2b44d584af7771ff8d0
9ec9f50ac6a5dfdf7ace0a047ab4e86a7f8ff297030f93f9b8b4e27c57fdaa51
GET /simple/suggest-min-unpacked.js HTTP/1.1
Host: www.thinksuggest.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://linkvertise.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 15 Dec 2023 22:42:37 GMT
Content-Type: application/javascript
Content-Length: 51487
Last-Modified: Fri, 05 Jun 2020 12:39:04 GMT
Connection: keep-alive
ETag: "5eda3ce8-c91f"
Accept-Ranges: bytes
linkvertise.chargebeestaticv2.com/api/internal/1702679400/retrieve_js_info
143.204.55.57202 Accepted 0 B URL OPTIONS HTTP/2 linkvertise.chargebeestaticv2.com/api/internal/1702679400/retrieve_js_info
IP 143.204.55.57:443
Requested by https://js.chargebee.com/assets/cbjs-2023.12.13-07.12/v2/master.html#linkvertise.com
Certificate IssuerAmazon
Subject*.chargebeestaticv2.com
Fingerprint34:17:8E:25:49:6C:47:0F:7A:39:C3:CE:61:BC:F6:75:C6:63:D4:78
ValiditySun, 30 Apr 2023 00:00:00 GMT - Wed, 29 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/internal/1702679400/retrieve_js_info HTTP/1.1
Host: linkvertise.chargebeestaticv2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-requested-with
Referer: https://js.chargebee.com/
Origin: https://js.chargebee.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 202 Accepted
content-length: 0
date: Fri, 15 Dec 2023 22:42:38 GMT
cache-control: max-age=0, must-revalidate, public, s-maxage=10800
expires: Thu, 01 Jan 1970 00:00:00 UTC
strict-transport-security: max-age=31536000; includeSubDomains; preload
pragma: no-cache
access-control-allow-origin: https://js.chargebee.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, cb-csrf-token, leap.api.version, chargebee-business-entity-id, X-TP-Token
access-control-allow-methods: GET, OPTIONS, POST
server: ChargeBee
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: L8PUB4XDiRMJwRSA6rkDbmGobUUriPbXaONJz2GQsPSf275bBE8rnA==
X-Firefox-Spdy: h2
linkvertise.com/android-icon-192x192.png
172.67.216.138200 OK 15 kB URL GET HTTP/3 linkvertise.com/android-icon-192x192.png
IP 172.67.216.138:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerLet's Encrypt
Subjectlinkvertise.com
Fingerprint71:B7:29:DC:D3:4F:3B:85:5C:C0:50:5E:D6:75:3C:9A:4C:B1:8E:55
ValidityWed, 18 Oct 2023 12:12:43 GMT - Tue, 16 Jan 2024 12:12:42 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
- data
Hash ed46a7ccdddb0893ada7535c3924c3f4
562c8354b302540427a85381bdb663c66aba3cbd
a6717eaed7cb05dddfdc4803fd85ef5cf6a96e0cde11800961b6f713f460d302
GET /android-icon-192x192.png HTTP/1.1
Host: linkvertise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://linkvertise.com/222235/freevpn?o=sharingzKhttps:%2F%2Fwww.mediafire.com%2Ffile%2Fk0ljmyccufpcssq%2FDankMemer_Auto_Farm.rar%2Ffile
DNT: 1
Connection: keep-alive
Cookie: _cq_duid=1.1702680158.pWEImPSVEUkgaXst; _cq_suid=1.1702680158.JjstfJygo6qWVetA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 15 Dec 2023 22:42:38 GMT
content-type: image/png
content-length: 15148
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "319c9c02c4fd920a11cdb515dc5e0616"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pY5OsLd5tNQaKnSfQ%2BLhOrmupTNegMvjpvN%2B14xBq5bFNaX2DqCFTFuLCWVO2Z%2BxQ7nLO%2F%2BdwduIjwRwwDOeYQwF9VAi4o6v9S5BcXNBCmIYP%2Bs5kXYsNoypCvb6JlugUjc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
x-frame-options: sameorigin
server: cloudflare
cf-ray: 8362336c4bebb51b-OSL
alt-svc: h3=":443"; ma=86400
linkvertise.com/favicon-16x16.png
172.67.216.138200 OK 1.6 kB URL GET HTTP/3 linkvertise.com/favicon-16x16.png
IP 172.67.216.138:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerLet's Encrypt
Subjectlinkvertise.com
Fingerprint71:B7:29:DC:D3:4F:3B:85:5C:C0:50:5E:D6:75:3C:9A:4C:B1:8E:55
ValidityWed, 18 Oct 2023 12:12:43 GMT - Tue, 16 Jan 2024 12:12:42 GMT
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced
- data
Hash beace267eacc0385dcc7ccdc2418bf0e
96605a6079541051d1dae94f0d384fd710c0a83a
9de2bf1e2e014393595af18eda66ca3b7936c557013954d7ca580eaaaf62a487
GET /favicon-16x16.png HTTP/1.1
Host: linkvertise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://linkvertise.com/222235/freevpn?o=sharingzKhttps:%2F%2Fwww.mediafire.com%2Ffile%2Fk0ljmyccufpcssq%2FDankMemer_Auto_Farm.rar%2Ffile
DNT: 1
Connection: keep-alive
Cookie: _cq_duid=1.1702680158.pWEImPSVEUkgaXst; _cq_suid=1.1702680158.JjstfJygo6qWVetA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 15 Dec 2023 22:42:38 GMT
content-type: image/png
content-length: 1618
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "5d359af3dd245fbd87a14af244f84fa8"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O3RiNXGge%2Bj7AYSigoRI8hXq0tOdEHqlez9dSWbRKf3KbOh5LfxGrA5Q3uo54%2BQtjQlD9sUWgkZQXSaO3rLJ4K%2F6%2B2DTg2sf%2BUMW9Y40f%2FG087VvyeiEp4i2yK2yFvRSbo8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
x-frame-options: sameorigin
server: cloudflare
cf-ray: 8362336c4becb51b-OSL
alt-svc: h3=":443"; ma=86400
linkvertise.chargebeestaticv2.com/api/internal/1702679400/retrieve_js_info
143.204.55.57202 Accepted 603 B URL OPTIONS HTTP/2 linkvertise.chargebeestaticv2.com/api/internal/1702679400/retrieve_js_info
IP 143.204.55.57:443
Requested by https://js.chargebee.com/assets/cbjs-2023.12.13-07.12/v2/master.html#linkvertise.com
Certificate IssuerAmazon
Subject*.chargebeestaticv2.com
Fingerprint34:17:8E:25:49:6C:47:0F:7A:39:C3:CE:61:BC:F6:75:C6:63:D4:78
ValiditySun, 30 Apr 2023 00:00:00 GMT - Wed, 29 May 2024 23:59:59 GMT
File type JSON data
- , ASCII text, with very long lines (603), with no line terminators
Hash b281a76a666991caa32094a650fec13d
b921408bc0bbbafc7e4070439ebbb4d86e8d99fa
bcbb03266f18da903d32372823a8c11b61f9a83e2bef3f9225e544147c805a2e
GET /api/internal/1702679400/retrieve_js_info HTTP/1.1
Host: linkvertise.chargebeestaticv2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Origin: https://js.chargebee.com
DNT: 1
Connection: keep-alive
Referer: https://js.chargebee.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json;charset=utf-8
content-length: 603
date: Fri, 15 Dec 2023 22:29:45 GMT
cache-control: max-age=0, must-revalidate, public, s-maxage=3600
expires: Thu, 01 Jan 1970 00:00:00 UTC
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: https://js.chargebee.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, cb-csrf-token, leap.api.version, chargebee-business-entity-id, X-TP-Token
access-control-allow-methods: GET, OPTIONS, POST
server: ChargeBee
x-cache: Hit from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: qJlSk0hj7xacU2SOrKPAKMpaHriKmA6_duMVZqGNtZfzOS38R4njog==
age: 773
X-Firefox-Spdy: h2
publisher.linkvertise.com/graphql?X-Linkvertise-UT=xEQRPr8i0PAhOWRDFSlSZPUSY5LABEtEjSqQJ2YmNlbna5xpNm7iIsfAgdKxhLDk
104.21.93.235200 OK 0 B URL POST HTTP/3 publisher.linkvertise.com/graphql?X-Linkvertise-UT=xEQRPr8i0PAhOWRDFSlSZPUSY5LABEtEjSqQJ2YmNlbna5xpNm7iIsfAgdKxhLDk
IP 104.21.93.235:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerGoogle Trust Services LLC
Subjectlinkvertise.com
FingerprintA9:D7:5E:8F:14:9D:05:DD:C2:C6:6D:E4:5F:1E:22:C8:88:2B:7A:79
ValidityWed, 06 Dec 2023 07:07:21 GMT - Tue, 05 Mar 2024 07:07:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /graphql?X-Linkvertise-UT=xEQRPr8i0PAhOWRDFSlSZPUSY5LABEtEjSqQJ2YmNlbna5xpNm7iIsfAgdKxhLDk HTTP/1.1
Host: publisher.linkvertise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://linkvertise.com/
Origin: https://linkvertise.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Fri, 15 Dec 2023 22:42:38 GMT
cache-control: no-cache, private
access-control-allow-origin: https://linkvertise.com
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-allow-headers: content-type
access-control-max-age: 0
set-cookie: laravel_session=ErJbYX2ebcU0aBYnO7QQwCeEMbUDQGTtIXUdMI4H; expires=Sat, 14 Dec 2024 22:42:38 GMT; Max-Age=31536000; path=/; domain=.linkvertise.com; httponly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dm%2BQYUj6lU%2B0FRnkjFPe76UUeZQ82Dsg4ybYbjAr9jTt9sXLZ0QvjsXH%2BtvS%2FGbC1R0pcwQIsiOxPBuN9wvRM3PqoEAVdGgafaCKGssQ7%2BCgwJy7doWunuhqRvvPRKwbMRT0nOERycOAaIFr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-frame-options: sameorigin
server: cloudflare
cf-ray: 8362336ce970b529-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
publisher.linkvertise.com/graphql?X-Linkvertise-UT=xEQRPr8i0PAhOWRDFSlSZPUSY5LABEtEjSqQJ2YmNlbna5xpNm7iIsfAgdKxhLDk
104.21.93.235200 OK 0 B URL POST HTTP/3 publisher.linkvertise.com/graphql?X-Linkvertise-UT=xEQRPr8i0PAhOWRDFSlSZPUSY5LABEtEjSqQJ2YmNlbna5xpNm7iIsfAgdKxhLDk
IP 104.21.93.235:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerGoogle Trust Services LLC
Subjectlinkvertise.com
FingerprintA9:D7:5E:8F:14:9D:05:DD:C2:C6:6D:E4:5F:1E:22:C8:88:2B:7A:79
ValidityWed, 06 Dec 2023 07:07:21 GMT - Tue, 05 Mar 2024 07:07:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /graphql?X-Linkvertise-UT=xEQRPr8i0PAhOWRDFSlSZPUSY5LABEtEjSqQJ2YmNlbna5xpNm7iIsfAgdKxhLDk HTTP/1.1
Host: publisher.linkvertise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://linkvertise.com/
Origin: https://linkvertise.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Fri, 15 Dec 2023 22:42:38 GMT
cache-control: no-cache, private
access-control-allow-origin: https://linkvertise.com
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-allow-headers: content-type
access-control-max-age: 0
set-cookie: laravel_session=qMUfRzOw63wOTYow9BQQ8KEbT4t3U05k9sV1CjuW; expires=Sat, 14 Dec 2024 22:42:38 GMT; Max-Age=31536000; path=/; domain=.linkvertise.com; httponly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5YMTFN0UOhsTQGuscIJDLaUNXuKM8O7xDXOmN%2Fljua9yEcxXjpKAAtgSKK3Z0aKrRK3sbbmanHonBy4WBlQxPTtN6tJcXqLHLnZHHM5BLFLZRgljj9M1HtMF6jJAshi7vbCMa0Ua4T71S5mq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-frame-options: sameorigin
server: cloudflare
cf-ray: 8362336ce973b529-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-7DRMH8RP03&l=dataLayer&cx=c
142.250.74.136200 OK 90 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-7DRMH8RP03&l=dataLayer&cx=c
IP 142.250.74.136:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
File type ASCII text, with very long lines (5955)
Hash d7ebdf46c518e07ec7fcead31ebba8b6
2c84bd67796c9a74b0c12091a994b6a7fcbe8832
e9e30044310d3d943b89c3b367b2581d8389670d02e80ce374c5127191618f5e
GET /gtag/js?id=G-7DRMH8RP03&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://linkvertise.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 15 Dec 2023 22:42:38 GMT
expires: Fri, 15 Dec 2023 22:42:38 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 89652
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
api.ipify.org/?format=jsonp&callback=getIP
173.231.16.77200 OK 29 B URL GET HTTP/1.1 api.ipify.org/?format=jsonp&callback=getIP
IP 173.231.16.77:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerSectigo Limited
Subject*.ipify.org
FingerprintF4:76:2D:2C:65:D1:15:BE:19:A4:C5:E0:8D:EB:89:1A:B6:75:4A:54
ValidityTue, 07 Feb 2023 00:00:00 GMT - Sun, 18 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 90a39389063c7c5716745c3b3bb4fba1
a0903c9a7e90fa3c6ddb04d0ce36abbd4c7a004f
eaa6745d9d0a7698235cd6af53aad1551d975506c8405d8303282fb6d2f7ab69
GET /?format=jsonp&callback=getIP HTTP/1.1
Host: api.ipify.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://linkvertise.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.25.1
Date: Fri, 15 Dec 2023 22:42:38 GMT
Content-Type: application/javascript
Content-Length: 29
Connection: keep-alive
Vary: Origin
newassets.hcaptcha.com/captcha/v1/1bcdbdd/static/hcaptcha.html
104.19.219.90 684 B URL newassets.hcaptcha.com/captcha/v1/1bcdbdd/static/hcaptcha.html
IP 104.19.219.90:0
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document, ASCII text, with very long lines (1165)
Hash ca8f07500f2ead4ad6d2ba90c38ad40c
c9d8dc14cadd51dfe603af031b2641815b6a27f7
f9ddd6aeaece2d7301af89b6609dc615ea48bc55cc4f7c894ae3135872b96df1
GET /captcha/v1/1bcdbdd/static/hcaptcha.html HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://js.chargebee.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 15 Dec 2023 22:42:38 GMT
content-type: text/html
cf-ray: 8362336e3898b4f9-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 64553
cache-control: max-age=1209600
last-modified: Thu, 14 Dec 2023 21:28:53 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 9b9ff06545217fe747384bd8b8509aa4.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
cross-origin-embedder-policy: credentialless
cross-origin-resource-policy: cross-origin
x-amz-cf-id: rE1EzyMRWeCaFx1en2BQPItsKc0EJc3h3QHMvEaUbx10tfYONK-4tA==
x-amz-cf-pop: ARN1-C1
x-amz-server-side-encryption: AES256
x-amz-version-id: sfBs_KpP21ISqEty0JtaAonCMuRUeTuB
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
content-encoding: br
newassets.hcaptcha.com/captcha/v1/1bcdbdd/hcaptcha.js
104.19.219.90200 OK 94 kB URL GET HTTP/3 newassets.hcaptcha.com/captcha/v1/1bcdbdd/hcaptcha.js
IP 104.19.219.90:443
Requested by https://newassets.hcaptcha.com/captcha/v1/1bcdbdd/static/hcaptcha.html#frame=checkbox&id=01hhag69iof7&host=js.chargebee.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=dc26aa54-4902-437f-80e2-a22947a6c01b&theme=light&origin=https%3A%2F%2Fjs.chargebee.com
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (41625)
Hash 7e838f5677110e2d4728775e18b0d3cc
11c9ff922d5dea187bbba733857a0356d209ab40
9f57e1e7f7381ec0e4eb185ca491323450dd0742b19a6097995bac78487a1835
GET /captcha/v1/1bcdbdd/hcaptcha.js HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/captcha/v1/1bcdbdd/static/hcaptcha.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 15 Dec 2023 22:42:38 GMT
content-type: application/javascript
cf-ray: 8362336f097bb4f9-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 64555
cache-control: max-age=1209600
etag: W/"b0204ba9adc9845b676113f41ae6d9c6"
last-modified: Thu, 14 Dec 2023 21:28:53 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 a62f7ce6b39c676fcfdde0f9a6fcf08e.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
cross-origin-resource-policy: cross-origin
x-amz-cf-id: uDbxIsErpIIIVdMrmOaNFzUfX1yH-MRW0zeTNn93HS3sckpH3fqh8g==
x-amz-cf-pop: ARN1-C1
x-amz-server-side-encryption: AES256
x-amz-version-id: o2o2WA3L7Ll5QYn5daiC77yP7vRQJRVn
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
content-encoding: br
publisher.linkvertise.com/graphql?X-Linkvertise-UT=xEQRPr8i0PAhOWRDFSlSZPUSY5LABEtEjSqQJ2YmNlbna5xpNm7iIsfAgdKxhLDk
104.21.93.235200 OK 15 kB URL POST HTTP/3 publisher.linkvertise.com/graphql?X-Linkvertise-UT=xEQRPr8i0PAhOWRDFSlSZPUSY5LABEtEjSqQJ2YmNlbna5xpNm7iIsfAgdKxhLDk
IP 104.21.93.235:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerGoogle Trust Services LLC
Subjectlinkvertise.com
FingerprintA9:D7:5E:8F:14:9D:05:DD:C2:C6:6D:E4:5F:1E:22:C8:88:2B:7A:79
ValidityWed, 06 Dec 2023 07:07:21 GMT - Tue, 05 Mar 2024 07:07:20 GMT
File type JSON data
- , ASCII text, with very long lines (17717), with no line terminators
Hash 23836d543c1c10049b797259fe916a4c
20405ec83c327e61399b3aabd1a5894b79640337
095a702f8a44d9137a3974eecc9fa6c504d21d109ef392a3018c6eb5afccd93d
POST /graphql?X-Linkvertise-UT=xEQRPr8i0PAhOWRDFSlSZPUSY5LABEtEjSqQJ2YmNlbna5xpNm7iIsfAgdKxhLDk HTTP/1.1
Host: publisher.linkvertise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://linkvertise.com/
Content-Type: application/json
Content-Length: 951
Origin: https://linkvertise.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 15 Dec 2023 22:42:38 GMT
content-type: application/json
cache-control: no-cache, private
access-control-allow-origin: https://linkvertise.com
vary: Origin
access-control-allow-credentials: true
set-cookie: laravel_session=Rv52YFsB4MFRIrMnmwPtNp62ejASXogFWGgsfkGY; expires=Sat, 14 Dec 2024 22:42:38 GMT; Max-Age=31536000; path=/; domain=.linkvertise.com; httponly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QcnDSOFCakNPOlzsa1s8C1g4jvfXPj7APDB8Kjhg2bb1%2F4PtpJ1948%2BYVfbNCGCXhBQZvZwj9E9TWVu6w5I%2BfsuRSrLiQTS1tx3SQx2a9PJachZzH0jswK3amunfogDmBRcGXpOhFc0Ky096"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-frame-options: sameorigin
server: cloudflare
cf-ray: 8362336d3b99712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
obseu.bizseasky.com/mon
54.75.69.192200 OK 0 B IP 54.75.69.192:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerZeroSSL
Subject*.bizseasky.com
Fingerprint0D:4D:50:97:62:CE:13:A8:AE:95:8C:4F:6B:27:CD:BB:CB:E1:04:5F
ValiditySun, 12 Nov 2023 00:00:00 GMT - Sat, 10 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.bizseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2306
Origin: https://linkvertise.com
DNT: 1
Connection: keep-alive
Referer: https://linkvertise.com/
Cookie: cg_uuid=75eec78b5a5a081cba4ef7d31932de4d
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://linkvertise.com
content-type: application/json
date: Fri, 15 Dec 2023 22:42:41 GMT
content-length: 0
X-Firefox-Spdy: h2
obseu.bizseasky.com/mon
54.75.69.192200 OK 0 B IP 54.75.69.192:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerZeroSSL
Subject*.bizseasky.com
Fingerprint0D:4D:50:97:62:CE:13:A8:AE:95:8C:4F:6B:27:CD:BB:CB:E1:04:5F
ValiditySun, 12 Nov 2023 00:00:00 GMT - Sat, 10 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.bizseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2306
Origin: https://linkvertise.com
DNT: 1
Connection: keep-alive
Referer: https://linkvertise.com/
Cookie: cg_uuid=75eec78b5a5a081cba4ef7d31932de4d
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://linkvertise.com
content-type: application/json
date: Fri, 15 Dec 2023 22:42:43 GMT
content-length: 0
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
104.18.10.207200 OK 14 kB URL GET HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
IP 104.18.10.207:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint34:BC:91:5F:B9:EC:32:2C:D9:73:C7:88:C3:6C:FB:77:E7:70:8D:04
ValidityThu, 30 Nov 2023 00:15:17 GMT - Wed, 28 Feb 2024 00:15:16 GMT
File type ASCII text, with very long lines (50758)
Hash 67176c242e1bdc20603c878dee836df3
27a71b00383d61ef3c489326b3564d698fc1227c
56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4
GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://linkvertise.com
DNT: 1
Connection: keep-alive
Referer: https://linkvertise.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 15 Dec 2023 22:42:36 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"67176c242e1bdc20603c878dee836df3"
last-modified: Mon, 25 Jan 2021 22:04:06 GMT
cdn-cachedat: 10/31/2023 18:58:40
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1048
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: cfa938290e0da38f66e73e3dc2cf6384
cdn-cache: HIT
cf-cache-status: HIT
age: 1359918
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 83623360fb17568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
newassets.hcaptcha.com/captcha/v1/1bcdbdd/static/hcaptcha.html?_v=9t80536rehi
104.19.219.90 1.4 kB URL newassets.hcaptcha.com/captcha/v1/1bcdbdd/static/hcaptcha.html?_v=9t80536rehi
IP 104.19.219.90:0
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document, ASCII text, with very long lines (1165)
Hash 90dee2d0de0550ebd800c5620a09fc04
5da9c52f20952298a484c5dda06aefdb9afa2b35
a9be3e54e24e9c0a0eef01b7247762697c4e88a324bad2203c303ac2ed297a02
GET /captcha/v1/1bcdbdd/static/hcaptcha.html?_v=9t80536rehi HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://js.chargebee.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 15 Dec 2023 22:42:38 GMT
content-type: text/html
cf-ray: 8362336e389bb4f9-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 64553
cache-control: max-age=1209600
last-modified: Thu, 14 Dec 2023 21:28:53 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 9b9ff06545217fe747384bd8b8509aa4.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
cross-origin-embedder-policy: credentialless
cross-origin-resource-policy: cross-origin
x-amz-cf-id: rE1EzyMRWeCaFx1en2BQPItsKc0EJc3h3QHMvEaUbx10tfYONK-4tA==
x-amz-cf-pop: ARN1-C1
x-amz-server-side-encryption: AES256
x-amz-version-id: sfBs_KpP21ISqEty0JtaAonCMuRUeTuB
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
content-encoding: br
linkvertise.com/assets/external/thinksuggest
172.67.216.138200 OK 5.7 kB URL GET HTTP/3 linkvertise.com/assets/external/thinksuggest
IP 172.67.216.138:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerLet's Encrypt
Subjectlinkvertise.com
Fingerprint71:B7:29:DC:D3:4F:3B:85:5C:C0:50:5E:D6:75:3C:9A:4C:B1:8E:55
ValidityWed, 18 Oct 2023 12:12:43 GMT - Tue, 16 Jan 2024 12:12:42 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document, ASCII text, with very long lines (5957), with no line terminators
Hash c8e5ce5062d5ca3f13a7a9d673befb9b
40c1b3ad158a4d0870b9a3c51807427de8cb1dc8
eff45eded70288392fc04fc971d4196f15757435d1273068f1f3037c21bfc11d
GET /assets/external/thinksuggest HTTP/1.1
Host: linkvertise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 15 Dec 2023 22:42:37 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
link: <https://www.google.com/>; rel="preconnect", <https://api.bing.com/>; rel="preconnect", <https://lnk.thinksuggest.org/>; rel="preconnect", <https://api.thinksuggest.org/>; rel="preconnect", <https://api.thinksuggest.org/>; rel="preconnect"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=srNiWDt4J3e6f0HAWz5xhQKcMz70DwQk0ryr7zWQtiizm6j0tbreh0ie2%2BBGYbQVuLeS3IhtzKgux1yne91YZgkTwzhIcW2QEbengFTDu%2FOGpJglIhQPBnvjBdWr05G8aY0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
x-frame-options: sameorigin
server: cloudflare
cf-ray: 83623365d8d6b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
linkvertise.com/assets/img/logo-white-square.png
172.67.216.138200 OK 13 kB URL GET HTTP/3 linkvertise.com/assets/img/logo-white-square.png
IP 172.67.216.138:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerLet's Encrypt
Subjectlinkvertise.com
Fingerprint71:B7:29:DC:D3:4F:3B:85:5C:C0:50:5E:D6:75:3C:9A:4C:B1:8E:55
ValidityWed, 18 Oct 2023 12:12:43 GMT - Tue, 16 Jan 2024 12:12:42 GMT
File type PNG image data, 292 x 292, 8-bit/color RGBA, non-interlaced
- data
Hash fa602f2b99d57e37a0dfdbb56c83b35d
6c1b04568aea6972e84be6075ef992938a551953
1283c45f0e6af2ad475ea0e45924d26a2b7b961bae669bfa904a78b272c1a1b0
GET /assets/img/logo-white-square.png HTTP/1.1
Host: linkvertise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://linkvertise.com/222235/freevpn?o=sharingzKhttps:%2F%2Fwww.mediafire.com%2Ffile%2Fk0ljmyccufpcssq%2FDankMemer_Auto_Farm.rar%2Ffile
DNT: 1
Connection: keep-alive
Cookie: _cq_duid=1.1702680158.pWEImPSVEUkgaXst; _cq_suid=1.1702680158.JjstfJygo6qWVetA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 15 Dec 2023 22:42:37 GMT
content-type: image/png
content-length: 12712
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "be27dc8ad17aac673f1646743d1ec608"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CMJvGN3nZfk0UeGOhkqCkPTHp5qUpBAkiK0C%2BgeHN7w2PwkfkooHIKmrnYEjG06VhtF4Q5CZwKAQiIkRCsreNAvdDtmgIh6YNDM1g7fFD4wPAmkj%2BqNbRqnMcrAg8gqeseI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
x-frame-options: sameorigin
server: cloudflare
cf-ray: 8362336ada6fb51b-OSL
alt-svc: h3=":443"; ma=86400
linkvertise.com/assets/i18n/en.json?v=1&X-Linkvertise-UT=xEQRPr8i0PAhOWRDFSlSZPUSY5LABEtEjSqQJ2YmNlbna5xpNm7iIsfAgdKxhLDk
172.67.216.138200 OK 94 kB URL GET HTTP/3 linkvertise.com/assets/i18n/en.json?v=1&X-Linkvertise-UT=xEQRPr8i0PAhOWRDFSlSZPUSY5LABEtEjSqQJ2YmNlbna5xpNm7iIsfAgdKxhLDk
IP 172.67.216.138:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerLet's Encrypt
Subjectlinkvertise.com
Fingerprint71:B7:29:DC:D3:4F:3B:85:5C:C0:50:5E:D6:75:3C:9A:4C:B1:8E:55
ValidityWed, 18 Oct 2023 12:12:43 GMT - Tue, 16 Jan 2024 12:12:42 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /assets/i18n/en.json?v=1&X-Linkvertise-UT=xEQRPr8i0PAhOWRDFSlSZPUSY5LABEtEjSqQJ2YmNlbna5xpNm7iIsfAgdKxhLDk HTTP/1.1
Host: linkvertise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://linkvertise.com/222235/freevpn?o=sharingzKhttps:%2F%2Fwww.mediafire.com%2Ffile%2Fk0ljmyccufpcssq%2FDankMemer_Auto_Farm.rar%2Ffile
Content-Type: application/json
DNT: 1
Connection: keep-alive
Cookie: _cq_duid=1.1702680158.pWEImPSVEUkgaXst; _cq_suid=1.1702680158.JjstfJygo6qWVetA
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 15 Dec 2023 22:42:38 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"f53dd8cd5325818107facaa07a6f7dd9"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wQWOzpezpdyIFg6OR%2BWyZOkdhenBYvWYp5GF9cLJMORHsMSz5f%2FWT4C6PJ8DkbdyO5ndPJTrpzfPfsVwZMfZTsm%2BZDBKKVIIJcFlLjxF4ZFhhcy%2F403WvWc%2Fwibf0bi8Bh0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
x-frame-options: sameorigin
server: cloudflare
cf-ray: 8362336c5befb51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
api.hcaptcha.com/checksiteconfig?v=1bcdbdd&host=js.chargebee.com&sitekey=dc26aa54-4902-437f-80e2-a22947a6c01b&sc=1&swa=1&spst=0
104.19.219.90200 OK 719 B URL POST HTTP/3 api.hcaptcha.com/checksiteconfig?v=1bcdbdd&host=js.chargebee.com&sitekey=dc26aa54-4902-437f-80e2-a22947a6c01b&sc=1&swa=1&spst=0
IP 104.19.219.90:443
Requested by https://newassets.hcaptcha.com/captcha/v1/1bcdbdd/static/hcaptcha.html?_v=9t80536rehi#frame=challenge&id=01hhag69iof7&host=js.chargebee.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=dc26aa54-4902-437f-80e2-a22947a6c01b&theme=light&origin=https%3A%2F%2Fjs.chargebee.com
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (735), with no line terminators
Hash e086cbf26c1526bd4b730408c83c62f3
5768e3f9477da0528c57e4f58ad0aaf9a0eaea88
f173bb9e3fc99a7e90136948a5f82490025c263f0aa82a8d95a6628694102f55
POST /checksiteconfig?v=1bcdbdd&host=js.chargebee.com&sitekey=dc26aa54-4902-437f-80e2-a22947a6c01b&sc=1&swa=1&spst=0 HTTP/1.1
Host: api.hcaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://newassets.hcaptcha.com
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/3 200 OK
date: Fri, 15 Dec 2023 22:42:38 GMT
content-type: application/json
access-control-allow-origin: https://newassets.hcaptcha.com
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control, Content-Type, DNT, Referer, User-Agent, challenge-bypass-token, cf-chl-bypass, challenge-bypass-token, challenge-bypass-host, challenge-bypass-path
access-control-allow-methods: GET, HEAD, POST, OPTIONS
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 836233719c9fb4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
linkvertise.com/polyfills.bd3b6746195e9466.js
172.67.216.138200 OK 35 kB URL GET HTTP/3 linkvertise.com/polyfills.bd3b6746195e9466.js
IP 172.67.216.138:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerLet's Encrypt
Subjectlinkvertise.com
Fingerprint71:B7:29:DC:D3:4F:3B:85:5C:C0:50:5E:D6:75:3C:9A:4C:B1:8E:55
ValidityWed, 18 Oct 2023 12:12:43 GMT - Tue, 16 Jan 2024 12:12:42 GMT
File type ASCII text, with very long lines (34605), with no line terminators
Hash 70861480978e1a3305ba895d593cbdbe
4d82f1b0ee8a88bc58f997b60d8b44add0495985
08b25c4d3b49bd0d17a443cd2a009f58355b5eea6094112e27916e10e606d5a6
GET /polyfills.bd3b6746195e9466.js HTTP/1.1
Host: linkvertise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 15 Dec 2023 22:42:36 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"5d23b46a866e5f24cab68ca070719832"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Vy%2F1dBQXmHn%2Fstf96vzBGslxL%2FBCAeW96Oe2KlunpAHR3OAIctjSfeSZej%2FNqOjQBKMhw%2ByhIvrJejZgXm53WMPxWN3l56XUE7cx4brKvM616Qteuyp0dcxaY9DlLWuFBgQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
x-frame-options: sameorigin
server: cloudflare
cf-ray: 836233608bf6b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
linkvertise.com/scripts.2c67031671ec753c.js
172.67.216.138200 OK 213 kB URL GET HTTP/3 linkvertise.com/scripts.2c67031671ec753c.js
IP 172.67.216.138:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerLet's Encrypt
Subjectlinkvertise.com
Fingerprint71:B7:29:DC:D3:4F:3B:85:5C:C0:50:5E:D6:75:3C:9A:4C:B1:8E:55
ValidityWed, 18 Oct 2023 12:12:43 GMT - Tue, 16 Jan 2024 12:12:42 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 213 kB (212781 bytes)
Hash 0011054b41bdd3e975a44042f1314258
eba2fce9a6b822042ecdfead5196d7b7beaaf4d3
437f22be73ae18d1b50bed0834aa72238a787f60a9e516046022d222919e4db8
GET /scripts.2c67031671ec753c.js HTTP/1.1
Host: linkvertise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 15 Dec 2023 22:42:36 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"8f11fd2517fd51edd99dad73c61de349"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X92Gup2sgHFWMKmVCuqp%2BNfPqZA2pnf85fo0hUUkEyIBWvaMc7Q%2FoQ5gkvoRxl0Rb7wPB2UI8r6Qt%2FRr0EZDEJaKG%2F%2B72JKO63g8CQF0reGrYCwaE3%2BreSwD0jg3VIr9vLU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
x-frame-options: sameorigin
server: cloudflare
cf-ray: 836233608bf7b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
linkvertise.com/runtime.36f4c494c1306fac.js
172.67.216.138200 OK 3.6 kB URL GET HTTP/3 linkvertise.com/runtime.36f4c494c1306fac.js
IP 172.67.216.138:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerLet's Encrypt
Subjectlinkvertise.com
Fingerprint71:B7:29:DC:D3:4F:3B:85:5C:C0:50:5E:D6:75:3C:9A:4C:B1:8E:55
ValidityWed, 18 Oct 2023 12:12:43 GMT - Tue, 16 Jan 2024 12:12:42 GMT
File type ASCII text, with very long lines (3674), with no line terminators
Hash 89fec82d107610f2db203e3afe42d5d3
72f9f91e908eb278730bd81b22ace333c3d8833b
75e49573f72a9eddd29ff66bd1f4573fc808dccb013aad184499642c0750a363
GET /runtime.36f4c494c1306fac.js HTTP/1.1
Host: linkvertise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 15 Dec 2023 22:42:36 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"051365cd20770da054055bb4415bd0b2"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HUqslM7qRyoYIosrVdwmsT9Cbynt9L5ltpW0hGSiFs38o9V8IBFNqLZqKypQOBaDGQvAuCJJcVT%2BvfMWWOmg5Z3HHlUXhEZRhR%2Fws8Xtrle966mWKb9EcckxusjAYnF9S0Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
x-frame-options: sameorigin
server: cloudflare
cf-ray: 836233608bf4b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
linkvertise.com/assets/img/logo-white-square.png
172.67.216.138200 OK 13 kB URL GET HTTP/3 linkvertise.com/assets/img/logo-white-square.png
IP 172.67.216.138:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerLet's Encrypt
Subjectlinkvertise.com
Fingerprint71:B7:29:DC:D3:4F:3B:85:5C:C0:50:5E:D6:75:3C:9A:4C:B1:8E:55
ValidityWed, 18 Oct 2023 12:12:43 GMT - Tue, 16 Jan 2024 12:12:42 GMT
File type PNG image data, 292 x 292, 8-bit/color RGBA, non-interlaced
- data
Hash fa602f2b99d57e37a0dfdbb56c83b35d
6c1b04568aea6972e84be6075ef992938a551953
1283c45f0e6af2ad475ea0e45924d26a2b7b961bae669bfa904a78b272c1a1b0
GET /assets/img/logo-white-square.png HTTP/1.1
Host: linkvertise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://linkvertise.com/222235/freevpn?o=sharingzKhttps:%2F%2Fwww.mediafire.com%2Ffile%2Fk0ljmyccufpcssq%2FDankMemer_Auto_Farm.rar%2Ffile
DNT: 1
Connection: keep-alive
Cookie: _cq_duid=1.1702680158.pWEImPSVEUkgaXst; _cq_suid=1.1702680158.JjstfJygo6qWVetA; _ga_7DRMH8RP03=GS1.1.1702680159.1.0.1702680159.0.0.0; _ga=GA1.1.1802572583.1702680159
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 15 Dec 2023 22:42:40 GMT
content-type: image/png
content-length: 12712
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "be27dc8ad17aac673f1646743d1ec608"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qPw%2BDweZn399dbgbRp0SlAmDicvcnHhhbak4LUEKCDhITCu7Ci2kTM3bmu7Z52%2B8v47aPyoGrbWpuKOm8kY3VwBgeqNDWYHI35BrYerNqbEmUKvWCsR%2B6CBmkgLeXtxClRA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
x-frame-options: sameorigin
server: cloudflare
cf-ray: 83623378de62b51b-OSL
alt-svc: h3=":443"; ma=86400
linkvertise.com/assets/img/loading.gif
172.67.216.138200 OK 49 kB URL GET HTTP/3 linkvertise.com/assets/img/loading.gif
IP 172.67.216.138:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerLet's Encrypt
Subjectlinkvertise.com
Fingerprint71:B7:29:DC:D3:4F:3B:85:5C:C0:50:5E:D6:75:3C:9A:4C:B1:8E:55
ValidityWed, 18 Oct 2023 12:12:43 GMT - Tue, 16 Jan 2024 12:12:42 GMT
File type GIF image data, version 89a, 64 x 64
- data
Hash ec5d553ed1c592ef6c64daaa94194358
647f0de2ba6b511ceab755fbfb84a0cdf5d0ac6e
47825a900e347c3ebe2ed17dba529d293ca8a3016faaad7ac8b3850df2fcf9f0
GET /assets/img/loading.gif HTTP/1.1
Host: linkvertise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 15 Dec 2023 22:42:37 GMT
content-type: image/gif
content-length: 49203
cf-cache-status: DYNAMIC
accept-ranges: bytes
access-control-allow-origin: *
age: 36388
cache-control: public, s-maxage=604800
etag: "93b93d8627afc0ac51c9bf61666152e4"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-robots-tag: noindex
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cIkWBSAvbzu96GIxsRNIkbn8DjkliNffCdxxdlK0vM8YDp0%2FK640ucGZaHD2ZLQ3venSI99fXkLcQ73RU74Bljydz4HSnXeoTUg6Wb7b9l7AAFqD6jxyOl8XaYvc1gJ%2BdCs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-frame-options: sameorigin
server: cloudflare
cf-ray: 83623365c8d0b51b-OSL
alt-svc: h3=":443"; ma=86400
newassets.hcaptcha.com/captcha/v1/1bcdbdd/static/hcaptcha.html?_v=9t80536rehi
104.19.219.90200 OK 1.9 kB URL GET HTTP/3 newassets.hcaptcha.com/captcha/v1/1bcdbdd/static/hcaptcha.html?_v=9t80536rehi
IP 104.19.219.90:443
Requested by https://js.chargebee.com/assets/cbjs-2023.12.13-07.12/v2/master.html#linkvertise.com
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document, ASCII text, with very long lines (1903), with no line terminators
Hash aa25ec6198129ee6a4727b0665b7e8ec
1a0e754083e4fec60d3153a4bebb7d87b6d6a9b2
1e9d599ec2a816eb90cafefefeaa73db43a1b972ef8a5144fa8b691f5e4be2a1
GET /captcha/v1/1bcdbdd/static/hcaptcha.html?_v=9t80536rehi HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://js.chargebee.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 15 Dec 2023 22:42:38 GMT
content-type: text/html
cf-ray: 8362336e389bb4f9-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 64553
cache-control: max-age=1209600
last-modified: Thu, 14 Dec 2023 21:28:53 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 9b9ff06545217fe747384bd8b8509aa4.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
cross-origin-embedder-policy: credentialless
cross-origin-resource-policy: cross-origin
x-amz-cf-id: rE1EzyMRWeCaFx1en2BQPItsKc0EJc3h3QHMvEaUbx10tfYONK-4tA==
x-amz-cf-pop: ARN1-C1
x-amz-server-side-encryption: AES256
x-amz-version-id: sfBs_KpP21ISqEty0JtaAonCMuRUeTuB
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
content-encoding: br
maxst.icons8.com/vue-static/landings/line-awesome/line-awesome/1.3.0/css/line-awesome.min.css
185.76.9.17200 OK 90 kB URL GET HTTP/2 maxst.icons8.com/vue-static/landings/line-awesome/line-awesome/1.3.0/css/line-awesome.min.css
IP 185.76.9.17:443
ASN #60068 Datacamp Limited
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerLet's Encrypt
Subject1454623486.rsc.cdn77.org
FingerprintD6:8D:BB:90:BE:49:9E:7B:1D:10:1F:4E:71:22:45:F5:E4:6C:AB:D7
ValiditySun, 26 Nov 2023 10:59:23 GMT - Sat, 24 Feb 2024 10:59:22 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 73db02545cf13e8c82b51b62782df0d6
c1bd14187b6dcb36efad21e51711f8941801de0f
ce61a18cf084f15003798340044643f329ac5f90045acb2d9e778368bd799854
GET /vue-static/landings/line-awesome/line-awesome/1.3.0/css/line-awesome.min.css HTTP/1.1
Host: maxst.icons8.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://linkvertise.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 15 Dec 2023 22:42:36 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding, Accept-Encoding
etag: W/"15e81-wb0UGHttyzbvrSHlFxH4lBgB3g8"
last-modified: 2022-05-16T12:30:47.897Z
server-timing: -;dur=0;desc="Generate"
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
access-control-allow-credentials: true
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
server: CDN77-Turbo
x-77-nzt: EQwBuUwJDQH3DmzxAg
x-77-nzt-ray: c0a4cc280cc2ea055cd67c658c7dd817
x-accel-expires: @1968663886
x-accel-date: 1653303886
x-cache-lb: HIT
x-age-lb: 49376270
x-77-pop: stockholmSE
x-77-cache: HIT
x-77-age: 49376270
content-encoding: gzip
X-Firefox-Spdy: h2
js.chargebee.com/assets/cbjs-2023.12.13-07.12/v2/205-d0127e88990965698529.js
143.204.55.124200 OK 3.3 kB URL GET HTTP/2 js.chargebee.com/assets/cbjs-2023.12.13-07.12/v2/205-d0127e88990965698529.js
IP 143.204.55.124:443
Requested by https://js.chargebee.com/assets/cbjs-2023.12.13-07.12/v2/master.html#linkvertise.com
Certificate IssuerAmazon
Subjectjs.chargebee.com
FingerprintB8:5C:38:C3:FB:23:73:61:30:7B:EA:4E:1C:7D:47:C4:64:B6:1A:2E
ValidityTue, 14 Mar 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (3379), with no line terminators
Hash 98419b58e85d55f6b15c4127af5f9119
ddb06473c15c485081354c4986ca1f927921120b
adb284c97d17ee9e9dad3cb5905ae6f31b2df8b6f1d072ad471f115ccfc8578b
GET /assets/cbjs-2023.12.13-07.12/v2/205-d0127e88990965698529.js HTTP/1.1
Host: js.chargebee.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://js.chargebee.com/assets/cbjs-2023.12.13-07.12/v2/master.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Wed, 13 Dec 2023 07:24:23 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: eGtVsR9TLn3UTy63Zp6SWAnCJ.TuPH7n
server: AmazonS3
strict-transport-security: max-age=300; includeSubdomains; preload
content-encoding: gzip
date: Fri, 15 Dec 2023 22:41:34 GMT
cache-control: max-age=300,public
etag: W/"d32f8b32f15478197725f8166456d7f1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: W_sYg-rLMLSFTINk6q3JnaB3H_1kSS6SJuPkL1XX1gTKf10BLv3qZw==
age: 74
X-Firefox-Spdy: h2
js.hcaptcha.com/1/api.js?onload=hCaptchaLoadCallback&render=explicit
104.19.219.90200 OK 334 kB URL GET HTTP/2 js.hcaptcha.com/1/api.js?onload=hCaptchaLoadCallback&render=explicit
IP 104.19.219.90:443
Requested by https://js.chargebee.com/assets/cbjs-2023.12.13-07.12/v2/master.html#linkvertise.com
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT
Size 334 kB (333578 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/api.js?onload=hCaptchaLoadCallback&render=explicit HTTP/1.1
Host: js.hcaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://js.chargebee.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 15 Dec 2023 22:42:38 GMT
content-type: application/javascript
cf-ray: 8362336d5ac7b517-OSL
cf-cache-status: HIT
age: 0
cache-control: max-age=300
etag: W/"b0204ba9adc9845b676113f41ae6d9c6"
last-modified: Thu, 14 Dec 2023 21:28:53 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 a62f7ce6b39c676fcfdde0f9a6fcf08e.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
cross-origin-resource-policy: cross-origin
x-amz-cf-id: uDbxIsErpIIIVdMrmOaNFzUfX1yH-MRW0zeTNn93HS3sckpH3fqh8g==
x-amz-cf-pop: ARN1-C1
x-amz-server-side-encryption: AES256
x-amz-version-id: o2o2WA3L7Ll5QYn5daiC77yP7vRQJRVn
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
172.67.216.138200 OK 43 kB URL User Request GET HTTP/2 linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
IP 172.67.216.138:443
Certificate IssuerLet's Encrypt
Subjectlinkvertise.com
Fingerprint71:B7:29:DC:D3:4F:3B:85:5C:C0:50:5E:D6:75:3C:9A:4C:B1:8E:55
ValidityWed, 18 Oct 2023 12:12:43 GMT - Tue, 16 Jan 2024 12:12:42 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document, ASCII text, with very long lines (12139)
Hash b34c7093a9317e5596f10ae7bb64eef5
488cd7ff2578143980e3cfb8e52d033716b28e36
304815c96f2d3411b4a5ab9b7552eb6d62bb89c125485ca91b1c85c34b5034b6
GET /222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file HTTP/1.1
Host: linkvertise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 15 Dec 2023 22:42:35 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xk8%2FqG%2BH%2BnBCTbcozLWcTLPaYHz29RhgYGhG9sYc%2BDSD1JotfvUQ0tmACZck0h4x3MfPoQRhzQaIv2jP1ytIZbhZjbd3NZ9ExsFJWysmMoJ5b8PzTBnuMcxrneqadVwRhxM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
x-frame-options: sameorigin
server: cloudflare
cf-ray: 8362335e3927568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4AMP6lQ.woff2
216.58.207.227200 OK 11 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4AMP6lQ.woff2
IP 216.58.207.227:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 11160, version 1.0
- data
Hash 0772a436bbaaaf4381e9d87bab168217
1ed288702dcc1e94f9cb91348ac7b6fb7448a87b
8d3251f4935896ec37ada153d20d0109828ad08523127f136415355b3fca2dcf
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4AMP6lQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://linkvertise.com
DNT: 1
Connection: keep-alive
Referer: https://linkvertise.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11160
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 13 Dec 2023 21:36:53 GMT
expires: Thu, 12 Dec 2024 21:36:53 GMT
cache-control: public, max-age=31536000
age: 176744
last-modified: Wed, 11 May 2022 19:24:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
newassets.hcaptcha.com/captcha/v1/1bcdbdd/static/hcaptcha.html
104.19.219.90200 OK 1.7 kB URL GET HTTP/3 newassets.hcaptcha.com/captcha/v1/1bcdbdd/static/hcaptcha.html
IP 104.19.219.90:443
Requested by https://js.chargebee.com/assets/cbjs-2023.12.13-07.12/v2/master.html#linkvertise.com
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document, ASCII text, with very long lines (1768), with no line terminators
Hash 1c36e86d33a084419a32005818de24ae
23035ab230d439d97c87c2fbaf19bdf0a80423ba
39cac85bc90f75a9747b9c16d42056bface19dc83bd0443b715154919b31c746
GET /captcha/v1/1bcdbdd/static/hcaptcha.html HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://js.chargebee.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 15 Dec 2023 22:42:38 GMT
content-type: text/html
cf-ray: 8362336e3898b4f9-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 64553
cache-control: max-age=1209600
last-modified: Thu, 14 Dec 2023 21:28:53 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 9b9ff06545217fe747384bd8b8509aa4.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
cross-origin-embedder-policy: credentialless
cross-origin-resource-policy: cross-origin
x-amz-cf-id: rE1EzyMRWeCaFx1en2BQPItsKc0EJc3h3QHMvEaUbx10tfYONK-4tA==
x-amz-cf-pop: ARN1-C1
x-amz-server-side-encryption: AES256
x-amz-version-id: sfBs_KpP21ISqEty0JtaAonCMuRUeTuB
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
content-encoding: br
linkvertise.com/assets/external/thinksuggest
172.67.216.138200 OK 5.7 kB URL GET HTTP/3 linkvertise.com/assets/external/thinksuggest
IP 172.67.216.138:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerLet's Encrypt
Subjectlinkvertise.com
Fingerprint71:B7:29:DC:D3:4F:3B:85:5C:C0:50:5E:D6:75:3C:9A:4C:B1:8E:55
ValidityWed, 18 Oct 2023 12:12:43 GMT - Tue, 16 Jan 2024 12:12:42 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document, ASCII text, with very long lines (5957), with no line terminators
Hash c8e5ce5062d5ca3f13a7a9d673befb9b
40c1b3ad158a4d0870b9a3c51807427de8cb1dc8
eff45eded70288392fc04fc971d4196f15757435d1273068f1f3037c21bfc11d
GET /assets/external/thinksuggest HTTP/1.1
Host: linkvertise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 15 Dec 2023 22:42:37 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
link: <https://www.google.com/>; rel="preconnect", <https://api.bing.com/>; rel="preconnect", <https://lnk.thinksuggest.org/>; rel="preconnect", <https://api.thinksuggest.org/>; rel="preconnect", <https://api.thinksuggest.org/>; rel="preconnect"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=43ZULRyz86V6az3H5ddGeQv6K5TWG1e5I9JnHxb1ZJbob4tRQVsVdAC00Xx5MhOvA0HBfMRt3KFGnMmstVTZtBsQ%2BJgJZ%2FJaFaPYGgTXkhTl7qEbuXQsm%2BPyVnz12S5Nzdc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
x-frame-options: sameorigin
server: cloudflare
cf-ray: 83623365d8dab51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
js.chargebee.com/assets/cbjs-2023.12.13-07.12/v2/pi-worker.js
143.204.55.124200 OK 67 kB URL GET HTTP/2 js.chargebee.com/assets/cbjs-2023.12.13-07.12/v2/pi-worker.js
IP 143.204.55.124:443
Requested by https://js.chargebee.com/assets/cbjs-2023.12.13-07.12/v2/master.html#linkvertise.com
Certificate IssuerAmazon
Subjectjs.chargebee.com
FingerprintB8:5C:38:C3:FB:23:73:61:30:7B:EA:4E:1C:7D:47:C4:64:B6:1A:2E
ValidityTue, 14 Mar 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65469)
Hash 6c54d3285c91bd429a668631c4fcb4af
7bbd67076c4b7ac08835eabc5db3bfd36e02217c
f59c8d87228b58a770243c157c72cd8bfdd30634634d19062f732a6a8157fc7f
GET /assets/cbjs-2023.12.13-07.12/v2/pi-worker.js HTTP/1.1
Host: js.chargebee.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://js.chargebee.com/assets/cbjs-2023.12.13-07.12/v2/master.html
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Wed, 13 Dec 2023 07:24:23 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: qJfP2A210wXIo896aUeM8w87nCf6nD.Z
server: AmazonS3
strict-transport-security: max-age=300; includeSubdomains; preload
content-encoding: gzip
date: Fri, 15 Dec 2023 22:39:56 GMT
cache-control: max-age=300,public
etag: W/"6c54d3285c91bd429a668631c4fcb4af"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: MUKwIDmcOd-qrvwPabt5ytRH9jO_FBKlUBXCbL40RydJSKSwIHiC1Q==
age: 165
X-Firefox-Spdy: h2
linkvertise.com/assets/img/exclusive_content_240dp.svg
172.67.216.138200 OK 1.1 kB URL GET HTTP/3 linkvertise.com/assets/img/exclusive_content_240dp.svg
IP 172.67.216.138:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerLet's Encrypt
Subjectlinkvertise.com
Fingerprint71:B7:29:DC:D3:4F:3B:85:5C:C0:50:5E:D6:75:3C:9A:4C:B1:8E:55
ValidityWed, 18 Oct 2023 12:12:43 GMT - Tue, 16 Jan 2024 12:12:42 GMT
File type SVG Scalable Vector Graphics image
- XML document text
- HTML document, ASCII text, with very long lines (1204), with no line terminators
Hash da88d65cafd0a706383578fb852b9e7f
bd41ff7aea8ae2a676997c783f93aea914c22ae7
86b89313baec7cf1689b49c4ef38798e9d49bf6df06793b4929525e46c22dd3a
GET /assets/img/exclusive_content_240dp.svg HTTP/1.1
Host: linkvertise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://linkvertise.com/222235/freevpn?o=sharingzKhttps:%2F%2Fwww.mediafire.com%2Ffile%2Fk0ljmyccufpcssq%2FDankMemer_Auto_Farm.rar%2Ffile
DNT: 1
Connection: keep-alive
Cookie: _cq_duid=1.1702680158.pWEImPSVEUkgaXst; _cq_suid=1.1702680158.JjstfJygo6qWVetA; _ga_7DRMH8RP03=GS1.1.1702680159.1.0.1702680159.0.0.0; _ga=GA1.1.1802572583.1702680159
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 15 Dec 2023 22:42:38 GMT
content-type: image/svg+xml
cf-cache-status: DYNAMIC
access-control-allow-origin: *
age: 36778
cache-control: public, s-maxage=604800
etag: W/"9bd4544cddb005763bb71641b850f877"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-robots-tag: noindex
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sNLmpW1VBbmAI4INsJSTNzCTsUhw7m%2Bd8intSL04S585HjO1ik39OGLlG3mA9R%2FmMxzSLL%2FU10JBtT9BV7T9CeA7bTbwXGb7i9cwHJGLiDhfoi4R%2BoD5sv6fQeH7s5Qv4MM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-frame-options: sameorigin
server: cloudflare
cf-ray: 8362336f4e44b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
js.chargebee.com/assets/cbjs-2023.12.13-07.12/v2/207-90db930a7c1a1f30fb14.js
143.204.55.124200 OK 14 kB URL GET HTTP/2 js.chargebee.com/assets/cbjs-2023.12.13-07.12/v2/207-90db930a7c1a1f30fb14.js
IP 143.204.55.124:443
Requested by https://js.chargebee.com/assets/cbjs-2023.12.13-07.12/v2/master.html#linkvertise.com
Certificate IssuerAmazon
Subjectjs.chargebee.com
FingerprintB8:5C:38:C3:FB:23:73:61:30:7B:EA:4E:1C:7D:47:C4:64:B6:1A:2E
ValidityTue, 14 Mar 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (13586)
Hash d891109a430de7c16bacddd1316d1d08
7d45643466afc85424b8e5894df8544d9b70a1db
65f86612fd280b2f6412ab6b9ecb10e7541c51a90a39416f57b409095a50cf86
GET /assets/cbjs-2023.12.13-07.12/v2/207-90db930a7c1a1f30fb14.js HTTP/1.1
Host: js.chargebee.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://js.chargebee.com/assets/cbjs-2023.12.13-07.12/v2/master.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Wed, 13 Dec 2023 07:24:23 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 1lXIDSe8pVlo0rVeXb7c5nkYcL.ipQqm
server: AmazonS3
strict-transport-security: max-age=300; includeSubdomains; preload
content-encoding: gzip
date: Fri, 15 Dec 2023 22:41:34 GMT
cache-control: max-age=300,public
etag: W/"d891109a430de7c16bacddd1316d1d08"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: IFLgJIdB4W9ubl6aNzMZHOoaUrCp5xk4II8hTPEYuy912NAdRSsSTA==
age: 79
X-Firefox-Spdy: h2
linkvertise.com/assets/external/ads.js
172.67.216.138200 OK 53 B URL GET HTTP/3 linkvertise.com/assets/external/ads.js
IP 172.67.216.138:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerLet's Encrypt
Subjectlinkvertise.com
Fingerprint71:B7:29:DC:D3:4F:3B:85:5C:C0:50:5E:D6:75:3C:9A:4C:B1:8E:55
ValidityWed, 18 Oct 2023 12:12:43 GMT - Tue, 16 Jan 2024 12:12:42 GMT
File type ASCII text, with no line terminators
Hash c9c450c244e88b0eed4fa7deb2cb4b4c
41fc2b8e9e1d0ffb28c150ce9bef856827241d4a
a1c176ab2479a597a7c27350cd2545e0ae2decd148133a149ef79ad2ac4c5cc0
GET /assets/external/ads.js HTTP/1.1
Host: linkvertise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 15 Dec 2023 22:42:36 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"87a18df10c601bf2ed3321eab0aec42a"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LEP7vvFkUNVMewS8ZIO%2Btw5ak8eINUYe%2Bu3gYEjlYdPM1tjHoWr0EbaOmWuxq%2Fk1oS84qiBzA2eWstvAl%2BM5WWongEDNDXJy%2BP6WRoCO2Y4iS7VQYs2Qs8KVu70XupKC6hI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
x-frame-options: sameorigin
server: cloudflare
cf-ray: 836233608befb51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
linkvertise.com/main.75e31bfda402a97f.js
172.67.216.138200 OK 2.4 MB URL GET HTTP/3 linkvertise.com/main.75e31bfda402a97f.js
IP 172.67.216.138:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerLet's Encrypt
Subjectlinkvertise.com
Fingerprint71:B7:29:DC:D3:4F:3B:85:5C:C0:50:5E:D6:75:3C:9A:4C:B1:8E:55
ValidityWed, 18 Oct 2023 12:12:43 GMT - Tue, 16 Jan 2024 12:12:42 GMT
Size 2.4 MB (2373808 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /main.75e31bfda402a97f.js HTTP/1.1
Host: linkvertise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 15 Dec 2023 22:42:36 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"c62a686e55565838b5026a7f2c503774"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m7YZgpEFHnfmBAZQHMtdPg73ptkoa33Bg5XO4OqA0laKzqHr2VmaeTm6N2CU50l8993uL4m0rI2Z2GPhK03X5XAYZrciHeOlbLRa6B6wmLOQnEgqap78Xo0okq3e4FkYzKs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
x-frame-options: sameorigin
server: cloudflare
cf-ray: 836233608bf8b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
newassets.hcaptcha.com/captcha/v1/1bcdbdd/hcaptcha.js
104.19.219.90200 OK 334 kB URL GET HTTP/3 newassets.hcaptcha.com/captcha/v1/1bcdbdd/hcaptcha.js
IP 104.19.219.90:443
Requested by https://newassets.hcaptcha.com/captcha/v1/1bcdbdd/static/hcaptcha.html?_v=9t80536rehi#frame=challenge&id=01hhag69iof7&host=js.chargebee.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=dc26aa54-4902-437f-80e2-a22947a6c01b&theme=light&origin=https%3A%2F%2Fjs.chargebee.com
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT
Size 334 kB (333578 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /captcha/v1/1bcdbdd/hcaptcha.js HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/captcha/v1/1bcdbdd/static/hcaptcha.html?_v=9t80536rehi
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 15 Dec 2023 22:42:38 GMT
content-type: application/javascript
cf-ray: 8362336f1984b4f9-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 64555
cache-control: max-age=1209600
etag: W/"b0204ba9adc9845b676113f41ae6d9c6"
last-modified: Thu, 14 Dec 2023 21:28:53 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 a62f7ce6b39c676fcfdde0f9a6fcf08e.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
cross-origin-resource-policy: cross-origin
x-amz-cf-id: uDbxIsErpIIIVdMrmOaNFzUfX1yH-MRW0zeTNn93HS3sckpH3fqh8g==
x-amz-cf-pop: ARN1-C1
x-amz-server-side-encryption: AES256
x-amz-version-id: o2o2WA3L7Ll5QYn5daiC77yP7vRQJRVn
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
content-encoding: br
js.chargebee.com/assets/cbjs-2023.12.13-07.12/v2/master-cc11918befb62b7f11ac.js
143.204.55.124200 OK 247 kB URL GET HTTP/2 js.chargebee.com/assets/cbjs-2023.12.13-07.12/v2/master-cc11918befb62b7f11ac.js
IP 143.204.55.124:443
Requested by https://js.chargebee.com/assets/cbjs-2023.12.13-07.12/v2/master.html#linkvertise.com
Certificate IssuerAmazon
Subjectjs.chargebee.com
FingerprintB8:5C:38:C3:FB:23:73:61:30:7B:EA:4E:1C:7D:47:C4:64:B6:1A:2E
ValidityTue, 14 Mar 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
Size 247 kB (247031 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /assets/cbjs-2023.12.13-07.12/v2/master-cc11918befb62b7f11ac.js HTTP/1.1
Host: js.chargebee.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://js.chargebee.com/assets/cbjs-2023.12.13-07.12/v2/master.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Wed, 13 Dec 2023 07:24:23 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: er646leBw2n9UelXhIHDuUGKIHrdHMhf
server: AmazonS3
strict-transport-security: max-age=300; includeSubdomains; preload
content-encoding: gzip
date: Fri, 15 Dec 2023 22:39:18 GMT
cache-control: max-age=300,public
etag: W/"8da616eee4308d313b494068be8c28fc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RGudGJoyWKElOAGEdYePuJBmxb1fOPtmxnWfiOwnNqHjHZluK6RR-Q==
age: 201
X-Firefox-Spdy: h2
js.chargebee.com/assets/cbjs-2023.12.13-07.12/v2/213-8a389acca5b5b46c4bc5.js
143.204.55.124200 OK 2.9 kB URL GET HTTP/2 js.chargebee.com/assets/cbjs-2023.12.13-07.12/v2/213-8a389acca5b5b46c4bc5.js
IP 143.204.55.124:443
Requested by https://js.chargebee.com/assets/cbjs-2023.12.13-07.12/v2/master.html#linkvertise.com
Certificate IssuerAmazon
Subjectjs.chargebee.com
FingerprintB8:5C:38:C3:FB:23:73:61:30:7B:EA:4E:1C:7D:47:C4:64:B6:1A:2E
ValidityTue, 14 Mar 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (2987), with no line terminators
Hash bbfcfd53a3fd7d5f189d138bf49262ee
aeb7e480a36ed578e78c379924b9eee958f2269b
b5cb645e50385758982fc3edfe65c419bbad3c84b32b5f9d9eb29391ed23a1b8
GET /assets/cbjs-2023.12.13-07.12/v2/213-8a389acca5b5b46c4bc5.js HTTP/1.1
Host: js.chargebee.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://js.chargebee.com/assets/cbjs-2023.12.13-07.12/v2/master.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Wed, 13 Dec 2023 07:24:23 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VPY1le47ain7QZpdSTjNCUPadZ9mQAst
server: AmazonS3
strict-transport-security: max-age=300; includeSubdomains; preload
content-encoding: gzip
date: Fri, 15 Dec 2023 22:41:34 GMT
cache-control: max-age=300,public
etag: W/"70484d3af9edd5eb8fd19526e1a5ddf3"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 6c13a_XA8FaePzflhxo89KuA7MoX0gKBivbzsICLry1xdHsrtvIRGw==
age: 74
X-Firefox-Spdy: h2
linkvertise.com/assets/img/stop-sign.svg
172.67.216.138200 OK 2.7 kB URL GET HTTP/3 linkvertise.com/assets/img/stop-sign.svg
IP 172.67.216.138:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerLet's Encrypt
Subjectlinkvertise.com
Fingerprint71:B7:29:DC:D3:4F:3B:85:5C:C0:50:5E:D6:75:3C:9A:4C:B1:8E:55
ValidityWed, 18 Oct 2023 12:12:43 GMT - Tue, 16 Jan 2024 12:12:42 GMT
File type SVG Scalable Vector Graphics image
- , ASCII text, with very long lines (2719), with no line terminators
Hash f099bf558495bb227ff4d597430bb8d7
f91da0cd416efa09d518bf8f939c40ea5730a8fb
76be295f14e690871002e536418e4b0c8055e5bc64b865f602e177f8ad16ff56
GET /assets/img/stop-sign.svg HTTP/1.1
Host: linkvertise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://linkvertise.com/222235/freevpn?o=sharingzKhttps:%2F%2Fwww.mediafire.com%2Ffile%2Fk0ljmyccufpcssq%2FDankMemer_Auto_Farm.rar%2Ffile
DNT: 1
Connection: keep-alive
Cookie: _cq_duid=1.1702680158.pWEImPSVEUkgaXst; _cq_suid=1.1702680158.JjstfJygo6qWVetA; _ga_7DRMH8RP03=GS1.1.1702680159.1.0.1702680159.0.0.0; _ga=GA1.1.1802572583.1702680159
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 15 Dec 2023 22:42:38 GMT
content-type: image/svg+xml
cf-cache-status: DYNAMIC
access-control-allow-origin: *
age: 36778
cache-control: public, s-maxage=604800
etag: W/"1c20f072c47623867ed24c36afc1018f"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-robots-tag: noindex
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Fj40prY%2BAs1VFfV9XJSm4P%2BW7XhApxFtQIUASy%2B%2B9q3Y1gJhqSGOD55mD76Jk18nJw5w970kmP%2FAE9ZS6UigCv7ZuIoaCffTnpB6lULjTlXFY53WokbKbfSGpGFyZ8a9oeM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-frame-options: sameorigin
server: cloudflare
cf-ray: 8362336f3e3bb51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
newassets.hcaptcha.com/c/faa119b/hsw.js
104.19.219.90200 OK 520 kB URL GET HTTP/3 newassets.hcaptcha.com/c/faa119b/hsw.js
IP 104.19.219.90:443
Requested by https://newassets.hcaptcha.com/captcha/v1/1bcdbdd/static/hcaptcha.html?_v=9t80536rehi#frame=challenge&id=01hhag69iof7&host=js.chargebee.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=dc26aa54-4902-437f-80e2-a22947a6c01b&theme=light&origin=https%3A%2F%2Fjs.chargebee.com
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD9:E8:78:82:B2:9B:0F:1B:5F:0B:B7:EF:93:24:6D:07:2D:83:BA:24
ValiditySat, 15 Apr 2023 00:00:00 GMT - Sun, 14 Apr 2024 23:59:59 GMT
Size 520 kB (520396 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c/faa119b/hsw.js HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/captcha/v1/1bcdbdd/static/hcaptcha.html?_v=9t80536rehi
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 15 Dec 2023 22:42:39 GMT
content-type: application/javascript
cf-ray: 83623371ed03b4f9-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 1345973
cache-control: max-age=3024000
etag: W/"93dd60995db54b08624e603d126ca4b1"
last-modified: Wed, 29 Nov 2023 18:28:16 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
cross-origin-resource-policy: cross-origin
x-amz-cf-id: DOIQskop9J7tAUYTJuFhvCy93z3O4EfPEu-_4ZEfxcXSLb1JVhnBYw==
x-amz-cf-pop: OSL50-P1
x-amz-server-side-encryption: AES256
x-amz-version-id: DJw89Ofqo07U920Jzu_lcg0MWEKwKqeU
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
content-encoding: br
js.chargebee.com/assets/cbjs-2023.12.13-07.12/v2/master.html
143.204.55.124200 OK 234 B URL GET HTTP/2 js.chargebee.com/assets/cbjs-2023.12.13-07.12/v2/master.html
IP 143.204.55.124:443
Requested by https://linkvertise.com/222235/freevpn?o=sharingzKhttps://www.mediafire.com/file/k0ljmyccufpcssq/DankMemer_Auto_Farm.rar/file
Certificate IssuerAmazon
Subjectjs.chargebee.com
FingerprintB8:5C:38:C3:FB:23:73:61:30:7B:EA:4E:1C:7D:47:C4:64:B6:1A:2E
ValidityTue, 14 Mar 2023 00:00:00 GMT - Thu, 11 Apr 2024 23:59:59 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document, ASCII text, with no line terminators
Hash 1d264d5b9026a7a70d6c9b97f7c4e4b1
20950d9f464437e07c2f360bf5c1a6d484a95b98
0fafe82a7b8c42568f22edb9756f01bc65c421192e602df4d1fa30b3699db980
GET /assets/cbjs-2023.12.13-07.12/v2/master.html HTTP/1.1
Host: js.chargebee.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://linkvertise.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 234
last-modified: Wed, 13 Dec 2023 07:24:24 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: IckCvW6luCfg0nVHJ48fQKwcZtojlVb9
accept-ranges: bytes
server: AmazonS3
strict-transport-security: max-age=300; includeSubdomains; preload
date: Fri, 15 Dec 2023 22:41:34 GMT
cache-control: max-age=300,public
etag: "a104dfc5294d410ce78310207459e56b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 3Mw6wav-VRXJupNJ91fdlHR78H1aI1SL1YagjkW8QTDNsDuIsMcLWw==
age: 82
X-Firefox-Spdy: h2